应用程序正常初始化失败

显示全部楼层 · 发表于 2011-5-10 18:20:31

开机提示userinit.exe应用程序正常初始化（0xc0000142）失败，不能自动进入桌面，手动运行userinit后正常
通过命令行注册动态链接库时任务管理器中多出数十个regsvr32.exe进程，安装了comodo墙和avast免费版

SREng报告

2011-05-10,17:37:03
System Repair Engineer 2.8.4.1331
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
计划任务
Windows 安全更新检查
API HOOK
隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><D:\WINDOWS.0\system32\ctfmon.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<COMODO Internet Security><"D:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h> [(Verified)Comodo Security Solutions, Inc.]
<KSafeTray><"D:\Program Files\KSafe\KSafeTray.exe" -autorun> [(Verified)Kingsoft Security Co.,Ltd]
<AlcWzrd><ALCWZRD.EXE> [(Verified)Realtek Semiconductor Corp]
<avast><"D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui> [(Verified)AVAST Software]
<VFTray><D:\Program Files\VFree\VFTray.exe> [VirusFree Team.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
<Userinit><D:\WINDOWS.0\system32\userinit.exe,> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs>< D:\WINDOWS.0\system32\guard32.dll> [(Verified)Comodo Security Solutions, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<WebCheck><%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Windows Component Publisher]
<SysTray><D:\WINDOWS.0\system32\stobject.dll> [(Verified)Microsoft Windows Component Publisher]
<UPnPMonitor><D:\WINDOWS.0\system32\upnpui.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
<WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><D:\WINDOWS.0\inf\unregmp2.exe /ShowWMP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS.0\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS.0\INF\wmp.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe> [(Verified)Microsoft Windows Component Publisher]
==================================
启动文件夹
[EyeFoo.exe]
<D:\Documents and Settings\All Users.WINDOWS.0\「开始」菜单\程序\启动\EyeFoo.exe.lnk --> D:\mxf\lvse\EyeFoo\EyeFoo.exe [EyeFoo Software]><N>
[ProcessTamerTray.exe]
<D:\Documents and Settings\All Users.WINDOWS.0\「开始」菜单\程序\启动\ProcessTamerTray.exe.lnk --> D:\mxf\lvse\PROCES~1\PROCES~3.EXE []><N>
[SuperF4.exe]
<D:\Documents and Settings\All Users.WINDOWS.0\「开始」菜单\程序\启动\SuperF4.exe.lnk --> D:\mxf\lvse\SuperF4\SuperF4.exe [Stefan Sundin]><N>
==================================
服务
[Ati External Event Utility / Ati External Event Utility][Stopped/Auto Start]
<D:\WINDOWS.0\system32\Ati2evxx.exe><ATI Technologies Inc.>
[avast! Antivirus / avast! Antivirus][Running/Auto Start]
<"D:\Program Files\AVAST Software\Avast\AvastSvc.exe"><AVAST Software>
[COMODO Internet Security Helper Service / cmdAgent][Running/Auto Start]
<"D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe"><COMODO>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<D:\WINDOWS.0\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[KSafe service / KSafeSvc][Running/Auto Start]
<"D:\Program Files\KSafe\KSafeSvc.exe" -svc><Kingsoft Corporation>
[VirusFree / VirusFree][Stopped/Auto Start]
<D:\Program Files\VFree\VFService.exe><VirusFree Inc.>
[Kingsoft Rescue Service / Kingsoft Rescue Service][Running/Auto Start]
<D:\Program Files\Kingsoft\KSM\ksmsvc.exe><>
==================================
驱动程序
[atikmdag / atikmdag][Stopped/Manual Start]
<system32\DRIVERS\atikmdag.sys><ATI Technologies Inc.>
