|
  
|
2#
发表于 2007-4-25 09:15 PM
| 只看该作者
本地测试日志
- 2007-04-25,21:08:54
- System Repair Engineer 2.4.12.806
- Smallfrogs (http://www.KZTechs.com)
- Windows 2000 Professional Service Pack 4 (Build 2195) - 管理权限用户 - 完整功能
- 以下内容被选中:
- 所有的启动项目(包括注册表、启动文件夹、服务等)
- 浏览器加载项
- 正在运行的进程(包括进程模块信息)
- 文件关联
- Winsock 提供者
- Autorun.inf
- HOSTS 文件
- 启动项目
- 注册表
- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
- <Internat.exe><internat.exe> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
- <load><> [N/A]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
- <Synchronization Manager><mobsync.exe /logon> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
- <MigrateMMDrivers><rundll32.exe mmsys.cpl,mmseRunOnce> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
- <shell><Explorer.exe> [Microsoft Corporation]
- <Userinit><C:\WINNT\system32\userinit.exe,> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
- <AppInit_DLLs><> [N/A]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
- <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [(Verified)Microsoft Windows Component Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
- <Network.ConnectionTray><C:\WINNT\system32\NETSHELL.dll> [(Verified)Microsoft Windows 2000 Publisher]
- <WebCheck><%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Windows Component Publisher]
- <SysTray><stobject.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
- <WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
- <WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
- <WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
- <WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
- <WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif]
- <WinlogonNotify: wzcnotif><wzcdlg.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
- <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
- <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
- <Microsoft Windows Media Player><C:\WINNT\inf\unregmp2.exe /ShowWMP> [(Verified)Microsoft Windows Component Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6A5110B5-E14B-4268-A065-EF89FF33C325}]
- <EnableRevocation><regsvr32.exe /s /n /i:"S 2 true 3 true 4 true 5 true 6 true 7 true" initpki.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
- <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll> [(Verified)Microsoft Windows 2000 Publisher]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
- <Internet Explorer 5><%SystemRoot%\system32\ie4uinit.exe> [(Verified)Microsoft Windows Component Publisher]
- [HKEY_CURRENT_USER\Control Panel\Desktop]
- <SCRNSAVE.EXE><(无)> [N/A]
- ==================================
- 启动文件夹
- N/A
- ==================================
- 服务
- [78476 / 78476][Stopped/Manual Start]
- <\\192.168.45.222\Admin$\eraseme_53123.exe><N/A>
- [Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
- <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
- [Register DLL Driver / Register DLL Driver][Running/Auto Start]
- <"C:\WINNT\regdll.exe"><N/A>
- [User Profile Hive Cleanup / UPHClean][Running/Auto Start]
- <C:\Program Files\UPHClean\uphclean.exe><Microsoft Corporation>
- [Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start]
- <C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\MsPMSNSv.dll><Microsoft Corporation>
- ==================================
