Ò»¡¢Èç¹ûÄúµÄϵͳÌáʾ"ÕÒ²»µ½svcext.dll"»ò"svcext.dllȱʧ" »òÕß"svcext.dll´íÎó"µÈµÈ£¬Çë²»Óõ£ÐÄ£¬Çë°Ñsvcext.dllÏÂÔص½±¾»ú¡£

¶þ¡¢Ö±½Ó¿½±´¸ÃÎļþµ½ÏµÍ³Ä¿Â¼À

¡¡¡¡ 1¡¢Windows 95/98/Meϵͳ£¬½«svcext.dll¸´ÖƵ½C:WindowsSystemĿ¼Ï¡£

¡¡¡¡ 2¡¢Windows NT/2000ϵͳ£¬½«svcext.dll¸´ÖƵ½C:WINNTSystem32Ŀ¼Ï¡£

¡¡¡¡ 3¡¢Windows XP/WIN7ϵͳ£¬½«svcext.dll¸´ÖƵ½C:WindowsSystem32Ŀ¼Ï¡£

Èý¡¢È»ºó´ò¿ª"¿ªÊ¼-ÔËÐÐ-ÊäÈëregsvr32 svcext.dll"£¬»Ø³µ¼´¿É½â¾ö´íÎóÌáʾ£¡Ï£Íû¶àÌØÈí¼þվΪÄúÌṩµÄsvcext.dll¶ÔÄúÓÐËù°ïÖú£¡

Ò»¡¢c:\windows\system32\rtsvcext.dll ʱ³öÏÖÎÊÌâ¾Ü¾ø·ÃÎÊ

×¢²á±íÐ޸ķ¨£º¡°¿ªÊ¼¡±¡ú¡°ÔËÐС±´¦ÊäÈë¡°regedit¡±£¬ÔÚ

¡°HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\¡±ÖУ¬Óұߴ°¿ÚÕÒµ½²ÐÁôµÄ³ÌÐòÃûɾ³ý¡£»òÕß´ò¿ª×¢²á±í±à¼­Æ÷£¬Ôڱ༭¡ú²éÕÒÖУ¬ÊäÈë³ö´íÎļþÃû£¬°ÑËѵ½µÄɾ³ý£¬°´F3¼ü£¬ËÑË÷ÏÂÒ»¸ö£¬Ö±µ½É¾ÍêËùÓеÄΪֹ¡£

¿ªÊ¼²Ëµ¥-ÔËÐÐ-ÊäÈëmsconfig»Ø³µ

ÔÚÀï±ßµÄÆô¶¯À¸Àï°Ñ**.dllÇ°ÃæµÄ¹´È¥µô¾ÍÐÐÁË

1¡¢¿ªÊ¼¡ª¡ªÔËÐСª¡ªmsconfig¡ª¡ªÆô¶¯¡ª¡ª°Ñ¼ÓÔØÏî***.dllµÄÄǸö¹´¹´È¥µô¡£ÖØÆôµçÄÔ,ͨ³£µ½Õâ¾Í¿ÉÒÔÁË,Èç¹û»¹µ¯³öÀ´ÔÙ½øÐеڶþ²½

2¡¢¿ªÊ¼¡ª¡ªÔËÐСª¡ªregeditÔÚÏÂÃæµÄλÖÃɾ³ýÏàÓ¦¼üÖµ£º HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

.¸ù¾ÝÄãµÄÃèÊö£¬ÄÇÓ¦¸ÃÊÇÒ»¸öÒѱ»É¾³ýÁ˵IJ¡¶¾»ò¼äµýÈí¼þ¡£µ«Ò²ÓпÉÄÜÊÇÄãжÔØij¸öÈí¼þ²»ÕýÈ·ÁôϵIJÐÁô.

dllÒòΪijЩԭÒò£¨×î´óµÄ¿ÉÄÜÊÇÒòΪËüÊǸö²¡¶¾»òÁ÷Ã¥Èí¼þµÄdllÎļþ£¬±»É±Èíɾ³ýÁË£©¶ªÊ§ÁË£¬µ«ÆäÏà¹ØµÄ×¢²áÐÅϢȴ»¹ÔÚ£¬µ¼ÖÂϵͳ¿ª»úʱ»¹¼ÓÔØËü£¬È´ÓÖÕÒ²»µ½ËüµÄÎļþ£¬ËùÒÔ±¨´í¡£

