瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 斑竹，高手请教了··碰到难缠的了

1234   1  /  4  页   跳转页

斑竹，高手请教了··碰到难缠的了

收藏
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 20:41 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

斑竹，高手请教了··碰到难缠的了

小弟今IE中标了（QQ大盗也中了一个（··没当回事，找了几个修复软件装上，杀了被改的主页，以为没事了··谁想到，IE收藏夹里多了个有毒的网站连接，我用右键想去直接删除，但只要右键一点，就显示Explorer该程序执行了非法操作，即将关闭。看来注册表给该了··不让删。气人啊。这该怎么办才好啊
最后编辑2005-11-18 01:12:32
分享到：
gototop
 
飞跃迷离
头像
社区嘉宾
  • 帖子:7351
  • 注册: 2004-10-15
  • 来自:
发表于： 2005-11-13 20:48 | 短消息 资料
字号： 小 中 大 2楼

建议您下载并使用HijackThis1.99.1

HijackThis下载地址请参考：
【必读】本版说明及常用小软件下载
http://forum.ikaka.com/topic.asp?board=67&artid=5188931

HijackThis的使用方法-----请参考--瑞星HijackThis专题
http://it.rising.com.cn/newSite/Channels/anti_virus/Antivirus_Faq/TopicExplorerPagePackage/hijackthis.htm

运行HijackThis，先点[扫描]或[Scan]按钮，扫描完成后，[扫描]或[Scan]按钮会变为[保存Log]或[Save Log]按钮，点击它，LOG将会在记事本中显示，再从记事本里复制/粘贴到贴子里。
如果LOG比较长，一贴发不完，你可以分成几个部分发在回贴里。
gototop
 
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 22:01 | 只看楼主 短消息 资料
字号： 小 中 大 3楼

StartupList report, 05-11-13, 21:59:00
StartupList version: 1.52
Started from : E:\123\HIJACKTHIS.EXE
Detected: Windows 98 SE (Win9x 4.10.2222A)
Detected: Internet Explorer v6.00 (6.00.2600.0000)
* Using default options
* Showing rarely important sections
==================================================

Running processes:

C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\RISING\RAV\RAVTIMER.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\北京通信\宽带E线—ADSL\APP\ENTERNET.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\EXPLORER.EXE
E:\123\HIJACKTHIS.EXE

--------------------------------------------------
gototop
 
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 22:02 | 只看楼主 短消息 资料
字号： 小 中 大 4楼

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

ScanRegistry = scanregw.exe/autorun
helper.dll = C:\WINDOWS\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
internat.exe = internat.exe
LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
LoadQM = loadqm.exe
RavTimer = C:\PROGRAM FILES\RISING\RAV\RavTimer.exe
SystemTray = SysTray.Exe
TaskMonitor = C:\WINDOWS\taskmon.exe
TkBellExe = "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices

LoadPowerProfile = Rundll32.exe powrprof.dll,LoadCurrentPwrScheme

--------------------------------------------------

Enumerating Active Setup stub paths:
HKLM\Software\Microsoft\Active Setup\Installed Components
(* = disabled by HKCU twin)

[{89820200-ECBD-11cf-8B85-00AA005B4383}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {89820200-ECBD-11cf-8B85-00AA005B4383}

[MmoptPreferredAudioDevices] *
StubPath = rundll32.exe shell32.dll,Control_RunDLL mmsys.cpl,@0,SMODEMWAVE\______________\ROOT&MDMGEN&COM1

[PerUser_LinkBar_URLs] *
StubPath = C:\WINDOWS\COMMAND\sulfnbk.exe /L

[{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {44BBA840-CC51-11CF-AAFA-00AA00B6015C}

[{7790769C-0471-11d2-AF11-00C04FA35D02}] *
StubPath = rundll32.exe advpack.dll,UserInstStubWrapper {7790769C-0471-11d2-AF11-00C04FA35D02}

[{44BBA851-CC51-11CF-AAFA-00AA00B6015C}] *
StubPath = rundll32.exeadvpack.dll

[{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}] *
StubPath = C:\WINDOWS\SYSTEM\updcrl.exe -e -u C:\WINDOWS\SYSTEM\verisignpub1.crl

[>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] *
StubPath = C:\WINDOWS\inf\unregmp2.exe /ShowWMP

--------------------------------------------------

Checking for EXPLORER.EXE instances:

C:\WINDOWS\Explorer.exe: PRESENT!

