瑞星卡卡安全论坛

请问一下,我电脑今天早上突然关机重起,之后电脑进系统一会就关机重起,有时电源灯亮了四五秒就重起,之后用syscheck(1.0.0.66)修正版,不知道好了没,用HijackThis和AVG扫描了一下,请高手们看一下,谢谢了!!!一个被黑了的菜鸟图看不见刷新一下就好了http://img04.album.enorth.com.cn/big/06/26/57/6265734_971335.jpg
http://img04.album.enorth.com.cn/big/06/26/56/6265671_997418.jpg

没人知道吗?好是不用瑞星就不给帮助吗?

你的帖子难度太大
用SRENG扫描看着比较详细

内存的问题很大。把内存拔下来，重插一次。

用SRENG时出现一个http://img04.album.enorth.com.cn/big/06/26/59/6265988_973895.jpg请帮忙谢谢了!!!我是在报纸上看到这个社区的，所以来求助的


2007-02-13,18:37:16

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <360Safetray><D:\360safe\safemon\360Tray.exe /start>  [奇虎网]
    <!AVG Anti-Spyware><"D:\AVG Anti-Spyware 7.5\avgas.exe" /minimized>  [Anti-Malware Development a.s.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><D:\AVG Anti-Spyware 7.5\shellexecutehook.dll>  [Anti-Malware Development a.s.]

==================================
启动文件夹
[核新SSL通讯安全代理]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\核新SSL通讯安全代理.lnk --> D:\sslproxy\SSLCnt.exe [杭州核新软件技术有限公司]><N>

==================================
服务
[ASP.NET State Service / aspnet_state][Stopped/Manual Start]
  <C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
  <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Server Advance / ServerAC][Stopped/Disabled]
  <C:\WINDOWS\system32\Security.exe><N/A>
[WinXP DHCP Service / WinXPDHCPsvc][Stopped/Auto Start]
  <C:\WINDOWS\system32\\rundll32.exe xpdhcp.dll,start><Microsoft Corporation>
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start]
  <D:\AVG Anti-Spyware 7.5\guard.exe><Anti-Malware Development a.s.>

==================================
驱动程序
[aeaudio / aeaudio][Running/Manual Start]
  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[A4Tech Mouse Filter Driver / Amfilter][Running/System Start]
  <system32\DRIVERS\Amfilter.sys><A4Tech Co.,Ltd.>
[A4Tech HID-compliant Mouse Driver / Amusbprt][Running/Manual Start]
  <system32\DRIVERS\Amusbprt.sys><A4Tech Co.,Ltd.>
[ati2mtag / ati2mtag][Running/Manual Start]
  <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[DigitalChina DCN-530TX Fast Ethernet Adapter Windows Driver / DCN530][Running/Manual Start]
  <system32\DRIVERS\DCN530N5.sys><Digitalchina Networks Limited.>
[KRegEx / KRegEx][Stopped/System Start]
  <\??\D:\KV2006\KRegEx.sys><N/A>
[MouseCapture Driver / MouseCap][Running/Manual Start]
  <System32\Drivers\MouseCap.sys><>
[npkcrypt / npkcrypt][Stopped/Auto Start]
  <\??\D:\QQ\npkcrypt.sys><N/A>
[Padus ASPI Shell / pfc][Running/Manual Start]
  <system32\drivers\pfc.sys><Padus, Inc.>
[PProtect / PProtect][Stopped/System Start]
  <\??\D:\KV2006\PProtect.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Running/Auto Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[SFI Service / sf][Running/System Start]
  <system32\drivers\sf.sys><Sonic Focus, Inc>
[StarForce Protection Environment Driver (version 1.x.a) / sfdrv01a][Running/Boot Start]
  <\SystemRoot\System32\drivers\sfdrv01a.sys><Protection Technology (StarForce)>
[StarForce Protection Helper Driver (version 2.x) / sfhlp02][Running/Boot Start]
  <\SystemRoot\System32\drivers\sfhlp02.sys><Protection Technology (StarForce)>
[StarForce Protection Synchronization Driver (version 4.x) / sfsync04][Running/Boot Start]
  <\SystemRoot\System32\drivers\sfsync04.sys><Protection Technology (StarForce)>
[StarForce Protection VFS Driver (version 2.x) / sfvfs02][Running/Boot Start]
  <\SystemRoot\System32\drivers\sfvfs02.sys><Protection Technology (StarForce)>
[smwdm / smwdm][Running/Manual Start]
  <system32\drivers\smwdm.sys><Analog Devices, Inc.>
[sptd / sptd][Running/Boot Start]
  <\SystemRoot\System32\Drivers\sptd.sys><N/A>
[AVG Anti-Spyware Clean Driver / AvgAsCln][Stopped/System Start]
  <System32\DRIVERS\AvgAsCln.sys><GRISOFT, s.r.o.>
[AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start]
  <\??\D:\AVG Anti-Spyware 7.5\guard.sys><N/A>

==================================
浏览器加载项
[NavigatMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\360safe\safemon\safemon.dll, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[Thunder Browser Helper]
  {39F7E360-828A-4B5A-BCAF-5B79BFDFEA60} <D:\Thunder\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Thunder\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[NavigatMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <D:\360safe\safemon\safemon.dll, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>

==================================
正在运行的进程
[PID: 508][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 564][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 592][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 636][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 648][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 808][C:\WINDOWS\system32\Ati2evxx.exe]  [ATI Technologies Inc., 6.14.10.4129]
    [C:\WINDOWS\system32\Ati2edxx.dll]  [ATI Technologies, Inc., 6, 14, 10, 2500]
[PID: 824][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 876][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 920][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1032][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1092][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1212][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1644][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\WinRAR\rarext.dll]  [N/A, N/A]
    [D:\360safe\safemon\safemon.dll]  [, 1, 0, 0, 1004]
    [D:\AVG Anti-Spyware 7.5\shellexecutehook.dll]  [Anti-Malware Development a.s., 7, 5, 0, 47]
[PID: 1708][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 392][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1956][D:\Maxthon\Maxthon.exe]  [Maxthon International Ltd., 1, 5, 9, 30]
    [D:\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
    [D:\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [D:\360safe\safemon\safemon.dll]  [, 1, 0, 0, 1004]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  [Adobe Systems, Inc., 9,0,16,0]
[PID: 700][D:\AVG Anti-Spyware 7.5\avgas.exe]  [Anti-Malware Development a.s., 7, 5, 0, 50]
    [D:\AVG Anti-Spyware 7.5\engine.dll]  [Anti-Malware Development a.s., 4, 2, 0, 15]
    [D:\360safe\safemon\safemon.dll]  [, 1, 0, 0, 1004]
[PID: 2476][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3480][D:\360safe\safemon\360tray.exe]  [奇虎网, 1, 0, 1, 1004]
    [D:\360safe\safemon\safemon.dll]  [, 1, 0, 0, 1004]
    [D:\360safe\safemon\SafeKrnl.dll]  [奇虎网, 1, 0, 0, 3001]
    [D:\360safe\AntiAdwa.dll]  [360Safe.com, 2, 2, 5, 1000]
[PID: 2752][C:\Documents and Settings\spike\My Documents\tsbb.v1.7C(1222)\TSBB.EXE]  [天使宝宝开发组, 1.0.0.431]
    [D:\360safe\safemon\safemon.dll]  [, 1, 0, 0, 1004]
[PID: 1396][C:\Documents and Settings\spike\My Documents\tsbb.v1.7C(1222)\TSBB.EXE]  [天使宝宝开发组, 1.0.0.431]
    [D:\360safe\safemon\safemon.dll]  [, 1, 0, 0, 1004]
[PID: 4060][C:\Documents and Settings\spike\My Documents\毒\sreng2\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [D:\360safe\safemon\safemon.dll]  [, 1, 0, 0, 1004]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
警告！System Repair Engineer 提醒
你下面的函数内容与预期值不符，他
们可能被一些恶意的软件所修改：
入口点错误：CreateProcessA
入口点错误：CreateProcessW

==================================


[/CODE]

请帮一下菜鸟，再现等，谢谢了！！！

我又用360操了下
各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供 http://www.360safe.com
诊断时间: 2007-02-13  19:43:48
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:510MB - 当前可用内存:250MB

100 - 未知 - Process: guard.exe [AVG Anti-Spyware guard] -
100 - 未知 - Process: avgas.exe [AVG Anti-Spyware] - D:\AVG Anti-Spyware 7.5\avgas.exe
100 - 未知 - Process: Maxthon.exe [Maxthon Web Browser] - D:\Maxthon\Maxthon.exe
100 - 未知 - Process: TSBB.EXE [天使之恋OL脱机外挂] - C:\Documents and Settings\spike\My Documents\tsbb.v1.7C(1222)\TSBB.EXE
100 - 未知 - Process: TSBB.EXE [天使之恋OL脱机外挂] - C:\Documents and Settings\spike\My Documents\tsbb.v1.7C(1222)\TSBB.EXE
O18 - 未知 - Protocol: 电子书编译工具Web Compiler相关 - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll
O21 - 未知 - Protocol Icons: HKCR\http\shell\open\command - "D:\Maxthon\Maxthon.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\ftp\shell\open\command - "D:\Maxthon\Maxthon.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\https\shell\open\command - "D:\Maxthon\Maxthon.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\htmlfile\shell\open\command - "D:\Maxthon\Maxthon.exe" "%1"
O23 - 未知 - Service: AVG Anti-Spyware Guard [AVG Anti-Spyware Guard] - D:\AVG Anti-Spyware 7.5\guard.exe - (running)
O23 - 未知 - Service: ServerAC [给予本地帐户高级保护机制。] - C:\WINDOWS\system32\Security.exe - (not running)
O23 - 未知 - Service: WinXPDHCPsvc [为远程计算机注册并更新 IP 地址。] - C:\WINDOWS\system32\\rundll32.exe xpdhcp.dll,start - (not running)

