瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】中了病毒,请各位帮忙看一下!!!

1   1  /  1  页   跳转

【求助】中了病毒,请各位帮忙看一下!!!

【求助】中了病毒,请各位帮忙看一下!!!

各位高手:
非常感谢您留心我这份系统诊断报告,小菜鸟十万火急等待您的帮助!
该诊断报告由360安全卫士提供 http://www.360safe.com
诊断时间: 2007-04-07  18:18:00
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:254MB - 当前可用内存:44MB

100 - 中危险 - Process: Logo1_.exe [怀疑为恶意程序或病毒,请使用杀毒软件进行查杀。] - C:\WINDOWS\Logo1_.exe
100 - 未知 - Process: rundll32.exe [] - C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\iarr\pavy.dll,Service
100 - 未知 - Process: PMJ151LA.BIN [Panasonic DVC Web Camera] - C:\WINDOWS\PMJ151LA.BIN
100 - 未知 - Process: runiep.exe [Rising AntiSpyware Monitor] - D:\Program Files\Rising\AntiSpyware\runiep.exe
100 - 未知 - Process: QQ.exe [QQ] - C:\Program Files\Tencent\QQ2006\QQ.exe
100 - 未知 - Process: DiskFree_mt01.1.exe [] - C:\WINDOWS\temp\DiskFree_mt01.1.exe
100 - 未知 - Process: ieagent-dist.exe [] - C:\WINDOWS\TEMP\ieagent-dist.exe
100 - 未知 - Process: wsttrs.exe [] - C:\WINDOWS\wsttrs.exe @C:\Program Files\Internet Explorer\9Sy.exe@3560
100 - 未知 - Process: QQMusic.exe [QQ音乐播放器7.1] - C:\Program Files\Tencent\QQ2006\QQMusic.exe
100 - 未知 - Process: RavCopy.exe [RavCopy Application] -
O2 - 未知 - BHO: (skii) - [] - {75DB47DC-176F-4C42-A272-370B384D9AB7} - C:\PROGRA~1\iarr\mxvv.dll
O4 - 未知 - HKLM\..\Run: [upxdnd] [] C:\DOCUME~1\new\LOCALS~1\Temp\upxdnd.exe
O4 - 未知 - HKLM\..\Run: [cmdbcs] [] C:\WINDOWS\cmdbcs.exe
O4 - 未知 - HKLM\..\RunOnce: [KKDelay] [] D:\Program Files\Rising\AntiSpyware\RunOnce.exe
O8 - 未知 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ2006\AddToNetDisk.htm
O8 - 未知 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ2006\AddPanel.htm
O8 - 未知 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ2006\AddEmotion.htm
O8 - 未知 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ2006\SendMMS.htm
O9 - 未知 - Extra button: 微软(HKLM) - http://www.microsoft.com/china/index.htm
O9 - 未知 - Extra button: 腾讯QQ(HKLM) - C:\Program Files\Tencent\QQ2006\QQ.EXE
O9 - 未知 - Extra button: Real.com(HKLM) - C:\WINDOWS\system32\Shdocvw.dll
O23 - 未知 - Service: 205611D4 [205611D4] -  - (not running)
O23 - 未知 - Service: 50D1F92C [50D1F92C] - C:\WINDOWS\system32\50D1F92C.EXE -service - (not running)
O23 - 未知 - Service: 54D28E68 [54D28E68] -  - (not running)
O23 - 未知 - Service: 617D38A [617D38A] - C:\WINDOWS\system32\617D38A.EXE -service - (not running)
O23 - 未知 - Service: AA803AE4 [AA803AE4] -  - (not running)
O23 - 未知 - Service: BITS [在后台传输客户端和服务器之间的数据。如果禁用了 BITS,一些功能,如 Windows Update,就无法正常运行。] - C:\WINDOWS\system32\svchost.exe -k netsvcs - (not running)
O23 - 未知 - Service: cnll [Vsn cnll Service] - C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\iarr\pavy.dll,Service - (running)
O23 - 未知 - Service: DDC5CAA4 [DDC5CAA4] -  - (not running)
O23 - 未知 - Service: edfscv [dsdrsf] -  - (not running)
O23 - 未知 - Service: kkduusfsd [kkduusfsd] -  - (not running)
O23 - 未知 - Service: PMJ151LA [PMJ151 AutoLaunch Service] - C:\WINDOWS\PMJ151LA.BIN - (running)
O23 - 未知 - Service: WindowsCheckSetup [Windows自动监测服务。如果被停止服务,Windows SysWindowsCheckSetup Servers 服务进行无法操作。如果被禁用服务,任何依赖它的服务将无法启动。] -  - (not running)
O23 - 未知 - Service: WmdmPWD [Windows 用户登陆程序] - C:\WINDOWS\system32\Svchost.exe -k WmdmPWD - (not running)
最后编辑2007-04-07 18:38:58
分享到:
gototop
 

