- 2007-02-12,23:18:06
- System Repair Engineer 2.3.13.690
- Smallfrogs (http://www.KZTechs.com)
- Windows XP Professional Service Pack 2 (Build 2600)
- - 管理权限用户 - 完整功能
- 以下内容被选中:
- 所有的启动项目(包括注册表、启动文件夹、服务等)
- 浏览器加载项
- 正在运行的进程(包括进程模块信息)
- 文件关联
- Winsock 提供者
- Autorun.inf
- HOSTS 文件
- 启动项目
- 注册表
- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
- <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
- <SystemTray><systray.exe> [(Verified)Microsoft Corporation]
- <!AVG Anti-Spyware><"D:\AVG\avgas.exe" /minimized> [Anti-Malware Development a.s.]
- <AVP><"D:\KAV\avp.exe"> [Kaspersky Lab]
- <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
- <Outpost Firewall><D:\Outpost Firewall\outpost.exe /waitservice> [Agnitum Ltd.]
- <OutpostFeedBack><d:\Outpost Firewall\feedback.exe /dump:os_startup> [Agnitum Ltd.]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
- <shell><Explorer.exe> [(Verified)Microsoft Corporation]
- <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation]
- <UIHost><logonui.exe> [(Verified)Microsoft Corporation]
- ==================================
- 启动文件夹
- [XDICT]
- <C:\Documents and Settings\Liene Lucifer\「开始」菜单\程序\启动\XDICT.lnk --> D:\POWERW~1\XDICT.EXE [Kingsoft Co, Ltd.]><N>
- ==================================
- 服务
- [ASP.NET State Service / aspnet_state][Stopped/Manual Start]
- <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
- [AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start]
- <d:\AVG\guard.exe><Anti-Malware Development a.s.>
- [Kaspersky Anti-Virus 6.0 / AVP][Running/Auto Start]
- <D:\KAV\avp.exe -r><Kaspersky Lab>
- [Human Interface Device Access / HidServ][Stopped/Disabled]
- <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
- [InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
- <"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
- [kavsvc / kavsvc][Stopped/Auto Start]
- <><N/A>
- [NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
- <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
- [Outpost Firewall Service / OutpostFirewall][Running/Auto Start]
- <d:\Outpost Firewall\outpost.exe /service><Agnitum Ltd.>
- [StarWind iSCSI Service / StarWindService][Running/Auto Start]
- <d:\Alcohol 120\StarWind\StarWindService.exe><Rocket Division Software>
- ==================================
- 驱动程序
- [Outpost Firewall PlugIn (ADBLOCK.DLL) / ADBLOCK.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\ADBLOCK.DLL><Agnitum Ltd.>
- [Service for WDM 3D Audio Driver / ALCXSENS][Running/Manual Start]
- <system32\drivers\ALCXSENS.SYS><Sensaura Ltd>
- [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
- <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
- [Outpost Firewall PlugIn (ARP.DLL) / ARP.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\ARP.DLL><Agnitum Ltd.>
- [AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start]
- <\??\d:\AVG\guard.sys><N/A>
- [AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
- <System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
- [Cardex / Cardex][Stopped/Manual Start]
- <\??\C:\WINDOWS\system32\drivers\TBPANEL.SYS><Windows (R) 2000 DDK provider>
- [Outpost Firewall PlugIn (CONTENT.DLL) / CONTENT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\CONTENT.DLL><Agnitum Ltd.>
- [Outpost Firewall PlugIn (DNSCACHE.DLL) / DNSCACHE.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\DNSCACHE.DLL><Agnitum Ltd.>
- [dtscsi / dtscsi][Stopped/Manual Start]
- <\SystemRoot\System32\Drivers\dtscsi.sys><DT Soft Ltd.>
- [3Com EtherLink XL 90XB/C Adapter Driver / EL90XBC][Running/Manual Start]
- <system32\DRIVERS\el90xbc5.sys><3Com Corporation>
- [Outpost Firewall PlugIn (FTPFILT.DLL) / FTPFILT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\FTPFILT.DLL><Agnitum Ltd.>
- [Outpost Firewall PlugIn (HTMLFILT.DLL) / HTMLFILT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\HTMLFILT.DLL><Agnitum Ltd.>
- [Outpost Firewall PlugIn (HTTPFILT.DLL) / HTTPFILT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\HTTPFILT.DLL><Agnitum Ltd.>
- [Outpost Firewall PlugIn (IMAPFILT.DLL) / IMAPFILT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\IMAPFILT.DLL><Agnitum Ltd.>
- [kl1 / kl1][Running/Boot Start]
- <\SystemRoot\System32\Drivers\kl1.sys><Kaspersky Lab>
- [Klick / Klick][Running/Boot Start]
- <\SystemRoot\System32\drivers\klick.sys><Kaspersky Lab>
- [KLIF / KLIF][Running/Manual Start]
- <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
- [Klin / Klin][Running/Boot Start]
- <\SystemRoot\System32\drivers\klin.sys><Kaspersky Lab>
- [Klmc / Klmc][Running/System Start]
- <System32\drivers\klmc.sys><Kaspersky Lab>
- [Outpost Firewall PlugIn (MAILFILT.DLL) / MAILFILT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\MAILFILT.DLL><Agnitum Ltd.>
- [New0 / New0][Running/Auto Start]
- <\??\C:\WINDOWS\system32\new.sys><N/A>
- [Outpost Firewall PlugIn (NNTPFILT.DLL) / NNTPFILT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\NNTPFILT.DLL><Agnitum Ltd.>
- [npkcrypt / npkcrypt][Running/Auto Start]
- <\??\D:\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
- [nv / nv][Running/Manual Start]
- <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
- [Motorola USB Device / P2k][Stopped/Manual Start]
- <system32\DRIVERS\P2k.sys><Motorola Inc>
- [Outpost Firewall PlugIn (POP3FILT.DLL) / POP3FILT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\POP3FILT.DLL><Agnitum Ltd.>
- [StarForce Protection Environment Driver v6 / prodrv06][Running/System Start]
- <\SystemRoot\System32\drivers\prodrv06.sys><Protection Technology>
- [StarForce Protection Helper Driver v2 / prohlp02][Running/Boot Start]
- <\SystemRoot\System32\drivers\prohlp02.sys><Protection Technology>
- [StarForce Protection Synchronization Driver v1 / prosync1][Running/Boot Start]
- <\SystemRoot\System32\drivers\prosync1.sys><Protection Technology>
- [Outpost Firewall PlugIn (PROTECT.DLL) / PROTECT.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\PROTECT.DLL><Agnitum Ltd.>
- [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
- <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
- [PxHelp20 / PxHelp20][Running/Boot Start]
- <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
- [QuakeDRV / QuakeDRV][Stopped/Boot Start]
- <\SystemRoot\system32\DRIVERS\quakedrv.sys><N/A>
- [Outpost Firewall Sandbox Driver / SandBox][Running/System Start]
- <\??\d:\Outpost Firewall\kernel\Sandbox.SYS><Agnitum Ltd.>
- [Secdrv / Secdrv][Running/Auto Start]
- <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
- [Outpost Firewall PlugIn (SECRET.DLL) / SECRET.DLL][Running/Manual Start]
- <\??\d:\Outpost Firewall\kernel\SECRET.DLL><Agnitum Ltd.>
- [StarForce Cure Driver (version 1.x) / sfcure01][Stopped/Manual Start]
- <System32\drivers\sfcure01.sys><N/A>
- [StarForce Protection Environment Driver (version 1.x) / sfdrv01][Running/Boot Start]
- <\SystemRoot\System32\drivers\sfdrv01.sys><Protection Technology>
- [StarForce Protection Helper Driver / sfhlp01][Running/Boot Start]
- <\SystemRoot\System32\drivers\sfhlp01.sys><Protection Technology>
- [StarForce Protection Helper Driver (version 2.x) / sfhlp02][Running/Boot Start]
- <\SystemRoot\System32\drivers\sfhlp02.sys><Protection Technology>
- [StarForce Protection Synchronization Driver (version 2.x) / sfsync02][Running/Boot Start]
- <\SystemRoot\System32\drivers\sfsync02.sys><Protection Technology>
- [sptd / sptd][Running/Boot Start]
- <\SystemRoot\System32\Drivers\sptd.sys><N/A>
- [TCP/IP Protocol Driver / Tcpip][Running/System Start]
- <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
