2008-3-28 12:29
一番
大虾们，来救救我吧！！！软件刚上传了
大虾们，来救救我吧！！！软件刚上传了
各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
我中的有可能是灰鸽子最新病毒，我下载个软件打开，AVG出现拦截三个毒：windows/卡巴反病毒软件.exe,二个windows/system/system01. 因为这个软件太需要就放过了，结果用过了，在安全模式用AVG和瑞星都杀不了，重启后把我的AVG和360都搞掉了，我又重装了下。请各位大虾们，帮帮忙。谢谢！！！！！！！！！！！！！
软件刚上传了，请大虾们看看了。
该诊断报告由360安全卫士提供 [url=http://www.360safe.com]http://www.360safe.com[/url]
诊断时间: 2008-01-15 16:57:40
诊断平台: Microsoft Windows XP Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:446.11MB - 当前可用内存:164.59MB
100 - 未知 - Process: RavMonD.exe [Rising Realtime Moniter] - F:\软件\瑞星\Rising\Rav\RavMonD.exe
100 - 未知 - Process: rfwsrv.exe [Rising Personal FireWall Service] - f:\软件\瑞星\rising\rfw\rfwsrv.exe
100 - 未知 - Process: rfwstub.exe [Rising Personal FireWall Service Rfwstub ] - f:\软件\瑞星\rising\rfw\rfwstub.exe
100 - 未知 - Process: rfwProxy.exe [Rising Personal Proxy Service] - f:\软件\瑞星\rising\rfw\rfwproxy.exe
100 - 未知 - Process: RavStub.exe [Rising RavStub] - F:\软件\瑞星\Rising\Rav\RavStub.exe /RAVMOND=1023
100 - 未知 - Process: guard.exe [AVG Anti-Spyware guard] -
100 - 未知 - Process: GizmoPlugin.exe [Gizmo Plugin] - C:\Program Files\GizmoPlugin\GizmoPlugin.exe
100 - 未知 - Process: rfwmain.exe [Rising Personal FireWall Main Program] - f:\软件\瑞星\rising\rfw\RfwMain.exe
100 - 未知 - Process: openvpnas.exe [] - F:\软件\VPN1\Hotspot Shield\bin\openvpnas.exe
100 - 未知 - Process: RavTask.exe [RavTimer] - F:\软件\瑞星\Rising\Rav\RavTask.exe
100 - 未知 - Process: AntiArp.exe [360ARP防火墙] - F:\软件\瑞星\360safe\antiarp\antiarp.exe
100 - 未知 - Process: CRavgas.exe [AVG Anti-Spyware] - F:\软件\AVG\AVG Anti-Spyware 7.5\CRavgas.exe
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.baidu.com/
O2 - 未知 - BHO: (浏览器辅助对象(BHO)) - [RoboForm Main Module] - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - 未知 - Toolbar: (&RoboForm) - [RoboForm Main Module] - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{710EB7A1-45ED-11D0-924A-0020AFC7AC4D}] - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} -
O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{1E796980-9CC5-11D1-A83F-00C04FC99D61}] - {1E796980-9CC5-11D1-A83F-00C04FC99D61} -
O4 - 未知 - HKLM\..\Run: [iResearchiClick] [iResearch iClick艾瑞调研通] "F:\软件\调查\艾瑞调查\ICLICK\iResearchiClick.exe" -d 150
O8 - 未知 - Extra context menu item: &使用BitComet下载 - res://D:\电影\BT\BitComet\BitComet.exe/AddLink.htm
O8 - 未知 - Extra context menu item: &使用BitComet下载全部链接 - res://D:\电影\BT\BitComet\BitComet.exe/AddAllLink.htm
O8 - 未知 - Extra context menu item: &使用BitComet下载本页视频 - res://D:\电影\BT\BitComet\BitComet.exe/AddVideo.htm
O8 - 未知 - Extra context menu item: Foxy 下載 - res://F:\软件\和谐湾电影\Foxy\Foxy.exe/download.htm
O8 - 未知 - Extra context menu item: Foxy 搜尋 - res://F:\软件\和谐湾电影\Foxy\Foxy.exe/search.htm
O8 - 未知 - Extra context menu item: Foxy 穓碝 - res://F:\软件\和谐湾电影\Foxy\Foxy.exe/search.htm
O8 - 未知 - Extra context menu item: Foxy 更 - res://F:\软件\和谐湾电影\Foxy\Foxy.exe/download.htm
O8 - 未知 - Extra context menu item: RoboForm工具栏 - [url=file://C:\Program]file://C:\Program[/url] Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - 未知 - Extra context menu item: 保存表单 - [url=file://C:\Program]file://C:\Program[/url] Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - 未知 - Extra context menu item: 填写表单 - [url=file://C:\Program]file://C:\Program[/url] Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - 未知 - Extra context menu item: 定制菜单 - [url=file://C:\Program]file://C:\Program[/url] Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - 未知 - Extra context menu item: 添加到QQ表情 - E:\游戏\qq\AddEmotion.htm
O9 - 未知 - Extra button: 启动迅雷5(HKLM) - F:\软件\迅雷程序\新建文件夹\Thunder.exe
O9 - 未知 - Extra button: 填写表单(HKLM) - [url=file://C:\Program]file://C:\Program[/url] Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - 未知 - Extra button: 保存表单(HKLM) - [url=file://C:\Program]file://C:\Program[/url] Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - 未知 - Extra button: RoboForm工具栏(HKLM) - [url=file://C:\Program]file://C:\Program[/url] Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O16 - 未知 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - [url=http://go.microsoft.com/fwlink/?linkid=39204http://go.microsoft.com/fwlink/?linkid=39204[/color[/url]]
O16 - 未知 - DPF: {1DE88635-1C72-401E-B23B-93FA86D30F3B} (SSReaderPlug) - [url=http://reg.ssreader.com/SSReaderPlug.cabhttp://reg.ssreader.com/SSReaderPlug.cab[/color[/url]]
O16 - 未知 - DPF: 无效的CLSID：{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} ({3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}) - [url=http://dl.tvunetworks.com/TVUAx.cabhttp://dl.tvunetworks.com/TVUAx.cab[/color[/url]]
O16 - 未知 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (EditCtrl) - [url=https://img.alipay.com/download/1101/aliedit.cabhttps://img.alipay.com/download/1101/aliedit.cab[/color[/url]]
O16 - 未知 - DPF: {52FF336D-A05D-4A14-A3A1-7B6B4B427F88} (UploadControl Control) - [url=http://st.blog.163.com/bin/UploadControl.cabhttp://st.blog.163.com/bin/UploadControl.cab[/color[/url]]
O16 - 未知 - DPF: {6DBB2904-082D-4DB0-944A-21C22BA121F4} (CCtInf) - [url=http://www.95599.cn/perbank/BankControl.cabhttp://www.95599.cn/perbank/BankControl.cab[/color[/url]]
O16 - 未知 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () - [url=http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cabhttp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab[/color[/url]]
O16 - 未知 - DPF: {A32FDAE8-0FBC-48CF-83A0-A980075B4DBA} (XPhone Control) - [url=http://58.30.16.134:83/click2call/SWTWEBPHONE.CABhttp://58.30.16.134:83/click2call/SWTWEBPHONE.CAB[/color[/url]]
O16 - 未知 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (PasswordEditCtrl) - [url=https://password.qq.com/download/qqedit2.cabhttps://password.qq.com/download/qqedit2.cab[/color[/url]]
O18 - 未知 - Protocol: 电子书编译工具Web Compiler相关 - {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} - C:\WINDOWS\wc98pp.dll
O23 - 未知 - Service: AVG Anti-Spyware Guard [AVG Anti-Spyware Guard] - F:\软件\ewido\AVG Anti-Spyware 7.5\guard.exe - (running)
O23 - 未知 - Service: EBOOSTRSVC [eBoostr cache managment service] - F:\软件\加速\新建文件夹\eBoostr\EBstrSvc.exe - (not running)
O23 - 未知 - Service: ewido anti-spyware 4.0 guard [ewido anti-spyware 4.0 guard] - - (not running)
O23 - 未知 - Service: Gizmo Plugin [Gizmo VoIP Service] - "C:\Program Files\GizmoPlugin\GizmoPlugin.exe" - (running)
O23 - 未知 - Service: HotspotShieldService [Hotspot Shield Service] - F:\软件\VPN1\Hotspot Shield\bin\openvpnas.exe - (running)
