系统活动进程
C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\WINDOWS\SYSTEM32\MDIMON.DLL
C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\MDIPPR.DLL
C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\VPRPROC.DLL

C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMAGENT.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRA~1\YAHOO!\ASSISTANT\YASSISTSE.EXE
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL
C:\PROGRA~1\YAHOO!\ASSISTANT\SHELL\YASSECBLK.DLL
C:\PROGRA~1\YAHOO!\ASSISTANT\SHELL\YMENUINFO.DLL
C:\PROGRA~1\YAHOO!\ASSISTANT\SHELL\YIEANGEL.DLL
C:\PROGRA~1\YAHOO!\ASSISTANT\SHELL\YASMENU.DLL

C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\MSACM32.DRV

C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM32\RAVEXT.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\GDZM.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YALIVE.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YALLIVEEX.DLL
C:\WINDOWS\SYSTEM32\XUNLEIBHO_V14.DLL
C:\WINDOWS\SYSTEM32\CYKQN.DLL
C:\WINDOWS\SYSTEM32\QYWN.DLL
C:\WINDOWS\SYSTEM32\NVNNM.DLL
C:\WINDOWS\SYSTEM32\EQWTHM.DLL
C:\WINDOWS\SYSTEM32\RIRV.DLL
C:\WINDOWS\SYSTEM32\RPIW.DLL
C:\WINDOWS\SYSTEM32\PFNMT.DLL
C:\WINDOWS\SYSTEM32\IYAABW.DLL
C:\WINDOWS\SYSTEM32\IDKJLE.DLL
C:\WINDOWS\SYSTEM32\FGNGH.DLL
C:\WINDOWS\SYSTEM32\QINS.DLL
C:\WINDOWS\SYSTEM32\NJRM.DLL
C:\WINDOWS\SYSTEM32\WLYWL.DLL
C:\WINDOWS\SYSTEM32\SKNPXP.DLL
C:\WINDOWS\SYSTEM32\BGFSHG.DLL
C:\WINDOWS\SYSTEM32\FEMUH.DLL
C:\WINDOWS\SYSTEM32\DMDC.DLL
C:\WINDOWS\SYSTEM32\GWSB.DLL
C:\WINDOWS\SYSTEM32\QBPAW.DLL
C:\WINDOWS\SYSTEM32\ZBKQU.DLL
C:\WINDOWS\SYSTEM32\VJSOTT.DLL
C:\WINDOWS\SYSTEM32\KILJEB.DLL
C:\WINDOWS\SYSTEM32\YTOS.DLL
C:\WINDOWS\SYSTEM32\NFHK.DLL
C:\WINDOWS\SYSTEM32\VKPA.DLL
C:\WINDOWS\SYSTEM32\WDDGWB.DLL
C:\WINDOWS\SYSTEM32\DEDOLD.DLL
C:\WINDOWS\SYSTEM32\GALGY.DLL
F:\迅雷\THUNDER\COMDLLS\XUNLEIBHO_001.DLL
C:\WINDOWS\SYSTEM32\PZLX.DLL
C:\WINDOWS\SYSTEM32\MPHUP.DLL
C:\WINDOWS\SYSTEM32\MGQCGC.DLL
C:\WINDOWS\SYSTEM32\HRRI.DLL
C:\WINDOWS\SYSTEM32\ZYNMR.DLL
C:\WINDOWS\SYSTEM32\ZGGSSQ.DLL
C:\WINDOWS\SYSTEM32\IIQO.DLL
C:\WINDOWS\SYSTEM32\GVWNG.DLL
C:\WINDOWS\SYSTEM32\KLYPG.DLL
C:\WINDOWS\SYSTEM32\CVHAP.DLL
C:\WINDOWS\SYSTEM32\OGROGL.DLL
C:\WINDOWS\SYSTEM32\ODIA.DLL
C:\WINDOWS\SYSTEM32\XKADV.DLL
C:\WINDOWS\SYSTEM32\GGUWQ.DLL
C:\WINDOWS\SYSTEM32\QKQN.DLL
C:\WINDOWS\SYSTEM32\GKHKDK.DLL
C:\WINDOWS\SYSTEM32\ELON.DLL
C:\WINDOWS\SYSTEM32\DFFRPC.DLL
C:\WINDOWS\SYSTEM32\RSRWA.DLL
C:\WINDOWS\SYSTEM32\XHNZG.DLL
C:\WINDOWS\SYSTEM32\XWJY.DLL
C:\WINDOWS\SYSTEM32\EUTK.DLL
C:\WINDOWS\SYSTEM32\VFWQZE.DLL
C:\WINDOWS\SYSTEM32\GKOXOZ.DLL
C:\WINDOWS\SYSTEM32\HZOX.DLL
C:\WINDOWS\SYSTEM32\LTDCA.DLL
C:\WINDOWS\SYSTEM32\BOJZT.DLL
F:\解压缩\新建文件夹\RAREXT.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YPHTB.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YASBAR.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YDRAGS~1.DLL
C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\SSLIVE.DLL
C:\WINDOWS\DOWNLO~1\BAIDUBAR.DLL
F:\OFFIC2003\新建文件夹\新建文件夹\OFFICE11\MSOHEV.DLL

