请
高手分析
==============================================================
常规启动项
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
[StormCodec_Helper] <"e:\Program Files\Ringz Studio\Storm Codec\StormSet.
exe" /S /opti>
文件路径: e:\Program Files\Ringz Studio\Storm Codec\StormSet.exe [风险
程序]
[DAEMON Tools] <; "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033>
[iTunesHelper] <; "C:\Program Files\iTunes\iTunesHelper.exe">
[WebThunder] <; "C:\Program Files\Thunder Network\WebThunder\WebThunder.exe" /autostart>
[hxgame-update] <; C:\Program Files\hxupdate\hxgame-update.exe>
--------------------------------------------------------------
该项来源: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
[MSMSGS] <; "C:\Program Files\Messenger\msmsgs.exe" /background>
[MsnMsgr] <; "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background>
[Skype] <; "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized>
--------------------------------------------------------------
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
[killrodog] <"E:\killer_rodog.exe" -check>
文件路径: E:\killer_rodog.exe [分析中]
==============================================================
启动文件夹位置
==============================================================
Common Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Startup: C:\Documents and Settings\louise\Start Menu\Programs\Startup
Common Startup: %ALLUSERSPROFILE%\Start Menu\Programs\Startup
==============================================================
开始菜单启动项
==============================================================
<1KG_SU.LNK> <C:\Documents and Settings\louise\Start Menu\Programs\Startup\1KG_SU.LNK>
文件路径: [文件无法访问]
==============================================================
Host File
==============================================================
127.0.0.1 localhost
206.251.73.18 powerapple.com
www.powerapple.com media2.powerapple.com
127.0.0.1 yu.8s7.net
127.0.0.1 1.jopanqc.com
127.0.0.1 2.joppnqq.com
127.0.0.1 wg.47255.com
127.0.0.1 1.joppnqq.com
127.0.0.1 xxx.m111.biz
127.0.0.1 1.jopenqc.com
127.0.0.1 1.jopenkk.com
127.0.0.1 xxx.vh7.biz
127.0.0.1 xxx.j41m.com
127.0.0.1 3.joppnqq.com
127.0.0.1 d.93se.com
127.0.0.1
www.868wg.com
127.0.0.1 xxx.mmma.biz
127.0.0.1 ilove.com
127.0.0.1 tp.shpzhan.cn
127.0.0.1
www.tomwg.com
127.0.0.1
www.177dvd.cn
127.0.0.1
www.cike007.cn
127.0.0.1
www.22aaa.com
127.0.0.1 xx.exiao01.com
127.0.0.1
www.exiao01.com
127.0.0.1
www.exiao01.com
127.0.0.1 new.749571.com
127.0.0.1 xtx.kv8.info
127.0.0.1 cao.kv8.info
127.0.0.1 1.jopmmqq.com
127.0.0.1 171817.171817.com
127.0.0.1 d2.llsging.com
127.0.0.1 down.malasc.cn
127.0.0.1 llboss.com
127.0.0.1 nx.51ylb.cn
127.0.0.1 my.531jx.cn
127.0.0.1 qqq.dzydhx.com
127.0.0.1 qqq.hao1658.com
127.0.0.1
www.333292.com
127.0.0.1 down.18dd.net
127.0.0.1 up.22x44.com
==============================================================
系统服务
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
[AppMgmt] [已启用] <%SystemRoot%\System32\appmgmts.
dll>
[CLSched] [已启用] <"c:\APPS\Powercinema\Kernel\TV\CLSched.exe">
文件路径: c:\APPS\Powercinema\Kernel\TV\CLSched.exe [分析中]
[conime] [已启用] <%SystemRoot%\system32\conime\conime.dll>
[CyberLink Media Library Service] [已启用] <"C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe">
文件路径: C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe [分析中]
[DomainService] [已启用] <C:\WINDOWS\system32\fjjapcum.exe /service>
[IDriverT] [已启用] <"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe">
文件路径: C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [分析中]
==============================================================
驱动程序
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
[vidc.XVID] [已启用] <xvidvfw.dll>
[vidc.DIVX] [已启用] <DivX.dll>
文件路径: C:\WINDOWS\system32\DivX.dll [未知]
[vidc.yv12] [已启用] <DivX.dll>
文件路径: C:\WINDOWS\system32\DivX.dll [未知]
--------------------------------------------------------------
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
[83546] [已启用] <\??\C:\WINDOWS\system32\Drivers\83546.sys>
[EagleNT] [已启用] <\??\C:\WINDOWS\system32\drivers\EagleNT.sys>
[fhzl] [已启用] <\??\C:\WINDOWS\system32\drivers\fhzl.ahc>
文件路径: C:\WINDOWS\system32\drivers\fhzl.ahc [分析中]
[if23] [已启用] <System32\DRIVERS\if23.sys>
[Ip6Fw] [已启用] <system32\DRIVERS\Ip6Fw.sys>
[khtml] [已启用] <\??\C:\WINDOWS\system32\drivers\khtml.sys>
文件路径: C:\WINDOWS\system32\drivers\khtml.sys [未知]
[mtrobapsdv] [已启用] <System32\DRIVERS\mtrobapsdv.sys>
[sptd] [已启用] <System32\Drivers\sptd.sys>
文件路径: C:\WINDOWS\system32\Drivers\sptd.sys [文件无法访问]
[SYMIDSCO] [已启用] <\??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\IDS-DI~1\20060922.092\symidsco.sys>
[XDva027] [已启用] <\??\C:\WINDOWS\system32\XDva027.sys>
