瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 谁帮我看看我的诊断报告啊!!!!

1   1  /  1  页   跳转

谁帮我看看我的诊断报告啊!!!!

谁帮我看看我的诊断报告啊!!!!

各位高手:
非常感谢您留心我这份系统诊断报告,小菜鸟十万火急等待您的帮助!
该诊断报告由360安全卫士提供 http://www.360safe.com
诊断时间: 2007-10-01  23:40:53
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:511.49MB - 当前可用内存:269.85MB

100 - 未知 - Process: RavMonD.exe [RavMond] -
100 - 未知 - Process: RavStub.exe [Rising RavStub] - E:\RISING\RAV\RavStub.exe /RAVMOND
100 - 未知 - Process: RavTask.exe [RavTimer] -
100 - 未知 - Process: RavMon.exe [RavMon] -
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=Http://www.wg12.com
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.baidu.com/
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.yahoo.com.cn
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.yahoo.com.cn
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=Http://www.wg12.com
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=Http://www.wg12.com
R1 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.addresscn.com/srchasst.htm
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.addresscn.com/srchasst.htm
R1 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=Http://www.wg12.com
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=Http://www.wg12.com
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.google.com/ie
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Use Search Asst=no
O2 - 未知 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - 未知 - BHO: (Thunder Browser Helper) - [XunLeiBHO] - {54EBD539-9BC1-480B-966A-843A333CA162} - C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O8 - 未知 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\geturl.htm
O8 - 未知 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm
O8 - 未知 - Extra context menu item: 添加到QQ表情 - D:\qq2007\AddEmotion.htm
O9 - 未知 - Extra button: 启动迅雷5(HKLM) - C:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - 未知 - Extra button: 浩方对战平台(HKLM) - D:\新建文件夹\浩方对战平台\GameClient.exe
O9 - 未知 - Extra button: JUJU猫(HKLM) - http://www.jujumao.com
O11 - 未知 - Options Group: !
O23 - 未知 - Service: RsCCenter [Rising Process Communication Center] - "E:\Rising\Rav\CCenter.exe" - (running)
O23 - 未知 - Service: RsRavMon [Rising RealTime Monitor] - "E:\RISING\RAV\Ravmond.exe" - (running)
O23 - 未知 - Service: WZCSRVC [启用 IEEE 802.11 适配器的自动配置.] - C:\WINDOWS\system32\rundll32.exe netsrvcs.dll,input - (not running)

=======================================


[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)
最后编辑2007-10-01 23:50:59
分享到:
gototop
 

=======================================

100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量,ms-dos驱动名称类似lpt1以及com,调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统,用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] -
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序,用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell,包括开始菜单、任务栏,桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k imgsvc
100 - 安全 - Process: wdfmgr.exe [windows media player播放器相关程序。] - C:\WINDOWS\system32\wdfmgr.exe
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - F:\360safe\safemon\360Tray.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - F:\360safe\360Safe.exe
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default)=http://www.google.com/search?q=%s
O2 - 安全 - BHO: (QQBrowserHelperObject Class) - [腾讯QQ的一个插件。] - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O4 - 安全 - HKLM\..\Run: [TkBellExe] [是Real Networks产品定时升级检测程序。] "realsched.exe"  -osboot
O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "E:\Rising\Rav\RavTask.exe" -system
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] F:\360safe\safemon\360Tray.exe /start
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - 安全 - Extra button: Windows Messenger(HKLM) - C:\Program Files\Messenger\msmsgs.exe
O16 - 安全 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (Windows升级工具V5) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1156070122671
O16 - 安全 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (中国工商银行个人银行) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe - (running)
O23 - 安全 - Service: ATI Smart [是一个ati图形显示卡驱程的相关进程。] - C:\WINDOWS\system32\ati2sgag.exe - (not running)

=======================================

O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID:Shell extensions for file compression -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID:加密上下文菜单 -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 125440 - 2291e87cc1efbe1650041e9fa5668186
O31 - 未知 - SEApproved: 无效的CLSID:通用即插即用设备 -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {68f32140-2ca3-11d0-acc1-444553540000} - C:\Program Files\ACDSee\picaview.dll - ACD Systems, Ltd. - PicaView 系统扩展 DLL - 2.0.0.78 - 487424 - 053432fff82198e62c0162be6c5c60f9
O31 - 未知 - SEApproved: {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - C:\Program Files\Media Player Classic\rpshell.dll - RealNetworks, Inc. - RealPlayer Shell Extensions - 1.0.1.1980 - 49198 - 8e5fb7062a165ffcb9adca4437f38d9e
O31 - 未知 - SEApproved: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\RavExt.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.9 - 106496 - fa20734a7acabcfe9d727fb343da4e8a
O31 - 未知 - SEApproved: {C14F7681-33D8-11D3-A09B-00500402F30B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ywiper.dll -  -  -  - 0 -
O31 - 未知 - Directory Menu: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\RavExt.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.9 - 106496 - fa20734a7acabcfe9d727fb343da4e8a
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 125440 - 2291e87cc1efbe1650041e9fa5668186
O31 - 未知 - BootExecute: bsmain -  -  -  - 0 -
O31 - 未知 - BootExecute:  -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - sv1_0.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll -  -  -  - 0 -

