我电脑为什么这么卡？（以上传）

显示全部楼层 · 发表于 2008-4-11 16:27:31

OK 报告上传好了

[ 本帖最后由爱吃鱼de小羊于 2008-4-11 17:27 编辑 ]

显示全部楼层 · 发表于 2008-4-11 16:27:55

==================================
浏览器加载项
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
[Web反病毒保护]
  {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <D:\卡巴斯基\卡巴6.0网络安全套责\scieplugin.dll, Kaspersky Lab>
[信息检索(&R)]
  {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
[@xpsp3res.dll,-20001]
  {e2e2dd38-d088-4134-82b7-f2ba38496583} <%windir%\Network Diagnostic\xpnetdiag.exe, N/A>
[MMCPlayer Class]
  {05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINDOWS\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[EditCtrl Class]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\aliedit.dll, >
[UploadControl Control]
  {52FF336D-A05D-4A14-A3A1-7B6B4B427F88} <C:\WINDOWS\system32\UPLOAD~1.OCX, 广州网易互动娱乐有限公司>
[MabinogiWebAvatarRenderer Class]
  {7623BE59-D4CF-4379-ABC4-B39E11854D66} <C:\WINDOWS\Downloaded Program Files\mabiwebframe.dll, devcat>
[BandWidthTester Control]
  {82575599-F323-416A-8A4B-DF738F6F94D5} <C:\WINDOWS\DOWNLO~1\BANDWI~1.OCX, >
[163Uploader Control]
  {8686F2A6-DC01-4E8F-BDE3-DCC7DBBAD6AE} <C:\WINDOWS\system32\163UPL~1.OCX, 广州网易互动娱乐有限公司>
[ScreenCapture Class]
  {B4D9857D-8A55-4442-A577-6B3ED5D4E41B} <C:\WINDOWS\system32\FMO.dll, Tencent Inc.>
[ScreenCapture Class]
  {BFB79EE1-04AE-4D4A-B85E-27EE5F30C095} <C:\WINDOWS\system32\TXGYMailActiveX.dll, Tencent Inc.>
[Tencent Safety Online Base Module]
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\DOWNLO~1\TSOBase.ocx, Tencent Corporation>
[WebActivater Control]
  {C661F36D-DF85-4EF4-83C7-E107B83D04B1} <C:\WINDOWS\system32\3DShowVM.ocx, QQ>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
[PhotoUploadCtrlMini Control]
  {D9306BD1-2325-4C28-8632-B02330C1BB02} <C:\WINDOWS\system32\PHOTOU~1.OCX, 广州网易互动娱乐有限公司>
[PasswordEditCtrl Class]
  {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[ThunderAtOnce Class]
  {01443AEC-0FD1-40FD-9C87-E93D1494C233} <F:\杂七杂八\Thunder5.7.7.442\Thunder\ComDlls\TDAtOnce_Now.dll, N/A>
[WebThunder Class]
  {03507A1A-E0C5-4404-AA26-205385C0892D} <, N/A>
[MMCPlayer Class]
  {05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINDOWS\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.>
[PeerDraw Class]
  {10072CEC-8CC1-11D1-986E-00A0C955B42E} <%CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll, N/A>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\legitcheckcontrol.dll, Microsoft Corporation>
[iTrusPTA Class]
  {1E0DFFCF-27FF-4574-849B-55007349FEDA} <C:\WINDOWS\system32\aliedit\pta.dll, >
[UploadFilePartition Class]
  {2030B925-DF6E-4535-AB9A-C2787F2FEB53} <C:\WINDOWS\system32\TXGYUploader.dll, Tencent >
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\msdxm.ocx, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[XML DOM Document]
  {2933BF90-7B36-11D2-B20E-00C04F983E60} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\WINDOWS\system32\dllcache\dhtmled.ocx, Microsoft Corporation>
[WebThunder DapPlayer]
  {2EEDA47E-8D5C-4d7e-B4B6-E16E19218555} <C:\WEB迅雷\DownAndPlay\DapPlayer3.0.41.65.492.dll, ShenZhen Thunder Networking Technologies Ltd.>
[HtmlDlgSafeHelper Class]
  {3050F819-98B5-11CF-BB82-00AA00BDCE0B} <C:\WINDOWS\system32\mshtmled.dll, Microsoft Corporation>
[Tabular Data Control]
  {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation>
[IETag Factory]
  {38481807-CA0E-42D2-BF39-B33AF135CC4D} <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, Microsoft Corporation>
[Microsoft Office Control]
  {4453D895-F2A1-4A38-A285-1EF9BD3F6D5D} <C:\PROGRA~1\MICROS~2\OFFICE11\AUTHZAX.DLL, Microsoft Corporation>
[XML Document]
  {48123BC4-99D9-11D1-A6B3-00C04FD91555} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
[Thunder Agent Class]
  {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <F:\杂七杂八\Thunder5.7.7.442\Thunder\ComDlls\ThunderAgent_Now.dll, N/A>
[EditCtrl Class]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\aliedit.dll, >
[UploadControl Control]
  {52FF336D-A05D-4A14-A3A1-7B6B4B427F88} <C:\WINDOWS\system32\UPLOAD~1.OCX, 广州网易互动娱乐有限公司>
[CCtInf Class]
  {6DBB2904-082D-4DB0-944A-21C22BA121F4} <C:\WINDOWS\system32\BANKCE~1.DLL, >
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[MabinogiWebAvatarRenderer Class]
  {7623BE59-D4CF-4379-ABC4-B39E11854D66} <C:\WINDOWS\Downloaded Program Files\mabiwebframe.dll, devcat>
