瑞星卡卡电脑诊断日志 v1.20 (2007-7-11 13:13:10) 北京瑞星科技股份有限公司
注释:[A]表示该文件存在自启动关联;
[M]表示该文件在内存中;
+ 注册表自运行项目
+ Win32 Services
+ HKLM\System\CurrentControlSet\Services
ose
[A ] 1. c:\program files\common files\microsoft shared\source engine\ose.exe
RsCCenter
[A ] 2. c:\program files\rising\rav\ccenter.exe
RsRavMon
[A ] 3. c:\program files\rising\rav\ravmond.exe
UMWdf
[AM] 4. c:\windows\system32\wdfmgr.exe
+ Kernel Drivers
+ HKLM\System\CurrentControlSet\Services
a320raid
[A ] 5. c:\windows\system32\drivers\a320raid.sys
AAC
[A ] 6. c:\windows\system32\drivers\aac.sys
aar1210
[A ] 7. c:\windows\system32\drivers\aar1210.sys
adpu320
[A ] 8. c:\windows\system32\drivers\adpu320.sys
aec6210
[A ] 9. c:\windows\system32\drivers\aec6210.sys
aec6260
[A ] 10. c:\windows\system32\drivers\aec6260.sys
aec6280
[A ] 11. c:\windows\system32\drivers\aec6280.sys
AEC6290
[A ] 12. c:\windows\system32\drivers\aec6290.sys
AEC67160
[A ] 13. c:\windows\system32\drivers\aec67160.sys
AEC671X
[A ] 14. c:\windows\system32\drivers\aec671x.sys
AEC6880
[A ] 15. c:\windows\system32\drivers\aec6880.sys
AEC6890
[A ] 16. c:\windows\system32\drivers\aec6890.sys
aec68x5
[A ] 17. c:\windows\system32\drivers\aec68x5.sys
ALCXWDM
[A ] 18. c:\windows\system32\drivers\alcxwdm.sys
AmdK8
[A ] 19. c:\windows\system32\drivers\amdk8.sys
arc
[A ] 20. c:\windows\system32\drivers\arc.sys
BaseTDI
[A ] 21. c:\windows\system32\drivers\basetdi.sys
elxstor
[A ] 22. c:\windows\system32\drivers\elxstor.sys
ExpScaner
[A ] 23. c:\program files\rising\rav\expscan.sys
FASTSX
[A ] 24. c:\windows\system32\drivers\fastsx.sys
fasttrak
[A ] 25. c:\windows\system32\drivers\fasttrak.sys
fasttx2k
[A ] 26. c:\windows\system32\drivers\fasttx2k.sys
fasttx2k2
[A ] 27. c:\windows\system32\drivers\fasttx2k2.sys
HookCont
[A ] 28. c:\program files\rising\rav\hookcont.sys
HookReg
[A ] 29. c:\program files\rising\rav\hookreg.sys
HookSys
[A ] 30. c:\program files\rising\rav\hooksys.sys
HpCISSs
[A ] 31. c:\windows\system32\drivers\hpcisss.sys
Hpt366
[A ] 32. c:\windows\system32\drivers\hpt366.sys
HPT371
[A ] 33. c:\windows\system32\drivers\hpt371.sys
hpt374
[A ] 34. c:\windows\system32\drivers\hpt374.sys
hpt3xx
[A ] 35. c:\windows\system32\drivers\hpt3xx.sys
hptmv
[A ] 36. c:\windows\system32\drivers\hptmv.sys
hptpro
[A ] 37. c:\windows\system32\drivers\hptpro.sys
ialm
[A ] 38. c:\windows\system32\drivers\ialmnt5.sys
iaStor
[A ] 39. c:\windows\system32\drivers\iastor.sys
iirsp
[A ] 40. c:\windows\system32\drivers\iirsp.sys
iteraid
[A ] 41. c:\windows\system32\drivers\iteraid.sys
LSI_SAS
[A ] 42. c:\windows\system32\drivers\lsi_sas.sys
LSI_SCSI
[A ] 43. c:\windows\system32\drivers\lsi_scsi.sys
m5228
[A ] 44. c:\windows\system32\drivers\m5228.sys
m5281
[A ] 45. c:\windows\system32\drivers\m5281.sys
MegaIDE
[A ] 46. c:\windows\system32\drivers\megaide.sys
megasas
[A ] 47. c:\windows\system32\drivers\megasas.sys
MEMSCAN
[A ] 48. c:\program files\rising\rav\memscan.sys
mraid2k
[A ] 49. c:\windows\system32\drivers\mraid2k.sys
nfrd960
[A ] 50. c:\windows\system32\drivers\nfrd960.sys
NPF
[A ] 51. c:\windows\system32\drivers\npf.sys
NvAtaBus
[A ] 52. c:\windows\system32\drivers\nvatabus.sys
nvraid
[A ] 53. c:\windows\system32\drivers\nvraid.sys
PNP649R
[A ] 54. c:\windows\system32\drivers\pnp649r.sys
Pnp680
[A ] 55. c:\windows\system32\drivers\pnp680.sys
Pnp680r
[A ] 56. c:\windows\system32\drivers\pnp680r.sys
ql2300
[A ] 57. c:\windows\system32\drivers\ql2300.sys
RAIDSRC
[A ] 58. c:\windows\system32\drivers\raidsrc.sys
RsAntiSpyware
[A ] 59. c:\windows\system32\drivers\rsboot.sys
RsNTGDI
[A ] 60. c:\windows\system32\drivers\rsntgdi.sys
RSPPSYS
[A ] 61. c:\program files\rising\rav\rsppsys.sys
RTL8023xp
[A ] 62. c:\windows\system32\drivers\rtnicxp.sys
S150SX8
[A ] 63. c:\windows\system32\drivers\s150sx8.sys
Secdrv
[A ] 64. c:\windows\system32\drivers\secdrv.sys
SI3112
[A ] 65. c:\windows\system32\drivers\si3112.sys
SI3112r
[A ] 66. c:\windows\system32\drivers\si3112r.sys
SI3114
[A ] 67. c:\windows\system32\drivers\si3114.sys
SI3114r
[A ] 68. c:\windows\system32\drivers\si3114r.sys
SI3124
[A ] 69. c:\windows\system32\drivers\si3124.sys
SI3124r
[A ] 70. c:\windows\system32\drivers\si3124r.sys
SiFilter
[A ] 71. c:\windows\system32\drivers\siwinacc.sys
SISIDE
[A ] 72. c:\windows\system32\drivers\siside.sys
SiSRaid
[A ] 73. c:\windows\system32\drivers\sisraid.sys
SiSRaid1
[A ] 74. c:\windows\system32\drivers\sisraid1.sys
SISRAIDS
[A ] 75. c:\windows\system32\drivers\sisraids.sys
sptrak
[A ] 76. c:\windows\system32\drivers\sptrak.sys
SYMMPI
[A ] 77. c:\windows\system32\drivers\symmpi.sys
UlSata
[A ] 78. c:\windows\system32\drivers\ulsata.sys
ULSATAS
[A ] 79. c:\windows\system32\drivers\ulsatas.sys
viamraid
[A ] 80. c:\windows\system32\drivers\viamraid.sys
viapdsk
[A ] 81. c:\windows\system32\drivers\viapdsk.sys
viaraid
[A ] 82. c:\windows\system32\drivers\viaraid.sys
viasraid
[A ] 83. c:\windows\system32\drivers\viasraid.sys
vmscsi
[A ] 84. c:\windows\system32\drivers\vmscsi.sys
+ Winlogon
+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
igfxcui
[AM] 85. c:\windows\system32\igfxsrvc.dll
+ Internet Explorer
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[AM] 86. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll
{889D2FEB-5411-4565-8998-1DD2C5261283}
[AM] 87. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
Exec
[A ] 88. c:\program files\thunder network\thunder\thunder.exe
Exec
[A ] 89. c:\program files\messenger\msmsgs.exe
+ Explorer
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
text/xml
[AM] 90. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
+ HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
{926A036A-158B-047A-E269-D148B0369C14}
[A ] 91. c:\windows\system32\install.exe
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 92. c:\windows\system32\hticons.dll
Microsoft Office HTML Icon Handler
[AM] 93. c:\program files\microsoft office\office11\msohev.dll
Web Folders
[A ] 94. c:\program files\common files\microsoft shared\web folders\msonsext.dll
Portable Media Devices
[A ] 95. c:\windows\system32\audiodev.dll
Portable Media Devices Menu
[A ] 95. c:\windows\system32\audiodev.dll
WinRAR shell extension
[A ] 96. c:\program files\winrar\rarext.dll
RISING
[AM] 97. c:\windows\system32\ravext.dll
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{32CD708B-60A7-4C00-9377-D73EAA495F0F}
[AM] 97. c:\windows\system32\ravext.dll
{3495D328-661A-4FB0-BA67-8ACDD1704D1E}
[AM] 98. c:\windows\system32\csrss.dll
{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
[AM] 99. c:\windows\system32\shlhook.dll
+ Logon
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
IgfxTray
[A ] 100. c:\windows\system32\igfxtray.exe
HotKeysCmds
[AM] 101. c:\windows\system32\hkcmd.exe
SoundMan
[AM] 102. c:\windows\soundman.exe
RavTask
[A ] 103. c:\program files\rising\rav\ravtask.exe
runeip
[AM] 104. c:\program files\rising\antispyware\runiep.exe
+ Boot Execute
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 105. c:\windows\system32\bsmain.exe
+ Image Hijacks
+ HKCR\.html
htmlfile\Edit\Command
[A ] 106. c:\program files\microsoft office\office11\msohtmed.exe
htmlfile\Print\Command
[A ] 106. c:\program files\microsoft office\office11\msohtmed.exe
+ HKCR\.htm
htmlfile\Edit\Command
[A ] 106. c:\program files\microsoft office\office11\msohtmed.exe
htmlfile\Print\Command
[A ] 106. c:\program files\microsoft office\office11\msohtmed.exe