C:\Explorer.exe: not present
C:\WINDOWS\Explorer\Explorer.exe: not present
C:\WINDOWS\System\Explorer.exe: not present
C:\WINDOWS\System32\Explorer.exe: not present
C:\WINDOWS\Command\Explorer.exe: not present
C:\WINDOWS\Fonts\Explorer.exe: not present

--------------------------------------------------
gototop
 
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 22:03 | 只看楼主 短消息 资料
字号： 小 中 大 5楼

C:\WINDOWS\WININIT.INI listing:
(Created 13/11/2005, 19:52:16)

[Rename]
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWC=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.COM
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.COM
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWD=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.DLL
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWE=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.EXE
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.LIB
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.LIB
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWO=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.OCX
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.OCX
C:\WINDOWS\1.FWC=C:\WINDOWS\1.COM
NUL=C:\WINDOWS\1.COM
C:\WINDOWS\1.FWD=C:\WINDOWS\1.DLL
NUL=C:\WINDOWS\1.DLL
C:\WINDOWS\1.FWE=C:\WINDOWS\1.EXE
NUL=C:\WINDOWS\1.EXE
C:\WINDOWS\1.FWL=C:\WINDOWS\1.LIB
NUL=C:\WINDOWS\1.LIB
C:\WINDOWS\1.FWO=C:\WINDOWS\1.OCX
NUL=C:\WINDOWS\1.OCX
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWC=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.COM
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.COM
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWD=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.DLL
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWE=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.EXE
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.LIB
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.LIB
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWO=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.OCX
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.OCX
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWC=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.COM
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.COM
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWD=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.DLL
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWE=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.EXE
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.LIB
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.LIB
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWO=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.OCX
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.OCX
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWC=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.COM
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.COM
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWD=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.DLL
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWE=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.EXE
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.LIB
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.LIB
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWO=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.OCX
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.OCX
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWC=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.COM
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.COM
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWD=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.DLL
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWE=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.EXE
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.LIB
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.LIB
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWO=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.OCX
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.OCX
C:\WINDOWS\HOSTS.FWC=C:\WINDOWS\HOSTS.COM
NUL=C:\WINDOWS\HOSTS.COM
C:\WINDOWS\HOSTS.FWD=C:\WINDOWS\HOSTS.DLL
NUL=C:\WINDOWS\HOSTS.DLL
C:\WINDOWS\HOSTS.FWE=C:\WINDOWS\HOSTS.EXE
NUL=C:\WINDOWS\HOSTS.EXE
C:\WINDOWS\HOSTS.FWL=C:\WINDOWS\HOSTS.LIB
NUL=C:\WINDOWS\HOSTS.LIB
C:\WINDOWS\HOSTS.FWO=C:\WINDOWS\HOSTS.OCX
NUL=C:\WINDOWS\HOSTS.OCX
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWC=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.COM
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.COM
