查看: 7214|回复: 10
最近系统老是蓝屏，重装驱动也是，不知道有什么问题，附上SRENG日志，还请过目
本帖最后由 i_look 于
16:13 编辑
System Repair Engineer 2.8.4.1331
Smallfrogs ()
Windows 7 Ultimate Edition Service Pack 1 (Build 7601) - 管理权限用户 - 完整功能
以下内容被选中：
& & 所有的启动项目（包括注册表、启动文件夹、服务等）
& & 浏览器加载项
& & 正在运行的进程（包括进程模块信息）
& & 文件关联
& & Winsock 提供者
& & Autorun.inf
& & 进程特权扫描
& & 计划任务
& & Windows 安全更新检查
& & API HOOK
& & 隐藏进程
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
& & &avast&&&C:\Program Files\AVAST Software\Avast\avastUI.exe& /nogui&&&[(Verified)AVAST Software]
& & &StartCCC&&&C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe& MSRun&&&[File is missing]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &shell&&explorer.exe&&&[(Verified)Microsoft Windows]
& & &Userinit&&userinit.exe&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &AppInit_DLLs&&&&&[N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
& & &{B5A7F190-DDA6-4420-B3BA-CD}&&D:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL&&&[(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
& & &WebCheck&&&&&[N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{22d6f312-b0f6-11d0-94ab-e95}]
& & &Microsoft Windows Media Player&&%SystemRoot%\system32\unregmp2.exe /ShowWMP&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{d38-484f-9b9e-dec}]
& & &Internet Explorer&&C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\&{60B49E34-C7CC-11D0-C90347FF}]
& & &Browser Customizations&&&C:\Windows\SysWOW64\rundll32.exe& &C:\Windows\SysWOW64\iedkcs32.dll&,BrandIEActiveSetup SIGNUP&&&[(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09--FED}]
& & &Themes Setup&&%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
& & &Microsoft Windows&&&%ProgramFiles(x86)%\Windows Mail\WinMail.exe& OCInstallUserConfigOE&&&[File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
& & &Microsoft Windows Media Player&&%SystemRoot%\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4340}]
& & &Windows Desktop Update&&regsvr32.exe /s /n /i:U shell32.dll&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{-ECBD-11cf-8B85-00AA005B4383}]
& & &Web Platform Customizations&&C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings&&&[(Verified)Microsoft Windows]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018--5476DBF70820}]
& & &N/A&&C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install&&&[(Verified)Microsoft Corporation]
==================================
启动文件夹
[ALTRun - 快捷方式]
&&&C:\Users\Look\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ALTRun - 快捷方式.lnk --& E:\软件\ALTRun\ALTRun.exe [ET Worker]&&N&
[ALTRun - 快捷方式]
&&&C:\Users\Look\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ALTRun - 快捷方式.lnk --& E:\软件\ALTRun\ALTRun.exe [ET Worker]&&N&
==================================
[Adobe Acrobat Update Service / AdobeARMservice][Stopped/Disabled]
&&&&C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe&&&Adobe Systems Incorporated&
[Adobe Flash Player Update Service / AdobeFlashPlayerUpdateSvc][Stopped/Disabled]
&&&C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe&&Adobe Systems Incorporated&
[Application Experience / AeLookupSvc][Running/Manual Start]
&&&C:\Windows\system32\svchost.exe -k netsvcs--&%SystemRoot%\System32\aelupsvc.dll&&Microsoft Corporation&
[Alipay security service / AlipaySecSvc][Stopped/Manual Start]
&&&C:\Program Files (x86)\alipay\alieditplus\AlipaySecSvc.exe&&Alipay Inc.&
[AMD External Events Utility / AMD External Events Utility][Running/Auto Start]
&&&C:\Windows\system32\atiesrxx.exe&&AMD&
[Application Identity / AppIDSvc][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation--&%SystemRoot%\System32\appidsvc.dll&&Microsoft Corporation&
[Application Information / Appinfo][Running/Manual Start]
&&&C:\Windows\system32\svchost.exe -k netsvcs--&%SystemRoot%\System32\appinfo.dll&&Microsoft Corporation&
[Windows Audio Endpoint Builder / AudioEndpointBuilder][Running/Auto Start]
&&&C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted--&%SystemRoot%\System32\Audiosrv.dll&&Microsoft Corporation&
[Windows Audio / AudioSrv][Running/Auto Start]
&&&C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted--&%SystemRoot%\System32\Audiosrv.dll&&Microsoft Corporation&
[avast! Antivirus / avast! Antivirus][Running/Auto Start]
&&&&C:\Program Files\AVAST Software\Avast\AvastSvc.exe&&&AVAST Software&
[ActiveX Installer (AxInstSV) / AxInstSV][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k AxInstSVGroup--&%SystemRoot%\System32\AxInstSV.dll&&Microsoft Corporation&
[BitLocker Drive Encryption Service / BDESVC][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\bdesvc.dll&&Microsoft Corporation&
[Base Filtering Engine / BFE][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork--&%SystemRoot%\System32\bfe.dll&&Microsoft Corporation&
[Background Intelligent Transfer Service / BITS][Running/Auto Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\qmgr.dll&&Microsoft Corporation&
[Computer Browser / Browser][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\browser.dll&&Microsoft Corporation&
[Bluetooth Support Service / bthserv][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k bthsvcs--&%SystemRoot%\system32\bthserv.dll&&Microsoft Corporation&
[Certificate Propagation / CertPropSvc][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k netsvcs--&%SystemRoot%\System32\certprop.dll&&Microsoft Corporation&
[Offline Files / CscService][Running/Auto Start]
&&&C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted--&%SystemRoot%\System32\cscsvc.dll&&Microsoft Corporation&
[DCOM Server Process Launcher / DcomLaunch][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k DcomLaunch--&%SystemRoot%\system32\rpcss.dll&&Microsoft Corporation&
[Disk Defragmenter / defragsvc][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k defragsvc--&%Systemroot%\System32\defragsvc.dll&&Microsoft Corporation&
[DNS Client / Dnscache][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k NetworkService--&%SystemRoot%\System32\dnsrslvr.dll&&Microsoft Corporation&
[Wired AutoConfig / dot3svc][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted--&%SystemRoot%\System32\dot3svc.dll&&Microsoft Corporation&
[Diagnostic Policy Service / DPS][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork--&%SystemRoot%\system32\dps.dll&&Microsoft Corporation&
[Extensible Authentication Protocol / EapHost][Running/Manual Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\eapsvc.dll&&Microsoft Corporation&
[Google 更新服务 (gupdate) / gupdate][Stopped/Auto Start]
&&&&C:\Program Files (x86)\Google\Update\GoogleUpdate.exe& /svc&&Google Inc.&
[Google 更新服务 (gupdatem) / gupdatem][Stopped/Manual Start]
&&&&C:\Program Files (x86)\Google\Update\GoogleUpdate.exe& /medsvc&&Google Inc.&
[Google Updater Service / gusvc][Stopped/Disabled]
&&&&C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe&&&Google&
[Health Key and Certificate Management / hkmsvc][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\system32\kmsvc.dll&&Microsoft Corporation&
[HomeGroup Listener / HomeGroupListener][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted--&%SystemRoot%\system32\ListSvc.dll&&Microsoft Corporation&
[IKE and AuthIP IPsec Keying Modules / IKEEXT][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k netsvcs--&%SystemRoot%\System32\ikeext.dll&&Microsoft Corporation&
[PnP-X IP Bus Enumerator / IPBusEnum][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted--&%SystemRoot%\system32\ipbusenum.dll&&Microsoft Corporation&
[IP Helper / iphlpsvc][Running/Auto Start]
&&&C:\Windows\System32\svchost.exe -k NetSvcs--&%SystemRoot%\System32\iphlpsvc.dll&&Microsoft Corporation&
[猎豹浏览器安全中心 / knbcenter][Running/Auto Start]
&&&&D:\Program Files (x86)\liebao\LBBrowser\KNBCenter.exe&&&Kingsoft Corporation&
[KtmRm for Distributed Transaction Coordinator / KtmRm][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation--&%systemroot%\system32\msdtckrm.dll&&Microsoft Corporation&
[Server / LanmanServer][Stopped/Disabled]
&&&C:\Windows\system32\svchost.exe -k netsvcs--&%SystemRoot%\system32\srvsvc.dll&&Microsoft Corporation&
[Workstation / LanmanWorkstation][Running/Auto Start]
&&&C:\Windows\System32\svchost.exe -k NetworkService--&%SystemRoot%\System32\wkssvc.dll&&Microsoft Corporation&
[Link-Layer Topology Discovery Mapper / lltdsvc][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k LocalService--&%SystemRoot%\System32\lltdsvc.dll&&Microsoft Corporation&
[TCP/IP NetBIOS Helper / lmhosts][Stopped/Disabled]
&&&C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted--&%SystemRoot%\System32\lmhsvc.dll&&Microsoft Corporation&
[Media Center Extender Service / Mcx2Svc][Stopped/Disabled]
&&&C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation--&%SystemRoot%\system32\Mcx2Svc.dll&&Microsoft Corporation&
[Multimedia Class Scheduler / MMCSS][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k netsvcs--&%SystemRoot%\system32\mmcss.dll&&Microsoft Corporation&
[Windows Firewall / MpsSvc][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork--&%SystemRoot%\system32\mpssvc.dll&&Microsoft Corporation&
[Ralink Registry Writer / RalinkRegistryWriter][Running/Auto Start]
&&&&C:\Program Files (x86)\Tenda\Common\RaRegistry.exe&&&Ralink Technology, Corp.&
[Ralink Registry Writer 64 / RalinkRegistryWriter64][Running/Auto Start]
&&&&C:\Program Files (x86)\Tenda\Common\RaRegistry64.exe&&&Ralink Technology, Corp.&
[Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\rasauto.dll&&Microsoft Corporation&
[Remote Access Connection Manager / RasMan][Running/Manual Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\rasmans.dll&&Microsoft Corporation&
[Remote Registry / RemoteRegistry][Stopped/Disabled]
&&&C:\Windows\system32\svchost.exe -k regsvc--&%SystemRoot%\system32\regsvc.dll&&Microsoft Corporation&
[RPC Endpoint Mapper / RpcEptMapper][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k RPCSS--&%SystemRoot%\System32\RpcEpMap.dll&&Microsoft Corporation&
[SwitchBoard / SwitchBoard][Stopped/Disabled]
&&&&C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe&&&Adobe Systems Incorporated&
[Microsoft Software Shadow Copy Provider / swprv][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k swprv--&%Systemroot%\System32\swprv.dll&&Microsoft Corporation&
[Superfetch / SysMain][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted--&%systemroot%\system32\sysmain.dll&&Microsoft Corporation&
[Tablet PC Input Service / TabletInputService][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted--&%SystemRoot%\System32\TabSvc.dll&&Microsoft Corporation&
[TPM Base Services / TBS][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k LocalServiceAndNoImpersonation--&%SystemRoot%\System32\tbssvc.dll&&Microsoft Corporation&
[Remote Desktop Services / TermService][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k NetworkService--&%SystemRoot%\System32\termsrv.dll&&Microsoft Corporation&
[Themes / Themes][Running/Auto Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\system32\themeservice.dll&&Microsoft Corporation&
[Thread Ordering Server / THREADORDER][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k LocalService--&%SystemRoot%\system32\mmcss.dll&&Microsoft Corporation&
[Distributed Link Tracking Client / TrkWks][Running/Auto Start]
&&&C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted--&%SystemRoot%\System32\trkwks.dll&&Microsoft Corporation&
[WatchData ccb V3.2 / WDMonitorCCB][Stopped/Disabled]
&&&C:\Windows\SysWOW64\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe&&Beijing WatchData System Co., Ltd.&
[Windows Event Collector / Wecsvc][Stopped/Manual Start]
&&&C:\Windows\system32\svchost.exe -k NetworkService--&%SystemRoot%\system32\wecsvc.dll&&Microsoft Corporation&
[Problem Reports and Solutions Control Panel Support / wercplsupport][Stopped/Manual Start]
&&&C:\Windows\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\wercplsupport.dll&&Microsoft Corporation&
[Windows Error Reporting Service / WerSvc][Stopped/Disabled]
&&&C:\Windows\System32\svchost.exe -k WerSvcGroup--&%SystemRoot%\System32\WerSvc.dll&&Microsoft Corporation&
[Windows Defender / WinDefend][Stopped/Disabled]
&&&C:\Windows\System32\svchost.exe -k secsvcs--&%ProgramFiles%\Windows Defender\mpsvc.dll&&N/A&
[Windows Management Instrumentation / Winmgmt][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k netsvcs--&%SystemRoot%\system32\wbem\WMIsvc.dll&&Microsoft Corporation&
[WLAN AutoConfig / Wlansvc][Running/Auto Start]
&&&C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted--&%SystemRoot%\System32\wlansvc.dll&&Microsoft Corporation&
[Broadcom Wireless LAN Tray Service / wltrysvc][Running/Auto Start]
&&&&C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE& &C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe&&&Broadcom Corporation&
==================================
[Lenovo Virtual Power Controller Driver / ACPIVPC][Running/Manual Start]
&&&system32\DRIVERS\AcpiVpc.sys&&Lenovo Corporation&
[adp94xx / adp94xx][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\adp94xx.sys&&Adaptec, Inc.&
[adpahci / adpahci][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\adpahci.sys&&Adaptec, Inc.&
[adpu320 / adpu320][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\adpu320.sys&&Adaptec, Inc.&
[aliide / aliide][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\aliide.sys&&Acer Laboratories Inc.&
[amdide64 / amdide64][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\amdide64.sys&&Advanced Micro Devices Inc.&
[AMD IO Driver / amdiox64][Stopped/Manual Start]
&&&system32\DRIVERS\amdiox64.sys&&Advanced Micro Devices&
[amdkmdag / amdkmdag][Running/Manual Start]
&&&system32\DRIVERS\atikmdag.sys&&ATI Technologies Inc.&
[amdkmdap / amdkmdap][Running/Manual Start]
&&&system32\DRIVERS\atikmpag.sys&&Advanced Micro Devices, Inc.&
[amdsata / amdsata][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\amdsata.sys&&Advanced Micro Devices&
[amdsbs / amdsbs][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\amdsbs.sys&&AMD Technologies Inc.&
[amdxata / amdxata][Running/Boot Start]
&&&\SystemRoot\system32\drivers\amdxata.sys&&Advanced Micro Devices&
[amd_sata / amd_sata][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\amd_sata.sys&&Advanced Micro Devices&
[amd_xata / amd_xata][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\amd_xata.sys&&Advanced Micro Devices&
[arc / arc][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\arc.sys&&Adaptec, Inc.&
[arcsas / arcsas][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\arcsas.sys&&Adaptec, Inc.&
[aswMonFlt / aswMonFlt][Running/Auto Start]
&&&\??\C:\Windows\system32\drivers\aswMonFlt.sys&&AVAST Software&
[aswRdr / aswRdr][Running/System Start]
&&&\SystemRoot\System32\Drivers\aswrdr2.sys&&AVAST Software&
[AMD Function Driver for HD Audio Service / AtiHDAudioService][Running/Manual Start]
&&&system32\drivers\AtihdW76.sys&&Advanced Micro Devices&
[AMD PCI Express (3GIO) Filter / AtiPcie][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\AtiPcie64.sys&&Advanced Micro Devices Inc.&
[Broadcom NetXtreme II VBD / b06bdrv][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\bxvbda.sys&&Broadcom Corporation&
[Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 / b57nd60a][Stopped/Manual Start]
&&&system32\DRIVERS\b57nd60a.sys&&Broadcom Corporation&
[BCM42RLY / BCM42RLY][Running/Manual Start]
&&&system32\drivers\BCM42RLY.sys&&Broadcom Corporation&
[Broadcom 802.11 网络适配器驱动程序 / BCM43XX][Running/Manual Start]
&&&system32\DRIVERS\bcmwl664.sys&&Broadcom Corporation&
[Brother USB Mass-Storage Lower Filter Driver / BrFiltLo][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\BrFiltLo.sys&&Brother Industries, Ltd.&
[Brother USB Mass-Storage Upper Filter Driver / BrFiltUp][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\BrFiltUp.sys&&Brother Industries, Ltd.&
[Brother MFC Serial Port Interface Driver (WDM) / Brserid][Stopped/Manual Start]
&&&\SystemRoot\System32\Drivers\Brserid.sys&&Brother Industries Ltd.&
[Brother WDM Serial driver / BrSerWdm][Stopped/Manual Start]
&&&\SystemRoot\System32\Drivers\BrSerWdm.sys&&Brother Industries Ltd.&
[Brother MFC USB Fax Only Modem / BrUsbMdm][Stopped/Manual Start]
&&&\SystemRoot\System32\Drivers\BrUsbMdm.sys&&Brother Industries Ltd.&
[Brother MFC USB Serial WDM Driver / BrUsbSer][Stopped/Manual Start]
&&&\SystemRoot\System32\Drivers\BrUsbSer.sys&&Brother Industries Ltd.&
[cmdide / cmdide][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\cmdide.sys&&CMD Technology, Inc.&
[Broadcom NetXtreme II 10 GigE VBD / ebdrv][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\evbda.sys&&Broadcom Corporation&
[elxstor / elxstor][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\elxstor.sys&&Emulex&
[EncryptedDisk / EncryptedDisk][Running/System Start]
&&&\??\C:\Users\Look\AppData\Roaming\Kingsoft\klive\Bin\encrypteddisk-x64.sys&&&
[Hauppauge Consumer Infrared Receiver / hcw85cir][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\hcw85cir.sys&&Hauppauge Computer Works, Inc.&
[HpSAMD / HpSAMD][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\HpSAMD.sys&&Hewlett-Packard Company&
[HWiNFO32/64 Kernel Driver / HWiNFO32][Running/System Start]
&&&\??\D:\Program Files (x86)\DriverGenius2012\Mydrivers64A.SYS&&REALiX(tm)&
[Intel RAID Controller Windows 7 / iaStorV][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\iaStorV.sys&&Intel Corporation&
[iirsp / iirsp][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\iirsp.sys&&Intel Corp./ICP vortex GmbH&
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
&&&system32\drivers\RTKVHD64.sys&&Realtek Semiconductor Corp.&