- 驱动程序
- [dmboot / dmboot][Stopped/Disabled]
- <System32\drivers\dmboot.sys><VERITAS Software Corp.>
- [Logical Disk Manager Driver / dmio][Running/Boot Start]
- <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
- [dmload / dmload][Running/Boot Start]
- <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
- [Creative AudioPCI (ES1371,ES1373) (WDM) / es1371][Running/Manual Start]
- <system32\drivers\es1371mp.sys><Microsoft Corporation>
- [AMD PCNET Compatable Adapter Driver / PCnet][Running/Manual Start]
- <system32\DRIVERS\pcntn5m.sys><AMD Inc.>
- [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
- <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
- [World Standard Teletext Codec / WSTCODEC][Running/Manual Start]
- <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
- ==================================
- 浏览器加载项
- [@shdoclc.dll,-866]
- {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
- [电台(&R)]
- {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
- ==================================
- 正在运行的进程
- [PID: 144][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\ntdll.dll] [Microsoft Corporation, 5.00.2195.7006]
- [C:\WINNT\System32\sfcfiles.dll] [Microsoft Corporation, 5.00.2195.7038]
- [PID: 168][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\ntdll.dll] [Microsoft Corporation, 5.00.2195.7006]
- [C:\WINNT\system32\CSRSRV.dll] [Microsoft Corporation, 5.00.2195.6824]
- [C:\WINNT\system32\basesrv.dll] [Microsoft Corporation, 5.00.2195.7011]
- [C:\WINNT\system32\winsrv.dll] [Microsoft Corporation, 5.00.2195.7135]
- [C:\WINNT\system32\USER32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\KERNEL32.dll] [Microsoft Corporation, 5.00.2195.7099]
- [C:\WINNT\system32\GDI32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\MSVCRT.dll] [Microsoft Corporation, 6.10.9844.0]
- [C:\WINNT\system32\LPK.DLL] [Microsoft Corporation, 5.00.2195.6692]
- [C:\WINNT\system32\USP10.dll] [Microsoft Corporation, 1.0325.2195.6692]
- [C:\WINNT\system32\ADVAPI32.dll] [Microsoft Corporation, 5.00.2195.7038]
- [C:\WINNT\system32\RPCRT4.dll] [Microsoft Corporation, 5.00.2195.7085]
- [PID: 188][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6997]
- [C:\WINNT\system32\ntdll.dll] [Microsoft Corporation, 5.00.2195.7006]
- [C:\WINNT\system32\ADVAPI32.dll] [Microsoft Corporation, 5.00.2195.7038]
- [C:\WINNT\system32\KERNEL32.dll] [Microsoft Corporation, 5.00.2195.7099]
- [C:\WINNT\system32\RPCRT4.dll] [Microsoft Corporation, 5.00.2195.7085]
- [C:\WINNT\system32\GDI32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\USER32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\MSVCRT.dll] [Microsoft Corporation, 6.10.9844.0]
- [C:\WINNT\system32\NDdeApi.dll] [Microsoft Corporation, 5.00.2195.6661]
- [C:\WINNT\system32\PROFMAP.dll] [Microsoft Corporation, 5.00.2195.7000]
- [C:\WINNT\system32\NETAPI32.dll] [Microsoft Corporation, 5.00.2195.7108]
- [C:\WINNT\system32\Secur32.dll] [Microsoft Corporation, 5.00.2195.6695]
- [C:\WINNT\system32\NTDSAPI.dll] [Microsoft Corporation, 5.00.2195.6666]
- [C:\WINNT\system32\DNSAPI.DLL] [Microsoft Corporation, 5.00.2195.7100]
- [C:\WINNT\system32\WSOCK32.dll] [Microsoft Corporation, 5.00.2195.6603]
- [C:\WINNT\system32\WS2_32.DLL] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\WS2HELP.DLL] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\WLDAP32.DLL] [Microsoft Corporation, 5.00.2195.7017]
