==============================================================
        金山清理专家系统诊断报告

该诊断报告由金山清理专家提供 http://www.duba.net 
==============================================================

诊断时间:            2008-12-06, 22:11 
诊断平台:            Windows Vista [6.0.6001] Service Pack 1 
IE版本:              Internet Explorer V7.0.18000.6001 
计算机物理内存:      2037(MB) 
当前可用内存:        987(MB) 
硬盘总大小:          146(GB) 
硬盘可用空间:        82(GB) 
清理专家版本:        2008.06.13.404 
恶意软件库版本:         0.00.00.0 
漏洞库版本:             0.00.00.0 




==============================================================
        启动文件夹位置
==============================================================

Common Startup:      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Startup:             C:\Users\amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Common Startup:      %ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup

==============================================================
        Host File
==============================================================

127.0.0.1       localhost
::1             localhost

==============================================================
        系统服务
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds

        [StartupPrograms] [已启用]     <rdpclip>


==============================================================
        驱动程序
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32

        [VIDC.ACDV] [已启用]           <ACDV.dll>

--------------------------------------------------------------
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

        [ArKdv] [已禁用]               <\??\C:\Windows\system32\drivers\ArKdv.SYS>

        [BCM42RLY] [已启用]            <system32\drivers\BCM42RLY.sys>

        [blbdrive] [已禁用]            <\SystemRoot\system32\drivers\blbdrive.sys>

        [IpInIp] [已启用]              <system32\DRIVERS\ipinip.sys>

        [NwlnkFlt] [已启用]            <system32\DRIVERS\nwlnkflt.sys>

        [NwlnkFwd] [已启用]            <system32\DRIVERS\nwlnkfwd.sys>


==============================================================
        当前进程
==============================================================

名称:     WinRAR.exe  [已启用]
命令行:   "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\amy\Documents\sreng2.zip"
文件路径: C:\Program Files\WinRAR\WinRAR.exe  [可疑的]
模块文件: C:\Windows\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\ADVAPI32.DLL              (Microsoft Corporation)
模块文件: C:\Windows\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.DLL (Microsoft Corporation)
模块文件: C:\Windows\system32\msvcrt.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\COMDLG32.DLL              (Microsoft Corporation)
模块文件: C:\Windows\system32\SHELL32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\OLE32.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\system32\MSCTF.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\Windows\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll      (Kaspersky Lab)
模块文件: C:\Windows\system32\PSAPI.DLL                 (Microsoft Corporation)
模块文件: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll     (Kaspersky Lab)
模块文件: C:\Windows\system32\SETUPAPI.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\USERENV.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\PROPSYS.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\CLBCatQ.DLL               (Microsoft Corporation)
模块文件: C:\Windows\system32\riched32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\RICHED20.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\UxTheme.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\WindowsCodecs.dll         (Microsoft Corporation)
模块文件: C:\Windows\system32\browseui.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\DUser.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\MPR.dll                   (Microsoft Corporation)
模块文件: C:\Windows\System32\ntlanman.dll              (Microsoft Corporation)
模块文件: C:\Windows\System32\NETAPI32.dll              (Microsoft Corporation)
模块文件: C:\Windows\System32\drprov.dll                (Microsoft Corporation)
模块文件: C:\Windows\System32\davclnt.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\cscapi.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\apphelp.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\wpdshext.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\WINMM.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\OLEACC.dll                (Microsoft Corporation)
模块文件: C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft Corporation)
模块文件: C:\Windows\system32\PortableDeviceApi.dll     (Microsoft Corporation)
模块文件: C:\Windows\system32\WINTRUST.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\imagehlp.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\audiodev.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\WMVCore.DLL               (Microsoft Corporation)
模块文件: C:\Windows\system32\WMASF.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\System32\shdocvw.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\SAMLIB.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\iertutil.dll              (Microsoft Corporation)

名称:     WinRAR.exe  [已启用]
命令行:   "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\amy\Documents\金-山-诊-断及粉-碎-器.rar"
文件路径: C:\Program Files\WinRAR\WinRAR.exe  [可疑的]
模块文件: C:\Windows\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\ADVAPI32.DLL              (Microsoft Corporation)
模块文件: C:\Windows\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.DLL (Microsoft Corporation)
模块文件: C:\Windows\system32\msvcrt.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\COMDLG32.DLL              (Microsoft Corporation)
模块文件: C:\Windows\system32\SHELL32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\OLE32.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\system32\MSCTF.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\Windows\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll      (Kaspersky Lab)
模块文件: C:\Windows\system32\PSAPI.DLL                 (Microsoft Corporation)
模块文件: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll     (Kaspersky Lab)
模块文件: C:\Windows\system32\SETUPAPI.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\USERENV.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\PROPSYS.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\CLBCatQ.DLL               (Microsoft Corporation)
模块文件: C:\Windows\system32\riched32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\RICHED20.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\UxTheme.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\WindowsCodecs.dll         (Microsoft Corporation)
模块文件: C:\Windows\system32\browseui.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\DUser.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\MPR.dll                   (Microsoft Corporation)
模块文件: C:\Windows\System32\ntlanman.dll              (Microsoft Corporation)
模块文件: C:\Windows\System32\NETAPI32.dll              (Microsoft Corporation)
模块文件: C:\Windows\System32\drprov.dll                (Microsoft Corporation)
模块文件: C:\Windows\System32\davclnt.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\cscapi.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\apphelp.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\wpdshext.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\WINMM.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\OLEACC.dll                (Microsoft Corporation)
模块文件: C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18065_none_9e7abe2ec9c13222\gdiplus.dll (Microsoft Corporation)
模块文件: C:\Windows\system32\PortableDeviceApi.dll     (Microsoft Corporation)
模块文件: C:\Windows\system32\WINTRUST.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\CRYPT32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\MSASN1.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\imagehlp.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\audiodev.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\WMVCore.DLL               (Microsoft Corporation)
模块文件: C:\Windows\system32\WMASF.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\System32\shdocvw.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\SAMLIB.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\iertutil.dll              (Microsoft Corporation)

名称:     金-山-诊-断及粉-碎-器.exe  [已启用]
命令行:   "C:\Users\amy\AppData\Local\Temp\Rar$EX00.574\金-山-诊-断及粉-碎-器.exe" 
文件路径: C:\Users\amy\AppData\Local\Temp\Rar$EX00.574\金-山-诊-断及粉-碎-器.exe  [未知]
模块文件: C:\Windows\system32\ntdll.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\kernel32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\ADVAPI32.DLL              (Microsoft Corporation)
模块文件: C:\Windows\system32\RPCRT4.dll                (Microsoft Corporation)
模块文件: C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18000_none_5cdbaa5a083979cc\COMCTL32.DLL (Microsoft Corporation)
模块文件: C:\Windows\system32\msvcrt.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\GDI32.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\USER32.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\SHLWAPI.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\COMDLG32.DLL              (Microsoft Corporation)
模块文件: C:\Windows\system32\SHELL32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\OLE32.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\system32\ShimEng.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\apphelp.dll               (Microsoft Corporation)
模块文件: C:\Windows\AppPatch\AcGenral.DLL              (Microsoft Corporation)
模块文件: C:\Windows\system32\UxTheme.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\WINMM.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\OLEAUT32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\OLEACC.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\NETAPI32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\PSAPI.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\system32\MSACM32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\VERSION.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\sfc.dll                   (Microsoft Corporation)
模块文件: C:\Windows\system32\sfc_os.DLL                (Microsoft Corporation)
模块文件: C:\Windows\system32\SETUPAPI.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\USERENV.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\Secur32.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\dwmapi.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\urlmon.dll                (Microsoft Corporation)
模块文件: C:\Windows\system32\iertutil.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\MPR.dll                   (Microsoft Corporation)
模块文件: C:\Windows\system32\IMM32.DLL                 (Microsoft Corporation)
模块文件: C:\Windows\system32\MSCTF.dll                 (Microsoft Corporation)
模块文件: C:\Windows\system32\LPK.DLL                   (Microsoft Corporation)
模块文件: C:\Windows\system32\USP10.dll                 (Microsoft Corporation)
模块文件: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll      (Kaspersky Lab)
模块文件: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll     (Kaspersky Lab)
模块文件: C:\Windows\system32\riched32.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\RICHED20.dll              (Microsoft Corporation)
模块文件: C:\Windows\system32\PROPSYS.dll               (Microsoft Corporation)
模块文件: C:\Windows\system32\CLBCatQ.DLL               (Microsoft Corporation)