[KNBDrv / KNBDrv][Stopped/Manual Start]
&&&\??\C:\Windows\system32\drivers\KNBDrv.sys&&Kingsoft Corporation&
[NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller / L1C][Running/Manual Start]
&&&system32\DRIVERS\L1C62x64.sys&&Qualcomm Atheros Co., Ltd.&
[LHDmgr / LHDmgr][Running/Boot Start]
&&&\SystemRoot\System32\DRIVERS\LhdX64.sys&&Lenovo.&
[LSI_FC / LSI_FC][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\lsi_fc.sys&&LSI Corporation&
[LSI_SAS / LSI_SAS][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\lsi_sas.sys&&LSI Corporation&
[LSI_SAS2 / LSI_SAS2][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\lsi_sas2.sys&&LSI Corporation&
[LSI_SCSI / LSI_SCSI][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\lsi_scsi.sys&&LSI Corporation&
[megasas / megasas][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\megasas.sys&&LSI Corporation&
[MegaSR / MegaSR][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\MegaSR.sys&&LSI Corporation, Inc.&
[RT2870 USB Extensible Wireless LAN Card Driver / netr28ux][Stopped/Manual Start]
&&&system32\DRIVERS\netr28ux.sys&&Ralink Technology Corp.&
[nfrd960 / nfrd960][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\nfrd960.sys&&IBM Corporation&
[NetGroup Packet Filter Driver / NPF][Stopped/Manual Start]
&&&system32\drivers\npf.sys&&CACE Technologies, Inc.&
[nvraid / nvraid][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\nvraid.sys&&NVIDIA Corporation&
[nvstor / nvstor][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\nvstor.sys&&NVIDIA Corporation&
[ql2300 / ql2300][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\ql2300.sys&&QLogic Corporation&
[ql40xx / ql40xx][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\ql40xx.sys&&QLogic Corporation&
[RtsUStor.Sys Realtek USB Card Reader / RSUSBSTOR][Stopped/Manual Start]
&&&System32\Drivers\RtsUStor.sys&&Realtek Semiconductor Corp.&
[Sentinel / Sentinel][Stopped/Auto Start]
&&&\SystemRoot\System32\Drivers\SENTINEL.SYS&&N/A&
[SiSRaid2 / SiSRaid2][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\SiSRaid2.sys&&Silicon Integrated Systems Corp.&
[SiSRaid4 / SiSRaid4][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\sisraid4.sys&&Silicon Integrated Systems&
[Virtual bus device (SuperSpeed LLC) / SscRdBus][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\SscRdBus.sys&&SuperSpeed LLC&
[RAM Disk (SuperSpeed LLC) / SscRdCls][Running/Boot Start]
&&&\SystemRoot\system32\DRIVERS\SscRdCls.sys&&SuperSpeed LLC&
[stexstor / stexstor][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\stexstor.sys&&Promise Technology&
[TweakCubeVD / TweakCubeVD][Stopped/Manual Start]
&&&system32\drivers\TweakCubeVD.sys&&青岛软媒网络科技有限公司&
[AMD USB Filter Driver / usbfilter][Running/Manual Start]
&&&system32\DRIVERS\usbfilter.sys&&Advanced Micro Devices&
[VGPU / VGPU][Stopped/Manual Start]
&&&System32\drivers\rdvgkmd.sys&&N/A&
[viaide / viaide][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\viaide.sys&&VIA Technologies, Inc.&
[vsmraid / vsmraid][Stopped/Manual Start]
&&&\SystemRoot\system32\drivers\vsmraid.sys&&VIA Technologies Inc.,Ltd&
[WheelMouse USB Lower Filter Driver / whfltr2k][Running/Manual Start]
&&&system32\DRIVERS\whfltr2k.sys&&&
[WinRing0_1_2_0 / WinRing0_1_2_0][Stopped/Manual Start]
&&&\??\D:\Program Files (x86)\TweakCube3\WinRing0x64.sys&&OpenLibSys.org&
[WMDrive / WMDrive][Running/System Start]
&&&\??\C:\Windows\SysWOW64\drivers\WMDrive.sys&&WinMount International Inc&
==================================
浏览器加载项
[Adobe PDF Link Helper]
&&{18DF081C-E8AD--FA578C2EBDC3} &C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, (Signed) Adobe Systems Incorporated&
[Groove GFS Browser Helper]
&&{C5-4D22-B7F9-0BBC1D38A37E} &D:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL, (Signed) Microsoft Corporation&
[Java(tm) Plug-In SSV Helper]
&&{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} &D:\Program Files (x86)\java\bin\ssv.dll, (Signed) Sun Microsystems, Inc.&
[迅雷下载支持]
&&{889D2FEB-98-1DD2C5261283} &D:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO7.2.8.3572.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Office Document Cache Handler]
&&{B4F3A835-0E21-4959-BA22-42B3008E02FF} &D:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL, (Signed) Microsoft Corporation&
[Java(tm) Plug-In 2 SSV Helper]
&&{DBC85b-BC74-9C25C1C588A9} &D:\Program Files (x86)\java\bin\jp2ssv.dll, (Signed) Sun Microsystems, Inc.&
[360云盘状态栏]
&&{FF8EF35D--A9E5-F7D548C298AE} &D:\Program Files (x86)\360\360YunPan\360cloud\360CloudBar.dll, (Signed) &
[启动飞信]
&&{-3DE7-4171-A0DD-A7A} &D:\Program Files (x86)\China Mobile\Fetion\\Fetion.exe, (Signed) China Mobile&
[@D:\Users\Look\AppData\Local\Apps\Evernote\Evernote\Resource.dll,-101]
&&{A95fe080-8f5d-11d2-a20b-00aa003c157a} &, &
[EditCtrl Class]
&&{488AB3-8F27-FA1AECAA8844} &C:\Windows\SysWow64\aliedit\3.0.2.0\aliedit.dll, (Signed) &
[Java Plug-in 1.6.0_32]
&&{8AD9C840-044E-11D1-B3E9-} &D:\Program Files (x86)\java\bin\jp2iexp.dll, (Signed) &
[Java Plug-in 1.6.0_32]
&&{CAFEEFAC-32-ABCDEFFEDCBA} &D:\Program Files (x86)\java\bin\jp2iexp.dll, (Signed) &
[Java Plug-in 1.6.0_32]
&&{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} &D:\Program Files (x86)\java\bin\npjpi160_32.dll, (Signed) Sun Microsystems, Inc.&
&&{002AE4F2-96AB-4dfa-AE2E-A84C} &, &
&&{004BABF-8556-FCDB7F1FCA1E} &, &
[AliCertDOCtrl Class]
&&{08D512D2-7D97-4E22-B7DB-} &C:\Users\Look\AppData\Roaming\alipay\cf\alicdo.dll, (Signed) Alipay&
&&{0C27ADC4-E826--990D7E05545F} &, &
&&{116BA71C--9A1F-C9D} &, &
[Adobe PDF Link Helper]
&&{18DF081C-E8AD--FA578C2EBDC3} &C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll, (Signed) Adobe Systems Incorporated&
&&{1D6-4A42-890D-EE617AA1537D} &, &
[InstallHelper Class]
&&{1DABF8D5-B7F-A30E53D709B3} &C:\Windows\SysWow64\MMInstaller.dll, (Signed) Tencent&
[iTrusPTA Class]
