瑞星卡卡电脑诊断日志 v1.20 (2007-7-11 9:44:56)  北京瑞星科技股份有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + Win32 Services
    + HKLM\System\CurrentControlSet\Services
      NVSvc
        [AM] 1. c:\windows\system32\nvsvc32.exe
      ose
        [A ] 2. c:\program files\common files\microsoft shared\source engine\ose.exe
      RsCCenter
        [A ] 3. c:\program files\rising\rav\ccenter.exe
      RsRavMon
        [A ] 4. c:\program files\rising\rav\ravmond.exe
      UMWdf
        [AM] 5. c:\windows\system32\wdfmgr.exe
  + Kernel Drivers
    + HKLM\System\CurrentControlSet\Services
      AmdK8
        [A ] 6. c:\windows\system32\drivers\amdk8.sys
      BaseTDI
        [A ] 7. c:\windows\system32\drivers\basetdi.sys
      CnsStd
        [A ] 8. c:\windows\system32\drivers\cnsstd.sys
      ExpScaner
        [A ] 9. c:\program files\rising\rav\expscan.sys
      HDAudBus
        [A ] 10. c:\windows\system32\drivers\hdaudbus.sys
      HookCont
        [A ] 11. c:\program files\rising\rav\hookcont.sys
      HookReg
        [A ] 12. c:\program files\rising\rav\hookreg.sys
      HookSys
        [A ] 13. c:\program files\rising\rav\hooksys.sys
      IntcAzAudAddService
        [A ] 14. c:\windows\system32\drivers\rtkhdaud.sys
      kaphpf
        [A ] 15. c:\windows\system32\drivers\kaphpf.sys
      MEMSCAN
        [A ] 16. c:\program files\rising\rav\memscan.sys
      nvata
        [A ] 17. c:\windows\system32\drivers\nvata.sys
      RsAntiSpyware
        [A ] 18. c:\windows\system32\drivers\rsboot.sys
      RsNTGDI
        [A ] 19. c:\windows\system32\drivers\rsntgdi.sys
      RSPPSYS
        [A ] 20. c:\program files\rising\rav\rsppsys.sys
      RTL8023xp
        [A ] 21. c:\windows\system32\drivers\rtnicxp.sys
      Secdrv
        [A ] 22. c:\windows\system32\drivers\secdrv.sys
      WINIO
        [A ] 23. g:\winio.sys
  + Explorer
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [A ] 24. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 25. c:\windows\system32\hticons.dll
      WinRAR shell extension
        [AM] 26. c:\program files\winrar\rarext.dll
      Shell Extensions for RealOne Player
        [A ] 27. c:\program files\real\realplayer\rpshell.dll
      Microsoft Office HTML Icon Handler
        [A ] 28. c:\program files\microsoft office\office11\msohev.dll
      Web Folders
        [A ] 29. c:\program files\common files\microsoft shared\web folders\msonsext.dll
      Portable Media Devices
        [AM] 30. c:\windows\system32\audiodev.dll
      Portable Media Devices Menu
        [AM] 30. c:\windows\system32\audiodev.dll
      NvCpl DesktopContext Class
        [AM] 31. c:\windows\system32\nvcpl.dll
      Play on my TV helper
        [AM] 31. c:\windows\system32\nvcpl.dll
      Desktop Explorer
        [AM] 32. c:\windows\system32\nvshell.dll
      Desktop Explorer Menu
        [AM] 32. c:\windows\system32\nvshell.dll
      nView Desktop Context Menu
        [AM] 32. c:\windows\system32\nvshell.dll
      RISING
        [AM] 33. c:\windows\system32\ravext.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
        [AM] 34. c:\windows\system32\shlhook.dll
  + Logon
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      RavTask
        [A ] 35. c:\program files\rising\rav\ravtask.exe
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
      KKDelay
        [A ] 36. c:\program files\rising\antispyware\runonce.exe
  + Boot Execute
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 37. c:\windows\system32\bsmain.exe
        [A ] 38. c:\windows\system32\kknative.exe
  + Image Hijacks
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 39. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\Print\Command
        [A ] 39. c:\program files\microsoft office\office11\msohtmed.exe
    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 39. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\Print\Command
        [A ] 39. c:\program files\microsoft office\office11\msohtmed.exe
    + HKCR\.mp3
      Audio.MP3\open\Command
        [A ] 40. c:\program files\ttplayer\ttplayer.exe
      Audio.MP3\PlayList\Command
        [A ] 40. c:\program files\ttplayer\ttplayer.exe