O23 - 未知 - Service: idsvc [Securely enables the creation, management, and disclosure of digital identities.] - "C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" - (error)
O23 - 未知 - Service: Internet system [Internet system] - C:\WINDOWS\system\system01 - (not running)
O23 - 未知 - Service: MOBILL [提供域名系统 (DNS) 名称解析扩展，有效提高网络访问速度。] - C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\SQPHX.DLL,Export 1087 - (not running)
O23 - 未知 - Service: NetTcpPortSharing [Provides ability to share TCP ports over the net.tcp protocol.] - "C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" - (not running)
O23 - 未知 - Service: RfwProxySrv [Rising Personal Proxy Service] - f:\软件\瑞星\rising\rfw\rfwproxy.exe - (running)
O23 - 未知 - Service: RfwService [Rising Personal Firewall Service] - f:\软件\瑞星\rising\rfw\rfwsrv.exe - (running)
O23 - 未知 - Service: RsCCenter [Rising Process Communication Center] - "F:\软件\瑞星\Rising\Rav\CCenter.exe" - (running)
O23 - 未知 - Service: RsRavMon [Rising RealTime Monitor] - "F:\软件\瑞星\Rising\Rav\RavMonD.exe" - (running)
O23 - 未知 - Service: Security [Windows 文件卷的优化服务，使得系统具有更快的文件卷访问和存取功能。如果停止服务，帮助和支持中心将不可用。] - C:\WINDOWS\System32\svchost.exe -k netsvcs - (not running)
O23 - 未知 - Service: ServiceLayer [ServiceLayer] - "C:\Program Files\PC Connectivity Solution\ServiceLayer.exe" - (not running)
=======================================
100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] - F:\软件\瑞星\Rising\Rav\CCenter.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - F:\软件\瑞星\360safe\safemon\360Tray.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - F:\软件\瑞星\360safe\360safe.exe
100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\IEXPLORE.EXE
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=about:blank
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O2 - 安全 - BHO: (BitComet Helper) - [下载软件BitComet的相关程序。] - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\电影\BT\BitComet\tools\BitCometBHO_1.1.2.7.dll
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] F:\软件\瑞星\360safe\safemon\360Tray.exe /start
O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "F:\软件\瑞星\Rising\Rav\RavTask.exe" -system
O4 - 安全 - HKLM\..\Run: [RfwMain] [瑞星防火墙程序，抵御黑客攻击。] "F:\软件\瑞星\Rising\Rfw\rfwmain.exe" -Startup
O4 - 安全 - HKLM\..\Run: [360Antiarp] [360安全卫士ARP防火墙相关程序。] F:\软件\瑞星\360safe\antiarp\antiarp.exe /start
O4 - 安全 - HKLM\..\Run: [!AVG Anti-Spyware] [一款杀毒软件AVG的相关启动程序。] "F:\软件\AVG\AVG Anti-Spyware 7.5\CRavgas.exe" /minimized
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O8 - 安全 - Extra context menu item: &使用迅雷下载 - F:\软件\迅雷程序\新建文件夹\Program\geturl.htm
O8 - 安全 - Extra context menu item: &使用迅雷下载全部链接 - F:\软件\迅雷程序\新建文件夹\Program\getallurl.htm
O16 - 安全 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (中国工商银行个人银行) - [url=https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab]https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab[/url]
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - 安全 - Service: Adobe LM Service [adobe公司相关产品的许可服务程序。] - "C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" - (not running)
=======================================
