瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 电脑运行时比过去明显变慢但查不出病毒?

1   1  /  1  页   跳转

电脑运行时比过去明显变慢但查不出病毒?

电脑运行时比过去明显变慢但查不出病毒?

我装的是瑞星杀毒、瑞星防火墙,经常升级、查毒,没查出什么,但近来电脑运行时比过去明显变慢了许多,连升级时也会出问题:下载完毕软件会暂时退出,却难以象平时那样顺利启动了,要重复好多次才会完成。
听说正常机子中svchost.exe只有四个,但我数了数,竟有6个
所附的是诊断日志导出,请各位大侠帮助解决吧
瑞星卡卡电脑诊断日志 v1.20 (2007-7-8 14:26:10)  北京瑞星科技股份有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + Win32 Services
    + HKLM\System\CurrentControlSet\Services
      ose
        [AM] 1. c:\program files\common files\microsoft shared\source engine\ose.exe
      Pml Driver HPZ12
        [A ] 2. c:\windows\system32\hpzipm12.exe
      RfwProxySrv
        [A ] 3. d:\program files\rising\rfw\rfwproxy.exe
      RfwService
        [A ] 4. d:\program files\rising\rfw\rfwsrv.exe
      RsCCenter
        [A ] 5. d:\program files\rising\rav\ccenter.exe
      RsRavMon
        [A ] 6. d:\program files\rising\rav\ravmond.exe
      UMWdf
        [AM] 7. c:\windows\system32\wdfmgr.exe
  + Kernel Drivers
    + HKLM\System\CurrentControlSet\Services
      ALCXWDM
        [A ] 8. c:\windows\system32\drivers\alcxwdm.sys
      BaseTDI
        [A ] 9. c:\windows\system32\drivers\basetdi.sys
      CALLKEY_IO
        [A ] 10. c:\program files\onekey\callkey.sys
      ExpScaner
        [A ] 11. d:\program files\rising\rav\expscan.sys
      HookCont
        [A ] 12. d:\program files\rising\rav\hookcont.sys
      HookReg
        [A ] 13. d:\program files\rising\rav\hookreg.sys
      HookSys
        [A ] 14. d:\program files\rising\rav\hooksys.sys
      HookUrl
        [A ] 15. d:\program files\rising\rfw\hookurl.sys
      HpaFilt
        [A ] 16. c:\windows\system32\drivers\hpafilt.sys
      HPZid412
        [A ] 17. c:\windows\system32\drivers\hpzid412.sys
      HPZipr12
        [A ] 18. c:\windows\system32\drivers\hpzipr12.sys
      HPZius12
        [A ] 19. c:\windows\system32\drivers\hpzius12.sys
      ialm
        [A ] 20. c:\windows\system32\drivers\ialmnt5.sys
      IdeBusDr
        [A ] 21. c:\windows\system32\drivers\idebusdr.sys
      IdeChnDr
        [A ] 22. c:\windows\system32\drivers\idechndr.sys
      MEMSCAN
        [A ] 23. d:\program files\rising\rav\memscan.sys
      mProcRs
        [A ] 24. d:\program files\rising\rfw\mprocrs.sys
      Nokia USB Generic
        [A ] 25. c:\windows\system32\drivers\nmwcdc.sys
      Nokia USB Modem
        [A ] 26. c:\windows\system32\drivers\nmwcdcm.sys
      Nokia USB Phone Parent
        [A ] 27. c:\windows\system32\drivers\nmwcd.sys
      RsAntiSpyware
        [A ] 28. c:\windows\system32\drivers\rsboot.sys
      RsFwDrv
        [A ] 29. d:\program files\rising\rfw\rsfwdrv.sys
      RsNTGDI
        [A ] 30. c:\windows\system32\drivers\rsntgdi.sys
      RSPPSYS
        [A ] 31. d:\program files\rising\rav\rsppsys.sys
      Secdrv
        [A ] 32. c:\windows\system32\drivers\secdrv.sys
      {6080A529-897E-4629-A488-ABA0C29B635E}
        [A ] 33. c:\windows\system32\drivers\ialmsbw.sys
      {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}
        [A ] 34. c:\windows\system32\drivers\ialmkchw.sys
  + Winlogon
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      igfxcui
        [A ] 35. c:\windows\system32\igfxsrvc.dll
      WgaLogon
        [AM] 36. c:\windows\system32\wgalogon.dll
  + Internet Explorer
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [A ] 37. c:\windows\system32\kakatool.dll
