大家帮帮忙啊~~开机时显示桌面图标需要好几分钟呢

瑞星卡卡电脑诊断日志 v1.30 (2007-7-24 5:32:32)  北京瑞星科技股份有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      aswUpdSv
        [AM] 1. d:\program files\alwil software\avast4\aswupdsv.exe


      avast! Antivirus
        [AM] 2. d:\program files\alwil software\avast4\ashserv.exe


      avast! Mail Scanner
        [AM] 3. d:\program files\alwil software\avast4\ashmaisv.exe


      avast! Web Scanner
        [AM] 4. d:\program files\alwil software\avast4\ashwebsv.exe


      ose
        [A ] 5. c:\program files\common files\microsoft shared\source engine\ose.exe


      usnjsvc
        [A ] 6. c:\program files\msn messenger\usnsvc.exe


      WMPNetworkSvc
        [A ] 7. c:\program files\windows media player\wmpnetwk.exe


      WudfSvc
        [A ] 8. c:\windows\system32\wudfsvc.dll




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      Aavmker4
        [A ] 9. c:\windows\system32\drivers\aavmker4.sys


      ALCXWDM
        [A ] 10. c:\windows\system32\drivers\alcxwdm.sys


      aswRdr
        [A ] 11. c:\windows\system32\drivers\aswrdr.sys


      aswTdi
        [A ] 12. c:\windows\system32\drivers\aswtdi.sys


      ATSpy
        [A ] 13. c:\windows\system32\atspy.sys


      npkcrypt
        [A ] 14. e:\qq\npkcrypt.sys


      RsAntiSpyware
        [A ] 15. c:\windows\system32\drivers\rsboot.sys


      Secdrv
        [A ] 16. c:\windows\system32\drivers\secdrv.sys


      SysTdSvr
        [A ] 17. c:\windows\system32\\drivers\\systdsvr.sys


      WudfPf
        [A ] 18. c:\windows\system32\drivers\wudfpf.sys


      WudfRd
        [A ] 19. c:\windows\system32\drivers\wudfrd.sys


      yiati
        [A ] 20. c:\windows\system32\drivers\yiati.sys


      ZSMC301b
        [A ] 21. c:\windows\system32\drivers\usbvm31b.sys




  + 文件系统驱动
    + HKLM\System\CurrentControlSet\Services
      aswMon2
        [A ] 22. c:\windows\system32\drivers\aswmon2.sys




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 23. d:\program files\thunder network\thunder\thunder.exe




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [A ] 24. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      livecall
        [A ] 25. c:\program files\msn messenger\msgrapp.8.1.0178.00.dll


      msnim
        [A ] 25. c:\program files\msn messenger\msgrapp.8.1.0178.00.dll



    + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
      <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
        [A ] 26. c:\windows\system32\ieudinit.exe



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {F9DB5320-233E-11D1-9F84-707F02C10627}
        [AM] 27. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 28. c:\windows\system32\hticons.dll


      IE Search Band
        [AM] 29. c:\windows\system32\ieframe.dll


      Shell DocObject Viewer
        [AM] 29. c:\windows\system32\ieframe.dll


      InternetShortcut
        [AM] 29. c:\windows\system32\ieframe.dll


      Microsoft Url History Service
        [AM] 29. c:\windows\system32\ieframe.dll


      History
        [AM] 29. c:\windows\system32\ieframe.dll


      Temporary Internet Files
        [AM] 29. c:\windows\system32\ieframe.dll


      Temporary Internet Files
        [AM] 29. c:\windows\system32\ieframe.dll


      Microsoft Url Search Hook
        [AM] 29. c:\windows\system32\ieframe.dll


      The Internet
        [AM] 29. c:\windows\system32\ieframe.dll


      Internet Name Space
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Microsoft BrowserBand
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Fade Task
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Menu Desk Bar
        [AM] 29. c:\windows\system32\ieframe.dll