C:\PROGRAM FILES\联想（LENOVO）\联想天骄遥控器（MARS）\MARSRMT.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL

C:\PROGRAM FILES\联想\联想标准键盘\SKDAEMON.EXE
C:\PROGRAM FILES\联想\联想标准键盘\MACFUN.DLL
C:\PROGRAM FILES\联想\联想标准键盘\OPENDRIVER.DLL
C:\PROGRAM FILES\联想\联想标准键盘\OSD.DLL
C:\PROGRAM FILES\联想\联想标准键盘\LXKEYLED.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV

C:\PROGRAM FILES\COMMON FILES\LENOVO\DIGITALSUIT\COMMONDLL\MYDEVICE.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL

C:\PROGRAM FILES\LENOVO\联想安全中心\安全中心\LENOVOHD.EXE
C:\PROGRAM FILES\LENOVO\联想安全中心\安全中心\REGCTRL.DLL
C:\PROGRAM FILES\LENOVO\联想安全中心\安全中心\FILECTRL.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL

C:\PROGRAM FILES\LENOVO\数码家电\LXRECSVR.EXE
C:\PROGRAM FILES\LENOVO\数码家电\RCCONFIG.DLL
C:\PROGRAM FILES\LENOVO\数码家电\MFC42.DLL
C:\PROGRAM FILES\LENOVO\数码家电\MSVCP60.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICE11\MSOXMLMF.DLL

C:\HEROSOFT\HEROV8\SYSEXPLR.EXE
C:\HEROSOFT\HEROV8\AVCDROM.DLL
C:\HEROSOFT\HEROV8\COOLMENU.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL
C:\HEROSOFT\HEROV8\SYS936.DLL

C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL
C:\WINDOWS\SYSTEM32\PROP7134.DLL
C:\WINDOWS\SYSTEM32\VM31BPRP.AX

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL

C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL

C:\WINDOWS\SYSTEM32\ALG.EXE

C:\PROGRA~1\YAHOO!\ASSIST~1\YLIVE.EXE
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YALIVE.DLL
C:\PROGRA~1\YAHOO!\ASSIST~1\YALLIVEEX.DLL

C:\PROGRAM FILES\LENOVO\联想安全中心\安全中心\LENOVOHDPRO.EXE
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL

C:\WINDOWS\SYSTEM32\WUAUCLT.EXE
F:\病毒扫描\瑞星听诊器\RSDETECT.EXE
C:\PROGRA~1\YAHOO!\ASSIST~1\YHELPER.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\NAFOW.DLL


普通自启动项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
IMJPMIG8.1 = "C:\WINDOWS\IME\IMJP8_1\IMJPMIG.EXE" /SPOIL /REMADVDEF /MIGRATION32
PHIME2002ASync = C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE /SYNC
PHIME2002A = C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE /IMENAME
marsrmt = C:\PROGRAM FILES\联想（LENOVO）\联想天骄遥控器（MARS）\MARSRMT.EXE
SKDaemon = C:\PROGRAM FILES\联想\联想标准键盘\SKDAEMON.EXE
Mydevice = "C:\PROGRAM FILES\COMMON FILES\LENOVO\DIGITALSUIT\COMMONDLL\MYDEVICE.EXE"
NeroFilterCheck = C:\WINDOWS\SYSTEM32\NEROCHECK.EXE
LenovoHD = C:\PROGRAM FILES\LENOVO\联想安全中心\安全中心\LENOVOHD.EXE
SysExplr = C:\HEROSOFT\HEROV8\SYSEXPLR.EXE
BigDogPath = C:\WINDOWS\VM_STI.EXE USB PC CAMERA 301X
Thunder = "F:\迅雷\THUNDER\THUNDERSHELL.EXE" /S
IMSCMig = C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /PRELOAD
YLive.exe = C:\PROGRA~1\YAHOO!\ASSIST~1\YLIVE.EXE
StormCodec_Helper = "F:\暴风影音\STORM CODEC\STORMSET.EXE" /S /OPTI
yassistse = "C:\PROGRA~1\YAHOO!\ASSISTANT\YASSISTSE.EXE"
TVTray = (NULL)
SoundMAXPnP = ; C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMAX4PNP.EXE
SoundMAX = ; "C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMAX4.EXE" /TRAY
NTdhcp = C:\WINDOWS\SYSTEM32\NTDHCP.EXE
FileWatch = ; C:\PROGRAM FILES\LENOVO\幸福相册\ALBUMFILEWATCH.EXE
Mars.exe = ; C:\PROGRAM FILES\LENOVO\幸福飞梭\MARS.EXE
MusicMonitor.exe = ; C:\PROGRAM FILES\LENOVO\幸福音乐\MUSICMONITOR.EXE
PPCListerner.exe = ; C:\PROGRAM FILES\LENOVO\幸福音乐\PPCLISTENER.EXE
stup.exe = C:\PROGRA~1\TENCENT\ADPLUS\STUP.EXE
RavTask = "F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\RAVTASK.EXE" -SYSTEM
KernelFaultCheck = C:\WINDOWS\SYSTEM32\DUMPREP 0 -K

