瑞星卡卡安全论坛

---------------------------------------------------

REGISTRY RECORD

---------------------------------------------------


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
IMJPMIG8.1          ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
PHIME2002ASync          C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
PHIME2002A          C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
hpsysdrv          c:\windows\system\hpsysdrv.exe
HotKeysCmds          C:\WINDOWS\System32\hkcmd.exe
CamMonitor          c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
HPHUPD05          c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
HPHmon05          C:\WINDOWS\System32\hphmon05.exe
KBD          C:\HP\KBD\KBD.EXE
StorageGuard          "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
AutoTKit          C:\hp\bin\AUTOTKIT.EXE
WinCinemaMgr          "C:\Program Files\InterVideo\Common\bin\WinCinemaMgr.exe"
Home Theater SchSvr          "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
Recguard          C:\WINDOWS\SMINST\RECGUARD.EXE
NvCplDaemon          RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
MSPY2002          C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
Sunkist2k          C:\Program Files\Multimedia Card Reader\shwicon2k.exe
PS2          C:\WINDOWS\system32\ps2.exe
Alitalk          C:\PROGRA~1\阿里巴巴\贸易通\AliTalk.EXE -hideframe
Install Alitalk          C:\WINDOWS\temp\alitalk\alitalk.exe -hideframe
WangWang          "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
RfwMain          "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
RavTask          "C:\Program Files\Rising\Rav\RavTask.exe" -system
HDCSP RegCertTool          C:\Program Files\95599 Certificate Tools\CIDC\RegCertTool.exe
TaxKeyManager          C:\Program Files\95599 Certificate Tools\SHANGHAI TAX\TaxKeyManager.exe
nwiz          nwiz.exe /install

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
Current operation system is no this registory path


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
Current operation system is no this registory path


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

HKEY_CLASSES_ROOT\Exefile\shell\open\command
Default          "%1" %*

HKEY_CLASSES_ROOT\Txtfile\shell\open\command
Default          %SystemRoot%\system32\NOTEPAD.EXE %1

---------------------------------------------------

WIN.INI

---------------------------------------------------


AppInit_DLLs=
Beep=yes
BorderWidth=0
CoolSwitch=1
CursorBlinkRate=530
DefaultSeparateVDM=no
DeviceNotSelectedTimeout=15
DoubleClickHeight=4
DoubleClickSpeed=500
DoubleClickWidth=4
DragFullWindows=1
InitialKeyboardIndicators=2
KeyboardDelay=1
KeyboardSpeed=31
LowPowerActive=0
LowPowerTimeOut=0
MouseSpeed=1
MouseThreshold1=6
MouseThreshold2=10
PowerOffActive=0
PowerOffTimeOut=0
ScreenSaveActive=1
ScreenSaveTimeOut=600
SnapToDefaultButton=0
Spooler=yes
swapdisk=
SwapMouseButtons=0
TransmissionRetryTimeout=90
DebugOptions=2048
Documents=
DosPrint=no
NetMessage=no
NullPort=None
Programs=com exe bat pif cmd
load=
run=
Device=hp psc 1100 series,winspool,Ne00:
---------------------------------------------------

SYSTEM.INI

---------------------------------------------------


ScreenSaverIsSecure=0
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
Shell=Explorer.exe
comm.drv=comm.drv
display.drv=vga.drv
drivers=mmsystem.dll
fixedfon.fon=vgafix.fon
fonts.fon=vgasys.fon
keyboard.drv=keyboard.drv
language.dll=
mouse.drv=mouse.drv
network.drv=wfwnet.drv
oemfonts.fon=vgaoem.fon
shell=Explorer.exe
system.drv=system.drv
---------------------------------------------------

WININIT.BAK

---------------------------------------------------


---------------------------------------------------

AUTOEXEC.BAT

---------------------------------------------------



---------------------------------------------------

WININIT.BAT

---------------------------------------------------