版主请看2005-12-06,08:41:49
System Repair Engineer 1.1.0.269
Windows 98 Second Edition
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<run><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RavTimer><C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RavMon><C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SystemTray><systray.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<internat.exe><internat.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Windows木马防火墙><C:\WINDOWS\DESKTOP\FTC\TROJANWALL.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PowerMon><C:\WINDOWS\TEMP\RARSFX0\OK.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
<RavMon><C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
<RsCcenter><C:\PROGRA~1\RISING\RAV\CCENTER.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
<RavMond><C:\PROGRA~1\RISING\RAV\RAVMOND.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>
==================================
启动文件夹
[费尔消息服务]
<C:\WINDOWS\Start Menu\Programs\启动\费尔消息服务.lnk><N>
==================================
服务
==================================
浏览器加载项
[SysMonOCX Control]
<C:\WINDOWS\DOWNLO~1\SYSMON~1.OCX>
[Shockwave Flash
Object]
<C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX>
[Rising Web Scan
Object]
<C:\WINDOWS\DOWNLOADED PROGRAM FILES\OL2005.DLL>
[Ravonline]
<C:\WINDOWS\DOWNLOADED PROGRAM FILES\RSONLINE.DLL>
[&使用迅雷下载]
<C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\geturl.htm>
[&使用迅雷下载全部链接]
<C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\getallurl.htm>
[添加到QQ自定义面板]
<C:\PROGRAM FILES\QQLITE\AddPanel.htm>
[添加到QQ表情]
<C:\PROGRAM FILES\QQLITE\AddEmotion.htm>
[用QQ彩信发送该图片]
<C:\PROGRAM FILES\QQLITE\SendMMS.htm>
[使用网际快车下载]
<C:\下载软件\jc_link.htm>
[使用网际快车下载全部链接]
<C:\下载软件\jc_all.htm>
==================================
正在运行的进程
[PID: 4294966471][C:\WINDOWS\SYSTEM\MPREXE.EXE] <Microsoft Corporation><4.10.1998>
[C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
[C:\PROGRAM FILES\RISING\RAV\PNGDLL.DLL] <Rising><17, 0, 0, 2>
[C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL] <rising><17, 0, 0, 3>
[C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL] <rising><17, 0, 0, 60>
[C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7>
[PID: 4294849155][C:\PROGRAM FILES\RISING\RAV\RAVMON.EXE] <Beijing Rising Technology Co., Ltd.><17, 0, 1, 37>
[C:\PROGRAM FILES\RISING\RAV\RSGUILIB.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 40>
[PID: 4294858943][C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE] <rising><17, 0, 0, 1>
[C:\PROGRAM FILES\RISING\RAV\UNPACKER.DLL] <rising><17, 0, 0, 19>
[C:\PROGRAM FILES\RISING\RAV\SCANEXEC.DLL] <N/A><17, 0, 0, 21>
[C:\PROGRAM FILES\RISING\RAV\SCANSCT.DLL] <rising><17, 0, 0, 31>
[C:\PROGRAM FILES\RISING\RAV\SCANMAC.DLL] <rising><17, 0, 0, 19>
[C:\PROGRAM FILES\RISING\RAV\NVFILE.DLL] <瑞星><17, 0, 0, 13>
[C:\PROGRAM FILES\RISING\RAV\POSTTRT.DLL] <Rising><17, 0, 0, 21>
[C:\PROGRAM FILES\RISING\RAV\SCANEX.DLL] <Rising><17, 0, 0, 33>
[C:\PROGRAM FILES\RISING\RAV\HOOKWEB.DLL] <rising><17, 0, 0, 4>
[C:\PROGRAM FILES\RISING\RAV\REGMON.DLL] < ><17, 0, 0, 12>
[C:\PROGRAM FILES\RISING\RAV\MEMMON.DLL] <北京瑞星><17, 8, 0, 0>
[C:\PROGRAM FILES\RISING\RAV\UNEXE.DLL] <Rising><17, 0, 0, 27>
[C:\PROGRAM FILES\RISING\RAV\ENGINE.DLL] <rising><17, 0, 0, 40>
[C:\PROGRAM FILES\RISING\RAV\SPAMENG.DLL] <><17, 0, 0, 7>