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
RavStub = "F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\RAVSTUB.EXE" /RUNONCE

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ctfmon.exe = C:\WINDOWS\SYSTEM32\CTFMON.EXE
MSMSGS = "C:\PROGRAM FILES\MESSENGER\MSMSGS.EXE" /BACKGROUND
Super Rabbit IEPro = F:\病毒扫描\超级兔子优化王\MAGICSET\SRIECLI.EXE /LOAD


AppInit_DLLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs =


系统文件关联
.exe ==> exefile = "%1" %*
.com ==> comfile = "%1" %*
.cmd ==> cmdfile = "%1" %*
.bat ==> batfile = "%1" %*
.txt ==> txtfile = %SystemRoot%\system32\NOTEPAD.EXE %1
.scr ==> scrfile = "%1" /S
.reg ==> regfile = regedit.exe "%1"
.doc ==> Word.Document.8 = "F:\offic2003\新建文件夹\新建文件夹\OFFICE11\WINWORD.EXE" /n /dde

其它启动项
WIN.INI
无信息

SYSTEM.INI
SHELL = Explorer.exe
SCRNSAVE.EXE = C:\DOCUME~1\ADMINI~1\桌面\我的照~1.SCR


Winlogon 启动项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
crypt32chain = CRYPT32.DLL
cryptnet = CRYPTNET.DLL
cscdll = CSCDLL.DLL
ScCertProp = WLNOTIFY.DLL
Schedule = WLNOTIFY.DLL
sclgntfy = SCLGNTFY.DLL
SensLogn = WLNOTIFY.DLL
termsrv = WLNOTIFY.DLL
wlballoon = WLNOTIFY.DLL

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit = C:\WINDOWS\SYSTEM32\USERINIT.EXE,
shell = EXPLORER.EXE