- [C:\WINNT\system32\NETRAP.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\SAMLIB.dll] [Microsoft Corporation, 5.00.2195.6944]
- [C:\WINNT\system32\sfc.dll] [Microsoft Corporation, 5.00.2195.6673]
- [C:\WINNT\system32\sfcfiles.dll] [Microsoft Corporation, 5.00.2195.7038]
- [C:\WINNT\system32\USERENV.dll] [Microsoft Corporation, 5.00.2195.7002]
- [C:\WINNT\system32\IMM32.DLL] [Microsoft Corporation, 5.00.2195.6655]
- [C:\WINNT\system32\LPK.DLL] [Microsoft Corporation, 5.00.2195.6692]
- [C:\WINNT\system32\USP10.dll] [Microsoft Corporation, 1.0325.2195.6692]
- [C:\WINNT\system32\msgina.dll] [Microsoft Corporation, 5.00.2195.7018]
- [C:\WINNT\system32\COMCTL32.dll] [Microsoft Corporation, 5.81]
- [C:\WINNT\system32\SHELL32.dll] [Microsoft Corporation, 5.00.3900.7105]
- [C:\WINNT\system32\SHLWAPI.dll] [Microsoft Corporation, 6.00.2800.1902 (xpsp2.070102-0900)]
- [C:\WINNT\system32\WINSTA.dll] [Microsoft Corporation, 5.00.2195.6701]
- [C:\WINNT\system32\WINMM.dll] [Microsoft Corporation, 5.00.2161.1]
- [C:\WINNT\system32\setupapi.dll] [Microsoft Corporation, 5.00.2195.6622]
- [C:\WINNT\system32\wdmaud.drv] [Microsoft Corporation, 5.00.2195.6673]
- [C:\WINNT\system32\cscdll.dll] [Microsoft Corporation, 5.00.2195.6713]
- [C:\WINNT\system32\WlNotify.dll] [Microsoft Corporation, 5.00.2195.7000]
- [C:\WINNT\system32\certcli.dll] [Microsoft Corporation, 5.00.2195.6619]
- [C:\WINNT\system32\ATL.DLL] [Microsoft Corporation, 3.00.9435]
- [C:\WINNT\system32\CRYPT32.DLL] [Microsoft Corporation, 5.131.2195.6926]
- [C:\WINNT\system32\MSASN1.dll] [Microsoft Corporation, 5.00.2195.6905]
- [C:\WINNT\system32\WinSCard.dll] [Microsoft Corporation, 5.00.2195.6609]
- [C:\WINNT\system32\WINSPOOL.DRV] [Microsoft Corporation, 5.00.2195.6659]
- [C:\WINNT\system32\MPR.DLL] [Microsoft Corporation, 5.00.2195.6824]
- [C:\WINNT\system32\cscui.dll] [Microsoft Corporation, 5.00.2195.6705]
- [C:\WINNT\system32\wzcdlg.dll] [Microsoft Corporation, 5.00.2195.6604]
- [C:\WINNT\system32\ole32.dll] [Microsoft Corporation, 5.00.2195.7059]
- [C:\WINNT\system32\OLEAUT32.dll] [Microsoft Corporation, 2.40.4522]
- [C:\WINNT\system32\WZCSAPI.DLL] [Microsoft Corporation, 5.00.2195.6604]
- [C:\WINNT\system32\CLBCATQ.DLL] [Microsoft Corporation, 2000.2.3529.0]
- [C:\WINNT\system32\msacm32.drv] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\MSACM32.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\msv1_0.dll] [Microsoft Corporation, 5.00.2195.6926]
- [C:\WINNT\system32\iphlpapi.dll] [Microsoft Corporation, 5.00.2195.7097]
- [C:\WINNT\system32\ICMP.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\MPRAPI.dll] [Microsoft Corporation, 5.00.2181.1]
- [C:\WINNT\system32\ACTIVEDS.DLL] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\ADSLDPC.DLL] [Microsoft Corporation, 5.00.2195.6993]
- [C:\WINNT\system32\RTUTILS.DLL] [Microsoft Corporation, 5.00.2168.1]
- [C:\WINNT\system32\RASAPI32.dll] [Microsoft Corporation, 5.00.2195.6920]
- [C:\WINNT\system32\rasman.dll] [Microsoft Corporation, 5.00.2195.6824]
- [C:\WINNT\system32\TAPI32.dll] [Microsoft Corporation, 5.00.2195.6664]
- [C:\WINNT\system32\DHCPCSVC.DLL] [Microsoft Corporation, 5.00.2195.7085]
- [PID: 836][C:\WINNT\Explorer.EXE] [Microsoft Corporation, 5.00.3700.6690]