Èç¹ûÄãµã»÷¡°È·¶¨¡±ºó£¬ÏµÍ³Ã»ÓÐʲô²»Õý³££¬²¢ÇÒ¿ÉÒÔÕý³£ÔËÐеĻ°£¬Äã¿ÉÒÔÓÃÕâ¸öÈí¼þÇåÀíµôÕâ¸ö¿ª»ú¼ÓÔØÏÒԺ󿪻ú¾Í²»»á³öÏÖÕâ¸öÐÅÏ¢ÁË¡£

Autoruns£º¿ª»úÆô¶¯Ïî¹ÜÀí

¶þ¡¢svcUpdate.exeÊÇʲô½ø³Ì

δ֪- Service: MSSQLSERVER [MSSQLSERVER]- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe-sMSSQLSERVER-(running)

O23-δ֪- Service: SQLSERVERAGENT [SQLSERVERAGENT]- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE-i MSSQLSERVER-(not running)

O23-δ֪- Service: TongBackupSrv [Tong±¸·Ý·þÎñ]- C:\WINDOWS\system32\TongBackupSrv.exe-(running)

O23-δ֪- Service: UFNet [ÓÃÓÑͨ]- C:\WINDOWS\system32\ServerNT.exe-(running)

O30-δ֪- HKCU\..\Desktop: [Scrnsave.exe] [Mystify Screen Saver] C:\WINDOWS\system32\ssmyst.scr

=======================================

100-°²È«- Process: smss.exe [½ø³ÌΪ»á»°¹ÜÀí×ÓϵͳÓÃÒÔ³õʼ»¯ÏµÍ³±äÁ¿£¬ms-dosÇý¶¯Ãû³ÆÀàËÆlpt1ÒÔ¼°com£¬µ÷ÓÃwin32¿Ç×ÓϵͳºÍÔËÐÐÔÚwindowsµÇ½¹ý³Ì¡£]- C:\WINDOWS\System32\smss.exe

100-°²È«- Process: csrss.exe [¿Í»§¶Ë·þÎñ×Óϵͳ£¬ÓÃÒÔ¿ØÖÆwindowsͼÐÎÏà¹Ø×Óϵͳ¡£]- C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base

100-°²È«- Process: winlogon.exe [windows ntÓû§µÇ½³ÌÐò¡£]- C:\WINDOWS\system32\winlogon.exe

100-°²È«- Process: services.exe [ÓÃÓÚ¹ÜÀíwindows·þÎñϵͳ½ø³Ì¡£]- C:\WINDOWS\system32\services.exe

100-°²È«- Process: lsass.exe [±¾µØ°²È«È¨ÏÞ·þÎñ¿ØÖÆwindows°²È«»úÖÆ¡£]- C:\WINDOWS\system32\lsass.exe

100-°²È«- Process: svchost.exe [service host processÊÇÒ»¸ö±ê×¼µÄ¶¯Ì¬Á¬½Ó¿âÖ÷»ú´¦Àí·þÎñ¡£]- C:\WINDOWS\system32\svchost-k DcomLaunch

100-°²È«- Process: svchost.exe [service host processÊÇÒ»¸ö±ê×¼µÄ¶¯Ì¬Á¬½Ó¿âÖ÷»ú´¦Àí·þÎñ¡£]- C:\WINDOWS\system32\svchost-k rpcss

100-°²È«- Process: svchost.exe [service host processÊÇÒ»¸ö±ê×¼µÄ¶¯Ì¬Á¬½Ó¿âÖ÷»ú´¦Àí·þÎñ¡£]- C:\WINDOWS\system32\svchost.exe-k NetworkService

100-°²È«- Process: explorer.exe [windows program manager»òÕßwindows explorerÓÃÓÚ¿ØÖÆwindowsͼÐÎshell£¬°üÀ¨¿ªÊ¼²Ëµ¥¡¢ÈÎÎñÀ¸£¬×ÀÃæºÍÎļþ¹ÜÀí¡£]- C:\WINDOWS\Explorer.EXE

100-°²È«- Process: svchost.exe [service host processÊÇÒ»¸ö±ê×¼µÄ¶¯Ì¬Á¬½Ó¿âÖ÷»ú´¦Àí·þÎñ¡£]- C:\WINDOWS\System32\svchost.exe-k netsvcs

100-°²È«- Process: spoolsv.exe [windows´òÓ¡ÈÎÎñ¿ØÖƳÌÐò£¬ÓÃÒÔ´òÓ¡»ú¾ÍÐ÷¡£]- C:\WINDOWS\system32\spoolsv.exe

