==============================================================
        金山清理专家系统诊断报告

该诊断报告由金山清理专家提供 http://www.duba.net 
==============================================================

诊断时间:            2008-08-22, 10:46 
诊断平台:            Windows XP [5.1.2600] Service Pack 3 
IE版本:              Internet Explorer V6.0.5512.2900 
计算机物理内存:      2038(MB) 
当前可用内存:        1561(MB) 
硬盘总大小:          149(GB) 
硬盘可用空间:        116(GB) 
清理专家版本:        2008.06.13.404 
恶意软件库版本:      2008.06.03.1 
漏洞库版本:          2008.05.27.1 




==============================================================
        常规启动项
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

        [Windows木马防火墙]        <C:\ftc2008\Trojanwall.exe>
        文件路径: C:\ftc2008\Trojanwall.exe [未连网]


==============================================================
        登陆加载项
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

          [igfxcui]             <igfxdev.dll>
          文件路径: C:\WINDOWS\system32\igfxdev.dll  [未连网]


==============================================================
        启动文件夹位置
==============================================================

Common Startup:      C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Startup:             C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
Common Startup:      %ALLUSERSPROFILE%\「开始」菜单\程序\启动

==============================================================
        开始菜单启动项
==============================================================

<Adobe Gamma Loader.lnk>  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk>
文件路径: C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [未连网]


==============================================================
        文件扩展名关联
==============================================================

.GIF            <"C:\Program Files\ACDSee5RC\ACDSee5.exe" "%1">
文件路径: C:\Program Files\ACDSee5RC\ACDSee5.exe [未连网]

.JPG(.JPEG)     <"C:\Program Files\ACDSee5RC\ACDSee5.exe" "%1">
文件路径: C:\Program Files\ACDSee5RC\ACDSee5.exe [未连网]

.M3U            <"C:\Program Files\TTPlayer\TTPlayer.exe" "%1">
文件路径: C:\Program Files\TTPlayer\TTPlayer.exe [未连网]

.WMA            <"C:\Program Files\TTPlayer\TTPlayer.exe" "%1">
文件路径: C:\Program Files\TTPlayer\TTPlayer.exe [未连网]

.MP3            <"C:\Program Files\TTPlayer\TTPlayer.exe" "%1">
文件路径: C:\Program Files\TTPlayer\TTPlayer.exe [未连网]


==============================================================
        Host File
==============================================================

127.0.0.1       localhost

==============================================================
        系统服务
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

        [XAudioService] [已启用]       <%SystemRoot%\system32\DRIVERS\xaudio.exe>
        文件路径: C:\WINDOWS\system32\DRIVERS\xaudio.exe [未连网]


==============================================================
        驱动程序
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

        [ATSpy] [已启用]               <\??\C:\WINDOWS\system32\ATSpy.sys>

        [FTCkillfile] [已启用]         <System32\Drivers\FTCkillfile.sys>
        文件路径: C:\WINDOWS\system32\Drivers\FTCkillfile.sys [未连网]

        [FTCProtect] [已启用]          <System32\Drivers\FTCProtect.sys>
        文件路径: C:\WINDOWS\system32\Drivers\FTCProtect.sys [未连网]

        [FTCProTime] [已启用]          <System32\Drivers\FTCProTime.sys>
        文件路径: C:\WINDOWS\system32\Drivers\FTCProTime.sys [未连网]

        [HdAudAddService] [已启用]     <system32\drivers\CHDAud.sys>
        文件路径: C:\WINDOWS\system32\drivers\CHDAud.sys [未连网]

        [HSF_DPV] [已启用]             <system32\DRIVERS\HSX_DPV.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\HSX_DPV.sys [未连网]

        [HSXHWAZL] [已启用]            <system32\DRIVERS\HSXHWAZL.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\HSXHWAZL.sys [未连网]

        [mchInjDrv] [已禁用]           <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mc21.tmp>

        [mdmxsdk] [已启用]             <system32\DRIVERS\mdmxsdk.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [未连网]

        [NETw4x32] [已启用]            <system32\DRIVERS\NETw4x32.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [未连网]

        [nvrd32] [已启用]              <system32\DRIVERS\nvrd32.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\nvrd32.sys [未连网]

        [SiFilter] [已禁用]            <\SystemRoot\system32\DRIVERS\SiWinAcc.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys [未连网]

        [viamraid] [已启用]            <system32\DRIVERS\viamraid.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\viamraid.sys [未连网]

        [winachsf] [已启用]            <system32\DRIVERS\HSX_CNXT.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\HSX_CNXT.sys [未连网]

        [XAudio] [已启用]              <system32\DRIVERS\xaudio.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\xaudio.sys [未连网]

        [yukonwxp] [已启用]            <system32\DRIVERS\yk51x86.sys>
        文件路径: C:\WINDOWS\system32\DRIVERS\yk51x86.sys [未连网]


==============================================================
        当前进程
==============================================================