IE - BHO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{0005A87D-D626-4B3A-84F9-1D9571695F55} = C:\WINDOWS\system32\xunleibho_v14.dll
{02006408-7529-4C7C-805C-7BD93E706F0F} = C:\WINDOWS\system32\Cykqn.dll
{0C7C23EF-A848-485B-873C-0ED954731014} = C:\Program Files\TENCENT\Adplus\SSAddr.dll
{0F041D5A-12CA-47BD-98AC-FF919902ED5D} = C:\WINDOWS\system32\Qywn.dll
{106659EE-602C-41EB-BAD0-E2EC928D051D} = C:\WINDOWS\system32\Nvnnm.dll
{11AEB16A-AEDA-4DA0-A1C6-867F3F0B8B6B} = C:\WINDOWS\system32\Eqwthm.dll
{18795782-D804-45B5-8F5D-767EAB7AE1D6} = C:\WINDOWS\system32\Rirv.dll
{28EAF644-11CE-451F-8335-6C474E204F5B} = C:\WINDOWS\system32\Rpiw.dll
{2B6DC9A0-2E61-4F5D-B473-FC5FDFF3BE8E} = C:\WINDOWS\system32\Pfnmt.dll
{2D63F859-23DD-48C5-A984-E04E2B272306} = C:\WINDOWS\system32\Iyaabw.dll
{2E7E2F4D-D8C6-42D6-9B27-8BF4911E9BC9} = C:\WINDOWS\system32\Idkjle.dll
{33BBE430-0E42-4f12-B075-8D21ACB10DCB} = C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
{38928D50-8A48-44C2-945F-D2F23F771410} = C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
{38F66312-A02B-43B8-BB02-45A2F9634527} = C:\WINDOWS\system32\Fgngh.dll
{3F030FDB-06E9-4B35-A155-4AD7AD3ED626} = C:\WINDOWS\system32\Qins.dll
{406F94F0-504F-4a40-8DFD-58B0666ABEBD} = C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
{4168FD73-CF1B-403B-9563-395D6D31199A} = C:\WINDOWS\system32\Njrm.dll
{41A40E49-41B7-4D28-86DE-543C2E1F13CA} = C:\WINDOWS\system32\Wlywl.dll
{4215120F-B499-4D12-AD9C-4F8B62F49106} = C:\WINDOWS\system32\Sknpxp.dll
{45F76BEA-88B3-49EF-AC6D-5DE9E48E65F9} = C:\WINDOWS\system32\Bgfshg.dll
{471F2E3E-B119-44E1-A654-2D5631685B6F} = C:\WINDOWS\system32\Femuh.dll
{4A3E35A3-8317-4D6B-BBA6-BEECF6172445} = C:\WINDOWS\system32\Dmdc.dll
{4D62DCEC-CFD6-4994-9288-35C33240C076} = C:\WINDOWS\system32\Gwsb.dll
{4F1B8162-3D4D-472E-8F16-0D9A0BBD6EF4} = C:\WINDOWS\system32\Qbpaw.dll
{54EBD53A-9BC1-480B-966A-843A333CA162} = F:\QQ\新建文件夹\QQIEHelper.dll
{5E4EDBB7-5146-4D43-BB0F-7BE0F0BAADC2} = C:\WINDOWS\system32\Zbkqu.dll
{62EED7C6-9F02-42f9-B634-98E2899E147B} = C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
{64E77575-9DC7-4F69-881B-DC771478772A} = C:\WINDOWS\system32\Vjsott.dll
{650F3373-972C-4C30-AC37-0E58836CC146} = C:\WINDOWS\system32\Kiljeb.dll
{669751ED-D558-49AE-B01A-3B374CC7910E} = C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\SSLive.dll
{67837CD5-01DF-428B-8E5D-23FEE0AFB306} = C:\WINDOWS\system32\Ytos.dll
{6D588500-C755-4A72-A62A-53812E938197} = C:\WINDOWS\system32\Nfhk.dll