      IE AutoComplete
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Navigation Bar
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Menu Site
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Menu Band
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Microsoft History AutoComplete List
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Tracking Shell Menu
        [AM] 29. c:\windows\system32\ieframe.dll


      IE IShellFolderBand
        [AM] 29. c:\windows\system32\ieframe.dll


      IE BandProxy
        [AM] 29. c:\windows\system32\ieframe.dll


      IE MRU AutoComplete List
        [AM] 29. c:\windows\system32\ieframe.dll


      IE RSS Feeder Folder
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Microsoft Shell Folder AutoComplete List
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Microsoft Multiple AutoComplete List Container
        [AM] 29. c:\windows\system32\ieframe.dll


      Microsoft Browser Architecture
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Shell Rebar BandSite
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Shell Band Site Menu
        [AM] 29. c:\windows\system32\ieframe.dll


      &Links
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Registry Tree Options Utility
        [AM] 29. c:\windows\system32\ieframe.dll


      IE User Assist
        [AM] 29. c:\windows\system32\ieframe.dll


      IE Custom MRU AutoCompleted List
        [AM] 29. c:\windows\system32\ieframe.dll


      Portable Media Devices
        [A ] 30. c:\windows\system32\audiodev.dll


      Portable Devices
        [A ] 31. c:\windows\system32\wpdshext.dll


      Portable Devices Menu
        [A ] 31. c:\windows\system32\wpdshext.dll


      Messenger Sharing Folders
        [A ] 32. c:\program files\msn messenger\fsshext.8.1.0178.00.dll


      avast
        [AM] 33. d:\program files\alwil software\avast4\ashshell.dll


      Web Folders
        [A ] 34. c:\program files\common files\microsoft shared\web folders\msonsext.dll


      Microsoft Office HTML Icon Handler
        [A ] 35. d:\program files\microsoft office\office11\msohev.dll




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      SoundMan
        [AM] 36. c:\windows\soundman.exe


      avast!
        [AM] 37. d:\program files\alwil software\avast4\ashdisp.exe




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 38. c:\windows\system32\kknative.exe




  + 映像劫持
    + HKCR\Folder\shell
      Super Rabbit CDROM Eject
        [A ] 39. d:\program files\super rabbit\magicset\srcd2.exe



    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 40. d:\program files\microsoft office\office11\msohtmed.exe


      htmlfile\open\Command
        [A ] 41. d:\program files\tencent\tt\ttraveler.exe


      htmlfile\Print\Command
        [A ] 40. d:\program files\microsoft office\office11\msohtmed.exe


      htmlfile\TencentTraveler\Command
        [A ] 41. d:\program files\tencent\tt\ttraveler.exe



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 40. d:\program files\microsoft office\office11\msohtmed.exe


      htmlfile\open\Command
        [A ] 41. d:\program files\tencent\tt\ttraveler.exe


      htmlfile\Print\Command
        [A ] 40. d:\program files\microsoft office\office11\msohtmed.exe


      htmlfile\TencentTraveler\Command
        [A ] 41. d:\program files\tencent\tt\ttraveler.exe





+ 正在运行的进程
  + 000001bc(444) smss.exe

  + 000001fc(508) csrss.exe

  + 00000214(532) winlogon.exe
    72C80000[00008000]
      [ M] 42. c:\windows\system32\msacm32.drv

+ 00000240(576) services.exe
    47260000[0000F000]
      [ M] 43. c:\windows\apppatch\acadproc.dll



  + 00000244(580) wmiprvse.exe

  + 0000024c(588) lsass.exe

  + 000002ac(684) alg.exe

  + 000002e8(744) svchost.exe

  + 00000318(792) svchost.exe

  + 0000035c(860) svchost.exe
    00FF0000[00009000]
      [ M] 44. c:\windows\system32\normaliz.dll


    41D50000[00045000]
      [ M] 45. c:\windows\system32\iertutil.dll



  + 000003a0(928) svchost.exe

  + 000003e0(992) svchost.exe
    00800000[00009000]
      [ M] 44. c:\windows\system32\normaliz.dll


