各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供
http://www.360.cn诊断时间: 2008-05-01 20:58:29
诊断平台: Microsoft Windows XP Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:511.48MB - 当前可用内存:188.89MB
100 - 未知 - Process: csrss.exe [] -
100 - 未知 - Process: svchost.exe [] -
100 - 未知 - Process: svchost.exe [] -
100 - 未知 - Process: svchost.exe [] -
100 - 未知 - Process: alg.exe [] -
100 - 未知 - Process: SpiderMl.exe [DrWeb (R) SpIDer Mail(R) for Windows Workstation] - C:\Program Files\Virus Chaser\spiderml.exe
100 - 未知 - Process: QQ.exe [QQ] - C:\Program Files\Tencent\QQ2007\QQ.exe
100 - 未知 - Process: TIMPlatform.exe [TIMPlatform] - C:\Program Files\Tencent\QQ2007\TIMPlatform.exe
100 - 未知 - Process: explorer.exe [Windows Explorer] - C:\WINDOWS\system32\dllcache\explorer.exe
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.wode114.com/
R1 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
O2 - 未知 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - 未知 - BHO: (浏览器辅助对象(BHO)) - [无效的CLSID:{7E853D72-626A-48EC-A868-BA8D5E23E045}] - {7E853D72-626A-48EC-A868-BA8D5E23E045} -
O8 - 未知 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder\Program\geturl.htm
O8 - 未知 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder\Program\getallurl.htm
O8 - 未知 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ2007\AddEmotion.htm
O10 - 未知 - Winsock LSP: [Microsoft Windows Sockets 2.0 Service Provider] [{D3C26F21-85E1-48F3-9AB6-90D96F7382EF}]C:\WINDOWS\system32\Macromed\cfgmo.dll
O10 - 未知 - Winsock LSP: [Dr.Web Winsock Provider Hook] [{7706E029-9A28-43A9-846D-1CE70CD3FEE5}]C:\WINDOWS\system32\DRWEBSP.DLL
O10 - 未知 - Winsock LSP: [Dr.Web Winsock Provider Hook] [{6E794481-9C07-4972-8FD3-A267C9D79982}]C:\WINDOWS\system32\DRWEBSP.DLL
O10 - 未知 - Winsock LSP: [Dr.Web Winsock Provider Hook] [{B039694D-0E77-4EBC-9327-B237A57BDC31}]C:\WINDOWS\system32\DRWEBSP.DLL
O10 - 未知 - Winsock LSP: [Dr.Web Winsock Provider Hook] [{BE9E92F6-C8EB-403C-9BC7-E8BCA2123482}]C:\WINDOWS\system32\DRWEBSP.DLL
O11 - 未知 - Options Group: 中文搜搜
O18 - 未知 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - 未知 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - 未知 - Protocol Icons: Software\Microsoft\Internet Explorer\View Source Editor\Editor Name - C:\WINDOWS\Notepad2HTML.exe
O22 - 未知 - Filename Extention: .txt - "C:\Program Files\Notepad2\Notepad2.exe" "%1"
O23 - 未知 - Service: DF5Serv [DF5Serv] - C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe - (running)
O23 - 未知 - Service: spidernt [Anti Virus System - Virus Chaser] - C:\Program Files\Virus Chaser\SpiderNT.exe - (running)
O23 - 未知 - Service: usnjsvc [Messenger 上安装的启用共享情况的服务] - "C:\Program Files\MSN Messenger\usnsvc.exe" - (not running)
O23 - 未知 - Service: Win32RegEdit [Descriptions] - C:\WINDOWS\system32\serve.exe - (not running)
=======================================
100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] -
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] -
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] -
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] -
100 - 安全 - Process: DF5Serv.exe [美国Faronics公司开发的冰点还原软件。] -
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] -
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] -
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] -
100 - 安全 - Process: FrzState2k.exe [一款名为冰点还原的还原软件，用于windows系统还原。] -
100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] -
100 - 安全 - Process: SpiderNT.exe [virus 驱逐舰杀毒软件相关程序。] -
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] -
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\DOCUME~1\东方\LOCALS~1\Temp\~xppatch976.tmp
100 - 安全 - Process: SpiderUI.exe [驱逐舰杀毒软件相关程序。] - C:\Program Files\Virus Chaser\Spiderui.exe
100 - 安全 - Process: VM_STI.EXE [still image (sti) driver驱动程序，一般用于电脑摄像头。] - C:\WINDOWS\VM_STI.EXE
100 - 安全 - Process: Vcrmon.exe [virus 驱逐舰杀毒软件相关程序。] - C:\Program Files\Virus Chaser\Vcrmon.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe
100 - 安全 - Process: rundll32.exe [windows rundll32为了需要调用dlls的程序。] - C:\WINDOWS\system32\rundll32.exe
100 - 安全 - Process: safeboxtray.exe [360安全卫士保险箱相关程序。] - D:\360Safebox\safeboxtray.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\360safe\safemon\360Tray.exe
100 - 安全 - Process: drwtsn32.exe [是windows系统内置的程序错误调试器。] - C:\WINDOWS\system32\drwtsn32 -p 1052 -e 2728 -g
100 - 安全 - Process: drwtsn32.exe [是windows系统内置的程序错误调试器。] - C:\WINDOWS\system32\drwtsn32 -p 2768 -e 3904 -g
100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\360safe\360Safe.exe
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R3 - 安全 - URLSearchHook: (Tencent SearchHook) - [搜搜工具条，搜索工具栏。] - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\SSPlus\SAddr1.dll
O2 - 安全 - BHO: (Tencent Browser Helper) - [搜搜工具条，搜索工具栏。] - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\SSPlus\SAddr1.dll
O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll
O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 安全 - HKLM\..\Run: [NMGameX_AutoRun] [新浪igame游戏大厅相关程序。] C:\WINDOWS\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa
O4 - 安全 - HKLM\..\Run: [KernelFaultCheck] [windows的错误报告工具] %systemroot%\system32\dumprep 0 -k
O4 - 安全 - HKLM\..\Run: [stup.exe] [腾讯qq地址栏搜索插件相关程序。] Rundll32.exe C:\PROGRA~1\TENCENT\SSPlus\SPlus1.dll,Rundll32 R
O4 - 安全 - HKLM\..\Run: [BigDogPath] [网眼摄像头驱动] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - 安全 - HKLM\..\Run: [Vcrmon] [驱逐舰防病毒软件。] C:\Program Files\Virus Chaser\Vcrmon.exe
O4 - 安全 - HKLM\..\Run: [360Safebox] [360安全卫士保险箱相关程序。] "D:\360Safebox\SafeBoxTray.exe" /r
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] D:\360safe\safemon\360Tray.exe /start
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - Startup folder: [腾讯QQ.lnk] [qq：即时通讯软件] C:\Documents and Settings\东方\「开始」菜单\程序\启动\腾讯QQ.lnk
O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running)
=======================================
O31 - 未知 - Folder Menu: {0561EC90-CE54-4f0c-9C55-E226110A740C} - C:\Program Files\Media Player Classic\Codecs\mmfinfo.dll - - - - 53248 - cb2664277f8743dfaf8bd7e7f287b060
O31 - 未知 - Notify: DfLogon - C:\WINDOWS\system32\LogonDll.dll - - - - 49152 - 97d356255111687bfe8dcc98860eda5f
O31 - 未知 - SODL: {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation - Windows Shell Common Dll - 6.0.2900.3051 - 8311296 -
O31 - 未知 - SODL: {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation - Windows Shell Common Dll - 6.0.2900.3051 - 8311296 -
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Avi Properties Handler - - - - - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 -
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 125440 - fd00edb8e782858243cf1469c329ee88
O31 - 未知 - SEApproved: {68f32140-2ca3-11d0-acc1-444553540000} - C:\Program Files\PicaView 2.0\PicaView.dll - ACD Systems, Ltd. - PicaView 资源管理器扩展 DLL - 2.0.0.84 - 524288 - 4d7030752142de55d3d1b9aa8056067f
O31 - 未知 - SEApproved: {1530f7ee-5128-43bd-9977-84a4b0fad7df} - C:\PROGRA~1\PICAVI~1.0\PHOTOT~1.DLL - Microsoft Corporation - Windows XP PowerToys - 5.1.2455.0 - 21504 - bcf352e75c262e4b0a31139494856b0b
O31 - 未知 - SEApproved: {0561EC90-CE54-4f0c-9C55-E226110A740C} - C:\Program Files\Media Player Classic\Codecs\mmfinfo.dll - - - - 53248 - cb2664277f8743dfaf8bd7e7f287b060
O31 - 未知 - SEApproved: {1CDB2949-8F65-4355-8456-263E7C208A5D} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - C:\WINDOWS\system32\nvshell.dll - - - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc
O31 - 未知 - SEApproved: {E76568E0-C231-11D3-B155-0090961B771E} - C:\Program Files\Virus Chaser\Shellexe.dll - New Technology Wave Inc. - VirusChaser Shell Extension - 5.0.0.0 - 49152 - 6f7c317de6adb2c10d43abd13eaa842c
O31 - 未知 - Directory Menu: {A470F8CF-A1E8-4f65-8335-227475AA5C46} - C:\WINDOWS\system32\SHELL32.dll - Microsoft Corporation - Windows Shell Common Dll - 6.0.2900.3051 - 8311296 -
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 125440 - fd00edb8e782858243cf1469c329ee88
O31 - 未知 - BootExecute: autocheck autochk /k:C /k:D /k:E - - - - 0 -
O31 - 未知 - LSA: Security Packages - C:\WINDOWS\system32\kerberos.dll - Microsoft Corporation - Kerberos Security Package - 5.1.2600.2698 - 295936 - e5f30164055d6441a4def03a97158f49
O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 -
=======================================
O40 - winlogon.exe - - C:\WINDOWS\system32\LogonDll.dll - - 97d356255111687bfe8dcc98860eda5f
O40 - svchost.exe - Doctor Web, Ltd. - C:\WINDOWS\system32\DRWEBSP.DLL - Dr.Web Winsock Provider Hook - 59a7e2717b6623dc8e3a90008f1803c0
O40 - svchost.exe - - C:\WINDOWS\system32\MSetole.dll - - 5cfe2234ceda03ed61df542d61889403
O40 - svchost.exe - Microsoft Corporation - c:\windows\system32\wiaservc.dll - Still Image Devices Service - dc750a7adc5ecb85a12729285fb72653
O40 - svchost.exe - - C:\WINDOWS\system32\MSetole.dll - - 5cfe2234ceda03ed61df542d61889403
O40 - svchost.exe - Doctor Web, Ltd. - C:\WINDOWS\system32\DRWEBSP.DLL - Dr.Web Winsock Provider Hook - 59a7e2717b6623dc8e3a90008f1803c0
O40 - svchost.exe - - C:\WINDOWS\system32\jfrwdh.dll - - 7d91cb3d9843aa6c40f4bacabff38cc9
O40 - svchost.exe - - C:\WINDOWS\system32\msosmnsf00.dll - - 367ca5b03d61725c0d88ae4e7e340611
O40 - svchost.exe - - C:\WINDOWS\system32\zjydcx.dll - - e9c8810fb3d3a04c089c89558e76a515
O40 - svchost.exe - - C:\WINDOWS\system32\tdffdl.dll - - af4f18e549af00ebe79d71fe9c894737
O40 - svchost.exe - - C:\WINDOWS\system32\wyrsdj.dll - - d2c146d7b2f6282496154cb9142f00d9
O40 - svchost.exe - - C:\WINDOWS\system32\hhrdxd.dll - - 4df2f1854f5f6b3b0d91c9c5b96a9934
O40 - svchost.exe - - C:\WINDOWS\system32\jhrcar.dll - - 6d88f55364430af2e8a452f040b517dd
O40 - svchost.exe - - C:\WINDOWS\system32\MSetole.dll - - 5cfe2234ceda03ed61df542d61889403
O40 - svchost.exe - Microsoft Corporation - C:\WINDOWS\system32\Macromed\cfgmo.dll - Microsoft Windows Sockets 2.0 Service Provider - b0fa6b5d0a872f4d316c609553873873
O40 - svchost.exe - - C:\WINDOWS\system32\sperls.dll - - 4177ad6dea778f9c13c6b82f287207bf
O40 - svchost.exe - - C:\WINDOWS\system32\sehhter.dll - - 32f386052fbe68168253dfba22ec87bd
O40 - svchost.exe - - C:\WINDOWS\system32\zdbdb.dll - - ebcbafd2a943589fbfcaf184a9fc172a
O40 - svchost.exe - - C:\WINDOWS\system32\xdhdg.dll - - 3372c8451608be94de83c95be62d5c16
O40 - svchost.exe - - C:\WINDOWS\system32\crugd.dll - - 77149da6505a43f39d9b00187d6e61fe
