瑞星卡卡电脑诊断日志 v1.20 (2007-7-6 8:39:6)  北京瑞星科技股份有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + Win32 Services
    + HKLM\System\CurrentControlSet\Services
      gusvc
        [A ] 1. c:\program files\google\common\google updater\googleupdaterservice.exe
      ose
        [A ] 2. c:\program files\common files\microsoft shared\source engine\ose.exe
      RsCCenter
        [A ] 3. c:\program files\rising\rav\ccenter.exe
      RsRavMon
        [A ] 4. c:\program files\rising\rav\ravmond.exe
      usnsvc
        [A ] 5. c:\program files\msn messenger\usnsvc.dll
      WudfSvc
        [A ] 6. c:\windows\system32\wudfsvc.dll
  + Kernel Drivers
    + HKLM\System\CurrentControlSet\Services
      ALCXWDM
        [A ] 7. c:\windows\system32\drivers\alcxwdm.sys
      AmdK8
        [A ] 8. c:\windows\system32\drivers\amdk8.sys
      BaseTDI
        [A ] 9. c:\windows\system32\drivers\basetdi.sys
      EraserUtilRebootDrv
        [A ] 10. c:\program files\common files\symantec shared\eengine\eraserutilrebootdrv.sys
      ExpScaner
        [A ] 11. c:\program files\rising\rav\expscan.sys
      HookCont
        [A ] 12. c:\program files\rising\rav\hookcont.sys
      HookReg
        [A ] 13. c:\program files\rising\rav\hookreg.sys
      HookSys
        [A ] 14. c:\program files\rising\rav\hooksys.sys
      MEMSCAN
        [A ] 15. c:\program files\rising\rav\memscan.sys
      npkcrypt
        [A ] 16. c:\program files\qq2006\npkcrypt.sys
      PxHelp20
        [A ] 17. c:\windows\system32\drivers\pxhelp20.sys
      QKeyService
        [A ] 18. c:\windows\system32\keycrypt.sys
      RsAntiSpyware
        [A ] 19. c:\windows\system32\drivers\rsboot.sys
      RsNTGDI
        [A ] 20. c:\windows\system32\drivers\rsntgdi.sys
      RSPPSYS
        [A ] 21. c:\program files\rising\rav\rsppsys.sys
      RTL8023xp
        [A ] 22. c:\windows\system32\drivers\rtnicxp.sys
      RVSDISK
        [A ] 23. c:\windows\system32\drivers\rvsdisk.sys
      RVSYSTEM
        [A ] 24. c:\windows\system32\drivers\rvsystem.sys
      Secdrv
        [A ] 25. c:\windows\system32\drivers\secdrv.sys
      SiSkp
        [A ] 26. c:\windows\system32\drivers\srvkp.sys
      SISNICXP
        [A ] 27. c:\windows\system32\drivers\sisnicxp.sys
      SKNFW
        [A ] 28. c:\windows\system32\drivers\sknfw.sys
      SkyProcs
        [A ] 29. c:\progra~1\skynet\firewall\skyprocs.sys
      SNPSTD3
        [A ] 30. c:\windows\system32\drivers\snpstd3.sys
      WudfPf
        [A ] 31. c:\windows\system32\drivers\wudfpf.sys
  + Internet Explorer
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {889D2FEA-5411-4565-8998-1DD2C5261283}
        [A ] 32. e:\tencent\qqdownload\qqiehelper01.dll
      {889D2FEB-5411-4565-8998-1DD2C5261283}
        [A ] 33. e:\thunder network\thunder\comdlls\xunleibho_now.dll
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 34. e:\thunder network\thunder\thunder.exe
  + Explorer
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [AM] 35. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      KuGoo3
        [A ] 36. e:\kugoo2007\inextend\kugoo3downxcontrol.ocx
      livecall
        [A ] 37. c:\program files\msn messenger\msgrapp.8.0.0812.00.dll
      msnim
        [A ] 37. c:\program files\msn messenger\msgrapp.8.0.0812.00.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 38. c:\windows\system32\hticons.dll
      Web Folders
        [A ] 39. c:\program files\common files\microsoft shared\web folders\msonsext.dll
      WinRAR shell extension
        [A ] 40. c:\program files\winrar\rarext.dll
      Microsoft Office HTML Icon Handler
        [A ] 41. c:\program files\microsoft office\office11\msohev.dll
      UnlockerShellExtension
        [A ] 42. e:\unlocker\unlockercom.dll
      Messenger Sharing Folders
        [A ] 43. c:\program files\msn messenger\fsshext.8.0.0812.00.dll
      Portable Media Devices
        [A ] 44. c:\windows\system32\audiodev.dll
      Portable Devices
        [A ] 45. c:\windows\system32\wpdshext.dll
      Portable Devices Menu
        [A ] 45. c:\windows\system32\wpdshext.dll
      RISING
        [A ] 46. c:\windows\system32\ravext.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
        [AM] 47. c:\windows\system32\shlhook.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
      WPDShServiceObj
        [AM] 48. c:\windows\system32\wpdshserviceobj.dll
  + Logon
    + HKCU\Software\Microsoft\Windows\CurrentVersion\Run
      RocketDock
        [AM] 49. e:\rocketdock\rocketdock.exe
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      runeip
        [AM] 50. c:\program files\rising\antispyware\runiep.exe
      snpstd3
        [AM] 51. c:\windows\vsnpstd3.exe
      Picasa Media Detector
        [A ] 52. e:\picasa2\picasamediadetector.exe
      Google IME Autoupdater