100-°²È«- Process: 360tray.exe [360°²È«ÎÀʿʵʱ¼à¿Ø³ÌÐò¡£]- C:\Program Files\360safe\safemon\360tray.exe

100-°²È«- Process: avp.exe [¿¨°Í˹»ùɱ¶¾Èí¼þÏà¹Ø³ÌÐò¡£]-

100-°²È«- Process: alg.exe [ÕâÊÇÒ»¸öÓ¦ÓòãÍø¹Ø·þÎñÓÃÓÚÍøÂç¹²Ïí¡£]- C:\WINDOWS\System32\alg.exe

100-°²È«- Process: ctfmon.exe [office xpÊäÈ뷨ͼ±ê¡£]- C:\WINDOWS\system32\ctfmon.exe

100-°²È«- Process: daemon.exe [Ò»¿îÐéÄâ¹âÇýÈí¼þ¡£]- C:\Program Files\DAEMON Tools\daemon.exe

100-°²È«- Process: avp.exe [¿¨°Í˹»ùɱ¶¾Èí¼þÏà¹Ø³ÌÐò¡£]-

100-°²È«- Process: imapi.exe [imapi cd-burning com serviceÓà image mastering applications programming interface(imapi)¹ÜÀí cd¼ÖÆ¡£]- C:\WINDOWS\system32\imapi.exe

100-°²È«- Process: sqlservr.exe [microsoft sql serverÓÃÓÚ¼ÜÉèsql·þÎñ¡£]- C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe

100-°²È«- Process: ServerNT.exe [Ò»¿î²ÆÎñ¹ÜÀíÈí¼þÏà¹Ø³ÌÐò¡£]- C:\WINDOWS\system32\ServerNT.exe

100-°²È«- Process: Thunder5.exe [ѸÀ×5£¬Ö§³Ö¶à×ÊÔ´³¬Ï̼߳¼ÊõµÄÏÂÔع¤¾ß]- C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe

100-°²È«- Process: 360Safe.exe [360°²È«ÎÀÊ¿Ïà¹Ø³ÌÐò¡£]- C:\Program Files\360safe\360safe.exe

R1-°²È«- HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm

R1-°²È«- HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm

O4-°²È«- HKLM\..\Run: [360Safetray] [360safeʵʱ±£»¤¹¦ÄÜÄ£¿é¡£] C:\Program Files\360safe\safemon\360tray.exe

O4-°²È«- HKLM\..\Run: [AVP] [¿¨°Í˹»ùɱ¶¾Èí¼þÏà¹Ø³ÌÐò¡£]"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"

O4-°²È«- HKCU\..\Run: [ctfmon.exe] [office xpÊäÈ뷨ͼ±ê¡£] C:\WINDOWS\system32\ctfmon.exe

O4-°²È«- HKCU\..\Run: [DAEMON Tools] [Ò»¿îÐéÄâ¹âÇý¹¤¾ß¡£]"C:\Program Files\DAEMON Tools\daemon.exe"-lang 2052

O8-°²È«- Extra context menu item:µ¼³öµ½ Microsoft Office Excel(&X)-

O9-°²È«- Extra button:¿¨°Í˹»ùWeb·´²¡¶¾±£»¤²å¼þ(HKLM)- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll

O9-°²È«- Extra button: Windows Messenger(HKLM)- C:\Program Files\Messenger\msmsgs.exe

O18-°²È«- Protocol: OFFICEÏà¹Ø-{807553E5-5146-11D5-A672-00B0D022E945}- C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL

O18-°²È«- Protocol: OFFICEÏà¹Ø-{32505114-5902-49B2-880A-1F7738E5A384}- C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL

O23-°²È«- Service: AVP [¿¨°Í˹»ùɱ¶¾Èí¼þÏà¹Ø³ÌÐò¡£]-"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"-r-(running)

O23-°²È«- Service: MSSQLServerADHelper [Mssqlserveradhelper·þÎñ¡£]- C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe-(not running)

=======================================

O31-δ֪- Notify: igfxcui- C:\WINDOWS\system32\igfxsrvc.dll- Intel Corporation- igfxsrvc Module- 3.0.0.3751- 335872- 77b0dd12d2c2198e02ea43c807acf628

O31-δ֪- Notify: klogon- C:\WINDOWS\system32\klogon.dll- Kaspersky Lab- Logon Visualizer- 6.0.2.621- 200768- 2fb94ab158eb54a2212c8087b7e72340

O31-δ֪- SODL:{E6FB5E20-DE35-11CF-9C87-00AA005127ED}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SODL:{35CEC8A3-2BE6-11D2-8773-92E220524153}- C:\WINDOWS\system32\stobject.dll- Microsoft Corporation- Systray shell service object- 5.1.2600.2180- 106496- 49927372818d15cedeb466125b3c6bb9

O31-δ֪- SEApproved:{176d6597-26d3-11d1-b350-080036a75b03}- C:\WINDOWS\system32\icmui.dll- Microsoft Corporation- Microsoft Color Matching System User Interface DLL- 5.1.2600.0- 77312- 57f2a25ac11fc58379354b472a33a6f2

O31-δ֪- SEApproved:{41E300E0-78B6-11ce-849B-444553540000}- C:\WINDOWS\system32\themeui.dll- Microsoft Corporation- Windows Theme API- 6.0.2900.2180- 375296- 51bb979a160f98bcc9b8000252a8d982

O31-δ֪- SEApproved:{42071714-76d4-11d1-8b24-00a0c9068ff3}- deskpan.dll---- 0-

O31-δ֪- SEApproved:{5DB2625A-54DF-11D0-B6C4-0800091AA605}- C:\WINDOWS\System32\icmui.dll- Microsoft Corporation- Microsoft Color Matching System User Interface DLL- 5.1.2600.0- 77312- 57f2a25ac11fc58379354b472a33a6f2

O31-δ֪- SEApproved:{675F097E-4C4D-11D0-B6C1-0800091AA605}- C:\WINDOWS\system32\icmui.dll- Microsoft Corporation- Microsoft Color Matching System User Interface DLL- 5.1.2600.0- 77312- 57f2a25ac11fc58379354b472a33a6f2

O31-δ֪- SEApproved:ÎÞЧµÄCLSID£ºShell extensions for file compression----- 0-

O31-δ֪- SEApproved:ÎÞЧµÄCLSID£º¼ÓÃÜÉÏÏÂÎIJ˵¥----- 0-

O31-δ֪- SEApproved:{85BBD920-42A0-1069-A2E4-08002B30309D}- C:\WINDOWS\system32\syncui.dll- Microsoft Corporation- Windows Briefcase- 5.1.2600.2180- 204288- be51f40c779a5635f3c4b5ebdb819586

O31-δ֪- SEApproved:{BD84B380-8CA2-1069-AB1D-08000948F534}- C:\WINDOWS\system32\fontext.dll- Microsoft Corporation- Windows Font Folder- 5.1.2600.2180- 395776- 8b6723513c8f3375507a6708fd3dba8a

O31-δ֪- SEApproved:{DBCE2480-C732-101B-BE72-BA78E9AD5B27}- C:\WINDOWS\system32\icmui.dll- Microsoft Corporation- Microsoft Color Matching System User Interface DLL- 5.1.2600.0- 77312- 57f2a25ac11fc58379354b472a33a6f2

O31-δ֪- SEApproved:{7007ACC7-3202-11D1-AAD2-00805FC1270E}- C:\WINDOWS\system32\NETSHELL.dll- Microsoft Corporation- Network Connections Shell- 5.1.2600.2180- 2137088-

O31-δ֪- SEApproved:{992CFFA0-F557-101A-88EC-00DD010CCC48}- C:\WINDOWS\system32\NETSHELL.dll- Microsoft Corporation- Network Connections Shell- 5.1.2600.2180- 2137088-

O31-δ֪- SEApproved:{E211B736-43FD-11D1-9EFB-0000F8757FCD}- C:\WINDOWS\system32\wiashext.dll- Microsoft Corporation- Imaging Devices Shell Folder UI- 5.1.2600.2180- 751616- 7169bd54b50911a6ce9fccaa29357ebe

O31-δ֪- SEApproved:{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}- C:\WINDOWS\system32\wiashext.dll- Microsoft Corporation- Imaging Devices Shell Folder UI- 5.1.2600.2180- 751616- 7169bd54b50911a6ce9fccaa29357ebe

O31-δ֪- SEApproved:{905667aa-acd6-11d2-8080-00805f6596d2}- C:\WINDOWS\system32\wiashext.dll- Microsoft Corporation- Imaging Devices Shell Folder UI- 5.1.2600.2180- 751616- 7169bd54b50911a6ce9fccaa29357ebe

O31-δ֪- SEApproved:{3F953603-1008-4f6e-A73A-04AAC7A992F1}- C:\WINDOWS\system32\wiashext.dll- Microsoft Corporation- Imaging Devices Shell Folder UI- 5.1.2600.2180- 751616- 7169bd54b50911a6ce9fccaa29357ebe

O31-δ֪- SEApproved:{83bbcbf3-b28a-4919-a5aa-73027445d672}- C:\WINDOWS\system32\wiashext.dll- Microsoft Corporation- Imaging Devices Shell Folder UI- 5.1.2600.2180- 751616- 7169bd54b50911a6ce9fccaa29357ebe

O31-δ֪- SEApproved:{6C125022-639D-43cc-9F3D-647E6CC69EF1}- C:\WINDOWS\system32\ContextBG.dll- Grigri- Apply a background to the shell context menu- 1.0.0.1- 368640- edd37826a42283aa3f25a4c639d689fa

O31-δ֪- SEApproved:{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}- C:\WINDOWS\system32\mstask.dll- Microsoft Corporation- Task Scheduler interface DLL- 5.1.2600.2180- 316928- d919668e8d62485c9834d28691761505

O31-δ֪- SEApproved:{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}- C:\WINDOWS\system32\mstask.dll- Microsoft Corporation- Task Scheduler interface DLL- 5.1.2600.2180- 316928- d919668e8d62485c9834d28691761505

O31-δ֪- SEApproved:{D6277990-4C6A-11CF-8D87-00AA0060F5BF}- C:\WINDOWS\system32\mstask.dll- Microsoft Corporation- Task Scheduler interface DLL- 5.1.2600.2180- 316928- d919668e8d62485c9834d28691761505

O31-δ֪- SEApproved:{5F327514-6C5E-4d60-8F16-D07FA08A78ED}- C:\WINDOWS\system32\wuaucpl.cpl- Microsoft Corporation- Automatic Updates Control Panel- 5.8.0.2469- 189208- 734ee38f5eae72e48175a6976319d46d

O31-δ֪- SEApproved:{0DF44EAA-FF21-4412-828E-260A8728E7F1}----- 0-

O31-δ֪- SEApproved:{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}- C:\WINDOWS\system32\sendmail.dll- Microsoft Corporation- Send Mail- 6.0.2900.2180- 58880- 5d6e81555a9906ef7469d5d7a35e19ad

O31-δ֪- SEApproved:{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}- C:\WINDOWS\system32\sendmail.dll- Microsoft Corporation- Send Mail- 6.0.2900.2180- 58880- 5d6e81555a9906ef7469d5d7a35e19ad

O31-δ֪- SEApproved:{88C6C381-2E85-11D0-94DE-444553540000}- C:\WINDOWS\system32\occache.dll- Microsoft Corporation- Object Control Viewer- 6.0.2900.2180- 122880- 175736fcd1a6250b459cd2ceb1e71332

O31-δ֪- SEApproved:{E6FB5E20-DE35-11CF-9C87-00AA005127ED}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{F5175861-2688-11d0-9C5E-00AA00A45957}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{08165EA0-E946-11CF-9C87-00AA005127ED}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{7D559C10-9FE9-11d0-93F7-00AA0059CE02}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{D8BD2030-6FC9-11D0-864F-00AA006809D9}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}- C:\WINDOWS\system32\webcheck.dll- Microsoft Corporation- Web Site Monitor- 6.0.2900.2180- 390656- 31cfe47fcd0024e16a1c1f7e4826ca25

O31-δ֪- SEApproved:{352EC2B7-8B9A-11D1-B8AE-006008059382}- C:\WINDOWS\system32\appwiz.cpl- Microsoft Corporation- Shell Application Manager- 5.1.2600.2180- 593408- eca487e77c813a65914d51084a591f5d

O31-δ֪- SEApproved:{0B124F8F-91F0-11D1-B8B5-006008059382}- C:\WINDOWS\system32\appwiz.cpl- Microsoft Corporation- Shell Application Manager- 5.1.2600.2180- 593408- eca487e77c813a65914d51084a591f5d

O31-δ֪- SEApproved:{CFCCC7A0-A282-11D1-9082-006008059382}- C:\WINDOWS\system32\appwiz.cpl- Microsoft Corporation- Shell Application Manager- 5.1.2600.2180- 593408- eca487e77c813a65914d51084a591f5d

O31-δ֪- SEApproved:{e84fda7c-1d6a-45f6-b725-cb260c236066}- C:\WINDOWS\system32\shimgvw.dll- Microsoft Corporation- WindowsͼƬºÍ´«Õæ²é¿´Æ÷- 6.0.2900.2180- 516096- 51fb20fd3d0b2edda98a2d1e94b91b9d

O31-δ֪- SEApproved:{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}- C:\WINDOWS\system32\shimgvw.dll- Microsoft Corporation- WindowsͼƬºÍ´«Õæ²é¿´Æ÷- 6.0.2900.2180- 516096- 51fb20fd3d0b2edda98a2d1e94b91b9d

O31-δ֪- SEApproved:{00E7B358-F65B-4dcf-83DF-CD026B94BFD4}----- 0-

O31-δ֪- SEApproved:{3F30C968-480A-4C6C-862D-EFC0897BB84B}- C:\WINDOWS\system32\shimgvw.dll- Microsoft Corporation- WindowsͼƬºÍ´«Õæ²é¿´Æ÷- 6.0.2900.2180- 516096- 51fb20fd3d0b2edda98a2d1e94b91b9d

O31-δ֪- SEApproved:{9DBD2C50-62AD-11d0-B806-00C04FD706EC}- C:\WINDOWS\system32\shimgvw.dll- Microsoft Corporation- WindowsͼƬºÍ´«Õæ²é¿´Æ÷- 6.0.2900.2180- 516096- 51fb20fd3d0b2edda98a2d1e94b91b9d

O31-δ֪- SEApproved:{EAB841A0-9550-11cf-8C16-00805F1408F3}- C:\WINDOWS\system32\shimgvw.dll- Microsoft Corporation- WindowsͼƬºÍ´«Õæ²é¿´Æ÷- 6.0.2900.2180- 516096- 51fb20fd3d0b2edda98a2d1e94b91b9d

O31-δ֪- SEApproved:{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}- C:\WINDOWS\system32\shimgvw.dll- Microsoft Corporation- WindowsͼƬºÍ´«Õæ²é¿´Æ÷- 6.0.2900.2180- 516096- 51fb20fd3d0b2edda98a2d1e94b91b9d

O31-δ֪- SEApproved:{7A9D77BD-5403-11d2-8785-2E0420524153}----- 0-

O31-δ֪- SEApproved:{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}- C:\WINDOWS\system32\zipfldr.dll- Microsoft Corporation- Compressed(zipped) Folders- 6.0.2900.2180- 465408- 08fa93556c2dcd998378f00b0ce39d2e

O31-δ֪- SEApproved:{BD472F60-27FA-11cf-B8B4-444553540000}- C:\WINDOWS\system32\zipfldr.dll- Microsoft Corporation- Compressed(zipped) Folders- 6.0.2900.2180- 465408- 08fa93556c2dcd998378f00b0ce39d2e

O31-δ֪- SEApproved:{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}- C:\WINDOWS\system32\zipfldr.dll- Microsoft Corporation- Compressed(zipped) Folders- 6.0.2900.2180- 465408- 08fa93556c2dcd998378f00b0ce39d2e

O31-δ֪- SEApproved:{ECF03A33-103D-11d2-854D-006008059367}- C:\WINDOWS\system32\mydocs.dll- Microsoft Corporation- My Documents Folder UI- 6.0.2900.2180- 91136- df133fd2fe0e38a48b626c8863022933

O31-δ֪- SEApproved:{ECF03A32-103D-11d2-854D-006008059367}- C:\WINDOWS\system32\mydocs.dll- Microsoft Corporation- My Documents Folder UI- 6.0.2900.2180- 91136- df133fd2fe0e38a48b626c8863022933

O31-δ֪- SEApproved:{4a7ded0a-ad25-11d0-98a8-0800361b1103}- C:\WINDOWS\system32\mydocs.dll- Microsoft Corporation- My Documents Folder UI- 6.0.2900.2180- 91136- df133fd2fe0e38a48b626c8863022933

O31-δ֪- SEApproved:{60fd46de-f830-4894-a628-6fa81bc0190d}- C:\WINDOWS\system32\photowiz.dll- Microsoft Corporation- Photo Printing Wizard- 5.1.2600.2180- 166912- 6842512cb971d848ea3aba5cca9a36ed

O31-δ֪- SEApproved:{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}- C:\WINDOWS\system32\cabview.dll- Microsoft Corporation- Cabinet File Viewer Shell Extension- 6.0.2900.2180- 90624- ef283188c701c8bfcc5187f3b2c547b2

O31-δ֪- SEApproved:{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}- C:\Program Files\Real\RealPlayer\rpshell.dll- RealNetworks, Inc.- RealPlayer Shell Extensions- 1.0.1.1946- 49198- 68718fbfe1513aaeed9bf319d912bb47

O31-δ֪- SEApproved:{B41DB860-8EE4-11D2-9906-E49FADC173CA}- C:\Program Files\WinRAR\rarext.dll---- 128512- 2b7421a2351fbfa6e29141c46aea6b57

O31-δ֪- SEApproved:{63542C48-9552-494A-84F7-73AA6A7C99C1}- C:\Program Files\WPS Office StormBeta 1.0\program\shlxthdl.dll--- 1.0.0.0- 274507- 85fed1579e83bea2169b7997a3a4a146

O31-δ֪- SEApproved:{e82a2d71-5b2f-43a0-97b8-81be15854de8}- C:\WINDOWS\system32\dfshim.dll- Microsoft Corporation- Application Deployment Support Library- 2.0.50727.42- 83456- b3511383c8be3a8c5b88a78971fc1141

O31-δ֪- SEApproved:{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}- C:\WINDOWS\system32\dfshim.dll- Microsoft Corporation- Application Deployment Support Library- 2.0.50727.42- 83456- b3511383c8be3a8c5b88a78971fc1141

O31-δ֪- Directory Menu:{B41DB860-8EE4-11D2-9906-E49FADC173CA}- C:\Program Files\WinRAR\rarext.dll---- 128512- 2b7421a2351fbfa6e29141c46aea6b57

O31-δ֪- LSA: Security Packages- sv1_0.dll---- 0-

O31-δ֪- LSA: Security Packages- channel.dll---- 0-

=======================================

O40- winlogon.exe- Kaspersky Lab- C:\WINDOWS\system32\klogon.dll- Logon Visualizer- 2fb94ab158eb54a2212c8087b7e72340

O40- Explorer.EXE- Kaspersky Lab- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll- Script Checker- 632a777961e99cb61b28599555a2f7a7

O40- Explorer.EXE- Grigri- C:\WINDOWS\system32\ContextBG.dll- Apply a background to the shell context menu- edd37826a42283aa3f25a4c639d689fa

O40- Explorer.EXE- Kaspersky Lab- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\ShellEx.dll- Windows Shell Extension- 0904502f01d0d2a42082f0f35b18071c

O40- Explorer.EXE- Microsoft Corporation- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll- Microsoft? C Runtime Library- 16d7ddf3b659f7cf1cb9f4dcff4219f0

O40- Explorer.EXE- Microsoft Corporation- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCP80.dll- Microsoft? C++ Runtime Library- 2bc650257fb0867abd54fd460ec2bafc

O40- Explorer.EXE- Microsoft Corporation- C:\WINDOWS\system32\sendmail.dll- Send Mail- 5d6e81555a9906ef7469d5d7a35e19ad

O40- Explorer.EXE- Intel Corporation- C:\WINDOWS\system32\igfxres.dll- xxxxres Module- 81e6a8e02cc31e547e3eab082b1dd544

O40- Explorer.EXE- Intel Corporation- C:\WINDOWS\system32\igfxdev.dll- igfxdev Module- eccf988ebf3ade5792915e60c3d274dc

O40- Explorer.EXE- Kaspersky Lab- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll- Script Checker AV Plugin- d7e7992479709ff02a33669e5dacf878

O40- Explorer.EXE- Kaspersky Lab- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prremote.dll- PR_REMOTE- 20be3997fe3f091a3b0d634fb9d62259

O40- Explorer.EXE- Kaspersky Lab- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll- Prague Loader- 22217717571205531e517b62a54fd861

O40- Explorer.EXE- Microsoft Corporation- C:\WINDOWS\system32\dfshim.dll- Application Deployment Support Library- b3511383c8be3a8c5b88a78971fc1141

O40- Explorer.EXE- Microsoft Corporation- C:\WINDOWS\system32\mscoree.dll- Microsoft.NET Runtime Execution Engine- 34bc771730448718ab771255888c783d

O40- Explorer.EXE-- C:\Program File