CODE]
2007-07-24,17:08:59
System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<在 SALE-CYM 上自动 MARK-CYM-2><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P29 "在 SALE-CYM 上自动 MARK-CYM-2" /M "ME 1" /EF "HKCU"> [SEIKO EPSON CORPORATION]
<在 DINGHONG 上自动 EPSON ME 1 (副本 1)><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P38 "在 DINGHONG 上自动 EPSON ME 1 (副本 1)" /M "ME 1" /EF "HKCU"> [SEIKO EPSON CORPORATION]
<在 RENOWN-HQ 上自动 EPSON ME 1><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P30 "在 RENOWN-HQ 上自动 EPSON ME 1" /M "ME 1" /EF "HKCU"> [SEIKO EPSON CORPORATION]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher]
<CoolSwitch><C:\WINDOWS\system32\taskswitch.exe> []
<在 DINGHONG 上自动 EPSON ME 1 (副本 1)><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P38 "在 DINGHONG 上自动 EPSON ME 1 (副本 1)" /O22 "\\DINGHONG\EPSONME1+00" /M "ME 1"> [N/A]
<在 CYP 上自动 EPSON ME 1><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P24 "在 CYP 上自动 EPSON ME 1" /O14 "\\CYP\EPSONME1" /M "ME 1"> [N/A]
<\\DINGHONG\EPSON ME 1 (副本 1)><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P30 "\\DINGHONG\EPSON ME 1 (副本 1)" /O6 "USB004" /M "ME 1"> [N/A]
<\\192.168.0.81\EPSON ME 1 (副本 1)><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P34 "\\192.168.0.81\EPSON ME 1 (副本 1)" /O6 "USB001" /M "ME 1"> [N/A]
<在 DINGHONG 上自动 EPSON ME 1><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P29 "在 DINGHONG 上自动 EPSON ME 1" /O20 "\\DINGHONG\EPSONME1+" /M "ME 1"> [N/A]
<\\192.168.0.81\EPSON ME 1><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P25 "\\192.168.0.81\EPSON ME 1" /O6 "USB001" /M "ME 1"> [N/A]
<在 SALE 上自动 EPSON ME 1><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P25 "在 SALE 上自动 EPSON ME 1" /O17 "\\SALE\EPSONME111" /M "ME 1"> [N/A]
<mhsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso.exe> []
<wosa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\woso.exe> []
<ztsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso.exe> []
<jtsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso.exe> []
<wlsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso.exe> []
<wgsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso.exe> []
<wmsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso.exe> []
<fysa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso.exe> []
<qjsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso.exe> []
<rxsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso.exe> []
<wdsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso.exe> []
<tlsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso.exe> []
<dasa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\daso.exe> []
<zxsa><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zxso.exe> [N/A]
<afksdfks1><C:\WINDOWS\system32\asdls1.exe> []
<asgfdjs2><C:\WINDOWS\system32\vbsdaas2.exe> []
<askasdkcl3><C:\WINDOWS\system32\faskflxld3.exe> [N/A]
<asfkafsk4><C:\WINDOWS\system32\fdaolfdos4.exe> [N/A]
<sakdasksd5><C:\WINDOWS\system32\eksdlfs5.exe> []
<daskaskfsak6><C:\WINDOWS\system32\dsfids6.exe> []
<xcxdsaa7><C:\WINDOWS\system32\slcskxsdl7.exe> [N/A]
<afskfask8><C:\WINDOWS\system32\fsfjasj8.exe> []
<akgkagaksad9><C:\WINDOWS\system32\fsakfask9.exe> [N/A]
<xzkadsfk10><C:\WINDOWS\system32\afslkfasl10.exe> [N/A]
<faslkakj11><C:\WINDOWS\system32\kjgagklj11.exe> [N/A]
<gadkgak12><C:\WINDOWS\system32\fsafsakx12.exe> [N/A]
<asdsaxcxz13><C:\WINDOWS\system32\dasxcsx13.exe> [N/A]
<dsadlsa14><C:\WINDOWS\system32\dsakfsak14.exe> [N/A]
<daskgfkkcx15><C:\WINDOWS\system32\dasdsaads15.exe> [N/A]
<aslkgadlkgsl1><C:\WINDOWS\system32\adfkajfaa1.exe> [N/A]
<HotKeysCmds><; C:\WINDOWS\system32\hkcmd.exe> [N/A]
<IgfxTray><; C:\WINDOWS\system32\igfxtray.exe> [(Verified)Microsoft Windows Publisher]
<SoundMam><; C:\WINDOWS\system32\SVOHOST.exe> [N/A]
<SoundMan><; SOUNDMAN.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