名称:     Trojanwall.exe  [已启用]
命令行:   "C:\ftc2008\Trojanwall.exe" 
文件路径: C:\ftc2008\Trojanwall.exe  [未连网]              (风云谷科技)
模块文件: C:\WINDOWS\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\user32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\advapi32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\oleaut32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msvcrt.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\version.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comctl32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\shell32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comdlg32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wsock32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\winmm.dll                 (Microsoft Corporation)
模块文件: C:\ftc2008\FTCCompress.dll                    (木马清道夫加密DLL)
模块文件: C:\ftc2008\ftcapi2.dll
模块文件: C:\WINDOWS\system32\wininet.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\URLMON.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\netapi32.dll              (Microsoft Corporation)
模块文件: C:\ftc2008\ftcapi3.dll                        (木马清道夫组件)
模块文件: C:\ftc2008\ftcapi.dll                         (木马清道夫组件)
模块文件: C:\WINDOWS\system32\URL.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHDOCVW.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPTUI.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINTRUST.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMAGEHLP.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
模块文件: c:\program files\rising\rfw\ijt_base.dll      (Beijing Rising Information Technology Co.. Ltd.)
模块文件: c:\program files\rising\rfw\olemon.dll        (Beijing Rising Information Technology Co.. Ltd.)
模块文件: C:\WINDOWS\system32\uxtheme.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSCTF.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msctfime.ime              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\olepro32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CLBCATQ.DLL               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\COMRes.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mlang.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mswsock.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wdmaud.drv                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msacm32.drv               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSACM32.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\midimap.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\appHelp.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SETUPAPI.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\cscui.dll                 (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\CSCDLL.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\NTMARTA.DLL               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SAMLIB.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WtsApi32.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINSTA.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RASAPI32.DLL              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasman.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\TAPI32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rtutils.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msv1_0.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\sensapi.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USERENV.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MPR.dll                   (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\drprov.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\ntlanman.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\NETUI0.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\NETUI1.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\NETRAP.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\davclnt.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\shgina.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSGINA.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ODBC32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\odbcint.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ntshrui.dll               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ATL.DLL                   (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Audiodev.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WMVCore.DLL               (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WMASF.DLL                 (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wiashext.dll              (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\xpsp2res.dll              (Microsoft Corporation)


==============================================================
        IE扩展按钮
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions

        [启动迅雷5]
        <{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}>    <C:\Program Files\Thunder Network\Thunder\Thunder.exe>
        文件路径: C:\Program Files\Thunder Network\Thunder\Thunder.exe [未连网]

        [Zcom 杂志]
        <{4045D313-1D5E-4fe4-93A0-A34630B6A00B}>    <D:\Zcom\Zcom\E-Space.exe>


==============================================================
        IE扩展菜单
==============================================================

该项来源: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt

        <使用迅雷下载>        <C:\Program Files\Thunder Network\Thunder\Program\geturl.htm>
        文件路径: C:\Program Files\Thunder Network\Thunder\Program\geturl.htm [未连网]

        <使用迅雷下载全部链接>        <C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm>
        文件路径: C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm [未连网]

        <导出到 Microsoft Office Excel(&X)>        <res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000>

        <添加到QQ表情>        <D:\Program Files\Tencent\QQ\AddEmotion.htm>
        文件路径: D:\Program Files\Tencent\QQ\AddEmotion.htm [未连网]


==============================================================
        ActiveX控件
==============================================================

该项来源: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats

        [GerneralPeerID Class]
        <{0A47E819-F82E-4D5D-B806-6A9EA94D68CD}>        <C:\Program Files\Thunder Network\Thunder\Components\InMedia\peerid.dll>

        [Thunder Agent Class]
        <{485463B7-8FB2-4B3B-B29B-8B919B0EACCE}>        <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll>
        文件路径: C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll [未连网]

        [XMP Class]
        <{6483F145-A768-4C41-AACC-52D4D7845851}>        <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>
        文件路径: C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work [未连网]

        [XDRM]
        <{693571CB-54A3-4E90-9D52-EEAE1334E2D3}>        <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work>
        文件路径: C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work [未连网]

        [MediaComm Class]
        <{7670648D-461B-42AF-BDFE-46D26AF5EFF2}>        <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin16.dll>

        [DapCtrl COM Module]
        <{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}>        <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.1.6.5711.41.249.dll>

        [Thunder DapPlayer]
        <{EEDD6FF9-13DE-496B-9A1C-D78B3215E266}>        <C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DapPlayer3.0.5711.70.249.dll>

        [XPPlayer Class]
        <{F3E70CEA-956E-49CC-B444-73AFE593AD7F}>        <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\pplayer.dll_1_work>
        文件路径: C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\pplayer.dll_1_work [未连网]


==============================================================
        其他安全区域
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

        [显示摇曳 CPL 扩展]         <deskpan.dll>

        [Microsoft Agent Character Property Sheet Handler] <C:\WINDOWS\msagent\AgentPsh.dll>
        文件路径: C:\WINDOWS\msagent\AgentPsh.dll [未连网]

        [WinRAR]              <C:\Program Files\WinRAR\rarext.dll>
        文件路径: C:\Program Files\WinRAR\rarext.dll [未连网]

        [Context Menu Shell Extension] <C:\ftc2008\FTCCommenu.dll>
        文件路径: C:\ftc2008\FTCCommenu.dll [未连网]