.Lix758
开机会跳出KB8964235.log无法加载，启动项里并没有社么怪异的东西
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
＜ctfmon.exe＞＜C:\WINDOWS\system32\ctfmon.exe＞ [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
＜load＞＜＞ []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
＜RavTask＞＜＂C:\Program Files\Rising\Rav\RavTask.exe＂ -system＞ [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
＜shell＞＜Explorer.exe＞ [Microsoft Corporation]
＜Userinit＞＜C:\WINDOWS\system32\userinit.exe,＞ [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
＜AppInit_DLLs＞＜＞ []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
＜UIHost＞＜logonui.exe＞ [Microsoft Corporation]
==================================
启动文件夹
服务
[Ati HotKey Poller / Ati HotKey Poller]
dngz.net您的电脑医生
＜C:\WINDOWS\system32\Ati2evxx.exe＞＜ATI Technologies Inc.＞
[ATI Smart / ATI Smart]
＜C:\WINDOWS\system32\ati2sgag.exe＞＜＞
[InstallDriver Table Manager / IDriverT]
＜＂C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe＂＞＜Macrovision Corporation＞
[P4P Service / P4P Service]
＜C:\Program Files\Common Files\Sogou PXP\p2psvr.exe＞＜Sohu.com Inc.＞
[Remote Procedure Call System(RPCS) / RPCS]
＜C:\WINDOWS\system32\RPCS.exe＞＜N/A＞
[Rising Process Communication Center / RsCCenter]
＜＂C:\Program Files\Rising\Rav\CCenter.exe＂＞＜Beijing Rising Technology Co., Ltd.＞
[RsRavMon Service / RsRavMon]
＜＂C:\Program Files\Rising\Rav\Ravmond.exe＂＞＜Beijing Rising Technology Co., Ltd.＞
[StarWind iSCSI Service / StarWindService]
＜C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe＞＜Rocket Division Software＞
好象看不出什么东西
看看是不是此服务也开了
[InstallDriver Table Manager / IDriverT]
＜＂C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe＂＞＜Macrovision Corporation＞
过去KB8964235.log一般都在注册表 欢迎来到(www.dngz.net)
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
＜AppInit_DLLs＞＜＞ []的键值下，但日志又没显示，也是有点怪，那就分别搜索此文件和注册表吧