收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 软件区 › 解疑答难区 › 请教高手：当前系统无法修改时间，安全模式却可以。。。 ...
12下一页
返回列表 发新帖
查看: 5422|回复: 12
收起左侧

[已解决] 请教高手：当前系统无法修改时间，安全模式却可以。。。。

 关闭 [复制链接]
踏雪飞鸿
发表于 2008-3-8 18:58:31 | 显示全部楼层 |阅读模式
在XP系统里一改时间，点“应用”后，时间立马 回到改前的时间，不过在安全模式下可以改时间，改好了重起，时间不会回到改前的状态。可为什么会在当前系统无法更改呢？郁闷，哪位高手能帮忙解决呀


我正确用了360TimeProtect时间保护工具。还是不行，卸载360TimeProtect后，再在XP系统里改时间，点“应用”后，时间立马 回到改前的时间，不过在安全模式下可以改时间，改好了重起，时间不会回到改前的状态。郁闷，哪位高手能帮忙解决呀

[ 本帖最后由 踏雪飞鸿 于 2008-3-8 19:03 编辑 ]
回复

举报

llj4862
发表于 2008-3-8 20:16:54 | 显示全部楼层
使用系统管理员的帐号登陆进入系统，打开“开始”-“运行”，在运行输入框中输入“gpedit.msc”，进入“组策略”设置界面，依次展开“计算机配置”--“Windows 设置”--“安全设置”--“本地策略”--“用户权利指派”，
然后，选择“更改系统时间”
回复

举报

chen_c_yaun
发表于 2008-3-8 20:47:17 | 显示全部楼层
看一下软件下载区的一篇文章
http://www.kpfans.com/bbs/viewth ... p;extra=&page=1
回复

举报

355254265
发表于 2008-3-8 22:45:54 | 显示全部楼层
ARP防火墙都有防止修改时间的!
回复

举报

踏雪飞鸿
 楼主| 发表于 2008-3-9 19:05:23 | 显示全部楼层
试了2楼的方法，还是不行
回复

举报

踏雪飞鸿
 楼主| 发表于 2008-3-10 19:46:27 | 显示全部楼层
sreng"智能扫描"的结果，请高手分析分析
  1. 2008-03-10,19:40:43

  3. System Repair Engineer 2.5.16.900
  4. Smallfrogs (http://www.KZTechs.com)

  6. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

  8. 以下内容被选中：
  9.     所有的启动项目（包括注册表、启动文件夹、服务等）
  10.     浏览器加载项
  11.     正在运行的进程（包括进程模块信息）
  12.     文件关联
  13.     Winsock 提供者
  14.     Autorun.inf
  15.     HOSTS 文件
  16.     进程特权扫描


  19. 启动项目
  20. 注册表
  21. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  22.       [(Verified)Microsoft Windows Publisher]
  23. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  24.       [3L软件工作室(3LSoft)]
  25.       []
  26. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  27.       [(Verified)Microsoft Windows Component Publisher]
  28.       [(Verified)Microsoft Windows Publisher]
  29. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  30.     <>  [N/A]
  31. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  32.       [(Verified)Microsoft Windows Publisher]
  33. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
  34.       [Intel Corporation]
  35. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
  36.       [(Verified)Microsoft Corporation]
  37. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  38.     <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
  39. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  40.     <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
  41. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  42.     <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
  43. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  44.       [(Verified)Microsoft Windows Publisher]
  45. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  46.       [(Verified)Microsoft Windows Publisher]
  47. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  48.       [(Verified)Microsoft Windows Component Publisher]
  49. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  50.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
  51. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
  52.       [Microsoft Corporation]
  53. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  54.     <; >  [N/A]

  56. ==================================
  57. 启动文件夹
  58. N/A

  60. ==================================
  61. 服务
  62. [Avira Premium Security Suite WebGuard / antivirwebservice][Stopped/Disabled]
  63.   <>
  64. [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Stopped/Manual Start]
  65.   <>
  66. [Contrl Center of Storm Media / ccosm][Stopped/Manual Start]
  67.   <北京暴风网际科技有限公司>
  68. [KVSrvXP / KVSrvXP][Running/Auto Start]
  69.   
  70. [MPSVC Service / MPSVCService][Running/Auto Start]
  71.   
  72. [O&O Defrag / O&O Defrag][Stopped/Auto Start]
  73.   
  74. [O&O CleverCache / OOCleverCacheAgent][Stopped/Auto Start]
  75.   
  76. [PnpWMmng / PnpWMmng][Stopped/Disabled]
  77.   <完美卸载>
  78. [User Profile Hive Cleanup / UPHClean][Running/Auto Start]
  79.   

