瑞星卡卡电脑诊断日志 v1.30 (2008-9-8 11:14:46) 北京瑞星信息技术有限公司
注释: [A]表示该文件存在自启动关联;
[M]表示该文件在内存中;
+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
ccosm
[AM] 1. d:\常用软件\暴风影视\stormliv.exe
北京暴风网际科技有限公司
暴风影音媒体控制中心
.text,.rdata,.data,.rsrc,
NVSvc
[AM] 2. c:\windows\system32\nvsvc32.exe
NVIDIA Corporation
NVIDIA Driver Helper Service, Version 177.92
.text,.rdata,.data,.rsrc,
ose
[A ] 3. c:\program files\common files\microsoft shared\source engine\ose.exe
Microsoft Corporation
Office Source Engine
.text,.data,.rsrc,
RfwProxySrv
[AM] 4. d:\常用软件\系统工具\瑞星个人防火墙\rfwproxy.exe
Beijing Rising Information Technology Co., Ltd.
Rising Personal Proxy Service
.text,.rdata,.data,.rsrc,
RfwService
[AM] 5. d:\常用软件\系统工具\瑞星个人防火墙\rfwsrv.exe
Beijing Rising Information Technology Co., Ltd.
Rising Personal FireWall Service
.text,.rdata,.data,.rsrc,
RsCCenter
[AM] 6. d:\常用软件\系统工具\瑞星杀毒软件\ccenter.exe
Beijing Rising Information Technology Co., Ltd.
CCenter
.text,.rdata,.data,.rsrc,
RsRavMon
[AM] 7. d:\常用软件\系统工具\瑞星杀毒软件\ravmond.exe
Beijing Rising Information Technology Co., Ltd.
Rising Realtime Moniter
.text,.rdata,.data,.rsrc,
UMWdf
[A ] 8. c:\windows\system32\wdfmgr.exe
Microsoft Corporation
Windows User Mode Driver Manager
.text,.data,.rsrc,
+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
ALCXWDM
[A ] 9. c:\windows\system32\drivers\alcxwdm.sys
Realtek Semiconductor Corp.
Realtek AC'97 Audio Driver (WDM)
.text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc,
amdide
[A ] 10. c:\windows\system32\drivers\amdide.sys
Advanced Micro Devices
AMD PCI SATA/IDE Bus Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
AmdK8
[A ] 11. c:\windows\system32\drivers\amdk8.sys
Advanced Micro Devices
AMD Processor Driver
.text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc,
AmdLLD
[A ] 12. c:\windows\system32\drivers\amdlld.sys
AMD, Inc.
AMD Low Level Device Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookCont
[A ] 13. c:\windows\system32\drivers\hookcont.sys
Beijing Rising Information Technology Co., Ltd.
HookCont
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookNtos
[A ] 14. c:\windows\system32\drivers\hookntos.sys
Beijing Rising Information Technology Co., Ltd.
HookNtos
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookReg
[A ] 15. c:\windows\system32\drivers\hookreg.sys
Beijing Rising Information Technology Co., Ltd.
HookReg
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookSys
[A ] 16. c:\windows\system32\drivers\hooksys.sys
Beijing Rising Information Technology Co., Ltd.
Hooksys
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookUrl
[A ] 17. d:\常用软件\系统工具\瑞星个人防火墙\hookurl.sys
Beijing Rising Information Technology Co., Ltd.
URL Filter Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
RfwBase
[A ] 18. c:\windows\system32\drivers\rfwbase.sys
Beijing Rising Information Technology Co., Ltd.
net base driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
RsFwDrv
[A ] 19. d:\常用软件\系统工具\瑞星个人防火墙\rsfwdrv.sys
Beijing Rising Information Technology Co., Ltd.
Rules Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
RsNTGDI
[A ] 20. c:\windows\system32\drivers\rsntgdi.sys
Beijing Rising Information Technology Co., Ltd.
