看看autoruns的日志——干净的！
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ KAVPersonal50 Kaspersky Anti-Virus GUI Part Kaspersky Lab c:\program files\kaspersky lab\kaspersky anti-virus personal pro\kav.exe
+ TP4EX IBM TrackPoint Accessibility Features IBM Corporation c:\windows\system32\tp4ex.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
+ AMonitor eTrust Activity Monitor Computer Associates International, Inc. c:\program files\tiny firewall pro\amon.exe
+ IDMan Internet Download Manager Application (IDM) Internet Download Manager Corp., Tonec Inc. c:\program files\internet download manager\idman.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Adobe.Acrobat.ContextMenu Adobe Acrobat Elements Adobe Systems Inc. c:\program files\adobe\acrobat 6.0\acrobat elements\contextmenu.dll
+ TuneUp 碎纸机 TuneUp Shredder Shell Extension TuneUp Software GmbH c:\program files\tuneup utilities 2006\sdshelex.dll
+ WinRAR shell extension c:\program files\winrar\rarext.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ AcroIEHlprObj Class Adobe Acrobat IE Helper Version 6.0 for ActivieX Adobe Systems Incorporated c:\program files\adobe\acrobat 6.0\acrobat\activex\acroiehelper.dll
+ AcroIEToolbarHelper Class c:\program files\adobe\acrobat 6.0\acrobat\acroiefavclient.dll
+ IDMIEHlprObj Class IDMIECC Module Internet Download Manager Corp., Tonec Inc. c:\program files\internet download manager\idmiecc.dll
HKLM\System\CurrentControlSet\Services
+ Ati HotKey Poller c:\windows\system32\ati2evxx.exe
+ kavsvc Kaspersky Anti-Virus Service Kaspersky Lab c:\program files\kaspersky lab\kaspersky anti-virus personal pro\kavsvc.exe
+ QCONSVC c:\windows\system32\qconsvc.exe
+ UmxAgent eTrust Event Manager Computer Associates International, Inc. c:\program files\tiny firewall pro\umxagent.exe
+ UmxCfg eTrust Configuration Engine Computer Associates International, Inc. c:\program files\common files\pfshared\umxcfg.exe
+ UmxFwHlp eTrust Firewall User-Mode Helper Computer Associates International, Inc. c:\program files\tiny firewall pro\umxfwhlp.exe
+ UmxLU Live Update Monitor Tiny Software, Inc. c:\program files\common files\pfshared\umxlu.exe
+ UmxPol eTrust FW Policy Manager Service Computer Associates International, Inc. c:\program files\common files\pfshared\umxpol.exe
HKLM\System\CurrentControlSet\Services
+ AgereSoftModem SoftModem Device Driver Agere Systems c:\windows\system32\drivers\agrsm.sys
+ ati2mtag ATI RAGE 6 Miniport Driver ATI Technologies Inc. c:\windows\system32\drivers\ati2mtag.sys
+ E100B NDIS 5 driver Intel Corporation c:\windows\system32\drivers\e100b325.sys
+ EGATHDRV c:\windows\system32\egathdrv.sys
+ IBMPMDRV IBM ThinkPad Power Management Driver IBM Corp. c:\windows\system32\drivers\ibmpmdrv.sys
+ IBMTPCHK c:\windows\system32\drivers\ibmbldid.sys
+ Kl1 Kaspersky Anti-Hacker Only Driver Kaspersky Lab c:\windows\system32\drivers\kl1.sys
+ Klif spuper-ptor Kaspersky Labs c:\windows\system32\drivers\klif.sys
+ Klmc Kaspersky Anti-Virus Mail Checker Proxy Kaspersky Lab c:\windows\system32\drivers\klmc.sys
+ KmxAgent eTrust Agent driver Computer Associates International, Inc. c:\windows\system32\drivers\kmxagent.sys
+ KmxBiG eTrust Integrity Guard driver Computer Associates International, Inc. c:\windows\system32\drivers\kmxbig.sys
+ KmxCfg KMX - Configuration Cache Computer Associates International, Inc. c:\windows\system32\drivers\kmxcfg.sys
+ KmxFile eTrust File Guard driver Computer Associates International, Inc. c:\windows\system32\drivers\kmxfile.sys
+ KmxFw eTrust firewall security engine Computer Associates International, Inc. c:\windows\system32\drivers\kmxfw.sys
+ KmxIds TPF: IDS engine plug-in Computer Associates International, Inc. c:\windows\system32\drivers\kmxids.sys
+ KmxNdis eTrust NDIS filter Computer Associates International, Inc. c:\windows\system32\drivers\kmxndis.sys
+ KmxSbx eTrust Registry, Spawning and Devices Guard driver Computer Associates International, Inc. c:\windows\system32\drivers\kmxsbx.sys
+ NSCIRDA NSC Fast Infrared Driver. National Semiconductor Corporation c:\windows\system32\drivers\nscirda.sys
+ Ptilink Direct Parallel Link Driver Parallel Technologies, Inc. c:\windows\system32\drivers\ptilink.sys
+ safemon System Safety Monitor 2.0 extension for Windows security layer System Safety Limited c:\windows\system32\drivers\safemon.sys
+ smwdm SoundMAX Integrated Digital Audio Analog Devices, Inc. c:\windows\system32\drivers\smwdm.sys
+ Tp4Track IBM PS/2 TrackPoint Mouse Filter Driver IBM Corporation c:\windows\system32\drivers\tp4track.sys
+ TPPWR IBM ThinkPad Power Management Device Driver IBM Corp. c:\windows\system32\drivers\tppwr.sys
+ TSP spuper-ptor Kaspersky Labs c:\windows\system32\drivers\klif.sys
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls
+ UmxSbxExw.dll User mode executive module helper DLL Computer Associates International, Inc. c:\windows\system32\umxsbxexw.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
+ PFW UmxWNP Computer Associates International, Inc. c:\windows\system32\umxwnp.dll
+ System Safety Monitor System Safety Winlogon Notification System Safety Limited c:\windows\system32\ssmwinlogonex.dll
HKCU\Control Panel\Desktop\Scrnsave.exe
+ C:\WINDOWS\System32\AMCRYS~1.SCR Aquarium SereneScreen c:\windows\system32\amcrystal-thefish.scr
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
+ Adobe PDF Port Acrobat ? PDF Port Adobe Systems Incorporated. c:\windows\system32\adobepdf.dll
