瑞星卡卡电脑诊断日志 v1.30 (2008-8-31 8:25:5) 北京瑞星信息技术有限公司
注释: [A]表示该文件存在自启动关联;
[M]表示该文件在内存中;
+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
Adobe LM Service
[A ] 1. c:\program files\common files\adobe systems shared\service\adobelmsvc.exe
aspnet_state
[A ] 2. c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe
iPodService
[A ] 3. c:\program files\ipod\bin\ipodservice.exe
Sysbak_hotkey_Server
[AM] 4. c:\program files\founder\emergency center\hotkey.exe
TeamSun LPC
[AM] 5. c:\program files\founder\ip_phone\slpc.exe
WMPNetworkSvc
[A ] 6. c:\program files\windows media player\wmpnetwk.exe
WudfSvc
[A ] 7. c:\windows\system32\wudfsvc.dll
+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
9you
[A ] 8. c:\windows\system32\drivers\9you.sys
ALCXWDM
[A ] 9. c:\windows\system32\drivers\alcxwdm.sys
EagleNT
[A ] 10. c:\windows\system32\drivers\eaglent.sys
ferdr
[A ] 11. c:\windows\system32\drivers\ferdr.sys
GEARAspiWDM
[A ] 12. c:\windows\system32\drivers\gearaspiwdm.sys
PauseDrv
[A ] 13. c:\windows\system32\drivers\pausedrv.sys
Secdrv
[A ] 14. c:\windows\system32\drivers\secdrv.sys
SiSide
[A ] 15. c:\windows\system32\drivers\siside.sys
SiSkp
[A ] 16. c:\windows\system32\drivers\srvkp.sys
sisperf
[A ] 17. c:\windows\system32\drivers\sisperf.sys
snpshot
[A ] 18. c:\windows\system32\drivers\snpshot.sys
VHDISK
[A ] 19. c:\windows\system32\drivers\vhdisk.sys
WudfPf
[A ] 20. c:\windows\system32\drivers\wudfpf.sys
WudfRd
[A ] 21. c:\windows\system32\drivers\wudfrd.sys
ZSMC303
[A ] 22. c:\windows\system32\drivers\usbvm303.sys
+ 文件系统驱动
+ HKLM\System\CurrentControlSet\Services
sisidex
[A ] 23. c:\windows\system32\drivers\sisidex.sys
+ 系统登陆自运行
+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
PsNotify
[AM] 24. c:\windows\system32\psnotify.dl
+ IE浏览器加载模块
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
{DBAC56F9-1623-425F-BC03-EB2602F423A0}
[AM] 25. c:\program files\中国工商银行\工行ie浏览器安全插件\icbctoolbar.dll
+ HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
[AM] 26. c:\windows\system32\ieframe.dll
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[AM] 27. c:\program files\thunder network\thunder5\comdlls\tdatonce_now.dll
{3049C3E9-B461-4BC5-8870-4C09146192CA}
[AM] 28. c:\program files\real\realplayer\rpbrowserrecordplugin.dll
{889D2FEB-5411-4565-8998-1DD2C5261283}
[AM] 29. c:\program files\thunder network\thunder5\comdlls\xunleibho_now.dll
{90760F64-1931-4AAC-8E2E-AB39AAC071E1}
[AM] 25. c:\program files\中国工商银行\工行ie浏览器安全插件\icbctoolbar.dll
{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
[AM] 30. c:\windows\system32\urlfilter.dll
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
Exec
[A ] 31. c:\program files\thunder network\thunder5\thunder.exe
Exec
[A ] 32. c:\program files\pplive\pplive.exe
Exec
[A ] 33. c:\windows\network diagnostic\xpnetdiag.exe
+ 资源管理器加载模块
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
application/octet-stream
[A ] 34. c:\windows\system32\mscoree.dll
application/x-complus
[A ] 34. c:\windows\system32\mscoree.dll
application/x-msdownload
[A ] 34. c:\windows\system32\mscoree.dll
+ HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
[A ] 35. c:\windows\system32\ieudinit.exe
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 36. c:\windows\system32\hticons.dll
IE Search Band
[AM] 26. c:\windows\system32\ieframe.dll
Shell DocObject Viewer
[AM] 26. c:\windows\system32\ieframe.dll
InternetShortcut
[AM] 26. c:\windows\system32\ieframe.dll
Microsoft Url History Service
[AM] 26. c:\windows\system32\ieframe.dll
History
[AM] 26. c:\windows\system32\ieframe.dll
Temporary Internet Files
[AM] 26. c:\windows\system32\ieframe.dll
Temporary Internet Files
[AM] 26. c:\windows\system32\ieframe.dll
Microsoft Url Search Hook
[AM] 26. c:\windows\system32\ieframe.dll
The Internet
[AM] 26. c:\windows\system32\ieframe.dll
Internet Name Space
[AM] 26. c:\windows\system32\ieframe.dll
Fusion Cache
[A ] 34. c:\windows\system32\mscoree.dll
iTunes
[A ] 37. c:\program files\itunes\itunesminiplayer.dll
WinRAR shell extension
[AM] 38. c:\program files\winrar\rarext.dll
IE Microsoft BrowserBand
[AM] 26. c:\windows\system32\ieframe.dll
IE Fade Task
[AM] 26. c:\windows\system32\ieframe.dll
IE Menu Desk Bar
[AM] 26. c:\windows\system32\ieframe.dll
IE AutoComplete
[AM] 26. c:\windows\system32\ieframe.dll
IE Navigation Bar
[AM] 26. c:\windows\system32\ieframe.dll
IE Menu Site
[AM] 26. c:\windows\system32\ieframe.dll
IE Menu Band
[AM] 26. c:\windows\system32\ieframe.dll
IE Microsoft History AutoComplete List
[AM] 26. c:\windows\system32\ieframe.dll
IE Tracking Shell Menu
[AM] 26. c:\windows\system32\ieframe.dll
IE IShellFolderBand
[AM] 26. c:\windows\system32\ieframe.dll
IE BandProxy
[AM] 26. c:\windows\system32\ieframe.dll
IE MRU AutoComplete List
[AM] 26. c:\windows\system32\ieframe.dll
IE RSS Feeder Folder
[AM] 26. c:\windows\system32\ieframe.dll
IE Microsoft Shell Folder AutoComplete List
[AM] 26. c:\windows\system32\ieframe.dll
IE Microsoft Multiple AutoComplete List Container
[AM] 26. c:\windows\system32\ieframe.dll
Microsoft Browser Architecture
[AM] 26. c:\windows\system32\ieframe.dll
IE Shell Rebar BandSite
[AM] 26. c:\windows\system32\ieframe.dll
IE Shell Band Site Menu
[AM] 26. c:\windows\system32\ieframe.dll
&Links
[AM] 26. c:\windows\system32\ieframe.dll
IE Registry Tree Options Utility
[AM] 26. c:\windows\system32\ieframe.dll
IE User Assist
[AM] 26. c:\windows\system32\ieframe.dll
IE Custom MRU AutoCompleted List
[AM] 26. c:\windows\system32\ieframe.dll
Shell Extensions for RealOne Player
[A ] 39. c:\program files\real\realplayer\rpshell.dll
Portable Media Devices
[A ] 40. c:\windows\system32\audiodev.dll
Portable Media Devices Menu
[A ] 40. c:\windows\system32\audiodev.dll
Portable Devices
[A ] 41. c:\windows\system32\wpdshext.dll
Portable Devices Menu
[A ] 41. c:\windows\system32\wpdshext.dll
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
WPDShServiceObj
[AM] 42. c:\windows\system32\wpdshserviceobj.dll
+ 用户登陆自运行项目
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
jmekey
[AM] 43. c:\program files\jmesoft\hotkey.exe
CameraFixer
[AM] 44. c:\windows\camerafixer.exe
BigDog303
[A ] 45. c:\windows\vm303_sti.exe
PowerRemind
[A ] 46. c:\windows\system32\shadow\powerremind.exe
runeip
[AM] 47. c:\program files\rising\antispyware\rstray.exe
+ 映像劫持
+ HKCR\.html
htmlfile\Edit\Command
[A ] 48. d:\program files\microsoft office 2003\office\msohtmed.exe
+ HKCR\.htm
htmlfile\Edit\Command
[A ] 48. d:\program files\microsoft office 2003\office\msohtmed.exe
+ HKCR\.mp3
mp3file\QQMusic.1.Play\Command
[A ] 49. c:\program files\tencent\qq\qqmusic.exe
mp3file\QQMusic.2.Add\Command
[A ] 49. c:\program files\tencent\qq\qqmusic.exe
+ 程序初始化和已知动态连接库
+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs
[AM] 50. c:\windows\system32\kmon.dll
+ 其他自启动项目
+ C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Utility Tray.lnk
[AM] 51. c:\windows\system32\sistray.exe
+ C:\WINDOWS\Tasks
User_Feed_Synchronization-{D59740A2-BC38-4C11-BBF6-E23CECB76F13}.job
[A ] 52. c:\windows\system32\msfeedssync.exe
用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; .NET CLR 1.1.4322)