&&{1E0DFFCF-27FF-007349FEDA} &C:\Windows\SysWow64\aliedit\3.0.2.0\pta.dll, (Signed) iTruschina Co., Ltd.&
[HTML Document]
&&{F9-11CF-8FD0-00AA00686F13} &C:\Windows\SysWOW64\mshtml.dll, (Signed) Microsoft Corporation&
[Agent Class]
&&{-8FB2-4B3B-B29B-8B919B0EACCE} &D:\Program Files (x86)\Thunder Network\Thunder\BHO\ThunderAgent7.2.8.3572.dll, (Signed) 深圳市迅雷网络技术有限公司&
[EditCtrl Class]
&&{488AB3-8F27-FA1AECAA8844} &C:\Windows\SysWow64\aliedit\3.0.2.0\aliedit.dll, (Signed) &
[WangWangX Class]
&&{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B} &D:\Program Files (x86)\AliWangWang\7.10.07C\AliIMX.dll, (Signed) Alibaba software (Shanghai) Corporation.&
&&{5FFF24BC-DC02--A8E2C93FE407} &, &
[Windows Media Player]
&&{6BF52A52-394A-11D3-B153-00C04F79FAA6} &%SystemRoot%\system32\wmp.dll, (Signed) N/A&
&&{6EE9CD3E-A386-4DAE-DBF927AE} &, &
[Groove GFS Browser Helper]
&&{C5-4D22-B7F9-0BBC1D38A37E} &D:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL, (Signed) Microsoft Corporation&
[Java(tm) Plug-In SSV Helper]
&&{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} &D:\Program Files (x86)\java\bin\ssv.dll, (Signed) Sun Microsystems, Inc.&
[CertEnroll Class]
&&{7978461C-CC22-48F2-BC69-D} &C:\Windows\SysWow64\aliedit\3.0.2.0\itrusenroll.dll, (Signed) iTruschina Co., Ltd.&
[Microsoft Web Browser]
&&{A-11D0-A96B-00C04FD705A2} &C:\Windows\SysWOW64\ieframe.dll, (Signed) Microsoft Corporation&
[迅雷下载支持]
&&{889D2FEB-98-1DD2C5261283} &D:\Program Files (x86)\Thunder Network\Thunder\BHO\XunleiBHO7.2.8.3572.dll, (Signed) 深圳市迅雷网络技术有限公司&
&&{8AC3BC28-E145-AAC128ACB16} &, &
[SecCtrl Class]
&&{8EB7C6CB-2DA6-4ABE-B2EA-EAC5A372E757} &C:\Windows\SysWow64\aliedit\3.0.2.0\npAliSecCtrl.dll, (Signed)
&&{96CD6DA7-17F2--BEB} &, &
&&{73-482E-B13C-776C048EC890} &, &
[VersionDetector Class]
&&{9EFFB1-AEF6-B2A3FE8BFE9C} &C:\Program Files (x86)\Common Files\Thunder Network\KanKan\kkvd.1.0.0.2.(534).dll, (Signed) 深圳市迅雷网络技术有限公司&
&&{AE7-456C-8B41-165A2504FD86} &, &
&&{A1-4B9D-91FC-B9C461DBE9DD} &, &
&&{A95FE080-8F5D-11D2-A20B-00AA003C157A} &, &
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} &, &
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F9} &, &
[Office Document Cache Handler]
&&{B4F3A835-0E21-4959-BA22-42B3008E02FF} &D:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL, (Signed) Microsoft Corporation&
[WalkboxCore Class]
&&{BD1E9B61-F3B2-4A19-AB69-68E77CA81C42} &C:\Windows\SysWOW64\WalkboxUpload.1\npWalkboxUpload.dll, (Signed) ShenZhen Thunder Networking Technologies,LTD&
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_3_300_257.ocx, (Signed) Adobe Systems, Inc.&
[Java(tm) Plug-In 2 SSV Helper]
&&{DBC85B-BC74-9C25C1C588A9} &D:\Program Files (x86)\java\bin\jp2ssv.dll, (Signed) Sun Microsystems, Inc.&
[xoliimpl Class]
&&{DD5BF6D1--9DFA-5C343CAF178E} &C:\Windows\xinstaller.dll, (Signed) 深圳市迅雷技术有限公司&
[Microsoft Silverlight]
&&{DFEAF541-F3E1-4C24-ACAC-99CA} &C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll, (Signed)&&Microsoft Corporation&
[PlayerCtrl Class]
&&{E05BC2A3-9A46-4a32-80C9-023A473F5B23} &C:\Program Files (x86)\Tencent\QQMusic\QzoneMusic\QzoneMusic.dll, (Signed) Tencent&
[BOC Edit Class]
&&{E61E5C-8AD0-8A61F1D8E540} &C:\Windows\SysWOW64\KeyboardProtection.dll, (Signed) &
[SSOForPTLogin2 Class]
&&{EAAED308-B-965E-171933ADD473} &C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.1.39\Bin\npSSOAxCtrlForPTLogin.dll, (Signed) Tencent&
[XML HTTP Request]
&&{ED8C108E--91A4-00C04F7969E8} &%SystemRoot%\System32\msxml3.dll, (Signed) N/A&
[iTrusHwPTA Class]
&&{EF7BC8AC-5BDC-4AED-AD63-A9B3AE7A768C} &C:\Windows\SysWow64\itruscert\hwpta.dll, (Signed) iTruschina Co., Ltd.&
&&{F3E70CEA-956E-49CC-B444-73AFE593AD7F} &, &
[XML HTTP]
&&{F6D90F16-9C73-11D3-B32E-00C04F990BB4} &%SystemRoot%\System32\msxml3.dll, (Signed) N/A&
[Microsoft Visio Document]
&&{F8CF7A98-2C45-4C8D-989DDAB} &D:\PROGRA~1\MICROS~1\Office14\VVIEWER.DLL, (Signed) Microsoft Corporation&
[webmod Class]
&&{FEE3C8C5-9BEA-4079-AB36-63ECABFC7392} &C:\Windows\SysWow64\aliedit\3.0.2.0\alidcp.dll, (Signed)
[360云盘状态栏]
&&{FF8EF35D--A9E5-F7D548C298AE} &D:\Program Files (x86)\360\360YunPan\360cloud\360CloudBar.dll, (Signed) &
[&使用&迅雷下载]
&&&D:\Program Files (x86)\Thunder Network\Thunder\BHO\GetUrl.htm, N/A&
[&使用&迅雷下载全部链接]
&&&D:\Program Files (x86)\Thunder Network\Thunder\BHO\GetAllUrl.htm, N/A&
[Add to Evernote 4.0]
&&&res://D:\Users\Look\AppData\Local\Apps\Evernote\Evernote\EvernoteIE.dll/204, N/A&
[Add to Google Photos Screensa&ver]
&&&res://C:\Windows\system32\GPhotos.scr/200, N/A&
[导出到 Microsoft Excel(&X)]
&&&res://D:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000, N/A&
[添加为阿里旺旺表情]
&&&D:\Program Files (x86)\AliWangWang\7.00.20C\AddNewEmotion.htm, N/A&
[添加到飞信表情]
&&&res://D:\Program Files (x86)\China Mobile\Fetion\FetionExt.dll/202, N/A&
[通过飞信短信发送]
&&&res://D:\Program Files (x86)\China Mobile\Fetion\FetionExt.dll/201, N/A&
==================================
正在运行的进程
[PID: 1544 / SYSTEM][D:\Program Files (x86)\liebao\LBBrowser\KNBCenter.exe]&&[Kingsoft Corporation, 1.0.3.2312]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\knbpolicy.dll]&&[Kingsoft Corporation, 1.0.3.2312]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\knbctrl.dll]&&[Kingsoft Corporation, 1.0.3.2312]
& & [D:\Program Files (x86)\liebao\LBBrowser\kBrowserUpgrade2.dll]&&[Kingsoft Corporation, 1.0.3.2312]
& & [D:\Program Files (x86)\liebao\LBBrowser\uplive.dll]&&[Kingsoft Corporation, 1.0.3.2312]
& & [D:\Program Files (x86)\liebao\LBBrowser\zlib1.dll]&&[, 1.2.3]
& & [D:\Program Files (x86)\liebao\LBBrowser\module\security\websitesecurity.dll]&&[Kingsoft Corporation, 1.0.3.2312]
& & [D:\Program Files (x86)\liebao\LBBrowser\module\security\scom.dll]&&[Kingsoft Corporation, ,2414]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\security\kxescan\kseescan.dll]&&[Kingsoft Corporation, ,1]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\security\kxescan\ksesscan.dll]&&[Kingsoft Corporation, ,1]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\security\kxescan\kseutil.dll]&&[Kingsoft Corporation, ,22]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\security\kxescan\wfs.dll]&&[Kingsoft Corporation, ,1839]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\security\kxescan\sqlite.dll]&&[Kingsoft Corporation, ,1194]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\security\kxescan\kae\kaecore.dat]&&[Kingsoft Corporation, ,1887]
& & [D:\Program Files (x86)\liebao\LBBrowser\Module\security\security\kxescan\ksbwdet2.dll]&&[Kingsoft Corporation, ,2915]
[PID: 1716 / SYSTEM][C:\Program Files\AVAST Software\Avast\AvastSvc.exe]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswCmnBS.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswCmnOS.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswCmnIS.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\ashBase.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswEngLdr.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\2052\Base.dll]&&[AVAST Software, 6, 0, 999, 0]
& & [C:\Program Files\AVAST Software\Avast\ashServ.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswAux.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\ashTask.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\ashTaskEx.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswLog.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswSqLt.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswProperty.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\Aavm4h.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\AavmRpch.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswIdle.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswDld.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswStrm.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\aswEngin.dll]&&[AVAST Software, 7.0.1454.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\aswCmnOS.dll]&&[AVAST Software, 7.0.1440.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\aswCmnIS.dll]&&[AVAST Software, 7.0.1438.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\aswCmnBS.dll]&&[AVAST Software, 7.0.1454.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\aswScan.dll]&&[AVAST Software, 7.0.1441.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\aswRep.dll]&&[AVAST Software, 7.0.1454.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\aswFiDb.dll]&&[AVAST Software, 7.0.1440.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\algo.dll]&&[N/A, ]
& & [C:\Program Files\AVAST Software\Avast\AhResJs.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\AhResNS.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\AhResStd.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\AhResWS.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\ashWebSv.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\ashWsFtr.dll]&&[AVAST Software, 7.0.1426.0]
[PID: 1888 / SYSTEM][C:\Program Files (x86)\Tenda\Common\RaRegistry.exe]&&[Ralink Technology, Corp., 1, 0, 0, 16]
[PID: 2452 / Look][E:\软件\ALTRun\ALTRun.exe]&&[ET Worker, 1.0.0.0]
[PID: 2720 / Look][C:\Program Files\AVAST Software\Avast\AvastUI.exe]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswUtil.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\ashBase.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswEngLdr.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswCmnOS.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswCmnIS.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswCmnBS.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\ashTask.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswAux.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswLog.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswSqLt.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\aswProperty.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\AavmRpch.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\2052\Base.dll]&&[AVAST Software, 6, 0, 999, 0]
& & [C:\Program Files\AVAST Software\Avast\aswData.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\ashTaskEx.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\Aavm4h.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\2052\UILangRes.dll]&&[AVAST Software, 6, 0, 999, 0]
& & [C:\Program Files\AVAST Software\Avast\CommonRes.dll]&&[AVAST Software, 7.0.1426.0]
& & [C:\Program Files\AVAST Software\Avast\defs\\uiExt.dll]&&[AVAST Software, 7.0.1454.0]
[PID: 3132 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [C:\Windows\SysWOW64\GooglePinyin3.ime]&&[Google Inc., 3.0.1.98]
& & [D:\Program Files (x86)\360\360YunPan\360cloud\360CloudShellExt.dll]&&[, 1, 0, 0, 1007]
& & [C:\Users\Look\AppData\Roaming\Kingsoft\klive\bin\kliveshellext.dll]&&[Kingsoft Corp. Ltd., 1,21,0,1543]
& & [C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf]&&[, ]
[PID: 3428 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 1884 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 2392 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 2680 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 3572 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 3472 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 3748 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 1496 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 3444 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 472 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
[PID: 3952 / Look][F:\我的文档\金山快盘\个人资料\电脑\软件\GAE\goagent-1.0\goagent\local\goagent.exe]&&[N/A, ]
[PID: 2640 / Look][F:\我的文档\金山快盘\个人资料\电脑\软件\GAE\goagent-1.0\goagent\local\proxy.exe]&&[, 1.0]
[PID: 3928 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 612 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 912 / Look][D:\ChromePlus\chrome.exe]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\chrome.dll]&&[Maple Studio, 2.0.2.26]