O40 - rundll32.exe - - C:\WINDOWS\system32\msosmnsf00.dll - - 367ca5b03d61725c0d88ae4e7e340611
O40 - rundll32.exe - - C:\WINDOWS\system32\MSetole.dll - - 5cfe2234ceda03ed61df542d61889403
O40 - rundll32.exe - - C:\WINDOWS\system32\tdffdl.dll - - af4f18e549af00ebe79d71fe9c894737
O40 - rundll32.exe - - C:\WINDOWS\system32\zjydcx.dll - - e9c8810fb3d3a04c089c89558e76a515
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\dllcache\UXTHEME.DLL - Microsoft UxTheme Library - 4dc638085ff282aac9fc295edb08ce17
O40 - explorer.exe - - C:\WINDOWS\system32\sehhter.dll - - 32f386052fbe68168253dfba22ec87bd
O40 - explorer.exe - - C:\WINDOWS\system32\zdbdb.dll - - ebcbafd2a943589fbfcaf184a9fc172a
O40 - explorer.exe - - C:\WINDOWS\system32\xdhdg.dll - - 3372c8451608be94de83c95be62d5c16
O40 - explorer.exe - - C:\WINDOWS\system32\crugd.dll - - 77149da6505a43f39d9b00187d6e61fe
O40 - explorer.exe - - C:\WINDOWS\system32\sperls.dll - - 4177ad6dea778f9c13c6b82f287207bf
O40 - explorer.exe - - C:\WINDOWS\system32\MSetole.dll - - 5cfe2234ceda03ed61df542d61889403
O40 - explorer.exe - - C:\WINDOWS\system32\dqCBDCBD1051.dll - - 20bdc06257d689baf586f23286dc5eb3
O40 - explorer.exe - - C:\WINDOWS\system32\ttBAIBAI1061.dll - - a8bd9af95bffe1c0e920c526223d71b9
O40 - explorer.exe - - C:\WINDOWS\system32\zjydcx.dll - - e9c8810fb3d3a04c089c89558e76a515
O40 - explorer.exe - - C:\WINDOWS\system32\ttQACQAC1046.dll - - 32b9dee44be97af40c14e5901ecd82c7
O40 - explorer.exe - - C:\WINDOWS\system32\tdffdl.dll - - af4f18e549af00ebe79d71fe9c894737
O40 - explorer.exe - - C:\Program Files\Media Player Classic\Codecs\mmfinfo.dll - - cb2664277f8743dfaf8bd7e7f287b060
O40 - explorer.exe - - C:\Program Files\Media Player Classic\Codecs\mkunicode.dll - - 99379546769b9570b28140b814306e4f
=======================================
O41 - drwebnet - SpIDer Guard boot hook driver for Windows NT - C:\WINDOWS\system32\drivers\Drwebnet.sys - (running) - SpIDer Guard boot hook driver for Windows NT - Doctor Web Ltd - 1341a129478672613ec4e94d38856e2e
O41 - SPIDERCTL - System Monitoring for Windows NT - C:\Program Files\Virus Chaser\Spider.sys - (running) - System Monitoring for Windows NT - New Technology Wave Inc. - 2276d080cb9b4359cb7f610ace70ea27
O41 - ZSMC302 - Video streaming and Capture Device Driver - C:\WINDOWS\system32\drivers\usbVM31b.sys - (running) - Video streaming and Capture Device Driver - VM - f34e79ae663bfb36284cf2b4fa20b6f3
O41 - msfpfis64 - msfpfis64 - C:\WINDOWS\system32\drivers\msosmsfpfis64.sys - (running) - - - a27a5502dc7b970ce8cd3a5066fd5ab9
O41 - vmscsi - VMware SCSI Controller Driver - C:\WINDOWS\system32\drivers\vmscsi.sys - (not running) - VMware SCSI Controller Driver - VMware, Inc. - c98f3ed04751fe7bd4064bd111f8ec21
O41 - mhfp - mhfp - C:\DOCUME~1\东方\LOCALS~1\Temp\tmp2A.tmp - (not running) - - -
O41 - fpids32 - fpids32 - C:\WINDOWS\system32\drivers\msosfpids32.sys - (not running) - - - f317a2e99093506095ffe729f92cc42c
O41 - XNGAnti - XNGAnti - C:\WINDOWS\system32\drivers\RESS.sys - (not running) - - - 18e3dfee46735db2cd67c67d8164a0d2
=======================================
360Safe.exe=4.1.5.1001
AntiAdwa.dll=4.1.5.1001
AntiEng.dll=4.1.5.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=4.0.0.1001
live.dll=1.0.1.1027
=======================================
操作历史报告：
=======================================
360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基7.0
最新免费下载：
http://www.360.cn/download.html用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
