最近电脑忽然变地很慢，用ＱＱ会好久无响应．经常掉线后接不上网，打电信一万号去问，人家说正常，这边猫也显示正常，经常是一下午后自动又接上网，用卡卡，魔法兔子扫描均说正常，可我总觉得中了什么病毒了．在线等求高手帮看一下日志～
瑞星卡卡电脑诊断日志 v1.30 (2007-10-12 18:4:25) 北京瑞星科技股份有限公司
注释: [A]表示该文件存在自启动关联;
[M]表示该文件在内存中;
+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
Ati HotKey Poller
[AM] 1. c:\windows\system32\ati2evxx.exe
ose
[A ] 2. c:\program files\common files\microsoft shared\source engine\ose.exe
RfwProxySrv
[A ] 3. c:\program files\rising\rfw\rfwproxy.exe
RfwService
[A ] 4. c:\program files\rising\rfw\rfwsrv.exe
RsCCenter
[A ] 5. c:\program files\rising\rav\ccenter.exe
RsRavMon
[A ] 6. c:\program files\rising\rav\ravmond.exe
UMWdf
[A ] 7. c:\windows\system32\wdfmgr.exe
+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
ALCXWDM
[A ] 8. c:\windows\system32\drivers\alcxwdm.sys
AmdK8
[A ] 9. c:\windows\system32\drivers\amdk8.sys
BaseTDI
[A ] 10. c:\windows\system32\drivers\basetdi.sys
Cdsys
[A ] 11. c:\windows\system32\cdcd.sys
ExpScaner
[A ] 12. c:\program files\rising\rav\expscan.sys
HookCont
[A ] 13. c:\program files\rising\rav\hookcont.sys
HookReg
[A ] 14. c:\program files\rising\rav\hookreg.sys
HookSys
[A ] 15. c:\program files\rising\rav\hooksys.sys
HookUrl
[A ] 16. c:\program files\rising\rfw\hookurl.sys
MEMSCAN
[A ] 17. c:\program files\rising\rav\memscan.sys
mProcRs
[A ] 18. c:\program files\rising\rfw\mprocrs.sys
NPF
[A ] 19. c:\windows\system32\drivers\npf.sys
npkcrypt
[A ] 20. c:\windows\system32\npkcrypt.sys
npkycryp
[A ] 21. c:\windows\system32\npkycryp.sys
RsAntiSpyware
[A ] 22. c:\windows\system32\drivers\rsboot.sys
RsFwDrv
[A ] 23. c:\program files\rising\rfw\rsfwdrv.sys
RsNTGDI
[A ] 24. c:\windows\system32\drivers\rsntgdi.sys
RSPPSYS
[A ] 25. c:\program files\rising\rav\rsppsys.sys
RTL8023xp
[A ] 26. c:\windows\system32\drivers\rtnicxp.sys
Secdrv
[A ] 27. c:\windows\system32\drivers\secdrv.sys
XDva031
[A ] 28. c:\windows\system32\xdva031.sys
XPROTECTOR
[A ] 29. c:\windows\system32\drivers\xprotector.sys
ZSMC301b
[A ] 30. c:\windows\system32\drivers\usbvm31b.sys
+ IE浏览器加载模块
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
{43869BB3-22FD-4F15-9B46-238106BA2F4E}
[AM] 31. f:\辅助工具\魔法兔子\magicset\haokanbar.dll
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
{7369D35A-5B70-4A5B-B789-B25FE09B4AF3}
[AM] 31. f:\辅助工具\魔法兔子\magicset\haokanbar.dll
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
Exec
[A ] 32. f:\辅助工具\迅雷\thunder.exe
+ 资源管理器加载模块
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
text/xml
[AM] 33. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Microsoft Office HTML Icon Handler
[AM] 34. c:\program files\microsoft office\office11\msohev.dll
Web Folders
[A ] 35. c:\program files\common files\microsoft shared\web folders\msonsext.dll
RISING
[AM] 36. c:\windows\system32\ravext.dll
+ 用户登陆自运行项目
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
RavTask
[A ] 37. c:\program files\rising\rav\ravtask.exe
RfwMain
[AM] 38. c:\program files\rising\rfw\rfwmain.exe
BigDogPath
[AM] 39. c:\windows\vm_sti.exe
runeip
[AM] 40. c:\program files\rising\antispyware\runiep.exe
+ 开机执行
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 41. c:\windows\system32\bsmain.exe
+ 映像劫持
+ HKCR\Folder\shell
Super Rabbit CDROM Eject
[A ] 42. f:\辅助工具\魔法兔子\magicset\srcd2.exe
+ HKCR\.html
htmlfile\Edit\Command
[A ] 43. c:\program files\microsoft office\office11\msohtmed.exe
+ HKCR\.htm
htmlfile\Edit\Command
[A ] 43. c:\program files\microsoft office\office11\msohtmed.exe