[COMODO Internet Security Sandbox Driver / cmdGuard][Running/System Start]
<System32\DRIVERS\cmdguard.sys><COMODO>
[COMODO Internet Security Helper Driver / cmdHlp][Running/System Start]
<System32\DRIVERS\cmdhlp.sys><COMODO>
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
<system32\DRIVERS\HDAudBus.sys><Windows (R) Server 2003 DDK provider>
[COMODO Internet Security Firewall Driver / Inspect][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\inspect.sys><COMODO>
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
<system32\drivers\RtkHDAud.sys><Realtek Semiconductor Corp.>
[kmodurl / kmodurl][Running/System Start]
<\??\D:\Program Files\KSafe\kmodurl.sys><Kingsoft Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
<system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[vfbinmon / vfbinmon][Running/Boot Start]
<\SystemRoot\system32\drivers\vfbinmon.sys><VirusFree Team Inc.>
[WMDrive / WMDrive][Running/System Start]
<\??\D:\WINDOWS.0\system32\drivers\WMDrive.sys><WinMount International Inc>
[NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller / yukonwxp][Running/Manual Start]
<system32\DRIVERS\yk51x86.sys><Marvell>
[ksapi / ksapi][Running/Manual Start]
<\??\D:\WINDOWS.0\system32\drivers\ksapi.sys><Kingsoft Corporation>
==================================
浏览器加载项
[VCUrlBHO Class]
{0130DA3D-8D24-4CC2-9C09-D85AC2AAF1AB} <D:\mxf\lvse\miniMule\modules\VCBHO.dll, (Signed) VeryCD.com>
[IE2EMBHO Class]
{0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} <D:\mxf\lvse\miniMule\modules\IE2EM.dll, (Signed) VeryCD.com>
[BitComet Helper]
{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <D:\mxf\lvse\BitComet\tools\BitCometBHO_1.5.4.11.dll, (Signed) BitComet>
[WanWanBrowerHelper Class]
{433FF083-4046-488D-B22F-1782BA0A284C} <D:\mxf\lvse\131玩玩2010\wwcom.dll, (Signed) 深圳市拾三意网络科技有限公司>
[BitComet]
{D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} <, >
[VCUrlBHO Class]
{0130DA3D-8D24-4CC2-9C09-D85AC2AAF1AB} <D:\mxf\lvse\miniMule\modules\VCBHO.dll, (Signed) VeryCD.com>
[IE2EMBHO Class]
{0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} <D:\mxf\lvse\miniMule\modules\IE2EM.dll, (Signed) VeryCD.com>
[BitComet Helper]
{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} <D:\mxf\lvse\BitComet\tools\BitCometBHO_1.5.4.11.dll, (Signed) BitComet>
[WanWanBrowerHelper Class]
{433FF083-4046-488D-B22F-1782BA0A284C} <D:\mxf\lvse\131玩玩2010\wwcom.dll, (Signed) 深圳市拾三意网络科技有限公司>
[QQPYChecker Class]
{5052B4D0-9DF7-45ef-88EF-F42C0EA33A43} <D:\Program Files\Tencent\QQPinyin\4.1.1063.400\QQImeChecker.dll, (Signed) Tencent>
[MUWebControl Class]
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <D:\WINDOWS.0\system32\muweb1.dll, (Signed) Microsoft Corporation>
[]
{CF223950-14DC-4A1D-AEDB-47C356A8B993} <, >
[]
{D18A0B52-D63C-4ED0-AFC6-C1E3DC1AF43A} <, >
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS.0\system32\macromed\flash\Flash.ocx, (Signed) Adobe Systems, Inc.>
[ 使用迷你电驴下载]
<D:\mxf\lvse\miniMule\IE2EM.htm, N/A>
[&使用BitComet下载]
<res://D:\mxf\lvse\BitComet\BitComet.exe/AddLink.htm, N/A>
[&使用BitComet下载全部链接]
<res://D:\mxf\lvse\BitComet\BitComet.exe/AddAllLink.htm, N/A>
==================================
正在运行的进程