[C:\PROGRAM FILES\RISING\RAV\MAILMON.DLL] < ><17, 0, 0, 9>
[C:\PROGRAM FILES\RISING\RAV\VIRUSLIB.DLL] <Rising><17, 0, 0, 26>
[C:\PROGRAM FILES\RISING\RAV\LIBLOAD.DLL] <Rising><17, 0, 0, 14>
[C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
[C:\PROGRAM FILES\RISING\RAV\SCANNER.DLL] <Rising><17, 0, 0, 43>
[C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL] <rising><17, 0, 0, 60>
[C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7>
[C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL] <rising><17, 0, 0, 3>
[PID: 4294854891][C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE] <Beijing Rising Technology Co., Ltd.><17, 0, 1, 57>
[C:\PROGRAM FILES\RISING\RAV\GUIDLL.DLL] <rising><17, 0, 0, 13>
[C:\PROGRAM FILES\TOSHIBA\SPANWORKS 2000\SPSHLEXT.DLL] <TOSHIBA Corporation><1, 1, 1, 3>
[C:\PROGRAM FILES\WINRAR\RAREXT.DLL] <N/A><N/A>
[C:\PROGRAM FILES\3721\SKE\CONTMENU.DLL] <N/A><N/A>
[C:\WINDOWS\SYSTEM\RAVEXT.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 8>
[C:\WINDOWS\DESKTOP\FTC\COMMENU.DLL] <Fygsoft and Microsoft><2.0.0.0>
[C:\PROGRAM FILES\FILSECLAB\TWISTER\TWSHLEXT.DLL] <FILSECLAB Corp.><1, 0, 1, 935>
[C:\WINDOWS\SYSTEM\DHCPCSVC.DLL] <N/A><N/A>
[C:\WINDOWS\SYSTEM\NETBIOS.DLL] <N/A><N/A>
[PID: 4294786927][C:\WINDOWS\EXPLORER.EXE] <Microsoft Corporation><4.72.3110.1>
[C:\WINDOWS\SYSTEM\NETBIOS.DLL] <N/A><N/A>
[PID: 4294791375][C:\WINDOWS\SYSTEM\RPCSS.EXE] <Microsoft Corporation><4.71.2900>
[C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL] <rising><17, 0, 0, 3>
[C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL] <rising><17, 0, 0, 60>
[C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7>
[C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
[PID: 4294731599][C:\PROGRAM FILES\RISING\RAV\RAVTIMER.EXE] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 39>
[PID: 4294744371][C:\WINDOWS\SYSTEM\SYSTRAY.EXE] <Microsoft Corporation><4.10.2222>
[PID: 4294763879][C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE] <RealNetworks, Inc.><0.1.0.3292>
[PID: 4294757371][C:\WINDOWS\SYSTEM\INTERNAT.EXE] <Microsoft Corporation><4.10.2222>
[PID: 4294664823][C:\PROGRAM FILES\COMMON FILES\FILSECLAB\FILMSG.EXE] <费尔安全实验室><3, 1, 0, 927>
[PID: 4294619939][C:\WINDOWS\SYSTEM\WMIEXE.EXE] <Microsoft Corporation><5.00.1755.1>
[C:\WINDOWS\SYSTEM\MACROMED\FLASH\FLASH.OCX] <Macromedia, Inc.><6,0,79,0>
[C:\WINDOWS\SYSTEM\NETBIOS.DLL] <N/A><N/A>
[C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WEB FOLDERS\MSONSEXT.DLL] <><>
[PID: 4294627307][C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE] <Microsoft Corporation><5.00.2614.3500>
[C:\WINDOWS\SYSTEM\NVDD32.DLL] <NVidia Corporation><4.12.01.0797>
[C:\WINDOWS\SYSTEM\NVARCH32.DLL] <NVidia Corporation><4.12.01.0797>
[PID: 4294527095][C:\WINDOWS\SYSTEM\DDHELP.EXE] <Microsoft Corporation><4.08.01.0881>
[PID: 4294756995][C:\WINDOWS\SYSTEM\PSTORES.EXE] <Microsoft Corporation><5.00.1877.3>
[C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WEB FOLDERS\MSONSEXT.DLL] <><>
[PID: 4294640563][C:\WINDOWS\TEMP\RAR$EX00.756\SRENG9X.EXE] <Smallfrogs Studio><1.1.0.269>
==================================
文件关联
.TXT OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [C:\WINDOWS\winhlp32.exe %1]
.INI OK. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF OK. [C:\WINDOWS\NOTEPAD.EXE %1]
==================================