{7369D35A-5B70-4A5B-B789-B25FE09B4AF3} = F:\病《毒旧扫描鑌\超级锻兔米子佑优呕化王鮘\MagicSet\haokanbar.dll
{777EC8C1-71CB-4C67-9BF8-C9ED6808AECA} = C:\WINDOWS\system32\Vkpa.dll
{7C1CB5F3-EC53-4581-AE5B-732C7322DB1A} = C:\WINDOWS\system32\Wddgwb.dll
{7C57551C-01FA-4633-B9C8-7B4B8A3A8640} = C:\WINDOWS\system32\Dedold.dll
{7F990DA5-5D40-4E88-9205-0B9DD02EB3A3} = C:\WINDOWS\system32\Galgy.dll
{889D2FEB-5411-4565-8998-1DD2C5261283} = F:\迅雷\Thunder\ComDlls\XunLeiBHO_001.dll
{8A6A1864-0C91-4328-AA20-A344C67C3345} = C:\WINDOWS\system32\Pzlx.dll
{8A8FF1DA-E19E-49A9-B73E-C478C1284DD1} = C:\WINDOWS\system32\Mphup.dll
{8B277381-DB07-4A9F-BC64-5085C66877AD} = C:\WINDOWS\system32\Mgqcgc.dll
{8DC154A7-249C-4EA5-896D-9D5E2C06F61C} = C:\WINDOWS\system32\Hrri.dll
{951DEDE3-1D3C-4328-A0EF-CE4A0B176B9C} = C:\WINDOWS\system32\Zynmr.dll
{95BDF6B0-4B8B-4885-8FB5-F5421D48CE5C} = C:\WINDOWS\system32\Zggssq.dll
{9939701D-4C2A-468A-B539-A303A0B83218} = C:\WINDOWS\system32\Iiqo.dll
{9B13AB9D-B821-4131-8BB7-D88143EA9AE8} = C:\WINDOWS\system32\Gvwng.dll
{9C9DD8B0-076E-45D0-B4AD-50B30F8D66C7} = C:\WINDOWS\system32\Klypg.dll
{9D91EE74-8FA8-4CF3-BF49-E83CBC8B2360} = C:\WINDOWS\system32\Cvhap.dll
{AA3E341D-D2D8-49D4-9C6D-22FEE7412C67} = C:\WINDOWS\system32\Ogrogl.dll
{AA58ED58-01DD-4d91-8333-CF10577473F7} = c:\program files\google\googletoolbar1.dll
{ACEC5DDC-F770-4719-B617-C647B3164CCE} = C:\WINDOWS\system32\Odia.dll
{AFEFEB42-DAFD-4C25-9269-0CFBE61FD610} = C:\WINDOWS\system32\Xkadv.dll
{B580CF65-E151-49C3-B73F-70B13FCA8E86} = C:\WINDOWS\DOWNLO~1\BaiDuBar.dll
{B7F80AA7-A39E-4D1C-9459-E3958768F285} = C:\WINDOWS\system32\Gguwq.dll
{BB7E104C-D1EC-42E6-95B5-FBAD614406B8} = C:\WINDOWS\system32\Qkqn.dll
{C0FDC4E6-AE90-4499-96E9-62881D2BAC5C} = C:\WINDOWS\system32\Gkhkdk.dll
{C46C7E1C-5487-47AC-85E8-6F5B57C818D6} = C:\WINDOWS\system32\Elon.dll
{CE8B923F-CD83-463D-B608-2D27F1C06AB7} = C:\WINDOWS\system32\Dffrpc.dll
{CF0F172B-D3D1-48B9-829F-D955DAB359B2} = C:\WINDOWS\system32\Rsrwa.dll
{CF8AF9C4-C5A2-4EA2-BDA2-394106B90DF9} = C:\WINDOWS\system32\Xhnzg.dll
{E724DAF4-334F-43D9-A51D-6BB35BF98B23} = C:\WINDOWS\system32\Xwjy.dll
{E85A05EB-0A30-4FF8-8F34-2F16BE624B0E} = C:\WINDOWS\system32\Eutk.dll
{EC9A8E9E-9210-4717-B207-02D0971EF7F7} = C:\WINDOWS\system32\Vfwqze.dll
{EDB0CBA4-28E9-408B-A70F-BEEB13902285} = C:\WINDOWS\system32\Gkoxoz.dll
{EEB19EE8-BBC7-46D3-A990-8A57ABF07E44} = C:\WINDOWS\system32\Hzox.dll
{F47702ED-C94E-4630-B3EC-298A67B6B273} = C:\WINDOWS\system32\Ltdca.dll
{F47D97AB-441A-4695-8221-5CA4EDF7A40C} = C:\WINDOWS\system32\Bojzt.dll