RsNTGDI
.text,.rdata,INIT,.rsrc,.reloc,
RTL8023xp
[A ] 21. c:\windows\system32\drivers\rtnicxp.sys
Realtek Semiconductor Corporation
Realtek 10/100/1000 NDIS 5.1 Driver
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
Secdrv
[A ] 22. c:\windows\system32\drivers\secdrv.sys
Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
Macrovision SECURITY Driver
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
SiFilter
[A ] 23. c:\windows\system32\drivers\siwinacc.sys
Silicon Image, Inc.
Windows Accelerator Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
TesSafe
[A ] 24. c:\windows\system32\tessafe.sys
TENCENT
TesSafe NT Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
VM30xx86
[A ] 25. c:\windows\system32\drivers\vm30xx86.sys
Vimicro Corporation
Vimicro 301 AVStream driver
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
WINIO
[A ] 26. f:\bak\装机必备\最新驱动程序\winio.sys
.text,.data,INIT,.reloc,
ZSMC301b
[A ] 27. c:\windows\system32\drivers\usbvm31b.sys
Vimicro Corporation
Video and Capture Device Driver
.text,.rdata,.data,PAGECONS,INIT,.rsrc,.reloc,
+ IE浏览器加载模块
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[AM] 28. d:\常用软件\下载工具\讯雷5.8.1.507\comdlls\tdatonce_now.dll
Thunder Networking Technologies,LTD
迅雷浏览器高级特性支持模块
.text,.rdata,.data,.rsrc,.reloc,
{889D2FEB-5411-4565-8998-1DD2C5261283}
[AM] 29. d:\常用软件\下载工具\讯雷5.8.1.507\comdlls\xunleibho_now.dll
Thunder Networking Technologies,LTD
XunLeiBHO
.text,.rdata,.data,.rsrc,.reloc,
{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
[AM] 30. c:\windows\system32\urlfilter.dll
Beijing Rising Information Technology Co., Ltd.
Rising AntiSpyware UrlFilter Module
.text,.rdata,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
Exec
[A ] 31. d:\常用软件\下载工具\讯雷5.8.1.507\thunder.exe
Thunder Networking Technologies,LTD
.text,.rdata,.data,.rsrc,
Exec
[A ] 32. c:\windows\network diagnostic\xpnetdiag.exe
Microsoft Corporation
Network Diagnostic for Windows XP
.text,.data,.rsrc,
Exec
[A ] 33. c:\program files\messenger\msmsgs.exe
Microsoft Corporation
Windows Messenger
.text,.data,.rsrc,
+ 资源管理器加载模块
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
text/xml
[A ] 34. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
Microsoft Corporation
Microsoft Office XML MIME Filter
.text,.data,.cdata,.rsrc,.reloc,
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
mso-offdap
[A ] 35. c:\program files\common files\microsoft shared\web components\10\owc10.dll
Microsoft Corporation
Microsoft Office XP Web Components
.text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
{4b218e3e-bc98-4770-93d3-2731b9329278}
[A ] 36. c:\windows\inf\ie.inf
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 37. c:\windows\system32\hticons.dll
Hilgraeve, Inc.
