瑞星卡卡电脑诊断日志 v1.30 (2008-10-5 11:59:38)  北京瑞星信息技术有限公司

注释:	[A]表示该文件存在自启动关联;
	[M]表示该文件在内存中;

+ 注册表自运行项目 
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      Adobe LM Service
        [A ] 1. c:\program files\common files\adobe systems shared\service\adobelmsvc.exe


      ccosm
        [AM] 2. d:\暴风\stormliv.exe


      WMPNetworkSvc
        [A ] 3. c:\program files\windows media player\wmpnetwk.exe




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      ALCXWDM
        [A ] 4. c:\windows\system32\drivers\alcxwdm.sys


      GMSIPCI
        [A ] 5. g:\install\gmsipci.sys


      Hardlock
        [A ] 6. c:\windows\system32\drivers\hardlock.sys


      ialm
        [A ] 7. c:\windows\system32\drivers\ialmnt5.sys


      Secdrv
        [A ] 8. c:\windows\system32\drivers\secdrv.sys




  + 系统登陆自运行
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      igfxcui
        [AM] 9. c:\windows\system32\igfxsrvc.dll




  + IE浏览器加载模块
    + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
      {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
        [AM] 10. c:\windows\system32\ieframe.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {01443AEC-0FD1-40fd-9C87-E93D1494C233}
        [AM] 11. d:\迅雷\comdlls\tdatonce_now.dll


      {889D2FEB-5411-4565-8998-1DD2C5261283}
        [AM] 12. d:\迅雷\comdlls\xunleibho_now.dll


      {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
        [AM] 13. c:\windows\system32\urlfilter.dll



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 14. d:\迅雷\thunder.exe


      Exec
        [A ] 15. c:\windows\network diagnostic\xpnetdiag.exe




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
      <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
        [A ] 16. c:\windows\system32\ieudinit.exe



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
      WPDShServiceObj
        [AM] 17. c:\windows\system32\wpdshserviceobj.dll




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      IgfxTray
        [AM] 18. c:\windows\system32\igfxtray.exe


      HotKeysCmds
        [AM] 19. c:\windows\system32\hkcmd.exe


      SoundMan
        [AM] 20. c:\windows\soundman.exe




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 21. c:\windows\system32\kknative.exe




  + 映像劫持
    + HKCR\.html
      htmlfile\Edit with Dreamweaver 8\Command
        [A ] 22. e:\网页三剑客\dreamweaver 8\dreamweaver 8\dreamweaver.exe



    + HKCR\.htm
      htmlfile\Edit with Dreamweaver 8\Command
        [A ] 22. e:\网页三剑客\dreamweaver 8\dreamweaver 8\dreamweaver.exe



    + HKCR\.js
      JSFile\Edit\Command
        [A ] 22. e:\网页三剑客\dreamweaver 8\dreamweaver 8\dreamweaver.exe



    + HKCR\.mp3
      kwfile\open\Command
        [A ] 23. d:\酷我音乐\kwmusic\kwmusic.exe





+ 其他自启动项目
  + C:\Documents and Settings\Administrator.59C8D446977D4F9\「开始」菜单\程序\启动
    腾讯QQ.lnk
      [A ] 24. d:\qq2008\qq.exe



  + C:\WINDOWS\Tasks
    SogouImeMgr.job
      [A ] 25. c:\program files\sogouinput\3.6.0.1653\pinyinrepair.exe




+ 正在运行的进程
  + 00000138(312) smss.exe

  + 00000170(368) csrss.exe

  + 00000188(392) winlogon.exe
    72C80000[00008000]
      [ M] 26. c:\windows\system32\msacm32.drv



  + 000001b4(436) services.exe
    46040000[0000F000]
      [ M] 27. c:\windows\apppatch\acadproc.dll



  + 000001c0(448) lsass.exe

  + 00000254(596) svchost.exe

  + 00000268(616) ras.exe
    00400000[0000B000]
      [ M] 28. f:\工具\新建文件夹 (2)\ras.exe


    7C140000[00103000]
      [ M] 29. f:\工具\新建文件夹 (2)\mfc71.dll


    7C340000[00056000]
      [ M] 30. f:\工具\新建文件夹 (2)\msvcr71.dll


    10000000[00047000]
      [ M] 31. f:\工具\新建文件夹 (2)\kakamgr.dll


    7C3A0000[0007B000]
      [ M] 32. f:\工具\新建文件夹 (2)\msvcp71.dll


    00A50000[00019000]
      [ M] 33. f:\工具\新建文件夹 (2)\syslay.dll


    00A80000[0002E000]
      [ M] 34. f:\工具\新建文件夹 (2)\comx3.dll


    00CF0000[00058000]
      [ M] 35. f:\工具\新建文件夹 (2)\dbmgr.dll


    23800000[00022000]
      [ M] 36. f:\工具\新建文件夹 (2)\rsxml.dll


    00E50000[0002D000]
      [ M] 37. f:\工具\新建文件夹 (2)\pweb.dll


    00E80000[000C1000]
      [ M] 38. f:\工具\新建文件夹 (2)\pscan.dll


    00F50000[00009000]
      [ M] 39. c:\windows\system32\normaliz.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    00F60000[0002F000]
      [ M] 41. f:\工具\新建文件夹 (2)\ncomm.dll


    011C0000[00070000]
      [ M] 42. f:\工具\新建文件夹 (2)\pset.dll


    01230000[0002A000]
      [ M] 43. f:\工具\新建文件夹 (2)\pdefend.dll


    01270000[000B6000]
      [ M] 44. f:\工具\新建文件夹 (2)\ptools.dll


    01430000[0008C000]
      [ M] 45. f:\工具\新建文件夹 (2)\psysinfo.dll


    42EF0000[005CD000]
      [AM] 10. c:\windows\system32\ieframe.dll


    23900000[00040000]
      [ M] 46. f:\工具\新建文件夹 (2)\pngdll.dll


    30000000[003AF000]
      [ M] 47. c:\windows\system32\macromed\flash\flash9f.ocx


    72C80000[00008000]
      [ M] 26. c:\windows\system32\msacm32.drv



  + 00000290(656) svchost.exe

  + 000002b8(696) svchost.exe
    01730000[00009000]
      [ M] 39. c:\windows\system32\normaliz.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    50E60000[0000C000]
      [ M] 48. c:\windows\system32\wups2.dll



  + 000002e0(736) svchost.exe

  + 0000030c(780) svchost.exe
    00710000[00009000]
      [ M] 39. c:\windows\system32\normaliz.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll



  + 0000041c(1052) Explorer.EXE
    00400000[00009000]
      [ M] 39. c:\windows\system32\normaliz.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    42EF0000[005CD000]
      [AM] 10. c:\windows\system32\ieframe.dll


    01E20000[00020000]
      [AM] 12. d:\迅雷\comdlls\xunleibho_now.dll


    23C30000[0000E000]
      [ M] 50. d:\迅雷\components\resworker\dsbho_00.dll


    23BE0000[0001E000]
      [ M] 51. d:\迅雷\components\resworker\dataprocessor_00.dll


    164A0000[00023000]
      [AM] 17. c:\windows\system32\wpdshserviceobj.dll


    109C0000[0002C000]
      [ M] 52. c:\windows\system32\portabledevicetypes.dll


    10930000[00049000]
      [ M] 53. c:\windows\system32\portabledeviceapi.dll


    72C80000[00008000]
      [ M] 26. c:\windows\system32\msacm32.drv


    10000000[0003C000]
      [ M] 54. c:\windows\system32\igfxpph.dll


    01C90000[0001E000]
      [ M] 55. c:\windows\system32\hccutils.dll


    01DF0000[00029000]
      [ M] 56. c:\windows\system32\igfxres.dll


    02480000[00058000]
      [AM] 9. c:\windows\system32\igfxsrvc.dll


    02320000[00024000]
      [ M] 57. c:\windows\system32\igfxdev.dll


    03B50000[0002E000]
      [ M] 58. c:\program files\winrar\rarext.dll



  + 00000438(1080) spoolsv.exe

  + 00000538(1336) alg.exe
    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll



  + 000005a4(1444) igfxtray.exe
    00400000[0002B000]
      [AM] 18. c:\windows\system32\igfxtray.exe


    10000000[0001E000]
      [ M] 55. c:\windows\system32\hccutils.dll


    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    009E0000[00024000]
      [ M] 57. c:\windows\system32\igfxdev.dll


    00B00000[00058000]
      [AM] 9. c:\windows\system32\igfxsrvc.dll


    00B70000[00029000]
      [ M] 56. c:\windows\system32\igfxres.dll


    00BB0000[00131000]
      [ M] 59. c:\windows\system32\igfxress.dll



  + 000005ac(1452) hkcmd.exe
    00400000[00022000]
      [AM] 19. c:\windows\system32\hkcmd.exe


    10000000[0001E000]
      [ M] 55. c:\windows\system32\hccutils.dll


    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    009D0000[00024000]
      [ M] 57. c:\windows\system32\igfxdev.dll


    00AF0000[00058000]
      [AM] 9. c:\windows\system32\igfxsrvc.dll


    00B60000[00023000]
      [ M] 60. c:\windows\system32\igfxhk.dll


    00BA0000[00029000]
      [ M] 56. c:\windows\system32\igfxres.dll



  + 000005b8(1464) SOUNDMAN.EXE
    00400000[00018000]
      [AM] 20. c:\windows\soundman.exe


