[ProtocolDefaults]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
1_Name=http
1_Value=3
2_HKey=HKEY_LOCAL_MACHINE
2_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
2_Name=https
2_Value=3
3_HKey=HKEY_LOCAL_MACHINE
3_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
3_Name=ftp
3_Value=3
4_HKey=HKEY_LOCAL_MACHINE
4_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
4_Name=file
4_Value=3
5_HKey=HKEY_LOCAL_MACHINE
5_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
5_Name=@ivt
5_Value=1
6_HKey=HKEY_LOCAL_MACHINE
6_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
6_Name=shell
6_Value=0
Max=6
[BootExecute]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SYSTEM\CurrentControlSet\Control\Session Manager
1_Name=BootExecute
1_Value=autocheck autochk *
Max=1
[Startup]
1_LnkFile=C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\ADSL.lnk
1_ExeFile=ADSL
Max=1
[AutoRun]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=Software\Microsoft\Windows\CurrentVersion\Run
1_Name=RavTask
1_Value="c:\program files\rising\rav\ravtask.exe" -system
1_FileSize=114688
1_FileDate=2006-11-18 19:55:30
1_FileVersion=18.0.0.22
2_HKey=HKEY_LOCAL_MACHINE
2_Key=Software\Microsoft\Windows\CurrentVersion\Run
2_Name=TkBellExe
2_Value="c:\program files\common files\real\update_ob\realsched.exe" -osboot
2_FileSize=185896
2_FileDate=2006-11-18 21:15:06
2_FileVersion=0.1.0.3760
3_HKey=HKEY_LOCAL_MACHINE
3_Key=Software\Microsoft\Windows\CurrentVersion\Run
3_Name=NvCplDaemon
3_Value=rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup
3_FileSize=5537792
3_FileDate=2005-2-24 7:32:00
3_FileVersion=6.14.10.7184
4_HKey=HKEY_LOCAL_MACHINE
4_Key=Software\Microsoft\Windows NT\CurrentVersion\Windows
4_Name=load
4_Value=
5_HKey=HKEY_CURRENT_USER
5_Key=Software\Microsoft\Windows\CurrentVersion\Run
5_Name=ctfmon.exe
5_Value=c:\windows\system32\ctfmon.exe
5_FileSize=15360
5_FileDate=2004-8-17 12:00:00
5_FileVersion=5.1.2600.2180
6_HKey=HKEY_CURRENT_USER
6_Key=Software\Microsoft\Windows NT\CurrentVersion\Windows
6_Name=load
6_Value=
Max=6
[ModuleUsage]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/system32/muweb.dll
1_Name=.Owner
1_Value={6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
1_Clsid=MUWebControl Class
1_FileName=C:\WINDOWS\system32\muweb.dll
1_FileSize=178408
1_FileDate=2005-5-26 4:19:32
1_FileVersion=5.8.0.2469
Max=1
[Process]
1_FileName=C:\WINDOWS\SYSTEM32\SMSS.EXE
1_FileSize=50688
1_FileDate=2004-8-17 12:00:00
1_FileVersion=5.1.2600.2180
2_FileName=C:\WINDOWS\SYSTEM32\WINLOGON.EXE
2_FileSize=487424
2_FileDate=2004-8-17 12:00:00
2_FileVersion=5.1.2600.2180
3_FileName=C:\WINDOWS\SYSTEM32\SERVICES.EXE
3_FileSize=108032
3_FileDate=2004-8-17 12:00:00
3_FileVersion=5.1.2600.2180
4_FileName=C:\WINDOWS\SYSTEM32\LSASS.EXE
4_FileSize=13312
4_FileDate=2004-8-17 12:00:00
4_FileVersion=5.1.2600.2180
5_FileName=C:\WINDOWS\SYSTEM32\SVCHOST.EXE
5_FileSize=14336
5_FileDate=2004-8-17 12:00:00
5_FileVersion=5.1.2600.2180
6_FileName=C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
6_FileSize=110592
6_FileDate=2006-11-18 19:55:18
6_FileVersion=18.0.0.3
7_FileName=C:\WINDOWS\SYSTEM32\SVCHOST.EXE
7_FileSize=14336
7_FileDate=2004-8-17 12:00:00
7_FileVersion=5.1.2600.2180
8_FileName=C:\WINDOWS\EXPLORER.EXE
8_FileSize=976896
8_FileDate=2004-8-17 12:00:00
8_FileVersion=6.0.2900.2180
9_FileName=C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
9_FileSize=57856
9_FileDate=2005-6-11 7:53:32
9_FileVersion=5.1.2600.2696
10_FileName=C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE
10_FileSize=114688
10_FileDate=2006-11-18 19:55:30
10_FileVersion=18.0.0.22
11_FileName=C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
11_FileSize=185896
11_FileDate=2006-11-18 21:15:06
11_FileVersion=0.1.0.3760
12_FileName=C:\WINDOWS\SYSTEM32\NVSVC32.EXE
12_FileSize=127043
12_FileDate=2005-2-24 7:32:00
12_FileVersion=6.14.10.7184
13_FileName=C:\WINDOWS\SYSTEM32\CTFMON.EXE
13_FileSize=15360
13_FileDate=2004-8-17 12:00:00
13_FileVersion=5.1.2600.2180
14_FileName=C:\PROGRAM FILES\MAXTHON\MAXTHON.EXE
14_FileSize=899584
14_FileDate=2006-10-24 23:13:00
14_FileVersion=1.5.8.120
15_FileName=D:\VAGAA\VAGAA.EXE
15_FileSize=3211264
15_FileDate=2006-9-15 14:38:08
15_FileVersion=2.6.3.6
16_FileName=D:\VAGAA\VEXPLORER.EXE
16_FileSize=335872
16_FileDate=2006-7-20 11:44:32
16_FileVersion=2.6.3.3
17_FileName=C:\WINDOWS\SYSTEM32\SVCHOST.EXE
17_FileSize=14336
17_FileDate=2004-8-17 12:00:00
17_FileVersion=5.1.2600.2180
18_FileName=C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE
18_FileSize=614400
18_FileDate=2006-11-18 19:20:24
18_FileVersion=18.0.1.39
19_FileName=C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE
19_FileSize=266240
19_FileDate=2006-11-18 19:20:30
19_FileVersion=18.0.1.47
20_FileName=C:\PROGRAM FILES\RISING\RAV\RAVSTUB.EXE
20_FileSize=90112
20_FileDate=2006-11-18 19:20:18
20_FileVersion=18.0.0.16
21_FileName=D:\超级兔子\MAGICSET\SRIEH.EXE
21_FileSize=1363968
21_FileDate=2006-10-31 5:45:16
21_FileVersion=7.86.0.1
22_FileName=[SYSTEM PROCESS]
23_FileName=C:\WINDOWS\system32\CSRSS.EXE
23_FileSize=6144
23_FileDate=2004-8-17 12:00:00
23_FileVersion=5.1.2600.2180
24_FileName=C:\WINDOWS\system32\ALG.EXE
24_FileSize=44544
24_FileDate=2004-8-17 12:00:00
24_FileVersion=5.1.2600.2180
Max=24
[Hosts]
HostsFile=C:\WINDOWS\system32\Drivers\Etc\Hosts
1_Host=127.0.0.1 localhost
Max=1
[Service]
1_ServiceName=DcomLaunch
1_DisplayName=DCOM Server Process Launcher
1_Description=为 DCOM 服务提供加载功能。
1_Status=已启动
1_StartType=自动
1_ServiceDll=C:\WINDOWS\SYSTEM32\RPCSS.DLL
1_ImagePath=C:\WINDOWS\SYSTEM32\SVCHOST -K DCOMLAUNCH
2_ServiceName=HTTPFilter
2_DisplayName=HTTP SSL
2_Description=此服务通过安全套接字层(SSL)实现 HTTP 服务的安全超文本传送协议(HTTPS)。如果此服务被禁用,任何依赖它的服务将无法启动。
2_Status=停止
2_StartType=手动
2_ServiceDll=C:\WINDOWS\SYSTEM32\W3SSL.DLL
2_ImagePath=C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K HTTPFILTER
3_ServiceName=NetDDEdsdm
3_DisplayName=Network DDE DSDM
3_Description=管理动态数据交换 (DDE) 网络共享。如果此服务终止,DDE 网络共享将不可用。如果此服务被禁用,任何依赖它的服务将无法启动。
3_Status=停止
3_StartType=已禁用
3_ServiceDll=
3_ImagePath=C:\WINDOWS\SYSTEM32\NETDDE.EXE
4_ServiceName=NVSvc
4_DisplayName=NVIDIA Display Driver Service
4_Description=Provides system and desktop level support to the NVIDIA display driver
4_Status=已启动
4_StartType=自动
4_ServiceDll=
4_ImagePath=C:\WINDOWS\SYSTEM32\NVSVC32.EXE
5_ServiceName=RsCCenter
5_DisplayName=Rising Process Communication Center
5_Description=
5_Status=已启动
5_StartType=自动
5_ServiceDll=
5_ImagePath="C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE"
6_ServiceName=RsRavMon
6_DisplayName=Rising RealTime Monitor
6_Description=
6_Status=已启动
6_StartType=自动
6_ServiceDll=
6_ImagePath="C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE"
7_ServiceName=WmdmPmSN
7_DisplayName=Portable Media Serial Number Service
7_Description=Retrieves the serial number of any portable media player connected to this computer. If this service is stopped, protected content might not be down loaded to the device.
7_Status=停止
7_StartType=手动
7_ServiceDll=C:\WINDOWS\SYSTEM32\MSPMSNSV.DLL
7_ImagePath=C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
8_ServiceName=WMPNetworkSvc
8_DisplayName=Windows Media Player Network Sharing Service
8_Description=使用通用即插即用设备与其他网络播放机和媒体设备共享 Windows Media Player 媒体库
8_Status=停止
8_StartType=手动
8_ServiceDll=
8_ImagePath="C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPNETWK.EXE"
9_ServiceName=wscsvc
9_DisplayName=Security Center
9_Description=监视系统安全设置和配置。
9_Status=已启动
9_StartType=自动
9_ServiceDll=C:\WINDOWS\SYSTEM32\WSCSVC.DLL
9_ImagePath=C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
10_ServiceName=WudfSvc
10_DisplayName=Windows Driver Foundation - User-mode Driver Framework
10_Description=Manages user-mode driver host processes
10_Status=停止
10_StartType=手动
10_ServiceDll=C:\WINDOWS\SYSTEM32\WUDFSVC.DLL
10_ImagePath=C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K WUDFSERVICEGROUP
11_ServiceName=xmlprov
11_DisplayName=Network Provisioning Service
11_Description=为自动网络提供管理基于域的 XML 配置文件。
11_Status=停止
11_StartType=手动
11_ServiceDll=C:\WINDOWS\SYSTEM32\XMLPROV.DLL
11_ImagePath=C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Max=11
[END]
Max=1