=======================================

100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量,ms-dos驱动名称类似lpt1以及com,调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统,用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] -
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: RavMonD.exe [瑞星杀毒软件的一部分。] -
100 - 安全 - Process: rfwsrv.exe [瑞星出品的防火墙程序,用于抵御黑客攻击。] -
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序,用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] - C:\WINDOWS\system32\nvsvc32.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k imgsvc
100 - 安全 - Process: RavStub.exe [瑞星出品的杀毒软件相关程序。] - C:\Program Files\Rising\Rav\RavStub.exe
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell,包括开始菜单、任务栏,桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: rfwmain.exe [瑞星公司出品的瑞星杀毒软件个人防火墙程序,用于抵御黑客攻击。] - c:\program files\rising\rfw\RfwMain.exe
100 - 安全 - Process: RavTask.exe [瑞星出品的杀毒软件相关程序。] -
100 - 安全 - Process: OrderReminder.exe [惠普出品的打印机的墨盒状态提示程序。] - C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
100 - 安全 - Process: RavMon.exe [瑞星杀毒软件防火墙。] -
100 - 安全 - Process: vsnpstd3.exe [一款数码相机相关程序。] - C:\WINDOWS\vsnpstd3.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\tools\下载文件\360safe\safemon\360Tray.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell,包括开始菜单、任务栏,桌面和文件管理。] - C:\WINDOWS\explorer.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\tools\下载文件\360safe\360Safe.exe
100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe
100 - 安全 - Process: RavCopy.exe [瑞星防火墙硬盘备份部分。] -
100 - 安全 - Process: Setup.exe [瑞星杀毒软件的相关安装程序。] -
100 - 安全 - Process: Setup.exe [瑞星杀毒软件的相关安装程序。] -
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=about:blank
O2 - 安全 - BHO: (腾讯QQ) - [腾讯QQ的一个插件。] - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\WINDOWS\QQIEHelper.dll
O4 - 安全 - HKLM\..\Run: [runeip] [卡卡上网安全助手相关程序。] D:\Program Files\Rising\AntiSpyware\runiep.exe
O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 安全 - HKLM\..\Run: [RfwMain] [瑞星防火墙程序,抵御黑客攻击。] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 安全 - HKLM\..\Run: [OrderReminder] [惠普公司相关支持程序。] C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
O4 - 安全 - HKLM\..\Run: [snpstd3] [摄像驱动相关程序。] C:\WINDOWS\vsnpstd3.exe
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] D:\tools\下载文件\360safe\safemon\360Tray.exe /start
O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 安全 - HKLM\..\RunOnce: [360Safe] [360安全卫士] Rundll32.exe D:\tools\下载文件\360safe\AntiAdwa.dll,KillAdware
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - 安全 - Extra button: Windows Messenger(HKLM) -
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - 安全 - Service: Macromedia Licensing Service [是macromedia公司网页三剑客软件的注册程序。] - "C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe" - (not running)
O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running)
O23 - 安全 - Service: RfwService [是瑞星个人防火墙相关程序。] - c:\program files\rising\rfw\rfwsrv.exe - (running)
O23 - 安全 - Service: RsCCenter [是瑞星杀毒软件控制台相关程序。] - "C:\Program Files\Rising\Rav\CCenter.exe" - (running)
O23 - 安全 - Service: RsRavMon [是瑞星杀毒软件相关监控程序。] - "C:\Program Files\Rising\Rav\Ravmond.exe" - (running)

gototop
 


O40 - csrss.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - winlogon.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - winlogon.exe - Microsoft Corporation - C:\WINDOWS\system32\50D1F92C.DLL -  - df9d9fd147f049dea93214835e31d8b9
O40 - services.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - lsass.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - svchost.exe - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\AntiSpyware\ieprot.dll - IE Protector - 369c1d78953b00cf8306e7028654092d
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - rundll32.exe -  - C:\PROGRA~1\iarr\pavy.dll -  - 76ee092f8f75c0fd4c306435ab2c1a9f
O40 - rundll32.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484
O40 - rundll32.exe - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\AntiSpyware\ieprot.dll - IE Protector - 369c1d78953b00cf8306e7028654092d
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\50D1F92C.DLL -  - df9d9fd147f049dea93214835e31d8b9
O40 - Explorer.EXE -  - C:\WINDOWS\system32\nospri.dll -  - 93474e41c5e9681f90b1f3bb34db259c
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\zwongd07.dll - C - 052a6c2d61798261d1d74c4c3b16f773
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\mmutilsl.dll - GDI Interface Communication - 69d063c2a956f7dc9700b060802c7e0b
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\bbtufcvc.dll - Usi Support - af8b7a961dd7c44a46fa0dd9d4e26d8f
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\AntiSpyware\ieprot.dll - IE Protector - 369c1d78953b00cf8306e7028654092d
O40 - Explorer.EXE -  - C:\WINDOWS\system32\jaqpkr76.dll -  - 009eb19055782a128fc0aee9958212d5
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\RSCOMMON.DLL - Rising Common Function Dynamic Link Library - 58432e6c58f1b4c339adc1a79bf864b6
O40 - Explorer.EXE -  - C:\WINDOWS\system32\winform.dll -  - 035a8a62047e6965e7c82befff3b0a81
O40 - Explorer.EXE -  - C:\DOCUME~1\new\LOCALS~1\Temp\upxdnd.dll -  - b4a415ed21bde96f1413a153c0c96d86
O40 - Explorer.EXE -  - C:\WINDOWS\system32\cmdbcs.dll -  - 5ed5ecef6451cf265602f6f31ec15df8
O40 - Explorer.EXE -  - C:\PROGRA~1\iarr\mxvv.dll -  - 76ee092f8f75c0fd4c306435ab2c1a9f
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\RavExt.dll - Rising Shell Ext Module - fa20734a7acabcfe9d727fb343da4e8a
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\50D1F92C.DLL -  - df9d9fd147f049dea93214835e31d8b9
O40 - explorer.exe -  - C:\WINDOWS\system32\jaqpkr76.dll -  - 009eb19055782a128fc0aee9958212d5
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\bbtufcvc.dll - Usi Support - af8b7a961dd7c44a46fa0dd9d4e26d8f
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\617D38A.DLL -  - 7add0b3fd72c4fbc9bd22adc1ec19484