  81. ==================================
  82. 驱动程序
  83. [360TimeProt / 360TimeProt][Running/Auto Start]
  84.   <\??\C:\WINDOWS\system32\drivers\360TimeProt.sys>
  85. [Lenovo Virtual Power Controller Driver / ACPIVPC][Running/Manual Start]
  86.   
  87. [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Stopped/System Start]
  88.   <\??\F:\TaoMengLiang\杀毒软件\木马流氓软件查杀\AVG Anti-Spyware(原eWido)7.5.1.43汉化绿色破解版(可在线升级、整合0702病毒库\AVGAntiSpywarelse\AVG Anti-Spyware\guard.sys>
  89. [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
  90.   
  91. [avgio / avgio][Stopped/System Start]
  92.   <\??\D:\Program Files\Avira\Avira Premium Security Suite\avgio.sys>
  93. [avgntflt / avgntflt][Stopped/Manual Start]
  94.   <\??\D:\Program Files\Avira\Avira Premium Security Suite\avgntflt.sys>
  95. [avipbb / avipbb][Running/System Start]
  96.   
  97. [Broadcom 440x 10/100 Integrated Controller XP Driver / bcm4sbxp][Running/Manual Start]
  98.   

  100. [BsDeamon / BsDeamon][Running/System Start]
  101.   <\??\D:\Program Files\JiangMin\AntiVirus\BsDeamon.sys>
  102. [Microsoft UAA Function Driver for High Definition Audio Service / HdAudAddService][Running/Manual Start]
  103.   
  104. [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
  105.   
  106. [HSFHWAZL / HSFHWAZL][Running/Manual Start]
  107.   
  108. [HSF_DPV / HSF_DPV][Running/Manual Start]
  109.   
  110. [ialm / ialm][Running/Manual Start]
  111.   
  112. [KAVBootC / KAVBootC][Running/Boot Start]
  113.   <\SystemRoot\system32\Drivers\KAVBootC.sys>
  114. [KRegEx / KRegEx][Running/Auto Start]
  115.   <\??\D:\Program Files\JiangMin\antivirus\KRegEx.sys>
  116. [Jiangmin Antivirus Software - SysCall Services / KSysCall][Running/System Start]
  117.   <\??\D:\Program Files\JiangMin\common\KSysCall.sys>
  118. [KVFileGuard From Jiangmin / KVFileGuard][Running/Manual Start]
  119.   <\??\D:\Program Files\JiangMin\AntiVirus\KVfg.sys>
  120. [mdmxsdk / mdmxsdk][Running/Auto Start]
  121.   
  122. [mp110001 / mp110001][Running/Auto Start]
  123.   
  124. [mp110002 / mp110002][Stopped/Auto Start]
  125.   
  126. [mp110003 / mp110003][Running/Boot Start]
  127.   <\SystemRoot\system32\drivers\mp110003.sys>
  128. [mp110004 / mp110004][Running/Auto Start]
  129.   
  130. [mp110005 / mp110005][Running/Manual Start]
  131.   
  132. [mp110006 / mp110006][Running/System Start]
  133.   
  134. [mp110007 / mp110007][Running/System Start]
  135.   
  136. [mp110008 / mp110008][Running/Auto Start]
  137.   
  138. [mp110009 / mp110009][Running/System Start]
  139.   
  140. [mp110010 / mp110010][Running/Boot Start]
  141.   <\SystemRoot\system32\drivers\mp110010.sys>
  142. [mp110011 / mp110011][Stopped/System Start]
  143.   
  144. [mp110012 / mp110012][Stopped/Manual Start]
  145.   
  146. [mp110013 / mp110013][Running/Boot Start]
  147.   <\SystemRoot\system32\drivers\mp110013.sys>
  148. [PC-CDMA Serial port driver / oxser][Running/System Start]
  149.   
  150. [PnpWmkDrv / PnpWmkDrv][Running/System Start]
  151.   <\??\C:\WINDOWS\system32\drivers\PnpWmkDrv.sys>
  152. [Powertweak NT helper / Powert][Stopped/Auto Start]
  153.   <\??\F:\TAOMEN~2\优化软件\POWERT~1.02R\pt202-1\pt202-1\powert2k.sys>
  154. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  155.   
  156. [Secdrv / Secdrv][Stopped/Manual Start]
  157.   
  158. [ssmdrv / ssmdrv][Running/System Start]
  159.   
  160. [Jiangmin AntiVirus Software - System Guard / SysGuard][Running/Boot Start]
  161.   <\SystemRoot\system32\Drivers\SysGuard.sys>
  162. [tifm21 / tifm21][Running/Manual Start]
  163.   
  164. [Conexant Setup API / UIUSys][Stopped/Manual Start]
  165.   
  166. [Virtual CD-ROM Device Driver / vcdrom][Running/System Start]
  167.   <\??\E:\WinPE纯净硬盘版配合微软虚拟光驱，再不用刻盘装系统了\微软虚拟光驱18K\微软虚拟光驱\虚拟光驱\VCdRom.sys>
  168. [winachsf / winachsf][Running/Manual Start]
  169.   