=======================================

O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\RavExt.dll - Rising Shell Ext Module - fa20734a7acabcfe9d727fb343da4e8a
O40 - Explorer.EXE -  - C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll - DsBho - 5ca9bed83f6f3ca920d7d69933f246cf
O40 - Explorer.EXE - Thunder Networking Technologies,LTD - C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll - DataProcessor - bb0a755bc918ad1737bcee0dfe4f299a
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - E:\Rising\Rav\RSCOMMON.DLL - Rising Common Function Dynamic Link Library - 58432e6c58f1b4c339adc1a79bf864b6

=======================================
gototop
 


O41 - BaseTDI - basetdi - C:\WINDOWS\system32\drivers\basetdi.sys - (running) - basetdi - Beijing Rising Technology Co., Ltd. - 0064810c1b03f2c889130b669a4ce937
O41 - BIOS - I/O Interface driver file - C:\WINDOWS\system32\drivers\BIOS.sys - (running) - I/O Interface driver file - BIOSTAR Group - be5d50529799b9bab6be879ec768b6cf
O41 - ExpScaner - ExpScan.sys - E:\Rising\Rav\ExpScan.sys - (running) - ExpScan.sys -  - 5a690926c7181d5c0b2721016442c9c3
O41 - FTSATA2 - Promise Driver for Windows Server 2003 - C:\WINDOWS\system32\bird\ftsata2.sys - (running) - Promise Driver for Windows Server 2003 - Promise Technology, Inc. - 65b50b303ff74a5517117ba3d25dbe7f
O41 - HookCont - HookCont - E:\Rising\Rav\HookCont.sys - (running) - HookCont - Rising - 3926cb7b005564bc77d6b40235c53817
O41 - HookReg - HookReg - E:\Rising\Rav\HOOKREG.sys - (running) -  -  - 997c395147f8e5b3f714bdd112fe8945
O41 - HookSys - Hooksys - E:\Rising\Rav\HookSys.sys - (running) - Hooksys - Rising - 265b67f85db6226f2439e13e7c1fa8bf
O41 - MEMSCAN - MemScan Driver - E:\Rising\Rav\MemScan.sys - (running) - MemScan Driver - Beijing Rising Technology Co., Ltd. - a909256ef59a987fda249aa3ded01e76
O41 - MSBios - MSBios Device Driver - C:\WINDOWS\system32\drivers\MSBios.sys - (running) - MSBios Device Driver -  - 5d33b588c42bbe6a942f55a0fa2d59ba
O41 - npkcrypt - nProtect KeyCrypt Driver - F:\maoxian\npkcrypt.sys - (running) - nProtect KeyCrypt Driver - INCA Internet Co., Ltd. - db56cf603a61bebfe031cfb3c95db816
O41 - nvp2p - NVIDIA? nForce(TM) PCI to PCI Bridge Driver - C:\WINDOWS\system32\drivers\nvp2p.sys - (running) - NVIDIA? nForce(TM) PCI to PCI Bridge Driver - NVIDIA Corporation - 63e148fb550ee6f3280bdc7b13e0005a
O41 - QKeyService - KeyCrypt - C:\WINDOWS\system32\KeyCrypt.sys - (running) - KeyCrypt -  Tencent Technology (Shenzhen) Company Limited - ecaa6d40a70bee079f3817601bec1692
O41 - RsNTGDI - RsNTGDI - C:\WINDOWS\system32\drivers\RsNTGdi.sys - (running) - RsNTGDI - Beijing Rising Technology Co., Ltd. - 17214e7b192cb93ff014fca1484b97ad
O41 - RSPPSYS - RSPPSYS.SYS - E:\Rising\Rav\rsppsys.sys - (running) - RSPPSYS.SYS - Rising - f38c10d8c21626a4878ea16717e971fa
O41 - 2310_00 - rr2310/2300 Miniport Driver - C:\WINDOWS\system32\bird\2310_00.sys - (not running) - rr2310/2300 Miniport Driver - HighPoint Technologies, Inc. - 5d6bb83030b95418d79861afa339ba3d
O41 - 3WAREDRV - 3WAREDRV - C:\WINDOWS\system32\bird\3wareDrv.sys - (not running) -  -  - 1409d36340affc6c64504fd8df7c78c4
O41 - 3WAREGSM - 3WAREGSM - C:\WINDOWS\system32\bird\3waregsm.sys - (not running) -  -  - 1726340c97d99a2102e40f174ee10b94
O41 - 3WDRV100 - 3WDRV100 - C:\WINDOWS\system32\bird\3wDrv100.sys - (not running) -  -  - 499fc6c753959fac45e5de73f8d8bfcd
O41 - A320RAID - Adaptec HostRAID for Ultra320 SCSI - C:\WINDOWS\system32\bird\a320raid.sys - (not running) - Adaptec HostRAID for Ultra320 SCSI - Adaptec, Inc. - ec8c685100387d4a7a7be2dce922c6d3
O41 - AAC - Adaptec RAID Miniport Driver - C:\WINDOWS\system32\bird\aac.sys - (not running) - Adaptec RAID Miniport Driver - Adaptec, Inc. - 3d5eb200db71476b16d06fbfbe6ef79d
O41 - AACSAS - Adaptec SAS RAID Miniport Driver - C:\WINDOWS\system32\bird\aacsas.sys - (not running) - Adaptec SAS RAID Miniport Driver - Adaptec, Inc. - 871d406ad544ead2c60a92311af0bf2c
O41 - AAR81XX - Adaptec Windows SATA Driver - C:\WINDOWS\system32\bird\aar81xx.sys - (not running) - Adaptec Windows SATA Driver - Adaptec, Inc. - fc3ef9e2ebf9f3f0fd42b112058abd07
O41 - AARSI3X - Adaptec HostRAID for Serial ATA - C:\WINDOWS\system32\bird\AARSI3X.SYS - (not running) - Adaptec HostRAID for Serial ATA - Adaptec, Inc. - b3e94f6babb3c27b9f33316009994016
O41 - ADP94XX - Adaptec Windows SAS/SATA Driver - C:\WINDOWS\system32\bird\adp94XX.sys - (not running) - Adaptec Windows SAS/SATA Driver - Adaptec, Inc. - 94556f2bb109290d8648a9c147d310b8
O41 - ADProt - ADProt - C:\WINDOWS\system32\drivers\AdProt.sys - (not running) -  - 腾讯科技(深圳)有限公司 - f46e6b5c3a176ad864a62eb408453b79
gototop
 