    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll



  + 000005c8(1480) ctfmon.exe
    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll



  + 00000764(1892) stormliv.exe
    00400000[00088000]
      [AM] 2. d:\暴风\stormliv.exe


    75FF0000[00065000]
      [ M] 61. d:\暴风\msvcp60.dll


    00390000[00009000]
      [ M] 39. c:\windows\system32\normaliz.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    10000000[00015000]
      [ M] 62. d:\暴风\bfoptdll.dll



  + 000007a0(1952) inetinfo.exe
    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll



  + 00000934(2356) conime.exe
    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll



  + 00000aa4(2724) knownsvr.exe
    00400000[00072000]
      [ M] 63. f:\工具\新建文件夹 (2)\knownsvr.exe


    10000000[0002F000]
      [ M] 41. f:\工具\新建文件夹 (2)\ncomm.dll


    00390000[00009000]
      [ M] 39. c:\windows\system32\normaliz.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    00BD0000[0002E000]
      [ M] 34. f:\工具\新建文件夹 (2)\comx3.dll


    00C00000[00019000]
      [ M] 33. f:\工具\新建文件夹 (2)\syslay.dll



  + 00000b14(2836) IEXPLORE.EXE
    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    42EF0000[005CD000]
      [AM] 10. c:\windows\system32\ieframe.dll


    5DFF0000[0002F000]
      [ M] 64. c:\windows\system32\ieui.dll


    47060000[00021000]
      [ M] 65. c:\windows\system32\xmllite.dll


    61930000[0004A000]
      [ M] 66. c:\program files\internet explorer\ieproxy.dll


    01DD0000[00009000]
      [ M] 39. c:\windows\system32\normaliz.dll


    10000000[00023000]
      [AM] 11. d:\迅雷\comdlls\tdatonce_now.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 68. c:\windows\system32\msvcr71.dll


    02080000[00020000]
      [AM] 12. d:\迅雷\comdlls\xunleibho_now.dll


    23C30000[0000E000]
      [ M] 50. d:\迅雷\components\resworker\dsbho_00.dll


    23BE0000[0001E000]
      [ M] 51. d:\迅雷\components\resworker\dataprocessor_00.dll


    020E0000[00018000]
      [AM] 13. c:\windows\system32\urlfilter.dll


    02150000[00011000]
      [ M] 69. f:\工具\新建文件夹 (2)\urlrule.dll


    43560000[00060000]
      [ M] 70. c:\windows\system32\ieapfltr.dll


    30000000[003AF000]
      [ M] 47. c:\windows\system32\macromed\flash\flash9f.ocx


    72C80000[00008000]
      [ M] 26. c:\windows\system32\msacm32.drv


    089B0000[0014F000]
      [ M] 71. c:\windows\system32\sogoupy.ime



  + 00000c10(3088) Thunder5.exe
    00400000[001DC000]
      [ M] 72. d:\迅雷\program\thunder5.exe


    227A0000[0000C000]
      [ M] 73. d:\迅雷\program\bugreport.dll


    00380000[00009000]
      [ M] 39. c:\windows\system32\normaliz.dll


    78000000[00045000]
      [ M] 40. c:\windows\system32\iertutil.dll


    60000000[00074000]
      [ M] 49. c:\windows\system32\kmon.dll


    229B0000[0003D000]
      [ M] 74. d:\迅雷\program\taskmanager.dll


    21670000[00040000]
      [ M] 75. d:\迅雷\program\download_interface.dll


    21BE0000[00007000]
      [ M] 76. d:\迅雷\program\mp.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 68. c:\windows\system32\msvcr71.dll


