1   1  /  1  页   跳转

无邪大哥来帮我忙,

无邪大哥来帮我忙,

2006-10-09,14:05:01

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional  (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><D:\WINDOWS\System32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <rx><D:\WINDOWS\System32\explore.exe>  [N/A]
    <wow><D:\WINDOWS\System32\Launcher.exe>  [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <TkBellExe><"D:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <YLive.exe><D:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>  [Yahoo! China]
    <yassistse><"D:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">  [Yahoo! China]
    <CnsMin><Rundll32.exe D:\WINDOWS\downlo~1\CnsMin.dll,Rundll32>  [北京三七二一科技有限公司]
    <stup.exe><D:\PROGRA~1\TENCENT\Adplus\stup.exe>  [Tencent]
    <wdfmgr32><D:\WINDOWS\System32\wdfmgr32.exe>  [N/A]
    <zt><D:\Program Files\Intel\svhost32.exe>  [N/A]
    <ms><D:\Program Files\Microsoft\svhost32.exe>  [N/A]
    <RavUpsr><D:\WINDOWS\System32\agetltfets.exe>  [N/A]
    <RavUpes><D:\WINDOWS\System32\agetltfes.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <9><D:\WINDOWS\System32\vpcrm.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><EXPLORER.EXE>  [(Verified)Microsoft Corporation]
    <Userinit><D:\WINDOWS\System32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{E568441B-9EF3-49F8-9A67-4141AC41ADD4}><D:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll>  [Yahoo! China]
    <{4BAB150F-DD97-476D-9C1E-41B6CDC0CA7A}><D:\PROGRA~1\Yahoo!\ASSIST~1\assist\yclickon.dll>  [YAHOO Corporation Limited]
    <{08315C1A-9BA9-4B7C-A432-26885F78DF28}><D:\Program Files\Common Files\Microsoft Shared\MSINFO\SysInfo.wmp>  [N/A]
    <{6E44887F-5214-41F2-AB46-4728735C4CC6}><D:\Program Files\Internet Explorer\PLUGINS\system2.sys>  [N/A]
    <{21003462-3462-1005-6210-462004621005}><D:\Program Files\Common Files\Microsoft Shared\MSINFO\34621005.dll>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <RavTray><; "D:\Program Files\Rising\Rav\RavTray.exe">  [Rising]
    <SECUPDATE><; D:\Program Files\MySec\secupdateaak.exe -sv>  [N/A]
最后编辑2006-10-09 19:34:20
分享到:
gototop
 

运行SREng2,使用“启动项目”--注册表--选中以下的项删除
D:\WINDOWS\System32\explore.exe> [N/A]
<wow><D:\WINDOWS\System32\Launcher.exe> [N/A]
D:\PROGRA~1\TENCENT\Adplus\stup.exe> [Tencent]
<wdfmgr32><D:\WINDOWS\System32\wdfmgr32.exe> [N/A]
<zt><D:\Program Files\Intel\svhost32.exe> [N/A]
<ms><D:\Program Files\Microsoft\svhost32.exe> [N/A]
<RavUpsr><D:\WINDOWS\System32\agetltfets.exe> [N/A]
<RavUpes><D:\WINDOWS\System32\agetltfes.exe>
D:\WINDOWS\System32\vpcrm.exe
D:\Program Files\MySec\secupdateaak.exe -

删除
D:\WINDOWS\System32\explore.exe
<wow><D:\WINDOWS\System32\Launcher.exe
D:\PROGRA~1\TENCENT\Adplus\stup.exe
<wdfmgr32><D:\WINDOWS\System32\wdfmgr32.exe
<zt><D:\Program Files\Intel\svhost32.exe
D:\Program Files\Microsoft\svhost32.exe
<D:\WINDOWS\System32\agetltfets.exe
D:\WINDOWS\System32\vpcrm.exe
D:\Program Files\MySec\文件夹
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT