未知家族病毒分析
扫描结果:
无可疑文件


系统活动进程
E:\WINDOWS\SYSTEM32\SMSS.EXE
E:\WINDOWS\SYSTEM32\CSRSS.EXE
E:\WINDOWS\SYSTEM32\WINLOGON.EXE
E:\WINDOWS\SYSTEM32\MSACM32.DRV

E:\WINDOWS\SYSTEM32\SERVICES.EXE
E:\WINDOWS\SYSTEM32\LSASS.EXE
E:\WINDOWS\SYSTEM32\SVCHOST.EXE
G:\PROGRAM FILES\THEWORLD\THEWORLD.EXE
E:\WINDOWS\SYSTEM32\NORMALIZ.DLL
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
E:\WINDOWS\SYSTEM32\IEFRAME.DLL
E:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASH9F.OCX
E:\WINDOWS\SYSTEM32\MSACM32.DRV
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL
G:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL
E:\WINDOWS\SYSTEM32\MSCOREE.DLL
E:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORIE.DLL
E:\WINDOWS\DOWNLOADED PROGRAM FILES\SPIDER80.OCX
E:\PROGRA~1\COMMON~1\MERCUR~1\TD2000~1\TDCLIE~1.OCX
E:\PROGRAM FILES\COMMON FILES\MERCURY INTERACTIVE\TD2000_80\OTACLIENT80.DLL
E:\PROGRA~1\COMMON~1\MERCUR~1\TD2000~1\WEBTDC~1.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\PDM.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MSDBG2.DLL
E:\WINDOWS\SYSTEM32\RAVEXT.DLL
E:\WINDOWS\SYSTEM32\SOGOUPY.IME
G:\PROGRAM FILES\INTERNET EXPLORER\IEPROXY.DLL

G:\PROGRAM FILES\笨笨钟\BBCLOCK.EXE
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
E:\WINDOWS\SYSTEM32\MSACM32.DRV
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL

E:\WINDOWS\SYSTEM32\SVCHOST.EXE
G:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
E:\WINDOWS\SYSTEM32\SVCHOST.EXE
E:\WINDOWS\SYSTEM32\NORMALIZ.DLL
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL

E:\WINDOWS\SYSTEM32\SVCHOST.EXE
E:\WINDOWS\SYSTEM32\NORMALIZ.DLL
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL

G:\PROGRAM FILES\VMWARE\VMWARE WORKSTATION\VMWARE-AUTHD.EXE
E:\WINDOWS\SYSTEM32\MSVCR71.DLL

E:\WINDOWS\SYSTEM32\SVCHOST.EXE
G:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE
E:\WINDOWS\SYSTEM32\NORMALIZ.DLL
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEKRNL.DLL
G:\PROGRAM FILES\360SAFE\ANTIADWA.DLL
G:\PROGRAM FILES\360SAFE\LIVE.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL
E:\WINDOWS\SYSTEM32\IEFRAME.DLL
E:\WINDOWS\SYSTEM32\RAVEXT.DLL

E:\WINDOWS\SYSTEM32\SPOOLSV.EXE
E:\WINDOWS\SYSTEM32\MDIMON.DLL
E:\WINDOWS\SYSTEM32\SE3CLMON.DLL
E:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\MDIPPR.DLL

E:\WINDOWS\SYSTEM32\MSDTC.EXE
G:\ORACLE\ORA92\BIN\OCI.DLL

E:\WINDOWS\SYSTEM32\SVCHOST.EXE
E:\WINDOWS\SYSTEM32\INETSRV\INETINFO.EXE
E:\WINDOWS\SYSTEM32\CTFMON.EXE
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL

E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\2052\MDMUI.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\CSM.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MSDBG2.DLL
E:\WINDOWS\SYSTEM32\MSCOREE.DLL
E:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORDBI.DLL

E:\PROGRAM FILES\COMMON FILES\SYSTEM\MSSEARCH\BIN\MSSEARCH.EXE
E:\PROGRAM FILES\COMMON FILES\SYSTEM\MSSEARCH\BIN\MSSWS.DLL
E:\PROGRA~1\COMMON~1\SYSTEM\MSSEARCH\BIN\MSSRCH.DLL
E:\PROGRAM FILES\COMMON FILES\SYSTEM\MSSEARCH\BIN\TQUERY.DLL
E:\PROGRA~1\COMMON~1\SYSTEM\MSSEARCH\BIN\PROPDEFS.DLL
E:\PROGRA~1\COMMON~1\SYSTEM\MSSEARCH\BIN\SRCHIDX.DLL

E:\WINDOWS\EXPLORER.EXE
E:\WINDOWS\SYSTEM32\IEFRAME.DLL
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL
E:\WINDOWS\SYSTEM32\WPDSHSERVICEOBJ.DLL
E:\WINDOWS\SYSTEM32\NORMALIZ.DLL
E:\WINDOWS\SYSTEM32\MSACM32.DRV
E:\WINDOWS\SYSTEM32\PORTABLEDEVICETYPES.DLL
E:\WINDOWS\SYSTEM32\PORTABLEDEVICEAPI.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
E:\WINDOWS\SYSTEM32\RAVEXT.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL
G:\PROGRAM FILES\WINRAR\RAREXT.DLL
E:\PROGRAM FILES\COMMON FILES\ADOBE\ACROBAT\ACTIVEX\ACROIEHELPER.DLL
G:\PROGRAM FILES\MICROSOFT VISUAL STUDIO 8\COMMON7\IDE\PRIVATEASSEMBLIES\MICROSOFT.VISUALSTUDIO.QUALITYTOOLS.RECORDERBARBHO.DLL
G:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE11\MSOHEV.DLL
E:\PROGRAM FILES\COMMON FILES\ADOBE\ACROBAT\ACTIVEX\PDFSHELL.DLL
E:\PROGRAM FILES\COMMON FILES\ADOBE\ACROBAT\ACTIVEX\PDFSHELL.CHS
G:\PROGRAM FILES\IDM COMPUTER SOLUTIONS\ULTRAEDIT-32\UE32CTMN.DLL
G:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL
E:\WINDOWS\SYSTEM32\NVCPL.DLL
E:\WINDOWS\SYSTEM32\NVSHELL.DLL
E:\WINDOWS\SYSTEM32\NVAPI.DLL
E:\WINDOWS\SYSTEM32\SOGOUPY.IME

E:\WINDOWS\SYSTEM32\NVSVC32.EXE
E:\WINDOWS\SYSTEM32\NVAPI.DLL

E:\WINDOWS\SYSTEM32\SVCHOST.EXE
E:\WINDOWS\SYSTEM32\SVCHOST.EXE
G:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE
G:\PROGRAM FILES\RISING\RAV\BWLIST.DLL
E:\WINDOWS\SYSTEM32\MFC71.DLL
E:\WINDOWS\SYSTEM32\MSVCR71.DLL
E:\WINDOWS\SYSTEM32\MSVCP71.DLL
E:\WINDOWS\SYSTEM32\MFC71CHS.DLL
G:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL
G:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL
G:\PROGRAM FILES\RISING\RAV\RSLOG.DLL
G:\PROGRAM FILES\RISING\RAV\PROCCOM.DLL
G:\PROGRAM FILES\RISING\RAV\RSCOMMX2.DLL
G:\PROGRAM FILES\RISING\RAV\MONRULE.DLL
G:\PROGRAM FILES\RISING\RAV\HOOKSYS.DLL
G:\PROGRAM FILES\RISING\RAV\HOOKREG.DLL
G:\PROGRAM FILES\RISING\RAV\HOOKNTOS.DLL
G:\PROGRAM FILES\RISING\RAV\RSWALMON.DLL
G:\PROGRAM FILES\RISING\RAV\RECOMP.DLL
G:\PROGRAM FILES\RISING\RAV\REFS.DLL
G:\PROGRAM FILES\RISING\RAV\FFR.DLL
G:\PROGRAM FILES\RISING\RAV\RSSTORE.DLL
G:\PROGRAM FILES\RISING\RAV\HOOKCONT.DLL
G:\PROGRAM FILES\RISING\RAV\FAKESCAN.DLL
G:\PROGRAM FILES\RISING\RAV\SCANNER.DLL
G:\PROGRAM FILES\RISING\RAV\VIRUSLIB.DLL
G:\PROGRAM FILES\RISING\RAV\RELIBLDR.DLL
G:\PROGRAM FILES\RISING\RAV\HOOKWEB.DLL
G:\PROGRAM FILES\RISING\RAV\NVFILE.DLL
G:\PROGRAM FILES\RISING\RAV\SCANEXEC.DLL
G:\PROGRAM FILES\RISING\RAV\UNEXE.DLL
G:\PROGRAM FILES\RISING\RAV\SCANEX.DLL
G:\PROGRAM FILES\RISING\RAV\PEARC.DLL
G:\PROGRAM FILES\RISING\RAV\EXTFILE.DLL
G:\PROGRAM FILES\RISING\RAV\SCANSCT.DLL

G:\PROGRAM FILES\TENCENT\RTX\RTXC.EXE
G:\PROGRAM FILES\TENCENT\RTX\MFC42.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXDBUG.DLL
G:\PROGRAM FILES\TENCENT\RTX\UTILITY.DLL
G:\PROGRAM FILES\TENCENT\RTX\UILIB.DLL
G:\PROGRAM FILES\TENCENT\RTX\MSVCP60.DLL
G:\PROGRAM FILES\TENCENT\RTX\CRYPT.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQZIP.DLL
G:\PROGRAM FILES\TENCENT\RTX\QQRES.DLL
G:\PROGRAM FILES\TENCENT\RTX\RICHED20.DLL
G:\PROGRAM FILES\TENCENT\RTX\RICHED32.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
G:\PROGRAM FILES\TENCENT\RTX\CORE.DLL
G:\PROGRAM FILES\TENCENT\RTX\MPBASE.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXPROXY.DLL
G:\PROGRAM FILES\TENCENT\RTX\PROXYSOCK.DLL
G:\PROGRAM FILES\TENCENT\RTX\PSR.DLL
G:\PROGRAM FILES\TENCENT\RTX\MSGREC.DLL
G:\PROGRAM FILES\TENCENT\RTX\MSGDB.DLL
G:\PROGRAM FILES\TENCENT\RTX\LIBDB42.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQAPI.DLL
G:\PROGRAM FILES\TENCENT\RTX\STORE.DLL
G:\PROGRAM FILES\TENCENT\RTX\CLIENTAPI.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXP2PMGR.DLL
G:\PROGRAM FILES\TENCENT\RTX\P2PMGR.DLL
G:\PROGRAM FILES\TENCENT\RTX\QQSKIN.DLL
G:\PROGRAM FILES\TENCENT\RTX\NEWSKIN.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\DEPTHIDESET.DLL
E:\WINDOWS\SYSTEM32\IEFRAME.DLL
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL
E:\WINDOWS\SYSTEM32\NORMALIZ.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTCBUDDY.DLL
G:\PROGRAM FILES\TENCENT\RTX\VBSCRIPT.DLL
G:\PROGRAM FILES\TENCENT\RTX\MINIRTXPRJ.DLL
G:\PROGRAM FILES\TENCENT\RTX\ATL.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXINFOCOMM.DLL
G:\PROGRAM FILES\TENCENT\RTX\MAIL.DLL
G:\PROGRAM FILES\TENCENT\RTX\DOCWATCHER.DLL
G:\PROGRAM FILES\TENCENT\RTX\IM.DLL
G:\PROGRAM FILES\TENCENT\RTX\RECENTRECORD.DLL
E:\WINDOWS\SYSTEM32\MSACM32.DRV
G:\PROGRAM FILES\TENCENT\RTX\BQQAVPLUGIN.DLL
E:\WINDOWS\SYSTEM32\SOGOUPY.IME
G:\PROGRAM FILES\TENCENT\RTX\PROFILE.DLL
E:\WINDOWS\SYSTEM32\MSADP32.ACM
G:\PROGRAM FILES\TENCENT\RTX\IMMESSENGER.DLL
E:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\SE3CU.DLL
G:\PROGRAM FILES\TENCENT\RTX\SENDFILE.DLL