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWD=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.DLL
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.DLL
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWE=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.EXE
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.EXE
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.LIB
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.LIB
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWO=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.OCX
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.OCX
C:\WINDOWS\SYSTEM\CTXMA.FWC=C:\WINDOWS\SYSTEM\CTXMA.COM
NUL=C:\WINDOWS\SYSTEM\CTXMA.COM
C:\WINDOWS\SYSTEM\CTXMA.FWD=C:\WINDOWS\SYSTEM\CTXMA.DLL
NUL=C:\WINDOWS\SYSTEM\CTXMA.DLL
C:\WINDOWS\SYSTEM\CTXMA.FWE=C:\WINDOWS\SYSTEM\CTXMA.EXE
NUL=C:\WINDOWS\SYSTEM\CTXMA.EXE
C:\WINDOWS\SYSTEM\CTXMA.FWL=C:\WINDOWS\SYSTEM\CTXMA.LIB
NUL=C:\WINDOWS\SYSTEM\CTXMA.LIB
C:\WINDOWS\SYSTEM\CTXMA.FWO=C:\WINDOWS\SYSTEM\CTXMA.OCX
NUL=C:\WINDOWS\SYSTEM\CTXMA.OCX
C:\WINDOWS\SYSTEM\DOFFNC.FWC=C:\WINDOWS\SYSTEM\DOFFNC.COM
NUL=C:\WINDOWS\SYSTEM\DOFFNC.COM
C:\WINDOWS\SYSTEM\DOFFNC.FWD=C:\WINDOWS\SYSTEM\DOFFNC.DLL
NUL=C:\WINDOWS\SYSTEM\DOFFNC.DLL
C:\WINDOWS\SYSTEM\DOFFNC.FWE=C:\WINDOWS\SYSTEM\DOFFNC.EXE
NUL=C:\WINDOWS\SYSTEM\DOFFNC.EXE
C:\WINDOWS\SYSTEM\DOFFNC.FWL=C:\WINDOWS\SYSTEM\DOFFNC.LIB
NUL=C:\WINDOWS\SYSTEM\DOFFNC.LIB
C:\WINDOWS\SYSTEM\DOFFNC.FWO=C:\WINDOWS\SYSTEM\DOFFNC.OCX
NUL=C:\WINDOWS\SYSTEM\DOFFNC.OCX
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWC=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.COM
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.COM
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWD=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.DLL
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.DLL
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWE=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.EXE
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.EXE
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.LIB
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.LIB
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWO=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.OCX
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.OCX
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWS=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.SYS
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.SYS
C:\WINDOWS\SYSTEM\JFOFA.FWC=C:\WINDOWS\SYSTEM\JFOFA.COM
NUL=C:\WINDOWS\SYSTEM\JFOFA.COM
C:\WINDOWS\SYSTEM\JFOFA.FWD=C:\WINDOWS\SYSTEM\JFOFA.DLL
NUL=C:\WINDOWS\SYSTEM\JFOFA.DLL
C:\WINDOWS\SYSTEM\JFOFA.FWE=C:\WINDOWS\SYSTEM\JFOFA.EXE
NUL=C:\WINDOWS\SYSTEM\JFOFA.EXE
C:\WINDOWS\SYSTEM\JFOFA.FWL=C:\WINDOWS\SYSTEM\JFOFA.LIB
NUL=C:\WINDOWS\SYSTEM\JFOFA.LIB
C:\WINDOWS\SYSTEM\JFOFA.FWO=C:\WINDOWS\SYSTEM\JFOFA.OCX
NUL=C:\WINDOWS\SYSTEM\JFOFA.OCX
C:\WINDOWS\SYSTEM\MSAPI.FWC=C:\WINDOWS\SYSTEM\MSAPI.COM
NUL=C:\WINDOWS\SYSTEM\MSAPI.COM
C:\WINDOWS\SYSTEM\MSAPI.FWD=C:\WINDOWS\SYSTEM\MSAPI.DLL
NUL=C:\WINDOWS\SYSTEM\MSAPI.DLL
C:\WINDOWS\SYSTEM\MSAPI.FWE=C:\WINDOWS\SYSTEM\MSAPI.EXE
NUL=C:\WINDOWS\SYSTEM\MSAPI.EXE
C:\WINDOWS\SYSTEM\MSAPI.FWL=C:\WINDOWS\SYSTEM\MSAPI.LIB
NUL=C:\WINDOWS\SYSTEM\MSAPI.LIB
C:\WINDOWS\SYSTEM\MSAPI.FWO=C:\WINDOWS\SYSTEM\MSAPI.OCX
NUL=C:\WINDOWS\SYSTEM\MSAPI.OCX
C:\WINDOWS\SYSTEM\MSASMSN7.FWC=C:\WINDOWS\SYSTEM\MSASMSN7.COM
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.COM
C:\WINDOWS\SYSTEM\MSASMSN7.FWD=C:\WINDOWS\SYSTEM\MSASMSN7.DLL
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.DLL
C:\WINDOWS\SYSTEM\MSASMSN7.FWE=C:\WINDOWS\SYSTEM\MSASMSN7.EXE
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.EXE
C:\WINDOWS\SYSTEM\MSASMSN7.FWL=C:\WINDOWS\SYSTEM\MSASMSN7.LIB
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.LIB
C:\WINDOWS\SYSTEM\MSASMSN7.FWO=C:\WINDOWS\SYSTEM\MSASMSN7.OCX
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.OCX
C:\WINDOWS\SYSTEM\RUNDLL32.FWC=C:\WINDOWS\SYSTEM\RUNDLL32.COM
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.COM
C:\WINDOWS\SYSTEM\RUNDLL32.FWD=C:\WINDOWS\SYSTEM\RUNDLL32.DLL
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.DLL
C:\WINDOWS\SYSTEM\RUNDLL32.FWE=C:\WINDOWS\SYSTEM\RUNDLL32.EXE
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\RUNDLL32.FWL=C:\WINDOWS\SYSTEM\RUNDLL32.LIB
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.LIB
C:\WINDOWS\SYSTEM\RUNDLL32.FWO=C:\WINDOWS\SYSTEM\RUNDLL32.OCX
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.OCX
C:\WINDOWS\SYSTEM\TWAIN_16.FWC=C:\WINDOWS\SYSTEM\TWAIN_16.COM
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.COM
C:\WINDOWS\SYSTEM\TWAIN_16.FWD=C:\WINDOWS\SYSTEM\TWAIN_16.DLL
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.DLL
gototop
 