- [C:\WINNT\system32\ntdll.dll] [Microsoft Corporation, 5.00.2195.7006]
- [C:\WINNT\system32\ADVAPI32.DLL] [Microsoft Corporation, 5.00.2195.7038]
- [C:\WINNT\system32\KERNEL32.dll] [Microsoft Corporation, 5.00.2195.7099]
- [C:\WINNT\system32\RPCRT4.dll] [Microsoft Corporation, 5.00.2195.7085]
- [C:\WINNT\system32\GDI32.DLL] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\USER32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\SHLWAPI.DLL] [Microsoft Corporation, 6.00.2800.1902 (xpsp2.070102-0900)]
- [C:\WINNT\system32\msvcrt.dll] [Microsoft Corporation, 6.10.9844.0]
- [C:\WINNT\system32\COMCTL32.DLL] [Microsoft Corporation, 5.81]
- [C:\WINNT\system32\IMM32.DLL] [Microsoft Corporation, 5.00.2195.6655]
- [C:\WINNT\system32\LPK.DLL] [Microsoft Corporation, 5.00.2195.6692]
- [C:\WINNT\system32\USP10.dll] [Microsoft Corporation, 1.0325.2195.6692]
- [C:\WINNT\system32\shim.dll] [Microsoft Corporation, 5.00.2195.6717]
- [C:\WINNT\AppPatch\AcLayers.DLL] [Microsoft Corporation, 5.00.2195.6717]
- [C:\WINNT\system32\SHELL32.dll] [Microsoft Corporation, 5.00.3900.7105]
- [C:\WINNT\system32\OLE32.DLL] [Microsoft Corporation, 5.00.2195.7059]
- [C:\WINNT\system32\CLBCATQ.DLL] [Microsoft Corporation, 2000.2.3529.0]
- [C:\WINNT\system32\OLEAUT32.dll] [Microsoft Corporation, 2.40.4522]
- [C:\WINNT\system32\cscui.dll] [Microsoft Corporation, 5.00.2195.6705]
- [C:\WINNT\system32\CSCDLL.DLL] [Microsoft Corporation, 5.00.2195.6713]
- [C:\WINNT\system32\SHDOCVW.DLL] [Microsoft Corporation, 6.00.2800.1902 (xpsp2.070102-0900)]
- [C:\WINNT\system32\browseui.dll] [Microsoft Corporation, 6.00.2800.1902 (xpsp2.070102-0900)]
- [C:\WINNT\system32\LINKINFO.DLL] [Microsoft Corporation, 5.00.2195.7069]
- [C:\WINNT\system32\ntshrui.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\ATL.DLL] [Microsoft Corporation, 3.00.9435]
- [C:\WINNT\system32\NETAPI32.DLL] [Microsoft Corporation, 5.00.2195.7108]
- [C:\WINNT\system32\Secur32.dll] [Microsoft Corporation, 5.00.2195.6695]
- [C:\WINNT\system32\NTDSAPI.dll] [Microsoft Corporation, 5.00.2195.6666]
- [C:\WINNT\system32\DNSAPI.DLL] [Microsoft Corporation, 5.00.2195.7100]
- [C:\WINNT\system32\WSOCK32.dll] [Microsoft Corporation, 5.00.2195.6603]
- [C:\WINNT\system32\WS2_32.DLL] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\WS2HELP.DLL] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\WLDAP32.DLL] [Microsoft Corporation, 5.00.2195.7017]
- [C:\WINNT\system32\NETRAP.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\SAMLIB.dll] [Microsoft Corporation, 5.00.2195.6944]
- [C:\WINNT\system32\USERENV.DLL] [Microsoft Corporation, 5.00.2195.7002]
- [C:\WINNT\system32\MPR.DLL] [Microsoft Corporation, 5.00.2195.6824]
- [C:\WINNT\System32\ntlanman.dll] [Microsoft Corporation, 5.00.2195.6824]
- [C:\WINNT\System32\NETUI0.dll] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\System32\NETUI1.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\NETSHELL.dll] [Microsoft Corporation, 5.00.2195.6604]
- [C:\WINNT\system32\webcheck.dll] [Microsoft Corporation, 6.00.2800.1106]
- [C:\WINNT\system32\stobject.dll] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\BATMETER.DLL] [Microsoft Corporation, 5.00.3502.6601]
- [C:\WINNT\system32\SETUPAPI.DLL] [Microsoft Corporation, 5.00.2195.6622]
- [C:\WINNT\system32\POWRPROF.DLL] [Microsoft Corporation, 5.00.3502.6601]
