风微香轻的博客

活力地带
■	给我留言

■	登录社区

■	用户注册

■	访问次数：11127225

■	文章数量：19229

■	评论数量：82015

最新文章列表
■	航嘉冷静王钻石版2.3电源额定300W好不好？

■	数码相机

■	我想买一个五千元以内的电脑，3D设计型的。请内行给个配置建...

■	[200高分!!!] 求KOTOKO的完整歌集...(请看清要求)

■	请大家帮我看看哪台电脑比较好！

■	神舟优雅260好不好?

■	帮忙！评价电脑配置！

■	请帮大家忙推荐一款手机

■	诺基亚N72 水货

■	【求助】s500i内存卡读卡的问题~

标题：	没连接网时就有explore.exe这个进程，而且病毒杀不掉	收起

2008-03-19 08:39:44
帖子标题: 没连接网时就有explore.exe这个进程，而且病毒杀不掉帖子内容: 现象: 历史操作:Isee图片编辑器，Windows优化大师，新浪UC，超级兔子备注: 急求杀毒方法我的诊断报告: 各位高手：非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！该诊断报告由360安全卫士提供 http://www.360safe.com 诊断时间: 2008-03-12 18:53:48 诊断平台: Microsoft Windows XP Service Pack 2 IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180 计算机物理内存:1023.45MB - 当前可用内存:670.76MB 100 - 未知 - Process: RavMonD.exe [Rising Realtime Moniter] - E:\RISING\ravmond.exe -step 100 - 未知 - Process: rfwstub.exe [Rising Personal FireWall Service Rfwstub ] - c:\program files\rising\rfw\rfwstub.exe 100 - 未知 - Process: RavStub.exe [Rising RavStub] - E:\RISING\RavStub.exe /RAVMOND=1023 100 - 未知 - Process: BoBoTurbo.exe [BoBo P2P多媒体网络点播/广播/直播系统加速器] - C:\WINDOWS\system32\BoBoTurbo\BoBoTurbo.exe 100 - 未知 - Process: stormliv.exe [暴风影音媒体控制中心] - C:\Program Files\StormII\stormliv.exe 100 - 未知 - Process: RavMon.exe [Rising realtime monitor shell] - E:\RISING\RavMon.exe -SYSTEM 100 - 未知 - Process: RavTask.exe [RavTimer] - E:\RISING\RavTask.exe 100 - 未知 - Process: runiep.exe [Rising AntiSpyware Monitor] - E:\RISING\kaka\runiep.exe R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.baidu.com/ R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Use Search Asst=no O1 - 未知 - Host: 127.0.0.1 yu.8s7.net O1 - 未知 - Host: 127.0.0.1 1.jopanqc.com O1 - 未知 - Host: 127.0.0.1 2.joppnqq.com O1 - 未知 - Host: 127.0.0.1 wg.47255.com O1 - 未知 - Host: 127.0.0.1 1.joppnqq.com O1 - 未知 - Host: 127.0.0.1 xxx.m111.biz O1 - 未知 - Host: 127.0.0.1 1.jopenqc.com O1 - 未知 - Host: 127.0.0.1 1.jopenkk.com O1 - 未知 - Host: 127.0.0.1 xxx.vh7.biz O1 - 未知 - Host: 127.0.0.1 xxx.j41m.com O1 - 未知 - Host: 127.0.0.1 3.joppnqq.com O1 - 未知 - Host: 127.0.0.1 d.93se.com O1 - 未知 - Host: 127.0.0.1 www.868wg.com O1 - 未知 - Host: 127.0.0.1 xxx.mmma.biz O1 - 未知 - Host: 127.0.0.1 ilove.com O1 - 未知 - Host: 127.0.0.1 tp.shpzhan.cn O1 - 未知 - Host: 127.0.0.1 www.tomwg.com O1 - 未知 - Host: 127.0.0.1 www.cike007.cn O1 - 未知 - Host: 127.0.0.1 www.22aaa.com O1 - 未知 - Host: 127.0.0.1 xx.exiao01.com O1 - 未知 - Host: 127.0.0.1 www.exiao01.com O1 - 未知 - Host: 127.0.0.1 www.exiao01.com O1 - 未知 - Host: 127.0.0.1 new.749571.com O1 - 未知 - Host: 127.0.0.1 xtx.kv8.info O1 - 未知 - Host: 127.0.0.1 cao.kv8.info O1 - 未知 - Host: 127.0.0.1 1.jopmmqq.com O1 - 未知 - Host: 127.0.0.1 171817.171817.com O1 - 未知 - Host: 127.0.0.1 d2.llsging.com O1 - 未知 - Host: 127.0.0.1 down.malasc.cn O1 - 未知 - Host: 127.0.0.1 llboss.com O1 - 未知 - Host: 127.0.0.1 nx.51ylb.cn O1 - 未知 - Host: 127.0.0.1 my.531jx.cn O1 - 未知 - Host: 127.0.0.1 qqq.dzydhx.com O1 - 未知 - Host: 127.0.0.1 qqq.hao1658.com O1 - 未知 - Host: 127.0.0.1 www.333292.com O1 - 未知 - Host: 127.0.0.1 down.18dd.net O1 - 未知 - Host: 127.0.0.1 up.22x44.com O2 - 未知 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - E:\迅雷\ComDlls\TDAtOnce_Now.dll O2 - 未知 - BHO: (QQToolbar) - [QQ工具栏] - {29CF293A-1E7D-4069-9E11-E39698D0AF95} - C:\Program Files\Tencent\QQToolbar\IEBar.dll O2 - 未知 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - [RealPlayer Download and Record Plugin for Internet Explorer] - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - 未知 - BHO: (Google Toolbar Notifier BHO) - [GoogleToolbarNotifier] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - 未知 - Toolbar: (QQToolbar) - [QQ工具栏] - {29CF293A-1E7D-4069-9E11-E39698D0AF95} - C:\Program Files\Tencent\QQToolbar\IEBar.dll O4 - 未知 - HKLM\..\Run: [Google IME Autoupdater] [] "E:\xunlei5\Google Pinyin\GooglePinyinDaemon.exe" O4 - 未知 - HKLM\..\Run: [iSeeTray] [] E:\图片\iSee.exe FT 0 O4 - 未知 - HKLM\..\RunOnce: [KKDelay] [RunOnce Application] E:\RISING\kaka\RunOnce.exe O8 - 未知 - Extra context menu item: &使用超级旋风下载 - e:\qqdownload\geturl.htm O8 - 未知 - Extra context menu item: &使用超级旋风下载全部链接 - e:\qqdownload\getAllurl.htm O8 - 未知 - Extra context menu item: iSee 保存所有图片 - E:\图片\iSeeSavePicAll.htm O8 - 未知 - Extra context menu item: iSee保存Flash - E:\图片\iSeeSaveFlash.htm O8 - 未知 - Extra context menu item: iSee保存所有图片 - E:\图片\iSeeSavePicAll.htm O8 - 未知 - Extra context menu item: iSee读取Exif - E:\图片\iSeeReadExif.htm O8 - 未知 - Extra context menu item: 使用迅雷下载 - E:\迅雷\Program\geturl.htm O8 - 未知 - Extra context menu item: 使用迅雷下载全部链接 - E:\迅雷\Program\getallurl.htm O8 - 未知 - Extra context menu item: 添加到QQ表情 - E:\qq\AddEmotion.htm O8 - 未知 - Extra context menu item: 用比特精灵下载(&B) - E:\比特\BitSpirit\bsurl.htm O9 - 未知 - Extra button: 启动迅雷5(HKLM) - E:\xunlei5\Thunder.exe O9 - 未知 - Extra button: 浩方对战平台(HKLM) - E:\浩方\浩方对战平台\GameClient.exe O9 - 未知 - Extra button: 新浪UC(HKLM) - E:\UC\uc.exe O9 - 未知 - Extra button: PPLive(HKLM) - C:\Program Files\PPLive\PPLive.exe O11 - 未知 - Options Group: 腾讯中文搜搜 O18 - 未知 - Protocol: KuGoo - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O18 - 未知 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O18 - 未知 - Protocol: IEProtocolHandler - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - 未知 - Service: BoBoTurbo [BoBo P2P控件的智能升级服务和P2P加速服务组件] - C:\WINDOWS\system32\BoBoTurbo\BoBoTurbo.exe - (running) O23 - 未知 - Service: ccosm [Contrl Center of Storm Media] - C:\Program Files\StormII\stormliv.exe /asservice - (running) O23 - 未知 - Service: gusvc [Google Updater Service] - "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" - (not running) O23 - 未知 - Service: RsCCenter [Rising Process Communication Center] - "E:\RISING\CCenter.exe" - (running) O23 - 未知 - Service: RsRavMon [Rising RealTime Monitor] - "E:\RISING\Ravmond.exe" - (not running) ======================================= 100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe 100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base 100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe 100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe 100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss 100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] - E:\RISING\CCenter.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService 100 - 安全 - Process: rfwsrv.exe [瑞星出品的防火墙程序，用于抵御黑客攻击。] - c:\program files\rising\rfw\rfwsrv.exe 100 - 安全 - Process: rfwProxy.exe [瑞星防火墙相关进程。] - c:\program files\rising\rfw\rfwproxy.exe 100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE 100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe 100 - 安全 - Process: rfwmain.exe [瑞星公司出品的瑞星杀毒软件个人防火墙程序,用于抵御黑客攻击。] - c:\program files\rising\rfw\RfwMain.exe 100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] - C:\WINDOWS\system32\nvsvc32.