gototop
 

C:\WINDOWS\Logo1_.exe
威金 http://forum.ikaka.com/topic.asp?board=28&artid=8279261
专杀 查杀ing..
gototop
 

=======================================

O41 - BaseTDI - basetdi - C:\WINDOWS\system32\drivers\basetdi.sys - (running) - basetdi - Beijing Rising Technology Co., Ltd. - 0064810c1b03f2c889130b669a4ce937
O41 - ExpScaner - ExpScan.sys - C:\Program Files\Rising\Rav\ExpScan.sys - (running) - ExpScan.sys -  - 5a690926c7181d5c0b2721016442c9c3
O41 - HookCont - HookCont - C:\Program Files\Rising\Rav\HookCont.sys - (running) - HookCont - Rising - 3926cb7b005564bc77d6b40235c53817
O41 - HookReg - HookReg - C:\Program Files\Rising\Rav\HOOKREG.sys - (running) -  -  - 997c395147f8e5b3f714bdd112fe8945
O41 - HookSys - Hooksys - C:\Program Files\Rising\Rav\HookSys.sys - (running) - Hooksys - Rising - 265b67f85db6226f2439e13e7c1fa8bf
O41 - HookUrl - HookUrl - C:\Program Files\Rising\Rfw\HookUrl.sys - (running) - HookUrl - Beijing Rising Technology Co., Ltd. - 93768ab1e576eef2de107eddbc586e9b
O41 - jaqpkr76 - Kernel - C:\WINDOWS\system32\drivers\jaqpkr76.sys - (running) - Kernel - Microsoft Corporation - b32fb64076c6ace6b35b0874f523f4cc
O41 - MEMSCAN - MemScan Driver - C:\Program Files\Rising\Rav\MemScan.sys - (running) - MemScan Driver - 瑞星软件有限公司 - 9811b256023dd985cbc5bad790e5bb84
O41 - mmutilsl - mmutilsl - C:\WINDOWS\system32\drivers\mmutilsl.sys - (running) -  -  -
O41 - mProcRs - Rising Personal FireWall  mprocrs.sys - c:\program files\Rising\Rfw\mProcRs.sys - (running) - Rising Personal FireWall  mprocrs.sys - Beijing Rising Technology Co., Ltd. - f19fe6ccade903d285208247056daf6a
O41 - npkcrypt - nProtect KeyCrypt Driver - C:\Program Files\Tencent\QQ2006\npkcrypt.sys - (running) - nProtect KeyCrypt Driver - INCA Internet Co., Ltd. - 8bcb281a2540e7aff0cd00f9878fe21f
O41 - PMJ151NM - Panasonic DVC Web Camera - C:\WINDOWS\system32\drivers\PMJ151NM.sys - (running) - Panasonic DVC Web Camera - Matsushita Electric Industrial Co. ,Ltd, - d7cd8506ae89cca8cc21fa5f139fb465
O41 - RsAntiSpyware - RsBoot - C:\WINDOWS\system32\drivers\RsBoot.sys - (running) - RsBoot - Beijing Rising - c79cf8d2f5225a2216fe3b91ceb8b225
O41 - RsFwDrv - nt_fwdrv - C:\Program Files\Rising\Rfw\rsfwdrv.sys - (running) - nt_fwdrv - Beijing Rising Technology Co., Ltd. - 1869e55cfacff0ff786d4ba6d2340ee2
O41 - RsNTGDI - RsNTGDI - C:\WINDOWS\system32\drivers\RsNTGdi.sys - (running) - RsNTGDI - Beijing Rising Technology Co., Ltd. - 17214e7b192cb93ff014fca1484b97ad
O41 - RSPPSYS - RSPPSYS.SYS - C:\Program Files\Rising\Rav\rsppsys.sys - (running) - RSPPSYS.SYS - Rising - f38c10d8c21626a4878ea16717e971fa
O41 - zwongd07 - zwongd07 - C:\WINDOWS\system32\drivers\zwongd07.sys - (running) -  -  -
O41 - a320raid - Adaptec HostRAID for Ultra320 SCSI - C:\WINDOWS\system32\drivers\a320raid.sys - (not running) - Adaptec HostRAID for Ultra320 SCSI - Adaptec, Inc. - 0532434d53314ee8858b7bfdbe761837
O41 - AAC - Adaptec RAID Miniport Driver - C:\WINDOWS\system32\drivers\aac.sys - (not running) - Adaptec RAID Miniport Driver - Adaptec, Inc. - f9ee3c7a185d121b145164cb10c057a7
O41 - aar1210 - Adaptec HostRAID for Serial ATA - C:\WINDOWS\system32\drivers\aar1210.sys - (not running) - Adaptec HostRAID for Serial ATA - Adaptec, Inc. - 316945ebc9398f222a6fff3d04d41fcb
O41 - aec6210 - aec6210 - C:\WINDOWS\system32\drivers\AEC6210.sys - (not running) -  - ACARD Technology Corp. - 38e6c035e89fb8b079301e71b2523f3d
O41 - aec6260 - ID=0006, 0007 - C:\WINDOWS\system32\drivers\AEC6260.sys - (not running) - ID=0006, 0007 - ACARD Technology Corp. - db227bd0ba1f29bb38950f8fd97caa35
O41 - aec6280 - AEC6280 Miniport Driver - C:\WINDOWS\system32\drivers\AEC6280.SYS - (not running) - AEC6280 Miniport Driver - ACARD Technology Corp. - 71c3ab81b22c151a2e2ba97ec53430ca
O41 - AEC6290 - AEC6280 Miniport Driver - C:\WINDOWS\system32\drivers\AEC6290.SYS - (not running) - AEC6280 Miniport Driver - ACARD Technology Corp. - 71c3ab81b22c151a2e2ba97ec53430ca