HyperTerminal Applet Library
.text,.data,.rsrc,.reloc,
Portable Media Devices
[A ] 38. c:\windows\system32\audiodev.dll
Microsoft Corporation
便携媒体设备命令行解释器扩展
.text,.data,.rsrc,.reloc,
Portable Media Devices Menu
[A ] 38. c:\windows\system32\audiodev.dll
Microsoft Corporation
便携媒体设备命令行解释器扩展
.text,.data,.rsrc,.reloc,
NvCpl DesktopContext Class
[AM] 39. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.orpc,.rdata,.data,CONST,.rsrc,.reloc,
Desktop Explorer
[AM] 40. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
Desktop Explorer Menu
[AM] 40. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
nView Desktop Context Menu
[AM] 40. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
Microsoft Office HTML Icon Handler
[AM] 41. c:\program files\microsoft office\office11\msohev.dll
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.rsrc,.reloc,
Web Folders
[A ] 42. c:\program files\common files\microsoft shared\web folders\msonsext.dll
Microsoft Corporation
Microsoft Web Folders
.text,.data,.rsrc,.reloc,
Microsoft Office Outlook Desktop Icon Handler
[A ] 43. c:\program files\microsoft office\office11\mlshext.dll
Microsoft Corporation
Microsoft Shell Extension Library
.text,.data,.cdata,.rsrc,.reloc,
Microsoft Office Outlook Custom Icon Handler
[A ] 44. c:\program files\microsoft office\office11\olkfstub.dll
Microsoft Corporation
Outlook Shell Hook for Start/Find
.text,.data,.cdata,.rsrc,.reloc,
WinRAR shell extension
[A ] 45. c:\program files\winrar\rarext.dll
.text,.data,.tls,.idata,.edata,.rsrc,.reloc,
RISING
[AM] 46. c:\windows\system32\ravext.dll
Beijing Rising Information Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
Play on my TV helper
[AM] 39. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.orpc,.rdata,.data,CONST,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{32CD708B-60A7-4C00-9377-D73EAA495F0F}
[AM] 46. c:\windows\system32\ravext.dll
Beijing Rising Information Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
+ 用户登陆自运行项目
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
RavTask
[AM] 47. d:\常用软件\系统工具\瑞星杀毒软件\ravtask.exe
Beijing Rising Information Technology Co., Ltd.
RavTimer
.text,.rdata,.data,.rsrc,
RfwMain
[AM] 48. d:\常用软件\系统工具\瑞星个人防火墙\rfwmain.exe
Beijing Rising Information Technology Co., Ltd.
Rising Personal FireWall Main Program
.text,.rdata,.data,.rsrc,
runeip
[AM] 49. d:\常用软件\系统工具\瑞星安全助手\rstray.exe
Beijing Rising Information Technology Co., Ltd.
RSTray
.text,.rdata,.data,.rsrc,
wdcertm_ccb
[AM] 50. c:\windows\system32\watchdata\watchdata ccb csp v3.2\wdcertm_ccb.exe
Beijing WatchData System Co., Ltd.
WatchSAFE后台管理程序3.2
.text,.rdata,.data,.idata,.rsrc,.reloc,
SoundMan
[AM] 51. c:\windows\soundman.exe
Realtek Semiconductor Corp.
Realtek Sound Manager
.text,.rdata,.data,.sxdata,.rsrc,
nwiz
[A ] 52. c:\windows\system32\nwiz.exe
.text,.rdata,.data,.rsrc,
BigDogPath
[AM] 53. c:\windows\vm301snap.exe
Vimicro
Vimicro
.text,.rdata,.data,.rsrc,
Domino
[AM] 54. c:\windows\domino.exe
.text,.rdata,.data,.rsrc,
+ 开机执行
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 55. c:\windows\system32\bsmain.exe
Beijing Rising Information Technology Co., Ltd.
Rising Antivirus 2008
.text,.rdata,.data,.rsrc,.reloc,
+ 映像劫持
+ HKCR\.html
htmlfile\Edit\Command
[A ] 56. c:\program files\microsoft office\office11\msohtmed.exe
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.cdata,.rsrc,
htmlfile\Print\Command
[A ] 56. c:\program files\microsoft office\office11\msohtmed.exe
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.cdata,.rsrc,
+ HKCR\.htm
htmlfile\Edit\Command
[A ] 56. c:\program files\microsoft office\office11\msohtmed.exe
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.cdata,.rsrc,
htmlfile\Print\Command
[A ] 56. c:\program files\microsoft office\office11\msohtmed.exe
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.cdata,.rsrc,
+ 程序初始化和已知动态连接库
+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs
[AM] 57. c:\windows\system32\kmon.dll
Beijing Rising Information Technology Co., Ltd.
KaKa Monitors
.text,.rdata,.data,.rsrc,.reloc,
+ 打印机监控
+ HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
Microsoft Document Imaging Writer Monitor
[AM] 58. c:\windows\system32\mdimon.dll
Microsoft Corporation
Microsoft? Document Imaging
.text,.data,.rsrc,.reloc,
+ 正在运行的进程
+ 000000d0(208) Explorer.EXE
60000000[00074000]
[AM] 57. c:\windows\system32\kmon.dll
Beijing Rising Information Technology Co., Ltd.