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k imgsvc 100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe 100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - E:\360安全卫士\360safe\safemon\360Tray.exe 100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe 100 - 安全 - Process: 360Safe.exe [360安全卫士] - E:\360安全卫士\360safe\360safe.exe R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm R3 - 安全 - URLSearchHook: (Tencent SearchHook) - [搜搜工具条，搜索工具栏。] - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\SSPlus\SAddr.dll O2 - 安全 - BHO: (QQCycloneHelper Class) - [腾讯出品的超级旋风下载组件相关文件。] - {00000000-12C9-4305-82F9-43058F20E8D2} - e:\qqdownload\QQIEHelper02.dll O2 - 安全 - BHO: (Tencent Browser Helper) - [搜搜工具条，搜索工具栏。] - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\SSPlus\SAddr.dll O2 - 安全 - BHO: (Promote Class) - [TOM-Skype,网络语音沟通工具,TOM出品的一款网络语音沟通工具,不建议用户删除。] - {0FA24E3E-422C-4D94-A125-104F32352C90} - C:\WINDOWS\system32\promote.dll O2 - 安全 - BHO: (超级兔子上网精灵) - [超级兔子上网精灵相关插件。] - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - E:\超级兔子\MagicSet\haokanbar.dll O2 - 安全 - BHO: (BandIE Class) - [百度超级搜霸相关插件。] - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - E:\迅雷\ComDlls\xunleiBHO_Now.dll O2 - 安全 - BHO: (Google Toolbar Helper) - [Google搜索工具条。] - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - 安全 - Toolbar: (百度超级搜霸) - [百度超级搜霸相关程序。] - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll O3 - 安全 - Toolbar: (卡卡上网安全助手) - [卡卡安全助手工具条软件相关程序。] - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll O3 - 安全 - Toolbar: (&Google) - [Google IE 客户端工具栏。] - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - 安全 - Toolbar: (超级兔子上网精灵) - [超级兔子上网精灵工具条,随超级兔子软件捆绑安装。] - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - E:\超级兔子\MagicSet\haokanbar.dll O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - 安全 - HKLM\..\Run: [Thunder] [迅雷下载器软件相关程序。] "E:\迅雷\Thunder.exe" /s O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "E:\RISING\RavTask.exe" -system O4 - 安全 - HKLM\..\Run: [RfwMain] [瑞星防火墙程序，抵御黑客攻击。] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup O4 - 安全 - HKLM\..\Run: [runeip] [卡卡上网安全助手相关程序。] "E:\RISING\kaka\runiep.exe" /startup O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] E:\360安全卫士\360safe\safemon\360Tray.exe /start O4 - 安全 - HKLM\..\RunOnce: [360Safe] [360安全卫士] Rundll32.exe E:\360安~1\360safe\AntiAdwa.dll,KillAdware O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe O4 - 安全 - HKCU\..\Run: [Skype] [一款语音聊天软件。] "e:\电话\skype\Phone\Skype.exe" /nosplash /minimized O4 - 安全 - HKCU\..\Run: [miniqqlive] [QQLive视频播放软件相关程序。] "E:\qq\QQLIVE\MiniQQLive.exe" O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab O21 - 安全 - Protocol Icons: HKCR\http\shell\open\command - "C:\Program Files\Internet Explorer\IEXPLORE.EXE" "%1" O21 - 安全 - Protocol Icons: HKCR\ftp\shell\open\command - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -url "%1" O21 - 安全 - Protocol Icons: HKCR\https\shell\open\command - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -url "%1" O21 - 安全 - Protocol Icons: HKCR\http\DefaultIcon - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE,1 O21 - 安全 - Protocol Icons: HKCR\ftp\DefaultIcon - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE,1 O21 - 安全 - Protocol Icons: HKCR\https\DefaultIcon - C:\PROGRA~1\MOZILL~1\FIREFOX.EXE,1 O22 - 安全 - Filename Extention: FIREFOX第三方浏览器 - FirefoxHTML O22 - 安全 - Filename Extention: FIREFOX第三方浏览器 - FirefoxHTML O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running) O23 - 安全 - Service: RfwProxySrv [瑞星防火墙相关程序。] - c:\program files\rising\rfw\rfwproxy.exe - (running) O23 - 安全 - Service: RfwService [是瑞星个人防火墙相关程序。] - c:\program files\rising\rfw\rfwsrv.exe - (running) ======================================= O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 - O31 - 未知 - SEApproved: {88895560-9AA2-1069-930E-00AA0030EBC8} - C:\WINDOWS\system32\hticons.dll - - - - 0 - O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 - O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 - O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 - O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 128000 - a6b1dc942d126b5687fab84b5070dd3c O31 - 未知 - SEApproved: {1CDB2949-8F65-4355-8456-263E7C208A5D} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11092 - 466944 - 76dd76caaea90e5c12b32d2a3484496c O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11092 - 466944 - 76dd76caaea90e5c12b32d2a3484496c O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11092 - 466944 - 76dd76caaea90e5c12b32d2a3484496c O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 128000 - a6b1dc942d126b5687fab84b5070dd3c O31 - 未知 - BootExecute: bsmain - - - - 0 - O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 - O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 - ======================================= O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - E:\RISING\kaka\ieprot.dll - IE Protector - c03fc56e7d933a2478f65ddb371353bb O40 - Explorer.EXE - - E:\迅雷\Components\ResWorker\DsBho_00.dll - DsBho - 595719e26f2c6a5c2b5cbfa9ebbffa4b O40 - Explorer.EXE - Thunder Networking Technologies,LTD - E:\迅雷\Components\ResWorker\DataProcessor_00.dll - DataProcessor - dae999d2d3b95d4488c56d114284c8d3 O40 - Explorer.EXE - NVIDIA Corporation - C:\WINDOWS\system32\NVRSZHC.DLL - NVIDIA Simplified Chinese language resource library - 993e750bd2a4323f1faebbcb2cc17a91 O40 - Explorer.EXE - - C:\WINDOWS\system32\nvshell.dll - - 76dd76caaea90e5c12b32d2a3484496c ======================================= O41 - BdGuard - BDGUARD Dynamic Link Library - C:\WINDOWS\system32\drivers\BDGuard.SYS - (running) - BDGUARD Dynamic Link Library - - d8ad2f959208197455aa4a2a67be9f69 O41 - kzzlckk - kzzlckk - C:\WINDOWS\system32\drivers\kzzlckk.sys - (running) - - - 3afbff013f1297e58fda87ec10573de5 O41 - QKeyService - KeyCrypt - C:\WINDOWS\system32\KeyCrypt.sys - (running) - KeyCrypt - Tencent Technology (Shenzhen) Company Limited - ecaa6d40a70bee079f3817601bec1692 O41 - RsAntiSpyware - Anti-RootKit Driver - C:\WINDOWS\system32\drivers\RsBoot.sys - (running) - Anti-RootKit Driver - Beijing Rising Technology Co., Ltd. - f9edc97f228c046832a24b5a76017912 O41 - EagleNT - EagleNT - C:\WINDOWS\system32\drivers\EagleNT.sys - (not running) - - - O41 - fhzl2 - fhzl2 - C:\WINDOWS\system32\drivers\fhzl2.ahc - (not running) - - - 4fdcc51bb443ce9fabbc9389448124d6 O41 - npkcrypt - npkcrypt - C:\WINDOWS\system32\npkcrypt.sys - (not running) - - - O41 - npkycryp - npkycryp - C:\WINDOWS\system32\npkycryp.sys - (not running) - - - O41 - TesSafe - TesSafe NT Driver - C:\WINDOWS\system32\TesSafe.sys - (not running) - TesSafe NT Driver - TENCENT - e5fab52f612aa3ffdb128fec7d21984e ======================================= 360Safe.exe=4.0.3.1006 AntiAdwa.dll=4.0.0.1002 AntiEng.dll=4.0.0.1001 AntiActi.dll=2.0.0.3000 CleanHis.dll=4.0.0.1001 live.dll=1.0.1.1022 ======================================= 操作历史报告： 2008-03-12 18:37 清理恶评插件 - dix下载器 - 2008-03-12 18:37 清理恶评插件 - dix下载器 - ======================================= 360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基7.0 最新免费下载：http://www.360safe.com 点击此处查看原文、参与讨论固定链接┆ 评论(6)┆阅读(86)

