[CODE]
2007-05-17,09:35:48
System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<Shell.exe><C:\WINDOWS\system32\Shell.exe> [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<cmdbcs><C:\WINDOWS\WINLOGON.EXE> [N/A]
<load><C:\WINDOWS\uninstall\rundl132.exe> [N/A]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher]
<runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<twin><C:\WINDOWS\system32\ctfnom.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<fysa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\fyso.exe> [N/A]
<jtsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\jtso.exe> [N/A]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
<Load><; ?粓Ｔ
?> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<mhsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\mhso.exe> [N/A]
<NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
<qjsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\qjso.exe> [N/A]
<rxsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\rxso.exe> [N/A]
<testrun><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\testexe.exe> [N/A]
<tlsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\tlso.exe> [N/A]
<wdsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\wdso.exe> [N/A]
<wgsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\wgso.exe> [N/A]
<wlsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\wlso.exe> [N/A]
<wmsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\wmso.exe> [N/A]
<wosa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\woso.exe> [N/A]
<ztsa><; C:\DOCUME~1\窝窝头\LOCALS~1\Temp\ztso.exe> [N/A]
==================================
启动文件夹
[腾讯QQ]
<C:\Documents and Settings\窝窝头\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\PROGRA~1\tools\Tencent\CoralQQ.exe [珊瑚虫工作室]><N>
==================================
服务
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
<"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
<"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[WinWMServiceNow / WinWMServiceNow][Stopped/Auto Start]
<C:\DOCUME~1\窝窝头\LOCALS~1\Temp\RAVWM.EXE><N/A>
