HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
+ Explorer.exe c:\windows\system32\explorer.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ MS-4011 Memory Patch RavSasser Beijing Rising Tech. Co., Ltd. d:\程序\下载\ravsasser.exe
+ RavMon RavMon MicrosofRising realtime monitor Rising realtime monitor Service d:\rising\rav\ravmon.exe
+ RavTimer RavTimer Beijing Rising Technology Co., Ltd. d:\rising\rav\ravtimer.exe
+ RfwMain Rising Personal FireWall Main Program Beijing Rising Technology Corporation Limited d:\rising\rfw\rfwmain.exe
+ Windows Network Firewall c:\windows\system32\firewall.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Display Panning CPL Extension File not found: deskpan.dll
+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve, Inc. c:\windows\system32\hticons.dll
+ RISING Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll
+ Shell Extensions for RealOne Player RealPlayer Shell Extensions RealNetworks, Inc. d:\realplayer\rpshell.dll
+ WinRAR shell extension d:\winrar\rarext.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ QQBrowserHelper
Object Class QQIEHelper Module 深圳市腾讯计算机系统有限公司 d:\tencent\qq\qqiehelper.dll
+ ThunderIEHelper Class xunleibho BHO Thunder Networking Technologies,LTD c:\windows\system32\xunleibho_v10.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ @shdoclc.dll,-864 c:\windows\web\related.htm
+ 腾讯QQ QQ TENCENT d:\tencent\qq\qq.exe
HKLM\System\CurrentControlSet\Services
+ RfwService Rising Personal Firewall Service Beijing Rising Technology Corporation Limited d:\rising\rfw\rfwsrv.exe
+ RsCCenter CCenter rising d:\rising\rav\ccenter.exe
+ RsRavMon RavMon rising d:\rising\rav\ravmond.exe
HKLM\System\CurrentControlSet\Services
+ BaseTDI basetdi Rising c:\windows\system32\drivers\basetdi.sys
+ EagleNT File not found: C:\WINDOWS\System32\drivers\EagleNT.sys
+ ExpScaner ExpScan.sys d:\rising\rav\expscan.sys
+ FwDrv nt_fwdrv Rising d:\rising\rfw\fwdrv.sys
+ HOOKAPI HOOKAPI Driver 瑞星软件有限公司 d:\rising\rav\hookapi.sys
+ HookCont TDI HOOK Driver Rising tech Co. ltd d:\rising\rav\hookcont.sys
+ HookReg d:\rising\rav\hookreg.sys
+ HookSys 瑞星 d:\rising\rav\hooksys.sys
+ MEMSCAN MemScan Driver 瑞星软件有限公司 d:\rising\rav\memscan.sys
+ npkcrypt nProtect KeyCrypt Driver INCA Internet Co., Ltd. d:\tencent\qq\npkcrypt.sys
+ nv NVIDIA Compatible Windows 2000 Miniport Driver, Version 29.58 NVIDIA Corporation c:\windows\system32\drivers\nv4_mini.sys
+ Ptilink Direct Parallel Link Driver Parallel Technologies, Inc. c:\windows\system32\drivers\ptilink.sys
+ rtl8139 NDIS 5.0 driver Realtek Semiconductor Corporation c:\windows\system32\drivers\rtl8139.sys
+ Secdrv SafeDisc driver c:\windows\system32\drivers\secdrv.sys
+ VIAudio Vinyl AC'97 Codec Combo WDM Driver VIA Technologies, Inc. c:\windows\system32\drivers\vinyl97.sys
还有每次从起上来c;盘多出个东西
除了个文件夹的