[MediaComm Class]
  {7670648D-461B-42AF-BDFE-46D26AF5EFF2} <C:\WEB迅雷\InMedia\MediaAddin13.dll, Thunder Networking Technologies,LTD>
[BandWidthTester Control]
  {82575599-F323-416A-8A4B-DF738F6F94D5} <C:\WINDOWS\DOWNLO~1\BANDWI~1.OCX, >
[163Uploader Control]
  {8686F2A6-DC01-4E8F-BDE3-DCC7DBBAD6AE} <C:\WINDOWS\system32\163UPL~1.OCX, 广州网易互动娱乐有限公司>
[360SafeLive]
  {87515F61-A66C-4319-A0E0-D416CB8059E3} <C:\Program Files\360safe\live.dll, 360.cn>
[Microsoft Web Browser]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\ieframe.dll, Microsoft Corporation>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <F:\杂七杂八\Thunder5.7.7.442\Thunder\ComDlls\xunleiBHO_Now.dll, N/A>
[XML DOM Document 4.0]
  {88D969C0-F192-11D4-A65F-0040963251E5} <%SystemRoot%\system32\msxml4.dll, N/A>
[Free Threaded XML DOM Document 4.0]
  {88D969C1-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
[XSL Template 4.0]
  {88D969C3-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
[XML HTTP 4.0]
  {88D969C5-F192-11D4-A65F-0040963251E5} <C:\WINDOWS\system32\msxml4.dll, Microsoft Corporation>
[XML DOM 文档 5.0]
  {88D969E5-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[Free Threaded XML DOM Document 5.0]
  {88D969E6-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XSL Template 5.0]
  {88D969E8-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[XML HTTP 5.0]
  {88D969EA-F192-11D4-A65F-0040963251E5} <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL, Microsoft Corporation>
[RealPlayer Stream Handler]
  {A1A41E11-91DB-4461-95CD-0C02327FD934} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[UploadFilePartition Class]
  {A877BA28-1F7E-4876-B299-50B3199A1A5D} <C:\WINDOWS\system32\TXGYMailActiveX.dll, Tencent Inc.>
[photo_uploader Control]
  {A984ED9F-E8DA-44E5-BC18-C14B9ABEF79D} <, N/A>
[RMGetLicense Class]
  {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[ScreenCapture Class]
  {B4D9857D-8A55-4442-A577-6B3ED5D4E41B} <C:\WINDOWS\system32\FMO.dll, Tencent Inc.>
[Messenger Object]
  {B69003B3-C55E-4B48-836C-BC5946FC3B28} <C:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[SafeMon Class]
  {B69F34DD-F0F9-42DC-9EDD-957187DA688D} <C:\Program Files\360safe\safemon\safemon.dll, 360.CN>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[ScreenCapture Class]
  {BFB79EE1-04AE-4D4A-B85E-27EE5F30C095} <C:\WINDOWS\system32\TXGYMailActiveX.dll, Tencent Inc.>
[Tencent Safety Online Base Module]
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\DOWNLO~1\TSOBase.ocx, Tencent Corporation>
[WebActivater Control]
  {C661F36D-DF85-4EF4-83C7-E107B83D04B1} <C:\WINDOWS\system32\3DShowVM.ocx, QQ>
[QQPlayerSvr Proxy Control]
  {CD108273-D434-43E6-AA90-1469F97EB398} <D:\QQ\QzoneMusic.dll, 腾讯科技>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__WAV Moniker Class]
  {CD3AFA7B-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx, Adobe Systems, Inc.>
[PhotoUploadCtrlMini Control]
  {D9306BD1-2325-4C28-8632-B02330C1BB02} <C:\WINDOWS\system32\PHOTOU~1.OCX, 广州网易互动娱乐有限公司>
[TencentVmpCtl Class]
  {D9819BD5-422B-4281-8523-726466ED692B} <C:\Program Files\Tencent\Viewpoint Media Player\AxMetaStream.dll, Viewpoint Corporation>
[PasswordEditCtrl Class]
  {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[XML HTTP Request]
  {ED8C108E-4349-11D2-91A4-00C04F7969E8} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
[Vod Class]
  {EEDD6FF9-13DE-496B-9A1C-D78B3215E266} <F:\TOOLS\迅雷\Components\DownAndPlay\DapPlayer_Now.dll, N/A>
[Thunder DapCtrl]
  {EF1EA76E-5428-4e40-85A1-D4DD2893183A} <C:\WEB迅雷\DownAndPlay\DapCtrl1.3.17.20.492.dll, ShenZhen Thunder Networking Technologies Ltd.>
[XPPlayer Class]
  {F3E70CEA-956E-49CC-B444-73AFE593AD7F} <C:\Documents and Settings\All Users.WINDOWS\Application Data\Thunder Network\KanKan\pplayer.dll_1_work, Thunder>
[XML DOM Document]
  {F6D90F11-9C73-11D3-B32E-00C04F990BB4} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
[XML HTTP]
  {F6D90F16-9C73-11D3-B32E-00C04F990BB4} <C:\WINDOWS\system32\msxml3.dll, Microsoft Corporation>
[Messenger Application]
  {FB7199AB-79BF-11D2-8D94-0000F875C541} <C:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[使用迅雷下载]
  <199AB-79BF-11D2-8D94-0000F875C541}, N/A>
[使用迅雷下载全部链接]
  <, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ表情]
  <D:\QQ\AddEmotion.htm, N/A>

==================================
正在运行的进程
[PID: 504 / SYSTEM][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 564 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 588 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 6.0.0.299]
[C:\WINDOWS\system32\WgaLogon.dll]  [Microsoft Corporation, 1.7.0018.7]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 640 / SYSTEM][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\AppPatch\AcAdProc.dll]  [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)]
[PID: 660 / SYSTEM][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[PID: 824 / SYSTEM][C:\WINDOWS\system32\Ati2evxx.exe]  [, ]
[PID: 840 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[PID: 900 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[PID: 1016 / SYSTEM][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\System32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[PID: 1124 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[PID: 1172 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[PID: 1336 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[PID: 1604 / SYSTEM][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe]  [Analog Devices, Inc., 3, 2, 6, 0]
[PID: 1648 / SYSTEM][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[PID: 152 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\System32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[PID: 2296 / pandonghui][C:\Program Files\360safe\safemon\360Tray.exe]  [奇虎网, 4, 1, 0, 1004]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[C:\Program Files\360safe\safemon\SafeKrnl.dll]  [奇虎网, 4, 1, 0, 1001]
[C:\Program Files\360safe\AntiAdwa.dll]  [360Safe.com, 4, 1, 0, 1001]
[C:\Program Files\360safe\live.dll]  [360.cn, 1, 0, 1, 1027]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[PID: 2304 / pandonghui][F:\TOOLS\杀马\AVG Anti-Spyware 7.5\CRavgas.exe]  [GRISOFT s.r.o., 7, 5, 1, 43]
[F:\TOOLS\杀马\AVG Anti-Spyware 7.5\engine.dll]  [GRISOFT s.r.o., 4, 2, 0, 19]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[PID: 2356 / pandonghui][D:\PPS\PPStream\ppsap.exe]  [PPStream Inc, 1, 0, 11, 100]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[D:\PPS\PPStream\1.0.11.109\vodnet.dll]  [PPStream Inc., 1, 0, 11, 109]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[D:\PPS\PPStream\1.0.11.109\vodres.dll]  [PPStream Inc., 1, 0, 11, 109]
[D:\PPS\PPStream\1.0.11.109\ppssg.dll]  [PPStream Inc., 1, 0, 11, 109]
[D:\PPS\PPStream\1.0.11.109\xd.dll]  [PPStream Inc., 1, 0, 18, 31]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[PID: 3732 / pandonghui][C:\Program Files\ChinaNet\VnetClient.exe]  [, 2006, 11, 10, 8]