Winsock SPI
MSAFD Tcpip [TCP/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD Tcpip [UDP/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD Tcpip [RAW/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
RSVP UDP Service Provider = C:\WINDOWS\SYSTEM32\RSVPSP.DLL
RSVP TCP Service Provider = C:\WINDOWS\SYSTEM32\RSVPSP.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{6930D53B-A85B-4B95-889B-25609983867F}] SEQPACKET 4 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{6930D53B-A85B-4B95-889B-25609983867F}] DATAGRAM 4 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{1D30E577-1A25-4FE2-9302-C68F77B055D2}] SEQPACKET 0 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{1D30E577-1A25-4FE2-9302-C68F77B055D2}] DATAGRAM 0 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{D69049BF-E549-4270-B511-BFC21239E2AF}] SEQPACKET 1 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{D69049BF-E549-4270-B511-BFC21239E2AF}] DATAGRAM 1 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{4B289ACB-173D-4E9B-8C84-34630A8F3074}] SEQPACKET 2 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{4B289ACB-173D-4E9B-8C84-34630A8F3074}] DATAGRAM 2 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{1A8AB10C-C5C8-4D21-9ACD-EC5BFEE103D3}] SEQPACKET 3 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{1A8AB10C-C5C8-4D21-9ACD-EC5BFEE103D3}] DATAGRAM 3 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0A32F359-F567-4188-9678-36E89A4E18F5}] SEQPACKET 5 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0A32F359-F567-4188-9678-36E89A4E18F5}] DATAGRAM 5 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{4CE64D0C-3051-4A0F-8E3F-BB10069E9AC2}] SEQPACKET 6 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{4CE64D0C-3051-4A0F-8E3F-BB10069E9AC2}] DATAGRAM 6 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL

系统服务项
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Alerter = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
ALG = C:\WINDOWS\SYSTEM32\ALG.EXE
AppMgmt = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
AudioSrv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
BITS = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Browser = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
CiSvc = C:\WINDOWS\SYSTEM32\CISVC.EXE
ClipSrv = C:\WINDOWS\SYSTEM32\CLIPSRV.EXE
COMSysApp = C:\WINDOWS\SYSTEM32\DLLHOST.EXE /PROCESSID:{02D4B3F1-FD88-11D1-960D-00805FC79235}
CryptSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
DcomLaunch = C:\WINDOWS\SYSTEM32\SVCHOST -K DCOMLAUNCH
Dhcp = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
dmadmin = C:\WINDOWS\SYSTEM32\DMADMIN.EXE /COM
dmserver = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Dnscache = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETWORKSERVICE
ERSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Eventlog = C:\WINDOWS\SYSTEM32\SERVICES.EXE
EventSystem = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
FastUserSwitchingCompatibility = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
helpsvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
HidServ = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
HTTPFilter = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K HTTPFILTER
ImapiService = C:\WINDOWS\SYSTEM32\IMAPI.EXE
lanmanserver = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
lanmanworkstation = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Lenovo TV Recoding = C:\PROGRAM FILES\LENOVO\数码家电\LXRECSVR.EXE
LmHosts = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
Messenger = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
mnmsrvc = C:\WINDOWS\SYSTEM32\MNMSRVC.EXE
MSDTC = C:\WINDOWS\SYSTEM32\MSDTC.EXE
MSIServer = C:\WINDOWS\SYSTEM32\MSIEXEC.EXE /V
NetDDE = C:\WINDOWS\SYSTEM32\NETDDE.EXE
NetDDEdsdm = C:\WINDOWS\SYSTEM32\NETDDE.EXE
Netlogon = C:\WINDOWS\SYSTEM32\LSASS.EXE
Netman = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Nla = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
NtLmSsp = C:\WINDOWS\SYSTEM32\LSASS.EXE
NtmsSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
ose = C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\SOURCE ENGINE\OSE.EXE
PlugPlay = C:\WINDOWS\SYSTEM32\SERVICES.EXE
PolicyAgent = C:\WINDOWS\SYSTEM32\LSASS.EXE
ProtectedStorage = C:\WINDOWS\SYSTEM32\LSASS.EXE
RasAuto = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RasMan = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RDSessMgr = C:\WINDOWS\SYSTEM32\SESSMGR.EXE
RemoteAccess = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RemoteRegistry = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
RpcLocator = C:\WINDOWS\SYSTEM32\LOCATOR.EXE
RpcSs = C:\WINDOWS\SYSTEM32\SVCHOST -K RPCSS
RsCCenter = "F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\CCENTER.EXE"
RsRavMon = "F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\RAVMOND.EXE"
RSVP = C:\WINDOWS\SYSTEM32\RSVP.EXE
SamSs = C:\WINDOWS\SYSTEM32\LSASS.EXE
SCardSvr = C:\WINDOWS\SYSTEM32\SCARDSVR.EXE
SCCMonitor = "C:\PROGRAM FILES\LENOVO\联想智能控制中心\SCC\SCCMONITOR.EXE"
Schedule = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
seclogon = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SENS = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SharedAccess = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
ShellHWDetection = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SoundMAX Agent Service (default) = C:\PROGRAM FILES\ANALOG DEVICES\SOUNDMAX\SMAGENT.EXE
Spooler = C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
srservice = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SSDPSRV = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
stisvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K IMGSVC
SwPrv = C:\WINDOWS\SYSTEM32\DLLHOST.EXE /PROCESSID:{C2EA7EB0-60F5-4C7E-A824-E528668FE828}
SysmonLog = C:\WINDOWS\SYSTEM32\SMLOGSVC.EXE
TapiSrv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
TermService = C:\WINDOWS\SYSTEM32\SVCHOST -K DCOMLAUNCH
Themes = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
TlntSvr = C:\WINDOWS\SYSTEM32\TLNTSVR.EXE
TrkWks = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
UleadBurningHelper = C:\PROGRAM FILES\COMMON FILES\ULEAD SYSTEMS\DVD\ULCDRSVR.EXE
upnphost = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
UPS = C:\WINDOWS\SYSTEM32\UPS.EXE
VSS = C:\WINDOWS\SYSTEM32\VSSVC.EXE
W32Time = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WebClient = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
winmgmt = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WmdmPmSN = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Wmi = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WmiApSrv = C:\WINDOWS\SYSTEM32\WBEM\WMIAPSRV.EXE
wscsvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
wuauserv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WZCSVC = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
xmlprov = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS

文件驱动
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
CnsMinKP = C:\WINDOWS\SYSTEM32\DRIVERS\CNSMINKP.SYS
FltMgr = C:\WINDOWS\SYSTEM32\DRIVERS\FLTMGR.SYS
MRxDAV = C:\WINDOWS\SYSTEM32\DRIVERS\MRXDAV.SYS
MRxSmb = C:\WINDOWS\SYSTEM32\DRIVERS\MRXSMB.SYS
NetBIOS = C:\WINDOWS\SYSTEM32\DRIVERS\NETBIOS.SYS
Rdbss = C:\WINDOWS\SYSTEM32\DRIVERS\RDBSS.SYS
sr = C:\WINDOWS\SYSTEM32\DRIVERS\SR.SYS
Srv = C:\WINDOWS\SYSTEM32\DRIVERS\SRV.SYS


系统驱动项
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
ACPI = C:\WINDOWS\SYSTEM32\DRIVERS\ACPI.SYS
aec = C:\WINDOWS\SYSTEM32\DRIVERS\AEC.SYS
AFD = C:\WINDOWS\SYSTEM32\DRIVERS\AFD.SYS
agp440 = C:\WINDOWS\SYSTEM32\DRIVERS\AGP440.SYS
Arp1394 = C:\WINDOWS\SYSTEM32\DRIVERS\ARP1394.SYS
AsyncMac = C:\WINDOWS\SYSTEM32\DRIVERS\ASYNCMAC.SYS
atapi = C:\WINDOWS\SYSTEM32\DRIVERS\ATAPI.SYS
ati2mtag = C:\WINDOWS\SYSTEM32\DRIVERS\ATI2MTAG.SYS
Atmarpc = C:\WINDOWS\SYSTEM32\DRIVERS\ATMARPC.SYS
audstub = C:\WINDOWS\SYSTEM32\DRIVERS\AUDSTUB.SYS
BaseTDI = C:\WINDOWS\SYSTEM32\DRIVERS\BASETDI.SYS
Cap7134 = C:\WINDOWS\SYSTEM32\DRIVERS\CAP7134.SYS
CCDECODE = C:\WINDOWS\SYSTEM32\DRIVERS\CCDECODE.SYS
Cdrom = C:\WINDOWS\SYSTEM32\DRIVERS\CDROM.SYS
Disk = C:\WINDOWS\SYSTEM32\DRIVERS\DISK.SYS
dmboot = C:\WINDOWS\SYSTEM32\DRIVERS\DMBOOT.SYS
dmio = C:\WINDOWS\SYSTEM32\DRIVERS\DMIO.SYS
dmload = C:\WINDOWS\SYSTEM32\DRIVERS\DMLOAD.SYS
DMusic = C:\WINDOWS\SYSTEM32\DRIVERS\DMUSIC.SYS
drmkaud = C:\WINDOWS\SYSTEM32\DRIVERS\DRMKAUD.SYS
ExpScaner = F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\EXPSCAN.SYS
Fdc = C:\WINDOWS\SYSTEM32\DRIVERS\FDC.SYS
FsVga = C:\WINDOWS\SYSTEM32\DRIVERS\FSVGA.SYS
Ftdisk = C:\WINDOWS\SYSTEM32\DRIVERS\FTDISK.SYS
Gpc = C:\WINDOWS\SYSTEM32\DRIVERS\MSGPC.SYS
HidUsb = C:\WINDOWS\SYSTEM32\DRIVERS\HIDUSB.SYS
HookCont = F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\HOOKCONT.SYS
HookReg = F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\HOOKREG.SYS
HookSys = F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\HOOKSYS.SYS
HTTP = C:\WINDOWS\SYSTEM32\DRIVERS\HTTP.SYS
i8042prt = C:\WINDOWS\SYSTEM32\DRIVERS\I8042PRT.SYS
Imapi = C:\WINDOWS\SYSTEM32\DRIVERS\IMAPI.SYS
InstQA = C:\WINDOWS\SYSTEM32\DRIVERS\INSTQA.SYS
intelppm = C:\WINDOWS\SYSTEM32\DRIVERS\INTELPPM.SYS
ip6fw = C:\WINDOWS\SYSTEM32\DRIVERS\IP6FW.SYS
IpFilterDriver = C:\WINDOWS\SYSTEM32\DRIVERS\IPFLTDRV.SYS
IpInIp = C:\WINDOWS\SYSTEM32\DRIVERS\IPINIP.SYS
IpNat = C:\WINDOWS\SYSTEM32\DRIVERS\IPNAT.SYS
IPSec = C:\WINDOWS\SYSTEM32\DRIVERS\IPSEC.SYS
IRENUM = C:\WINDOWS\SYSTEM32\DRIVERS\IRENUM.SYS
isapnp = C:\WINDOWS\SYSTEM32\DRIVERS\ISAPNP.SYS
Kbdclass = C:\WINDOWS\SYSTEM32\DRIVERS\KBDCLASS.SYS
kmixer = C:\WINDOWS\SYSTEM32\DRIVERS\KMIXER.SYS
kmsinput = C:\WINDOWS\SYSTEM32\DRIVERS\KMSINPUT.SYS
LenovoF = C:\WINDOWS\SYSTEM32\DRIVERS\LENOVOF.SYS
LenovoR = C:\WINDOWS\SYSTEM32\DRIVERS\LENOVOR.SYS
MarsUsb = C:\WINDOWS\SYSTEM32\DRIVERS\MARSUSB.SYS
MEMSCAN = F:\瑞星\新建文件夹\瑞星2005\新建文件夹\RISING\RAV\MEMSCAN.SYS
MidiSyn = C:\WINDOWS\SYSTEM32\DRIVERS\MIDISYN.SYS
Mouclass = C:\WINDOWS\SYSTEM32\DRIVERS\MOUCLASS.SYS
mouhid = C:\WINDOWS\SYSTEM32\DRIVERS\MOUHID.SYS
MSKSSRV = C:\WINDOWS\SYSTEM32\DRIVERS\MSKSSRV.SYS
MSPCLOCK = C:\WINDOWS\SYSTEM32\DRIVERS\MSPCLOCK.SYS
