2005-11-29,12:40:01
System Repair Engineer 1.1.0.269
Windows XP Professional Service Pack 2 - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<Super Rabbit IEPro><F:\超级兔子\MagicSet\SRIECLI.EXE /LOAD>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<IDMan><F:\最新下载工具\IDMan.exe /onboot>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<AboutSys><regsvr32.exe msaddon.dll /s>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<nwiz><nwiz.exe /install>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<KAVPersonal50><"F:\卡巴\Kaspersky Anti-Virus Personal Pro\kav.exe" /minimize>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<yassistse><"C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Thunder><"F:\新建文件夹\ThunderShell.exe" /s>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002A><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002ASync><; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<SoundMan><; SOUNDMAN.EXE>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Super Rabbit SRRestore><F:\超级兔子\MagicSet\srrest.exe /autosave>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><>
==================================
启动文件夹
服务
[Download Service / Download Service]
<><N/A>
[kavsvc / kavsvc]
<"F:\卡巴\Kaspersky Anti-Virus Personal Pro\kavsvc.exe"><Kaspersky Lab>
[Local Network Service / Local Network Service]
<><N/A>
[NVIDIA Display Driver Service / NVSvc]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
==================================
浏览器加载项
[IDMIEHlprObj Class]
<F:\最钚新孪下略载毓工ぞ具運\IDMIECC.dll>
[超级兔子上网精灵]
<F:\超级兔子\MagicSet\HaokanBar.dll>
[网址大全]
<http://www.k369.com>
[访问瑞星网站]
<http://www.rising.com.cn>
[访问卡卡社区]
<http://www.ikaka.com>
[卡卡上网安全助手]
<C:\WINDOWS\system32\kakatool.dll>
[超级兔子上网精灵]
<F:\超级兔子\MagicSet\HaokanBar.dll>
[Shockwave Flash
Object]
<C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx>
[Rising Web Scan
Object]
<C:\WINDOWS\Downloaded Program Files\OL2005.dll>
[ThunderIEHelper Class]
<C:\WINDOWS\system32\xunleibho_v8.dll>
[IDMIEHlprObj Class]
<F:\最钚新孪下略载毓工ぞ具運\IDMIECC.dll>
[ActiveMovieControl
Object]
<C:\WINDOWS\system32\wmpdxm.dll>
[Windows Media Player]
<C:\WINDOWS\system32\wmpdxm.dll>
[HTML Document]
<%SystemRoot%\system32\mshtml.dll>
[RealPlayer RAM Download Handler]
<C:\WINDOWS\system32\rmoc3260.dll>
[Yahoo!Photo]
<C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll>
[HHCtrl
Object]
<C:\WINDOWS\system32\hhctrl.ocx>
[DragSearch BHO]
<C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL>
[Windows Media Player]
<C:\WINDOWS\system32\wmp.dll>
[金山快译(&K)]
<C:\PROGRA~1\Kingsoft\FASTAI~1\IEBand.dll>
[Active Desktop Mover]
<%SystemRoot%\system32\SHELL32.dll>
[Microsoft Web 浏览器]
<C:\WINDOWS\system32\shdocvw.dll>
[Microsoft Scriptlet Component]
<C:\WINDOWS\system32\mshtml.dll>
[卡卡上网安全助手]
<C:\WINDOWS\system32\kakatool.dll>
[SearchAssistantOC]
<%SystemRoot%\system32\shdocvw.dll>
[Kingsoft DUBA OnlineScan]
<C:\WINDOWS\system32\Kingsoft\ONLINE~1\kavclean.ocx>
[RealPlayer G2 Control]
<C:\WINDOWS\system32\rmoc3260.dll>
[Shockwave Flash
Object]
<C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx>
[卡卡上网安全助手]
<C:\WINDOWS\system32\kakatool.dll>
[Rising Web Scan
Object]
<C:\WINDOWS\Downloaded Program Files\OL2005.dll>
[超级兔子上网精灵]
<F:\超级兔子\MagicSet\HaokanBar.dll>
[&使用迅雷下载]
<{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445}>
[&使用迅雷下载全部链接]
<>
[上传到QQ网络硬盘]
<F:\QQ2005\AddToNetDisk.htm>
[使用 IDM 下载]
<F:\最新下载工具\IEExt.htm>
[使用 IDM 下载所有链接]
<F:\最新下载工具\IEGetAll.htm>
[易趣购物]
<>
[添加到QQ自定义面板]
<F:\QQ2005\AddPanel.htm>
[添加到QQ表情]
<F:\QQ2005\AddEmotion.htm>
[用QQ彩信发送该图片]
<F:\QQ2005\SendMMS.htm>
==================================
正在运行的进程
[PID: 152][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 204][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 228][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 272][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 284][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 432][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 476][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 532][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 724][C:\WINDOWS\system32\userinit.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 744][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 816][F:\工具\SREng.exe] <Smallfrogs Studio><1.1.0.269>
==================================
文件关联
.TXT OK. [C:\WINDOWS\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [C:\WINDOWS\System32\winhlp32.exe %1]
.INI OK. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF OK. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
==================================