- [TSP / TSP][Stopped/Manual Start]
- <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
- [USB Web Camera / USBZC0301][Stopped/Manual Start]
- <System32\Drivers\usbcam.sys><ZSMC>
- [vaxscsi / vaxscsi][Running/Manual Start]
- <\SystemRoot\System32\Drivers\vaxscsi.sys><N/A>
- [VCD VNC Virtual Network Adapter / vcddev][Running/Manual Start]
- <system32\DRIVERS\vcdvnic.sys><VNN B.J.>
- [Outpost Firewall Kernel Driver / VFILT][Running/System Start]
- <\??\d:\Outpost Firewall\kernel\FILTNT.SYS><Agnitum Ltd.>
- [World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
- <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
- [Sony Ericsson 520 driver (WDM) / z520bus][Stopped/Manual Start]
- <system32\DRIVERS\z520bus.sys><MCCI>
- [Sony Ericsson 520 USB WMC Modem Filter / z520mdfl][Stopped/Manual Start]
- <system32\DRIVERS\z520mdfl.sys><MCCI>
- [Sony Ericsson 520 USB WMC Modem Drivers / z520mdm][Stopped/Manual Start]
- <system32\DRIVERS\z520mdm.sys><MCCI>
- [Sony Ericsson 520 USB WMC Device Management Drivers / z520mgmt][Stopped/Manual Start]
- <system32\DRIVERS\z520mgmt.sys><MCCI>
- [Sony Ericsson 520 USB WMC OBEX Interface Drivers / z520obex][Stopped/Manual Start]
- <system32\DRIVERS\z520obex.sys><MCCI>
- [VIMICRO USB PC Camera / ZSMC302][Running/Manual Start]
- <System32\Drivers\usbVM31b.sys><VM>
- ==================================
- 浏览器加载项
- [Outpost Firewall Pro Quick Tune]
- {44627E97-789B-40d4-B5C2-58BD171129A1} <d:\Outpost Firewall\Plugins\BrowserBar\ie_bar.dll, Agnitum Ltd.>
- ==================================
- 正在运行的进程
- [PID: 984][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1152][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1248][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 1412][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1424][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1672][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1744][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1840][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1984][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 2028][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 684][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 940][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 7.0.0.0]
- [PID: 1076][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 1168][D:\AVG\avgas.exe] [Anti-Malware Development a.s., 7, 5, 0, 50]
- [D:\AVG\engine.dll] [Anti-Malware Development a.s., 4, 2, 0, 15]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 1336][D:\Powerword\XDICT.EXE] [Kingsoft Co, Ltd., 9, 0, 0, 1]
- [D:\Powerword\accountactivate.dll] [Kingsoft, 1, 0, 0, 1]
- [D:\Powerword\dicmngr.dll] [Kingsoft, 2, 0, 0, 1]
- [D:\Powerword\doshow.dll] [N/A, N/A]
- [D:\Powerword\itextout.dll] [Kingsoft, 1, 1, 0, 1]
- [D:\Powerword\kpic10.dll] [N/A, N/A]
- [D:\Powerword\ijl11.dll] [Intel Corporation, 1.1.2]
- [D:\Powerword\normgrab.dll] [Kingsoft Co, Ltd., 9, 0, 0, 1]
- [D:\Powerword\tottsengine50.dll] [Kingsoft Corporation, 1, 0, 0, 1]
- [D:\Powerword\xfile.dll] [N/A, N/A]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [D:\Powerword\DBCore10.dll] [Kingsoft Corp., 1, 5, 0, 1]
- [D:\Powerword\XdictGrb.dll] [Kingsoft Co, Ltd., 9, 0, 0, 2]
- [D:\Powerword\KAVPassport.DLL] [Kingsoft Corporation, 2005, 9, 27, 0]
- [D:\KAV\scrchpg.dll] [Kaspersky Lab, 1.0.6.411]
- [D:\KAV\klscav.dll] [Kaspersky Lab, 6.0.1.411]
- [D:\KAV\prremote.dll] [Kaspersky Lab, 6.0.1.411]
- [D:\KAV\prloader.dll] [Kaspersky Lab, 6.0.1.411]
- [D:\KAV\prkernel.ppl] [Kaspersky Lab, 6.0.1.411]
- [d:\kav\params.ppl] [Kaspersky Lab, 6.0.1.411]
- [d:\kav\pxstub.ppl] [Kaspersky Lab, 6.0.1.411]
- [d:\kav\tempfile.ppl] [Kaspersky Lab, 6.0.1.411]