    21280000[00055000]
      [ M] 77. d:\迅雷\program\asyn_frame.dll


    21350000[00019000]
      [ M] 78. d:\迅雷\program\atl71.dll


    22A40000[0001E000]
      [ M] 79. d:\迅雷\program\xlnet.dll


    22770000[0000A000]
      [ M] 80. d:\迅雷\program\bhostub.dll


    22800000[0000F000]
      [ M] 81. d:\迅雷\program\floatbar.dll


    233C0000[00014000]
      [ M] 82. d:\迅雷\components\downandplay\downandplay.dll


    213A0000[0003E000]
      [ M] 83. d:\迅雷\program\backend_agent.dll


    22BE0000[00013000]
      [ M] 84. d:\迅雷\program\zlib1.dll


    42EF0000[005CD000]
      [AM] 10. c:\windows\system32\ieframe.dll


    21EA0000[0010F000]
      [ M] 85. d:\迅雷\program\p2sp.dll


    21AA0000[00028000]
      [ M] 86. d:\迅雷\program\fs.dll


    21700000[00040000]
      [ M] 87. d:\迅雷\program\down_dispatcher.dll


    220D0000[00099000]
      [ M] 88. d:\迅雷\program\ptl.dll


    21630000[00011000]
      [ M] 89. d:\迅雷\program\dl_peer_id.dll


    226D0000[0001C000]
      [ M] 90. d:\迅雷\program\xl_stat.dll


    21D80000[00062000]
      [ M] 91. d:\迅雷\program\p2p_network_com.dll


    21E60000[00018000]
      [ M] 92. d:\迅雷\program\p2p_upload.dll


    21C00000[00089000]
      [ M] 93. d:\迅雷\program\p2p.dll


    224E0000[00061000]
      [ M] 94. d:\迅雷\program\xldc.dll


    222A0000[00116000]
      [ M] 95. d:\迅雷\program\stream.dll


    22880000[0002B000]
      [ M] 96. d:\迅雷\program\itargetad.dll


    21D30000[00017000]
      [ M] 97. d:\迅雷\program\p2p_local_res.dll


    30000000[003AF000]
      [ M] 47. c:\windows\system32\macromed\flash\flash9f.ocx


    72C80000[00008000]
      [ M] 26. c:\windows\system32\msacm32.drv


    211F0000[0003D000]
      [ M] 98. d:\迅雷\program\al.dll


    23770000[00017000]
      [ M] 99. d:\迅雷\components\inmedia\iembedshell.dll


    236D0000[0004B000]
      [ M] 100. d:\迅雷\components\inmedia\iembed18.dll


    23800000[00043000]
      [ M] 101. d:\迅雷\components\inmedia\playerhelper.dll


    238D0000[0000E000]
      [ M] 102. d:\迅雷\components\inmedia\xlipc.dll


    23B90000[0001E000]
      [ M] 103. d:\迅雷\components\p4pclient\p4pclient.dll


    22E00000[00298000]
      [ M] 104. d:\迅雷\components\community\xlcommunity.dll


    22210000[00040000]
      [ M] 105. d:\迅雷\program\registerdll.dll


    22970000[00011000]
      [ M] 106. d:\迅雷\program\msvcirt.dll


    21B10000[0005E000]
      [ M] 107. d:\迅雷\program\imdt.dll


    23DB0000[0002C000]
      [ M] 108. d:\迅雷\components\security\thundersafe.dll


    23D30000[0000C000]
      [ M] 109. d:\迅雷\components\security\configmanager.dll


    23D50000[00016000]
      [ M] 110. d:\迅雷\components\security\safemanager.dll


    23D90000[0000A000]
      [ M] 111. d:\迅雷\components\security\safestatistic.dll


    22A90000[00020000]
      [ M] 112. d:\迅雷\program\xlnetu.dll


    21110000[00063000]
      [ M] 113. d:\迅雷\plugins\xlsafehost\xlsafehost.dll


    23CD0000[00024000]
      [ M] 114. d:\迅雷\components\search\xlsearch.dll


    228E0000[0003F000]
      [ M] 115. d:\迅雷\program\liveupdate.dll


    24000000[00025000]
      [ M] 116. d:\迅雷\components\xlsoftbase\drthunderhost.dll


    23F50000[00014000]
      [ M] 117. d:\迅雷\components\xlsoftbase\drkernel.dll


    23F90000[0002D000]
      [ M] 118. d:\迅雷\components\xlsoftbase\drsoftidentifier.dll


    24070000[00015000]
      [ M] 119. d:\迅雷\components\xlsoftbase\drupdate.dll


    210A0000[0000A000]
      [ M] 120. d:\迅雷\plugins\gougoutop\gougoutop.dll


    210C0000[0000A000]
      [ M] 121. d:\迅雷\plugins\kankantop\kankantop.dll


    23640000[00010000]
      [ M] 122. d:\迅雷\components\explorerhelper\explorerhelper.dll


    23E20000[00037000]
      [ M] 123. d:\迅雷\components\tips\tipsclient.dll


    23F00000[0001C000]
      [ M] 124. d:\迅雷\components\vpshell\vpshell.dll


    23EE0000[0000B000]
      [ M] 125. d:\迅雷\components\userexperience\userexperience.dll


    23C50000[0001F000]
      [ M] 126. d:\迅雷\components\resworker\dsxlcom.dll


    23BE0000[0001E000]
      [ M] 51. d:\迅雷\components\resworker\dataprocessor_00.dll


    23CA0000[00008000]
      [ M] 127. d:\迅雷\components\resworker\mediaworker.dll


    23600000[00011000]
      [ M] 128. d:\迅雷\components\downloadstat\downloadstat.dll


    23EB0000[0000E000]
      [ M] 129. d:\迅雷\components\tips\xlipc.dll


    21A50000[0001F000]
      [ M] 130. d:\迅雷\program\emule_id.dll


    21430000[00022000]
      [ M] 131. d:\迅雷\program\bd.dll