- [C:\WINNT\system32\WINMM.DLL] [Microsoft Corporation, 5.00.2161.1]
- [C:\WINNT\system32\MSI.DLL] [Microsoft Corporation, 3.1.4000.2435]
- [C:\WINNT\system32\wdmaud.drv] [Microsoft Corporation, 5.00.2195.6673]
- [C:\WINNT\system32\msacm32.drv] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\MSACM32.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\INDICDLL.dll] [Microsoft Corporation, 5.00.2920.0000]
- [C:\WINNT\system32\WININET.dll] [Microsoft Corporation, 6.00.2800.1590]
- [C:\WINNT\system32\CRYPT32.dll] [Microsoft Corporation, 5.131.2195.6926]
- [C:\WINNT\system32\MSASN1.dll] [Microsoft Corporation, 5.00.2195.6905]
- [C:\WINNT\system32\shdoclc.dll] [Microsoft Corporation, 6.00.2800.1106]
- [C:\WINNT\system32\docprop2.dll] [Microsoft Corporation, 5.00.2178.1]
- [C:\WINNT\system32\MSVFW32.DLL] [Microsoft Corporation, 5.00.2195.6612]
- [C:\WINNT\system32\AVIFIL32.DLL] [Microsoft Corporation, 5.00.2195.6612]
- [C:\WINNT\system32\faxshell.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\VERSION.dll] [Microsoft Corporation, 5.00.2195.6623]
- [C:\WINNT\system32\LZ32.DLL] [Microsoft Corporation, 5.00.2195.6611]
- [C:\WINNT\system32\CfgMgr32.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\WINTRUST.dll] [Microsoft Corporation, 5.131.2195.6824]
- [C:\WINNT\system32\IMAGEHLP.dll] [Microsoft Corporation, 5.00.2195.6613]
- [C:\WINNT\system32\mydocs.dll] [Microsoft Corporation, 5.00.3502.6601]
- [C:\WINNT\system32\NTMARTA.DLL] [Microsoft Corporation, 5.00.2195.6666]
- [C:\WINNT\system32\WINSPOOL.DRV] [Microsoft Corporation, 5.00.2195.6659]
- [C:\WINNT\system32\browselc.dll] [Microsoft Corporation, 6.00.2800.1106]
- [C:\WINNT\system32\urlmon.dll] [Microsoft Corporation, 6.00.2800.1592]
- [C:\WINNT\system32\mlang.dll] [Microsoft Corporation, 6.00.2800.1106]
- [C:\WINNT\system32\c_g18030.dll] [Microsoft Corporation, 5.2.3663.0 (main.020715-1506)]
- [C:\WINNT\system32\c_is2022.dll] [Microsoft Corporation, 5.00.2195.6688]
- [C:\Program Files\WinRAR\rarext.dll] [N/A, ]
- [C:\WINNT\system32\mshtml.dll] [Microsoft Corporation, 6.00.2800.1590]
- [C:\WINNT\system32\MSLS31.DLL] [Microsoft Corporation, 3.10.337.0]
- [C:\WINNT\system32\webvw.dll] [Microsoft Corporation, 5.00.3900.7069]
- [C:\WINNT\system32\imgutil.dll] [Microsoft Corporation, 6.00.2800.1106]
- [PID: 1884][C:\WINNT\system32\internat.exe] [Microsoft Corporation, 5.00.2920.0000]
- [C:\WINNT\system32\ntdll.dll] [Microsoft Corporation, 5.00.2195.7006]
- [C:\WINNT\system32\KERNEL32.DLL] [Microsoft Corporation, 5.00.2195.7099]
- [C:\WINNT\system32\USER32.DLL] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\GDI32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\COMCTL32.DLL] [Microsoft Corporation, 5.81]
- [C:\WINNT\system32\ADVAPI32.dll] [Microsoft Corporation, 5.00.2195.7038]
- [C:\WINNT\system32\RPCRT4.dll] [Microsoft Corporation, 5.00.2195.7085]
- [C:\WINNT\system32\IMM32.DLL] [Microsoft Corporation, 5.00.2195.6655]
- [C:\WINNT\system32\SETUPAPI.DLL] [Microsoft Corporation, 5.00.2195.6622]
- [C:\WINNT\system32\MSVCRT.DLL] [Microsoft Corporation, 6.10.9844.0]
- [C:\WINNT\system32\USERENV.DLL] [Microsoft Corporation, 5.00.2195.7002]
- [C:\WINNT\system32\SHELL32.DLL] [Microsoft Corporation, 5.00.3900.7105]
- [C:\WINNT\system32\SHLWAPI.dll] [Microsoft Corporation, 6.00.2800.1902 (xpsp2.070102-0900)]
