这个是autoruns的:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ ccAppCommon Client User SessionSymantec Corporationc:\program files\common files\symantec shared\ccapp.exe
+ Cpqsetc:\program files\hpq\default settings\cpqset.exe
+ eabconfg.cplQuick Launch ButtonsHewlett-Packard c:\program files\hpq\quick launch buttons\eabservr.exe
+ LOGOCEXPLORER Microsoft 基础类应用程序c:\program files\microsoft office\winlogom.exe
+ MICCFTMON Microsoft 基础类应用程序c:\program files\system32\cftmon.exe
+ NvCplDaemonNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll
+ nwizNVIDIA nView Wizard, Version 44.82 NVIDIA Corporationc:\windows\system32\nwiz.exe
+ SSC_UserPromptNorton Security Center HelperSymantec Corporationc:\program files\common files\symantec shared\security center\usrprmpt.exe
+ StormCodec_Helperc:\program files\ringz studio\storm codec\stormset.exe
+ Symantec NetDriver MonitorSymantec Security Drivers Install MonitorSymantec Corporationc:\program files\symnetdrv\sndmon.exe
+ SynTPEnhSynaptics TouchPad EnhancementsSynaptics, Inc.c:\program files\synaptics\syntp\syntpenh.exe
+ SynTPLprTouchPad Driver Helper ApplicationSynaptics, Inc.c:\program files\synaptics\syntp\syntplpr.exe
+ SYSLOGOCEXPLORER Microsoft 基础类应用程序c:\program files\microsoft office\winlogo.exe
+ WINEXPSYSEXP Microsoft 基础类应用程序c:\program files\microsoft office\sysexp.exe
+ Zone Labs ClientZone Labs ClientZone Labs, LLCc:\program files\zone labs\zonealarm\zlclient.exe
C:\Documents and Settings\All Users\「开始」菜单\程序\启动
+ Adobe Reader Speed Launch.lnkAdobe Acrobat SpeedLauncherAdobe Systems Incorporatedc:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
C:\Documents and Settings\zhssy\「开始」菜单\程序\启动
+ PowerReg Scheduler V3.exePowerReg SchedulerLeader Technologiesc:\documents and settings\zhssy\「开始」菜单\程序\启动\powerreg scheduler v3.exe
+ PowerReg Scheduler.exePRegScheduler MFC Applicationc:\documents and settings\zhssy\「开始」菜单\程序\启动\powerreg scheduler.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Desktop ExplorerNVIDIA Desktop Explorer, Version 44.82 NVIDIA Corporationc:\windows\system32\nvshell.dll
+ Desktop Explorer MenuNVIDIA Desktop Explorer, Version 44.82 NVIDIA Corporationc:\windows\system32\nvshell.dll
+ Display Panning CPL ExtensionFile not found: deskpan.dll
+ HyperTerminal Icon ExtHyperTerminal Applet LibraryHilgraeve, Inc.c:\windows\system32\hticons.dll
+ Shell Extensions for RealOne PlayerRealPlayer Shell ExtensionsRealNetworks, Inc.c:\program files\real\realplayer\rpshell.dll
+ WinRAR shell extensionc:\program files\winrar\rarext.dll
HKLM\Software\Classes\Folder\Shellex\ColumnHandlers
+ PDF Shell ExtensionPDF Shell ExtensionAdobe Systems, Inc.c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ AcroIEHlprObj ClassAdobe Acrobat IE Helper Version 7.0 for ActiveXAdobe Systems Incorporatedc:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
+ CNavExtBho ClassNorton AntiVirusNAVShellExt ModuleSymantec Corporationc:\program files\norton antivirus\navshext.dll
+ IeCatch2 Classjccatch ModuleAmaze Softc:\program files\flashget-v1.71\jccatch.dll
+ IEHandle ClassIEHandler for ScenicPlayer江苏科建教育软件有限责任公司c:\program files\common files\collegesoft\share components\tphandle.dll
+ Infofo 工具栏珊瑚虫 Infofo 工具栏珊瑚虫工作室 泰格工作室c:\program files\infofo bar\infofobar.dll
+ ThunderIEHelper Classxunleibho Modulec:\windows\system32\xunleibho_v4.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ Norton AntiVirusNorton AntiVirusNAVShellExt ModuleSymantec Corporationc:\program files\norton antivirus\navshext.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ &FlashGetFlashGetAmaze Softc:\program files\flashget-v1.71\flashget.exe
+ 腾讯QQFile not found: D:\QQ\QQ.EXE
Task Scheduler
+ Symantec NetDetect.jobSymantec NetDetectSymantec Corporationc:\program files\symantec\liveupdate\ndetect.exe
HKLM\System\CurrentControlSet\Services
+ ccEvtMgrSymantec 事件管理器Symantec Corporationc:\program files\common files\symantec shared\ccevtmgr.exe
+ ccSetMgrSymantec 设置管理器Symantec Corporationc:\program files\common files\symantec shared\ccsetmgr.exe
+ navapsvc处理 Norton AntiVirus 自动防护事件。Symantec Corporationc:\program files\norton antivirus\navapsvc.exe
+ NVSvcNVIDIA Driver Helper Service, Version 44.82NVIDIA Corporationc:\windows\system32\nvsvc32.exe
+ SBServiceScriptBlocking registrationSymantec Corporationc:\program files\common files\symantec shared\script blocking\sbserv.exe
+ SymWSCSymantec WMI ServiceSymantec Corporationc:\program files\common files\symantec shared\security center\symwsc.exe
+ vsmon监视 Internet 通讯并为禁止的访问生成警报。Zone Labs, LLCc:\windows\system32\zonelabs\vsmon.exe
HKLM\System\CurrentControlSet\Services
+ BCM43XXBroadcom Corporation NDIS 5.0 wireless driverBroadcom Corporationc:\windows\system32\drivers\bcmwl5.sys
+ CAMCAUDConexant WDM AC97 Audio DriverConexant Systems Inc.c:\windows\system32\drivers\camcaud.sys
+ CAMCHALAConexant AmcHal DriverConexant Systems Inc.c:\windows\system32\drivers\camchal.sys
+ d347busPnP BIOS Extension c:\windows\system32\drivers\d347bus.sys
+ d347prtSCSI miniport c:\windows\system32\drivers\d347prt.sys
+ eabfiltrQLB PS/2 Keyboard filter driverHewlett-Packard Companyc:\windows\system32\drivers\eabfiltr.sys
+ eabusbQLB USB Keyboard filter driverHewlett-Packard Companyc:\windows\system32\drivers\eabusb.sys
+ EMCRENE PCI Memory Card Reader DriverENE Technology Inc.c:\windows\system32\drivers\emcr7sk.sys
+ HSF_DPHSF_DP driverConexant Systems, Inc.c:\windows\system32\drivers\hsf_dp.sys
+ HSFHWICHHSFHWICH WDM driverConexant Systems, Inc.c:\windows\system32\drivers\hsfhwich.sys
+ mdmxsdkDiagnostic Interface DRIVERConexantc:\windows\system32\drivers\mdmxsdk.sys
+ NAVENGAV EngineSymantec Corporationc:\program files\common files\symantec shared\virusdefs\20060117.007\naveng.sys
+ NAVEX15AV EngineSymantec Corporationc:\program files\common files\symantec shared\virusdefs\20060117.007\navex15.sys
+ npkcryptnProtect KeyCrypt DriverINCA Internet Co., Ltd.d:\sy\qq\npkcrypt.sys
+ npkycrypFile not found: D:\sy\qq\npkycryp.sys
+ NSCIRDANSC Fast Infrared Driver.National Semiconductor Corporationc:\windows\system32\drivers\nscirda.sys
+ nvNVIDIA Compatible Windows 2000 Miniport Driver, Version 44.82 NVIDIA Corporationc:\windows\system32\drivers\nv4_mini.sys
+ PtilinkDirect Parallel Link DriverParallel Technologies, Inc.c:\windows\system32\drivers\ptilink.sys
+ rtl8139Realtek RTL8139/810x Family NDIS 5.1 DrvRealtek Semiconductor Corporation c:\windows\system32\drivers\r8139n51.sys
+ SAVRTAutoProtectSymantec Corporationc:\program files\norton antivirus\savrt.sys
+ SAVRTPELSAVRTPELSymantec Corporationc:\program files\norton antivirus\savrtpel.sys
+ SecdrvSafeDisc driverMacrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.c:\windows\system32\drivers\secdrv.sys
+ StreamDispatcherConexant Stream DispatcherConexant Systems, Inc.c:\windows\system32\drivers\strmdisp.sys
+ SymEventSymantec Event LibrarySymantec Corporationc:\program files\symantec\symevent.sys
+ SYMREDRVRedirector Filter DriverSymantec Corporationc:\windows\system32\drivers\symredrv.sys
+ SYMTDINetwork Dispatch DriverSymantec Corporationc:\windows\system32\drivers\symtdi.sys
+ SynTPSynaptics Touchpad DriverSynaptics, Inc.c:\windows\system32\drivers\syntp.sys
+ vsdatantTrueVector Device DriverZone Labs, LLCc:\windows\system32\vsdatant.sys
+ winachsfWinACHSF driverConexant Systems, Inc.c:\windows\system32\drivers\hsf_cnxt.sys
+ XBBO99File not found: C:\WINDOWS\TEMP\u4.sys