| 引用: |
【BlackStone的贴子】用Autoruns保存一个日志发上来
日志保存方法:选择File->Save菜单项
保存日志时注意选择Options->Hide Microsoft Entries菜单项(设置了这项后点工具栏的刷新按钮)
工具的下载、使用参考http://forum.ikaka.com/topic.asp?board=28&artid=7318038第14楼
........................... |
这个是日志吗
C:\Documents and Settings\All Users\「开始」菜单\程序\启动
+ Adobe Gamma Loader.lnk Adobe Gamma Loader Adobe Systems, Inc. c:\program files\common files\adobe\calibration\adobe gamma loader.exe
+ Adobe Reader Speed Launch.lnk Adobe Acrobat SpeedLauncher Adobe Systems Incorporated c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
+ hp psc 1000 series.lnk HP OfficeJet COM Device
Objects Hewlett-Packard Co. c:\program files\hewlett-packard\digital imaging\bin\hpohmr08.exe
+ hpoddt01.exe.lnk hpotdd01 Hewlett-Packard c:\program files\hewlett-packard\digital imaging\bin\hpotdd01.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
+ KAVRun File not found: E:\KAVRun.EXE
+ KpopMon File not found: E:\KPopMon.EXE
+ Kulansyn File not found: E:\Kulansyn.EXE
HKLM\System\CurrentControlSet\Services
+ Ati HotKey Poller c:\windows\system32\ati2evxx.exe
+ RfwService Rising Personal Firewall Service Beijing Rising Technology Corporation Limited c:\program files\rising\rfw\rfwsrv.exe
+ RsCCenter CCenter rising f:\program files\rising\rav\ccenter.exe
+ RsRavMon RavMon Beijing Rising Technology Co., Ltd. f:\program files\rising\rav\ravmond.exe
+ SSM SSM tracks down OS activity in real-time to prevent undesirable actions from malicious software. System Safety c:\program files\system safety monitor\ssmservice.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ AlcoholShellEx AXShlEx.dll Alcohol Soft Development Team c:\program files\alcohol soft\alcohol 120\axshlex.dll
+ Display Panning CPL Extension File not found: deskpan.dll
+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve, Inc. c:\windows\system32\hticons.dll
+ RISING Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll
+ Shell Extensions for RealOne Player RealPlayer Shell Extensions RealNetworks, Inc. c:\program files\real\realplayer\rpshell.dll
+ WinAce Archiver 2.6 Context Menu Shell Extension WinAce-Archiver Shell Extension e-merge GmbH d:\\arcext.dll
+ WinAce Archiver 2.6 Context Menu Shell Extension WinAce-Archiver Shell Extension e-merge GmbH d:\\arcext.dll
+ WinAce Archiver 2.6 DragDrop Shell Extension WinAce-Archiver Shell Extension e-merge GmbH d:\\arcext.dll
+ WinAce Archiver 2.6 Property Sheet Shell Extension WinAce-Archiver Shell Extension e-merge GmbH d:\\arcext.dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Web 文件夹 c:\program files\common files\microsoft shared\web folders\msonsext.dll
+ 金山毒霸 File not found: E:\KAVEXT.DLL
HKLM\Software\Classes\Folder\Shellex\ColumnHandlers
+ PDF Shell Extension PDF Shell Extension Adobe Systems, Inc. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ AcroIEHlprObj Class Adobe Acrobat IE Helper Version 7.0 for ActiveX Adobe Systems Incorporated c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
+ IeCatch2 Class jccatch Module Amaze Soft c:\program files\flashget\jccatch.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ FlashGet Bar FlashGet IE Bar Amaze Soft c:\program files\flashget\fgiebar.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ &FlashGet FlashGet Amaze Soft c:\program files\flashget\flashget.exe
+ @shdoclc.dll,-864 c:\windows\web\related.htm
+ 超级解霸 c:\herosoft\hero3000\mplayer.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
+ AtiExtEvent c:\windows\system32\ati2evxx.dll
+ System Safety Monitor System Safety Winlogon Notification System Safety c:\windows\system32\ssmwinlogonex.dll
HKCU\Control Panel\Desktop\Scrnsave.exe
+ E:\KaScrScn.scr File not found: E:\KaScrScn.scr
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
+ hpzsnt07 HP c:\windows\system32\hpzsnt07.dll
