HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
+ 1 找不到文件:1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ 000StTHK c:\windows\system32\000stthk.exe
+ 00THotkey THotkey 东芝公司 c:\windows\system32\00thotkey.exe
+ AGRSMMSG SoftModem Messaging Applet Agere Systems c:\windows\agrsmmsg.exe
+ Apoint Alps Pointing-device Driver Alps Electric Co., Ltd. c:\program files\apoint2k\apoint.exe
+ ccApp Common Client User Session Symantec Corporation c:\program files\common files\symantec shared\ccapp.exe
+ DAEMON Tools-2052 Virtual DAEMON Manager DAEMON'S HOME d:\program files\d-tools\daemon.exe
+ DpUtil TOSHIBA DualPoint Utility Main Module TOSHIBA c:\program files\toshiba\dualpointutility\tedtray.exe
+ MSPY2002 c:\windows\system32\ime\pintlgnt\imscinst.exe
+ nwiz NVIDIA nView Wizard, Version 46.34 NVIDIA Corporation c:\windows\system32\nwiz.exe
+ SoundMAX SoundMAX Control Center Analog Devices, Inc. c:\program files\analog devices\soundmax\smax4.exe
+ SoundMAXPnP SMax4PNP MFC Application Analog Devices, Inc. c:\program files\analog devices\soundmax\smax4pnp.exe
+ Symantec NetDriver Monitor Symantec Security Drivers Install Monitor Symantec Corporation c:\program files\symnetdrv\sndmon.exe
+ TMERzCtl.EXE TMERzCtl TOSHIBA c:\program files\toshiba\tme3\tmerzctl.exe
+ TMESBS.EXE tmesbs32 东芝 c:\program files\toshiba\tme3\tmesbs32.exe
+ TMESRV.EXE 东芝移动式扩充服务 东芝 c:\program files\toshiba\tme3\tmesrv31.exe
+ TProgram O6iQF8oSVMfP5CcgYTd0 c:\windows\smss.exe
+ TPSMain C:\Program Files\TOSHIBA\Power Saver\TPSMain.exe
+ zt 找不到文件:C:\Program Files\Intel\svhost32.exe
C:\Documents and Settings\All Users\「开始」菜单\程序\启动
+ RAMASST.lnk CD Burning of Windows XP disabling tool for DVD MULTI Drive Matsushita Electric Industrial Co., Ltd. c:\windows\system32\ramasst.exe
C:\Documents and Settings\SongYufu\「开始」菜单\程序\启动
+ 腾讯QQ.lnk QQ TENCENT d:\program files\tencent\qq\qq.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
+ NVIEW NVIDIA nView Desktop and Window Manager 46.34 NVIDIA Corporation c:\windows\system32\nview.dll
+ ScanRegistry 找不到文件:C:\Program Files\Common Files\update\update.exe
HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components
+ 0 找不到文件:
About:Home
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
+ CCG1.dll 找不到文件:C:\WINDOWS\system32\CCG1.dll
+ IEXPLORE.Sys 找不到文件:C:\Program Files\Internet Explorer\IEXPLORE.Sys
+ winfinds.dll 找不到文件:C:\WINDOWS\system32\winfinds.dll
+ WinHook.sys 找不到文件:C:\Program Files\Internet Explorer\WinHook.sys
+ ztt2.dLl 找不到文件:C:\WINDOWS\system32\ztt2.dLl
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Desktop Explorer NVIDIA Desktop Explorer, Version 46.34 NVIDIA Corporation c:\windows\system32\nvshell.dll
+ Desktop Explorer Menu NVIDIA Desktop Explorer, Version 46.34 NVIDIA Corporation c:\windows\system32\nvshell.dll
+ Display Panning CPL Extension 找不到文件:deskpan.dll
+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve, Inc. c:\windows\system32\hticons.dll
+ WinRAR shell extension d:\program files\winrar\rarext.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ AcroIEHlprObj Class AcroIEHelper Module c:\program files\adobe\acrobat 5.0\reader\activex\acroiehelper.ocx
+ CNavExtBho Class Norton AntiVirusNAVShellExt Module Symantec Corporation c:\program files\norton antivirus\navshext.dll
+ QQBrowserHelper
Object Class QQIEHelper Module 深圳市腾讯计算机系统有限公司 d:\program files\tencent\qq\qqiehelper.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ Norton AntiVirus Norton AntiVirusNAVShellExt Module Symantec Corporation c:\program files\norton antivirus\navshext.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ 浩方对战平台 浩方对战平台 上海浩方在线信息技术有限公司 d:\program files\浩方对战平台\gameclient.exe
+ 腾讯QQ QQ TENCENT d:\program files\tencent\qq\qq.exe
计划任务
+ Norton AntiVirus - 扫描我的电脑 - SongYufu.job Norton AntiVirus Scanner Module Symantec Corporation c:\program files\norton antivirus\navw32.exe
+ Symantec NetDetect.job Symantec NetDetect Symantec Corporation c:\program files\symantec\liveupdate\ndetect.exe
HKLM\System\CurrentControlSet\Services
+ ccEvtMgr Symantec 事件管理器 Symantec Corporation c:\program files\common files\symantec shared\ccevtmgr.exe
+ ccSetMgr Symantec 设置管理器 Symantec Corporation c:\program files\common files\symantec shared\ccsetmgr.exe
+ DVD-RAM_Service Service of RAMAsst for Windows XP Matsushita Electric Industrial Co., Ltd. c:\windows\system32\dvdramsv.exe
+ navapsvc 处理 Norton AntiVirus 自动防护事件。 Symantec Corporation c:\program files\norton antivirus\navapsvc.exe
+ NVSvc NVIDIA Driver Helper Service, Version 46.34 NVIDIA Corporation c:\windows\system32\nvsvc32.exe
+ SAVScan 处理 Norton AntiVirus 自动防护的存档文件扫描 Symantec Corporation c:\program files\norton antivirus\savscan.exe
+ SBService ScriptBlocking registration Symantec Corporation c:\program files\common files\symantec shared\script blocking\sbserv.exe
+ SoundMAX Agent Service (default) SoundMAX service agent component Analog Devices, Inc. c:\program files\analog devices\soundmax\smagent.exe
+ SymWSC Symantec WMI Service Symantec Corporation c:\program files\common files\symantec shared\security center\symwsc.exe
+ Tmesbs tmesbs32 东芝 c:\program files\toshiba\tme3\tmesbs32.exe
+ Tmesrv 东芝移动式扩充服务 东芝 c:\program files\toshiba\tme3\tmesrv31.exe
HKLM\System\CurrentControlSet\Services
+ aeaudio Andrea Audio Noise Cancellation Driver Andrea Electronics Corporation c:\windows\system32\drivers\aeaudio.sys
+ AgereSoftModem SoftModem Device Driver Agere Systems c:\windows\system32\drivers\agrsm.sys
+ ApfiltrService Alps Touch Pad Driver Alps Electric Co., Ltd. c:\windows\system32\drivers\apfiltr.sys
+ d347bus PnP BIOS Extension c:\windows\system32\drivers\d347bus.sys
+ d347prt SCSI miniport c:\windows\system32\drivers\d347prt.sys
+ E1000 Intel(R) PRO/1000 Adapter NDIS 5.1 deserialized driver Intel Corporation c:\windows\system32\drivers\e1000325.sys
+ E100B Intel(R) PRO/100 Adapter NDIS 5.1 driver Intel Corporation c:\windows\system32\drivers\e100b325.sys
+ EL3C574 3Com Megahertz 574B PC Card NDIS4 3Com Corporation c:\windows\system32\drivers\el574nd4.sys
+ NAVENG AV Engine Symantec Corporation c:\program files\common files\symantec shared\virusdefs\20060816.020\naveng.sys
+ NAVEX15 AV Engine Symantec Corporation c:\program files\common files\symantec shared\virusdefs\20060816.020\navex15.sys
+ npkcrypt nProtect KeyCrypt Driver INCA Internet Co., Ltd. d:\program files\tencent\qq\npkcrypt.sys
+ nv NVIDIA Compatible Windows 2000 Miniport Driver, Version 46.34 NVIDIA Corporation c:\windows\system32\drivers\nv4_mini.sys
+ Ptilink Direct Parallel Link Driver Parallel Technologies, Inc. c:\windows\system32\drivers\ptilink.sys
+ PxHelp20 Px Engine Device Driver for Windows 2000/XP Sonic Solutions c:\windows\system32\drivers\pxhelp20.sys
+ SAVRT AutoProtect Symantec Corporation c:\program files\norton antivirus\savrt.sys
+ SAVRTPEL SAVRTPEL Symantec Corporation c:\program files\norton antivirus\savrtpel.sys
+ Secdrv SafeDisc driver Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. c:\windows\system32\drivers\secdrv.sys
+ SMCIRDA SMC IrCC NDIS 5.0 IrDA FIR Device Driver SMC c:\windows\system32\drivers\smcirda.sys
+ smwdm SoundMAX Integrated Digital Audio Analog Devices, Inc. c:\windows\system32\drivers\smwdm.sys
+ SymEvent Symantec Event Library Symantec Corporation c:\program files\symantec\symevent.sys
+ SYMREDRV Redirector Filter Driver Symantec Corporation c:\windows\system32\drivers\symredrv.sys
+ SYMTDI Network Dispatch Driver Symantec Corporation c:\windows\system32\drivers\symtdi.sys
+ TMEI3E Toshiba Mobile Extension Value Added Logical Device Driver Toshiba Corporation c:\windows\system32\drivers\tmei3e.sys
+ tosrfec TOSHIBA Bluetooth EC Driver TOSHIBA Corporation c:\windows\system32\drivers\tosrfec.sys
+ TVALZ TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver TOSHIBA Corporation c:\windows\system32\drivers\tvalz.sys
+ w70n51 Intel? PRO/Wireless LAN Driver Intel? Corporation c:\windows\system32\drivers\w70n51.sys
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
+ MSAFD Irda [IrDA] c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{02713A16-FFFC-477D-A161-A46A9E1A57FC}] DATAGRAM 2 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{02713A16-FFFC-477D-A161-A46A9E1A57FC}] SEQPACKET 2 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{5CD06504-420A-479B-A7C3-42BEE070807F}] DATAGRAM 4 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{5CD06504-420A-479B-A7C3-42BEE070807F}] SEQPACKET 4 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{675CFDC4-5326-4278-A9C3-EEF4567AA2BB}] DATAGRAM 3 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{675CFDC4-5326-4278-A9C3-EEF4567AA2BB}] SEQPACKET 3 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{7D89B904-AFAB-44CE-AE99-2DE73DC0934D}] DATAGRAM 7 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{7D89B904-AFAB-44CE-AE99-2DE73DC0934D}] SEQPACKET 7 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{84FAB924-4873-4C3B-89C7-D59739CB78EF}] DATAGRAM 0 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{84FAB924-4873-4C3B-89C7-D59739CB78EF}] SEQPACKET 0 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{A2D83A01-76BC-4FF6-AA3E-0AFFF1E97403}] DATAGRAM 1 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{A2D83A01-76BC-4FF6-AA3E-0AFFF1E97403}] SEQPACKET 1 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{E29F83AD-6761-41F7-9C7A-2160F93D5493}] DATAGRAM 6 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{E29F83AD-6761-41F7-9C7A-2160F93D5493}] SEQPACKET 6 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{EE09EF43-7874-46E1-85B7-0D216FF3A6A4}] DATAGRAM 5 c:\windows\system32\cn_spi32.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{EE09EF43-7874-46E1-85B7-0D216FF3A6A4}] SEQPACKET 5 c:\windows\system32\cn_spi32.dll
+ MSAFD Tcpip [RAW/IP] c:\windows\system32\cn_spi32.dll
+ MSAFD Tcpip [TCP/IP] c:\windows\system32\cn_spi32.dll
+ MSAFD Tcpip [UDP/IP] c:\windows\system32\cn_spi32.dll
+ RSVP TCP Service Provider c:\windows\system32\cn_spi32.dll
+ RSVP UDP Service Provider c:\windows\system32\cn_spi32.dll