- [C:\WINNT\system32\LPK.DLL] [Microsoft Corporation, 5.00.2195.6692]
- [C:\WINNT\system32\USP10.dll] [Microsoft Corporation, 1.0325.2195.6692]
- [C:\WINNT\system32\INDICDLL.dll] [Microsoft Corporation, 5.00.2920.0000]
- [PID: 632][C:\WINNT\system32\conime.exe] [Microsoft Corporation, 5.00.2195.6655]
- [C:\WINNT\system32\ntdll.dll] [Microsoft Corporation, 5.00.2195.7006]
- [C:\WINNT\system32\KERNEL32.dll] [Microsoft Corporation, 5.00.2195.7099]
- [C:\WINNT\system32\USER32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\GDI32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\IMM32.dll] [Microsoft Corporation, 5.00.2195.6655]
- [C:\WINNT\system32\ADVAPI32.DLL] [Microsoft Corporation, 5.00.2195.7038]
- [C:\WINNT\system32\RPCRT4.dll] [Microsoft Corporation, 5.00.2195.7085]
- [C:\WINNT\system32\MSVCRT.dll] [Microsoft Corporation, 6.10.9844.0]
- [C:\WINNT\system32\LPK.DLL] [Microsoft Corporation, 5.00.2195.6692]
- [C:\WINNT\system32\USP10.dll] [Microsoft Corporation, 1.0325.2195.6692]
- [C:\WINNT\system32\INDICDLL.dll] [Microsoft Corporation, 5.00.2920.0000]
- [PID: 1948][C:\Documents and Settings\Administrator\桌面\sreng2\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
- [C:\WINNT\system32\ntdll.dll] [Microsoft Corporation, 5.00.2195.7006]
- [C:\WINNT\system32\kernel32.dll] [Microsoft Corporation, 5.00.2195.7099]
- [C:\WINNT\system32\USER32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\GDI32.dll] [Microsoft Corporation, 5.00.2195.7133]
- [C:\WINNT\system32\comdlg32.dll] [Microsoft Corporation, 5.00.3700.6693]
- [C:\WINNT\system32\SHLWAPI.DLL] [Microsoft Corporation, 6.00.2800.1902 (xpsp2.070102-0900)]
- [C:\WINNT\system32\msvcrt.dll] [Microsoft Corporation, 6.10.9844.0]
- [C:\WINNT\system32\ADVAPI32.dll] [Microsoft Corporation, 5.00.2195.7038]
- [C:\WINNT\system32\RPCRT4.dll] [Microsoft Corporation, 5.00.2195.7085]
- [C:\WINNT\system32\COMCTL32.DLL] [Microsoft Corporation, 5.81]
- [C:\WINNT\system32\SHELL32.DLL] [Microsoft Corporation, 5.00.3900.7105]
- [C:\WINNT\system32\WINSPOOL.DRV] [Microsoft Corporation, 5.00.2195.6659]
- [C:\WINNT\system32\MPR.DLL] [Microsoft Corporation, 5.00.2195.6824]
- [C:\WINNT\system32\oledlg.dll] [Microsoft Corporation, 1.0]
- [C:\WINNT\system32\ole32.dll] [Microsoft Corporation, 5.00.2195.7059]
- [C:\WINNT\system32\OLEAUT32.dll] [Microsoft Corporation, 2.40.4522]
- [C:\WINNT\system32\VERSION.dll] [Microsoft Corporation, 5.00.2195.6623]
- [C:\WINNT\system32\LZ32.DLL] [Microsoft Corporation, 5.00.2195.6611]
- [C:\WINNT\system32\CRYPT32.dll] [Microsoft Corporation, 5.131.2195.6926]
- [C:\WINNT\system32\MSASN1.dll] [Microsoft Corporation, 5.00.2195.6905]
- [C:\WINNT\system32\WINMM.dll] [Microsoft Corporation, 5.00.2161.1]
- [C:\WINNT\system32\WS2_32.dll] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\WS2HELP.DLL] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\WININET.dll] [Microsoft Corporation, 6.00.2800.1590]
- [C:\WINNT\system32\IMM32.DLL] [Microsoft Corporation, 5.00.2195.6655]
- [C:\WINNT\system32\LPK.DLL] [Microsoft Corporation, 5.00.2195.6692]
- [C:\WINNT\system32\USP10.dll] [Microsoft Corporation, 1.0325.2195.6692]
- [C:\WINNT\system32\RICHED20.DLL] [Microsoft Corporation, 5.30.23.1227]
- [C:\WINNT\system32\INDICDLL.dll] [Microsoft Corporation, 5.00.2920.0000]
- [C:\WINNT\system32\sfc.dll] [Microsoft Corporation, 5.00.2195.6673]
- [C:\WINNT\system32\sfcfiles.dll] [Microsoft Corporation, 5.00.2195.7038]
- [C:\WINNT\system32\Sensapi.dll] [Microsoft Corporation, 5.00.2195.6627]
- [C:\WINNT\system32\wsock32.dll] [Microsoft Corporation, 5.00.2195.6603]
- [C:\WINNT\system32\RASAPI32.DLL] [Microsoft Corporation, 5.00.2195.6920]
- [C:\WINNT\system32\rasman.dll] [Microsoft Corporation, 5.00.2195.6824]
- [C:\WINNT\system32\TAPI32.dll] [Microsoft Corporation, 5.00.2195.6664]
- [C:\WINNT\system32\RTUTILS.DLL] [Microsoft Corporation, 5.00.2168.1]
- [C:\WINNT\system32\USERENV.DLL] [Microsoft Corporation, 5.00.2195.7002]
- [C:\WINNT\system32\netapi32.dll] [Microsoft Corporation, 5.00.2195.7108]
- [C:\WINNT\system32\Secur32.dll] [Microsoft Corporation, 5.00.2195.6695]
- [C:\WINNT\system32\NTDSAPI.dll] [Microsoft Corporation, 5.00.2195.6666]
- [C:\WINNT\system32\DNSAPI.DLL] [Microsoft Corporation, 5.00.2195.7100]
- [C:\WINNT\system32\WLDAP32.DLL] [Microsoft Corporation, 5.00.2195.7017]
- [C:\WINNT\system32\NETRAP.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\SAMLIB.dll] [Microsoft Corporation, 5.00.2195.6944]
- [C:\WINNT\System32\rnr20.dll] [Microsoft Corporation, 5.00.2195.6603]
- [C:\WINNT\system32\iphlpapi.dll] [Microsoft Corporation, 5.00.2195.7097]
- [C:\WINNT\system32\ICMP.dll] [Microsoft Corporation, 5.00.2134.1]
- [C:\WINNT\system32\MPRAPI.dll] [Microsoft Corporation, 5.00.2181.1]
- [C:\WINNT\system32\ACTIVEDS.DLL] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\ADSLDPC.DLL] [Microsoft Corporation, 5.00.2195.6993]
- [C:\WINNT\system32\SETUPAPI.DLL] [Microsoft Corporation, 5.00.2195.6622]
- [C:\WINNT\system32\DHCPCSVC.DLL] [Microsoft Corporation, 5.00.2195.7085]
- [C:\WINNT\System32\winrnr.dll] [Microsoft Corporation, 5.00.2160.1]
- [C:\WINNT\system32\rasadhlp.dll] [Microsoft Corporation, 5.00.2195.7098]
- [C:\WINNT\system32\urlmon.dll] [Microsoft Corporation, 6.00.2800.1592]
- [C:\WINNT\system32\msafd.dll] [Microsoft Corporation, 5.00.2195.6602]
- [C:\WINNT\System32\wshtcpip.dll] [Microsoft Corporation, 5.00.2195.6601]
- [C:\WINNT\system32\wintrust.dll] [Microsoft Corporation, 5.131.2195.6824]
- [C:\WINNT\system32\IMAGEHLP.dll] [Microsoft Corporation, 5.00.2195.6613]
- [C:\WINNT\system32\rsaenh.dll] [Microsoft Corporation, 5.00.2195.6611]
- ==================================
- 文件关联
- .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .EXE OK. ["%1" %*]
- .COM OK. ["%1" %*]
- .PIF OK. ["%1" %*]
- .REG OK. [regedit.exe "%1"]
- .BAT OK. ["%1" %*]
- .SCR OK. ["%1" /S]
- .CHM OK. ["C:\WINNT\hh.exe" %1]
- .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
- .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
- .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
- .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
- .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
- .LNK OK. [{00021401-0000-0000-C000-000000000046}]
- ==================================
- Winsock 提供者
- N/A
- ==================================
- Autorun.inf
- N/A
- ==================================
- HOSTS 文件
- 127.0.0.1 localhost
- ==================================
- API HOOK
- N/A
- ==================================
- 隐藏进程
- N/A
- ==================================
复制代码 |
感谢Baidu,Google,Dreams8给我这次机会!
还要感谢我的爸爸妈妈!
HOHO |
|