笔记本有时无法显示桌面，帮帮忙吧，附日志。 bbs.ikaka.com

azhuo - 2007-4-16 10:17:00

[CODE]

2007-04-16,09:22:15

System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed

Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Winsock Provider
Autorun.Inf
HOSTS File

Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
<MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background> [(Verified)Microsoft Corporation]
<Skype><"C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized> [(Verified)Skype Technologies SA]
<swg><C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe> [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
<run><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<HControl><C:\WINDOWS\ATK0100\HControl.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<pdfFactory Pro Dispatcher v3><"C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe" /source=HKLM> [FinePrint Software, LLC]
<NeroFilterCheck><; rem C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Sebring]
<WinlogonNotify: Sebring><c:\WINDOWS\system32\LgNotify.dll> [Intel Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
<WinlogonNotify: WgaLogon><WgaLogon.dll> [Microsoft Corporation]

==================================
Startup Folders
N/A

==================================
Services
[Application Management / AppMgmt][Stopped/Manual Start]
<C:\WINDOWS\system32\svchost.exe -k netsvcs-->%SystemRoot%\System32\appmgmts.dll><N/A>
[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
<C:\WINDOWS\system32\Ati2evxx.exe><>
[ATK Keyboard Service / ATKKeyboardService][Running/Auto Start]
<C:\WINDOWS\ATKKBService.exe><ASUSTeK COMPUTER INC.>
[C-DillaCdaC11BA / C-DillaCdaC11BA][Running/Auto Start]
<C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision>
[Cd2mg94uch / Cd2mg94uch][Stopped/Disabled]
<><N/A>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[pdfFactory Pro Dispatcher v3 / pdfFactory Pro Dispatcher v3][Running/Auto Start]
<"C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe" /service><FinePrint Software, LLC>
[RegSrvc / RegSrvc][Running/Auto Start]
<C:\WINDOWS\system32\RegSrvc.exe><Intel Corporation>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
<"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
<"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Spectrum24 Event Monitor / S24EventMonitor][Running/Auto Start]
<C:\WINDOWS\system32\S24EvMon.exe><Intel Corporation>

==================================
Drivers
[AEGIS Protocol (IEEE 802.1x) v3.0.0.7 / AegisP][Running/Auto Start]
<system32\DRIVERS\AegisP.sys><Meetinghouse Data Communications>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Enhanced Display Driver Helper Service / asuskbnt][Running/System Start]
<system32\drivers\atkkbnt.sys><ASUSTeK COMPUTER INC.>
[ati2mtag / ati2mtag][Running/Manual Start]
<system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
<System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[BisonCam, USB2.0 / Cam5603C][Running/Manual Start]
<System32\Drivers\Bs350u2.sys><Bison Electronics. Inc.>
[CdaC15BA / CdaC15BA][Running/Auto Start]
<\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS><Macrovision Europe Ltd>
[ExpScaner / ExpScaner][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[HOOKAPI / HOOKAPI][Stopped/Manual Start]
<\??\C:\PROGRAM FILES\RISING\RAV\HookApi.Sys><风琍?ンΤそ>
[HookCont / HookCont][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[HSFHWICH / HSFHWICH][Running/Manual Start]
<system32\DRIVERS\HSFHWICH.sys><Conexant Systems, Inc.>
[HSF_DP / HSF_DP][Running/Manual Start]
<system32\DRIVERS\HSF_DP.sys><Conexant Systems, Inc.>
[mdmxsdk / mdmxsdk][Running/Auto Start]
<system32\DRIVERS\mdmxsdk.sys><Conexant>
[MEMSCAN / MEMSCAN][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><风琍?ンΤそ>
[ATK0100 ACPI UTILITY / MTsensor][Running/Manual Start]
<system32\DRIVERS\ATKACPI.sys><>
[pgvbnqdm / pgvbnqdm][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\pgvbnqdm.sys><Yahoo! China Corporation>
[钡キ︽硈钡梆硈挡臱笆祘Α / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
<\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Ricoh MediaCard Driver / rmedia][Stopped/Boot Start]
<\SystemRoot\system32\DRIVERS\rmedia.sys><REDC>
[RsNTGDI / RsNTGDI][Running/Boot Start]
<\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
<\??\C:\Program Files\Rising\Rav\RSPPSYS.sys><Rising>
[Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver / RTL8023xp][Running/Manual Start]
<system32\DRIVERS\Rtlnicxp.sys><Realtek Semiconductor Corporation>
[WLAN Transport / s24trans][Running/Auto Start]
<system32\DRIVERS\s24trans.sys><Intel Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1][Stopped/Manual Start]
<system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[Synaptics TouchPad Driver / SynTP][Running/Manual Start]
<system32\DRIVERS\SynTP.sys><Synaptics, Inc.>
[ASUS Video3D Service / Video3D][Running/Manual Start]
<System32\Drivers\Video3D.sys><ASUSTeK COMPUTER INC.>
[Windows XP  Intel(R) PRO/Wireless 2200 Adapter 臱笆祘Α / w22n51][Stopped/Manual Start]
<system32\DRIVERS\w22n51.sys><IntelR Corporation>
[winachsf / winachsf][Running/Manual Start]
<system32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>
[夹非筿肚锣絏竟 / WSTCODEC][Stopped/Manual Start]
<system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[yaskp / yaskp][Stopped/Boot Start]
<\SystemRoot\system32\drivers\yaskp.sys><N/A>