  + Print Monitor
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      HPLJ1020LM
        [AM] 41. c:\windows\system32\zlhp1020.dll
+ 系统活动模块
  + 00000114(276) wdfmgr.exe
    01000000[0000C000]
      [AM] 5. c:\windows\system32\wdfmgr.exe
  + 000001e8(488) smss.exe
  + 00000220(544) csrss.exe
  + 00000238(568) winlogon.exe
    10000000[000AE000]
      [ M] 42. c:\windows\system32\h3v4pro.ime
    72C80000[00008000]
      [ M] 43. c:\windows\system32\msacm32.drv
  + 00000264(612) services.exe
  + 00000270(624) lsass.exe
  + 00000304(772) svchost.exe
  + 00000334(820) svchost.exe
  + 000003a8(936) svchost.exe
  + 000003f0(1008) svchost.exe
  + 0000044c(1100) svchost.exe
  + 000004e8(1256) Explorer.EXE
    10000000[000AE000]
      [ M] 42. c:\windows\system32\h3v4pro.ime
    72C80000[00008000]
      [ M] 43. c:\windows\system32\msacm32.drv
    02450000[0076D000]
      [AM] 31. c:\windows\system32\nvcpl.dll
    02350000[00036000]
      [ M] 44. c:\windows\system32\nvrszhc.dll
    02C00000[00036000]
      [ M] 45. c:\windows\system32\nvapi.dll
    02C40000[00073000]
      [AM] 32. c:\windows\system32\nvshell.dll
    02CD0000[0002C000]
      [AM] 26. c:\program files\winrar\rarext.dll
    03100000[0001B000]
      [AM] 33. c:\windows\system32\ravext.dll
    031B0000[0001B000]
      [ M] 46. c:\program files\rising\antispyware\ieprot.dll
    03230000[00011000]
      [AM] 34. c:\windows\system32\shlhook.dll
    23700000[0001A000]
      [ M] 47. c:\program files\rising\rav\rscommon.dll
    096C0000[0007A000]
      [AM] 30. c:\windows\system32\audiodev.dll
    73900000[0002D000]
      [ M] 48. c:\windows\system32\jpwb.ime
  + 00000580(1408) spoolsv.exe
    10000000[0001B000]
      [AM] 41. c:\windows\system32\zlhp1020.dll
    00AE0000[00007000]
      [ M] 49. c:\windows\system32\zlm.dll
    715E0000[0000D000]
      [ M] 50. c:\windows\system32\spool\prtprocs\w32x86\imfprint.dll
    71600000[00007000]
      [ M] 51. c:\windows\system32\imf32.dll
    715D0000[00006000]
      [ M] 52. c:\windows\system32\ztag32.dll
    71130000[00015000]
      [ M] 53. c:\windows\system32\zspool.dll
  + 0000060c(1548) ctfmon.exe
    10000000[000AE000]
      [ M] 42. c:\windows\system32\h3v4pro.ime
    01130000[0001B000]
      [ M] 46. c:\program files\rising\antispyware\ieprot.dll
  + 00000624(1572) alg.exe
  + 00000760(1888) nvsvc32.exe
    00400000[0002C000]
      [AM] 1. c:\windows\system32\nvsvc32.exe
    009F0000[00036000]
      [ M] 45. c:\windows\system32\nvapi.dll
    10000000[000AE000]
      [ M] 42. c:\windows\system32\h3v4pro.ime
  + 00000770(1904) RsAgent.exe
    00400000[0003A000]
      [ M] 54. c:\program files\rising\rav\rsagent.exe
    10000000[0001B000]
      [ M] 55. c:\program files\rising\rav\rscommx.dll
    00B50000[000AE000]
      [ M] 42. c:\windows\system32\h3v4pro.ime
    00CE0000[0001B000]
      [ M] 46. c:\program files\rising\antispyware\ieprot.dll
  + 000007bc(1980) AgentSvr.exe
    10000000[000AE000]
      [ M] 42. c:\windows\system32\h3v4pro.ime
    72C80000[00008000]
      [ M] 43. c:\windows\system32\msacm32.drv
    01B30000[0001B000]
      [ M] 46. c:\program files\rising\antispyware\ieprot.dll
  + 00000958(2392) runiep.exe
    00400000[00012000]
      [ M] 56. c:\program files\rising\antispyware\runiep.exe
    10000000[000AE000]
      [ M] 42. c:\windows\system32\h3v4pro.ime
    01030000[0001B000]
      [ M] 46. c:\program files\rising\antispyware\ieprot.dll
  + 00000ac0(2752) Ras.exe
    00400000[0013E000]
      [ M] 57. c:\program files\rising\antispyware\ras.exe
    10000000[000A3000]
      [ M] 58. c:\program files\rising\antispyware\rasgui.dll
    01320000[000AE000]
      [ M] 42. c:\windows\system32\h3v4pro.ime
    01A60000[0001B000]
      [ M] 46. c:\program files\rising\antispyware\ieprot.dll
    02760000[0002F000]
      [ M] 59. c:\program files\rising\antispyware\engine.dll
    01DA0000[00012000]
      [ M] 60. c:\program files\rising\antispyware\zip.dll
    72C80000[00008000]
      [ M] 43. c:\windows\system32\msacm32.drv
    039D0000[00019000]
      [ M] 61. c:\program files\rising\rav\ravscrch.dll

【回复“我想买套”的帖子】

日志中没有发现问题。