E:\WINDOWS\SYSTEM32\CONIME.EXE
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL

E:\WINDOWS\SYSTEM32\WBEM\WMIPRVSE.EXE
E:\WINDOWS\SYSTEM32\SVCHOST.EXE
E:\WINDOWS\SYSTEM32\SVCHOST.EXE
I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\STRONGSOFTSERVICE.EXE
E:\WINDOWS\SYSTEM32\MSCOREE.DLL
E:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\MSCORLIB\1.0.5000.0__B77A5C561934E089_55773347\MSCORLIB.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.SERVICEPROCESS\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.SERVICEPROCESS.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM\1.0.5000.0__B77A5C561934E089\SYSTEM.DLL
E:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\1.0.5000.0__B77A5C561934E089_EC5A62F2\SYSTEM.DLL
I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\HELPERLIB.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.DATA\1.0.5000.0__B77A5C561934E089\SYSTEM.DATA.DLL
I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\STRONGSOFT.SLDESS.DATABASEEX.DLL
I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\LOG4NET.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.XML\1.0.5000.0__B77A5C561934E089\SYSTEM.XML.DLL
E:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM.XML\1.0.5000.0__B77A5C561934E089_23F1E6A0\SYSTEM.XML.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.RUNTIME.REMOTING\1.0.5000.0__B77A5C561934E089\SYSTEM.RUNTIME.REMOTING.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.ENTERPRISESERVICES\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.ENTERPRISESERVICES.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.ENTERPRISESERVICES\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.ENTERPRISESERVICES.THUNK.DLL
E:\WINDOWS\SYSTEM32\DBNETLIB.DLL
E:\WINDOWS\SYSTEM32\DBMSLPCN.DLL
E:\WINDOWS\ASSEMBLY\GAC\MSCORLIB.RESOURCES\1.0.5000.0_ZH-CHS_B77A5C561934E089\MSCORLIB.RESOURCES.DLL
I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\YTAPP.DLL
I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\GENERALINTERFACE.DLL
I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\TFDATAUPDATE.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.WEB.SERVICES\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.WEB.SERVICES.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.SERVICEPROCESS.RESOURCES\1.0.5000.0_ZH-CHS_B03F5F7F11D50A3A\SYSTEM.SERVICEPROCESS.RESOURCES.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.RESOURCES\1.0.5000.0_ZH-CHS_B77A5C561934E089\SYSTEM.RESOURCES.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.WEB\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.WEB.DLL
I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\FILETRANSFER.DLL

E:\WINDOWS\SYSTEM32\MMC.EXE
E:\WINDOWS\SYSTEM32\NORMALIZ.DLL
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLMMC.DLL
E:\WINDOWS\SYSTEM32\SQLUNIRL.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLRESLD.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SQLMMC.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLNS.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLGUI.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\W95SCM.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLSVC.DLL
E:\WINDOWS\SYSTEM32\ODBCBCP.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMSFC.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMCOMN.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SQLSVC.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SQLGUI.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMSFC.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMCOMN.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SQLNS.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLDMO.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SQLDMO.RLL
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMDLL.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMCROS.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMMAP.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMEXEC.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMWIZ.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMSYS.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMWEBWZ.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMOBJ.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMREPL.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMMAP.RLL
E:\WINDOWS\SYSTEM32\MAPI32.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMCROS.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMEXEC.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMSYS.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMWIZ.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMWEBWZ.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMOBJ.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMREPL.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMDLL.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMNT.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMNT.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SQLFTWIZ.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SQLFTWIZ.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\DTSWIZ.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\DTSWIZ.RLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\REPOSTRY\REPBRUI.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\REPOSTRY\RESOURCES\2052\REPBRUI.RLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\REPOSTRY\REPODBC.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\REPOSTRY\REPBR.DLL
E:\WINDOWS\SYSTEM32\SQLSRV32.DLL
E:\WINDOWS\SYSTEM32\SQLSRV32.RLL
E:\WINDOWS\SYSTEM32\DBNETLIB.DLL
E:\WINDOWS\SYSTEM32\DBMSLPCN.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\DTSPKG.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\DTSPKG.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\SEMDTS.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\80\TOOLS\BINN\RESOURCES\2052\SEMDTS.RLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSDESIGNERS98\MSDT70.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSDESIGNERS98\MDW9X70.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSDESIGNERS98\RESOURCES\2052\MSDT70UI.DLL
E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSDESIGNERS98\MDT3G.DLL
E:\WINDOWS\SYSTEM32\SOGOUPY.IME
E:\WINDOWS\SYSTEM32\RAVEXT.DLL
E:\WINDOWS\SYSTEM32\PORTABLEDEVICEAPI.DLL

G:\PROGRAM FILES\RISING\RAV\RAVSTUB.EXE
G:\PROGRAM FILES\RISING\RAV\PROCCOM.DLL
G:\PROGRAM FILES\RISING\RAV\RSCOMMX2.DLL
G:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL

G:\PROGRA~1\MI6841~1\MSSQL\BINN\SQLSERVR.EXE
G:\PROGRA~1\MI6841~1\MSSQL\BINN\OPENDS60.DLL
G:\PROGRA~1\MI6841~1\MSSQL\BINN\UMS.DLL
G:\PROGRA~1\MI6841~1\MSSQL\BINN\SQLSORT.DLL
G:\PROGRA~1\MI6841~1\MSSQL\BINN\RESOURCES\2052\SQLEVN70.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\MSSQL\BINN\SSNETLIB.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\MSSQL\BINN\SSNMPN70.DLL
G:\PROGRA~1\MI6841~1\MSSQL\BINN\SSMSLPCN.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\MSSQL\BINN\SQLFTQRY.DLL
E:\PROGRAM FILES\COMMON FILES\SYSTEM\OLE DB\SQLOLEDB.DLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\MSSQL\BINN\XPSTAR.DLL
G:\PROGRA~1\MI6841~1\MSSQL\BINN\SQLRESLD.DLL
G:\PROGRA~1\MI6841~1\MSSQL\BINN\SQLSVC.DLL
E:\WINDOWS\SYSTEM32\ODBCBCP.DLL
G:\PROGRA~1\MI6841~1\MSSQL\BINN\W95SCM.DLL
E:\WINDOWS\SYSTEM32\SQLUNIRL.DLL
G:\PROGRA~1\MI6841~1\MSSQL\BINN\RESOURCES\2052\SQLSVC.RLL
G:\PROGRAM FILES\MICROSOFT SQL SERVER\MSSQL\BINN\RESOURCES\2052\XPSTAR.RLL

E:\PROGRA~1\COMMON~1\MERCUR~1\TD2000~1\TDINST~1.EXE
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL

G:\PROGRAM FILES\SOURCEGEAR\VAULT CLIENT\VAULTGUICLIENT.EXE
E:\WINDOWS\SYSTEM32\MSCOREE.DLL
E:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\MSCORLIB\1.0.5000.0__B77A5C561934E089_55773347\MSCORLIB.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
G:\PROGRAM FILES\SOURCEGEAR\VAULT CLIENT\VAULTLIB.DLL
G:\PROGRAM FILES\SOURCEGEAR\VAULT CLIENT\VAULTCLIENTOPERATIONSLIB.DLL
G:\PROGRAM FILES\SOURCEGEAR\VAULT CLIENT\VAULTPRESENTATIONLIB.DLL
G:\PROGRAM FILES\SOURCEGEAR\VAULT CLIENT\VAULTCLIENTUILIB.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.WINDOWS.FORMS\1.0.5000.0__B77A5C561934E089\SYSTEM.WINDOWS.FORMS.DLL
E:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM.WINDOWS.FORMS\1.0.5000.0__B77A5C561934E089_FA5B0FB6\SYSTEM.WINDOWS.FORMS.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM\1.0.5000.0__B77A5C561934E089\SYSTEM.DLL
E:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM\1.0.5000.0__B77A5C561934E089_EC5A62F2\SYSTEM.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.XML\1.0.5000.0__B77A5C561934E089\SYSTEM.XML.DLL
E:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM.XML\1.0.5000.0__B77A5C561934E089_23F1E6A0\SYSTEM.XML.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.DRAWING\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.DRAWING.DLL
E:\WINDOWS\ASSEMBLY\NATIVEIMAGES1_V1.1.4322\SYSTEM.DRAWING\1.0.5000.0__B03F5F7F11D50A3A_74E939AF\SYSTEM.DRAWING.DLL
G:\PROGRAM FILES\SOURCEGEAR\VAULT CLIENT\VAULTCLIENTNETLIB.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.WINDOWS.FORMS.RESOURCES\1.0.5000.0_ZH-CHS_B77A5C561934E089\SYSTEM.WINDOWS.FORMS.RESOURCES.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.WEB.SERVICES\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.WEB.SERVICES.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.RESOURCES\1.0.5000.0_ZH-CHS_B77A5C561934E089\SYSTEM.RESOURCES.DLL
E:\WINDOWS\ASSEMBLY\GAC\MSCORLIB.RESOURCES\1.0.5000.0_ZH-CHS_B77A5C561934E089\MSCORLIB.RESOURCES.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.WEB\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.WEB.DLL
E:\WINDOWS\ASSEMBLY\GAC\SYSTEM.MANAGEMENT\1.0.5000.0__B03F5F7F11D50A3A\SYSTEM.MANAGEMENT.DLL
G:\PROGRAM FILES\SOURCEGEAR\VAULT CLIENT\VCDIFF.DLL
E:\WINDOWS\ASSEMBLY\GAC\ACCESSIBILITY\1.0.5000.0__B03F5F7F11D50A3A\ACCESSIBILITY.DLL
E:\WINDOWS\SYSTEM32\IEFRAME.DLL
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL
E:\WINDOWS\SYSTEM32\RAVEXT.DLL

G:\PROGRAM FILES\RISING\RAV\RAVMON.EXE
E:\WINDOWS\SYSTEM32\MFC71.DLL
E:\WINDOWS\SYSTEM32\MSVCR71.DLL
E:\WINDOWS\SYSTEM32\MSVCP71.DLL
E:\WINDOWS\SYSTEM32\MFC71CHS.DLL
G:\PROGRAM FILES\RISING\RAV\PROCCOM.DLL
G:\PROGRAM FILES\RISING\RAV\RSCOMMX2.DLL
G:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL
G:\PROGRAM FILES\RISING\RAV\RECOMP.DLL
G:\PROGRAM FILES\RISING\RAV\REFS.DLL
G:\PROGRAM FILES\RISING\RAV\VIRUSLIB.DLL
G:\PROGRAM FILES\RISING\RAV\RELIBLDR.DLL
G:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL
G:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL
G:\PROGRAM FILES\RISING\RAV\MONRULE.DLL
G:\PROGRAM FILES\RISING\RAV\PNGDLL.DLL
G:\PROGRAM FILES\RISING\RAV\RSGUILIB.DLL
G:\PROGRAM FILES\RISING\RAV\RSXML.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL

G:\PROGRAM FILES\FOXMAIL\FOXMAIL.EXE
E:\WINDOWS\SYSTEM32\IERTUTIL.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
E:\WINDOWS\SYSTEM32\MAPI32.DLL
G:\PROGRAM FILES\FOXMAIL\FOXANTISPAM.DLL
G:\PROGRAM FILES\FOXMAIL\PCRE.DLL
E:\WINDOWS\SYSTEM32\IEFRAME.DLL
E:\WINDOWS\SYSTEM32\NORMALIZ.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL
G:\PROGRAM FILES\FOXMAIL\3RDPARTY\PUNYLIB.DLL
E:\WINDOWS\SYSTEM32\PORTABLEDEVICEAPI.DLL
E:\PROGRAM FILES\COMMON FILES\ADOBE\ACROBAT\ACTIVEX\PDFSHELL.CHS
E:\WINDOWS\SYSTEM32\SOGOUPY.IME

G:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE
G:\PROGRAM FILES\RISING\RAV\PROCCOM.DLL
G:\PROGRAM FILES\RISING\RAV\RSCOMMX2.DLL
G:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL
G:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL
G:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL

E:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\RSDETECT.EXE
G:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
G:\PROGRAM FILES\TENCENT\RTX\BQQHOOK.DLL
G:\PROGRAM FILES\TENCENT\RTX\RTXOLASS.DLL


普通自启动项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Bbclock = G:\PROGRAM FILES\笨笨钟\BBCLOCK.EXE
SKYNET Personal FireWall = G:\PROGRAM FILES\SKYNET\FIREWALL\PFW.EXE
NvCplDaemon = RUNDLL32.EXE E:\WINDOWS\SYSTEM32\NVCPL.DLL,NVSTARTUP
360Safetray = G:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE /START
RavTask = "G:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE" -SYSTEM

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ctfmon.exe = E:\WINDOWS\SYSTEM32\CTFMON.EXE
Foxmail = "G:\PROGRAM FILES\FOXMAIL\FOXMAIL.EXE" -MIN


AppInit_DLLs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs =


系统文件关联
.exe ==> exefile = "%1" %*
.com ==> comfile = "%1" %*
.cmd ==> cmdfile = "%1" %*
.bat ==> batfile = "%1" %*
.txt ==> txtfile = E:\WINDOWS\notepad.exe %1
.scr ==> scrfile = "%1" /S
.reg ==> regfile = regedit.exe "%1"
.doc ==> Word.Document.8 = "G:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE" /n /dde

其它启动项
WIN.INI
无信息

SYSTEM.INI
SHELL = Explorer.exe
SCRNSAVE.EXE = E:\WINDOWS\System32\logon.scr


Winlogon 启动项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
crypt32chain = CRYPT32.DLL
cryptnet = CRYPTNET.DLL
cscdll = CSCDLL.DLL
dimsntfy = DIMSNTFY.DLL
ScCertProp = WLNOTIFY.DLL
Schedule = WLNOTIFY.DLL
sclgntfy = SCLGNTFY.DLL
SensLogn = WLNOTIFY.DLL
termsrv = WLNOTIFY.DLL
wlballoon = WLNOTIFY.DLL

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit = E:\WINDOWS\SYSTEM32\USERINIT.EXE,
shell = EXPLORER.EXE


IE - BHO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
RsAutorunsDisabled = NULL
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = NULL
{1F364306-AA45-47B5-9F9D-39A8B94E7EF1} = G:\Program Files\FlashGet\ComDlls\bhoCATCH.dll
{62355041-605D-4469-84FD-5D66ED67A7E3} = G:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO.dll
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} = G:\Program Files\360safe\safemon\safemon.dll


Winsock SPI
MSAFD Tcpip [TCP/IP] = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD Tcpip [UDP/IP] = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD Tcpip [RAW/IP] = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
RSVP UDP Service Provider = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
RSVP TCP Service Provider = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{576F46A4-2E0B-47AD-9D76-3D2EDA04D8AC}] SEQPACKET 0 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{576F46A4-2E0B-47AD-9D76-3D2EDA04D8AC}] DATAGRAM 0 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{B002340D-21FF-4775-A0B6-CA928804F5AD}] SEQPACKET 1 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{B002340D-21FF-4775-A0B6-CA928804F5AD}] DATAGRAM 1 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{3DF0CFF3-4FC5-4091-8078-C9D125919FB7}] SEQPACKET 2 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{3DF0CFF3-4FC5-4091-8078-C9D125919FB7}] DATAGRAM 2 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{DB7CE54A-CCD2-4DB2-A20D-03D120DBFC2B}] SEQPACKET 5 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{DB7CE54A-CCD2-4DB2-A20D-03D120DBFC2B}] DATAGRAM 5 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{911918D1-0002-49A0-8BCC-94AA8F8BD27D}] SEQPACKET 6 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{911918D1-0002-49A0-8BCC-94AA8F8BD27D}] DATAGRAM 6 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0B421B92-B901-4659-8116-05F0A2982371}] SEQPACKET 3 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0B421B92-B901-4659-8116-05F0A2982371}] DATAGRAM 3 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{735EBA12-6F2D-4D2E-AD56-B71D9FBF228A}] SEQPACKET 4 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{735EBA12-6F2D-4D2E-AD56-B71D9FBF228A}] DATAGRAM 4 = E:\WINDOWS\SYSTEM32\MSWSOCK.DLL