标题：	电脑中毒了，360，瑞星，网页都打不开，网页会自动弹出来，自有QQ可以用	收起

2008-03-19 08:39:34
帖子标题: 电脑中毒了，360，瑞星，网页都打不开，网页会自动弹出来，自有QQ可以用帖子内容: 现象: 历史操作:360打不开啊，最近装了REALPLAY 备注: 我的诊断报告: 各位高手：非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！该诊断报告由360安全卫士提供 http://www.360safe.com 诊断时间: 2008-03-13 22:11:34 诊断平台: Microsoft Windows XP Service Pack 2 IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180 计算机物理内存:247.48MB - 当前可用内存:67.86MB 100 - 未知 - Process: kpfwsvc.exe [Kingsoft Personal Firewall Service] - E:\杀毒\瑞星\Kingsoft Internet Security 2008\KPfwSvc.EXE 100 - 未知 - Process: kwatch.exe [Kingsoft AntiVirus KWatch Service] - E:\杀毒\瑞星\Kingsoft Internet Security 2008\KWatch.EXE 100 - 未知 - Process: UberIcon Manager.exe [] - C:\WINDOWS\Vista\Spctool\UberIcon\UberIcon Manager.exe 100 - 未知 - Process: stormliv.exe [暴风影音媒体控制中心] - E:\暴风\StormII\stormliv.exe /asservice 100 - 未知 - Process: kissvc.exe [Kingsoft AntiVirus Service Manager] - E:\杀毒\瑞星\Kingsoft Internet Security 2008\KISSvc.EXE 100 - 未知 - Process: QQ.exe [QQ] - E:\qq\QQ.exe 100 - 未知 - Process: TXPlatform.exe [TM2008] - E:\qq\TXPlatform.exe 100 - 未知 - Process: MiniKuGoo.exe [迷你酷狗播放器] - E:\音乐\酷狗\MiniKuGoo\MiniKuGoo.exe O2 - 未知 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - G:\迅雷\Thunder\ComDlls\TDAtOnce_Now.dll O4 - 未知 - HKLM\..\Run: [Vistadrv] [] C:\WINDOWS\Vista\vip\VistaDrv\vsdrv.exe O4 - 未知 - HKCU\..\Run: [UberIcon] [] "C:\WINDOWS\Vista\Spctool\UberIcon\UberIcon Manager.exe" O4 - 未知 - HKCU\..\Run: [Taskbar] [] ; C:\WINDOWS\Vista\Spctool\Taskbar\Taskbar.exe O8 - 未知 - Extra context menu item: 使用迅雷下载 - G:\迅雷\Thunder\Program\geturl.htm O8 - 未知 - Extra context menu item: 使用迅雷下载全部链接 - G:\迅雷\Thunder\Program\getallurl.htm O8 - 未知 - Extra context menu item: 添加到QQ表情 - E:\qq\AddEmotion.htm O9 - 未知 - Extra button: 金山网页防挂马模块设置(HKLM) - E:\杀毒\瑞星\Kingsoft Internet Security 2008\Antispy\IEBuddyExt.DLL O15 - 未知 - Trusted Zone: https://mybank.icbc.com.cn O15 - 未知 - Trusted Zone: http://www.icbc.com.cn O16 - 未知 - DPF: 无效的CLSID：{EC0978ED-24E3-403C-AB7A-060E388553E6} ({EC0978ED-24E3-403C-AB7A-060E388553E6}) - http://www.17bobo.com/Software/BoBo_ActiveX_V3.ocx O18 - 未知 - Protocol: KuGoo - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O18 - 未知 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O23 - 未知 - Service: ccosm [Contrl Center of Storm Media] - E:\暴风\StormII\stormliv.exe /asservice - (running) O23 - 未知 - Service: KISSvc [金山毒霸公共服务程序] - E:\杀毒\瑞星\Kingsoft Internet Security 2008\KISSvc.EXE - (running) O23 - 未知 - Service: KPfwSvc [金山毒霸个人防火墙服务程序] - "E:\杀毒\瑞星\Kingsoft Internet Security 2008\KPfwSvc.EXE" - (running) O23 - 未知 - Service: KWatchSvc [金山毒霸文件实时防毒服务程序] - "E:\杀毒\瑞星\Kingsoft Internet Security 2008\KWatch.EXE" - (running) O23 - 未知 - Service: mnmsrvc [使授权用户能够通过使用 NetMeeting 跨企业 intranet 远程访问此计算机。如果此服务被停用，远程桌面服务将不可用。如果此服务被禁用，任何依赖它的服务将无法启动。] - - (not running) ======================================= 100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe 100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base 100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe 100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe 100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService 100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE 100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe 100 - 安全 - Process: igfxtray.exe [intel显卡相关软件。] - C:\WINDOWS\system32\igfxtray.exe 100 - 安全 - Process: hkcmd.exe [intel显卡驱动相关软件。] - C:\WINDOWS\system32\hkcmd.exe 100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe 100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe 100 - 安全 - Process: Dot1XClient.exe [802.1x认证客户端相关程序。] - C:\Program Files\Huawei-3Com\H3C 802.1X 客户端\Dot1XClient.exe 100 - 安全 - Process: 360Safe.exe [360安全卫士] - E:\杀毒\360\360safe\360Safe.exe 100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - E:\杀毒\360\360safe\safemon\360Tray.exe 100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\IEXPLORE.EXE R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - G:\迅雷\Thunder\ComDlls\xunleiBHO_Now.dll O4 - 安全 - HKLM\..\Run: [IgfxTray] [是Intel显卡配置和诊断程序，会同Intel 810芯片组的集成显卡安装。] C:\WINDOWS\system32\igfxtray.exe O4 - 安全 - HKLM\..\Run: [HotKeysCmds] [是Intel显示卡相关程序，用于配置和诊断相关设备。] C:\WINDOWS\system32\hkcmd.exe O4 - 安全 - HKLM\..\Run: [KavStart] [金山出品的金山毒霸杀毒软件。] "E:\杀毒\瑞星\Kingsoft Internet Security 2008\KAVStart.exe" -startup O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe O4 - 安全 - HKCU\..\Run: [bgswitch] [微软出品的自动换壁纸程序。] C:\WINDOWS\system32\bgswitch.exe O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL ======================================= O31 - 未知 - SODL: {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SODL: {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll - Microsoft Corporation - Systray shell service object - 5.1.2600.2180 - 106496 - 49927372818d15cedeb466125b3c6bb9 O31 - 未知 - SEApproved: {00022613-0000-0000-C000-000000000046} - C:\WINDOWS\system32\mmsys.cpl - Microsoft Corporation - Control Panel Drivers Applet - 5.1.2600.2180 - 894464 - f99833e3971941d720df291927684583 O31 - 未知 - SEApproved: {176d6597-26d3-11d1-b350-080036a75b03} - C:\WINDOWS\system32\icmui.dll - Microsoft Corporation - Microsoft Color Matching System User Interface DLL - 5.1.2600.0 - 77312 - 57f2a25ac11fc58379354b472a33a6f2 O31 - 未知 - SEApproved: {41E300E0-78B6-11ce-849B-444553540000} - C:\WINDOWS\system32\themeui.dll - Microsoft Corporation - Windows Theme API - 6.0.2900.2180 - 375296 - 51bb979a160f98bcc9b8000252a8d982 O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 - O31 - 未知 - SEApproved: {5DB2625A-54DF-11D0-B6C4-0800091AA605} - C:\WINDOWS\System32\icmui.dll - Microsoft Corporation - Microsoft Color Matching System User Interface DLL - 5.1.2600.0 - 77312 - 57f2a25ac11fc58379354b472a33a6f2 O31 - 未知 - SEApproved: {675F097E-4C4D-11D0-B6C1-0800091AA605} - C:\WINDOWS\system32\icmui.dll - Microsoft Corporation - Microsoft Color Matching System User Interface DLL - 5.1.2600.0 - 77312 - 57f2a25ac11fc58379354b472a33a6f2 O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 - O31 - 未知 - SEApproved: {85BBD920-42A0-1069-A2E4-08002B30309D} - C:\WINDOWS\system32\syncui.dll - Microsoft Corporation - Windows Briefcase - 5.1.2600.2180 - 204288 - be51f40c779a5635f3c4b5ebdb819586 O31 - 未知 - SEApproved: {BD84B380-8CA2-1069-AB1D-08000948F534} - C:\WINDOWS\system32\fontext.dll - Microsoft Corporation - Windows Font Folder - 5.1.2600.2180 - 395776 - 8b6723513c8f3375507a6708fd3dba8a O31 - 未知 - SEApproved: {DBCE2480-C732-101B-BE72-BA78E9AD5B27} - C:\WINDOWS\system32\icmui.dll - Microsoft Corporation - Microsoft Color Matching System User Interface DLL - 5.1.2600.0 - 77312 - 57f2a25ac11fc58379354b472a33a6f2 O31 - 未知 - SEApproved: {7007ACC7-3202-11D1-AAD2-00805FC1270E} - C:\WINDOWS\system32\NETSHELL.dll - Microsoft Corporation - Network Connections Shell - 5.1.2600.2180 - 2137088 - O31 - 未知 - SEApproved: {992CFFA0-F557-101A-88EC-00DD010CCC48} - C:\WINDOWS\system32\NETSHELL.dll - Microsoft Corporation - Network Connections Shell - 5.1.2600.2180 - 2137088 - O31 - 未知 - SEApproved: {E211B736-43FD-11D1-9EFB-0000F8757FCD} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 751616 - 7169bd54b50911a6ce9fccaa29357ebe O31 - 未知 - SEApproved: {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 751616 - 7169bd54b50911a6ce9fccaa29357ebe O31 - 未知 - SEApproved: {905667aa-acd6-11d2-8080-00805f6596d2} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 751616 - 7169bd54b50911a6ce9fccaa29357ebe O31 - 未知 - SEApproved: {3F953603-1008-4f6e-A73A-04AAC7A992F1} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 751616 - 7169bd54b50911a6ce9fccaa29357ebe O31 - 未知 - SEApproved: {83bbcbf3-b28a-4919-a5aa-73027445d672} - C:\WINDOWS\system32\wiashext.dll - Microsoft Corporation - Imaging Devices Shell Folder UI - 5.1.2600.2180 - 751616 - 7169bd54b50911a6ce9fccaa29357ebe O31 - 未知 - SEApproved: {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF} - C:\WINDOWS\system32\mstask.dll - Microsoft Corporation - Task Scheduler interface DLL - 5.1.2600.2180 - 316928 - d919668e8d62485c9834d28691761505 O31 - 未知 - SEApproved: {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF} - C:\WINDOWS\system32\mstask.dll - Microsoft Corporation - Task Scheduler interface DLL - 5.1.2600.2180 - 316928 - d919668e8d62485c9834d28691761505 O31 - 未知 - SEApproved: {D6277990-4C6A-11CF-8D87-00AA0060F5BF} - C:\WINDOWS\system32\mstask.dll - Microsoft Corporation - Task Scheduler interface DLL - 5.1.2600.2180 - 316928 - d919668e8d62485c9834d28691761505 O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 - O31 - 未知 - SEApproved: {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE} - C:\WINDOWS\system32\sendmail.dll - Microsoft Corporation - Send Mail - 6.0.2900.2180 - 58880 - 5d6e81555a9906ef7469d5d7a35e19ad O31 - 未知 - SEApproved: {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE} - C:\WINDOWS\system32\sendmail.dll - Microsoft Corporation - Send Mail - 6.0.2900.2180 - 58880 - 5d6e81555a9906ef7469d5d7a35e19ad O31 - 未知 - SEApproved: {88C6C381-2E85-11D0-94DE-444553540000} - C:\WINDOWS\system32\occache.dll - Microsoft Corporation - Object Control Viewer - 6.0.2900.2180 - 122880 - 175736fcd1a6250b459cd2ceb1e71332 O31 - 未知 - SEApproved: {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {F5175861-2688-11d0-9C5E-00AA00A45957} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {08165EA0-E946-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {7D559C10-9FE9-11d0-93F7-00AA0059CE02} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {E6CC6978-6B6E-11D0-BECA-00C04FD940BE} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {D8BD2030-6FC9-11D0-864F-00AA006809D9} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 6.0.2900.2180 - 390656 - 31cfe47fcd0024e16a1c1f7e4826ca25 O31 - 未知 - SEApproved: {352EC2B7-8B9A-11D1-B8AE-006008059382} - C:\WINDOWS\system32\appwiz.cpl - Microsoft Corporation - Shell Application Manager - 5.1.2600.2180 - 593408 - eca487e77c813a65914d51084a591f5d O31 - 未知 - SEApproved: {0B124F8F-91F0-11D1-B8B5-006008059382} - C:\WINDOWS\system32\appwiz.cpl - Microsoft Corporation - Shell Application Manager - 5.1.2600.2180 - 593408 - eca487e77c813a65914d51084a591f5d O31 - 未知 - SEApproved: {CFCCC7A0-A282-11D1-9082-006008059382} - C:\WINDOWS\system32\appwiz.cpl - Microsoft Corporation - Shell Application Manager - 5.1.2600.2180 - 593408 - eca487e77c813a65914d51084a591f5d O31 - 未知 - SEApproved: {e84fda7c-1d6a-45f6-b725-cb260c236066} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 516096 - 51fb20fd3d0b2edda98a2d1e94b91b9d O31 - 未知 - SEApproved: {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 516096 - 51fb20fd3d0b2edda98a2d1e94b91b9d O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 - O31 - 未知 - SEApproved: {3F30C968-480A-4C6C-862D-EFC0897BB84B} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 516096 - 51fb20fd3d0b2edda98a2d1e94b91b9d O31 - 未知 - SEApproved: {9DBD2C50-62AD-11d0-B806-00C04FD706EC} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 516096 - 51fb20fd3d0b2edda98a2d1e94b91b9d O31 - 未知 - SEApproved: {EAB841A0-9550-11cf-8C16-00805F1408F3} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 516096 - 51fb20fd3d0b2edda98a2d1e94b91b9d O31 - 未知 - SEApproved: {eb9b1153-3b57-4e68-959a-a3266bc3d7fe} - C:\WINDOWS\system32\shimgvw.dll - Microsoft Corporation - Windows 图片和传真查看器 - 6.0.2900.2180 - 516096 - 51fb20fd3d0b2edda98a2d1e94b91b9d O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 - O31 - 未知 - SEApproved: {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} - C:\WINDOWS\system32\zipfldr.dll - Microsoft Corporation - Compressed (zipped) Folders - 6.0.2900.2180 - 465408 - 08fa93556c2dcd998378f00b0ce39d2e O31 - 未知 - SEApproved: {BD472F60-27FA-11cf-B8B4-444553540000} - C:\WINDOWS\system32\zipfldr.dll - Microsoft Corporation - Compressed (zipped) Folders - 6.0.2900.2180 - 465408 - 08fa93556c2dcd998378f00b0ce39d2e O31 - 未知 - SEApproved: {888DCA60-FC0A-11CF-8F0F-00C04FD7D062} - C:\WINDOWS\system32\zipfldr.dll - Microsoft Corporation - Compressed (zipped) Folders - 6.0.2900.2180 - 465408 - 08fa93556c2dcd998378f00b0ce39d2e O31 - 未知 - SEApproved: {ECF03A33-103D-11d2-854D-006008059367} - C:\WINDOWS\system32\mydocs.dll - Microsoft Corporation - My Documents Folder UI - 6.0.2900.2180 - 91136 - df133fd2fe0e38a48b626c8863022933 O31 - 未知 - SEApproved: {ECF03A32-103D-11d2-854D-006008059367} - C:\WINDOWS\system32\mydocs.dll - Microsoft Corporation - My Documents Folder UI - 6.0.2900.2180 - 91136 - df133fd2fe0e38a48b626c8863022933 O31 - 未知 - SEApproved: {4a7ded0a-ad25-11d0-98a8-0800361b1103} - C:\WINDOWS\system32\mydocs.dll - Microsoft Corporation - My Documents Folder UI - 6.0.2900.2180 - 91136 - df133fd2fe0e38a48b626c8863022933 O31 - 未知 - SEApproved: {143A62C8-C33B-11D1-84FE-00C04FA34A14} - - - - - 0 - O31 - 未知 - SEApproved: {60fd46de-f830-4894-a628-6fa81bc0190d} - C:\WINDOWS\system32\photowiz.dll - Microsoft Corporation - Photo Printing Wizard - 5.1.2600.2180 - 166912 - 6842512cb971d848ea3aba5cca9a36ed O31 - 未知 - SEApproved: {0CD7A5C0-9F37-11CE-AE65-08002B2E1262} - C:\WINDOWS\system32\cabview.dll - Microsoft Corporation - Cabinet File Viewer Shell Extension - 6.0.2900.2180 - 90624 - ef283188c701c8bfcc5187f3b2c547b2 O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - G:\解压\WinRAR\rarext.dll - - - - 128000 - 13c487903d7b714dd9e0cdc2edab4cea O31 - 未知 - SEApproved: {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - - - - - 0 - O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - G:\解压\WinRAR\rarext.dll - - - - 128000 - 13c487903d7b714dd9e0cdc2edab4cea O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 - O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 - ======================================= O40 - Explorer.EXE - - C:\WINDOWS\Vista\Spctool\UberIcon\UberIcon.dll - - f3871e6c92e0b42d32f5a4b0521b854e O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll - Microsoft? C Runtime Library - e4fece18310e23b1d8fee993e35e7a6f O40 - Explorer.EXE - - G:\解压\WinRAR\rarext.dll - - 13c487903d7b714dd9e0cdc2edab4cea ======================================= O41 - PCAMPR5 - PCAUSA NDIS 5.0 MPR Protocol Driver - C:\WINDOWS\system32\PCAMPR5.SYS - (running) - PCAUSA NDIS 5.0 MPR Protocol Driver - Printing Communications Assoc., Inc. (PCAUSA) - b935fc153df18752402616ba8dbb867c O41 - PCANDIS5 - PCAUSA NDIS 5.0 Protocol Driver - C:\WINDOWS\system32\PCANDIS5.SYS - (running) - PCAUSA NDIS 5.0 Protocol Driver - Printing Communications Assoc., Inc. (PCAUSA) - ecd2f9d67b06606064daf6961a6d5efe O41 - TesSafe - TesSafe NT Driver - C:\WINDOWS\system32\TesSafe.sys - (not running) - TesSafe NT Driver - TENCENT - e5fab52f612aa3ffdb128fec7d21984e O41 - npkcrypt - npkcrypt - C:\WINDOWS\system32\npkcrypt.sys - (not running) - - - O41 - npkycryp - npkycryp - C:\WINDOWS\system32\npkycryp.sys - (not running) - - - ======================================= 360Safe.exe=4.0.3.1008 AntiAdwa.dll=4.0.0.1002 AntiEng.dll=4.0.0.1001 AntiActi.dll=2.0.0.3000 CleanHis.dll=4.0.0.1001 live.dll=1.0.1.1024 ======================================= 操作历史报告： ----------清理恶评及系统插件历史---------- 2008-01-17 21:23 清理恶评软件 - 网络实名 - 2008-01-17 21:16 清理恶评插件 - 网络实名 - C:\WINDOWS\CNSINFO.DAT 清理恶评插件 - 17key.net Winkld - C:\WINDOWS\Vista\WinKld\WinKld.dll 清理恶评插件 - Torjan Program - 2008-03-12 14:39 清理其它插件 - 快车(FlashGet) - ----------修复IE浏览器操作历史---------- 2008-01-17 21:18 R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main O14 - 危险 - Web原始设置IERESET.INF - C:\WINDOWS\inf\iereset.inf 2008-02-21 12:12 R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main O22 - 危险 - .HLP文件关联 - winhlp32.exe %1 2008-03-12 14:42 O22 - 危险 - .HLP文件关联 - winhlp32.exe %1 2008-03-13 22:01 O22 - 危险 - .HLP文件关联 - winhlp32.exe %1 ======================================= 360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基7.0 最新免费下载：http://www.360safe.com 点击此处查看原文、参与讨论固定链接┆ 评论(0)┆阅读(434)