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 22:04 | 只看楼主 短消息 资料
字号： 小 中 大 6楼

C:\WINDOWS\SYSTEM\TWAIN_16.FWE=C:\WINDOWS\SYSTEM\TWAIN_16.EXE
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.EXE
C:\WINDOWS\SYSTEM\TWAIN_16.FWL=C:\WINDOWS\SYSTEM\TWAIN_16.LIB
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.LIB
C:\WINDOWS\SYSTEM\TWAIN_16.FWO=C:\WINDOWS\SYSTEM\TWAIN_16.OCX
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.OCX
C:\WINDOWS\SYSTEM\WHBOY.FWC=C:\WINDOWS\SYSTEM\WHBOY.COM
NUL=C:\WINDOWS\SYSTEM\WHBOY.COM
C:\WINDOWS\SYSTEM\WHBOY.FWD=C:\WINDOWS\SYSTEM\WHBOY.DLL
NUL=C:\WINDOWS\SYSTEM\WHBOY.DLL
C:\WINDOWS\SYSTEM\WHBOY.FWE=C:\WINDOWS\SYSTEM\WHBOY.EXE
NUL=C:\WINDOWS\SYSTEM\WHBOY.EXE
C:\WINDOWS\SYSTEM\WHBOY.FWL=C:\WINDOWS\SYSTEM\WHBOY.LIB
NUL=C:\WINDOWS\SYSTEM\WHBOY.LIB
C:\WINDOWS\SYSTEM\WHBOY.FWO=C:\WINDOWS\SYSTEM\WHBOY.OCX
NUL=C:\WINDOWS\SYSTEM\WHBOY.OCX
C:\WINDOWS\SYSTEM\WMIMGR.FWC=C:\WINDOWS\SYSTEM\WMIMGR.COM
NUL=C:\WINDOWS\SYSTEM\WMIMGR.COM
C:\WINDOWS\SYSTEM\WMIMGR.FWD=C:\WINDOWS\SYSTEM\WMIMGR.DLL
NUL=C:\WINDOWS\SYSTEM\WMIMGR.DLL
C:\WINDOWS\SYSTEM\WMIMGR.FWE=C:\WINDOWS\SYSTEM\WMIMGR.EXE
NUL=C:\WINDOWS\SYSTEM\WMIMGR.EXE
C:\WINDOWS\SYSTEM\WMIMGR.FWL=C:\WINDOWS\SYSTEM\WMIMGR.LIB
NUL=C:\WINDOWS\SYSTEM\WMIMGR.LIB
C:\WINDOWS\SYSTEM\WMIMGR.FWO=C:\WINDOWS\SYSTEM\WMIMGR.OCX
NUL=C:\WINDOWS\SYSTEM\WMIMGR.OCX
C:\WINDOWS\SYSTEM\WUCXT.FWC=C:\WINDOWS\SYSTEM\WUCXT.COM
NUL=C:\WINDOWS\SYSTEM\WUCXT.COM
C:\WINDOWS\SYSTEM\WUCXT.FWD=C:\WINDOWS\SYSTEM\WUCXT.DLL
NUL=C:\WINDOWS\SYSTEM\WUCXT.DLL
C:\WINDOWS\SYSTEM\WUCXT.FWE=C:\WINDOWS\SYSTEM\WUCXT.EXE
NUL=C:\WINDOWS\SYSTEM\WUCXT.EXE
C:\WINDOWS\SYSTEM\WUCXT.FWL=C:\WINDOWS\SYSTEM\WUCXT.LIB
NUL=C:\WINDOWS\SYSTEM\WUCXT.LIB
C:\WINDOWS\SYSTEM\WUCXT.FWO=C:\WINDOWS\SYSTEM\WUCXT.OCX
NUL=C:\WINDOWS\SYSTEM\WUCXT.OCX
C:\WINDOWS\TEMP\SE.FWC=C:\WINDOWS\TEMP\SE.COM
NUL=C:\WINDOWS\TEMP\SE.COM
C:\WINDOWS\TEMP\SE.FWD=C:\WINDOWS\TEMP\SE.DLL
NUL=C:\WINDOWS\TEMP\SE.DLL
C:\WINDOWS\TEMP\SE.FWE=C:\WINDOWS\TEMP\SE.EXE
NUL=C:\WINDOWS\TEMP\SE.EXE
C:\WINDOWS\TEMP\SE.FWL=C:\WINDOWS\TEMP\SE.LIB
NUL=C:\WINDOWS\TEMP\SE.LIB
C:\WINDOWS\TEMP\SE.FWO=C:\WINDOWS\TEMP\SE.OCX
NUL=C:\WINDOWS\TEMP\SE.OCX

--------------------------------------------------

C:\WINDOWS\WININIT.BAK listing:
(Created 13/11/2005, 19:50:0)

[Rename]
C:\PROGRAM FILES\LTUCX\1002\C0.FWD=C:\PROGRAM FILES\LTUCX\1002\C0.DLL
NUL=C:\PROGRAM FILES\LTUCX\1002\C0.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWC=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.COM
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.COM
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWD=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.DLL
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.DLL
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWE=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.EXE
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.LIB
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.LIB
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.FWO=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.OCX
NUL=C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\MSINFO.OCX
C:\WINDOWS\1.FWC=C:\WINDOWS\1.COM
NUL=C:\WINDOWS\1.COM
C:\WINDOWS\1.FWD=C:\WINDOWS\1.DLL
NUL=C:\WINDOWS\1.DLL
C:\WINDOWS\1.FWE=C:\WINDOWS\1.EXE
NUL=C:\WINDOWS\1.EXE
C:\WINDOWS\1.FWL=C:\WINDOWS\1.LIB
NUL=C:\WINDOWS\1.LIB
C:\WINDOWS\1.FWO=C:\WINDOWS\1.OCX
NUL=C:\WINDOWS\1.OCX
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWC=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.COM
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.COM
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWD=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.DLL
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.DLL
gototop
 
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 22:05 | 只看楼主 短消息 资料
字号： 小 中 大 7楼