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 38. d:\program files\tencent\qq\qq.exe
  + Explorer
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [A ] 39. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      mso-offdap
        [A ] 40. c:\program files\common files\microsoft shared\web components\10\owc10.dll
      mso-offdap11
        [A ] 41. c:\program files\common files\microsoft shared\web components\11\owc11.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 42. c:\windows\system32\hticons.dll
      Web Folders
        [A ] 43. c:\program files\common files\microsoft shared\web folders\msonsext.dll
      Microsoft Office HTML Icon Handler
        [A ] 44. c:\program files\microsoft office\office11\msohev.dll
      Portable Media Devices
        [A ] 45. c:\windows\system32\audiodev.dll
      Portable Media Devices Menu
        [A ] 45. c:\windows\system32\audiodev.dll
      诺基亚手机浏览器
        [A ] 46. d:\program files\nokia\nokia pc suite 6\phonebrowser.dll
      Contact View
        [A ] 47. d:\program files\nokia\nokia pc suite 6\contactview.dll
      Message View
        [A ] 48. d:\program files\nokia\nokia pc suite 6\messageview.dll
      Shell Extensions for RealOne Player
        [A ] 49. c:\program files\real\realone player\rpshellext.dll
      WinRAR shell extension
        [A ] 50. d:\program files\winrar\rarext.dll
      RISING
        [AM] 51. c:\windows\system32\ravext.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 51. c:\windows\system32\ravext.dll
      {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
        [AM] 52. c:\windows\system32\shlhook.dll
  + Logon
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      SoundMan
        [AM] 53. c:\windows\soundman.exe
      IgfxTray
        [A ] 54. c:\windows\system32\igfxtray.exe
      runeip
        [AM] 55. c:\program files\rising\antispyware\runiep.exe
      RfwMain
        [AM] 56. d:\program files\rising\rfw\rfwmain.exe
      RavTask
        [A ] 57. d:\program files\rising\rav\ravtask.exe
      IMSCMig
        [A ] 58. c:\program files\common files\microsoft shared\ime\imsc40a\imscmig.exe
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
      RavStub
        [AM] 59. d:\program files\rising\rav\ravstub.exe
  + Boot Execute
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 60. c:\windows\system32\bsmain.exe
  + Image Hijacks
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 61. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\Print\Command
        [A ] 61. c:\program files\microsoft office\office11\msohtmed.exe
    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 61. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\Print\Command
        [A ] 61. c:\program files\microsoft office\office11\msohtmed.exe
    + HKCR\.mp3
      RealPlayer.MP3.6\open\Command
        [A ] 62. c:\program files\real\realone player\realplay.exe
  + Print Monitor
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      hpzsnt07
        [AM] 63. c:\windows\system32\hpzsnt07.dll
      Microsoft Document Imaging Writer Monitor
        [AM] 64. c:\windows\system32\mdimon.dll
+ 其他自启动项目
  + C:\WINDOWS\Tasks
    FRU Task #Hewlett-Packard#hp psc 1200 series#1171285293.job
      [A ] 65. c:\program files\hewlett-packard\digital imaging\bin\hpqfrucl.exe
    WebReg 20070707210402.job
      [A ] 66. c:\program files\hewlett-packard\digital imaging\bin\hpqwrg.exe
+ 系统活动模块
  + 00000144(324) soundman.exe