=======================================

100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\360safe\safemon\360Tray.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\360safe\360safe.exe
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=res://shdoclc.dll/hardAdmin.htm
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] D:\360safe\safemon\360Tray.exe /start
O4 - 安全 - HKLM\..\Run: [!AVG Anti-Spyware] [一款杀毒软件AVG的相关启动程序。] "D:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - Startup folder: [核新SSL通讯安全代理.lnk] [核心ssl通讯安全代理软件。] C:\Documents and Settings\All Users\「开始」菜单\程序\启动\核新SSL通讯安全代理.lnk
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe - (running)

=======================================

O40 - Explorer.EXE -  - D:\WinRAR\rarext.dll -  - fd00edb8e782858243cf1469c329ee88

=======================================

O41 - Amfilter - A4Tech Mouse Filter Driver - C:\WINDOWS\system32\drivers\Amfilter.sys - (running) - A4Tech Mouse Filter Driver - A4Tech Co.,Ltd. - 779e01016ffc3eaf8190b2dbd852b9d0
O41 - Amusbprt - A4Tech HID Mouse Filter Driver - C:\WINDOWS\system32\drivers\Amusbprt.sys - (running) - A4Tech HID Mouse Filter Driver - A4Tech Co.,Ltd. - 5ba7103485ed73bfddf665193a1c107e
O41 - AVG Anti-Spyware Driver - AVG Anti-Spyware Driver - D:\AVG Anti-Spyware 7.5\guard.sys - (running) -  -  - 7d78b7fd0ebe00f177b053a08c78e35b
O41 - AvgAsCln - AVG7 Clean Driver - C:\WINDOWS\system32\drivers\AvgAsCln.sys - (running) - AVG7 Clean Driver - GRISOFT, s.r.o. - 6d4a1da6e6d522b3ebbcbff4a3589ec5
O41 - DCN530 - DigitalChina DCN-530TX Fast Ethernet Adapter NDIS5 Driver - C:\WINDOWS\system32\drivers\DCN530N5.sys - (running) - DigitalChina DCN-530TX Fast Ethernet Adapter NDIS5 Driver - Digitalchina Networks Limited. - 341fe124c48eed0f6ecefeab60701b5a
O41 - MouseCap - MouseCapture - C:\WINDOWS\system32\drivers\MouseCap.sys - (running) - MouseCapture -  - d0ac7ac40fff21056b1a3401361958ca
O41 - pfc - Padus(R) ASPI Shell - C:\WINDOWS\system32\drivers\pfc.sys - (running) - Padus(R) ASPI Shell - Padus, Inc. - 5903fa75200807ad739286bbf40c4904
O41 - sptd - sptd - C:\WINDOWS\system32\drivers\sptd.sys - (running) -  -  -
O41 - KRegEx - KRegEx - D:\KV2006\KRegEx.sys - (not running) -  -  -
O41 - npkcrypt - npkcrypt - D:\QQ\npkcrypt.sys - (not running) -  -  -
O41 - PProtect - PProtect - D:\KV2006\PProtect.sys - (not running) -  -  -

=======================================
360Safe.exe=3.1.0.1003
AntiAdwa.dll=2.2.5.1000
AntiEng.dll=3.0.2.2000
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
safelive.exe=1.0.0.2007
live.dll=1.0.0.1011

=======================================
操作历史报告：
----------查杀恶意软件历史----------

2007-01-27 22:13
查杀恶意软件 - adx广告 - 危险 -
查杀恶意软件 - adx广告变种a - 危险 -

2007-02-13 08:51
查杀恶意软件 - 熊猫烧香 - 危险 - C:\WINDOWS\system32\drivers\spoclsv.exe
查杀恶意软件 - 36sqgw7 - 危险 - C:\WINDOWS\system.exe
查杀恶意软件 - OKTE搜索工具条 - 危险 -


----------插件卸载操作历史----------

2007-01-27 22:14
插件管理 - Google工具栏 - C:\PROGRA~1\Google\GOOGLE~1.DLL
2007-01-27 22:14
插件管理 - Alcohol 120% -

----------全面诊断修复历史----------

2007-01-18 10:32
O4 - 危险 - ms - C:\Program Files\Microsoft\svhost32.exe
2007-01-28 08:20
R0 - 未知 - IE首页 - HKLM\Software\Microsoft\Internet Explorer\Main
2007-01-28 08:20
R0 - 未知 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main

----------修复IE浏览器操作历史----------

2007-01-27 22:14
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
O21 - 危险 - https协议缺省启动程序 - "D:\Maxthon\Maxthon.exe" "%1"
O22 - 危险 - .HLP文件关联 - winhlp32.exe %1
2007-02-11 11:55
R0 - 危险 - IE使用的代理服务器 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings

=======================================

360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基V6.0
最新免费下载：http://www.360safe.com