| 引用: |
【猎梦的贴子】现在扫描了,麻烦你继续看下! ……………… |
有问题的地方罗列如下:
启动/注册表项
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<><C:\Program Files\Common Files\Services\svchost.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><userinit.exe,> [(Verified)Microsoft Windows 2000 Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><kvdxcma.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ctfmon.exe]
<IFEO[ctfmon.exe]><SoundMan.exe> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
==================================
服务
[Help and Support / helpsvc][Stopped/Auto Start]
<C:\WINNT\system32\ineters.exe><1>
[Windows Updata Server / Windows Updata Server][Stopped/Auto Start]
<C:\Program Files\Common Files\Update><N/A>
[Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start]
<C:\WINNT\System32\svchost.exe -k netsvcs-->C:\WINNT\system32\mspmsnsv.dll><Microsoft Corporation>
==================================
驱动程序
[mssock / mssock][Stopped/Manual Start]
<\??\C:\WINNT\system32\mssock.sys><N/A>
[SVKP / SVKP][Running/Auto Start]
<\??\C:\WINNT\system32\SVKP.sys><AntiCracking>
==================================
正在运行的进程
C:\AutoRun.INF
C\:IO.pif
D:\AutoRun.INF
D\:IO.pif
E:\AutoRun.INF
E\:IO.pif
F:\AutoRun.INF
F\:IO.pif