        [AM] 53. c:\program files\google\google pinyin\googlepinyindaemon.exe
      SKYNET Personal FireWall
        [A ] 54. c:\program files\skynet\firewall\pfw.exe
      Rvsystem
        [AM] 55. c:\program files\returnil\rvsystem.exe
      RavTask
        [A ] 56. c:\program files\rising\rav\ravtask.exe
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
      RavStub
        [AM] 57. c:\program files\rising\rav\ravstub.exe
      KKDelay
        [A ] 58. c:\program files\rising\antispyware\runonce.exe
  + Boot Execute
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 59. c:\windows\system32\bsmain.exe
        [A ] 60. c:\windows\system32\kknative.exe
  + Image Hijacks
    + HKCR\Folder\shell
      Super Rabbit CDROM Eject
        [A ] 61. e:\super rabbit\magicset\srcd2.exe
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 62. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\Print\Command
        [A ] 62. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\TencentTraveler\Command
        [A ] 63. e:\tencent\tt\ttraveler.exe
    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 62. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\Print\Command
        [A ] 62. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\TencentTraveler\Command
        [A ] 63. e:\tencent\tt\ttraveler.exe
+ 其他自启动项目
  +
    快速设定分辨率.lnk
      [A ] 64. c:\program files\装机人员工具\快速设定分辨率.cmd
  +
    快速设定分辨率.lnk
      [A ] 64. c:\program files\装机人员工具\快速设定分辨率.cmd
+ 系统活动模块
  + 00000170(368) alg.exe
  + 000001c4(452) smss.exe
  + 00000214(532) csrss.exe
  + 0000022c(556) winlogon.exe
    72C80000[00008000]
      [ M] 65. c:\windows\system32\msacm32.drv
  + 00000258(600) services.exe
    47260000[0000F000]
      [ M] 66. c:\windows\apppatch\acadproc.dll
  + 00000264(612) lsass.exe
  + 00000290(656) runiep.exe
    00400000[00012000]
      [AM] 50. c:\program files\rising\antispyware\runiep.exe
    00C00000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
    10000000[0000E000]
      [ M] 68. e:\rocketdock\rocketdock.dll
  + 000002fc(764) svchost.exe
  + 00000328(808) svchost.exe
  + 000003a8(936) svchost.exe
    50E60000[0000C000]
      [ M] 69. c:\windows\system32\wups2.dll
  + 000003f0(1008) svchost.exe
  + 0000043c(1084) svchost.exe
  + 000004cc(1228) Explorer.EXE
    10000000[00011000]
      [AM] 47. c:\windows\system32\shlhook.dll
    164A0000[00023000]
      [AM] 48. c:\windows\system32\wpdshserviceobj.dll
    72C80000[00008000]
      [ M] 65. c:\windows\system32\msacm32.drv
    01B70000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
    109C0000[0002C000]
      [ M] 70. c:\windows\system32\portabledevicetypes.dll
    10930000[00049000]
      [ M] 71. c:\windows\system32\portabledeviceapi.dll
    012F0000[0000E000]
      [ M] 68. e:\rocketdock\rocketdock.dll
  + 00000548(1352) vsnpstd3.exe
    00400000[000D1000]
      [AM] 51. c:\windows\vsnpstd3.exe
    10000000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 00000580(1408) spoolsv.exe
    00E60000[00005000]
      [ M] 72. c:\windows\system32\spool\prtprocs\w32x86\vprproc.dll
  + 000005c8(1480) RavStub.exe
    00400000[00018000]
      [AM] 57. c:\program files\rising\rav\ravstub.exe
    10000000[0001B000]
      [ M] 73. c:\program files\rising\rav\rscommx.dll
    23700000[0001A000]
      [ M] 74. c:\program files\rising\rav\rscommon.dll
  + 00000654(1620) GooglePinyinDaemon.exe
    00400000[00035000]
      [AM] 53. c:\program files\google\google pinyin\googlepinyindaemon.exe
    04260000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
    04920000[0000B000]
      [AM] 35. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
  + 000006d8(1752) svchost.exe
  + 0000070c(1804) Rvsystem.exe
    00400000[00139000]
      [AM] 55. c:\program files\returnil\rvsystem.exe
  + 00000770(1904) ctfmon.exe
    10000000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 000007a0(1952) svchost.exe
  + 00000810(2064) RocketDock.exe
    00400000[00073000]
      [AM] 49. e:\rocketdock\rocketdock.exe
    10000000[0000E000]
      [ M] 68. e:\rocketdock\rocketdock.dll
    01EA0000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
  + 000009f0(2544) wuauclt.exe
    50E60000[0000C000]
      [ M] 69. c:\windows\system32\wups2.dll
  + 00000ab8(2744) Ras.exe
    00400000[0013D000]
      [ M] 75. c:\program files\rising\antispyware\ras.exe
    10000000[0000E000]
      [ M] 68. e:\rocketdock\rocketdock.dll
    00EA0000[000A0000]
      [ M] 76. c:\program files\rising\antispyware\rasgui.dll
    01670000[0001B000]
      [ M] 67. c:\program files\rising\antispyware\ieprot.dll
    02E80000[0002F000]
      [ M] 77. c:\program files\rising\antispyware\engine.dll
    015E0000[00012000]
      [ M] 78. c:\program files\rising\antispyware\zip.dll

您的日志没有发现可疑文件