[PID: 688][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 756][\??\D:\WINDOWS.0\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 780][\??\D:\WINDOWS.0\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\WINDOWS.0\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 824][D:\WINDOWS.0\system32\services.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[PID: 836][D:\WINDOWS.0\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[PID: 1024][D:\WINDOWS.0\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[PID: 1108][D:\WINDOWS.0\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[PID: 1148][D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe] [COMODO, 5, 3, 176757, 1236]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\COMODO\COMODO Internet Security\Framework.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\COMODO\COMODO Internet Security\scanners\rkdscan.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\COMODO\COMODO Internet Security\platform.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\COMODO\COMODO Internet Security\scanners\common.cav] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\COMODO\COMODO Internet Security\signmgr.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\COMODO\COMODO Internet Security\scanners\fileid.cav] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\COMODO\COMODO Internet Security\scanners\pkann.dll] [COMODO, 5, 3, 175443, 1225]
[D:\Program Files\COMODO\COMODO Internet Security\scanners\mach32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\COMODO\COMODO Internet Security\scanners\white.cav] [COMODO, 5, 3, 174622, 1216]
[PID: 1172][D:\WINDOWS.0\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\WINDOWS.0\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 1244][D:\WINDOWS.0\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[PID: 1356][D:\Program Files\AVAST Software\Avast\AvastSvc.exe] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswCmnBS.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswCmnOS.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswCmnIS.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashBase.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswEngLdr.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\AVAST Software\Avast\2052\Base.dll] [AVAST Software, 6, 0, 999, 0]
[D:\Program Files\AVAST Software\Avast\ashServ.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswAux.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashTask.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashTaskEx.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswLog.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswSqLt.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswProperty.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\Aavm4h.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AavmRpch.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswIdle.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswDld.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AhResBhv.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AhResJs.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AhResMai.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AhResMes.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AhResNS.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AhResP2P.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AhResStd.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AhResWS.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashMaiSv.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashWebSv.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashWsFtr.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\wininet.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\Program Files\AVAST Software\Avast\defs\11051000\aswEngin.dll] [AVAST Software, 6.0.1124.0]
[D:\Program Files\AVAST Software\Avast\defs\11051000\aswCmnOS.dll] [AVAST Software, 6.0.1114.0]
[D:\Program Files\AVAST Software\Avast\defs\11051000\aswCmnIS.dll] [AVAST Software, 6.0.1016.0]
[D:\Program Files\AVAST Software\Avast\defs\11051000\aswCmnBS.dll] [AVAST Software, 6.0.1114.0]
[D:\Program Files\AVAST Software\Avast\defs\11051000\aswScan.dll] [AVAST Software, 6.0.1117.0]
[D:\Program Files\AVAST Software\Avast\defs\11051000\algo.dll] [N/A, ]
[D:\Program Files\AVAST Software\Avast\defs\11051000\arPot.dll] [AVAST Software, 6.0.1085.0]
[D:\Program Files\AVAST Software\Avast\defs\11051000\aswCleanerDLL.dll] [AVAST Software, 1, 0, 212, 0]
[PID: 1852][D:\Program Files\KSafe\KSafeSvc.exe] [Kingsoft Corporation, 2.6.3.1401]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\KSafe\kdump.dll] [Kingsoft Corporation, 2011,03,08,1746]
[D:\Program Files\KSafe\kxebase.dll] [Kingsoft Corporation, 2010,5,12,402]
[D:\Program Files\KSafe\scom.dll] [Kingsoft Corporation, 2010,5,12,402]
[D:\Program Files\KSafe\kxecore\kxecore.dll] [Kingsoft Corporation, 2010,5,12,402]
[D:\Program Files\KSafe\kse\ksbcommsp.dll] [Kingsoft Corporation, 2011,02,14,1702]
[D:\Program Files\KSafe\kexectrl.dll] [Kingsoft Corporation, 2010,09,18,1422]
[D:\Program Files\KSafe\kwssp.dll] [Kingsoft Corporation, 2011.04.21.1401]
[D:\Program Files\KSafe\json.dll] [N/A, ]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\Program Files\KSafe\netstat.dll] [Kingsoft Corporation, 2.6.3.1401]
[D:\Program Files\KSafe\fwproxy.dll] [Kingsoft Corporation, 2.6.3.1401]
[D:\Program Files\KSafe\kse\BKReScan.dll] [Kingsoft Corporation, 2011,03,04,1740]
[D:\Program Files\KSafe\kse\sqlite.dll] [Kingsoft Corporation, 2010,03,30,781]
[D:\Program Files\KSafe\kse\ksbwdet2.dll] [Kingsoft Corporation, 2011,04,28,1920]
[D:\Program Files\KSafe\kse\ksecansp.dll] [Kingsoft Corporation, 2011,04,21,1878]
[D:\Program Files\KSafe\kse\ksecorex.dll] [Kingsoft Corporation, 2011,03,29,1600]
[D:\Program Files\KSafe\KEng\kae\kaecore.dat] [Kingsoft Corporation, 2010,12,16,1454]
[D:\Program Files\KSafe\kse\wfs.dll] [Kingsoft Corporation, 2011,04,20,1616]
[D:\Program Files\KSafe\KEng\kae\karchive.dat] [Kingsoft Corporation, 2010,12,16,1454]
[D:\Program Files\KSafe\KEng\kae\kaearcha.dat] [Kingsoft Corporation, 2010,12,16,1454]
[D:\Program Files\KSafe\KEng\kae\kaeolea.dat] [Kingsoft Corporation, 2010,12,16,1454]
[D:\Program Files\KSafe\KEng\kae\kaearchb.dat] [Kingsoft Corporation, 2011,02,14,1540]
[D:\Program Files\KSafe\KEng\kae\kaeunpak.dat] [Kingsoft Corporation, 2010,06,30,436]
[D:\Program Files\KSafe\KEng\kae\kaeunpack.dat] [Kingsoft Corporation, 2010,07,18,365]
[D:\Program Files\KSafe\KEng\kae\kaecoref.dat] [Kingsoft Corporation, 2010,12,16,1454]
[D:\Program Files\KSafe\KEng\kae\kaecorem.dat] [Kingsoft Corporation, 2010,10,26,1328]
[D:\Program Files\KSafe\KEng\kae\kaecorea.dat] [Kingsoft Corporation, 2010,12,16,1454]
[PID: 2032][D:\WINDOWS.0\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\WINDOWS.0\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