C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWE=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.EXE
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.LIB
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.LIB
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.FWO=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.OCX
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_ISC.OCX
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWC=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.COM
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.COM
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWD=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.DLL
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWE=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.EXE
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.LIB
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.LIB
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.FWO=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.OCX
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_0518\_IS_WEBH.OCX
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWC=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.COM
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.COM
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWD=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.DLL
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWE=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.EXE
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.LIB
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.LIB
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.FWO=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.OCX
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_ISC.OCX
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWC=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.COM
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.COM
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWD=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.DLL
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.DLL
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWE=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.EXE
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.EXE
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.LIB
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.LIB
C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.FWO=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.OCX
NUL=C:\WINDOWS\DOWNLOADED PROGRAM FILES\_IS_WEBH.OCX
C:\WINDOWS\HOSTS.FWC=C:\WINDOWS\HOSTS.COM
NUL=C:\WINDOWS\HOSTS.COM
C:\WINDOWS\HOSTS.FWD=C:\WINDOWS\HOSTS.DLL
NUL=C:\WINDOWS\HOSTS.DLL
C:\WINDOWS\HOSTS.FWE=C:\WINDOWS\HOSTS.EXE
NUL=C:\WINDOWS\HOSTS.EXE
C:\WINDOWS\HOSTS.FWL=C:\WINDOWS\HOSTS.LIB
NUL=C:\WINDOWS\HOSTS.LIB
C:\WINDOWS\HOSTS.FWO=C:\WINDOWS\HOSTS.OCX
NUL=C:\WINDOWS\HOSTS.OCX
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWC=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.COM
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.COM
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWD=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.DLL
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.DLL
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWE=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.EXE
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.EXE
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.LIB
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.LIB
C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.FWO=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.OCX
NUL=C:\WINDOWS\LOCAL SETTINGS\TEMP\SE.OCX
C:\WINDOWS\SYSTEM\CTXMA.FWC=C:\WINDOWS\SYSTEM\CTXMA.COM
NUL=C:\WINDOWS\SYSTEM\CTXMA.COM
C:\WINDOWS\SYSTEM\CTXMA.FWD=C:\WINDOWS\SYSTEM\CTXMA.DLL
NUL=C:\WINDOWS\SYSTEM\CTXMA.DLL
C:\WINDOWS\SYSTEM\CTXMA.FWE=C:\WINDOWS\SYSTEM\CTXMA.EXE
NUL=C:\WINDOWS\SYSTEM\CTXMA.EXE
C:\WINDOWS\SYSTEM\CTXMA.FWL=C:\WINDOWS\SYSTEM\CTXMA.LIB
NUL=C:\WINDOWS\SYSTEM\CTXMA.LIB
C:\WINDOWS\SYSTEM\CTXMA.FWO=C:\WINDOWS\SYSTEM\CTXMA.OCX
NUL=C:\WINDOWS\SYSTEM\CTXMA.OCX
C:\WINDOWS\SYSTEM\DOFFNC.FWC=C:\WINDOWS\SYSTEM\DOFFNC.COM
NUL=C:\WINDOWS\SYSTEM\DOFFNC.COM
C:\WINDOWS\SYSTEM\DOFFNC.FWD=C:\WINDOWS\SYSTEM\DOFFNC.DLL
NUL=C:\WINDOWS\SYSTEM\DOFFNC.DLL
C:\WINDOWS\SYSTEM\DOFFNC.FWE=C:\WINDOWS\SYSTEM\DOFFNC.EXE
NUL=C:\WINDOWS\SYSTEM\DOFFNC.EXE
C:\WINDOWS\SYSTEM\DOFFNC.FWL=C:\WINDOWS\SYSTEM\DOFFNC.LIB
NUL=C:\WINDOWS\SYSTEM\DOFFNC.LIB
C:\WINDOWS\SYSTEM\DOFFNC.FWO=C:\WINDOWS\SYSTEM\DOFFNC.OCX
NUL=C:\WINDOWS\SYSTEM\DOFFNC.OCX
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWC=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.COM
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.COM
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWD=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.DLL
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.DLL
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWE=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.EXE
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.EXE
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.LIB
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.LIB
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWO=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.OCX
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.OCX
C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.FWS=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.SYS
NUL=C:\WINDOWS\SYSTEM\DRIVERS\BOOTCOM.SYS
C:\WINDOWS\SYSTEM\JFOFA.FWC=C:\WINDOWS\SYSTEM\JFOFA.COM
NUL=C:\WINDOWS\SYSTEM\JFOFA.COM
C:\WINDOWS\SYSTEM\JFOFA.FWD=C:\WINDOWS\SYSTEM\JFOFA.DLL
NUL=C:\WINDOWS\SYSTEM\JFOFA.DLL
C:\WINDOWS\SYSTEM\JFOFA.FWE=C:\WINDOWS\SYSTEM\JFOFA.EXE
NUL=C:\WINDOWS\SYSTEM\JFOFA.EXE
C:\WINDOWS\SYSTEM\JFOFA.FWL=C:\WINDOWS\SYSTEM\JFOFA.LIB
NUL=C:\WINDOWS\SYSTEM\JFOFA.LIB
C:\WINDOWS\SYSTEM\JFOFA.FWO=C:\WINDOWS\SYSTEM\JFOFA.OCX
NUL=C:\WINDOWS\SYSTEM\JFOFA.OCX
C:\WINDOWS\SYSTEM\MSAPI.FWC=C:\WINDOWS\SYSTEM\MSAPI.COM
NUL=C:\WINDOWS\SYSTEM\MSAPI.COM
C:\WINDOWS\SYSTEM\MSAPI.FWD=C:\WINDOWS\SYSTEM\MSAPI.DLL
NUL=C:\WINDOWS\SYSTEM\MSAPI.DLL
C:\WINDOWS\SYSTEM\MSAPI.FWE=C:\WINDOWS\SYSTEM\MSAPI.EXE
NUL=C:\WINDOWS\SYSTEM\MSAPI.EXE
C:\WINDOWS\SYSTEM\MSAPI.FWL=C:\WINDOWS\SYSTEM\MSAPI.LIB
NUL=C:\WINDOWS\SYSTEM\MSAPI.LIB
C:\WINDOWS\SYSTEM\MSAPI.FWO=C:\WINDOWS\SYSTEM\MSAPI.OCX
NUL=C:\WINDOWS\SYSTEM\MSAPI.OCX
C:\WINDOWS\SYSTEM\MSASMSN7.FWC=C:\WINDOWS\SYSTEM\MSASMSN7.COM
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.COM
C:\WINDOWS\SYSTEM\MSASMSN7.FWD=C:\WINDOWS\SYSTEM\MSASMSN7.DLL
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.DLL
C:\WINDOWS\SYSTEM\MSASMSN7.FWE=C:\WINDOWS\SYSTEM\MSASMSN7.EXE
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.EXE
C:\WINDOWS\SYSTEM\MSASMSN7.FWL=C:\WINDOWS\SYSTEM\MSASMSN7.LIB
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.LIB
C:\WINDOWS\SYSTEM\MSASMSN7.FWO=C:\WINDOWS\SYSTEM\MSASMSN7.OCX
NUL=C:\WINDOWS\SYSTEM\MSASMSN7.OCX
C:\WINDOWS\SYSTEM\RUNDLL32.FWC=C:\WINDOWS\SYSTEM\RUNDLL32.COM
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.COM
C:\WINDOWS\SYSTEM\RUNDLL32.FWD=C:\WINDOWS\SYSTEM\RUNDLL32.DLL
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.DLL
C:\WINDOWS\SYSTEM\RUNDLL32.FWE=C:\WINDOWS\SYSTEM\RUNDLL32.EXE
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\RUNDLL32.FWL=C:\WINDOWS\SYSTEM\RUNDLL32.LIB
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.LIB
C:\WINDOWS\SYSTEM\RUNDLL32.FWO=C:\WINDOWS\SYSTEM\RUNDLL32.OCX
NUL=C:\WINDOWS\SYSTEM\RUNDLL32.OCX
C:\WINDOWS\SYSTEM\TWAIN_16.FWC=C:\WINDOWS\SYSTEM\TWAIN_16.COM
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.COM
C:\WINDOWS\SYSTEM\TWAIN_16.FWD=C:\WINDOWS\SYSTEM\TWAIN_16.DLL
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.DLL
C:\WINDOWS\SYSTEM\TWAIN_16.FWE=C:\WINDOWS\SYSTEM\TWAIN_16.EXE
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.EXE
gototop
 