& & [D:\ChromePlus\2.0.2.26\icudt.dll]&&[The ICU Project, 4, 6, 0, 0]
& & [D:\ChromePlus\2.0.2.26\pdf.dll]&&[, 1, 0, 0, 1]
& & [D:\ChromePlus\2.0.2.26\ppGoogleNaClPluginChrome.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avcodec-53.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avutil-51.dll]&&[N/A, ]
& & [D:\ChromePlus\2.0.2.26\avformat-53.dll]&&[N/A, ]
[PID: 3076 / Look][E:\Downloads\sreng2\SREngLdr.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
[PID: 3492 / Look][E:\Downloads\sreng2\SREe60788e0.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
& & [C:\Program Files (x86)\Microsoft Silverlight\xapauthenticodesip.dll]&&[ Microsoft Corporation, 5.1.10411.0]
==================================
.TXT&&Error. [%SystemRoot%\SysWow64\NOTEPAD.EXE %1]
.EXE&&OK. [&%1& %*]
.COM&&OK. [&%1& %*]
.PIF&&OK. [&%1& %*]
.REG&&OK. [regedit.exe &%1&]
.BAT&&OK. [&%1& %*]
.SCR&&OK. [&%1& /S]
.CHM&&OK. [&%SystemRoot%\hh.exe& %1]
.HLP&&OK. [%SystemRoot%\winhlp32.exe %1]
.INI&&Error. [%SystemRoot%\SysWow64\NOTEPAD.EXE %1]
.INF&&OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS&&OK. [&%SystemRoot%\System32\WScript.exe& &%1& %*]
.JS& &Error. [%SystemRoot%\SysWow64\WScript.exe &%1& %*]
.LNK&&OK. [{0-}]
==================================
Winsock 提供者
==================================
Autorun.inf
==================================
HOSTS 文件
==================================
进程特权扫描
==================================
[已启用] \\Adobe Flash Player Updater
& && &&&C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[已禁用] \\AdobeAAMUpdater-1.0-Look-PC-Look
& && &&&C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe -mode=scheduled
[已启用] \\AliUpdater{540C4515-CE59-47CF-B330-5A0BA2D83449}
& && &&&D:\Program Files (x86)\AliWangWang\AliTask.exe /update
[已禁用] \\AutoKMS
& && &&&C:\Windows\AutoKMS.exe /update
[已启用] \\GoogleUpdateTaskMachineCore
& && &&&C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
[已启用] \\GoogleUpdateTaskMachineUA
& && &&&C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
[已启用] \\WpsUpdateTask_Look
& && &&&D:\Program Files (x86)\Kingsoft\WPS Office Personal\office6\wpsupdate.exe -from=task
[已禁用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
& && &&&N/A
[已启用] \Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
& && &&&N/A
[已禁用] \Microsoft\Windows\AppID\PolicyConverter
& && &&&%windir%\system32\appidpolicyconverter.exe
[已禁用] \Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck
& && &&&%windir%\system32\appidcertstorecheck.exe
[已启用] \Microsoft\Windows\Application Experience\AitAgent
& && &&&aitagent
[已启用] \Microsoft\Windows\Application Experience\ProgramDataUpdater
& && &&&%windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate
[已启用] \Microsoft\Windows\Autochk\Proxy
& && &&&%windir%\system32\rundll32.exe /d acproxy.dll,PerformAutochkOperations
[已启用] \Microsoft\Windows\Bluetooth\UninstallDeviceTask
& && &&&BthUdTask.exe $(Arg0)
[已启用] \Microsoft\Windows\CertificateServicesClient\SystemTask
& && &&&N/A
[已启用] \Microsoft\Windows\CertificateServicesClient\UserTask
& && &&&N/A
[已禁用] \Microsoft\Windows\CertificateServicesClient\UserTask-Roam
& && &&&N/A
[已启用] \Microsoft\Windows\Customer Experience Improvement Program\Consolidator
& && &&&%SystemRoot%\System32\wsqmcons.exe
[已启用] \Microsoft\Windows\Defrag\ScheduledDefrag
& && &&&%windir%\system32\defrag.exe -c
[已启用] \Microsoft\Windows\Location\Notifications
& && &&&%windir%\System32\LocationNotifications.exe
[已启用] \Microsoft\Windows\Maintenance\WinSAT
& && &&&N/A
[已启用] \Microsoft\Windows\Media Center\ActivateWindowsSearch
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoActivateWindowsSearch
[已启用] \Microsoft\Windows\Media Center\ConfigureInternetTimeService
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoConfigureInternetTimeService
[已启用] \Microsoft\Windows\Media Center\DispatchRecoveryTasks
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0)
[已启用] \Microsoft\Windows\Media Center\ehDRMInit
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DRMInit
[已启用] \Microsoft\Windows\Media Center\InstallPlayReady
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0)
[已启用] \Microsoft\Windows\Media Center\mcupdate
& && &&&%SystemRoot%\ehome\mcupdate $(Arg0)
[已启用] \Microsoft\Windows\Media Center\MediaCenterRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
[已启用] \Microsoft\Windows\Media Center\MediaCenterRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -MediaCenterRecoveryTask
[已启用] \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
[已启用] \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -ObjectStoreRecoveryTask
[已启用] \Microsoft\Windows\Media Center\OCURActivate
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /OCURActivate
[已启用] \Microsoft\Windows\Media Center\OCURDiscovery
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0)
[已启用] \Microsoft\Windows\Media Center\PBDADiscovery
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /PBDADiscovery
[已启用] \Microsoft\Windows\Media Center\PBDADiscoveryW1
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery
[已启用] \Microsoft\Windows\Media Center\PBDADiscoveryW2
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery
[已禁用] \Microsoft\Windows\Media Center\PeriodicScanRetry
& && &&&%windir%\ehome\MCUpdate.exe -pscn 0
[已启用] \Microsoft\Windows\Media Center\PvrRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
[已启用] \Microsoft\Windows\Media Center\PvrRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -PvrRecoveryTask
[已启用] \Microsoft\Windows\Media Center\PvrScheduleTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -PvrSchedule
[已启用] \Microsoft\Windows\Media Center\PvrScheduleTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -PvrSchedule
[已禁用] \Microsoft\Windows\Media Center\RecordingRestart
& && &&&%SystemRoot%\ehome\ehrec /RestartRecording