==================================
Browser Add-ons
[も诀祏獺]
{00000000-0000-0001-0001-596BAEDD1289} <http://sms.3721.com/ie/index.htm, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Dr.eye WebPage Translation]
{92B255FE-94E2-4BCA-958D-3926CE38913F} <C:\PROGRA~1\Inventec\Dreye\DreyeMT\DREYEI~1.DLL, >
[MessengerStatsClient Class]
{14B87622-7E19-4EA8-93B3-97215F77A6BC} <C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll, Microsoft Corporation>
[ERADMStart.StartControl]
{35DC0C9A-C471-4910-8724-BA5514967E2F} <C:\WINDOWS\Downloaded Program Files\bbstart.ocx, ERADM>
[MessengerStatsClient Class]
{8E0D4DE5-3180-4024-A327-4DFAD1796A8D} <C:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll, Microsoft Corporation>
[MsnMessengerSetupDownloadControl Class]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} <C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx, Microsoft Corporation>
[ZoneIntro Class]
{B8BE5E93-A60C-4D26-A2DC-220313175592} <C:\WINDOWS\Downloaded Program Files\Zintro.ocx, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[HtmlDlgSafeHelper Class]
{3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation>
[Microsoft Shell UI Helper]
{64AB4BB7-111E-11D1-8F79-00C04FC2FBE1} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Active Desktop Mover]
{72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[Dr.eye WebPage Translation]
{92B255FE-94E2-4BCA-958D-3926CE38913F} <C:\PROGRA~1\Inventec\Dreye\DreyeMT\DREYEI~1.DLL, >
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[蹲 Microsoft Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A>
[穝玡春ま夹乓い秨币]
<res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\zh-tw\msntabres.dll/230?2c9e8d44d67444c29253406e91ebac6a, N/A>
[穝璉春ま夹乓い秨币]
<res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\zh-tw\msntabres.dll/229?2c9e8d44d67444c29253406e91ebac6a, N/A>

azhuo - 2007-4-16 10:17:00

Running Processes
[PID: 700][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 780][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 808][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\WgaLogon.dll] [Microsoft Corporation, 1.5.0554.0]
[c:\WINDOWS\system32\LgNotify.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 392][C:\WINDOWS\system32\ZCfgSvc.exe] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\PfMgrApi.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\PsRegApi.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\WConfig.DLL] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\WiFiAdap.DLL] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\PsGuiMgr.dll] [Intel Corporation., 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\ShellNav.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\C1XStngs.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\LSAWRAPI.dll] [N/A, ]
[c:\Program Files\Intel\PROSetWireless\PROSet\CHT\ZcSvcCHT.dll] [Intel Corporation, 8, 1, 0, 44]
[C:\WINDOWS\system32\S24MUDLL.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\D8021Xps.dll] [N/A, ]
[c:\Program Files\Intel\PROSetWireless\PROSet\CHT\C1XStCHT.dll] [Intel Corporation, 8, 1, 0, 44]
[c:\Program Files\Intel\PROSetWireless\PROSet\CHT\PmApiCHT.dll] [Intel Corporation, 8, 1, 0, 44]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[PID: 1040][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] [Autodesk, 16.0.0.86]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[C:\WINDOWS\system32\od5media.dll] [N/A, ]
[C:\WINDOWS\system32\MSTCIPHA.IME] [Microsoft Corporation, 5.1.0.60]
[C:\Program Files\Common Files\Microsoft Shared\Ink\PENCHT.DLL] [Microsoft Corporation, 1.0.1038.0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Common Files\Microsoft Shared\IME\MSTCIA\Applet\chtskdic.dll] [Microsoft Corporation, 8.0.0.1912]
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[PID: 216][C:\WINDOWS\system32\1XConfig.exe] [Intel, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\IntelAE5.dll] [Meetinghouse Data Communications, 5, 0, 3, 3]
[C:\WINDOWS\system32\PsRegApi.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\D8021Xps.dll] [N/A, ]
[PID: 612][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[PID: 660][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\WINDOWS\system32\SynCOM.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\WINDOWS\system32\SynTPAPI.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[PID: 720][C:\WINDOWS\ATK0100\HControl.exe] [, 1043, 2, 15, 45]
[C:\WINDOWS\ATK0100\CMSSC.dll] [N/A, ]
[C:\WINDOWS\ATK0100\inter_f2.dll] [ATK, 1043, 2, 15, 45]
[C:\WINDOWS\ATK0100\ATKWLIOC.DLL] [ACTIONTEC Electronics,Inc, 2.01.02]
[C:\WINDOWS\ATK0100\SiSPkt.dll] [Silicon Integrated Systems Corp., 1, 0, 0, 45]
[C:\WINDOWS\system32\SbrngAPI.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\PfMgrApi.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\PsRegApi.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\WConfig.DLL] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\WiFiAdap.DLL] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\C1XStngs.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\LSAWRAPI.dll] [N/A, ]
[C:\WINDOWS\system32\S24MUDLL.dll] [Intel Corporation, 8, 1, 0, 47_ITP]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[c:\Program Files\Intel\PROSetWireless\PROSet\CHT\PmApiCHT.dll] [Intel Corporation, 8, 1, 0, 44]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1676][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3208]
[PID: 2416][C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe] [FinePrint Software, LLC, 3.15]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppr332.dll] [FinePrint Software, LLC, 3.15]
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppint3.dll] [FinePrint Software, LLC, 3.15]
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppgraf3.dll] [FinePrint Software, LLC, 3.15]
[PID: 2464][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[PID: 2736][C:\Program Files\Skype\Phone\Skype.exe] [, ]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\od5media.dll] [N/A, ]
[PID: 2900][C:\WINDOWS\ATK0100\ATKOSD.exe] [, 1043, 2, 15, 45]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[PID: 2880][C:\Documents and Settings\asus\\sreng2.4\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\WINDOWS\system32\SynTPFcs.dll] [Synaptics, Inc., 7.12.3 08Oct04]
[C:\WINDOWS\system32\od5media.dll] [N/A, ]

==================================
File Associations
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider
MSAFD Tcpip [TCP/IP]
C:\WINDOWS\system32\od5media.dll(, N/A)
MSAFD Tcpip [RAW/IP]
C:\WINDOWS\system32\od5media.dll(, N/A)

==================================
Autorun.Inf
N/A

==================================
HOSTS File
127.0.0.1 localhost

==================================
API HOOK
N/A

==================================
Hidden Process
N/A

==================================

[/CODE]

瑞星卡卡安全论坛