  171. ==================================
  172. 浏览器加载项
  173. [ThunderAtOnce Class]
  174.   {01443AEC-0FD1-40fd-9C87-E93D1494C233}
  175. [IeCatch5 Class]
  176.   {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}
  177. [BrowseHelper Class]
  178.   {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9}
  179. [Thunder Browser Helper]
  180.   {889D2FEB-5411-4565-8998-1DD2C5261283}
  181. [RegisterHelper Class]
  182.   {FF354A24-B490-4D4F-8EEC-B3ACD6E681A4}
  183. [FlashGet]
  184.   {D6E814A0-E0C5-11d4-8D29-0050BA6940E3}
  185. [江民杀毒工具栏]
  186.   {B5A34A93-D538-43A7-8371-864CB6148D12}
  187. [DrvCert Class]
  188.   {2FD68643-4BCE-4EF5-B7B8-F0F1192FDE86}
  189. [InputPassWd Class]
  190.   {3A4C8311-C151-4462-BDE9-F777ABEE0063}
  191. [WUWebControl Class]
  192.   {6414512B-B978-451D-A0D8-FCFDF33E833C}
  193. [MUWebControl Class]
  194.   {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
  195. [ThunderAtOnce Class]
  196.   {01443AEC-0FD1-40FD-9C87-E93D1494C233}
  197. [Windows Genuine Advantage Validation Tool]
  198.   {17492023-C23A-453E-A040-C7C580BBF700}
  199. [XML DOM Document]
  200.   {2933BF90-7B36-11D2-B20E-00C04F983E60}
  201. [DrvCert Class]
  202.   {2FD68643-4BCE-4EF5-B7B8-F0F1192FDE86}
  203. [Thunder Agent Class]
  204.   {485463B7-8FB2-4B3B-B29B-8B919B0EACCE}
  205. [DrvINFReader Class]
  206.   {631AC624-4EA0-49AB-ABD7-64409592AE15}
  207. [WUWebControl Class]
  208.   {6414512B-B978-451D-A0D8-FCFDF33E833C}
  209. [MUWebControl Class]
  210.   {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
  211. [BrowseHelper Class]
  212.   {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9}
  213. [360SafeLive]
  214.   {87515F61-A66C-4319-A0E0-D416CB8059E3}
  215. [Microsoft Web Browser]
  216.   {8856F961-340A-11D0-A96B-00C04FD705A2}
  217. [Thunder Browser Helper]
  218.   {889D2FEB-5411-4565-8998-1DD2C5261283}
  219. [DrvInst Class]
  220.   {9222E48D-8985-4BE2-B9DB-EBE734CBE7B5}
  221. [江民杀毒工具栏]
  222.   {B5A34A93-D538-43A7-8371-864CB6148D12}
  223. [Shockwave Flash Object]
  224.   {D27CDB6E-AE6D-11CF-96B8-444553540000}
  225. [XML HTTP Request]
  226.   {ED8C108E-4349-11D2-91A4-00C04F7969E8}
  227. [XML DOM Document 3.0]
  228.   {F5078F32-C551-11D3-89B9-0000F81FE221}
  229. [XML HTTP 3.0]
  230.   {F5078F35-C551-11D3-89B9-0000F81FE221}
  231. [XML HTTP]
  232.   {F6D90F16-9C73-11D3-B32E-00C04F990BB4}
  233. [RegisterHelper Class]
  234.   {FF354A24-B490-4D4F-8EEC-B3ACD6E681A4}
  235. [使用 IDM 下载]
  236.   <54A24-B490-4D4F-8EEC-B3ACD6E681A4}, N/A>
  237. [使用 IDM 下载所有链接]
  238.   <, N/A>
  239. [使用 IDM 下载视频内容]
  240.   <, N/A>
  241. [使用网际快车下载]
  242.   
  243. [使用网际快车下载全部链接]
  244.   
  245. [使用迅雷下载]
  246.   
  247. [使用迅雷下载全部链接]
  248.   

  250. ==================================
  251. 正在运行的进程
  252. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  253. [PID: 808 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  254. [PID: 836 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  255.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  256. [PID: 884 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  257. [PID: 896 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  258. [PID: 1108 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  259.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  260. [PID: 1292 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  261.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  262. [PID: 1584 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  263.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  264. [PID: 1800 / wuliu][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
  265.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  266.     [F:\TaoMengLiang\重装系统首要必装软件\WinRAR 绿色版\winrar卡饭专用版\rarext.dll]  [N/A, ]
  267.     [F:\TaoMengLiang\杀毒软件\木马流氓软件查杀\unlocker\Unlocker[1].v1.7.8.中文免安装版\强行解锁删除软件专家Unlocker.v1.7.8.中文免安装版\UnlockerCOM.dll]  [N/A, ]
  268.     [D:\Program Files\JiangMin\AntiVirus\KVshell.dll]  [Jiangmin Co.Ltd, 2, 0, 7, 1018]
  269.     [C:\WINDOWS\system32\HiveBase.dll]  [Jiangmin Co., Ltd., 1, 0, 7, 717]
  270.     [C:\WINDOWS\system32\kvinstall.dll]  [Jiangmin Co.,Ltd, 2, 0, 7, 831]
  271.     [D:\Program Files\JiangMin\AntiVirus\lang\KvXP0804.lng]  [N/A, ]
  272.     [F:\DrWeb\drwsxtn.dll]  [Doctor Web, Ltd., 4, 44, 0, 8080]
  273. [PID: 1972 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  274. [PID: 1992 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
  275. [PID: 2040 / SYSTEM][D:\Program Files\UPHClean\uphclean.exe]  [Microsoft Corporation, 1.5.5.21]
  276. [PID: 1612 / wuliu][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  277. [PID: 484 / wuliu][M:\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
  278.     [M:\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
  279.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]

  281. ==================================
  282. 文件关联
  283. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  284. .EXE  OK. ["%1" %*]
  285. .COM  OK. ["%1" %*]
  286. .PIF  OK. ["%1" %*]
  287. .REG  OK. [regedit.exe "%1"]
  288. .BAT  OK. ["%1" %*]
  289. .SCR  OK. ["%1" /S]
  290. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  291. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  292. .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  293. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  294. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  295. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  296. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]

  298. ==================================
  299. Winsock 提供者
  300. N/A

  302. ==================================
  303. Autorun.inf
  304. N/A

  306. ==================================
  307. HOSTS 文件
  308. 127.0.0.1       localhost
  309. 127.0.0.1        registeridm.com
  310. 127.0.0.1        www.internetdownloadmanager.com
  311. 127.0.0.1        internetdownloadmanager.com
  312. 127.0.0.1        www.registeridm.com
  313. 127.0.0.1        secure.registeridm.com
  314. 127.0.0.1        secure.internetdownloadmanager.com
  315. 127.0.0.1        mirror.internetdownloadmanager.com
  316. 127.0.0.1        mirror2.internetdownloadmanager.com
  317. 127.0.0.1        mirror3.internetdownloadmanager.com
  318. 127.0.0.1        www.tonec.com
  319. 127.0.0.1        tonec.com
  320. 127.0.0.1        207.44.199.159
  321. 127.0.0.1        207.44.199.16