系统服务项
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
AeLookupSvc = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Alerter = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
ALG = E:\WINDOWS\SYSTEM32\ALG.EXE
ANTSProfiler = "G:\PROGRAM FILES\RED GATE\ANTS PROFILER\REDGATE.PROFILER.SERVICE.EXE"
AppMgmt = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
aspnet_state = E:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\ASPNET_STATE.EXE
AudioSrv = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
BITS = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Browser = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
CiSvc = E:\WINDOWS\SYSTEM32\CISVC.EXE
ClipSrv = E:\WINDOWS\SYSTEM32\CLIPSRV.EXE
clr_optimization_v2.0.50727_32 = E:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORSVW.EXE
COMSysApp = E:\WINDOWS\SYSTEM32\DLLHOST.EXE /PROCESSID:{02D4B3F1-FD88-11D1-960D-00805FC79235}
CryptSvc = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
DcomLaunch = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K DCOMLAUNCH
Dfs = E:\WINDOWS\SYSTEM32\DFSSVC.EXE
Dhcp = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETWORKSERVICE
dmadmin = E:\WINDOWS\SYSTEM32\DMADMIN.EXE /COM
dmserver = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Dnscache = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETWORKSERVICE
ERSvc = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K WINERR
Eventlog = E:\WINDOWS\SYSTEM32\SERVICES.EXE
EventSystem = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
helpsvc = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
HidServ = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
HTTPFilter = E:\WINDOWS\SYSTEM32\LSASS.EXE
IISADMIN = E:\WINDOWS\SYSTEM32\INETSRV\INETINFO.EXE
ImapiService = E:\WINDOWS\SYSTEM32\IMAPI.EXE
IsmServ = E:\WINDOWS\SYSTEM32\ISMSERV.EXE
kdc = E:\WINDOWS\SYSTEM32\LSASS.EXE
lanmanserver = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
lanmanworkstation = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
LicenseService = E:\WINDOWS\SYSTEM32\LLSSRV.EXE
LmHosts = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
MDM = "E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE"
Messenger = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
mnmsrvc = E:\WINDOWS\SYSTEM32\MNMSRVC.EXE
MSDTC = E:\WINDOWS\SYSTEM32\MSDTC.EXE
MSIServer = E:\WINDOWS\SYSTEM32\MSIEXEC.EXE /V
MSSEARCH = "E:\PROGRAM FILES\COMMON FILES\SYSTEM\MSSEARCH\BIN\MSSEARCH.EXE"
MSSQLSERVER = G:\PROGRA~1\MI6841~1\MSSQL\BINN\SQLSERVR.EXE
msvsmon80 = "G:\PROGRAM FILES\MICROSOFT VISUAL STUDIO 8\COMMON7\IDE\REMOTE DEBUGGER\X86\MSVSMON.EXE" /SERVICE MSVSMON80
NetDDE = E:\WINDOWS\SYSTEM32\NETDDE.EXE
NetDDEdsdm = E:\WINDOWS\SYSTEM32\NETDDE.EXE
Netlogon = E:\WINDOWS\SYSTEM32\LSASS.EXE
Netman = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Nla = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
NtFrs = E:\WINDOWS\SYSTEM32\NTFRS.EXE
NtLmSsp = E:\WINDOWS\SYSTEM32\LSASS.EXE
NtmsSvc = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
NVSvc = E:\WINDOWS\SYSTEM32\NVSVC32.EXE
OracleOraHome92ClientCache = G:\ORACLE\ORA92\BIN\ONRSD.EXE
ose = "E:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\SOURCE ENGINE\OSE.EXE"
PlugPlay = E:\WINDOWS\SYSTEM32\SERVICES.EXE
PolicyAgent = E:\WINDOWS\SYSTEM32\LSASS.EXE
ProtectedStorage = E:\WINDOWS\SYSTEM32\LSASS.EXE
RasAuto = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RasMan = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RDSessMgr = E:\WINDOWS\SYSTEM32\SESSMGR.EXE
RemoteAccess = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RemoteRegistry = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K REGSVC
RpcLocator = E:\WINDOWS\SYSTEM32\LOCATOR.EXE
RpcSs = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K RPCSS
RsCCenter = "G:\PROGRAM FILES\RISING\RAV\CCENTER.EXE"
RSoPProv = E:\WINDOWS\SYSTEM32\RSOPPROV.EXE
RsRavMon = "G:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE"
sacsvr = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SamSs = E:\WINDOWS\SYSTEM32\LSASS.EXE
SCardSvr = E:\WINDOWS\SYSTEM32\SCARDSVR.EXE
Schedule = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
seclogon = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SENS = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SharedAccess = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
ShellHWDetection = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Spooler = E:\WINDOWS\SYSTEM32\SPOOLSV.EXE
SQLSERVERAGENT = G:\PROGRA~1\MI6841~1\MSSQL\BINN\SQLAGENT.EXE
stisvc = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K IMGSVC
StrongsoftService = I:\工作资料\2008年资料\广州市番禺区水利地理信息展示系统\可运行程序\SERVER\STRONGSOFTSERVICE.EXE
swprv = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K SWPRV
SysmonLog = E:\WINDOWS\SYSTEM32\SMLOGSVC.EXE
TapiSrv = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K TAPISRV
TermService = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K TERMSVCS
Themes = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
TlntSvr = E:\WINDOWS\SYSTEM32\TLNTSVR.EXE
TrkSvr = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
TrkWks = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Tssdis = E:\WINDOWS\SYSTEM32\TSSDIS.EXE
uploadmgr = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
UPS = E:\WINDOWS\SYSTEM32\UPS.EXE
vds = E:\WINDOWS\SYSTEM32\VDS.EXE
Visual Studio Analyzer RPC bridge = G:\PROGRAM FILES\MICROSOFT VISUAL STUDIO\COMMON\TOOLS\VS-ENT98\VANALYZR\VARPC.EXE
VMAuthdService = G:\PROGRAM FILES\VMWARE\VMWARE WORKSTATION\VMWARE-AUTHD.EXE
VMnetDHCP = E:\WINDOWS\SYSTEM32\VMNETDHCP.EXE
VMware NAT Service = E:\WINDOWS\SYSTEM32\VMNAT.EXE
VSS = E:\WINDOWS\SYSTEM32\VSSVC.EXE
W32Time = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
W3SVC = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K IISSVCS
WebClient = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
WinHttpAutoProxySvc = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
winmgmt = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WmdmPmSN = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Wmi = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WmiApSrv = E:\WINDOWS\SYSTEM32\WBEM\WMIAPSRV.EXE
WMPNetworkSvc = "G:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPNETWK.EXE"
wuauserv = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WZCSVC = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
xmlprov = E:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS


文件驱动
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
DfsDriver = E:\WINDOWS\SYSTEM32\DRIVERS\DFS.SYS
FltMgr = E:\WINDOWS\SYSTEM32\DRIVERS\FLTMGR.SYS
MRxDAV = E:\WINDOWS\SYSTEM32\DRIVERS\MRXDAV.SYS
MRxSmb = E:\WINDOWS\SYSTEM32\DRIVERS\MRXSMB.SYS
NetBIOS = E:\WINDOWS\SYSTEM32\DRIVERS\NETBIOS.SYS
Rdbss = E:\WINDOWS\SYSTEM32\DRIVERS\RDBSS.SYS
Srv = E:\WINDOWS\SYSTEM32\DRIVERS\SRV.SYS


系统驱动项
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
ACPI = E:\WINDOWS\SYSTEM32\DRIVERS\ACPI.SYS
aec = E:\WINDOWS\SYSTEM32\DRIVERS\AEC.SYS
AFD = E:\WINDOWS\SYSTEM32\DRIVERS\AFD.SYS
AsyncMac = E:\WINDOWS\SYSTEM32\DRIVERS\ASYNCMAC.SYS
atapi = E:\WINDOWS\SYSTEM32\DRIVERS\ATAPI.SYS
Atmarpc = E:\WINDOWS\SYSTEM32\DRIVERS\ATMARPC.SYS
audstub = E:\WINDOWS\SYSTEM32\DRIVERS\AUDSTUB.SYS
Cdrom = E:\WINDOWS\SYSTEM32\DRIVERS\CDROM.SYS
ClusDisk = E:\WINDOWS\SYSTEM32\DRIVERS\CLUSDISK.SYS
crcdisk = E:\WINDOWS\SYSTEM32\DRIVERS\CRCDISK.SYS
d346bus = E:\WINDOWS\SYSTEM32\DRIVERS\D346BUS.SYS
d346prt = E:\WINDOWS\SYSTEM32\DRIVERS\D346PRT.SYS
Disk = E:\WINDOWS\SYSTEM32\DRIVERS\DISK.SYS
dmboot = E:\WINDOWS\SYSTEM32\DRIVERS\DMBOOT.SYS
dmio = E:\WINDOWS\SYSTEM32\DRIVERS\DMIO.SYS
dmload = E:\WINDOWS\SYSTEM32\DRIVERS\DMLOAD.SYS
DMusic = E:\WINDOWS\SYSTEM32\DRIVERS\DMUSIC.SYS
drmkaud = E:\WINDOWS\SYSTEM32\DRIVERS\DRMKAUD.SYS
Fdc = E:\WINDOWS\SYSTEM32\DRIVERS\FDC.SYS
Flpydisk = E:\WINDOWS\SYSTEM32\DRIVERS\FLPYDISK.SYS
FsVga = E:\WINDOWS\SYSTEM32\DRIVERS\FSVGA.SYS
Ftdisk = E:\WINDOWS\SYSTEM32\DRIVERS\FTDISK.SYS
Gpc = E:\WINDOWS\SYSTEM32\DRIVERS\MSGPC.SYS
hcmon = E:\WINDOWS\SYSTEM32\DRIVERS\HCMON.SYS
HdAudAddService = E:\WINDOWS\SYSTEM32\DRIVERS\HDAUDIO.SYS
HDAudBus = E:\WINDOWS\SYSTEM32\DRIVERS\HDAUDBUS.SYS
HookCont = E:\WINDOWS\SYSTEM32\DRIVERS\HOOKCONT.SYS
HookNtos = E:\WINDOWS\SYSTEM32\DRIVERS\HOOKNTOS.SYS
HookReg = E:\WINDOWS\SYSTEM32\DRIVERS\HOOKREG.SYS
HookSys = E:\WINDOWS\SYSTEM32\DRIVERS\HOOKSYS.SYS
HTTP = E:\WINDOWS\SYSTEM32\DRIVERS\HTTP.SYS
i8042prt = E:\WINDOWS\SYSTEM32\DRIVERS\I8042PRT.SYS
imapi = E:\WINDOWS\SYSTEM32\DRIVERS\IMAPI.SYS
intelppm = E:\WINDOWS\SYSTEM32\DRIVERS\INTELPPM.SYS
ip6fw = E:\WINDOWS\SYSTEM32\DRIVERS\IP6FW.SYS
IpFilterDriver = E:\WINDOWS\SYSTEM32\DRIVERS\IPFLTDRV.SYS
IpInIp = E:\WINDOWS\SYSTEM32\DRIVERS\IPINIP.SYS
IpNat = E:\WINDOWS\SYSTEM32\DRIVERS\IPNAT.SYS
IPSec = E:\WINDOWS\SYSTEM32\DRIVERS\IPSEC.SYS
isapnp = E:\WINDOWS\SYSTEM32\DRIVERS\ISAPNP.SYS
Kbdclass = E:\WINDOWS\SYSTEM32\DRIVERS\KBDCLASS.SYS
kmixer = E:\WINDOWS\SYSTEM32\DRIVERS\KMIXER.SYS
Mouclass = E:\WINDOWS\SYSTEM32\DRIVERS\MOUCLASS.SYS
MSKSSRV = E:\WINDOWS\SYSTEM32\DRIVERS\MSKSSRV.SYS
MSPCLOCK = E:\WINDOWS\SYSTEM32\DRIVERS\MSPCLOCK.SYS
MSPQM = E:\WINDOWS\SYSTEM32\DRIVERS\MSPQM.SYS
mssmbios = E:\WINDOWS\SYSTEM32\DRIVERS\MSSMBIOS.SYS
MTsensor = E:\WINDOWS\SYSTEM32\DRIVERS\ASACPI.SYS
NdisTapi = E:\WINDOWS\SYSTEM32\DRIVERS\NDISTAPI.SYS
Ndisuio = E:\WINDOWS\SYSTEM32\DRIVERS\NDISUIO.SYS
NdisWan = E:\WINDOWS\SYSTEM32\DRIVERS\NDISWAN.SYS
NetBT = E:\WINDOWS\SYSTEM32\DRIVERS\NETBT.SYS
nv = E:\WINDOWS\SYSTEM32\DRIVERS\NV4_MINI.SYS
Parport = E:\WINDOWS\SYSTEM32\DRIVERS\PARPORT.SYS
Parvdm = E:\WINDOWS\SYSTEM32\DRIVERS\PARVDM.SYS
PCI = E:\WINDOWS\SYSTEM32\DRIVERS\PCI.SYS
PCIIde = E:\WINDOWS\SYSTEM32\DRIVERS\PCIIDE.SYS
PptpMiniport = E:\WINDOWS\SYSTEM32\DRIVERS\RASPPTP.SYS
Processor = E:\WINDOWS\SYSTEM32\DRIVERS\PROCESSR.SYS
Ptilink = E:\WINDOWS\SYSTEM32\DRIVERS\PTILINK.SYS
RasAcd = E:\WINDOWS\SYSTEM32\DRIVERS\RASACD.SYS
Rasl2tp = E:\WINDOWS\SYSTEM32\DRIVERS\RASL2TP.SYS
RasPppoe = E:\WINDOWS\SYSTEM32\DRIVERS\RASPPPOE.SYS
Raspti = E:\WINDOWS\SYSTEM32\DRIVERS\RASPTI.SYS
RDPCDD = E:\WINDOWS\SYSTEM32\DRIVERS\RDPCDD.SYS
rdpdr = E:\WINDOWS\SYSTEM32\DRIVERS\RDPDR.SYS
redbook = E:\WINDOWS\SYSTEM32\DRIVERS\REDBOOK.SYS
RsNTGDI = E:\WINDOWS\SYSTEM32\DRIVERS\RSNTGDI.SYS
RTLE8023xp = E:\WINDOWS\SYSTEM32\DRIVERS\RTENICXP.SYS
scrcap = E:\WINDOWS\SYSTEM32\DRIVERS\SCRCAP.SYS
ScsiPort = E:\WINDOWS\SYSTEM32\DRIVERS\SCSIPORT.SYS
Secdrv = E:\WINDOWS\SYSTEM32\DRIVERS\SECDRV.SYS
serenum = E:\WINDOWS\SYSTEM32\DRIVERS\SERENUM.SYS
Serial = E:\WINDOWS\SYSTEM32\DRIVERS\SERIAL.SYS
SKNFW = E:\WINDOWS\SYSTEM32\DRIVERS\SKNFW.SYS
SkyProcs = G:\PROGRAM FILES\SKYNET\FIREWALL\SKYPROCS.SYS
splitter = E:\WINDOWS\SYSTEM32\DRIVERS\SPLITTER.SYS
swenum = E:\WINDOWS\SYSTEM32\DRIVERS\SWENUM.SYS
swmidi = E:\WINDOWS\SYSTEM32\DRIVERS\SWMIDI.SYS
sysaudio = E:\WINDOWS\SYSTEM32\DRIVERS\SYSAUDIO.SYS
Tcpip = E:\WINDOWS\SYSTEM32\DRIVERS\TCPIP.SYS
TermDD = E:\WINDOWS\SYSTEM32\DRIVERS\TERMDD.SYS
Update = E:\WINDOWS\SYSTEM32\DRIVERS\UPDATE.SYS
usbehci = E:\WINDOWS\SYSTEM32\DRIVERS\USBEHCI.SYS
usbhub = E:\WINDOWS\SYSTEM32\DRIVERS\USBHUB.SYS
USBSTOR = E:\WINDOWS\SYSTEM32\DRIVERS\USBSTOR.SYS
usbuhci = E:\WINDOWS\SYSTEM32\DRIVERS\USBUHCI.SYS
vga = E:\WINDOWS\SYSTEM32\DRIVERS\VGAPNP.SYS
VgaSave = E:\WINDOWS\SYSTEM32\DRIVERS\VGA.SYS
VMnetAdapter = E:\WINDOWS\SYSTEM32\DRIVERS\VMNETADAPTER.SYS
VMnetBridge = E:\WINDOWS\SYSTEM32\DRIVERS\VMNETBRIDGE.SYS
VMnetuserif = E:\WINDOWS\SYSTEM32\DRIVERS\VMNETUSERIF.SYS
VMparport = E:\WINDOWS\SYSTEM32\DRIVERS\VMPARPORT.SYSs
vmx86 = E:\WINDOWS\SYSTEM32\DRIVERS\VMX86.SYS
VolSnap = E:\WINDOWS\SYSTEM32\DRIVERS\VOLSNAP.SYS
Wanarp = E:\WINDOWS\SYSTEM32\DRIVERS\WANARP.SYS
wdmaud = E:\WINDOWS\SYSTEM32\DRIVERS\WDMAUD.SYS
WLBS = E:\WINDOWS\SYSTEM32\DRIVERS\WLBS.SYS