O41 - ADPU320 - Adaptec Win2K/XP/Server2003 Ultra320 SCSI Driver - C:\WINDOWS\system32\bird\ADPU320.SYS - (not running) - Adaptec Win2K/XP/Server2003 Ultra320 SCSI Driver - Adaptec, Inc. - 24d7984858a2c813aa3e4d9a9dd98924
O41 - AEC6260 - ID=0006, 0007 - C:\WINDOWS\system32\bird\AEC6260.sys - (not running) - ID=0006, 0007 - ACARD Technology Corp. - db227bd0ba1f29bb38950f8fd97caa35
O41 - AEC6280 - Miniport driver for AEC6280 - C:\WINDOWS\system32\bird\AEC6280.SYS - (not running) - Miniport driver for AEC6280 - ACARD Technology Corp. - ee2f9e19adc03629fa3f7b13d74a50d3
O41 - AEC67160 - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - C:\WINDOWS\system32\bird\AEC67160.SYS - (not running) - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - ACARD Technology Corp. - e4df365ddba4ec020864912114ddcbcb
O41 - AEC67162 - AEC67162 PCI Ultra3 LVD Adapter Driver - C:\WINDOWS\system32\bird\aec67162.sys - (not running) - AEC67162 PCI Ultra3 LVD Adapter Driver - ACARD Technology Corp. - 8a125de77899c1788cb15debb81904c3
O41 - AEC671X - AEC671X PCI Ultra/W SCSI3 Adapter Driver - C:\WINDOWS\system32\bird\AEC671X.SYS - (not running) - AEC671X PCI Ultra/W SCSI3 Adapter Driver - ACARD Technology Corp. - 9493824293585203212d0157cb2430a7
O41 - AEC6880 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\bird\aec6880.sys - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 31a835900711ecc252504ee7df52cde9
O41 - AEC6897 - RAID miniport driver for AEC6897/AEC6898 - C:\WINDOWS\system32\bird\aec6897.sys - (not running) - RAID miniport driver for AEC6897/AEC6898 - ACARD Technology Corp. - 9941c8c24a5e40a65b347680ad98e000
O41 - AEC68X5 - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - C:\WINDOWS\system32\bird\aec68X5.sys - (not running) - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - ACARD Technology Corp. - 78c4c9ad0da00d3ecfe05b49ee1a769f
O41 - AmdK8 - AMD Processor Driver - C:\WINDOWS\system32\bird\amdk8.sys - (not running) - AMD Processor Driver - Advanced Micro Devices - ebff332f77fc347e5067f11244b06dd2
O41 - aoolbuz - aoolbuz - C:\WINDOWS\system32\drivers\aoolbuz.sys - (not running) -  -  - fc7feb0279747176819070355b48d4ea
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT