诊断平台: Microsoft Windows XP Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:511.17MB - 当前可用内存:124.20MB
100 - 未知 - Process: RavMonD.exe [RavMond] -
100 - 未知 - Process: rfwsrv.exe [Rising Personal FireWall Service] -
100 - 未知 - Process: RavStub.exe [Rising RavStub] - D:\PROGRAM FILES\RISING\RAV\RavStub.exe
100 - 未知 - Process: RavTask.exe [RavTimer] -
100 - 未知 - Process: rfwmain.exe [Rising Personal FireWall Main Program] -
100 - 未知 - Process: RavMon.exe [RavMon] -
100 - 未知 - Process: RsAgent.exe [RsAgent Application] - D:\Program Files\Rising\Rav\RsAgent.exe
100 - 未知 - Process: QQ.exe [QQ] - D:\Program Files\Tencent\QQ\QQ.exe
100 - 未知 - Process: TIMPlatform.exe [TIMPlatform] - D:\Program Files\Tencent\QQ\TIMPlatform.exe
100 - 未知 - Process: Thunder5.exe [Thunder] - d:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe
100 - 未知 - Process: ScanningProcess.exe [] - D:\Program Files\Thunder Network\Thunder\Plugins\ThunderKAV\bin\ScanningProcess.exe
100 - 未知 - Process: ScanningProcess.exe [] - D:\Program Files\Thunder Network\Thunder\Plugins\ThunderKAV\bin\ScanningProcess.exe
100 - 未知 - Process: MiniQQLive.exe [QQLive] - d:\Program Files\Tencent\QQLive\MiniQQLive.exe
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.hao123.com/
O2 - 未知 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - d:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O8 - 未知 - Extra context menu item: 使用迅雷下载 - d:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - 未知 - Extra context menu item: 使用迅雷下载全部链接 - d:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - 未知 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O9 - 未知 - Extra button: 启动迅雷5(HKLM) - d:\Program Files\Thunder Network\Thunder\Thunder.exe
O23 - 未知 - Service: RfwProxySrv [Rising Personal Proxy Service] - d:\program files\rising\rfw\rfwproxy.exe - (not running)
O23 - 未知 - Service: RfwService [Rising Personal Firewall Service] - d:\program files\rising\rfw\rfwsrv.exe - (running)
O23 - 未知 - Service: RsCCenter [Rising Process Communication Center] - "D:\Program Files\Rising\Rav\CCenter.exe" - (running)
O23 - 未知 - Service: RsRavMon [Rising RealTime Monitor] - "D:\PROGRAM FILES\RISING\RAV\Ravmond.exe" - (running)
O30 - 未知 - HKCU\..\Desktop: [Scrnsave.exe] [Rising Screen Saver] C:\WINDOWS\system32\ravss.scr
=======================================
=======================================
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 -
O31 - 未知 - SEApproved: {1D2680C9-0E2A-469d-B787-065558BC7D43} - C:\WINDOWS\system32\mscoree.dll - Microsoft Corporation - Microsoft .NET Runtime Execution Engine - 1.1.4322.2032 - 155648 - 8c54138d0271ed4e9c16d8534ff707e4
O31 - 未知 - SEApproved: {5E2121EE-0300-11D4-8D3B-444553540000} - C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll - - ACE Context Menu - 1.0.0.1 - 73728 - 649e3ab705eb0f3af213dcd4378515cf
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - d:\Program Files\WinRAR\rarext.dll - - - - 126464 - 14985b448fe55684b25b0356913c23c1
O31 - 未知 - SEApproved: {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - D:\Program Files\real\rpshell.dll - RealNetworks, Inc. - RealPlayer Shell Extensions - 1.0.1.2237 - 49198 - d6315dc9fcc6c62fd54e02f0907030e3
O31 - 未知 - SEApproved: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\RavExt.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.9 - 106496 - fa20734a7acabcfe9d727fb343da4e8a
O31 - 未知 - Directory Menu: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\RavExt.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.9 - 106496 - fa20734a7acabcfe9d727fb343da4e8a
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - d:\Program Files\WinRAR\rarext.dll - - - - 126464 - 14985b448fe55684b25b0356913c23c1
O31 - 未知 - BootExecute: bsmain - - - - 0 -
O31 - 未知 - BootExecute: - - - - 0 -
O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 -
=======================================
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\AntiSpyware\ieprot.dll - IE Protector - 369c1d78953b00cf8306e7028654092d
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\RavExt.dll - Rising Shell Ext Module - fa20734a7acabcfe9d727fb343da4e8a
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\shlhook.dll - shlhook Module - 46d5e3a1d269af2a2b5c2d6cc3f8d10a
O40 - Explorer.EXE - - C:\Program Files\ATI Technologies\ATI.ACE\atiacmxx.dll - ACE Context Menu - 649e3ab705eb0f3af213dcd4378515cf
O40 - Explorer.EXE - - d:\Program Files\WinRAR\rarext.dll - - 14985b448fe55684b25b0356913c23c1
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\RSCOMMON.DLL - Rising Common Function Dynamic Link Library - 58432e6c58f1b4c339adc1a79bf864b6
=======================================
O41 - BaseTDI - basetdi - C:\WINDOWS\system32\drivers\basetdi.sys - (running) - basetdi - Beijing Rising Technology Co., Ltd. - 0064810c1b03f2c889130b669a4ce937
O41 - ExpScaner - ExpScan.sys - D:\PROGRAM FILES\Rising\Rav\ExpScan.sys - (running) - ExpScan.sys - - 5a690926c7181d5c0b2721016442c9c3
O41 - HookCont - HookCont - D:\PROGRAM FILES\Rising\Rav\HookCont.sys - (running) - HookCont - Rising - 3926cb7b005564bc77d6b40235c53817
O41 - HookReg - HookReg - D:\PROGRAM FILES\Rising\Rav\HOOKREG.sys - (running) - - - 997c395147f8e5b3f714bdd112fe8945
O41 - HookSys - Hooksys - D:\PROGRAM FILES\Rising\Rav\HookSys.sys - (running) - Hooksys - Rising - 265b67f85db6226f2439e13e7c1fa8bf
O41 - HookUrl - HookUrl - D:\Program Files\Rising\Rfw\HookUrl.sys - (running) - HookUrl - Beijing Rising Technology Co., Ltd. - 93768ab1e576eef2de107eddbc586e9b
O41 - MEMSCAN - MemScan Driver - D:\PROGRAM FILES\Rising\Rav\MemScan.sys - (running) - MemScan Driver - 瑞星软件有限公司 - 9811b256023dd985cbc5bad790e5bb84
O41 - mProcRs - Rising Personal FireWall mprocrs.sys - d:\program files\Rising\Rfw\mProcRs.sys - (running) - Rising Personal FireWall mprocrs.sys - Beijing Rising Technology Co., Ltd. - 3659b3132bc2c05db37b8c5e65687159
O41 - RsAntiSpyware - Anti-RootKit Driver - C:\WINDOWS\system32\drivers\RsBoot.sys - (running) - Anti-RootKit Driver - Beijing Rising Technology Co., Ltd. - cb84b955e179c6b9931803262e1f10f3
O41 - RsFwDrv - nt_fwdrv - D:\Program Files\Rising\Rfw\rsfwdrv.sys - (running) - nt_fwdrv - Beijing Rising Technology Co., Ltd. - 1869e55cfacff0ff786d4ba6d2340ee2
O41 - RsNTGDI - RsNTGDI - C:\WINDOWS\system32\drivers\RsNTGdi.sys - (running) - RsNTGDI - Beijing Rising Technology Co., Ltd. - 17214e7b192cb93ff014fca1484b97ad
O41 - RSPPSYS - RSPPSYS.SYS - D:\PROGRAM FILES\Rising\Rav\rsppsys.sys - (running) - RSPPSYS.SYS - Rising - f38c10d8c21626a4878ea16717e971fa
O41 - npkcrypt - npkcrypt - C:\WINDOWS\system32\npkcrypt.sys - (not running) - - -
O41 - npkycryp - npkycryp - C:\WINDOWS\system32\npkycryp.sys - (not running) - - -
=======================================
360Safe.exe=3.5.1.1001
AntiAdwa.dll=3.5.1.1001
AntiEng.dll=3.5.1.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
safelive.exe=1.0.0.2007
live.dll=1.0.1.1016
=======================================
操作历史报告：
----------修复IE浏览器操作历史----------
2007-07-08 16:06
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
=======================================