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 22:05 | 只看楼主 短消息 资料
字号： 小 中 大 8楼

C:\WINDOWS\SYSTEM\TWAIN_16.FWL=C:\WINDOWS\SYSTEM\TWAIN_16.LIB
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.LIB
C:\WINDOWS\SYSTEM\TWAIN_16.FWO=C:\WINDOWS\SYSTEM\TWAIN_16.OCX
NUL=C:\WINDOWS\SYSTEM\TWAIN_16.OCX
C:\WINDOWS\SYSTEM\WHBOY.FWC=C:\WINDOWS\SYSTEM\WHBOY.COM
NUL=C:\WINDOWS\SYSTEM\WHBOY.COM
C:\WINDOWS\SYSTEM\WHBOY.FWD=C:\WINDOWS\SYSTEM\WHBOY.DLL
NUL=C:\WINDOWS\SYSTEM\WHBOY.DLL
C:\WINDOWS\SYSTEM\WHBOY.FWE=C:\WINDOWS\SYSTEM\WHBOY.EXE
NUL=C:\WINDOWS\SYSTEM\WHBOY.EXE
C:\WINDOWS\SYSTEM\WHBOY.FWL=C:\WINDOWS\SYSTEM\WHBOY.LIB
NUL=C:\WINDOWS\SYSTEM\WHBOY.LIB
C:\WINDOWS\SYSTEM\WHBOY.FWO=C:\WINDOWS\SYSTEM\WHBOY.OCX
NUL=C:\WINDOWS\SYSTEM\WHBOY.OCX
C:\WINDOWS\SYSTEM\WMIMGR.FWC=C:\WINDOWS\SYSTEM\WMIMGR.COM
NUL=C:\WINDOWS\SYSTEM\WMIMGR.COM
C:\WINDOWS\SYSTEM\WMIMGR.FWD=C:\WINDOWS\SYSTEM\WMIMGR.DLL
NUL=C:\WINDOWS\SYSTEM\WMIMGR.DLL
C:\WINDOWS\SYSTEM\WMIMGR.FWE=C:\WINDOWS\SYSTEM\WMIMGR.EXE
NUL=C:\WINDOWS\SYSTEM\WMIMGR.EXE
C:\WINDOWS\SYSTEM\WMIMGR.FWL=C:\WINDOWS\SYSTEM\WMIMGR.LIB
NUL=C:\WINDOWS\SYSTEM\WMIMGR.LIB
C:\WINDOWS\SYSTEM\WMIMGR.FWO=C:\WINDOWS\SYSTEM\WMIMGR.OCX
NUL=C:\WINDOWS\SYSTEM\WMIMGR.OCX
C:\WINDOWS\SYSTEM\WUCXT.FWC=C:\WINDOWS\SYSTEM\WUCXT.COM
NUL=C:\WINDOWS\SYSTEM\WUCXT.COM
C:\WINDOWS\SYSTEM\WUCXT.FWD=C:\WINDOWS\SYSTEM\WUCXT.DLL
NUL=C:\WINDOWS\SYSTEM\WUCXT.DLL
C:\WINDOWS\SYSTEM\WUCXT.FWE=C:\WINDOWS\SYSTEM\WUCXT.EXE
NUL=C:\WINDOWS\SYSTEM\WUCXT.EXE
C:\WINDOWS\SYSTEM\WUCXT.FWL=C:\WINDOWS\SYSTEM\WUCXT.LIB
NUL=C:\WINDOWS\SYSTEM\WUCXT.LIB
C:\WINDOWS\SYSTEM\WUCXT.FWO=C:\WINDOWS\SYSTEM\WUCXT.OCX
NUL=C:\WINDOWS\SYSTEM\WUCXT.OCX
C:\WINDOWS\TEMP\SE.FWC=C:\WINDOWS\TEMP\SE.COM
NUL=C:\WINDOWS\TEMP\SE.COM
C:\WINDOWS\TEMP\SE.FWD=C:\WINDOWS\TEMP\SE.DLL
NUL=C:\WINDOWS\TEMP\SE.DLL
C:\WINDOWS\TEMP\SE.FWE=C:\WINDOWS\TEMP\SE.EXE
NUL=C:\WINDOWS\TEMP\SE.EXE
C:\WINDOWS\TEMP\SE.FWL=C:\WINDOWS\TEMP\SE.LIB
NUL=C:\WINDOWS\TEMP\SE.LIB
C:\WINDOWS\TEMP\SE.FWO=C:\WINDOWS\TEMP\SE.OCX
NUL=C:\WINDOWS\TEMP\SE.OCX