MSPQM = C:\WINDOWS\SYSTEM32\DRIVERS\MSPQM.SYS
mssmbios = C:\WINDOWS\SYSTEM32\DRIVERS\MSSMBIOS.SYS
MSTEE = C:\WINDOWS\SYSTEM32\DRIVERS\MSTEE.SYS
NABTSFEC = C:\WINDOWS\SYSTEM32\DRIVERS\NABTSFEC.SYS
NdisIP = C:\WINDOWS\SYSTEM32\DRIVERS\NDISIP.SYS
NdisTapi = C:\WINDOWS\SYSTEM32\DRIVERS\NDISTAPI.SYS
Ndisuio = C:\WINDOWS\SYSTEM32\DRIVERS\NDISUIO.SYS
NdisWan = C:\WINDOWS\SYSTEM32\DRIVERS\NDISWAN.SYS
NetBT = C:\WINDOWS\SYSTEM32\DRIVERS\NETBT.SYS
NIC1394 = C:\WINDOWS\SYSTEM32\DRIVERS\NIC1394.SYS
npkcrypt = C:\WINDOWS\SYSTEM32\QQEDIT\NPKCRYPT.SYS
npkycryp = F:\QQ\新建文件夹\NPKYCRYP.SYS
NwlnkFlt = C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKFLT.SYS
NwlnkFwd = C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKFWD.SYS
ohci1394 = C:\WINDOWS\SYSTEM32\DRIVERS\OHCI1394.SYS
Parport = C:\WINDOWS\SYSTEM32\DRIVERS\PARPORT.SYS
PCI = C:\WINDOWS\SYSTEM32\DRIVERS\PCI.SYS
PCIIde = C:\WINDOWS\SYSTEM32\DRIVERS\PCIIDE.SYS
PNDIO = C:\PROGRAM FILES\LENOVO\联想智能控制中心\SCC\PNDIO.SYS
PptpMiniport = C:\WINDOWS\SYSTEM32\DRIVERS\RASPPTP.SYS
Processor = C:\WINDOWS\SYSTEM32\DRIVERS\PROCESSR.SYS
PSched = C:\WINDOWS\SYSTEM32\DRIVERS\PSCHED.SYS
Ptilink = C:\WINDOWS\SYSTEM32\DRIVERS\PTILINK.SYS
PxHelp20 = C:\WINDOWS\SYSTEM32\DRIVERS\PXHELP20.SYS
QKeyService = C:\WINDOWS\SYSTEM32\KEYCRYPT.SYS
RasAcd = C:\WINDOWS\SYSTEM32\DRIVERS\RASACD.SYS
Rasl2tp = C:\WINDOWS\SYSTEM32\DRIVERS\RASL2TP.SYS
RasPppoe = C:\WINDOWS\SYSTEM32\DRIVERS\RASPPPOE.SYS
Raspti = C:\WINDOWS\SYSTEM32\DRIVERS\RASPTI.SYS
RDPCDD = C:\WINDOWS\SYSTEM32\DRIVERS\RDPCDD.SYS
rdpdr = C:\WINDOWS\SYSTEM32\DRIVERS\RDPDR.SYS
redbook = C:\WINDOWS\SYSTEM32\DRIVERS\REDBOOK.SYS
RTL8023 = C:\WINDOWS\SYSTEM32\DRIVERS\RTLNIC51.SYS
rtl8139 = C:\WINDOWS\SYSTEM32\DRIVERS\RTL8139.SYS
ScsiPort = C:\WINDOWS\SYSTEM32\DRIVERS\SCSIPORT.SYS
Secdrv = C:\WINDOWS\SYSTEM32\DRIVERS\SECDRV.SYS
senfilt = C:\WINDOWS\SYSTEM32\DRIVERS\SENFILT.SYS
serenum = C:\WINDOWS\SYSTEM32\DRIVERS\SERENUM.SYS
Serial = C:\WINDOWS\SYSTEM32\DRIVERS\SERIAL.SYS
Skkbdf = C:\WINDOWS\SYSTEM32\DRIVERS\SKKBDF.SYS
SLIP = C:\WINDOWS\SYSTEM32\DRIVERS\SLIP.SYS
smwdm = C:\WINDOWS\SYSTEM32\DRIVERS\SMWDM.SYS
splitter = C:\WINDOWS\SYSTEM32\DRIVERS\SPLITTER.SYS
SSProt = C:\WINDOWS\SYSTEM32\DRIVERS\SSPROT.SYS
streamip = C:\WINDOWS\SYSTEM32\DRIVERS\STREAMIP.SYS
swenum = C:\WINDOWS\SYSTEM32\DRIVERS\SWENUM.SYS
swmidi = C:\WINDOWS\SYSTEM32\DRIVERS\SWMIDI.SYS
sysaudio = C:\WINDOWS\SYSTEM32\DRIVERS\SYSAUDIO.SYS
Tcpip = C:\WINDOWS\SYSTEM32\DRIVERS\TCPIP.SYS
TermDD = C:\WINDOWS\SYSTEM32\DRIVERS\TERMDD.SYS
Update = C:\WINDOWS\SYSTEM32\DRIVERS\UPDATE.SYS
usbaudio = C:\WINDOWS\SYSTEM32\DRIVERS\USBAUDIO.SYS
usbccgp = C:\WINDOWS\SYSTEM32\DRIVERS\USBCCGP.SYS
usbehci = C:\WINDOWS\SYSTEM32\DRIVERS\USBEHCI.SYS
usbhub = C:\WINDOWS\SYSTEM32\DRIVERS\USBHUB.SYS
USBSTOR = C:\WINDOWS\SYSTEM32\DRIVERS\USBSTOR.SYS
usbuhci = C:\WINDOWS\SYSTEM32\DRIVERS\USBUHCI.SYS
VgaSave = C:\WINDOWS\SYSTEM32\DRIVERS\VGA.SYS
Wanarp = C:\WINDOWS\SYSTEM32\DRIVERS\WANARP.SYS
wdmaud = C:\WINDOWS\SYSTEM32\DRIVERS\WDMAUD.SYS
WINIO = E:\外挂\热血江湖\按键精灵5.30正式版\按键精灵5.30正式版\WINIO.SYS
WSTCODEC = C:\WINDOWS\SYSTEM32\DRIVERS\WSTCODEC.SYS
ZSMC302 = C:\WINDOWS\SYSTEM32\DRIVERS\USBVM31B.SYS

http://forum.ikaka.com/topic.asp?board=28&artid=6979213 下载四楼的工具。扫一份日志上来