  323. ==================================
  324. 进程特权扫描
  325. N/A

  327. ==================================
  328. API HOOK
  329. N/A

  331. ==================================
  332. 隐藏进程
  333. N/A

  335. ==================================
复制代码
回复

举报

踏雪飞鸿
 楼主| 发表于 2008-3-10 19:47:42 | 显示全部楼层
sreng"智能扫描"的结果，请高手分析分析
  1. 2008-03-10,19:40:43

  3. System Repair Engineer 2.5.16.900
  4. Smallfrogs (http://www.KZTechs.com)

  6. Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

  8. 以下内容被选中：
  9.     所有的启动项目（包括注册表、启动文件夹、服务等）
  10.     浏览器加载项
  11.     正在运行的进程（包括进程模块信息）
  12.     文件关联
  13.     Winsock 提供者
  14.     Autorun.inf
  15.     HOSTS 文件
  16.     进程特权扫描


  19. 启动项目
  20. 注册表
  21. [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  22.       [(Verified)Microsoft Windows Publisher]
  23. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  24.       [3L软件工作室(3LSoft)]
  25.       []
  26. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  27.       [(Verified)Microsoft Windows Component Publisher]
  28.       [(Verified)Microsoft Windows Publisher]
  29. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  30.     <>  [N/A]
  31. [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  32.       [(Verified)Microsoft Windows Publisher]
  33. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
  34.       [Intel Corporation]
  35. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
  36.       [(Verified)Microsoft Corporation]
  37. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
  38.     <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [N/A]
  39. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
  40.     <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
  41. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
  42.     <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
  43. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
  44.       [(Verified)Microsoft Windows Publisher]
  45. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
  46.       [(Verified)Microsoft Windows Publisher]
  47. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
  48.       [(Verified)Microsoft Windows Component Publisher]
  49. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
  50.     <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
  51. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
  52.       [Microsoft Corporation]
  53. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  54.     <; >  [N/A]

  56. ==================================
  57. 启动文件夹
  58. N/A

  60. ==================================
  61. 服务
  62. [Avira Premium Security Suite WebGuard / antivirwebservice][Stopped/Disabled]
  63.   <>
  64. [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Stopped/Manual Start]
  65.   <>
  66. [Contrl Center of Storm Media / ccosm][Stopped/Manual Start]
  67.   <北京暴风网际科技有限公司>
  68. [KVSrvXP / KVSrvXP][Running/Auto Start]
  69.   
  70. [MPSVC Service / MPSVCService][Running/Auto Start]
  71.   
  72. [O&O Defrag / O&O Defrag][Stopped/Auto Start]
  73.   
  74. [O&O CleverCache / OOCleverCacheAgent][Stopped/Auto Start]
  75.   
  76. [PnpWMmng / PnpWMmng][Stopped/Disabled]
  77.   <完美卸载>
  78. [User Profile Hive Cleanup / UPHClean][Running/Auto Start]
  79.   

  81. ==================================
  82. 驱动程序
  83. [360TimeProt / 360TimeProt][Running/Auto Start]
  84.   <\??\C:\WINDOWS\system32\drivers\360TimeProt.sys>
  85. [Lenovo Virtual Power Controller Driver / ACPIVPC][Running/Manual Start]
  86.   
  87. [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Stopped/System Start]
  88.   <\??\F:\TaoMengLiang\杀毒软件\木马流氓软件查杀\AVG Anti-Spyware(原eWido)7.5.1.43汉化绿色破解版(可在线升级、整合0702病毒库\AVGAntiSpywarelse\AVG Anti-Spyware\guard.sys>
  89. [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
  90.   
  91. [avgio / avgio][Stopped/System Start]
  92.   <\??\D:\Program Files\Avira\Avira Premium Security Suite\avgio.sys>
  93. [avgntflt / avgntflt][Stopped/Manual Start]
  94.   <\??\D:\Program Files\Avira\Avira Premium Security Suite\avgntflt.sys>
  95. [avipbb / avipbb][Running/System Start]
  96.   
  97. [Broadcom 440x 10/100 Integrated Controller XP Driver / bcm4sbxp][Running/Manual Start]
  98.   

  100. [BsDeamon / BsDeamon][Running/System Start]
  101.   <\??\D:\Program Files\JiangMin\AntiVirus\BsDeamon.sys>
  102. [Microsoft UAA Function Driver for High Definition Audio Service / HdAudAddService][Running/Manual Start]
  103.   
  104. [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
  105.   
  106. [HSFHWAZL / HSFHWAZL][Running/Manual Start]
  107.   
  108. [HSF_DPV / HSF_DPV][Running/Manual Start]
  109.   
  110. [ialm / ialm][Running/Manual Start]
  111.   
  112. [KAVBootC / KAVBootC][Running/Boot Start]
  113.   <\SystemRoot\system32\Drivers\KAVBootC.sys>
  114. [KRegEx / KRegEx][Running/Auto Start]
  115.   <\??\D:\Program Files\JiangMin\antivirus\KRegEx.sys>
  116. [Jiangmin Antivirus Software - SysCall Services / KSysCall][Running/System Start]
  117.   <\??\D:\Program Files\JiangMin\common\KSysCall.sys>
  118. [KVFileGuard From Jiangmin / KVFileGuard][Running/Manual Start]
  119.   <\??\D:\Program Files\JiangMin\AntiVirus\KVfg.sys>
  120. [mdmxsdk / mdmxsdk][Running/Auto Start]
  121.   
  122. [mp110001 / mp110001][Running/Auto Start]
  123.   
  124. [mp110002 / mp110002][Stopped/Auto Start]
  125.   
  126. [mp110003 / mp110003][Running/Boot Start]
  127.   <\SystemRoot\system32\drivers\mp110003.sys>
  128. [mp110004 / mp110004][Running/Auto Start]
  129.   
  130. [mp110005 / mp110005][Running/Manual Start]
  131.   
  132. [mp110006 / mp110006][Running/System Start]
  133.   
  134. [mp110007 / mp110007][Running/System Start]
  135.   
  136. [mp110008 / mp110008][Running/Auto Start]
  137.   
  138. [mp110009 / mp110009][Running/System Start]
  139.   
  140. [mp110010 / mp110010][Running/Boot Start]
  141.   <\SystemRoot\system32\drivers\mp110010.sys>
  142. [mp110011 / mp110011][Stopped/System Start]
  143.   
  144. [mp110012 / mp110012][Stopped/Manual Start]
  145.   
  146. [mp110013 / mp110013][Running/Boot Start]
  147.   <\SystemRoot\system32\drivers\mp110013.sys>
  148. [PC-CDMA Serial port driver / oxser][Running/System Start]
  149.   
  150. [PnpWmkDrv / PnpWmkDrv][Running/System Start]
  151.   <\??\C:\WINDOWS\system32\drivers\PnpWmkDrv.sys>
  152. [Powertweak NT helper / Powert][Stopped/Auto Start]
  153.   <\??\F:\TAOMEN~2\优化软件\POWERT~1.02R\pt202-1\pt202-1\powert2k.sys>
  154. [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  155.   
  156. [Secdrv / Secdrv][Stopped/Manual Start]
  157.   
  158. [ssmdrv / ssmdrv][Running/System Start]
  159.   
  160. [Jiangmin AntiVirus Software - System Guard / SysGuard][Running/Boot Start]
  161.   <\SystemRoot\system32\Drivers\SysGuard.sys>
  162. [tifm21 / tifm21][Running/Manual Start]
  163.   
  164. [Conexant Setup API / UIUSys][Stopped/Manual Start]
  165.   
  166. [Virtual CD-ROM Device Driver / vcdrom][Running/System Start]
  167.   <\??\E:\WinPE纯净硬盘版配合微软虚拟光驱，再不用刻盘装系统了\微软虚拟光驱18K\微软虚拟光驱\虚拟光驱\VCdRom.sys>
  168. [winachsf / winachsf][Running/Manual Start]
  169.   

  171. ==================================
  172. 浏览器加载项
  173. [ThunderAtOnce Class]
  174.   {01443AEC-0FD1-40fd-9C87-E93D1494C233}
  175. [IeCatch5 Class]
  176.   {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}
  177. [BrowseHelper Class]
  178.   {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9}
  179. [Thunder Browser Helper]
  180.   {889D2FEB-5411-4565-8998-1DD2C5261283}
  181. [RegisterHelper Class]
  182.   {FF354A24-B490-4D4F-8EEC-B3ACD6E681A4}
  183. [FlashGet]
  184.   {D6E814A0-E0C5-11d4-8D29-0050BA6940E3}
  185. [江民杀毒工具栏]
  186.   {B5A34A93-D538-43A7-8371-864CB6148D12}
  187. [DrvCert Class]
  188.   {2FD68643-4BCE-4EF5-B7B8-F0F1192FDE86}
  189. [InputPassWd Class]
  190.   {3A4C8311-C151-4462-BDE9-F777ABEE0063}
  191. [WUWebControl Class]
  192.   {6414512B-B978-451D-A0D8-FCFDF33E833C}
  193. [MUWebControl Class]
  194.   {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
  195. [ThunderAtOnce Class]
  196.   {01443AEC-0FD1-40FD-9C87-E93D1494C233}
  197. [Windows Genuine Advantage Validation Tool]
  198.   {17492023-C23A-453E-A040-C7C580BBF700}
  199. [XML DOM Document]
  200.   {2933BF90-7B36-11D2-B20E-00C04F983E60}
  201. [DrvCert Class]
  202.   {2FD68643-4BCE-4EF5-B7B8-F0F1192FDE86}
  203. [Thunder Agent Class]
  204.   {485463B7-8FB2-4B3B-B29B-8B919B0EACCE}
  205. [DrvINFReader Class]
  206.   {631AC624-4EA0-49AB-ABD7-64409592AE15}
  207. [WUWebControl Class]
  208.   {6414512B-B978-451D-A0D8-FCFDF33E833C}
  209. [MUWebControl Class]
  210.   {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
  211. [BrowseHelper Class]
  212.   {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9}
  213. [360SafeLive]
  214.   {87515F61-A66C-4319-A0E0-D416CB8059E3}
  215. [Microsoft Web Browser]
  216.   {8856F961-340A-11D0-A96B-00C04FD705A2}
  217. [Thunder Browser Helper]
  218.   {889D2FEB-5411-4565-8998-1DD2C5261283}
  219. [DrvInst Class]
  220.   {9222E48D-8985-4BE2-B9DB-EBE734CBE7B5}
  221. [江民杀毒工具栏]
  222.   {B5A34A93-D538-43A7-8371-864CB6148D12}
  223. [Shockwave Flash Object]
  224.   {D27CDB6E-AE6D-11CF-96B8-444553540000}
  225. [XML HTTP Request]
  226.   {ED8C108E-4349-11D2-91A4-00C04F7969E8}
  227. [XML DOM Document 3.0]
  228.   {F5078F32-C551-11D3-89B9-0000F81FE221}
  229. [XML HTTP 3.0]
  230.   {F5078F35-C551-11D3-89B9-0000F81FE221}
  231. [XML HTTP]
  232.   {F6D90F16-9C73-11D3-B32E-00C04F990BB4}
  233. [RegisterHelper Class]
  234.   {FF354A24-B490-4D4F-8EEC-B3ACD6E681A4}
  235. [使用 IDM 下载]
  236.   <54A24-B490-4D4F-8EEC-B3ACD6E681A4}, N/A>
  237. [使用 IDM 下载所有链接]
  238.   <, N/A>
  239. [使用 IDM 下载视频内容]
  240.   <, N/A>
  241. [使用网际快车下载]
  242.   
  243. [使用网际快车下载全部链接]
  244.   
  245. [使用迅雷下载]
  246.   
  247. [使用迅雷下载全部链接]
  248.   