[已启用] \Microsoft\Windows\Media Center\RegisterSearch
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0)
[已启用] \Microsoft\Windows\Media Center\ReindexSearchRoot
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoReindexSearchRoot
[已启用] \Microsoft\Windows\Media Center\SqlLiteRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
[已启用] \Microsoft\Windows\Media Center\SqlLiteRecoveryTask
& && &&&%SystemRoot%\ehome\mcupdate.exe -SqlLiteRecoveryTask
[已启用] \Microsoft\Windows\Media Center\StartRecording
& && &&&%SystemRoot%\ehome\ehrec /StartRecording
[已启用] \Microsoft\Windows\Media Center\UpdateRecordPath
& && &&&%SystemRoot%\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0)
[已启用] \Microsoft\Windows\MobilePC\HotStart
& && &&&N/A
[已启用] \Microsoft\Windows\MUI\LPRemove
& && &&&%windir%\system32\lpremove.exe
[已启用] \Microsoft\Windows\Multimedia\SystemSoundsService
& && &&&N/A
[已启用] \Microsoft\Windows\NetTrace\GatherNetworkInfo
& && &&&%windir%\system32\gatherNetworkInfo.vbs
[已禁用] \Microsoft\Windows\Offline Files\Background Synchronization
& && &&&N/A
[已禁用] \Microsoft\Windows\Offline Files\Logon Synchronization
& && &&&N/A
[已启用] \Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
& && &&&%SystemRoot%\System32\powercfg.exe -energy -auto
[已启用] \Microsoft\Windows\Ras\MobilityManager
& && &&&N/A
[已禁用] \Microsoft\Windows\SideShow\AutoWake
& && &&&N/A
[已启用] \Microsoft\Windows\SideShow\GadgetManager
& && &&&N/A
[已禁用] \Microsoft\Windows\SideShow\SessionAgent
& && &&&N/A
[已禁用] \Microsoft\Windows\SideShow\SystemDataProviders
& && &&&N/A
[已启用] \Microsoft\Windows\SystemRestore\SR
& && &&&%windir%\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation
[已启用] \Microsoft\Windows\Tcpip\IpAddressConflict1
& && &&&%windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPOffendingSystem
[已启用] \Microsoft\Windows\Tcpip\IpAddressConflict2
& && &&&%windir%\system32\rundll32.exe ndfapi.dll,NdfRunDllDuplicateIPDefendingSystem
[已启用] \Microsoft\Windows\Time Synchronization\SynchronizeTime
& && &&&%windir%\system32\sc.exe start w32time task_started
[已启用] \Microsoft\Windows\UPnP\UPnPHostConfig
& && &&&sc.exe config upnphost start= auto
[已禁用] \Microsoft\Windows\User Profile Service\HiveUploadTask
& && &&&N/A
[已启用] \Microsoft\Windows\Windows Error Reporting\QueueReporting
& && &&&%windir%\system32\wermgr.exe -queuereporting
[已启用] \Microsoft\Windows\Windows Media Sharing\UpdateLibrary
& && &&&&%ProgramFiles%\Windows Media Player\wmpnscfg.exe&
[已启用] \Microsoft\Windows\WindowsBackup\ConfigNotification
& && &&&%systemroot%\System32\sdclt.exe /CONFIGNOTIFICATION
[已禁用] \Microsoft\Windows\WindowsColorSystem\Calibration Loader
& && &&&N/A
==================================
Windows 安全更新检查
KB2483139,&&拉脱维亚语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&捷克语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&俄语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&英语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&丹麦语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&意大利语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&匈牙利语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&朝鲜语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&瑞典语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&波兰语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&克罗地亚语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&乌克兰语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&挪威语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&希腊语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&保加利亚语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&葡萄牙语（葡萄牙）语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&荷兰语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&葡萄牙语（巴西）语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&西班牙语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&斯洛文尼亚语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&繁体中文语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&日语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&泰国语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&德语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&爱沙尼亚语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&立陶宛语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&斯洛伐克语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&芬兰语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&阿拉伯语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&希伯来语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&塞尔维亚语（拉丁语）语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&罗马尼亚语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&法语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2483139,&&土耳其语语言包 - 适用于 x64 系统的 Windows 7 Service Pack 1 (KB2483139)
KB2510690,&&Microsoft Office 2010 Service Pack 1 (KB 位版本
KB2709981,&&用于基于 x64 的系统的 Windows 7 更新程序 (KB2709981)
==================================
入口点错误：FindFirstFileA (危险等级: 高,&&被下面模块所HOOK: 0xBAE4DDB6)
==================================
==================================
01:40 上传
点击文件名下载附件
11.88 KB, 下载次数: 35
蓝屏看SRENG日志。。。。。。。。。。。我们都成大神了。。。。。。。
还是说说你自己的感觉怎么样吧，或者最近有什么可疑的地方。。。。。
或者提供dmp也行。。。。。。。。。。。。
yloko 发表于
蓝屏看SRENG日志。。。。。。。。。。。我们都成大神了。。。。。。。
还是说说你自己的感觉怎么 ...
万一是病毒引起的，驱动原因
蓝屏多次了
(135.12 KB, 下载次数: 70)
17:11 上传
点击文件名下载附件
i_look 发表于
万一是病毒引起的，驱动原因
蓝屏多次了
不清楚，，找不到规律性，，
你可以试试加固一下内存条，或者复位一下CMOS看看效果怎么样。。。有空的话也可以对内存条做一下测试。。。
另外，对于系统的原因，你看看scf /scannow&&能不能做的下去。。。
不能确定是什么原因，，
如果是硬件的话：内存条
如果是软件的话：应用程序接口。。。。。
感谢解答： ）
yloko 发表于
不清楚，，找不到规律性，，
你可以试试加固一下内存条，或者复位一下CMOS看看效果怎么样。。。有空的 ...
好像他的dmp里面都提到nt内核。。。。
本帖最后由 yloko 于
19:35 编辑
GiBson 发表于
好像他的dmp里面都提到nt内核。。。。
嗯，，前半部的输入，，，，所以应该是外部原因。。。并不是内核本身的内部原因，，但不清楚外部原因的具体原因，，，
大部分蓝屏的原因都是由内存，硬盘，或者驱动引起的，只能慢慢一个测试和排除~~
多少条内存？2+的话剩下一个试试。
本帖最后由 老机子 于
09:15 编辑
谷歌更新服务和那个ADOB服务可以改为手动！建议停止！另外建议适当优化一下服务看看！找到的ERRO先修复！试着还原一下，重启按F8选最后一次正确配置！
头像被屏蔽
提示: 该帖被管理员或版主屏蔽
Copyright & KaFan & All Rights Reserved.
Powered by Discuz! X3.1( 苏ICP备号 ) GMT+8,