- [PID: 1068][C:\WINDOWS\system32\inetsrv\inetinfo.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 1436][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.9133]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 1388][d:\Outpost Firewall\outpost.exe] [Agnitum Ltd., 4.0.590.7218]
- [d:\Outpost Firewall\engine.dll] [Agnitum Ltd., 4.0.1005.7229]
- [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80.DLL] [Microsoft Corporation, 8.00.50727.42]
- [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.42]
- [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.42]
- [d:\Outpost Firewall\op_utils.dll] [Agnitum Ltd., 4.0.1005.7229]
- [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.42]
- [d:\Outpost Firewall\Plugins\Ads\ad_int.ofp] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\Content\cnt_int.ofp] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\DNS\dns_int.ofp] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\File\file_int.ofp] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\Web\web_int.ofp] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\BrowserBar\op_hdlr.dll] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\op_data.dll] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\netstat.ofp] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\Protect\prot_int.ofp] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\AntiSpyware\sp_ui.ofp] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\op_cmn.dll] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\AntiSpyware\sp_scan.dll] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\zlib.dll] [N/A, 1.2.3]
- [d:\Outpost Firewall\unrar.dll] [N/A, N/A]
- [d:\Outpost Firewall\Plugins\AntiSpyware\sp_cure.dll] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\Plugins\AntiSpyware\sp_mon.dll] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\opst_ui.dll] [Agnitum Ltd., 4.0.1005.7229]
- [d:\Outpost Firewall\op_ctrls.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 1944][C:\WINDOWS\system32\tcpsvcs.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 468][C:\WINDOWS\System32\snmp.exe] [Microsoft Corporation, 5.1.2600.3038 (xpsp_sp2_gdr.061119-2303)]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 1092][d:\Alcohol 120\StarWind\StarWindService.exe] [Rocket Division Software, 2.6.1 Build 0x20050401]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 848][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
- [PID: 2660][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- [PID: 3424][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 2400][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 2968][E:\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
- [d:\Outpost Firewall\wl_hook.dll] [Agnitum Ltd., 4.0.1005.7229]
- ==================================
- 文件关联
- .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .EXE OK. ["%1" %*]
- .COM OK. ["%1" %*]
- .PIF OK. ["%1" %*]
- .REG OK. [regedit.exe "%1"]
- .BAT OK. ["%1" %*]
- .SCR OK. ["%1" /S]
- .CHM OK. ["C:\WINDOWS\hh.exe" %1]
- .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
- .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
- .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
- .LNK OK. [{00021401-0000-0000-C000-000000000046}]
- ==================================
- Winsock 提供者
- N/A
- ==================================
- Autorun.inf
- N/A
- ==================================
- HOSTS 文件
- 127.0.0.1 localhost
- ==================================
- API HOOK
- 警告!System Repair Engineer 提醒
- 你下面的函数内容与预期值不符,他
- 们可能被一些恶意的软件所修改:
- 入口点错误:NtCreateThread
- 入口点错误:NtSetValueKey
- 入口点错误:NtTerminateProcess
- 入口点错误:ZwCreateThread
- 入口点错误:ZwSetValueKey
- 入口点错误:ZwTerminateProcess
- 入口点错误:CreateProcessA
- 入口点错误:CreateProcessW
- 入口点错误:CreateRemoteThread
- ==================================
复制代码 |