O41 - AEC67160 - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - C:\WINDOWS\system32\drivers\AEC67160.SYS - (not running) - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - ACARD Technology Corp. - f2b276e8f4057dd1ba2bd40ecaf1ac57
O41 - AEC671X - AEC671X PCI Ultra/W SCSI3 Adapter Driver - C:\WINDOWS\system32\drivers\AEC671X.SYS - (not running) - AEC671X PCI Ultra/W SCSI3 Adapter Driver - ACARD Technology Corp. - 9493824293585203212d0157cb2430a7
O41 - AEC6880 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\drivers\AEC6880.SYS - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 415f252cee34bbf839acbcadb2bc85ce
O41 - AEC6890 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\drivers\AEC6890.SYS - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 415f252cee34bbf839acbcadb2bc85ce
O41 - aec68x5 - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - C:\WINDOWS\system32\drivers\aec68X5.sys - (not running) - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - ACARD Technology Corp. - 6275261ebb499358ff5c5cf901f7ad6c
O41 - bbxzyw86 - bbxzyw86 - C:\WINDOWS\System32\DRIVERS\bbxzyw86.sys - (not running) -  -  -
O41 - Cap7134 - Cap7134 - C:\WINDOWS\system32\DRIVERS\Cap7134.sys - (not running) -  -  -
O41 - eizcod48 - eizcod48 - C:\WINDOWS\System32\DRIVERS\eizcod48.sys - (not running) -  -  -
O41 - exndxe64 - exndxe64 - C:\WINDOWS\System32\DRIVERS\exndxe64.sys - (not running) -  -  -
O41 - FASTSX - Promise FastTRAK SX4/SX4000 Driver for WindowsXP - C:\WINDOWS\system32\drivers\fastsx.sys - (not running) - Promise FastTRAK SX4/SX4000 Driver for WindowsXP - Promise Technology, Inc. - 21ab10bc1c78a68cdf0cbd304dbfb7fa
O41 - fasttrak - Promise FastTrak Series Driver for WinXP - C:\WINDOWS\system32\drivers\fasttrak.sys - (not running) - Promise FastTrak Series Driver for WinXP - Promise Technology, Inc. - eb1c078d99cc081c1d2ae3a19e2284cc
O41 - fasttx2k - Promise Driver for Windows XP - C:\WINDOWS\system32\drivers\fasttx2k.sys - (not running) - Promise Driver for Windows XP - Promise Technology, Inc. - 5d95724d3c3923449c02be1106657bcd
O41 - fasttx2k2 - Promise FastTrak Series Driver for WindowsXP - C:\WINDOWS\system32\drivers\fasttx2k2.sys - (not running) - Promise FastTrak Series Driver for WindowsXP - Promise Technology, Inc. - c127946de07bbb00f69f78923577dae4
O41 - fwhojk60 - fwhojk60 - C:\WINDOWS\System32\DRIVERS\fwhojk60.sys - (not running) -  -  -
O41 - Hpt366 - ATAPI IDE Miniport Driver - C:\WINDOWS\system32\drivers\hpt366.sys - (not running) - ATAPI IDE Miniport Driver - Microsoft Corporation - 4e4c5dde3eb4e9392c9659818790ed6c
O41 - HPT371 - HPT3xx Miniport Driver - C:\WINDOWS\system32\drivers\hpt371.sys - (not running) - HPT3xx Miniport Driver - HighPoint Technologies, Inc. - cac96d5be76a3d20c41759b12167c09b
O41 - hpt374 - HPT374 Miniport Driver - C:\WINDOWS\system32\drivers\hpt374.sys - (not running) - HPT374 Miniport Driver - HighPoint Technologies, Inc. - ccee236589335d118e22d0fe400233a6
O41 - hpt3xx - HPT3xx Miniport Driver - C:\WINDOWS\system32\drivers\hpt3xx.sys - (not running) - HPT3xx Miniport Driver - HighPoint Technologies, Inc. - 9f2dfe54317b1cd38143686935a278d9
O41 - hptmv - hptmv Miniport Driver - C:\WINDOWS\system32\drivers\hptmv.sys - (not running) - hptmv Miniport Driver - HighPoint Technologies, Inc. - 4f92f14095d52ca870039b192a3319b0
O41 - hptpro - Hptpro - C:\WINDOWS\system32\drivers\hptpro.sys - (not running) - Hptpro - HighPoint Technologies, Inc. - 977716f8a6edda986fdb41de52bdb689
O41 - iaStor - Intel Application Accelerator driver - C:\WINDOWS\system32\drivers\iastor.sys - (not running) - Intel Application Accelerator driver - Intel Corporation - bdce6b54e1d7d8399175a83a02274b7a
O41 - ksa - ksa - C:\DOCUME~1\new\LOCALS~1\Temp\ksawmj - (not running) -  -  -
gototop
 

O41 - leaort61 - leaort61 - C:\WINDOWS\System32\DRIVERS\leaort61.sys - (not running) -  -  -
O41 - m5228 - M5228 ATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5228.sys - (not running) - M5228 ATA RAID Controller Driver - ALi Corporation. - 4bc8aa133cdb516392ac76d9948138bc
O41 - m5281 - M5281 SATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5281.sys - (not running) - M5281 SATA RAID Controller Driver - ALi Corporation - 3bb7e4f0d880c57b75ab2197f6e21897
O41 - mnwats82 - mnwats82 - C:\WINDOWS\system32\\drivers\\mnwats82.sys - (not running) -  -  -
O41 - mraid2k - MEGARAID SCSI Controller Driver for Windows 2000 PAE - C:\WINDOWS\system32\drivers\MRAID2K.SYS - (not running) - MEGARAID SCSI Controller Driver for Windows 2000 PAE - American Megatrends, Inc. - a7bb113a38b04c0296bfa76b41d92f95
O41 - NPF - npf - C:\WINDOWS\system32\drivers\npf.sys - (not running) - npf - CACE Technologies - d21fee8db254ba762656878168ac1db6
O41 - npkycryp - npkycryp - C:\Program Files\QQ2006\npkycryp.sys - (not running) -  -  -
O41 - ntczee88 - ntczee88 - C:\WINDOWS\system32\\drivers\\ntczee88.sys - (not running) -  -  -
O41 - NvAtaBus - NVIDIA? nForce(TM) IDE Performance Driver - C:\WINDOWS\system32\drivers\NvAtaBus.sys - (not running) - NVIDIA? nForce(TM) IDE Performance Driver - NVIDIA Corporation - a1f88223528aadbb6374132becbbdcc1
O41 - oogpgf79 - oogpgf79 - C:\WINDOWS\System32\DRIVERS\oogpgf79.sys - (not running) -  -  -
O41 - oztkgd05 - oztkgd05 - C:\WINDOWS\System32\DRIVERS\oztkgd05.sys - (not running) -  -  -
O41 - PhTVTune - PhTVTune - C:\WINDOWS\system32\DRIVERS\PhTVTune.sys - (not running) -  -  -
O41 - PNP649R - IDE RAID miniport driver - C:\WINDOWS\system32\drivers\PnP649r.sys - (not running) - IDE RAID miniport driver - CMD Technology, Inc. - 5a5a6a1003eecd15df2f383972e86188
O41 - Pnp680 - DMA capable ATA miniport driver - C:\WINDOWS\system32\drivers\Pnp680.sys - (not running) - DMA capable ATA miniport driver - Silicon Image, Inc. - 023657a82e76ad98f3fafbd1ec425a71
O41 - Pnp680r - DMA capable ATA RAID miniport driver  - C:\WINDOWS\system32\drivers\PnP680r.sys - (not running) - DMA capable ATA RAID miniport driver  - Silicon Image, Inc - a1d7a9214b71ebbb6f31cb84aac15525
O41 - RAIDSRC - Intel(r)/ICP Miniport Driver - C:\WINDOWS\system32\drivers\raidsrc.sys - (not running) - Intel(r)/ICP Miniport Driver - Intel/ICP - 4ba4a4ac184ed0cf15faa62e2375883f
O41 - S150SX8 - Promise SATAII150 SX8 Driver for WindowsXP - C:\WINDOWS\system32\drivers\S150sx8.sys - (not running) - Promise SATAII150 SX8 Driver for WindowsXP - Promise Technology, Inc. - 13d1e68b006ae72276079f5fcbe5a471
O41 - SI3112 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3112.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - 77f5cf403657f5086df7f4ed1f497cbb
O41 - SI3112r - Serial ATA RAID Miniport Driver - C:\WINDOWS\system32\drivers\Si3112r.sys - (not running) - Serial ATA RAID Miniport Driver - Silicon Image, Inc - d89dde61753a3b5d64e15a1a925588cc
O41 - SI3114 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3114.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - 9c67403714df81c8bdf177ce440c9d84
O41 - SI3114r - SATARAID Miniport Driver - C:\WINDOWS\system32\drivers\Si3114r.sys - (not running) - SATARAID Miniport Driver - Silicon Image, Inc - 53ee85fa0b48eb64031a190adf23c8d8
O41 - SI3124 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3124.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - da09038c6d12cf69031b515741250f7b
O41 - SI3124r - SATARAID miniport driver (PRE-RELEASE) - C:\WINDOWS\system32\drivers\Si3124r.sys - (not running) - SATARAID miniport driver (PRE-RELEASE) - Silicon Image, Inc - 0c71855057883e63ca2c19736cbab018
O41 - SiFilter - Windows Accelerator Driver - C:\WINDOWS\system32\drivers\SiWinAcc.sys - (not running) - Windows Accelerator Driver - Silicon Image, Inc. - 1582e88c6f340627247b1ecd00fa84fe
O41 - SISIDE - SiS PCI Mini IDE Driver - C:\WINDOWS\system32\drivers\siside.sys - (not running) - SiS PCI Mini IDE Driver - Silicon Integrated Systems Corp. - b4485881bd8aed9b157a2e6cf43c2d51
O41 - SiSRaid - SiS RAID Miniport Driver - C:\WINDOWS\system32\drivers\sisraid.sys - (not running) - SiS RAID Miniport Driver - Silicon Integrated Systems - 4c597e4de6edf6453990059ba0eac7d0
O41 - SiSRaid1 - SiS RAID Miniport Driver - C:\WINDOWS\system32\drivers\sisraid1.sys - (not running) - SiS RAID Miniport Driver - Silicon Integrated Systems - 52192d1a30ae56a203c047213b0f596b
O41 - SISRAIDS - SiS RAID Miniport Driver - C:\WINDOWS\system32\drivers\SISRAIDS.SYS - (not running) - SiS RAID Miniport Driver - Silicon Integrated Systems Corp - 46cecd8f57e63bdb9d6c9f130be2d97c
O41 - SNPSTD3 - PC Camera driver - C:\WINDOWS\system32\drivers\snpstd3.sys - (not running) - PC Camera driver -  -
O41 - sptrak - Promise SuperTrak Family Driver for WindowsNT - C:\WINDOWS\system32\drivers\Sptrak.sys - (not running) - Promise SuperTrak Family Driver for WindowsNT - Promise Technology, Inc. - b04bdc24f80ecb319f64189194399989
O41 - SYMMPI - LSI Logic Fusion-MPT MiniPort Driver (ScsiPort) - C:\WINDOWS\system32\drivers\symmpi.sys - (not running) - LSI Logic Fusion-MPT MiniPort Driver (ScsiPort) - LSI Logic - 3adffb39782474652f4ea2cf1345b340
O41 - tdfgxz38 - tdfgxz38 - C:\WINDOWS\System32\DRIVERS\tdfgxz38.sys - (not running) -  -  -
O41 - tojnpk90 - tojnpk90 - C:\WINDOWS\System32\DRIVERS\tojnpk90.sys - (not running) -  -  -
O41 - tqskra76 - tqskra76 - C:\WINDOWS\System32\DRIVERS\tqskra76.sys - (not running) -  -  -
O41 - ttmcbv66 - ttmcbv66 - C:\WINDOWS\System32\DRIVERS\ttmcbv66.sys - (not running) -  -  -
O41 - u - u - C:\DOCUME~1\new\LOCALS~1\Temp\ulfp - (not running) -  -  -
O41 - ucotpc19 - ucotpc19 - C:\WINDOWS\System32\DRIVERS\ucotpc19.sys - (not running) -  -  -
O41 - ULSATAS - Promise SATAII150 Series Driver for Win2003 - C:\WINDOWS\system32\drivers\ulsatas.sys - (not running) - Promise SATAII150 Series Driver for Win2003 - Promise Technology, Inc. - 0c5583d3bb02e78e639eac234e97d515
O41 - umzmnp35 - umzmnp35 - C:\WINDOWS\System32\DRIVERS\umzmnp35.sys - (not running) -  -  -
O41 - uxykaw51 - uxykaw51 - C:\WINDOWS\system32\\drivers\\uxykaw51.sys - (not running) -  -  -
O41 - viamraid - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32 - C:\WINDOWS\system32\drivers\viamraid.sys - (not running) - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32 - VIA Technologies inc,.ltd - f199939205dccc7836ae5ab8b5dd5e83
O41 - viapdsk - VIA VT4149 PATA Driver - C:\WINDOWS\system32\drivers\viapdsk.sys - (not running) - VIA VT4149 PATA Driver - VIA Technologies, Inc. - f314359357b6960eb727620470ffc9cf
O41 - viaraid - VT6410 RAID DRIVER FOR WINXP - C:\WINDOWS\system32\drivers\viaraid.sys - (not running) - VT6410 RAID DRIVER FOR WINXP - VIA Technologies inc,.ltd - 29d02cee410d4ed80014bbf0fc98bd2d
O41 - viasraid - VIA SATA RAID DRIVER FOR WINXP - C:\WINDOWS\system32\drivers\viasraid.sys - (not running) - VIA SATA RAID DRIVER FOR WINXP - VIA Technologies inc,.ltd - ebe101c01d80a42868f57b327be1b564
O41 - vmscsi - VMware SCSI Controller - C:\WINDOWS\system32\drivers\vmscsi.sys - (not running) - VMware SCSI Controller - VMware, Inc. - cd8a1f04836111dc0e6c0cd904b3c660
O41 - voaoav62 - voaoav62 - C:\WINDOWS\System32\DRIVERS\voaoav62.sys - (not running) -  -  -
O41 - vylqxh14 - vylqxh14 - C:\WINDOWS\System32\DRIVERS\vylqxh14.sys - (not running) -  -  -
O41 - wvkytt99 - wvkytt99 - C:\WINDOWS\System32\DRIVERS\wvkytt99.sys - (not running) -  -  -