标题：	系统有时很慢	收起

2008-03-19 08:38:00
帖子标题: 系统有时很慢帖子内容: 现象: 历史操作:系统很慢，不知道是为什么？可能会有哪些原因？备注: 我的诊断报告: 各位高手：非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！该诊断报告由360安全卫士提供 http://www.360safe.com 诊断时间: 2008-03-13 23:06:21 诊断平台: Microsoft Windows XP Service Pack 2 IE版本: Internet Explorer V7.0.5730.13 Build:75730 计算机物理内存:1022.92MB - 当前可用内存:447.06MB 100 - 未知 - Process: RavMonD.exe [Rising Realtime Moniter] - D:\PROGRAM FILES\RISING\RAV\ravmond.exe 100 - 未知 - Process: RavStub.exe [Rising RavStub] - D:\PROGRAM FILES\RISING\RAV\RavStub.exe 100 - 未知 - Process: stormliv.exe [暴风影音媒体控制中心] - d:\Program Files\StormII\stormliv.exe 100 - 未知 - Process: RavMon.exe [Rising realtime monitor shell] - D:\PROGRAM FILES\RISING\RAV\RavMon.exe -SYSTEM 100 - 未知 - Process: TPHKMGR.exe [] - C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe 100 - 未知 - Process: RavTask.exe [RavTimer] - D:\Program Files\Rising\Rav\RavTask.exe 100 - 未知 - Process: GooglePinyinDaemon.exe [Google Pinyin Network Daemon] - D:\Program Files\Google\Google Pinyin\GooglePinyinDaemon.exe 100 - 未知 - Process: ACUMon.exe [Aironet Wireless LAN Adapter Monitor] - C:\Program Files\Cisco Systems\Aironet Client Monitor\ACUMon.Exe 100 - 未知 - Process: wcescomm.exe [ActiveSync Connection Manager] - D:\Program Files\Microsoft ActiveSync\Wcescomm.exe 100 - 未知 - Process: 飞鸽传书.exe [IPMsg] - D:\软件\飞鸽传书.exe 100 - 未知 - Process: Coopen.exe [Coopen] - D:\Program Files\Coopen\Coopen.exe 100 - 未知 - Process: rapimgr.exe [ActiveSync RAPI Manager] - D:\PROGRA~1\MICROS~2\rapimgr.exe -Embedding R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://site.baidu.com/ R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.yahoo.com.cn/?source=toolbar_yassist_button&pid=416169_1006 O1 - 未知 - Host: 127.0.0.1 yu.8s7.net O1 - 未知 - Host: 127.0.0.1 1.jopanqc.com O1 - 未知 - Host: 127.0.0.1 2.joppnqq.com O1 - 未知 - Host: 127.0.0.1 wg.47255.com O1 - 未知 - Host: 127.0.0.1 1.joppnqq.com O1 - 未知 - Host: 127.0.0.1 xxx.m111.biz O1 - 未知 - Host: 127.0.0.1 1.jopenqc.com O1 - 未知 - Host: 127.0.0.1 1.jopenkk.com O1 - 未知 - Host: 127.0.0.1 xxx.vh7.biz O1 - 未知 - Host: 127.0.0.1 xxx.j41m.com O1 - 未知 - Host: 127.0.0.1 3.joppnqq.com O1 - 未知 - Host: 127.0.0.1 d.93se.com O1 - 未知 - Host: 127.0.0.1 www.868wg.com O1 - 未知 - Host: 127.0.0.1 xxx.mmma.biz O1 - 未知 - Host: 127.0.0.1 ilove.com O1 - 未知 - Host: 127.0.0.1 tp.shpzhan.cn O1 - 未知 - Host: 127.0.0.1 www.tomwg.com O1 - 未知 - Host: 127.0.0.1 www.cike007.cn O1 - 未知 - Host: 127.0.0.1 www.22aaa.com O1 - 未知 - Host: 127.0.0.1 xx.exiao01.com O1 - 未知 - Host: 127.0.0.1 www.exiao01.com O1 - 未知 - Host: 127.0.0.1 www.exiao01.com O1 - 未知 - Host: 127.0.0.1 new.749571.com O1 - 未知 - Host: 127.0.0.1 xtx.kv8.info O1 - 未知 - Host: 127.0.0.1 cao.kv8.info O1 - 未知 - Host: 127.0.0.1 1.jopmmqq.com O1 - 未知 - Host: 127.0.0.1 171817.171817.com O1 - 未知 - Host: 127.0.0.1 d2.llsging.com O1 - 未知 - Host: 127.0.0.1 down.malasc.cn O1 - 未知 - Host: 127.0.0.1 llboss.com O1 - 未知 - Host: 127.0.0.1 nx.51ylb.cn O1 - 未知 - Host: 127.0.0.1 my.531jx.cn O1 - 未知 - Host: 127.0.0.1 qqq.dzydhx.com O1 - 未知 - Host: 127.0.0.1 qqq.hao1658.com O1 - 未知 - Host: 127.0.0.1 www.333292.com O1 - 未知 - Host: 127.0.0.1 down.18dd.net O1 - 未知 - Host: 127.0.0.1 up.22x44.com O2 - 未知 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{710EB7A1-45ED-11D0-924A-0020AFC7AC4D}] - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} - O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{1E796980-9CC5-11D1-A83F-00C04FC99D61}] - {1E796980-9CC5-11D1-A83F-00C04FC99D61} - O4 - 未知 - HKLM\..\Run: [switch] [] c:\windows\system32\壁纸自动换.exe O4 - 未知 - HKLM\..\Run: [frymxins] [] "C:\Program Files\ATI Technologies\Fire GL 3D Studio Max\atiimxgl" O4 - 未知 - HKLM\..\Run: [Google IME Autoupdater] [Google Pinyin Network Daemon] "d:\Program Files\Google\Google Pinyin\GooglePinyinDaemon.exe" O4 - 未知 - HKLM\..\Run: [ACUMon] [Aironet Wireless LAN Adapter Monitor] "C:\Program Files\Cisco Systems\Aironet Client Monitor\ACUMon.Exe" -a O4 - 未知 - Startup folder: [开屏桌面画报.lnk] [] C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\开屏桌面画报.lnk O8 - 未知 - Extra context menu item: 使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\Program\geturl.htm O8 - 未知 - Extra context menu item: 使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\Program\getallurl.htm O8 - 未知 - Extra context menu item: 发送到 Bluetooth(&B) - C:\Program Files\IBM\Bluetooth Software\btsendto_ie_ctx.htm O8 - 未知 - Extra context menu item: 导出到 Microsoft Excel(&X) - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000 O8 - 未知 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm O9 - 未知 - Extra button: 启动迅雷5(HKLM) - d:\Program Files\Thunder Network\Thunder\Thunder.exe O9 - 未知 - Extra button: Create Mobile Favorite(HKLM) - D:\PROGRA~1\MICROS~2\INetRepl.dll O9 - 未知 - Extra button: 创建移动收藏...(HKLM) - D:\PROGRA~1\MICROS~2\INetRepl.dll O9 - 未知 - Extra button: Research(HKLM) - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL O9 - 未知 - Extra button: PPLive(HKLM) - d:\Program Files\PPLive\PPLive.exe O9 - 未知 - Extra button: @btrez.dll,-4017(HKLM) - C:\Program Files\IBM\Bluetooth Software\btsendto_ie.htm O18 - 未知 - Protocol: Microsoft Office InfoPath XML Mime Filter - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O18 - 未知 - Protocol: KuGoo - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O18 - 未知 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O18 - 未知 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O18 - 未知 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL O23 - 未知 - Service: btwdins [Bluetooth Service] - C:\Program Files\IBM\Bluetooth Software\bin\btwdins.exe - (running) O23 - 未知 - Service: ccosm [Contrl Center of Storm Media] - d:\Program Files\StormII\stormliv.exe /asservice - (running) O23 - 未知 - Service: odserv [运行部分 Microsoft Office 诊断。] - "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" - (not running) O23 - 未知 - Service: RsCCenter [Rising Process Communication Center] - "d:\Program Files\Rising\Rav\CCenter.exe" - (running) O23 - 未知 - Service: RsRavMon [Rising RealTime Monitor] - "D:\PROGRAM FILES\RISING\RAV\Ravmond.exe" - (not running) O23 - 未知 - Service: usnjsvc [Messenger 上安装的启用共享情况的服务] - "C:\Program Files\Windows Live\Messenger\usnsvc.exe" - (not running) O23 - 未知 - Service: WLSetupSvc [Windows Live Setup Service] - "C:\Program Files\Windows Live\installer\WLSetupSvc.exe" - (not running) O28 - 未知 - IELINK: C:\DOCUME~1\ADMINI~1\「开始~1\程序\附件\系统工具\INTERN~2.LNK - -extoff O30 - 未知 - HKLM\..\Winlogon: [GinaDLL] [cswgina] cswGina.dll O30 - 未知 - HKCU\..\Desktop: [Scrnsave.exe] [CoopenSaveScreen] C:\WINDOWS\system32\COOPEN.SCR ======================================= 100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe 100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base 100 - 安全 - Process: WINLOGON.EXE [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe 100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe 100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe 100 - 安全 - Process: ibmpmsvc.exe [ibm笔记本电源管理相关软件。] - C:\WINDOWS\system32\ibmpmsvc.exe 100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss 100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] - d:\Program Files\Rising\Rav\CCenter.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService 100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k bthsvcs 100 - 安全 - Process: btwdins.exe [蓝牙软件的一部分。] - C:\Program Files\IBM\Bluetooth Software\bin\btwdins.exe 100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe 100 - 安全 - Process: HPZipm12.exe [惠普出品的打印机相关驱动程序。] - C:\WINDOWS\system32\HPZipm12.exe 100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE 100 - 安全 - Process: rundll32.exe [windows rundll32为了需要调用dlls的程序。] - C:\WINDOWS\system32\rundll32.exe 100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\Program Files\360safe\safemon\360Tray.exe 100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe 100 - 安全 - Process: TPONSCR.exe [IBM笔记本扩展热键配置程序。 ] - C:\Program Files\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe 100 - 安全 - Process: TpScrex.exe [IBM Thinkpad笔记本UltraZoom功能配置和诊断程序。] - C:\Program Files\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe 100 - 安全 - Process: SynTPLpr.exe [触摸板相关程序。] - C:\Program Files\Synaptics\SynTP\SynTPLpr.exe 100 - 安全 - Process: SynTPEnh.exe [美国新思公司出版的触摸板驱动程序的一部分。] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe 100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe 100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\Program Files\360safe\360safe.exe 100 - 安全 - Process: iexplore.exe [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe 100 - 安全 - Process: wmiprvse.exe [wmi 提供程序 (wmi provider) 在 wmi 和操作系统、应用程序以及其他系统的组件之间充当中介.此进程为合法的系统进程。] - C:\WINDOWS\system32\wbem\wmiprvse.exe R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://go.microsoft.com/fwlink/?LinkId=69157 R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://go.microsoft.com/fwlink/?LinkId=54896 R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://go.microsoft.com/fwlink/?LinkId=69157 R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://go.microsoft.com/fwlink/?LinkId=54896 R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll O4 - 安全 - HKLM\..\Run: [BluetoothAuthenticationAgent] [蓝牙相关程序。] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - 安全 - HKLM\..\Run: [ATIPTA] [ati显卡驱动的系统托盘图标，可调节显卡属性] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - 安全 - HKLM\..\Run: [TPHOTKEY] [ibm thinkpad笔记本应用程序。] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] D:\Program Files\360safe\safemon\360Tray.exe /start O4 - 安全 - HKLM\..\Run: [SynTPLpr] [新思手写板，多用于各种笔记本触摸板驱动程序设置] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - 安全 - HKLM\..\Run: [SynTPEnh] [新思手写板，多用于各种笔记本触摸板驱动程序设置] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "d:\Program Files\Rising\Rav\RavTask.exe" -system O4 - 安全 - HKCU\..\Run: [H/PC Connection Agent] [microsoft activesync掌上电脑同步软件。] "D:\Program Files\Microsoft ActiveSync\Wcescomm.exe" O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe O4 - 安全 - Startup folder: [飞鸽传书.lnk] [一款即时通讯软件。] C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\飞鸽传书.lnk O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O11 - 安全 - Options Group: International* O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe - (running) O23 - 安全 - Service: BthServ [蓝牙支持服务。] - C:\WINDOWS\System32\bthserv.dll - (running) O23 - 安全 - Service: IBMPMSVC [IBM笔记本电脑电源管理相关程序。 ] - C:\WINDOWS\system32\ibmpmsvc.exe - (running) O23 - 安全 - Service: Pml Driver HPZ12 [是惠普PSC 2100、2200、4100和6100系列打印机驱动服务。] - C:\WINDOWS\system32\HPZipm12.exe - (error) O25 - 安全 - ABOUT: DesktopItemNavigationFailure - res://ieframe.dll/navcancl.htm O25 - 安全 - ABOUT: NavigationCanceled - res://ieframe.dll/navcancl.htm O25 - 安全 - ABOUT: NavigationFailure - res://ieframe.dll/navcancl.htm O25 - 安全 - ABOUT: OfflineInformation - res://ieframe.dll/offcancl.htm O25 - 安全 - ABOUT: PostNotCached - res://ieframe.dll/repost.htm ======================================= O31 - 未知 - Notify: tpfnf2 - C:\WINDOWS\system32\notifyf2.dll - - - - 28672 - 3c21a62642bea691b588f69e8d11b374 O31 - 未知 - Notify: tphotkey - C:\WINDOWS\system32\tphklock.dll - - - - 24576 - e270fcccf7d413610a0f6a5266ada43a O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 - O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 - O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 - O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：Shell Extensions for RealOne Player - - - - - 0 - O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 129024 - 60fe004235a8108446dcfc1e526fde0e O31 - 未知 - SEApproved: 无效的CLSID：CorelDRAW Shell Extension Component - - - - - 0 - O31 - 未知 - SEApproved: {6af09ec9-b429-11d4-a1fb-0090960218cb} - C:\WINDOWS\system32\btneighborhood.dll - WIDCOMM, Inc. - BTNeighborhood DLL - 1.4.3.4 - 815181 - bba9df444e92740dea4ef0851e8e5abb O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 129024 - 60fe004235a8108446dcfc1e526fde0e O31 - 未知 - BootExecute: bsmain - - - - 0 - O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 - O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 - ======================================= O40 - winlogon.exe - Cisco Systems, Inc. - C:\WINDOWS\system32\cswGina.dll - cswgina - 0ac50eba50c18646f731e2aecc257b63 O40 - winlogon.exe - Cisco Systems - C:\WINDOWS\system32\ACrd10SM.dll - ACrd10SM - d6fb0f563109566fd99702cb4c1f216f O40 - winlogon.exe - - C:\WINDOWS\system32\tphklock.dll - - e270fcccf7d413610a0f6a5266ada43a O40 - Explorer.EXE - WIDCOMM, Inc. - C:\WINDOWS\system32\btncopy.dll - BTNCopy Module - aeb5e4eda694e04b1ea2b21e22af36f3 O40 - Explorer.EXE - Corel Corporation - D:\Program Files\Corel\Corel Graphics 12\PROGRAMS\CdrIco.DLL - IconHandler Shell Extension for CDR, CLK, CMX, CPT and DES files. - a885b4c7eace09b029391bbe250da0f4 O40 - Explorer.EXE - Corel Corporation - D:\Program Files\Corel\Corel Graphics 12\PROGRAMS\CRLUTL.dll - Common Utilities Library - edeab503fda977623df9d944ba592662 O40 - Explorer.EXE - Corel Corporation - D:\Program Files\Corel\Corel Graphics 12\PROGRAMS\CRLI18N.dll - Globalization Utilities Library - a24ad696a07d6d4204aeb64d8a62d918 O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MFC71U.DLL - MFCDLL Shared Library - Retail Version - 7b93c623333f121dc9e689ccb1b7a733 O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MSVCR71.dll - Microsoft? C Runtime Library - 86f1895ae8c5e8b17d99ece768a70732 O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MSVCP71.dll - Microsoft? C++ Runtime Library - 561fa2abb31dfa8fab762145f81667c2 O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MFC71CHS.DLL - MFC Language Specific Resources - ecfff2dffbb1cae3a00cb2ab9bff8cef ======================================= O41 - aeaudio - Andrea Audio Noise Cancellation Driver - C:\WINDOWS\system32\drivers\aeaudio.sys - (running) - Andrea Audio Noise Cancellation Driver - Andrea Electronics Corporation - 3cb6ae5435987b1f8c83fd2730479878 O41 - BTKRNL - Bluetooth Protocol Driver for Windows 2000 - C:\WINDOWS\system32\drivers\btkrnl.sys - (running) - Bluetooth Protocol Driver for Windows 2000 - WIDCOMM, Inc. - 63cad765a65d573f0c86964634c9b55e O41 - smwdm - SoundMAX Integrated Digital Audio - C:\WINDOWS\system32\drivers\smwdm.sys - (running) - SoundMAX Integrated Digital Audio - Analog Devices, Inc. - bf2c8d0875d669bd64726fcf24099aba ======================================= 360Safe.exe=4.0.3.1003 AntiAdwa.dll=4.0.0.1002 AntiEng.dll=4.0.0.1001 AntiActi.dll=2.0.0.3000 CleanHis.dll=4.0.0.1001 live.dll=1.0.1.1022 ======================================= 操作历史报告： ======================================= 360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基7.0 最新免费下载：http://www.360safe.com 点击此处查看原文、参与讨论固定链接┆ 评论(0)┆阅读(156)

标题：	chatroom.exe 杀不掉	收起

2008-03-19 08:37:39
帖子标题: chatroom.exe 杀不掉帖子内容: 现象: 历史操作:网吧~ D:\\游戏工具\\qq\\ChatRoom.exe 快速还原 4.2版的用ARP 备注: QQ：345097544 我的诊断报告: 各位高手：非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！该诊断报告由360安全卫士提供 http://www.360safe.com 诊断时间: 2008-03-13 23:55:30 诊断平台: Microsoft Windows XP Service Pack 2 IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180 计算机物理内存:511.48MB - 当前可用内存:281.82MB O5 - 低危险 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer: NoNetHood=1 100 - 未知 - Process: zsgboot.exe [左轮系统保护引导] - C:\WINDOWS\system32\ZsgBoot.exe 100 - 未知 - Process: killer_rodog[1].exe [] - C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I87SM8AJ\killer_rodog[1].exe R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.baidu.com/index.php?tn=nbmagician_ql R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.yahoo.com.cn R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.yahoo.com.cn/?source=toolbar_yassist_button&pid=416169_1006 R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=C:\WINDOWS\Web\index.htm R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://www.yahoo.com.cn/?source=toolbar_yassist_button&pid=416169_1006 R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title=Internet Explorer R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Use Search Asst=no O1 - 未知 - Host: 127.0.0.1 yu.8s7.net O1 - 未知 - Host: 127.0.0.1 1.jopanqc.com O1 - 未知 - Host: 127.0.0.1 2.joppnqq.com O1 - 未知 - Host: 127.0.0.1 wg.47255.com O1 - 未知 - Host: 127.0.0.1 1.joppnqq.com O1 - 未知 - Host: 127.0.0.1 xxx.m111.biz O1 - 未知 - Host: 127.0.0.1 1.jopenqc.com O1 - 未知 - Host: 127.0.0.1 1.jopenkk.com O1 - 未知 - Host: 127.0.0.1 xxx.vh7.biz O1 - 未知 - Host: 127.0.0.1 xxx.j41m.com O1 - 未知 - Host: 127.0.0.1 3.joppnqq.com O1 - 未知 - Host: 127.0.0.1 d.93se.com O1 - 未知 - Host: 127.0.0.1 www.868wg.com O1 - 未知 - Host: 127.0.0.1 xxx.mmma.biz O1 - 未知 - Host: 127.0.0.1 ilove.com O1 - 未知 - Host: 127.0.0.1 tp.shpzhan.cn O1 - 未知 - Host: 127.0.0.1 www.tomwg.com O1 - 未知 - Host: 127.0.0.1 www.cike007.cn O1 - 未知 - Host: 127.0.0.1 www.22aaa.com O1 - 未知 - Host: 127.0.0.1 xx.exiao01.com O1 - 未知 - Host: 127.0.0.1 www.exiao01.com O1 - 未知 - Host: 127.0.0.1 www.exiao01.com O1 - 未知 - Host: 127.0.0.1 new.749571.com O1 - 未知 - Host: 127.0.0.1 xtx.kv8.info O1 - 未知 - Host: 127.0.0.1 cao.kv8.info O1 - 未知 - Host: 127.0.0.1 1.jopmmqq.com O1 - 未知 - Host: 127.0.0.1 171817.171817.com O1 - 未知 - Host: 127.0.0.1 d2.llsging.com O1 - 未知 - Host: 127.0.0.1 down.malasc.cn O1 - 未知 - Host: 127.0.0.1 llboss.com O1 - 未知 - Host: 127.0.0.1 nx.51ylb.cn O1 - 未知 - Host: 127.0.0.1 my.531jx.cn O1 - 未知 - Host: 127.0.0.1 qqq.dzydhx.com O1 - 未知 - Host: 127.0.0.1 qqq.hao1658.com O1 - 未知 - Host: 127.0.0.1 www.333292.com O1 - 未知 - Host: 127.0.0.1 down.18dd.net O1 - 未知 - Host: 127.0.0.1 up.22x44.com O2 - 未知 - BHO: (浏览器辅助对象(BHO)) - [No replace] - {D4391B2A-6A07-4FC2-A4A8-D44431EE590D} - C:\WINDOWS\system32\IEExtend.dll O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{710EB7A1-45ED-11D0-924A-0020AFC7AC4D}] - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} - O4 - 未知 - HKLM\..\Run: [ZSG2008] [左轮系统保护引导] C:\WINDOWS\system32\ZsgBoot.exe O4 - 未知 - HKLM\..\Run: [killrodog4] [] "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\I87SM8AJ\killer_rodog[1].exe" -anti O4 - 未知 - Startup folder: [rarp.bat] [] C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\rarp.bat O23 - 未知 - Service: WinVNC4 [Remote Control Server] - "C:\WINDOWS\system32\rmserver.exe" -service - (not running) O23 - 未知 - Service: wxSyncClient [万象文件同步客户端] - C:\WINDOWS\system32\wxsyncli.exe - (not running) O28 - 未知 - IELINK: C:\DOCUME~1\ADMINI~1\APPLIC~1\MICROS~1\INTERN~1\QUICKL~1\启动IN~1.LNK - http://www.baidu.com/index.php?tn=nbmagician_ql O28 - 未知 - IELINK: C:\DOCUME~1\ADMINI~1\桌面\INTERN~1.LNK - http://www.baidu.com/index.php?tn=nbmagician_ql O30 - 未知 - HKLM\..\Winlogon: [GinaDLL] [] C:\WINDOWS\system32\LogUser.dll ======================================= 100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe 100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base 100 - 安全 - Process: WINLOGON.EXE [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe 100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe 100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k netsvcs 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService 100 - 安全 - Process: iscsiexe.exe [是微软的虚拟磁盘共享的程序] - C:\WINDOWS\System32\iscsiexe.exe 100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE 100 - 安全 - Process: Clsmn.exe [一款网吧管理软件客户端程序。] - C:\WINDOWS\system32\Clsmn.exe 100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe 100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] - C:\WINDOWS\system32\nvsvc32.exe 100 - 安全 - Process: rundll32.exe [windows rundll32为了需要调用dlls的程序。] - C:\WINDOWS\system32\rundll32.exe 100 - 安全 - Process: 360tray.exe [360安全卫士实时监控程序。] - C:\Program Files\360safe\safemon\360tray.exe 100 - 安全 - Process: 360Safe.exe [360安全卫士相关程序。] - C:\Program Files\360safe\360Safe.exe 100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\IEXPLORE.EXE R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm O2 - 安全 - BHO: (SearchHook Class) - [hintsoft网吧管理软件相关程序。] - {635A7AFA-FB22-4A4E-8AB8-C85CFAB14626} - C:\WINDOWS\system32\Snav.dll O4 - 安全 - HKLM\..\Run: [wxClient] [一款网吧管理软件相关程序。] C:\WINDOWS\system32\Clsmn.exe O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] C:\Program Files\360safe\safemon\360Tray.exe /start O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running) ======================================= O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 - O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 - O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 - O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 - O31 - 未知 - SEApproved: {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - C:\Program Files\Real\RealPlayer\rpshell.dll - RealNetworks, Inc. - RealPlayer Shell Extensions - 1.0.1.2237 - 49198 - d6315dc9fcc6c62fd54e02f0907030e3 O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 129024 - 60fe004235a8108446dcfc1e526fde0e O31 - 未知 - SEApproved: {1CDB2949-8F65-4355-8456-263E7C208A5D} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 129024 - 60fe004235a8108446dcfc1e526fde0e O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 - O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 - ======================================= O40 - winlogon.exe - - C:\WINDOWS\system32\LogUser.dll - - 11781fdf6f6174a3a679a301d9b1bfd9 O40 - Explorer.EXE - NVIDIA Corporation - C:\WINDOWS\system32\NVRSZHC.DLL - NVIDIA Simplified Chinese language resource library - c6dc3f24769092723c09a55c057af7bb O40 - Explorer.EXE - - C:\WINDOWS\system32\nvshell.dll - - 64b7edf5a424b25508be1026879ff6dc O40 - Explorer.EXE - - C:\WINDOWS\system32\Snav.dll - Snav Module - 610b56163de03e354b75cba9ff8db7fd ======================================= O41 - IntcAzAudAddService - Realtek(r) High Definition Audio Function Driver - C:\WINDOWS\system32\drivers\RtkHDAud.sys - (running) - Realtek(r) High Definition Audio Function Driver - Realtek Semiconductor Corp. - O41 - wxcliker - Client Kernel Driver - C:\WINDOWS\system32\drivers\wxcliker.sys - (running) - Client Kernel Driver - Sicent Corporation - 1d93dd377720fbf36110ec7e1007e5a2 O41 - zsgpro - zsgpro - C:\WINDOWS\system32\msyc.sys - (running) - - - 7ba2aa2ea5fd29e01771bb28a3e447b3 O41 - npkcrypt - npkcrypt - C:\Program Files\QQ2006\npkcrypt.sys - (not running) - - - O41 - PortTalk - PortTalk - Beyond Logic I/O Port Driver - C:\WINDOWS\system32\drivers\PortTalk.sys - (not running) - PortTalk - Beyond Logic I/O Port Driver - Microsoft Corporation - 572e91c3d696826fc37c575940bec8e2 ======================================= 360Safe.exe=4.0.3.1008 AntiAdwa.dll=4.0.0.1002 AntiEng.dll=4.0.0.1001 AntiActi.dll=2.0.0.3000 CleanHis.dll=4.0.0.1001 live.dll=1.0.1.1024 ======================================= 操作历史报告： ======================================= 360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基7.0 最新免费下载：http://www.360safe.com 点击此处查看原文、参与讨论固定链接┆ 评论(0)┆阅读(102)