[PID: 732][D:\WINDOWS.0\Explorer.EXE] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\AVAST Software\Avast\ashShell.dll] [AVAST Software, 6.0.1091.0]
[D:\mxf\lvse\winmount\WinMTExt.dll] [WinMount International Inc., 3.4.1015]
[D:\Program Files\KSafe\ksfmon.dll] [Kingsoft Corporation, 2.6.3.1402]
[D:\WINDOWS.0\system32\shdoclc.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 2384][D:\Program Files\COMODO\COMODO Internet Security\cfp.exe] [COMODO, 5, 3, 176757, 1236]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\WINDOWS.0\system32\UXTHEME.DLL] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\Program Files\AVAST Software\Avast\ashShell.dll] [AVAST Software, 6.0.1091.0]
[D:\mxf\lvse\winmount\WinMTExt.dll] [WinMount International Inc., 3.4.1015]
[D:\Program Files\KSafe\ksfmon.dll] [Kingsoft Corporation, 2.6.3.1402]
[D:\WINDOWS.0\system32\QQPINYIN.IME] [Tencent, 4.1.1063.400]
[PID: 2416][D:\Program Files\KSafe\KSafeTray.exe] [Kingsoft Corporation, 2.6.3.1402]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\KSafe\ksfmon.dll] [Kingsoft Corporation, 2.6.3.1402]
[D:\Program Files\KSafe\kdump.dll] [Kingsoft Corporation, 2011,03,08,1746]
[D:\Program Files\KSafe\ksafedb.dll] [Kingsoft Corporation, 2.6.3.1401]
[D:\Program Files\KSafe\krunopt.dll] [Kingsoft Corporation, 2.6.3.1401]
[D:\Program Files\KSafe\kwsctrl.dll] [Kingsoft Corporation, 2.6.3.1401]
[D:\Program Files\KSafe\kse\bkrescan.dll] [Kingsoft Corporation, 2011,03,04,1740]
[D:\Program Files\KSafe\kse\sqlite.dll] [Kingsoft Corporation, 2010,03,30,781]
[D:\Program Files\KSafe\ksafeup.dll] [Kingsoft Corporation, 2.6.3.1401]
[D:\Program Files\KSafe\zlib1.dll] [, 1.2.3]
[D:\Program Files\KSafe\KEng\ksignup.dll] [Kingsoft Corporation, 1.1.0.1401]
[D:\Program Files\KSafe\ksafevul.dll] [Kingsoft Corporation, 2.6.3.1401]
[D:\Program Files\KSafe\kavmgr.dll] [Kingsoft Corporation, 2.6.3.1401]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\Program Files\AVAST Software\Avast\ashShell.dll] [AVAST Software, 6.0.1091.0]
[D:\mxf\lvse\winmount\WinMTExt.dll] [WinMount International Inc., 3.4.1015]
[D:\Program Files\KSafe\KEng\KSGMerge.DLL] [Kingsoft Corporation, 2011,03,25,1594]
[D:\Program Files\KSafe\kplugeng.dll] [Kingsoft Corporation, 2.6.3.1401]
[PID: 2532][D:\Program Files\AVAST Software\Avast\avastUI.exe] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswUtil.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashBase.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswEngLdr.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswCmnOS.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswCmnIS.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswCmnBS.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashTask.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswAux.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswLog.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswSqLt.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\aswProperty.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\Program Files\AVAST Software\Avast\2052\Base.dll] [AVAST Software, 6, 0, 999, 0]
[D:\Program Files\AVAST Software\Avast\aswData.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\ashTaskEx.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\Aavm4h.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\AavmRpch.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\AVAST Software\Avast\2052\UILangRes.dll] [AVAST Software, 6, 0, 999, 0]
[D:\Program Files\AVAST Software\Avast\CommonRes.dll] [AVAST Software, 6.0.1091.0]
[D:\Program Files\KSafe\ksfmon.dll] [Kingsoft Corporation, 2.6.3.1402]
[D:\WINDOWS.0\system32\l3codeca.acm] [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
[D:\Program Files\AVAST Software\Avast\ashShell.dll] [AVAST Software, 6.0.1091.0]
[D:\mxf\lvse\winmount\WinMTExt.dll] [WinMount International Inc., 3.4.1015]
[D:\WINDOWS.0\system32\QQPINYIN.IME] [Tencent, 4.1.1063.400]
[PID: 2568][D:\WINDOWS.0\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105)]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[PID: 2628][D:\mxf\lvse\EyeFoo\EyeFoo.exe] [EyeFoo Software, 2, 98, 11, 0]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\mxf\lvse\EyeFoo\Factory.dll] [EyeFoo Software, 1.0.0.3]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\Program Files\KSafe\ksfmon.dll] [Kingsoft Corporation, 2.6.3.1402]
[D:\WINDOWS.0\system32\quartz.dll] [Microsoft Corporation, 6.05.2600.5596]
[D:\WINDOWS.0\system32\msdmo.dll] [, ]
[D:\mxf\lvse\EyeFoo\efLock.dll] [N/A, ]
[PID: 2636][D:\mxf\lvse\ProcessTamer\ProcessTamerTray.exe] [, 1, 0, 0, 1]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[PID: 2660][D:\mxf\lvse\SuperF4\SuperF4.exe] [Stefan Sundin, 1.1]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\WININET.DLL] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\KSafe\ksfmon.dll] [Kingsoft Corporation, 2.6.3.1402]
[PID: 1504][D:\Program Files\Tencent\QQPinyin\4.1.1063.400\QQPYClipboard.exe] [Tencent, 4.1.1063.400]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\KSafe\ksfmon.dll] [Kingsoft Corporation, 2.6.3.1402]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[PID: 3656][D:\Program Files\Kingsoft\KSM\ksmsvc.exe] [, 2010,10,27,1479]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\guard32.dll] [COMODO, 5, 3, 174622, 1216]
[D:\Program Files\Kingsoft\KSM\kdump.dll] [Kingsoft Corporation, 2010,10,11,1453]
[D:\Program Files\Kingsoft\KSM\kxestat.dll] [Kingsoft Corporation, 2009,11,20,309]
[D:\Program Files\kingsoft\KSM\kxebase.dll] [Kingsoft Corporation, 2009,11,20,309]
[D:\Program Files\kingsoft\KSM\scom.dll] [Kingsoft Corporation, 2009,11,20,309]
[D:\Program Files\kingsoft\KSM\kxecore\kxelog.dll] [Kingsoft Corporation, 2009,11,20,309]
[D:\Program Files\kingsoft\KSM\kxecore\kxecore.dll] [Kingsoft Corporation, 2010,5,12,402]
[D:\Program Files\kingsoft\KSM\kxecore\kxestat.dll] [Kingsoft Corporation, 2009,11,20,309]
[D:\Program Files\Kingsoft\KSM\ksmcorex.dll] [Kingsoft Corporation, 2011,05,06,1940]
[D:\Program Files\Kingsoft\KSM\ksapi.dll] [Kingsoft Corporation, 2011,05,04,30]
[D:\Program Files\Kingsoft\KSM\ksmbrfix.dll] [Kingsoft Corporation, 2010,09,13,1403]
[D:\Program Files\Kingsoft\KSM\ksbwsspx.dll] [Kingsoft Corporation, 2010,05,27,1072]
[D:\Program Files\Kingsoft\KSM\sqlite.dll] [N/A, ]
[D:\Program Files\Kingsoft\KSM\ksecorex.dll] [Kingsoft Corporation, 2011,05,04,1633]
[D:\Program Files\Kingsoft\KSM\COMRes.dll] [Microsoft Corporation, 2001.12.4414.258]
[D:\Program Files\Kingsoft\KSM\kae\kaecore.dat] [Kingsoft Corporation, 2010,12,28,110]
[D:\Program Files\Kingsoft\KSM\khandler.dll] [Kingsoft Corporation, 2011,04,08,1844]
[D:\Program Files\Kingsoft\KSM\ksreng3.dll] [Kingsoft Corporation, 2011,05,05,1938]
[D:\Program Files\Kingsoft\KSM\kcldrep.dll] [Kingsoft Corporation, 2011,04,25,1905]
[D:\Program Files\Kingsoft\KSM\ksbwdet2.dll] [Kingsoft Corporation, 2011,04,28,1920]
[D:\Program Files\Kingsoft\KSM\kavifr.dll] [Kingsoft Corporation, 2010,05,25,74]
[D:\Program Files\Kingsoft\KSM\kae\karchive.dat] [Kingsoft Corporation, 2010,12,28,110]
[D:\Program Files\Kingsoft\KSM\kae\kaearcha.dat] [Kingsoft Corporation, 2010,12,28,110]
[D:\Program Files\Kingsoft\KSM\kae\kaeolea.dat] [Kingsoft Corporation, 2010,12,28,110]
[D:\Program Files\Kingsoft\KSM\kae\kaearchb.dat] [Kingsoft Corporation, 2010,06,30,436]
[D:\Program Files\Kingsoft\KSM\kscanner.dll] [Kingsoft Corporation, 2011,05,04,1936]
[D:\Program Files\Kingsoft\KSM\kplugeng.dll] [Kingsoft Corporation, 2.3.0.1188]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\Program Files\Kingsoft\KSM\report\kinfoc.dll] [Kingsoft Corporation, 2010,12,13,213]
[PID: 3988][D:\mxf\lvse\sreng\SREngLdr.EXE] [Smallfrogs Studio, 2.8.4.1331]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[PID: 2328][D:\mxf\lvse\sreng\SREb6ad46ea.EXE] [Smallfrogs Studio, 2.8.4.1331]
[D:\Program Files\AVAST Software\Avast\snxhk.dll] [AVAST Software, 6.0.1091.0]
[D:\WINDOWS.0\system32\WININET.dll] [Microsoft Corporation, 6.00.2900.5583 (xpsp_sp3_gdr.080417-1430)]
[D:\Program Files\KSafe\ksfmon.dll] [Kingsoft Corporation, 2.6.3.1402]
[D:\WINDOWS.0\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
[D:\WINDOWS.0\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["D:\WINDOWS.0\hh.exe" %1]
.HLP Error. [%SystemRoot%\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS Error. ["%SystemRoot%\System32\WScript.exe" "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 780, D:\WINDOWS.0\SYSTEM32\WINLOGON.EXE]
特殊特权被允许： SeDebugPrivilege [PID = 2628, D:\MXF\LVSE\EYEFOO\EYEFOO.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2628, D:\MXF\LVSE\EYEFOO\EYEFOO.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2636, D:\MXF\LVSE\PROCESSTAMER\PROCESSTAMERTRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2660, D:\MXF\LVSE\SUPERF4\SUPERF4.EXE]
==================================
计划任务
[已启用] KsafeDelay.job
D:\Program Files\KSafe\KSafeTray.exe -delayruncheck
==================================
Windows 安全更新检查
N/A
==================================
API HOOK
入口点错误：ChangeServiceConfigA (危险等级: 高, 被下面模块所HOOK: 0x003F0809)
入口点错误：ChangeServiceConfig2A (危险等级: 高, 被下面模块所HOOK: 0x003F0C11)
入口点错误：ChangeServiceConfigW (危险等级: 高, 被下面模块所HOOK: 0x003F0A0D)
入口点错误：ChangeServiceConfig2W (危险等级: 高, 被下面模块所HOOK: 0x003F0E15)
入口点错误：CreateServiceA (危险等级: 高, 被下面模块所HOOK: 0x003F01FD)
入口点错误：CreateServiceW (危险等级: 高, 被下面模块所HOOK: 0x003F0401)
入口点错误：DeleteService (危险等级: 高, 被下面模块所HOOK: 0x003F0605)
入口点错误：LoadLibraryExW (危险等级: 高, 被下面模块所HOOK: 0x00EF02F1)
入口点错误：CreateProcessA (危险等级: 高, 被下面模块所HOOK: 0x00E902F1)
入口点错误：CreateProcessW (危险等级: 高, 被下面模块所HOOK: 0x00EC02F1)
入口点错误：SetWindowsHookExA (危险等级: 高, 被下面模块所HOOK: 0x003E0605)
入口点错误：SetWindowsHookExW (危险等级: 高, 被下面模块所HOOK: 0x003E0809)
入口点错误：UnhookWindowsHookEx (危险等级: 高, 被下面模块所HOOK: 0x003E0A0D)
==================================
隐藏进程
N/A
==================================

复制代码

显示全部楼层 · 发表于 2011-5-31 14:13:45

中了机器狗病毒。

显示全部楼层 · 发表于 2011-5-31 15:07:18

建议将文件用RAR打包上传

[已解决] 应用程序正常初始化失败

浏览过的版块