=======================================
360Safe.exe=3.2.1.1001
AntiAdwa.dll=3.2.0.1001
AntiEng.dll=3.0.2.2000
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
safelive.exe=1.0.0.2007
live.dll=1.0.0.1011
gototop
 

=======================================
操作历史报告:
----------查杀恶意软件历史----------

2007-03-31 19:52
查杀恶意软件 - Cnnic中文上网 - 危险 - C:\Program Files\CNNIC\Cdn
查杀恶意软件 - cmdbcs - 危险 - C:\WINDOWS\system32\cmdbcs.dll
查杀恶意软件 - 广告软件ASN.2 - 危险 - C:\WINDOWS\system32\50D1F92C.DLL
查杀恶意软件 - msccrt - 危险 - C:\WINDOWS\system32\msccrt.dll
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\drivers\acpidisk.sys
查杀恶意软件 - cpush广告软件 - 危险 -
查杀恶意软件 - ystemKb木马 - 危险 -
查杀恶意软件 - WinStdup - 危险 -
查杀恶意软件 - WinMyFavor Class - 危险 - C:\WINDOWS\system32\MyFavor.dll
查杀恶意软件 - 伪realshed恶意程序 - 危险 - C:\dwnSetup

2007-03-31 19:54
查杀恶意软件 - 易趣购物按钮 - 危险 - C:\Documents and Settings\All Users\Favorites\易趣购物.lnk
查杀恶意软件 - 彩信通 - 危险 - C:\PROGRA~1\osxx\yjhh.dll
查杀恶意软件 - wsttrs - 危险 - C:\WINDOWS\system32\wsttrs.dll
查杀恶意软件 - 一起搜 - 危险 - C:\PROGRA~1\eqiso\cneqiso.dll

2007-03-31 19:56
查杀恶意软件 - Cnnic中文上网 - 危险 - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\mprmsgse.axz
查杀恶意软件 - 伪realshed恶意程序 - 危险 - C:\dwnSetup

2007-03-31 20:20
查杀恶意软件 - Cnnic中文上网 - 危险 - C:\Program Files\CNNIC\Cdn
查杀恶意软件 - 广告软件ASN.2 - 危险 - C:\WINDOWS\system32\50D1F92C.DLL
查杀恶意软件 - cpush广告软件 - 危险 -
查杀恶意软件 - ystemKb木马 - 危险 -
查杀恶意软件 - WinStdup - 危险 -
查杀恶意软件 - WinMyFavor Class - 危险 - C:\WINDOWS\system32\MyFavor.dll
查杀恶意软件 - 彩信通 - 危险 -

2007-03-31 20:28
查杀恶意软件 - 广告软件ASN.2 - 危险 -
2007-03-31 20:29
查杀恶意软件 - 一起搜 - 危险 -

2007-04-01 14:53
查杀恶意软件 - cnwin Class - 危险 -
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\drivers\acpidisk.sys
查杀恶意软件 - cpush广告软件 - 危险 - C:\Program Files\Common Files\CPUSH
查杀恶意软件 - 伪realshed恶意程序 - 危险 - C:\dwnSetup

2007-04-01 15:35
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\mprmsgse.axz

2007-04-01 18:27
查杀恶意软件 - cpush广告软件 - 危险 - C:\PROGRA~1\COMMON~1\CPUSH\cpush.dll

2007-04-02 12:38
查杀恶意软件 - cnwin Class - 危险 -
查杀恶意软件 - 广告软件ASN.2 - 危险 - C:\WINDOWS\system32\50D1F92C.DLL
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\drivers\acpidisk.sys
查杀恶意软件 - cpush广告软件 - 危险 - C:\PROGRA~1\COMMON~1\CPUSH\cpush.dll

2007-04-02 13:10
查杀恶意软件 - cnwin Class - 危险 -
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\mprmsgse.axz
查杀恶意软件 - 伪realshed恶意程序 - 危险 - C:\dwnSetup
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF

2007-04-02 13:13
查杀恶意软件 - cnwin Class - 危险 -
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF

2007-04-02 18:20
查杀恶意软件 - 广告软件ASN.2 - 危险 -
查杀恶意软件 - cpush广告软件 - 危险 -
2007-04-02 18:41
查杀恶意软件 - cnwin Class - 危险 -
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\mprmsgse.axz
查杀恶意软件 - cpush广告软件 - 危险 - C:\Program Files\Common Files\CPUSH
查杀恶意软件 - WinStdup - 危险 -
查杀恶意软件 - 伪realshed恶意程序 - 危险 - C:\dwnSetup
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF
查杀恶意软件 - 彩信通 - 危险 -
查杀恶意软件 - PCTools - 危险 - C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\PCTools\pctools.dll

2007-04-03 11:56
查杀恶意软件 - 广告软件ASN.2 - 危险 - C:\WINDOWS\system32\50D1F92C.DLL
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF

2007-04-03 11:59
查杀恶意软件 - 广告软件ASN.2 - 危险 -
2007-04-03 12:26
查杀恶意软件 - 广告软件ASN.2 - 危险 - C:\WINDOWS\system32\AA803AE4.DLL
查杀恶意软件 - cpush广告软件 - 危险 - C:\PROGRA~1\COMMON~1\CPUSH\cpush.dll
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF

2007-04-04 21:50
查杀恶意软件 - 广告软件ASN.2 - 危险 -
查杀恶意软件 - cpush广告软件 - 危险 -
2007-04-06 16:48
查杀恶意软件 - SVCH0ST.exe - 危险 - C:\WINDOWS\system32\SVCH0ST.exe
查杀恶意软件 - cnwin Class - 危险 -
查杀恶意软件 - cmdbcs - 危险 - C:\WINDOWS\system32\cmdbcs.dll
查杀恶意软件 - msccrt - 危险 - C:\WINDOWS\system32\msccrt.dll
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\drivers\acpidisk.sys
查杀恶意软件 - 伪Windows XP Vista - 危险 -
查杀恶意软件 - cpush广告软件 - 危险 - C:\PROGRA~1\COMMON~1\CPUSH\cpush0.dll
查杀恶意软件 - upxdnd木马 - 危险 - C:\DOCUME~1\new\LOCALS~1\Temp\upxdnd.exe
查杀恶意软件 - WinStdup - 危险 -
查杀恶意软件 - 伪realshed恶意程序 - 危险 - C:\dwnSetup
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF
查杀恶意软件 - 彩信通 - 危险 - C:\PROGRA~1\osxx\yjhh.dll
查杀恶意软件 - PCTools - 危险 - C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\PCTools\pctools.dll
查杀恶意软件 - ravshell - 危险 -

2007-04-06 16:57
查杀恶意软件 - Cnnic中文上网 - 危险 -
查杀恶意软件 - 广告软件ASN.2 - 危险 - C:\WINDOWS\system32\bkkdud.dll
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\mprmsgse.axz
查杀恶意软件 - cpush广告软件 - 危险 - C:\Program Files\Common Files\CPUSH
查杀恶意软件 - IE777 - 危险 - C:\DOCUME~1\new\LOCALS~1\Temp\packet.dll
查杀恶意软件 - WinStdup - 危险 -
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF

2007-04-06 17:34
查杀恶意软件 - 彩信通 - 危险 -
查杀恶意软件 - SVCH0ST.exe - 危险 -
查杀恶意软件 - PCTools - 危险 -
查杀恶意软件 - 广告软件ASN.2 - 危险 -
查杀恶意软件 - cpush广告软件 - 危险 -
2007-04-06 17:39
查杀恶意软件 - acpidisk驱动 - 危险 - C:\WINDOWS\system32\mprmsgse.axz
查杀恶意软件 - WinStdup - 危险 -

2007-04-07 17:51
查杀恶意软件 - 广告软件ASN.2 - 危险 -
查杀恶意软件 - WinStdup - 危险 -
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF
查杀恶意软件 - 彩信通 - 危险 -


----------插件卸载操作历史----------

2007-03-31 21:30
插件管理 - Alexa工具栏 -
2007-04-01 18:15
插件管理 - Alexa工具栏 -
插件管理 - Yahoo奇摩搜尋Bar -
2007-04-01 18:44
插件管理 - 搜狗工具条 -
2007-04-06 16:58
插件管理 - 变身广告a - C:\AUTORUN.INF

----------全面诊断修复历史----------

2007-04-01 18:17
O3 - 未知 - 第三方IE工具栏 -
O3 - 未知 - 第三方IE工具栏 -
2007-04-01 18:17
R0 - 未知 - IE首页 - HKLM\Software\Microsoft\Internet Explorer\Main
2007-04-01 18:17
O2 - 未知 - 浏览器辅助对象(BHO) - C:\WINDOWS\system32\wiasoervc.dll
O2 - 未知 - skii - C:\PROGRA~1\iarr\mxvv.dll
2007-04-01 18:45
O23 - 未知 - kkduusfsd - C:\WINDOWS\system32\kkduusfsd.exe -service
2007-04-06 16:48
O4 - 危险 - load - C:\WINDOWS\uninstall\rundl132.exe
2007-04-06 17:01
O2 - 危险 - Info cache - C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll
O2 - 危险 -  - C:\PROGRA~1\iarr\.dll
2007-04-06 17:36
R0 - 未知 - IE首页 - HKLM\Software\Microsoft\Internet Explorer\Main
R0 - 未知 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
2007-04-07 18:13
O2 - 危险 -  - C:\PROGRA~1\iarr\.dll

----------修复IE浏览器操作历史----------

2007-03-31 19:58
R0 - 危险 - IE首页 - HKLM\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
O22 - 危险 - .HLP文件关联 - winhlp32.exe %1
2007-04-01 14:56
R0 - 危险 - IE首页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
O22 - 危险 - .HLP文件关联 - winhlp32.exe %1
2007-04-01 14:56
R0 - 危险 - IE首页 - HKLM\Software\Microsoft\Internet Explorer\Main
2007-04-01 14:56
R0 - 危险 - IE首页 - HKLM\Software\Microsoft\Internet Explorer\Main
2007-04-01 18:14
R0 - 危险 - IE首页 - HKLM\Software\Microsoft\Internet Explorer\Main
2007-04-06 18:23
O4 - 危险 - load - C:\WINDOWS\uninstall\rundl132.exe
=======================================
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT