+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
2e6891e0066a31d0
[A ] 7. c:\2e6891e0066a31d0.dat
4ce14b5cdd50a553
[A ] 8. c:\4ce14b5cdd50a553.dat
a06247e4a327a6b3
[A ] 9. c:\a06247e4a327a6b3.dat
cb456ceca1d9a192
[A ] 26. c:\cb456ceca1d9a192.dat
CCDECODE
[A ] 25. c:\windows\system32\drivers\msconkt.sys
AsyncMac
[A ] 25. c:\windows\system32\drivers\msconkt.sys
MS
[A ] 55. c:\docume~1\new\locals~1\temp\tmpd.tmp
wynezo81
[A ] 93. c:\windows\system32\drivers\wynezo81.sys
+ 文件系统驱动
+ HKLM\System\CurrentControlSet\Services
kzvwpvle
[A ] 95. c:\windows\system32\drivers\kzvwpvle.sys
下面这些启动项 自己瞧瞧 怎么D盘根目录下什么东西这么多。。。
+ 其他自启动项目
+
Slot_res.dll
[A ] 118. d:\slot_res.dll
icbc_netbank_client_controls.exe
[A ] 119. d:\icbc_netbank_client_controls.exe
WindowsXP-KB921883-x86-CHS.exe
[A ] 120. d:\windowsxp-kb921883-x86-chs.exe
poker.exe
[A ] 121. d:\poker.exe
Slot.exe
[A ] 122. d:\slot.exe
+
Slot_res.dll
[A ] 118. d:\slot_res.dll
icbc_netbank_client_controls.exe
[A ] 119. d:\icbc_netbank_client_controls.exe
WindowsXP-KB921883-x86-CHS.exe
[A ] 120. d:\windowsxp-kb921883-x86-chs.exe
poker.exe
[A ] 121. d:\poker.exe
Slot.exe
[A ] 122. d:\slot.exe
建议扫描SRE日志上来