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Windows Script Host 的 Shell extensions - - - - - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell Extensions for RealOne Player - - - - - 0 -
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 124416 - 1b089bd70767a1ca5419a24b581cc753
O31 - 未知 - SEApproved: 无效的CLSID：TuneUp 碎纸机 - - - - - 0 -
O31 - 未知 - SEApproved: {85E0B171-04FA-11D1-B7DA-00A0C90348D6} - F:\软件\卡巴斯基反病毒软件 6.0.0.307 简体中文个人版\scieplugin.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：CorelDRAW Shell Extension Component - - - - - 0 -
O31 - 未知 - SEApproved: {416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} - F:\pc\Nokia PC Suite 6\PhoneBrowser.dll - Nokia - Phone Browser - 6.84.83.7 - 562688 - 600d719d720715b28c3234c624e95bab
O31 - 未知 - SEApproved: {e82a2d71-5b2f-43a0-97b8-81be15854de8} - C:\WINDOWS\system32\dfshim.dll - Microsoft Corporation - Application Deployment Support Library - 2.0.50727.42 - 83456 - b3511383c8be3a8c5b88a78971fc1141
O31 - 未知 - SEApproved: {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} - C:\WINDOWS\system32\dfshim.dll - Microsoft Corporation - Application Deployment Support Library - 2.0.50727.42 - 83456 - b3511383c8be3a8c5b88a78971fc1141
O31 - 未知 - SEApproved: {24BA04A9-97F7-4744-ABE9-8DF91792B9B5} - F:\软件\木马清~1.8绿\WINDOW~1.8上\ftcsetup\Commenu.dll - Fygsoft and Microsoft - Com组件菜单 - 3.0.0.63 - 193536 - 46cb540baee1bc002a34313a34a84ae2
O31 - 未知 - SEApproved: {376305F3-4C23-4DE5-AD69-7205BA2DA2C8} - C:\Documents and Settings\new\Application Data\Foxy\LinkMaker.dll - - Foxy連結產生工具 - 1.1.1.0 - 113152 - b1a7ce5302bea70a0f471f4ba246ac88
O31 - 未知 - Directory Menu: {24BA04A9-97F7-4744-ABE9-8DF91792B9B5} - F:\软件\木马清~1.8绿\WINDOW~1.8上\ftcsetup\Commenu.dll - Fygsoft and Microsoft - Com组件菜单 - 3.0.0.63 - 193536 - 46cb540baee1bc002a34313a34a84ae2
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 124416 - 1b089bd70767a1ca5419a24b581cc753
O31 - 未知 - BootExecute: bsmain - - - - 0 -
O31 - 未知 - BootExecute: - - - - 0 -
O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 -
=======================================
=======================================
O41 - BaseTDI - basetdi - C:\WINDOWS\system32\drivers\BASETDI.SYS - (running) - basetdi - Beijing Rising Technology Co., Ltd. - 0064810c1b03f2c889130b669a4ce937
O41 - PxHelp20 - Px Engine Device Driver for Windows 2000/XP - C:\WINDOWS\system32\drivers\pxhelp20.sys - (running) - Px Engine Device Driver for Windows 2000/XP - Sonic Solutions - b572ed0c3e6165643fa116af20425a54
O41 - RsAntiSpyware - Anti-RootKit Driver - C:\WINDOWS\system32\drivers\RsBoot.sys - (running) - Anti-RootKit Driver - Beijing Rising Technology Co., Ltd. - f9edc97f228c046832a24b5a76017912
O41 - SafeBoxKrnl - 360安全卫士 - 保险箱 - F:\软件\瑞星\360保险箱\360Safebox\SafeBoxKrnl.sys - (running) - 360安全卫士 - 保险箱 - 奇虎网 - fa5bed11e5476635922d303fb1730b05
O41 - tapvpn - TAP-Win32 Virtual Network Driver - C:\WINDOWS\system32\drivers\tapvpn.sys - (running) - TAP-Win32 Virtual Network Driver - The OpenVPN Project - 27a2c318cd28cfb3eb2200fd96af1e58
O41 - viamraid - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32 - C:\WINDOWS\system32\drivers\viamraid.sys - (running) - VIA RAID DRIVER FOR WIN 2000/XP/2003IA32 - VIA Technologies inc,.ltd - f199939205dccc7836ae5ab8b5dd5e83
O41 - a320raid - Adaptec HostRAID for Ultra320 SCSI - C:\WINDOWS\system32\drivers\a320raid.sys - (not running) - Adaptec HostRAID for Ultra320 SCSI - Adaptec, Inc. - 0532434d53314ee8858b7bfdbe761837
O41 - AAC - Adaptec RAID Miniport Driver - C:\WINDOWS\system32\drivers\aac.sys - (not running) - Adaptec RAID Miniport Driver - Adaptec, Inc. - f9ee3c7a185d121b145164cb10c057a7
O41 - aar1210 - Adaptec HostRAID for Serial ATA - C:\WINDOWS\system32\drivers\aar1210.sys - (not running) - Adaptec HostRAID for Serial ATA - Adaptec, Inc. - 316945ebc9398f222a6fff3d04d41fcb
O41 - aec6210 - aec6210 - C:\WINDOWS\system32\drivers\AEC6210.sys - (not running) - - ACARD Technology Corp. - 38e6c035e89fb8b079301e71b2523f3d
O41 - aec6260 - ID=0006, 0007 - C:\WINDOWS\system32\drivers\AEC6260.sys - (not running) - ID=0006, 0007 - ACARD Technology Corp. - db227bd0ba1f29bb38950f8fd97caa35
O41 - aec6280 - AEC6280 Miniport Driver - C:\WINDOWS\system32\drivers\AEC6280.SYS - (not running) - AEC6280 Miniport Driver - ACARD Technology Corp. - 71c3ab81b22c151a2e2ba97ec53430ca
O41 - AEC6290 - AEC6280 Miniport Driver - C:\WINDOWS\system32\drivers\AEC6290.SYS - (not running) - AEC6280 Miniport Driver - ACARD Technology Corp. - 71c3ab81b22c151a2e2ba97ec53430ca
O41 - AEC67160 - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - C:\WINDOWS\system32\drivers\AEC67160.SYS - (not running) - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - ACARD Technology Corp. - f2b276e8f4057dd1ba2bd40ecaf1ac57
O41 - AEC671X - AEC671X PCI Ultra/W SCSI3 Adapter Driver - C:\WINDOWS\system32\drivers\AEC671X.SYS - (not running) - AEC671X PCI Ultra/W SCSI3 Adapter Driver - ACARD Technology Corp. - 9493824293585203212d0157cb2430a7
O41 - AEC6880 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\drivers\AEC6880.SYS - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 415f252cee34bbf839acbcadb2bc85ce
O41 - AEC6890 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\drivers\AEC6890.SYS - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 415f252cee34bbf839acbcadb2bc85ce
O41 - aec68x5 - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - C:\WINDOWS\system32\drivers\aec68X5.sys - (not running) - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - ACARD Technology Corp. - 6275261ebb499358ff5c5cf901f7ad6c
O41 - dump_wmimmc - dump_wmimmc - E:\游戏\卡丁车\M01\GameGuard\dump_wmimmc.sys - (not running) - - -
O41 - ExpScaner - ExpScaner - F:\软件\瑞星\RISING\RAV\ExpScan.sys - (not running) - - -
O41 - FASTSX - Promise FastTRAK SX4/SX4000 Driver for WindowsXP - C:\WINDOWS\system32\drivers\fastsx.sys - (not running) - Promise FastTRAK SX4/SX4000 Driver for WindowsXP - Promise Technology, Inc. - 21ab10bc1c78a68cdf0cbd304dbfb7fa
O41 - fasttrak - Promise FastTrak Series Driver for WinXP - C:\WINDOWS\system32\drivers\fasttrak.sys - (not running) - Promise FastTrak Series Driver for WinXP - Promise Technology, Inc. - eb1c078d99cc081c1d2ae3a19e2284cc
O41 - fasttx2k - Promise Driver for Windows XP - C:\WINDOWS\system32\drivers\fasttx2k.sys - (not running) - Promise Driver for Windows XP - Promise Technology, Inc. - 5d95724d3c3923449c02be1106657bcd
O41 - fasttx2k2 - Promise FastTrak Series Driver for WindowsXP - C:\WINDOWS\system32\drivers\fasttx2k2.sys - (not running) - Promise FastTrak Series Driver for WindowsXP - Promise Technology, Inc. - c127946de07bbb00f69f78923577dae4
O41 - gnlan01 - GNWay Virtual Network Driver - C:\WINDOWS\system32\drivers\gnlan01.sys - (not running) - GNWay Virtual Network Driver - GNWay - 0b19ae0f02e557c854a1ae2341aa6299
O41 - Hpt366 - ATAPI IDE Miniport Driver - C:\WINDOWS\system32\drivers\hpt366.sys - (not running) - ATAPI IDE Miniport Driver - Microsoft Corporation - 4e4c5dde3eb4e9392c9659818790ed6c
O41 - HPT371 - HPT3xx Miniport Driver - C:\WINDOWS\system32\drivers\hpt371.sys - (not running) - HPT3xx Miniport Driver - HighPoint Technologies, Inc. - cac96d5be76a3d20c41759b12167c09b
O41 - hpt374 - HPT374 Miniport Driver - C:\WINDOWS\system32\drivers\hpt374.sys - (not running) - HPT374 Miniport Driver - HighPoint Technologies, Inc. - ccee236589335d118e22d0fe400233a6
O41 - hpt3xx - HPT3xx Miniport Driver - C:\WINDOWS\system32\drivers\hpt3xx.sys - (not running) - HPT3xx Miniport Driver - HighPoint Technologies, Inc. - 9f2dfe54317b1cd38143686935a278d9
O41 - hptmv - hptmv Miniport Driver - C:\WINDOWS\system32\drivers\hptmv.sys - (not running) - hptmv Miniport Driver - HighPoint Technologies, Inc. - 4f92f14095d52ca870039b192a3319b0
O41 - hptpro - Hptpro - C:\WINDOWS\system32\drivers\hptpro.sys - (not running) - Hptpro - HighPoint Technologies, Inc. - 977716f8a6edda986fdb41de52bdb689
O41 - iaStor - Intel Application Accelerator driver - C:\WINDOWS\system32\drivers\iastor.sys - (not running) - Intel Application Accelerator driver - Intel Corporation - bdce6b54e1d7d8399175a83a02274b7a
O41 - kmsinput - kmsinput - C:\WINDOWS\system32\drivers\kmsinput.sys - (not running) - - - f8d6ebcb50c02b42c5ffd5393229c6b6
O41 - m5228 - M5228 ATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5228.sys - (not running) - M5228 ATA RAID Controller Driver - ALi Corporation. - 4bc8aa133cdb516392ac76d9948138bc
O41 - m5281 - M5281 SATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5281.sys - (not running) - M5281 SATA RAID Controller Driver - ALi Corporation - 3bb7e4f0d880c57b75ab2197f6e21897
O41 - MEMSCAN - MEMSCAN - F:\软件\瑞星\RISING\RAV\MEMSCAN.sys - (not running) - - -
O41 - mraid2k - MEGARAID SCSI Controller Driver for Windows 2000 PAE - C:\WINDOWS\system32\drivers\MRAID2K.SYS - (not running) - MEGARAID SCSI Controller Driver for Windows 2000 PAE - American Megatrends, Inc. - a7bb113a38b04c0296bfa76b41d92f95
O41 - NPF - NPF Driver - TME extensions - C:\WINDOWS\system32\drivers\npf.sys - (not running) - NPF Driver - TME extensions - Politecnico di Torino - f498c5c3399a60933196fc215ef074f9
O41 - npkcrypt - npkcrypt - E:\游戏\qq\npkcrypt.sys - (not running) - - -
O41 - npkycryp - npkycryp - E:\游戏\qq\npkycryp.sys - (not running) - - -
O41 - NPPTNT2 - nProtect NPSC Kernel Mode Driver for NT - C:\WINDOWS\system32\npptNT2.sys - (not running) - nProtect NPSC Kernel Mode Driver for NT - INCA Internet Co., Ltd. - 9131fe60adfab595c8da53ad6a06aa31
O41 - NvAtaBus - NVIDIA? nForce(TM) IDE Performance Driver - C:\WINDOWS\system32\drivers\NvAtaBus.sys - (not running) - NVIDIA? nForce(TM) IDE Performance Driver - NVIDIA Corporation - a1f88223528aadbb6374132becbbdcc1
O41 - PNP649R - IDE RAID miniport driver - C:\WINDOWS\system32\drivers\PnP649r.sys - (not running) - IDE RAID miniport driver - CMD Technology, Inc. - 5a5a6a1003eecd15df2f383972e86188
O41 - Pnp680 - DMA capable ATA miniport driver - C:\WINDOWS\system32\drivers\Pnp680.sys - (not running) - DMA capable ATA miniport driver - Silicon Image, Inc. - 023657a82e76ad98f3fafbd1ec425a71
O41 - Pnp680r - DMA capable ATA RAID miniport driver - C:\WINDOWS\system32\drivers\PnP680r.sys - (not running) - DMA capable ATA RAID miniport driver - Silicon Image, Inc - a1d7a9214b71ebbb6f31cb84aac15525
O41 - RAIDSRC - Intel(r)/ICP Miniport Driver - C:\WINDOWS\system32\drivers\raidsrc.sys - (not running) - Intel(r)/ICP Miniport Driver - Intel/ICP - 4ba4a4ac184ed0cf15faa62e2375883f
O41 - RSPPSYS - RSPPSYS - F:\软件\瑞星\RISING\RAV\RSPPSYS.sys - (not running) - - -
O41 - S150SX8 - Promise SATAII150 SX8 Driver for WindowsXP - C:\WINDOWS\system32\drivers\S150sx8.sys - (not running) - Promise SATAII150 SX8 Driver for WindowsXP - Promise Technology, Inc. - 13d1e68b006ae72276079f5fcbe5a471
O41 - SI3112 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3112.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - 77f5cf403657f5086df7f4ed1f497cbb
O41 - SI3112r - Serial ATA RAID Miniport Driver - C:\WINDOWS\system32\drivers\Si3112r.sys - (not running) - Serial ATA RAID Miniport Driver - Silicon Image, Inc - d89dde61753a3b5d64e15a1a925588cc
O41 - SI3114 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3114.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - 9c67403714df81c8bdf177ce440c9d84
O41 - SI3114r - SATARAID Miniport Driver - C:\WINDOWS\system32\drivers\Si3114r.sys - (not running) - SATARAID Miniport Driver - Silicon Image, Inc - 53ee85fa0b48eb64031a190adf23c8d8
O41 - SI3124 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3124.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - da09038c6d12cf69031b515741250f7b
O41 - SI3124r - SATARAID miniport driver (PRE-RELEASE) - C:\WINDOWS\system32\drivers\Si3124r.sys - (not running) - SATARAID miniport driver (PRE-RELEASE) - Silicon Image, Inc - 0c71855057883e63ca2c19736cbab018
O41 - SiFilter - Windows Accelerator Driver - C:\WINDOWS\system32\drivers\SiWinAcc.sys - (not running) - Windows Accelerator Driver - Silicon Image, Inc. - 1582e88c6f340627247b1ecd00fa84fe
O41 - SISIDE - SiS PCI Mini IDE Driver - C:\WINDOWS\system32\drivers\siside.sys - (not running) - SiS PCI Mini IDE Driver - Silicon Integrated Systems Corp. - b4485881bd8aed9b157a2e6cf43c2d51
O41 - SiSRaid - SiS RAID Miniport Driver - C:\WINDOWS\system32\drivers\sisraid.sys - (not running) - SiS RAID Miniport Driver - Silicon Integrated Systems - 4c597e4de6edf6453990059ba0eac7d0
O41 - SiSRaid1 - SiS RAID Miniport Driver - C:\WINDOWS\system32\drivers\sisraid1.sys - (not running) - SiS RAID Miniport Driver - Silicon Integrated Systems - 52192d1a30ae56a203c047213b0f596b
O41 - SISRAIDS - SiS RAID Miniport Driver - C:\WINDOWS\system32\drivers\SISRAIDS.SYS - (not running) - SiS RAID Miniport Driver - Silicon Integrated Systems Corp - 46cecd8f57e63bdb9d6c9f130be2d97c
O41 - sptrak - Promise SuperTrak Family Driver for WindowsNT - C:\WINDOWS\system32\drivers\Sptrak.sys - (not running) - Promise SuperTrak Family Driver for WindowsNT - Promise Technology, Inc. - b04bdc24f80ecb319f64189194399989
O41 - SYMMPI - LSI Logic Fusion-MPT MiniPort Driver (ScsiPort) - C:\WINDOWS\system32\drivers\symmpi.sys - (not running) - LSI Logic Fusion-MPT MiniPort Driver (ScsiPort) - LSI Logic - 3adffb39782474652f4ea2cf1345b340
O41 - ULSATAS - Promise SATAII150 Series Driver for Win2003 - C:\WINDOWS\system32\drivers\ulsatas.sys - (not running) - Promise SATAII150 Series Driver for Win2003 - Promise Technology, Inc. - 0c5583d3bb02e78e639eac234e97d515
O41 - viapdsk - VIA VT4149 PATA Driver - C:\WINDOWS\system32\drivers\viapdsk.sys - (not running) - VIA VT4149 PATA Driver - VIA Technologies, Inc. - f314359357b6960eb727620470ffc9cf
O41 - viaraid - VT6410 RAID DRIVER FOR WINXP - C:\WINDOWS\system32\drivers\viaraid.sys - (not running) - VT6410 RAID DRIVER FOR WINXP - VIA Technologies inc,.ltd - 29d02cee410d4ed80014bbf0fc98bd2d
O41 - viasraid - VIA SATA RAID DRIVER FOR WINXP - C:\WINDOWS\system32\drivers\viasraid.sys - (not running) - VIA SATA RAID DRIVER FOR WINXP - VIA Technologies inc,.ltd - ebe101c01d80a42868f57b327be1b564
O41 - vmscsi - VMware SCSI Controller - C:\WINDOWS\system32\drivers\vmscsi.sys - (not running) - VMware SCSI Controller - VMware, Inc. - cd8a1f04836111dc0e6c0cd904b3c660
O41 - vpn-x - Derived from TAP-Win32 Virtual Network Driver(OpenVPN) - C:\WINDOWS\system32\drivers\vpn-x.sys - (not running) - Derived from TAP-Win32 Virtual Network Driver(OpenVPN) - BirdsSoft - 7509b34a935cec3663dba625c2ada13d
O41 - xpo0561 - XPO-VPN Adapter Driver - C:\WINDOWS\system32\drivers\xpo0561.sys - (not running) - XPO-VPN Adapter Driver - The XPO-VPN Product - 62a709b88357c7e44d2f83cf2c21e76d
=======================================
360Safe.exe=3.7.0.1005
AntiAdwa.dll=3.6.3.1001
AntiEng.dll=3.6.4.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
safelive.exe=1.0.0.2007
live.dll=1.0.1.1021
=======================================
操作历史报告：
----------清理恶评及系统插件历史----------
2007-12-08 11:21
清理恶评软件 - Cnnic中文上网 -
2007-12-08 13:23
清理恶评软件 - Cnnic中文上网 -
2007-12-08 11:15
清理恶评插件 - Cnnic中文上网 -
2007-12-08 11:22
清理恶评插件 - Cnnic中文上网 -
2007-12-08 11:27
清理恶评插件 - Cnnic中文上网 -
2007-12-08 13:26
清理恶评插件 - Cnnic中文上网 -
2008-01-08 11:09
清理恶评插件 - Cnnic无忧上网工具条 -
2008-01-08 11:10
清理其它插件 - 搜狐播放器 -
2008-01-08 11:11
清理其它插件 - 悠视网络电视 -
2008-01-11 09:26
清理恶评插件 - 灰鸽子变种0024 - C:\WINDOWS\svch0st.exe
----------全面诊断修复历史----------
2007-11-16 15:27
O5 - 危险 - 隐藏“文件”菜单 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
O6 - 危险 - 隐藏IE工具栏Internet选项 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
----------修复IE浏览器操作历史----------
2007-12-07 21:37
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
O21 - 危险 - http协议缺省启动程序 - "F:\软件\腾讯TT\Maxthon\Maxthon.exe" "%1"
O21 - 危险 - ftp协议缺省启动程序 - "F:\软件\腾讯TT\Maxthon\Maxthon.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "F:\软件\腾讯TT\Maxthon\Maxthon.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "F:\软件\腾讯TT\Maxthon\Maxthon.exe" "%1"
2007-12-08 11:16
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
2007-12-08 22:31
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
2007-11-16 15:30
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
2008-01-09 20:54
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main