-
-
[旧帖] 求助不知道中什么病毒了我重装了系统也不行，， 0.00雪花
-
发表于: 2009-11-22 01:44
-
各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供 http://www.360.cn
诊断时间: 2009-11-21 18:10:24
诊断平台: Microsoft Windows XP Service Pack 3
IE版本: Internet Explorer V6.0.2900.5512 Build:62900.5512
计算机物理内存:2.00GB - 当前可用内存:1.26GB
100 - 未知 - Process: VStart.exe [音速启动 - 您的启动专家] - D:\Program Files\VStart\VStart.exe
100 - 未知 - Process: ncscv32.exe [] - C:\WINDOWS\system32\drivers\ncscv32.exe
100 - 未知 - Process: ncscv32.exe [] - C:\WINDOWS\system32\drivers\ncscv32.exe
100 - 未知 - Process: ad.exe [Windows 增强型任务管理器] - C:\WINDOWS\system32\ad.exe
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.6565.cn
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.6565.cn
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://www.6565.cn
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://www.6565.cn/
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://www.baidu.com/baidu?tn=youcome_dg
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.baidu.com/baidu?tn=youcome_dg
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Baidu,URL=http://www.baidu.com/s?tn=youcome_dg&ie=UTF-8&wd={searchTerms}&cl=3
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Google,URL=http://www.google.com/search?hl=zh-CN&q={searchTerms}&lr=
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2},URL=http://www.baidu.com/s?tn=youcome_dg&ie=UTF-8&wd={searchTerms}&cl=3
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://www.6565.cn
R1 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.6565.cn/
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default)=http://www.6565.cn/
O4 - 未知 - HKLM\..\Run: [amd_dc_opt] [] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - 未知 - HKLM\..\Run: [JMB36X IDE Setup] [] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - 未知 - HKLM\..\Run: [36X Raid Configurer] [] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - 未知 - HKCU\..\Run: [nvscv32] [] C:\WINDOWS\system32\drivers\ncscv32.exe
O9 - 未知 - Extra button: PPLive(HKLM) - C:\Program Files\PPLive\PPLive.exe
O9 - 未知 - Extra button: @xpsp3res.dll,-20001(HKLM) - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O22 - 未知 - Filename Extention: .hlp - winhlp32.exe %1
=======================================
100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] - C:\WINDOWS\system32\nvsvc32.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\Program Files\360\360Safe\safemon\360Tray.exe
100 - 安全 - Process: rundll32.exe [windows rundll32为了需要调用dlls的程序。] - C:\WINDOWS\system32\RUNDLL32.EXE
100 - 安全 - Process: SMax4.exe [声卡相关软件。] - C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: PPLive.exe [pplive是一款基于p2p的网络电视平台软件。] - C:\Program Files\PPLive\PPLive.exe
100 - 安全 - Process: PPLive.exe [pplive是一款基于p2p的网络电视平台软件。] - C:\Program Files\PPLive\PPLive.exe
100 - 安全 - Process: QQ.exe [QQ] - D:\Program Files\Tencent\QQ\QQ.exe
100 - 安全 - Process: TXPlatform.exe [Tencent Instant Messaging Platform] - D:\Program Files\Tencent\QQ\TXPlatform.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\explorer.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: cmd.exe [windows控制台程序。不像旧的command.com，cmd.exe是一个32位的命令行使用在winnt/2000/xp。] - C:\WINDOWS\system32\cmd.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\Program Files\360\360Safe\360Safe.exe
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O2 - 安全 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块。] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - 安全 - BHO: (QvodExtend) - [QvodExtend] - {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} - D:\Program Files\QvodPlayer\QvodExtend.dll
O2 - 安全 - BHO: (Baidu Toolbar BHO) - [百度超级搜霸相关插件。] - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\Program Files\Baidu\Toolbar\BaiduBarX.dll
O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O3 - 安全 - Toolbar: (Baidu Toolbar) - [百度超级搜霸相关程序。] - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\Program Files\Baidu\Toolbar\BaiduBarX.dll
O4 - 安全 - HKLM\..\Run: [IMJPMIG8.1] [微软Microsoft输入法编辑器程序。] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] "D:\Program Files\360\360Safe\safemon\360Tray.exe" /start
O4 - 安全 - HKLM\..\Run: [VStart5.0] [一款音速启动程序。] "D:\Program Files\VStart\VStart.exe"
O4 - 安全 - HKLM\..\Run: [nwiz] [是NVidia的Nview特性相关程序。该程序用于用户对其特性进行配置，将桌面扩展到多台显示器上。 ] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - 安全 - HKLM\..\Run: [NvMediaCenter] [是NVidia显示卡相关文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 安全 - HKLM\..\Run: [SoundMAXPnP] [analog device公司声卡驱动程序。] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - 安全 - HKLM\..\Run: [SoundMAX] [analog device公司声卡驱动程序。] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - HKCU\..\Run: [PPLive] [PPLive] "C:\Program Files\PPLive\PPLive.exe" /LoadModule ppvod.dll
O8 - 安全 - Extra context menu item: 使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - 安全 - Extra context menu item: 使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O21 - 安全 - Protocol Icons: HKCR\htmlfile\shell\open\command - "C:\Program Files\internet explorer\iexplore.exe" "%1"
O23 - 安全 - Service: EventSystem [] - C:\WINDOWS\system32\es.dll - (running)
O23 - 安全 - Service: Nla [Microsoft Windows Sockets 2.0 Service Provider] - C:\WINDOWS\System32\mswsock.dll - (running)
O23 - 安全 - Service: nvsvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running)
O23 - 安全 - Service: SysmonLog [Performance Logs and Alerts Service] - C:\WINDOWS\system32\smlogsvc.exe - (not running)
=======================================
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 -
O31 - 未知 - SEApproved: {143A62C8-C33B-11D1-84FE-00C04FA34A14} - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Windows Media Player Burn Audio CD Context Menu Handler - - - - - 0 -
O31 - 未知 - SEApproved: {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD} - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：HashTab Context Menu - - - - - 0 -
O31 - 未知 - SEApproved: {8A56567E-A333-4843-B6E1-C3A262E41D8C} - C:\Program Files\HashTab32\HashTab32.dll - Beeblebrox.org - 鼠标右键 - 文件信息校验标签,Modified By Allen - 3.0.0.0 - 736256 - 9af1049509e3431ac4f601265c37e10b
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - 3.90.0.0 - 141312 - f15e72853a57e91ef3d6a737d2d3a1df
O31 - 未知 - SEApproved: {68f32140-2ca3-11d0-acc1-444553540000} - C:\Program Files\ACDSee\PlugIns\picaview.dll - ACD Systems, Ltd. - PicaView 资源管理器 DLL 扩展 - 2.0.0.84 - 826904 - 6a28e38886582ae502aa596b94c45e97
O31 - 未知 - SEApproved: {1CDB2949-8F65-4355-8456-263E7C208A5D} - C:\Program Files\NVIDIA Corporation\nView\nvshell.dll - - - - 0 -
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - C:\Program Files\NVIDIA Corporation\nView\nvshell.dll - - - - 0 -
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - C:\Program Files\NVIDIA Corporation\nView\nvshell.dll - - - - 0 -
O31 - 未知 - SEApproved: {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} - F:\2143232543654654645\绿鹰PC万能精灵1\\ExtnDll.dll - dll - dll - 1.1.0.0 - 36352 - c1ab30c2a1f4340ce88fc542a7196743
O31 - 未知 - SEApproved: {A70C977A-BF00-412C-90B7-034C51DA2439} - C:\WINDOWS\system32\nvcpl.dll - NVIDIA Corporation - NVIDIA Display Properties Extension - 6.14.11.9107 - 13918208 -
O31 - 未知 - SEApproved: {FFB699E0-306A-11d3-8BD1-00104B6F7516} - C:\WINDOWS\system32\nvcpl.dll - NVIDIA Corporation - NVIDIA Display Properties Extension - 6.14.11.9107 - 13918208 -
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - 3.90.0.0 - 141312 - f15e72853a57e91ef3d6a737d2d3a1df
O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 -
=======================================
O40 - RUNDLL32.EXE - NVIDIA Corporation - C:\WINDOWS\system32\NvMcTray.dll - NVIDIA Media Center Library - 39ff1bd0e33f1936aefcb4936d9d8536
O40 - RUNDLL32.EXE - NVIDIA Corporation - C:\WINDOWS\system32\NVRSZHC.DLL - NVIDIA Simplified Chinese language resource library - 7c472ab87c919823d834a998108e5607
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\ATL71.DLL - ATL Module for Windows (Unicode) - 4edd8d74ea48f58d3eca7e9297f19221
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\MSVCP71.dll - Microsoft? C++ Runtime Library - 561fa2abb31dfa8fab762145f81667c2
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\MSVCR71.dll - Microsoft? C Runtime Library - 86f1895ae8c5e8b17d99ece768a70732
O40 - explorer.exe - NVIDIA Corporation - C:\WINDOWS\system32\nvcpl.dll - NVIDIA Display Properties Extension -
O40 - explorer.exe - NVIDIA Corporation - C:\WINDOWS\system32\NVRSZHC.DLL - NVIDIA Simplified Chinese language resource library - 7c472ab87c919823d834a998108e5607
O40 - explorer.exe - dll - F:\2143232543654654645\绿鹰PC万能精灵1\ExtnDll.dll - dll - c1ab30c2a1f4340ce88fc542a7196743
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\sfc_os.dll - Windows 文件保护 - d1edcb65203ea40abbfd521ccf92aeec
=======================================
O41 - hptpro - Hptpro - C:\WINDOWS\system32\drivers\hptpro.sys - (not running) - Hptpro - HighPoint Technologies, Inc. - 2b5e16c0e3d0eaa699750e01aea82d90
O41 - imdisk - ImDisk Virtual Disk Driver - C:\WINDOWS\system32\drivers\imdisk.sys - (not running) - ImDisk Virtual Disk Driver - HNCSJ - e40c30d7bfa94c222e9b362d2be0f47d
O41 - VFdisk - Virtual Disk Driver - C:\WINDOWS\system32\drivers\VFdisk.sys - (not running) - Virtual Disk Driver - HNCSJ - 4c0d85ded290d3ff1b0d0d2291fd1539
O41 - VNdisk - VNdisk - C:\WINDOWS\system32\drivers\VNdisk.sys - (not running) - VNdisk - HNCSJ - cb7665ab869c7d2143617525b87be314
=======================================
360Safe.exe=6.0.2.1001
AntiAdwa.dll=5.1.1.1002