--------------------------------------------------
gototop
 
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 22:06 | 只看楼主 短消息 资料
字号： 小 中 大 9楼

Checking for superhidden extensions:

.lnk: HIDDEN! (arrow overlay: yes)
.pif: HIDDEN! (arrow overlay: yes)
.exe: not hidden
.com: not hidden
.bat: not hidden
.hta: not hidden
.scr: not hidden
.shs: HIDDEN!
.shb: HIDDEN!
.vbs: not hidden
.vbe: not hidden
.wsh: not hidden
.scf: HIDDEN! (arrow overlay: NO!)
.url: HIDDEN! (arrow overlay: yes)
.js: not hidden
.jse: not hidden

--------------------------------------------------

Enumerating Browser Helper Objects:

(no name) - C:\PROGRAM FILES\FLASHGET\JCCATCH.DLL - {A5366673-E8CA-11D3-9CD9-0090271D075B}
IE - C:\WINDOWS\DOWNLOADED PROGRAM FILES\CNSHOOK.DLL - {D157330A-9EF3-49F8-9A67-4141AC41ADD4}

--------------------------------------------------

Enumerating Task Scheduler jobs:

启用 Application Start.job

--------------------------------------------------

Enumerating ShellServiceObjectDelayLoad items:

WebCheck: C:\WINDOWS\SYSTEM\WEBCHECK.DLL

--------------------------------------------------
End of report, 27,905 bytes
Report generated in 0.156 seconds

Command line options:
  /verbose  - to add additional info on each section
  /complete - to include empty sections and unsuspicious data
  /full    - to include several rarely-important sections
  /force9x  - to include Win9x-only startups even if running on WinNT
  /forcent  - to include WinNT-only startups even if running on Win9x
  /forceall - to include all Win9x and WinNT startups, regardless of platform
  /history  - to list version history only
gototop
 
810626
头像
初生襁褓狮
  • 帖子:24
  • 注册: 2005-11-13
  • 来自:
发表于： 2005-11-13 22:08 | 只看楼主 短消息 资料
字号： 小 中 大 10楼

贴完了··拜请高手献身讲解啊··另，我今用过美萍IE清理专家和黄山IE修复专家杀过
gototop
 
<<上一主题|下一主题>>
1234   1  /  4  页   跳转页
页面顶部
Powered by Discuz!NT