    41D50000[00045000]
      [ M] 45. c:\windows\system32\iertutil.dll



  + 000003f0(1008) svchost.exe

  + 00000414(1044) aswUpdSv.exe
    00400000[00006000]
      [AM] 1. d:\program files\alwil software\avast4\aswupdsv.exe


    64100000[0002C000]
      [ M] 46. d:\program files\alwil software\avast4\aswcmns.dll


    64000000[00012000]
      [ M] 47. d:\program files\alwil software\avast4\aswcmnos.dll


    7C3A0000[0007B000]
      [ M] 48. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 49. c:\windows\system32\msvcr71.dll


    64080000[0001F000]
      [ M] 50. d:\program files\alwil software\avast4\aswcmnb.dll



  + 00000468(1128) ashServ.exe
    00400000[00020000]
      [AM] 2. d:\program files\alwil software\avast4\ashserv.exe


    64580000[000A2000]
      [ M] 51. d:\program files\alwil software\avast4\aswaux.dll


    7C3A0000[0007B000]
      [ M] 48. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 49. c:\windows\system32\msvcr71.dll


    64080000[0001F000]
      [ M] 50. d:\program files\alwil software\avast4\aswcmnb.dll


    64000000[00012000]
      [ M] 47. d:\program files\alwil software\avast4\aswcmnos.dll


    64280000[00117000]
      [ M] 52. d:\program files\alwil software\avast4\aswengin.dll


    64200000[00014000]
      [ M] 53. d:\program files\alwil software\avast4\aswscan.dll


    64100000[0002C000]
      [ M] 46. d:\program files\alwil software\avast4\aswcmns.dll


    64500000[00035000]
      [ M] 54. d:\program files\alwil software\avast4\ashbase.dll


    64800000[0001B000]
      [ M] 55. d:\program files\alwil software\avast4\ashtask.dll


    64400000[00009000]
      [ M] 56. d:\program files\alwil software\avast4\aswinteg.dll


    64A00000[00007000]
      [ M] 57. d:\program files\alwil software\avast4\aswidle.dll


    65000000[0002D000]
      [ M] 58. d:\program files\alwil software\avast4\aavm4h.dll


    66080000[0000B000]
      [ M] 59. d:\program files\alwil software\avast4\chineses\base.dll


    6A000000[0004B000]
      [ M] 60. d:\program files\alwil software\avast4\unacev2.dll


    65380000[0000C000]
      [ M] 61. d:\program files\alwil software\avast4\ahresmai.dll


    65880000[0000C000]
      [ M] 62. d:\program files\alwil software\avast4\ahresmes.dll


    65980000[0000B000]
      [ M] 63. d:\program files\alwil software\avast4\ahresns.dll


    65280000[0000B000]
      [ M] 64. d:\program files\alwil software\avast4\ahresout.dll


    658C0000[0000C000]
      [ M] 65. d:\program files\alwil software\avast4\ahresp2p.dll


    65180000[0000E000]
      [ M] 66. d:\program files\alwil software\avast4\ahresstd.dll


    65A00000[0000F000]
      [ M] 67. d:\program files\alwil software\avast4\ahresws.dll


    65480000[00009000]
      [ M] 68. d:\program files\alwil software\avast4\ahresjs.dll


    64880000[00039000]
      [ M] 69. d:\program files\alwil software\avast4\ashssqlt.dll


    65780000[00023000]
      [ M] 70. d:\program files\alwil software\avast4\ahjsctns.dll


    66000000[00023000]
      [ M] 71. d:\program files\alwil software\avast4\aswres.dll


  + 00000550(1360) Explorer.EXE
    00400000[00009000]
      [ M] 44. c:\windows\system32\normaliz.dll


    41D50000[00045000]
      [ M] 45. c:\windows\system32\iertutil.dll


    65780000[00023000]
      [ M] 70. d:\program files\alwil software\avast4\ahjsctns.dll


    422B0000[005CB000]
      [AM] 29. c:\windows\system32\ieframe.dll


    10000000[0005B000]
      [AM] 27. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll


    011B0000[0004C000]
      [ M] 72. c:\program files\common files\adobe\acrobat\activex\pdfshell.chs


    72C80000[00008000]
      [ M] 42. c:\windows\system32\msacm32.drv


    64F00000[00012000]
      [AM] 33. d:\program files\alwil software\avast4\ashshell.dll


    73900000[0002D000]
      [ M] 73. c:\windows\system32\winwb.ime


    10930000[00049000]
      [ M] 74. c:\windows\system32\portabledeviceapi.dll



  + 0000058c(1420) ctfmon.exe

  + 00000608(1544) spoolsv.exe

  + 00000668(1640) ashMaiSv.exe
    00400000[0003C000]
      [AM] 3. d:\program files\alwil software\avast4\ashmaisv.exe


    64500000[00035000]
      [ M] 54. d:\program files\alwil software\avast4\ashbase.dll


    7C3A0000[0007B000]
      [ M] 48. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 49. c:\windows\system32\msvcr71.dll


    64000000[00012000]
      [ M] 47. d:\program files\alwil software\avast4\aswcmnos.dll


    64080000[0001F000]
      [ M] 50. d:\program files\alwil software\avast4\aswcmnb.dll


    64100000[0002C000]
      [ M] 46. d:\program files\alwil software\avast4\aswcmns.dll


    65000000[0002D000]
      [ M] 58. d:\program files\alwil software\avast4\aavm4h.dll


    64800000[0001B000]
      [ M] 55. d:\program files\alwil software\avast4\ashtask.dll


    64580000[000A2000]
      [ M] 51. d:\program files\alwil software\avast4\aswaux.dll


    65380000[0000C000]
      [ M] 61. d:\program files\alwil software\avast4\ahresmai.dll


    66080000[0000B000]
      [ M] 59. d:\program files\alwil software\avast4\chineses\base.dll


    64280000[00117000]
      [ M] 52. d:\program files\alwil software\avast4\aswengin.dll


    64200000[00014000]
      [ M] 53. d:\program files\alwil software\avast4\aswscan.dll


    64B00000[0004B000]
      [ M] 75. d:\program files\alwil software\avast4\ashuint.dll


    64C80000[000DE000]
      [ M] 76. d:\program files\alwil software\avast4\xt1922.dll


    7C140000[00103000]
      [ M] 77. c:\windows\system32\mfc71.dll


    5D360000[0000A000]
      [ M] 78. c:\windows\system32\mfc71chs.dll


    66100000[0024D000]
      [ M] 79. d:\program files\alwil software\avast4\chineses\lang.dll


    66500000[0000B000]
      [ M] 80. d:\program files\alwil software\avast4\chineses\langmai.dll


    65780000[00023000]
      [ M] 70. d:\program files\alwil software\avast4\ahjsctns.dll



  + 000006e0(1760) ashWebSv.exe
    00400000[00054000]
      [AM] 4. d:\program files\alwil software\avast4\ashwebsv.exe


    64500000[00035000]
      [ M] 54. d:\program files\alwil software\avast4\ashbase.dll


    7C3A0000[0007B000]
      [ M] 48. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 49. c:\windows\system32\msvcr71.dll


    64000000[00012000]
      [ M] 47. d:\program files\alwil software\avast4\aswcmnos.dll


    64080000[0001F000]
      [ M] 50. d:\program files\alwil software\avast4\aswcmnb.dll


    64100000[0002C000]
      [ M] 46. d:\program files\alwil software\avast4\aswcmns.dll


    65000000[0002D000]
      [ M] 58. d:\program files\alwil software\avast4\aavm4h.dll


    64800000[0001B000]
      [ M] 55. d:\program files\alwil software\avast4\ashtask.dll


    64580000[000A2000]
      [ M] 51. d:\program files\alwil software\avast4\aswaux.dll


    66080000[0000B000]
      [ M] 59. d:\program files\alwil software\avast4\chineses\base.dll


    68300000[00023000]
      [ M] 81. d:\program files\alwil software\avast4\ashwsftr.dll


    64200000[00014000]
      [ M] 53. d:\program files\alwil software\avast4\aswscan.dll


    65A00000[0000F000]
      [ M] 67. d:\program files\alwil software\avast4\ahresws.dll


    64280000[00117000]
      [ M] 52. d:\program files\alwil software\avast4\aswengin.dll



  + 0000071c(1820) SOUNDMAN.EXE
    00400000[0008F000]
      [AM] 36. c:\windows\soundman.exe


    65780000[00023000]
      [ M] 70. d:\program files\alwil software\avast4\ahjsctns.dll

  + 00000724(1828) ashDisp.exe
    00400000[00011000]
      [AM] 37. d:\program files\alwil software\avast4\ashdisp.exe


    64000000[00012000]
      [ M] 47. d:\program files\alwil software\avast4\aswcmnos.dll


    7C3A0000[0007B000]
      [ M] 48. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 49. c:\windows\system32\msvcr71.dll


    64500000[00035000]
      [ M] 54. d:\program files\alwil software\avast4\ashbase.dll


    64080000[0001F000]
      [ M] 50. d:\program files\alwil software\avast4\aswcmnb.dll


    64100000[0002C000]
      [ M] 46. d:\program files\alwil software\avast4\aswcmns.dll


    64800000[0001B000]
      [ M] 55. d:\program files\alwil software\avast4\ashtask.dll


    64580000[000A2000]
      [ M] 51. d:\program files\alwil software\avast4\aswaux.dll


    65000000[0002D000]
      [ M] 58. d:\program files\alwil software\avast4\aavm4h.dll


    66080000[0000B000]
      [ M] 59. d:\program files\alwil software\avast4\chineses\base.dll


    66100000[0024D000]
      [ M] 79. d:\program files\alwil software\avast4\chineses\lang.dll


    7C140000[00103000]
      [ M] 77. c:\windows\system32\mfc71.dll


    5D360000[0000A000]
      [ M] 78. c:\windows\system32\mfc71chs.dll


    65100000[00008000]
      [ M] 82. d:\program files\alwil software\avast4\aavmrpch.dll


    65400000[00011000]
      [ M] 83. d:\program files\alwil software\avast4\ahruimai.dll


    64B00000[0004B000]
      [ M] 75. d:\program files\alwil software\avast4\ashuint.dll


    64C80000[000DE000]
      [ M] 76. d:\program files\alwil software\avast4\xt1922.dll


    65900000[0000A000]
      [ M] 84. d:\program files\alwil software\avast4\ahruimes.dll


    659C0000[0000A000]
      [ M] 85. d:\program files\alwil software\avast4\ahruins.dll


    65300000[00017000]
      [ M] 86. d:\program files\alwil software\avast4\ahruiout.dll


    62060000[0001F000]
      [ M] 87. c:\windows\system32\mapi32.dll


    65940000[0000A000]
      [ M] 88. d:\program files\alwil software\avast4\ahruip2p.dll


    65200000[00011000]
      [ M] 89. d:\program files\alwil software\avast4\ahruistd.dll


    65A40000[00012000]
      [ M] 90. d:\program files\alwil software\avast4\ahruiws.dll


    65500000[00009000]
      [ M] 91. d:\program files\alwil software\avast4\ahruijs.dll


    65780000[00023000]
      [ M] 70. d:\program files\alwil software\avast4\ahjsctns.dll


    72C80000[00008000]
      [ M] 42. c:\windows\system32\msacm32.drv



  + 00000b28(2856) hypwise.exe
    00400000[0002B000]
      [ M] 92. d:\program files\国海证券大智慧\internet\hypwise.exe


    00370000[00009000]
      [ M] 44. c:\windows\system32\normaliz.dll


    41D50000[00045000]
      [ M] 45. c:\windows\system32\iertutil.dll


    5F400000[000F2000]
      [ M] 93. d:\program files\国海证券大智慧\internet\mfc42.dll


    65780000[00023000]
      [ M] 70. d:\program files\alwil software\avast4\ahjsctns.dll



  + 00000e34(3636) Ras.exe
    00400000[0013F000]
      [ M] 94. d:\program files\rising\antispyware\ras.exe


    00370000[00009000]
      [ M] 44. c:\windows\system32\normaliz.dll


    41D50000[00045000]
      [ M] 45. c:\windows\system32\iertutil.dll


    65780000[00023000]
      [ M] 70. d:\program files\alwil software\avast4\ahjsctns.dll


    10000000[000A3000]
      [ M] 95. d:\program files\rising\antispyware\rasgui.dll



  + 00000fe0(4064) 360Safe.exe
    00400000[0012F000]
      [ M] 96. d:\program files\360safe\360safe.exe


    65780000[00023000]
      [ M] 70. d:\program files\alwil software\avast4\ahjsctns.dll


    00B20000[00009000]
      [ M] 44. c:\windows\system32\normaliz.dll


    41D50000[00045000]
      [ M] 45. c:\windows\system32\iertutil.dll


    10000000[00022000]
      [ M] 97. d:\program files\360safe\antiadwa.dll


    00F20000[0003E000]
      [ M] 98. d:\program files\360safe\antieng.dll


    00F60000[0000D000]
      [ M] 99. d:\program files\360safe\antispy.dll


    01540000[00027000]
      [ M] 100. d:\program files\360safe\leakcheck.dll


    02420000[00008000]
      [ M] 101. d:\program files\360safe\cleanhis.dll


    422B0000[005CB000]
      [AM] 29. c:\windows\system32\ieframe.dll


    025E0000[00006000]
      [ M] 102. d:\program files\360safe\antiacti.dll


    015C0000[0001C000]
      [ M] 103. d:\program files\360safe\live.dll

Logfile of HijackThis v1.99.1
Scan saved at 5:54:31, on 2007-7-24
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
d:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
d:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\svchost.exe
d:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
d:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\Program Files\国海证券大智慧\internet\hypwise.exe
D:\Program Files\Tencent\TT\TTraveler.exe
C:\DOCUME~1\502\LOCALS~1\Temp\Rar$EX00.500\HijackThis.exe

R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] d:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Storm2Set] C:\WINDOWS\system32\rundll32.exe "d:\PROGRA~1\StormII\StormSet.dll",CheckEnv
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\Program\geturl.htm
O8 - Extra context menu item: 使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\Program\getallurl.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - d:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra 'Tools' menuitem: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - d:\Program Files\Thunder Network\Thunder\Thunder.exe
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\WINDOWS\system32\shdocvw.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD} (PhotoDraw Class) - http://photo.qq.com/qzone_v4/QzoneMediaTools.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (EditCtrl Class) - https://img.alipay.com/download/1101/aliedit.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://emicice.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {9ADACAA6-533E-4383-AFA7-F0A66650B6D8} (VqqSpeedDlProxy Class) - http://im.qq.com/vqqsdl1230.cab
O16 - DPF: {CEB9866E-C394-4230-82CB-407E7DCED7C7} (Helper Class) - http://tw.stock.yahoo.com/rtq/javatest/DJSysProbe.cab
O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (PasswordEditCtrl Class) - https://password.qq.com/download/qqedit2.cab
O16 - DPF: {E847C78C-C210-4195-8799-FBF3BF89797D} -
O17 - HKLM\System\CCS\Services\Tcpip\..\{493CDC9E-53DA-4DEE-AAAC-952C34F0C77E}: NameServer = 221.7.128.68 221.7.136.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{C43AAAB9-F96C-4222-A7E7-B619FB7859FA}: NameServer = 221.7.128.68
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - d:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - d:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - d:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - d:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: QoS Service (WIDETS) - Unknown owner - C:\WINDOWS\SYSTEM32\RUNDLLFOROUR.EXE (file missing)