AntiEng.dll=5.0.0.1008
AntiActi.dll=2.0.0.3000
CleanHis.dll=4.2.0.1003
live.dll=1.0.2.1007
=======================================
操作历史报告：
----------清理恶评及系统插件历史----------
2009-04-14 03:23
清理恶评软件 - 百度搜索伴侣 -
2009-04-29 18:43
清理恶评软件 - Dmbcrse广告程序 -
2009-04-14 03:05
清理恶评插件 - 易趣购物按钮 - C:\Documents and Settings\All Users\桌面\易趣购物.lnk
清理恶评插件 - 百度搜索伴侣 - C:\PROGRA~1\baidu\iexp\BDSrHook.dll
清理恶评插件 - 多多QQ表情 -
2009-04-14 03:05
清理恶评插件 - 百度搜索伴侣 - C:\Program Files\baidu\iexp
2009-04-14 03:12
清理恶评插件 - 百度搜索伴侣 - C:\Program Files\baidu\iexp
2009-04-26 00:36
清理恶评插件 - 可能有风险临时文件 - C:\DOCUME~1\LIUZUN~1\LOCALS~1\Temp\dat1.tmp
2009-04-29 18:34
清理恶评插件 - Sys_Nt盗号木马 - C:\WINDOWS\system32\killkb.dll
清理恶评插件 - Dmbcrse广告程序 - C:\WINDOWS\system32\sysgth.dll
2009-05-23 21:56
清理其它插件 - IE风行者 -
2009-09-09 21:50
清理恶评插件 - 搜狗工具条地址栏直通车 - C:\PROGRA~1\P4P\ToolBar.dll
清理恶评插件 - Alexa工具栏 - C:\WINDOWS\system32\AlxTB1.dll
清理恶评插件 - 多多QQ表情 -
清理恶评插件 - SrchPlug工具条 -
清理恶评插件 - VIKA唯刊 - C:\Program Files\VIKA
2009-09-19 19:58
清理恶评插件 - 搜狗工具条地址栏直通车 - C:\PROGRA~1\P4P\ToolBar.dll
2009-09-22 18:15
清理恶评插件 - 搜狗工具条地址栏直通车 - C:\WINDOWS\system32\COMPLO~1.DLL
2009-09-27 01:03
清理恶评插件 - SrchPlug工具条 -
2009-09-27 01:04
清理其它插件 - 搜狗拼音语言栏支持模块 -
2009-09-30 18:15
清理其它插件 - 搜狗拼音语言栏支持模块 -
2009-11-05 15:41
清理恶评插件 - 百度搜索伴侣 -
清理恶评插件 - PFbname广告程序 -
2009-11-05 15:42
清理恶评插件 - LinkMedia -
----------全面诊断修复历史----------
2009-09-06 15:19
O2 - 危险 - Windows Live 登陆帮助程序 - C:\Program Files\Messenger\WindowsLiveLogin.dll
O8 - 未知 - Alexa Web Search - http://client.alexa.com/holiday/script/actions/search.htm
O8 - 未知 - Get Alexa Data - http://client.alexa.com/holiday/script/actions/sitedata.htm
O8 - 未知 - Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm
O8 - 未知 - See Related Links - http://client.alexa.com/holiday/script/actions/related.htm
O8 - 未知 - Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
2009-10-15 15:24
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
2009-10-25 18:04
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
O23 - 危险 - WinServer - C:\WINDOWS\system32\WinServer.exe
2009-10-25 18:04
O23 - 危险 - WinServer - C:\WINDOWS\system32\WinServer.exe
2009-10-29 02:53
O6 - 危险 - 禁止IE相关功能 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions
O6 - 危险 - 禁止IE相关功能 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions
2009-11-05 15:56
O10 - 危险 - MSAFD Tcpip [TCP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [UDP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [RAW/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP UDP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP TCP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O18 - 安全 - 网络协议过滤器 - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
2009-11-05 15:57
O10 - 危险 - MSAFD Tcpip [TCP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [UDP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [RAW/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP UDP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP TCP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
2009-11-05 15:57
O10 - 危险 - MSAFD Tcpip [TCP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [UDP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [RAW/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP UDP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP TCP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
2009-11-08 07:44
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
2009-11-09 21:28
100 - 危险 - IGEM2引擎开外挂工具.exe - D:\Program Files\盛大网络\热血传奇1\热血传奇\IGEM2引擎开外挂工具.exe
2009-11-09 21:29
O10 - 安全 - gamelsp on MSAFD Tcpip [TCP/IP] - C:\WINDOWS\system32\gamelsp.dll
O10 - 安全 - gamelsp on MSAFD Tcpip [UDP/IP] - C:\WINDOWS\system32\gamelsp.dll
O10 - 安全 - gamelsp on MSAFD Tcpip [RAW/IP] - C:\WINDOWS\system32\gamelsp.dll
O10 - 安全 - Easy2Game-TCPFilter - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-UDPFilter - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-UDPFilter - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-TCPFilter - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - MSAFD Tcpip [TCP/IP] - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - MSAFD Tcpip [UDP/IP] - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - MSAFD Tcpip [RAW/IP] - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - RSVP UDP Service Provider - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - RSVP TCP Service Provider - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - gamelsp - C:\WINDOWS\system32\gamelsp.dll
O10 - 安全 - Easy2Game-TCPChain - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-UDPChain - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-UDPChain - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-TCPChain - C:\WINDOWS\system32\GameLink.dll
O18 - 安全 - 网络协议过滤器 - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O18 - 安全 - 网络协议处理器 - C:\WINDOWS\system32\KuGoo3DownXControl.ocx
O18 - 安全 - 网络协议处理器 - C:\WINDOWS\system32\KuGoo3DownXControl.ocx
----------修复IE浏览器操作历史----------
2009-03-27 21:14
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
O14 - 危险 - Web原始设置IERESET.INF - C:\WINDOWS\inf\iereset.inf
O21 - 危险 - http协议缺省启动程序 - "f:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "f:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "f:\Program Files\360safe\360se\360SE.exe" "%1"
O22 - 危险 - .TXT文件关联 - "C:\Program Files\IDM Computer Solutions\UltraEdit\uedit32.exe" "%1"
2009-05-19 03:40
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\baidu
O21 - 危险 - http协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - OpenHomePage命令行参数 -
O21 - 危险 - https协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O22 - 危险 - .TXT文件关联 - "C:\Program Files\IDM Computer Solutions\UltraEdit\UEdit32.exe" "%1"
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\LIUZUN~1\「开始~1\程序\附件\系统工具\INTERN~1.LNK
2009-05-22 13:16
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
O21 - 危险 - http协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
2009-06-01 20:37
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE默认搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE用户指定空白页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE用户指定空白页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
O14 - 危险 - Web原始设置IERESET.INF - C:\WINDOWS\inf\iereset.inf
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se\360SE.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "D:\Program Files\360\360se\360SE.exe" "%1"
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\ADMINI~1\「开始~1\程序\附件\系统工具\INTERN~1.LNK
2009-08-18 01:31
O3 - 危险 - Eyool搜索精灵 - C:\WINDOWS\system32\eyooltool.dll
R0 - 危险 - IE搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE起始页的默认页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE自定义搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R0 - 危险 - IE备用搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\baidu
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Google
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A2E4E850-ABB6-4cb1-BC83-86DFAF0E7605}
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AF7D8589-2D8D- 47E8-A5FF-8ACB64CBDEF9}
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O22 - 危险 - .HTM文件关联 - 360seURL
O22 - 危险 - .HTML文件关联 - 360seURL
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\ADMINI~1\APPLIC~1\MICROS~1\INTERN~1\QUICKL~1\启动IN~1.URL
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\ADMINI~1\「开始~1\程序\附件\系统工具\INTERN~1.LNK
2009-10-07 22:19
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE用户指定空白页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - OpenHomePage命令行参数 - "C:\Program Files\Internet Explorer\iexplore.exe" http://www.abc127.com/
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
2009-11-08 19:59
R0 - 危险 - IE搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE起始页的默认页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE默认搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE自定义搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R0 - 危险 - IE备用搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R1 - 危险 - IE地址栏缺省搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchURL
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Baidu
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Google
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - OpenHomePage命令行参数 - "C:\Program Files\Internet Explorer\iexplore.exe" http://www.anyiba.com/?qw
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
2009-11-09 21:43
R0 - 危险 - IE搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE起始页的默认页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE默认搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE备用搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R1 - 危险 - IE地址栏缺省搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchURL
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
2009-11-09 21:44
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
=======================================
360安全卫士，彻底查杀各种流氓软件,全面保护系统安全
最新免费下载：http://www.360.cn/download.html
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供 http://www.360.cn
诊断时间: 2009-11-21 18:10:24
诊断平台: Microsoft Windows XP Service Pack 3
IE版本: Internet Explorer V6.0.2900.5512 Build:62900.5512
计算机物理内存:2.00GB - 当前可用内存:1.26GB
100 - 未知 - Process: VStart.exe [音速启动 - 您的启动专家] - D:\Program Files\VStart\VStart.exe
100 - 未知 - Process: ncscv32.exe [] - C:\WINDOWS\system32\drivers\ncscv32.exe
100 - 未知 - Process: ncscv32.exe [] - C:\WINDOWS\system32\drivers\ncscv32.exe
100 - 未知 - Process: ad.exe [Windows 增强型任务管理器] - C:\WINDOWS\system32\ad.exe
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.6565.cn
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.6565.cn
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://www.6565.cn
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://www.6565.cn/
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=http://www.baidu.com/baidu?tn=youcome_dg
R0 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=http://www.baidu.com/baidu?tn=youcome_dg
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Baidu,URL=http://www.baidu.com/s?tn=youcome_dg&ie=UTF-8&wd={searchTerms}&cl=3
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Google,URL=http://www.google.com/search?hl=zh-CN&q={searchTerms}&lr=
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2},URL=http://www.baidu.com/s?tn=youcome_dg&ie=UTF-8&wd={searchTerms}&cl=3
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://www.6565.cn
R1 - 未知 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.6565.cn/
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default)=http://www.6565.cn/
O4 - 未知 - HKLM\..\Run: [amd_dc_opt] [] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - 未知 - HKLM\..\Run: [JMB36X IDE Setup] [] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - 未知 - HKLM\..\Run: [36X Raid Configurer] [] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - 未知 - HKCU\..\Run: [nvscv32] [] C:\WINDOWS\system32\drivers\ncscv32.exe
O9 - 未知 - Extra button: PPLive(HKLM) - C:\Program Files\PPLive\PPLive.exe
O9 - 未知 - Extra button: @xpsp3res.dll,-20001(HKLM) - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O22 - 未知 - Filename Extention: .hlp - winhlp32.exe %1
=======================================
100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] - C:\WINDOWS\system32\nvsvc32.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\Program Files\360\360Safe\safemon\360Tray.exe
100 - 安全 - Process: rundll32.exe [windows rundll32为了需要调用dlls的程序。] - C:\WINDOWS\system32\RUNDLL32.EXE
100 - 安全 - Process: SMax4.exe [声卡相关软件。] - C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: PPLive.exe [pplive是一款基于p2p的网络电视平台软件。] - C:\Program Files\PPLive\PPLive.exe
100 - 安全 - Process: PPLive.exe [pplive是一款基于p2p的网络电视平台软件。] - C:\Program Files\PPLive\PPLive.exe
100 - 安全 - Process: QQ.exe [QQ] - D:\Program Files\Tencent\QQ\QQ.exe
100 - 安全 - Process: TXPlatform.exe [Tencent Instant Messaging Platform] - D:\Program Files\Tencent\QQ\TXPlatform.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\explorer.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: cmd.exe [windows控制台程序。不像旧的command.com，cmd.exe是一个32位的命令行使用在winnt/2000/xp。] - C:\WINDOWS\system32\cmd.exe
100 - 安全 - Process: 360SE.exe [360se] - D:\Program Files\360\360se3\360SE.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\Program Files\360\360Safe\360Safe.exe
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O2 - 安全 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块。] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - D:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - 安全 - BHO: (QvodExtend) - [QvodExtend] - {53AC8551-0DE0-4606-8A1E-A51AF20ADD60} - D:\Program Files\QvodPlayer\QvodExtend.dll
O2 - 安全 - BHO: (Baidu Toolbar BHO) - [百度超级搜霸相关插件。] - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\Program Files\Baidu\Toolbar\BaiduBarX.dll
O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - D:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O3 - 安全 - Toolbar: (Baidu Toolbar) - [百度超级搜霸相关程序。] - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\Program Files\Baidu\Toolbar\BaiduBarX.dll
O4 - 安全 - HKLM\..\Run: [IMJPMIG8.1] [微软Microsoft输入法编辑器程序。] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] "D:\Program Files\360\360Safe\safemon\360Tray.exe" /start
O4 - 安全 - HKLM\..\Run: [VStart5.0] [一款音速启动程序。] "D:\Program Files\VStart\VStart.exe"
O4 - 安全 - HKLM\..\Run: [nwiz] [是NVidia的Nview特性相关程序。该程序用于用户对其特性进行配置，将桌面扩展到多台显示器上。 ] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - 安全 - HKLM\..\Run: [NvMediaCenter] [是NVidia显示卡相关文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 安全 - HKLM\..\Run: [SoundMAXPnP] [analog device公司声卡驱动程序。] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - 安全 - HKLM\..\Run: [SoundMAX] [analog device公司声卡驱动程序。] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - HKCU\..\Run: [PPLive] [PPLive] "C:\Program Files\PPLive\PPLive.exe" /LoadModule ppvod.dll
O8 - 安全 - Extra context menu item: 使用迅雷下载 - D:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - 安全 - Extra context menu item: 使用迅雷下载全部链接 - D:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O21 - 安全 - Protocol Icons: HKCR\htmlfile\shell\open\command - "C:\Program Files\internet explorer\iexplore.exe" "%1"
O23 - 安全 - Service: EventSystem [] - C:\WINDOWS\system32\es.dll - (running)
O23 - 安全 - Service: Nla [Microsoft Windows Sockets 2.0 Service Provider] - C:\WINDOWS\System32\mswsock.dll - (running)
O23 - 安全 - Service: nvsvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running)
O23 - 安全 - Service: SysmonLog [Performance Logs and Alerts Service] - C:\WINDOWS\system32\smlogsvc.exe - (not running)
=======================================
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 -
O31 - 未知 - SEApproved: {143A62C8-C33B-11D1-84FE-00C04FA34A14} - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Windows Media Player Burn Audio CD Context Menu Handler - - - - - 0 -
O31 - 未知 - SEApproved: {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD} - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：HashTab Context Menu - - - - - 0 -
O31 - 未知 - SEApproved: {8A56567E-A333-4843-B6E1-C3A262E41D8C} - C:\Program Files\HashTab32\HashTab32.dll - Beeblebrox.org - 鼠标右键 - 文件信息校验标签,Modified By Allen - 3.0.0.0 - 736256 - 9af1049509e3431ac4f601265c37e10b
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - 3.90.0.0 - 141312 - f15e72853a57e91ef3d6a737d2d3a1df
O31 - 未知 - SEApproved: {68f32140-2ca3-11d0-acc1-444553540000} - C:\Program Files\ACDSee\PlugIns\picaview.dll - ACD Systems, Ltd. - PicaView 资源管理器 DLL 扩展 - 2.0.0.84 - 826904 - 6a28e38886582ae502aa596b94c45e97
O31 - 未知 - SEApproved: {1CDB2949-8F65-4355-8456-263E7C208A5D} - C:\Program Files\NVIDIA Corporation\nView\nvshell.dll - - - - 0 -
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - C:\Program Files\NVIDIA Corporation\nView\nvshell.dll - - - - 0 -
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - C:\Program Files\NVIDIA Corporation\nView\nvshell.dll - - - - 0 -
O31 - 未知 - SEApproved: {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} - F:\2143232543654654645\绿鹰PC万能精灵1\\ExtnDll.dll - dll - dll - 1.1.0.0 - 36352 - c1ab30c2a1f4340ce88fc542a7196743
O31 - 未知 - SEApproved: {A70C977A-BF00-412C-90B7-034C51DA2439} - C:\WINDOWS\system32\nvcpl.dll - NVIDIA Corporation - NVIDIA Display Properties Extension - 6.14.11.9107 - 13918208 -
O31 - 未知 - SEApproved: {FFB699E0-306A-11d3-8BD1-00104B6F7516} - C:\WINDOWS\system32\nvcpl.dll - NVIDIA Corporation - NVIDIA Display Properties Extension - 6.14.11.9107 - 13918208 -
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - 3.90.0.0 - 141312 - f15e72853a57e91ef3d6a737d2d3a1df
O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 -
=======================================
O40 - RUNDLL32.EXE - NVIDIA Corporation - C:\WINDOWS\system32\NvMcTray.dll - NVIDIA Media Center Library - 39ff1bd0e33f1936aefcb4936d9d8536
O40 - RUNDLL32.EXE - NVIDIA Corporation - C:\WINDOWS\system32\NVRSZHC.DLL - NVIDIA Simplified Chinese language resource library - 7c472ab87c919823d834a998108e5607
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\ATL71.DLL - ATL Module for Windows (Unicode) - 4edd8d74ea48f58d3eca7e9297f19221
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\MSVCP71.dll - Microsoft? C++ Runtime Library - 561fa2abb31dfa8fab762145f81667c2
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\MSVCR71.dll - Microsoft? C Runtime Library - 86f1895ae8c5e8b17d99ece768a70732
O40 - explorer.exe - NVIDIA Corporation - C:\WINDOWS\system32\nvcpl.dll - NVIDIA Display Properties Extension -
O40 - explorer.exe - NVIDIA Corporation - C:\WINDOWS\system32\NVRSZHC.DLL - NVIDIA Simplified Chinese language resource library - 7c472ab87c919823d834a998108e5607
O40 - explorer.exe - dll - F:\2143232543654654645\绿鹰PC万能精灵1\ExtnDll.dll - dll - c1ab30c2a1f4340ce88fc542a7196743
O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\sfc_os.dll - Windows 文件保护 - d1edcb65203ea40abbfd521ccf92aeec
=======================================
O41 - hptpro - Hptpro - C:\WINDOWS\system32\drivers\hptpro.sys - (not running) - Hptpro - HighPoint Technologies, Inc. - 2b5e16c0e3d0eaa699750e01aea82d90
O41 - imdisk - ImDisk Virtual Disk Driver - C:\WINDOWS\system32\drivers\imdisk.sys - (not running) - ImDisk Virtual Disk Driver - HNCSJ - e40c30d7bfa94c222e9b362d2be0f47d
O41 - VFdisk - Virtual Disk Driver - C:\WINDOWS\system32\drivers\VFdisk.sys - (not running) - Virtual Disk Driver - HNCSJ - 4c0d85ded290d3ff1b0d0d2291fd1539
O41 - VNdisk - VNdisk - C:\WINDOWS\system32\drivers\VNdisk.sys - (not running) - VNdisk - HNCSJ - cb7665ab869c7d2143617525b87be314
=======================================
360Safe.exe=6.0.2.1001
AntiAdwa.dll=5.1.1.1002
AntiEng.dll=5.0.0.1008
AntiActi.dll=2.0.0.3000
CleanHis.dll=4.2.0.1003
live.dll=1.0.2.1007
=======================================
操作历史报告：
----------清理恶评及系统插件历史----------
2009-04-14 03:23
清理恶评软件 - 百度搜索伴侣 -
2009-04-29 18:43
清理恶评软件 - Dmbcrse广告程序 -
2009-04-14 03:05
清理恶评插件 - 易趣购物按钮 - C:\Documents and Settings\All Users\桌面\易趣购物.lnk
清理恶评插件 - 百度搜索伴侣 - C:\PROGRA~1\baidu\iexp\BDSrHook.dll
清理恶评插件 - 多多QQ表情 -
2009-04-14 03:05
清理恶评插件 - 百度搜索伴侣 - C:\Program Files\baidu\iexp
2009-04-14 03:12
清理恶评插件 - 百度搜索伴侣 - C:\Program Files\baidu\iexp
2009-04-26 00:36
清理恶评插件 - 可能有风险临时文件 - C:\DOCUME~1\LIUZUN~1\LOCALS~1\Temp\dat1.tmp
2009-04-29 18:34
清理恶评插件 - Sys_Nt盗号木马 - C:\WINDOWS\system32\killkb.dll
清理恶评插件 - Dmbcrse广告程序 - C:\WINDOWS\system32\sysgth.dll
2009-05-23 21:56
清理其它插件 - IE风行者 -
2009-09-09 21:50
清理恶评插件 - 搜狗工具条地址栏直通车 - C:\PROGRA~1\P4P\ToolBar.dll
清理恶评插件 - Alexa工具栏 - C:\WINDOWS\system32\AlxTB1.dll
清理恶评插件 - 多多QQ表情 -
清理恶评插件 - SrchPlug工具条 -
清理恶评插件 - VIKA唯刊 - C:\Program Files\VIKA
2009-09-19 19:58
清理恶评插件 - 搜狗工具条地址栏直通车 - C:\PROGRA~1\P4P\ToolBar.dll
2009-09-22 18:15
清理恶评插件 - 搜狗工具条地址栏直通车 - C:\WINDOWS\system32\COMPLO~1.DLL
2009-09-27 01:03
清理恶评插件 - SrchPlug工具条 -
2009-09-27 01:04
清理其它插件 - 搜狗拼音语言栏支持模块 -
2009-09-30 18:15
清理其它插件 - 搜狗拼音语言栏支持模块 -
2009-11-05 15:41
清理恶评插件 - 百度搜索伴侣 -
清理恶评插件 - PFbname广告程序 -
2009-11-05 15:42
清理恶评插件 - LinkMedia -
----------全面诊断修复历史----------
2009-09-06 15:19
O2 - 危险 - Windows Live 登陆帮助程序 - C:\Program Files\Messenger\WindowsLiveLogin.dll
O8 - 未知 - Alexa Web Search - http://client.alexa.com/holiday/script/actions/search.htm
O8 - 未知 - Get Alexa Data - http://client.alexa.com/holiday/script/actions/sitedata.htm
O8 - 未知 - Mail to a Friend... - http://client.alexa.com/holiday/script/actions/mailto.htm
O8 - 未知 - See Related Links - http://client.alexa.com/holiday/script/actions/related.htm
O8 - 未知 - Write a Review... - http://client.alexa.com/holiday/script/actions/review.htm
2009-10-15 15:24
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
2009-10-25 18:04
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
O23 - 危险 - WinServer - C:\WINDOWS\system32\WinServer.exe
2009-10-25 18:04
O23 - 危险 - WinServer - C:\WINDOWS\system32\WinServer.exe
2009-10-29 02:53
O6 - 危险 - 禁止IE相关功能 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions
O6 - 危险 - 禁止IE相关功能 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions
2009-11-05 15:56
O10 - 危险 - MSAFD Tcpip [TCP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [UDP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [RAW/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP UDP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP TCP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O18 - 安全 - 网络协议过滤器 - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
2009-11-05 15:57
O10 - 危险 - MSAFD Tcpip [TCP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [UDP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [RAW/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP UDP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP TCP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
2009-11-05 15:57
O10 - 危险 - MSAFD Tcpip [TCP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [UDP/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - MSAFD Tcpip [RAW/IP] - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP UDP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
O10 - 危险 - RSVP TCP Service Provider - C:\Documents and Settings\Administrator\Application Data\dowood\dowood.dll
2009-11-08 07:44
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
2009-11-09 21:28
100 - 危险 - IGEM2引擎开外挂工具.exe - D:\Program Files\盛大网络\热血传奇1\热血传奇\IGEM2引擎开外挂工具.exe
2009-11-09 21:29
O10 - 安全 - gamelsp on MSAFD Tcpip [TCP/IP] - C:\WINDOWS\system32\gamelsp.dll
O10 - 安全 - gamelsp on MSAFD Tcpip [UDP/IP] - C:\WINDOWS\system32\gamelsp.dll
O10 - 安全 - gamelsp on MSAFD Tcpip [RAW/IP] - C:\WINDOWS\system32\gamelsp.dll
O10 - 安全 - Easy2Game-TCPFilter - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-UDPFilter - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-UDPFilter - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-TCPFilter - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - MSAFD Tcpip [TCP/IP] - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - MSAFD Tcpip [UDP/IP] - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - MSAFD Tcpip [RAW/IP] - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - RSVP UDP Service Provider - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - RSVP TCP Service Provider - C:\WINDOWS\system32\ESPI11.dll
O10 - 安全 - gamelsp - C:\WINDOWS\system32\gamelsp.dll
O10 - 安全 - Easy2Game-TCPChain - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-UDPChain - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-UDPChain - C:\WINDOWS\system32\GameLink.dll
O10 - 安全 - Easy2Game-TCPChain - C:\WINDOWS\system32\GameLink.dll
O18 - 安全 - 网络协议过滤器 - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O18 - 安全 - 网络协议处理器 - C:\WINDOWS\system32\KuGoo3DownXControl.ocx
O18 - 安全 - 网络协议处理器 - C:\WINDOWS\system32\KuGoo3DownXControl.ocx
----------修复IE浏览器操作历史----------
2009-03-27 21:14
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
O14 - 危险 - Web原始设置IERESET.INF - C:\WINDOWS\inf\iereset.inf
O21 - 危险 - http协议缺省启动程序 - "f:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "f:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "f:\Program Files\360safe\360se\360SE.exe" "%1"
O22 - 危险 - .TXT文件关联 - "C:\Program Files\IDM Computer Solutions\UltraEdit\uedit32.exe" "%1"
2009-05-19 03:40
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\baidu
O21 - 危险 - http协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - OpenHomePage命令行参数 -
O21 - 危险 - https协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O22 - 危险 - .TXT文件关联 - "C:\Program Files\IDM Computer Solutions\UltraEdit\UEdit32.exe" "%1"
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\LIUZUN~1\「开始~1\程序\附件\系统工具\INTERN~1.LNK
2009-05-22 13:16
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
O21 - 危险 - http协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "E:\Program Files\360safe\360se\360SE.exe" "%1"
2009-06-01 20:37
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE默认搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE用户指定空白页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE用户指定空白页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
O14 - 危险 - Web原始设置IERESET.INF - C:\WINDOWS\inf\iereset.inf
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se\360SE.exe" "%1"
O21 - 危险 - htmlfile协议缺省启动程序 - "D:\Program Files\360\360se\360SE.exe" "%1"
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\ADMINI~1\「开始~1\程序\附件\系统工具\INTERN~1.LNK
2009-08-18 01:31
O3 - 危险 - Eyool搜索精灵 - C:\WINDOWS\system32\eyooltool.dll
R0 - 危险 - IE搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE起始页的默认页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE自定义搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R0 - 危险 - IE备用搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\baidu
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Google
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A2E4E850-ABB6-4cb1-BC83-86DFAF0E7605}
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AF7D8589-2D8D- 47E8-A5FF-8ACB64CBDEF9}
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O22 - 危险 - .HTM文件关联 - 360seURL
O22 - 危险 - .HTML文件关联 - 360seURL
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\ADMINI~1\APPLIC~1\MICROS~1\INTERN~1\QUICKL~1\启动IN~1.URL
O28 - 危险 - IE链接的参数 - C:\DOCUME~1\ADMINI~1\「开始~1\程序\附件\系统工具\INTERN~1.LNK
2009-10-07 22:19
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE用户指定空白页 - HKCU\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - 启用备用搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\Main
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - OpenHomePage命令行参数 - "C:\Program Files\Internet Explorer\iexplore.exe" http://www.abc127.com/
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
2009-11-08 19:59
R0 - 危险 - IE搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE起始页的默认页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE默认搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE自定义搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R0 - 危险 - IE备用搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R1 - 危险 - IE地址栏缺省搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchURL
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Baidu
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\Google
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - OpenHomePage命令行参数 - "C:\Program Files\Internet Explorer\iexplore.exe" http://www.anyiba.com/?qw
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
2009-11-09 21:43
R0 - 危险 - IE搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE起始页的默认页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE起始页的默认页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE默认搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKLM\Software\Microsoft\Internet Explorer\Main
R1 - 危险 - IE左侧搜索页 - HKCU\Software\Microsoft\Internet Explorer\Main
R0 - 危险 - IE备用搜索引擎 - HKLM\Software\Microsoft\Internet Explorer\Search
R1 - 危险 - IE地址栏缺省搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchURL
R0 - 危险 - IE自定义搜索引擎 - HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B8E20CD7-BAC2-4820-9AA6-1060B3AF25E2}
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
2009-11-09 21:44
O21 - 危险 - http协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
O21 - 危险 - https协议缺省启动程序 - "D:\Program Files\360\360se3\360SE.exe" "%1"
=======================================
360安全卫士，彻底查杀各种流氓软件,全面保护系统安全
最新免费下载：http://www.360.cn/download.html
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 建议进PE系统查看一下C盘和其他盘，有没有病毒。如果你没有重要资料的话，一般建议全部格式化。再做系统。
|
|
|
建议楼主，先断网络，然后用冰刃类的工具，查看下有没有可疑进程、服务项，然后清理清册表，重启，用卡巴全盘杀下毒（你重装系统后，还不行，有可能是你其他盘的病毒还没清理，又或者你中的是下载者之类的病毒，不断从网络下载大量病毒），再不行的话，
 恭喜你，你中的不是一般病毒（像CIH之类的直接破坏硬盘、CPU、BIOS），那直接换个硬盘
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