KaKa Monitors
.text,.rdata,.data,.rsrc,.reloc,
70000000[00019000]
[ M] 59. d:\常用软件\系统工具\瑞星个人防火墙\ijt_base.dll
Beijing Rising Information Technology Co., Ltd.
Inject Base
.text,.rdata,.data,.rsrc,.reloc,
75000000[0000F000]
[ M] 60. d:\常用软件\系统工具\瑞星个人防火墙\olemon.dll
Beijing Rising Information Technology Co., Ltd.
Ole Mon Dll
.text,.rdata,.data,.rsrc,.reloc,
72C80000[00008000]
[ M] 61. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
02250000[00D18000]
[AM] 39. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.orpc,.rdata,.data,CONST,.rsrc,.reloc,
01C80000[00037000]
[ M] 62. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,
02F70000[00076000]
[ M] 63. c:\windows\system32\nvapi.dll
NVIDIA Corporation
NVIDIA NVAPI Library, Version 177.92
.text,.rdata,.data,.idata,.rsrc,.reloc,
02FF0000[00073000]
[AM] 40. c:\windows\system32\nvshell.dll
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
10000000[0001C000]
[AM] 46. c:\windows\system32\ravext.dll
Beijing Rising Information Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
03E50000[00088000]
[ M] 64. c:\program files\internet explorer\mui\0804\shdoclc.dll
Microsoft Corporation
Shell Doc Object and Control Library
.rsrc,.reloc,
+ 00000144(324) RavTask.exe
00400000[00034000]
[AM] 47. d:\常用软件\系统工具\瑞星杀毒软件\ravtask.exe
Beijing Rising Information Technology Co., Ltd.
RavTimer
.text,.rdata,.data,.rsrc,
10000000[0001F000]
[ M] 65. d:\常用软件\系统工具\瑞星杀毒软件\proccom.dll
Beijing Rising Information Technology Co., Ltd.
ProcessC Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00940000[00024000]
[ M] 66. d:\常用软件\系统工具\瑞星杀毒软件\rscommx2.dll
Beijing Rising Information Technology Co., Ltd.
RsCommX2
.text,.rdata,.data,.rsrc,.reloc,
23700000[00028000]
[ M] 67. d:\常用软件\系统工具\瑞星杀毒软件\rscommon.dll
Beijing Rising Information Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00BA0000[0000E000]
[ M] 68. d:\常用软件\系统工具\瑞星杀毒软件\rsappmgr.dll
Beijing Rising Information Technology Co., Ltd.
Rising Application Manager
.text,.rdata,.data,.rsrc,.reloc,
08BC0000[00030000]
[ M] 69. d:\常用软件\系统工具\瑞星杀毒软件\cfgdll.dll
Beijing Rising Information Technology Co., Ltd.
CfgDll
.text,.rdata,.data,.rsrc,.reloc,
70000000[00019000]
[ M] 59. d:\常用软件\系统工具\瑞星个人防火墙\ijt_base.dll
Beijing Rising Information Technology Co., Ltd.
Inject Base
.text,.rdata,.data,.rsrc,.reloc,
75000000[0000F000]
[ M] 60. d:\常用软件\系统工具\瑞星个人防火墙\olemon.dll
Beijing Rising Information Technology Co., Ltd.
Ole Mon Dll
.text,.rdata,.data,.rsrc,.reloc,
+ 00000158(344) Ravmon.exe
00400000[00067000]
[ M] 70. d:\常用软件\系统工具\瑞星杀毒软件\ravmon.exe
Beijing Rising Information Technology Co., Ltd.
Rising realtime monitor shell
.text,.rdata,.data,.rsrc,
7C140000[00103000]
[ M] 71. c:\windows\system32\mfc71.dll
Microsoft Corporation
MFCDLL Shared Library - Retail Version
.text,.data,.rsrc,.reloc,
用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; (R1 1.5))