  250. ==================================
  251. 正在运行的进程
  252. [PID: 444 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  253. [PID: 808 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  254. [PID: 836 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  255.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  256. [PID: 884 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  257. [PID: 896 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  258. [PID: 1108 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  259.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  260. [PID: 1292 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  261.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  262. [PID: 1584 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  263.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  264. [PID: 1800 / wuliu][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
  265.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]
  266.     [F:\TaoMengLiang\重装系统首要必装软件\WinRAR 绿色版\winrar卡饭专用版\rarext.dll]  [N/A, ]
  267.     [F:\TaoMengLiang\杀毒软件\木马流氓软件查杀\unlocker\Unlocker[1].v1.7.8.中文免安装版\强行解锁删除软件专家Unlocker.v1.7.8.中文免安装版\UnlockerCOM.dll]  [N/A, ]
  268.     [D:\Program Files\JiangMin\AntiVirus\KVshell.dll]  [Jiangmin Co.Ltd, 2, 0, 7, 1018]
  269.     [C:\WINDOWS\system32\HiveBase.dll]  [Jiangmin Co., Ltd., 1, 0, 7, 717]
  270.     [C:\WINDOWS\system32\kvinstall.dll]  [Jiangmin Co.,Ltd, 2, 0, 7, 831]
  271.     [D:\Program Files\JiangMin\AntiVirus\lang\KvXP0804.lng]  [N/A, ]
  272.     [F:\DrWeb\drwsxtn.dll]  [Doctor Web, Ltd., 4, 44, 0, 8080]
  273. [PID: 1972 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  274. [PID: 1992 / LOCAL SERVICE][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
  275. [PID: 2040 / SYSTEM][D:\Program Files\UPHClean\uphclean.exe]  [Microsoft Corporation, 1.5.5.21]
  276. [PID: 1612 / wuliu][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
  277. [PID: 484 / wuliu][M:\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
  278.     [M:\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
  279.     [d:\Program Files\Micropoint\mp110031.dll]  [Micropoint Corporation, 1.2.10043]

  281. ==================================
  282. 文件关联
  283. .TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
  284. .EXE  OK. ["%1" %*]
  285. .COM  OK. ["%1" %*]
  286. .PIF  OK. ["%1" %*]
  287. .REG  OK. [regedit.exe "%1"]
  288. .BAT  OK. ["%1" %*]
  289. .SCR  OK. ["%1" /S]
  290. .CHM  OK. ["C:\WINDOWS\hh.exe" %1]
  291. .HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
  292. .INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  293. .INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
  294. .VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  295. .JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
  296. .LNK  OK. [{00021401-0000-0000-C000-000000000046}]

  298. ==================================
  299. Winsock 提供者
  300. N/A

  302. ==================================
  303. Autorun.inf
  304. N/A

  306. ==================================
  307. HOSTS 文件
  308. 127.0.0.1       localhost
  309. 127.0.0.1        registeridm.com
  310. 127.0.0.1        www.internetdownloadmanager.com
  311. 127.0.0.1        internetdownloadmanager.com
  312. 127.0.0.1        www.registeridm.com
  313. 127.0.0.1        secure.registeridm.com
  314. 127.0.0.1        secure.internetdownloadmanager.com
  315. 127.0.0.1        mirror.internetdownloadmanager.com
  316. 127.0.0.1        mirror2.internetdownloadmanager.com
  317. 127.0.0.1        mirror3.internetdownloadmanager.com
  318. 127.0.0.1        www.tonec.com
  319. 127.0.0.1        tonec.com
  320. 127.0.0.1        207.44.199.159
  321. 127.0.0.1        207.44.199.16

  323. ==================================
  324. 进程特权扫描
  325. N/A

  327. ==================================
  328. API HOOK
  329. N/A

  331. ==================================
  332. 隐藏进程
  333. N/A

  335. ==================================
复制代码
回复

举报

dujie7023
发表于 2008-3-10 19:59:48 | 显示全部楼层
你中奖了。。。。
换个杀毒试试   pe系统下杀毒
回复

举报

踏雪飞鸿
 楼主| 发表于 2008-3-11 09:29:55 | 显示全部楼层
原帖由 dujie7023 于 2008-3-10 19:59 发表
你中奖了。。。。
换个杀毒试试   pe系统下杀毒




请教一下高手，PE下如何杀毒呀？麻烦你 详细说说吧，谢谢了
回复

举报

踏雪飞鸿
 楼主| 发表于 2008-3-11 17:32:14 | 显示全部楼层
？？？？？？？没有回答呀？
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-13 11:31 , Processed in 0.171688 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表