+ HKCR\.scr
scrfile\nEO iMAGING\Command
[A ] 44. e:\软件\neoimaging.exe
+ 正在运行的进程
+ 000001b4(436) smss.exe
+ 000001f4(500) csrss.exe
+ 00000210(528) winlogon.exe
72C80000[00008000]
[ M] 45. c:\windows\system32\msacm32.drv
+ 0000023c(572) services.exe
+ 00000248(584) lsass.exe
+ 000002dc(732) Ati2evxx.exe
00400000[0006C000]
[AM] 1. c:\windows\system32\ati2evxx.exe
003E0000[00010000]
[ M] 46. c:\windows\system32\ati2edxx.dll
+ 000002e8(744) svchost.exe
+ 00000328(808) svchost.exe
+ 00000360(864) svchost.exe
+ 000003d4(980) svchost.exe
+ 00000480(1152) Explorer.EXE
72C80000[00008000]
[ M] 45. c:\windows\system32\msacm32.drv
10000000[0001B000]
[ M] 47. c:\program files\rising\antispyware\ieprot.dll
03570000[0002C000]
[ M] 48. c:\program files\winrar\rarext.dll
031B0000[0001B000]
[AM] 36. c:\windows\system32\ravext.dll
23700000[0001A000]
[ M] 49. c:\program files\rising\rav\rscommon.dll
36D30000[0001A000]
[ M] 50. c:\program files\microsoft office\office11\mcps.dll
+ 0000051c(1308) spoolsv.exe
+ 00000570(1392) svchost.exe
+ 00000650(1616) RavStub.exe
00400000[00018000]
[ M] 51. c:\program files\rising\rav\ravstub.exe
10000000[0001B000]
[ M] 52. c:\program files\rising\rav\rscommx.dll
23700000[0001A000]
[ M] 49. c:\program files\rising\rav\rscommon.dll
+ 000006bc(1724) RfwMain.exe
00400000[00073000]
[AM] 38. c:\program files\rising\rfw\rfwmain.exe
26600000[0007D000]
[ M] 53. c:\program files\rising\rfw\rsguilib.dll
23700000[0001A000]
[ M] 54. c:\program files\rising\rfw\rscommon.dll
10000000[0000F000]
[ M] 55. c:\program files\rising\rfw\rfwctrl.dll
23800000[0001A000]
[ M] 56. c:\program files\rising\rfw\rsxml.dll
23900000[00031000]
[ M] 57. c:\program files\rising\rfw\pngdll.dll
01120000[0001B000]
[ M] 47. c:\program files\rising\antispyware\ieprot.dll
731B0000[0000A000]
[ M] 58. c:\program files\rising\rfw\psapi.dll
+ 000006c4(1732) VM_STI.EXE
00400000[00010000]
[AM] 39. c:\windows\vm_sti.exe
10000000[00037000]
[ M] 59. c:\windows\system32\vm31bprp.ax
00C30000[0001B000]
[ M] 47. c:\program files\rising\antispyware\ieprot.dll
+ 000006d0(1744) runiep.exe
00400000[00013000]
[AM] 40. c:\program files\rising\antispyware\runiep.exe
00C00000[0001B000]
[ M] 47. c:\program files\rising\antispyware\ieprot.dll
+ 000006e4(1764) ctfmon.exe
10000000[0001B000]
[ M] 47. c:\program files\rising\antispyware\ieprot.dll
+ 000007b8(1976) iexplore.exe
10000000[00109000]
[AM] 31. f:\辅助工具\魔法兔子\magicset\haokanbar.dll
02220000[0001B000]
[ M] 47. c:\program files\rising\antispyware\ieprot.dll
325C0000[00012000]
[AM] 34. c:\program files\microsoft office\office11\msohev.dll
03C90000[0000B000]
[AM] 33. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
73200000[00031000]
[ M] 60. c:\windows\system32\winwb86.ime
72C80000[00008000]
[ M] 45. c:\windows\system32\msacm32.drv
+ 00000bcc(3020) Ras.exe
00400000[00160000]
[ M] 61. c:\program files\rising\antispyware\ras.exe
10000000[00013000]
[ M] 62. c:\program files\rising\antispyware\topsoft.dll
7C140000[00103000]
[ M] 63. c:\program files\rising\antispyware\mfc71.dll
7C340000[00056000]
[ M] 64. c:\program files\rising\antispyware\msvcr71.dll
7C3A0000[0007B000]
[ M] 65. c:\program files\rising\antispyware\msvcp71.dll
00E10000[000BD000]
[ M] 66. c:\program files\rising\antispyware\rasgui.dll
01630000[0001B000]
[ M] 47. c:\program files\rising\antispyware\ieprot.dll
[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Poco 0.31)