标题：	木马清除不了	收起

2008-03-19 08:37:07
帖子标题: 木马清除不了帖子内容: 现象: 历史操作:我做了常用和高级这两项, 备注: 我的诊断报告: 各位高手：非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！该诊断报告由360安全卫士提供 http://www.360safe.com 诊断时间: 2008-03-14 08:38:32 诊断平台: Microsoft Windows XP Service Pack 2 IE版本: Internet Explorer V7.0.5730.13 Build:75730 计算机物理内存:446.43MB - 当前可用内存:99.32MB 100 - 未知 - Process: MPSVC.exe [MPSVC] - 100 - 未知 - Process: MPSVC2.exe [MPSVC2] - 100 - 未知 - Process: MPSVC1.exe [MPSVC1] - 100 - 未知 - Process: MPMon.exe [MPMon] - 100 - 未知 - Process: stormliv.exe [暴风影音媒体控制中心] - D:\Program Files\StormII\stormliv.exe 100 - 未知 - Process: WgaTray.exe [Windows 正版增值计划通知] - C:\WINDOWS\system32\WgaTray.exe 100 - 未知 - Process: TheWorld.exe [TheWorld Browser] - C:\Documents and Settings\new\桌面\TheWorld.exe R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.hao123.com/ R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=about:blank R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=about:blank O2 - 未知 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - D:\Thunder\ComDlls\TDAtOnce_Now.dll O8 - 未知 - Extra context menu item: 上传到QQ网络硬盘 - D:\QQ\AddToNetDisk.htm O8 - 未知 - Extra context menu item: 使用迅雷下载 - D:\Thunder\Program\geturl.htm O8 - 未知 - Extra context menu item: 使用迅雷下载全部链接 - D:\Thunder\Program\getallurl.htm O8 - 未知 - Extra context menu item: 添加到QQ自定义面板 - D:\QQ\AddPanel.htm O8 - 未知 - Extra context menu item: 添加到QQ表情 - D:\QQ\AddEmotion.htm O8 - 未知 - Extra context menu item: 用QQ彩信发送该图片 - D:\QQ\SendMMS.htm O8 - 未知 - Extra context menu item: 用比特精灵下载(&B) - F:\BitSpirit\bsurl.htm O18 - 未知 - Protocol: 电子书编译工具Web Compiler相关 - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll O18 - 未知 - Protocol: KuGoo - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O18 - 未知 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx O23 - 未知 - Service: ccosm [Contrl Center of Storm Media] - D:\Program Files\StormII\stormliv.exe /asservice - (running) O23 - 未知 - Service: MPSVCService [微点主动防御软件] - E:\Program Files\Micropoint\MPSVC.exe - (running) ======================================= 100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe 100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base 100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe 100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe 100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService 100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE 100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe 100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe 100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] - C:\WINDOWS\system32\nvsvc32.exe 100 - 安全 - Process: wdfmgr.exe [windows media player播放器相关程序。] - C:\WINDOWS\system32\wdfmgr.exe 100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe 100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k HTTPFilter 100 - 安全 - Process: 360Safe.exe [360安全卫士] - E:\Program Files\360safe\360Safe.exe 100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - E:\Program Files\360safe\safemon\360Tray.exe R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://go.microsoft.com/fwlink/?LinkId=69157 R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://go.microsoft.com/fwlink/?LinkId=54896 R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://go.microsoft.com/fwlink/?LinkId=69157 R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://go.microsoft.com/fwlink/?LinkId=54896 R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\Thunder\ComDlls\xunleiBHO_Now.dll O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe O11 - 安全 - Options Group: International* O16 - 安全 - DPF: 无效的CLSID：{33564D57-0000-0010-8000-00AA00389B71} ({33564D57-0000-0010-8000-00AA00389B71}) - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB O16 - 安全 - DPF: 无效的CLSID：{33564D57-9980-0010-8000-00AA00389B71} ({33564D57-9980-0010-8000-00AA00389B71}) - http://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab O16 - 安全 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (中国工商银行个人银行) - https://mybank.icbc.com.cn/icbc/perbank/AXSafeControls.cab O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL O21 - 安全 - Protocol Icons: HKCR\http\shell\open\command - "C:\Program Files\internet explorer\iexplore.exe" "%1" O21 - 安全 - Protocol Icons: HKCR\https\shell\open\command - "C:\Program Files\internet explorer\iexplore.exe" "%1" O21 - 安全 - Protocol Icons: HKCR\htmlfile\shell\open\command - "C:\Program Files\internet explorer\iexplore.exe" "%1" O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running) O25 - 安全 - ABOUT: DesktopItemNavigationFailure - res://ieframe.dll/navcancl.htm O25 - 安全 - ABOUT: NavigationCanceled - res://ieframe.dll/navcancl.htm O25 - 安全 - ABOUT: NavigationFailure - res://ieframe.dll/navcancl.htm O25 - 安全 - ABOUT: OfflineInformation - res://ieframe.dll/offcancl.htm O25 - 安全 - ABOUT: PostNotCached - res://ieframe.dll/repost.htm ======================================= O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 - O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 - O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 - O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 - O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 - O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 124416 - 1b089bd70767a1ca5419a24b581cc753 O31 - 未知 - SEApproved: {1CDB2949-8F65-4355-8456-263E7C208A5D} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11010 - 466944 - 766bc8f56b557b44a0ce89e4c631831e O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11010 - 466944 - 766bc8f56b557b44a0ce89e4c631831e O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11010 - 466944 - 766bc8f56b557b44a0ce89e4c631831e O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 124416 - 1b089bd70767a1ca5419a24b581cc753 O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 - O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 - ======================================= O40 - winlogon.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - services.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - lsass.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - svchost.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - svchost.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - svchost.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - svchost.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - svchost.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - Explorer.EXE - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 O40 - Explorer.EXE - - C:\WINDOWS\system32\nvshell.dll - - 766bc8f56b557b44a0ce89e4c631831e O40 - svchost.exe - Micropoint Corporation - E:\Program Files\Micropoint\mp110031.dll - mp110031 - 1dd2b74d4cc7b0f122fa9298c72de8f9 ======================================= O41 - mp110001 - mp110001 - C:\WINDOWS\system32\drivers\mp110001.sys - (running) - mp110001 - MicroPoint Corporation - a9b4ea4aaeb3b1f691e80ad00ee9a822 O41 - mp110002 - mp110002 - C:\WINDOWS\system32\drivers\mp110002.sys - (running) - mp110002 - Micropoint Corporation - b974659d536f9e38b235dcad9633235c O41 - mp110003 - mp110003 - C:\WINDOWS\system32\drivers\mp110003.sys - (running) - mp110003 - Micropoint Corporation - cb78a7cf1a88ad9360b4fe46b2c48831 O41 - mp110004 - mp110004 - C:\WINDOWS\system32\drivers\mp110004.sys - (running) - mp110004 - Micropoint Corporation - 332771839e8e8b0663b5d20ecbe9ce79 O41 - mp110005 - mp110005 - C:\WINDOWS\system32\drivers\mp110005.sys - (running) - mp110005 - Micropoint Corporation - 31e351ad402febbb7471d5b1138d32bd O41 - mp110006 - mp110006 - C:\WINDOWS\system32\drivers\mp110006.sys - (running) - mp110006 - Micropoint Corporation - 791d93fc7d02d43a225afdf2f6f762ca O41 - mp110007 - mp110007 - C:\WINDOWS\system32\drivers\mp110007.sys - (running) - mp110007 - Micropoint Corporation - 3cdd1407c2959d0fcbb253bd7464ce9d O41 - mp110008 - mp110008 - C:\WINDOWS\system32\drivers\mp110008.sys - (running) - mp110008 - Micropoint Corporation - fe5e48f05ccae50f4556d1898331169d O41 - mp110009 - mp110009 - C:\WINDOWS\system32\drivers\mp110009.sys - (running) - mp110009 - Micropoint Corporation - 4f28800ae6e024cd63bb1675a0435660 O41 - mp110010 - mp110010 - C:\WINDOWS\system32\drivers\mp110010.sys - (running) - mp110010 - Micropoint Corporation - 92914787460715ec358eb4ea0c2c23f1 O41 - mp110011 - mp110011 - C:\WINDOWS\system32\drivers\mp110011.sys - (running) - mp110011 - Micropoint Corporation - 097fa5528dd997fc35249bc0beec275f O41 - mp110012 - mp110012 - C:\WINDOWS\system32\drivers\mp110012.sys - (running) - mp110012 - Micropoint Corporation - fae6e42574658ec4803a0d128637a0e8 O41 - mp110013 - mp110013 - C:\WINDOWS\system32\drivers\mp110013.sys - (running) - mp110013 - Micropoint Corporation - e2ddd4457595579abd0f7d56656266fb O41 - NvAtaBus - NVIDIA? nForce(TM) IDE Performance Driver - C:\WINDOWS\system32\drivers\NvAtaBus.sys - (running) - NVIDIA? nForce(TM) IDE Performance Driver - NVIDIA Corporation - a1f88223528aadbb6374132becbbdcc1 O41 - 95125 - Driver - C:\WINDOWS\system32\drivers\95093.sys - (not running) - Driver - Driver - 649a6a2bb9e77fc564a4eca59844f635 O41 - a320raid - Adaptec HostRAID for Ultra320 SCSI - C:\WINDOWS\system32\drivers\a320raid.sys - (not running) - Adaptec HostRAID for Ultra320 SCSI - Adaptec, Inc. - 0532434d53314ee8858b7bfdbe761837 O41 - AAC - Adaptec RAID Miniport Driver - C:\WINDOWS\system32\drivers\aac.sys - (not running) - Adaptec RAID Miniport Driver - Adaptec, Inc. - f9ee3c7a185d121b145164cb10c057a7 O41 - aar1210 - Adaptec HostRAID for Serial ATA - C:\WINDOWS\system32\drivers\aar1210.sys - (not running) - Adaptec HostRAID for Serial ATA - Adaptec, Inc. - 316945ebc9398f222a6fff3d04d41fcb O41 - aec6210 - aec6210 - C:\WINDOWS\system32\drivers\AEC6210.sys - (not running) - - ACARD Technology Corp. - 38e6c035e89fb8b079301e71b2523f3d O41 - aec6260 - ID=0006, 0007 - C:\WINDOWS\system32\drivers\AEC6260.sys - (not running) - ID=0006, 0007 - ACARD Technology Corp. - db227bd0ba1f29bb38950f8fd97caa35 O41 - aec6280 - AEC6280 Miniport Driver - C:\WINDOWS\system32\drivers\AEC6280.SYS - (not running) - AEC6280 Miniport Driver - ACARD Technology Corp. - 71c3ab81b22c151a2e2ba97ec53430ca O41 - AEC6290 - AEC6280 Miniport Driver - C:\WINDOWS\system32\drivers\AEC6290.SYS - (not running) - AEC6280 Miniport Driver - ACARD Technology Corp. - 71c3ab81b22c151a2e2ba97ec53430ca O41 - AEC67160 - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - C:\WINDOWS\system32\drivers\AEC67160.SYS - (not running) - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - ACARD Technology Corp. - f2b276e8f4057dd1ba2bd40ecaf1ac57 O41 - AEC671X - AEC671X PCI Ultra/W SCSI3 Adapter Driver - C:\WINDOWS\system32\drivers\AEC671X.SYS - (not running) - AEC671X PCI Ultra/W SCSI3 Adapter Driver - ACARD Technology Corp. - 9493824293585203212d0157cb2430a7 O41 - AEC6880 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\drivers\AEC6880.SYS - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 415f252cee34bbf839acbcadb2bc85ce O41 - AEC6890 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\drivers\AEC6890.SYS - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 415f252cee34bbf839acbcadb2bc85ce O41 - aec68x5 - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - C:\WINDOWS\system32\drivers\aec68X5.sys - (not running) - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - ACARD Technology Corp. - 6275261ebb499358ff5c5cf901f7ad6c O41 - FASTSX - Promise FastTRAK SX4/SX4000 Driver for WindowsXP - C:\WINDOWS\system32\drivers\fastsx.sys - (not running) - Promise FastTRAK SX4/SX4000 Driver for WindowsXP - Promise Technology, Inc. - 21ab10bc1c78a68cdf0cbd304dbfb7fa O41 - fasttrak - Promise FastTrak Series Driver for WinXP - C:\WINDOWS\system32\drivers\fasttrak.sys - (not running) - Promise FastTrak Series Driver for WinXP - Promise Technology, Inc. - eb1c078d99cc081c1d2ae3a19e2284cc O41 - fasttx2k - Promise Driver for Windows XP - C:\WINDOWS\system32\drivers\fasttx2k.sys - (not running) - Promise Driver for Windows XP - Promise Technology, Inc. - 5d95724d3c3923449c02be1106657bcd O41 - fasttx2k2 - Promise FastTrak Series Driver for WindowsXP - C:\WINDOWS\system32\drivers\fasttx2k2.sys - (not running) - Promise FastTrak Series Driver for WindowsXP - Promise Technology, Inc. - c127946de07bbb00f69f78923577dae4 O41 - FXDRV - FXDRV - G:\Fxdrv.sys - (not running) - - - O41 - Hpt366 - ATAPI IDE Miniport Driver - C:\WINDOWS\system32\drivers\hpt366.sys - (not running) - ATAPI IDE Miniport Driver - Microsoft Corporation - 4e4c5dde3eb4e9392c9659818790ed6c O41 - HPT371 - HPT3xx Miniport Driver - C:\WINDOWS\system32\drivers\hpt371.sys - (not running) - HPT3xx Miniport Driver - HighPoint Technologies, Inc. - cac96d5be76a3d20c41759b12167c09b O41 - hpt374 - HPT374 Miniport Driver - C:\WINDOWS\system32\drivers\hpt374.sys - (not running) - HPT374 Miniport Driver - HighPoint Technologies, Inc. - ccee236589335d118e22d0fe400233a6 O41 - hpt3xx - HPT3xx Miniport Driver - C:\WINDOWS\system32\drivers\hpt3xx.sys - (not running) - HPT3xx Miniport Driver - HighPoint Technologies, Inc. - 9f2dfe54317b1cd38143686935a278d9 O41 - hptmv - hptmv Miniport Driver - C:\WINDOWS\system32\drivers\hptmv.sys - (not running) - hptmv Miniport Driver - HighPoint Technologies, Inc. - 4f92f14095d52ca870039b192a3319b0 O41 - hptpro - Hptpro - C:\WINDOWS\system32\drivers\hptpro.sys - (not running) - Hptpro - HighPoint Technologies, Inc. - 977716f8a6edda986fdb41de52bdb689 O41 - iaStor - Intel Application Accelerator driver - C:\WINDOWS\system32\drivers\iastor.sys - (not running) - Intel Application Accelerator driver - Intel Corporation - bdce6b54e1d7d8399175a83a02274b7a O41 - m5228 - M5228 ATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5228.sys - (not running) - M5228 ATA RAID Controller Driver - ALi Corporation. - 4bc8aa133cdb516392ac76d9948138bc O41 - m5281 - M5281 SATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5281.sys - (not running) - M5281 SATA RAID Controller Driver - ALi Corporation - 3bb7e4f0d880c57b75ab2197f6e21897 O41 - mraid2k - MEGARAID SCSI Controller Driver for Windows 2000 PAE - C:\WINDOWS\system32\drivers\MRAID2K.SYS - (not running) - MEGARAID SCSI Controller Driver for Windows 2000 PAE - American Megatrends, Inc. - a7bb113a38b04c0296bfa76b41d92f95 O41 - NPF - npf - C:\WINDOWS\system32\drivers\npf.sys - (not running) - npf - CACE Technologies - 2c19036687354db0ed375040afa0d735 O41 - npkcrypt - npkcrypt - C:\Program Files\QQ2005\npkcrypt.sys - (not running) - - - O41 - PNP649R - IDE RAID miniport driver - C:\WINDOWS\system32\drivers\PnP649r.sys - (not running) - IDE RAID miniport driver - CMD Technology, Inc. - 5a5a6a1003eecd15df2f383972e86188 O41 - Pnp680 - DMA capable ATA miniport driver - C:\WINDOWS\system32\drivers\Pnp680.sys - (not running) - DMA capable ATA miniport driver - Silicon Image, Inc. - 023657a82e76ad98f3fafbd1ec425a71 O41 - Pnp680r - DMA capable ATA RAID miniport driver - C:\WINDOWS\system32\drivers\PnP680r.sys - (not running) - DMA capable ATA RAID miniport driver - Silicon Image, Inc - a1d7a9214b71ebbb6f31cb84aac15525 O41 - RAIDSRC - Intel(r)/ICP Miniport Driver - C:\WINDOWS\system32\drivers\raidsrc.sys - (not running) - Intel(r)/ICP Miniport Driver - Intel/ICP - 4ba4a4ac184ed0cf15faa62e2375883f O41 - rockusb - Fuzhou Rockchip USB Driver - C:\WINDOWS\system32\drivers\rockusb.sys - (not running) - Fuzhou Rockchip USB Driver - Fuzhou Rockchip Electronics Co,Ltd. - cd71d0d7985051be10306d67725f5a7c O41 - S150SX8 - Promise SATAII150 SX8 Driver for WindowsXP - C:\WINDOWS\system32\drivers\S150sx8.sys - (not running) - Promise SATAII150 SX8 Driver for WindowsXP - Promise Technology, Inc. - 13d1e68b006ae72276079f5fcbe5a471 O41 - SI3112 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3112.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - 77f5cf403657f5086df7f4ed1f497cbb O41 - SI3112r - Serial ATA RAID Miniport Driver - C:\WINDOWS\system32\drivers\Si3112r.sys - (not running) - Serial ATA RAID Miniport Driver - Silicon Image, Inc - d89dde61753a3b5d64e15a1a925588cc O41 - SI3114 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3114.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - 9c67403714df81c8bdf177ce440c9d84 O41 - SI3114r - SATARAID Miniport Driver - C:\WINDOWS\system32\drivers\Si3114r.sys - (not running) - SATARAID Miniport Driver - Silicon Image, Inc - 53ee85fa0b48eb64031a190adf23c8d8 O41 - SI3124 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3124.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - da09038c6d12cf69031b515741250f7b O41 - SI3124r - SATARAID miniport driver (PRE-RELEASE) - C:\WINDOWS\system32\drivers\Si3124r.sys - (not running) - SATARAID miniport driver (PRE-RELEASE) - Silicon Image, Inc - 0c71855057883e63ca2c19736cbab018 O41 - SiFilter - Windows Accelerator Driver - C:\WINDOWS\system32\drivers\SiWinAcc.sys - (not running) - Windows Accelerator Driver - Silicon Image, Inc. - 1582e88c6f340627247b1ecd00fa84fe O41 - SISIDE - SiS PCI Mini IDE Driver - C:\WINDOWS\system32\drivers\siside.sys - (not running) - SiS PCI Mini IDE Driver - Silicon Integrated Systems Corp. - b4485881bd8aed9b157a2e6cf43c2d51 O

	用户数 947
	帖子数 113
	回复数 814
[加入收藏]

	用户数 530
	帖子数 38
	回复数 208
[加入收藏]

	用户数 340
	帖子数 503
	回复数 2232
[加入收藏]