    00400000[0000D000]
      [AM] 53. c:\windows\soundman.exe
    10000000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 00000170(368) runiep.exe
    00400000[00012000]
      [AM] 55. c:\program files\rising\antispyware\runiep.exe
    00C00000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 000001c0(448) smss.exe
  + 000001f8(504) csrss.exe
  + 00000210(528) winlogon.exe
    01380000[0003B000]
      [AM] 36. c:\windows\system32\wgalogon.dll
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
  + 0000023c(572) services.exe
  + 00000248(584) lsass.exe
  + 000002e4(740) svchost.exe
  + 0000031c(796) svchost.exe
  + 0000036c(876) svchost.exe
    50E60000[0000C000]
      [ M] 69. c:\windows\system32\wups2.dll
  + 00000384(900) alg.exe
  + 000003b4(948) ctfmon.exe
    10000000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 000003e0(992) svchost.exe
  + 00000414(1044) svchost.exe
  + 00000520(1312) Explorer.EXE
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
    01A10000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 000005a8(1448) spoolsv.exe
    10000000[0002F000]
      [AM] 63. c:\windows\system32\hpzsnt07.dll
    00AF0000[00008000]
      [AM] 64. c:\windows\system32\mdimon.dll
    00B00000[00008000]
      [ M] 70. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
  + 00000668(1640) RavStub.exe
    00400000[00018000]
      [AM] 59. d:\program files\rising\rav\ravstub.exe
    10000000[0001B000]
      [ M] 71. d:\program files\rising\rav\rscommx.dll
    23700000[0001A000]
      [ M] 72. d:\program files\rising\rav\rscommon.dll
  + 000006ec(1772) RfwMain.exe
    00400000[00073000]
      [AM] 56. d:\program files\rising\rfw\rfwmain.exe
    26600000[0007D000]
      [ M] 73. d:\program files\rising\rfw\rsguilib.dll
    23700000[0001A000]
      [ M] 74. d:\program files\rising\rfw\rscommon.dll
    10000000[0000F000]
      [ M] 75. d:\program files\rising\rfw\rfwctrl.dll
    23800000[0001A000]
      [ M] 76. d:\program files\rising\rfw\rsxml.dll
    23900000[00031000]
      [ M] 77. d:\program files\rising\rfw\pngdll.dll
    01150000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 00000730(1840) svchost.exe
  + 00000790(1936) wdfmgr.exe
    01000000[0000C000]
      [AM] 7. c:\windows\system32\wdfmgr.exe
  + 00000890(2192) Ras.exe
    00400000[0013D000]
      [ M] 78. c:\program files\rising\antispyware\ras.exe
    10000000[000A0000]
      [ M] 79. c:\program files\rising\antispyware\rasgui.dll
    01490000[0001B000]
      [AM] 51. c:\windows\system32\ravext.dll
    014C0000[00011000]
      [AM] 52. c:\windows\system32\shlhook.dll
    01550000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
  + 00000ac8(2760) wuauclt.exe
    50E60000[0000C000]
      [ M] 69. c:\windows\system32\wups2.dll
    509E0000[00042000]
      [ M] 80. c:\windows\system32\mucltui.dll
    10000000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 00000b6c(2924) OSE.EXE
    30000000[00017000]
      [AM] 1. c:\program files\common files\microsoft shared\source engine\ose.exe
最后编辑2007-07-08 14:58:09
分享到:
gototop
 

http://www.kztechs.com/sreng/download.html 下载System Repair Engineer
1 解压缩sreng2.zip
2 运行SREng.exe
3 智能扫描=》扫描=》保存报告
4 把日志中的报告完整拷贝贴上来,不要修改(一次发不完请分次发上来)
5 扫日志的时候尽量把不必要的软件关闭 如QQ TM等
6 提示:这里下载冰刃(1.2版本):http://forum.ikaka.com/topic.asp?board=67&artid=8283060(如果你用的到的话)
gototop
 

OSE专杀
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT