G:\Bin\HelpNow.exe这什么东西???
F:\PROGRA~1\NETMEE~1\conf.exe这什么东西???
——————————————————————————————————————————
启动项目
注册表
<SoundMx><F:\DOCUME~1\XUEDON~1\LOCALS~1\Temp\Internet.exe> [SoundMx]
==================================
服务
[Protected Storage Manager / ProtectedStorager][Running/Auto Start]
<F:\WINDOWS\System32\svchost.exe -k netsvcs-->f:\windows\system32\config\dev06.inf><Microsoft Corporation>
[TCPBI0S / TCPBI0S][Running/Auto Start]
<F:\WINDOWS\System32\106f1.exe><Microsoft Corporation>
==================================
驱动程序
[BdGuard / BdGuard][Running/Boot Start]
<\SystemRoot\System32\drivers\BDGuard.SYS><>
[inuk2jn / inuk2jn][Stopped/Boot Start]
<\SystemRoot\system32\drivers\inuk2jn.sys><N/A>
[kau8dog3m / kau8dog3m9][Stopped/Boot Start]
<\SystemRoot\System32\DRIVERS\kau8dog3m9.sys><>
==================================
浏览器加载项
[]
{C68B0149-C717-4041-BF00-C21569B97019} <F:\WINDOWS\system32\lcxywfilro.dll, Microsoft Inc.>
[Invoke Class]
{F19455F5-ADF4-4171-9111-3AF65819FE4B} <F:\WINDOWS\System32\b101.dll, >
==================================
正在运行的进程
[PID: 464 / SYSTEM][F:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[f:\windows\system32\config\dev06.inf] [Microsoft Corporation, 5.1.2601.1]
[f:\windows\system32\config\msc07.exe] [N/A, ]
[PID: 1300 / SYSTEM][F:\WINDOWS\System32\106f1.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2992 / xuedongxing][F:\WINDOWS\explorer.exe] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[f:\windows\system32\config\dev06.inf] [Microsoft Corporation, 5.1.2601.1]
[F:\WINDOWS\system32\lcxywfilro.dll] [Microsoft Inc., 1.0.0.0]
[F:\WINDOWS\System32\b101.dll] [, 1, 1, 0, 2]
[PID: 1644 / xuedongxing][F:\WINDOWS\System32\rundll32.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[F:\WINDOWS\System32\6b1.dll] [ , 1, 0, 0, 3]