显示全部楼层 · 发表于 2008-4-11 16:28:13

11, 10, 8]
[C:\Program Files\ChinaNet\Communicate.dll]  [GDCN, 2006, 2, 15, 1]
[C:\Program Files\ChinaNet\DialModule.dll]  [GDCN, 2007, 4, 4, 16]
[C:\Program Files\ChinaNet\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[C:\Program Files\ChinaNet\ClientAPI.dll]  [, 2006, 11, 17, 11]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\PROGRA~1\ChinaNet\PLUGIN~1.OCX]  [, 2006, 12, 8, 19]
[C:\PROGRA~1\ChinaNet\sign.dll]  [0, 2004, 12, 1, 1]
[C:\PROGRA~1\ChinaNet\PlugIns\SMSPLU~1\SMSPLU~1.DLL]  [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\PostPlug.dll]  [, 2004, 12, 16, 2]
[C:\PROGRA~1\ChinaNet\ADVERT~1.OCX]  [, 2006, 2, 20, 1]
[C:\PROGRA~1\ChinaNet\Gif89a.dll]  [, 2005, 6, 21, 1]
[C:\PROGRA~1\ChinaNet\VnetBs.ocx]  [, 2004, 11, 18, 1]
[C:\PROGRA~1\ChinaNet\VnetSkin.ocx]  [GDDC, 2005, 12, 21, 1]
[C:\PROGRA~1\ChinaNet\DialogStyle.dll]  [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\BDSearch.ocx]  [gdcn, 2006, 8, 14, 1]
[C:\PROGRA~1\ChinaNet\PageFram.ocx]  [Workgroup, 2006, 11, 14, 16]
[C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\PROGRA~1\ChinaNet\ACCOUN~1.OCX]  [Workgroup, 2007, 9, 27, 8]
[C:\PROGRA~1\ChinaNet\AccountMgr.dll]  [, 2007, 9, 27, 10]
[C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx]  [Adobe Systems, Inc., 9,0,115,0]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\PROGRA~1\ChinaNet\Timer.ocx]  [, 2007, 9, 27, 10]
[C:\PROGRA~1\ChinaNet\PLUGIN~2.OCX]  [, 2006, 4, 4, 1]
[C:\PROGRA~1\ChinaNet\NEWMES~1.DLL]  [, 2006, 6, 21, 16]
[C:\PROGRA~1\ChinaNet\PassCtrl.dll]  [GDCN, 2006, 3, 1, 16]
[C:\WINDOWS\system32\wpcap.dll]  [Politecnico di Torino, 3, 0, 0, 18]
[C:\WINDOWS\system32\pthreadVC.dll]  [N/A, ]
[C:\WINDOWS\system32\packet.dll]  [Politecnico di Torino, 3, 0, 0, 18]
[C:\PROGRA~1\ChinaNet\PlugPush.dll]  [, 2004, 12, 21, 1]
[C:\Program Files\ChinaNet\AllInterface.dll]  [, 2006, 12, 29, 14]
[C:\PROGRA~1\ChinaNet\VNETLO~1.OCX]  [, 2006, 11, 19, 14]
[C:\PROGRA~1\ChinaNet\StatNum.dll]  [, 2006, 11, 10, 17]
[C:\PROGRA~1\ChinaNet\VNETON~1.OCX]  [, 2007, 1, 10, 3]
[C:\Program Files\ChinaNet\AllFunctions.dll]  [GDCN, 2007, 8, 1, 18]
[C:\Program Files\ChinaNet\VnetOptLog.dll]  [ , 2006, 5, 23, 9]
[C:\PROGRA~1\ChinaNet\MAGICD~1.OCX]  [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\Favorite.ocx]  [, 1, 0, 0, 1]
[C:\PROGRA~1\ChinaNet\VNETGE~1.OCX]  [GDCN, 2006, 11, 17, 11]
[C:\Program Files\ChinaNet\Base64.dll]  [N/A, ]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[D:\卡巴斯基\卡巴6.0网络安全套责\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.299]
[D:\卡巴斯基\卡巴6.0网络安全套责\klscav.dll]  [Kaspersky Lab, 6.0.0.299]
[D:\卡巴斯基\卡巴6.0网络安全套责\pr_remote.dll]  [Kaspersky Lab, 6.0.0.299]
[D:\卡巴斯基\卡巴6.0网络安全套责\prloader.dll]  [Kaspersky Lab, 6.0.0.299]
[D:\卡巴斯基\卡巴6.0网络安全套责\prkernel.ppl]  [Kaspersky Lab, 6.0.0.299]
[d:\卡巴斯基\卡巴6.0网络安全套责\params.ppl]  [Kaspersky Lab, 6.0.0.299]
[d:\卡巴斯基\卡巴6.0网络安全套责\pxstub.ppl]  [Kaspersky Lab, 6.0.0.299]
[d:\卡巴斯基\卡巴6.0网络安全套责\tempfile.ppl]  [Kaspersky Lab, 6.0.0.299]
[d:\卡巴斯基\卡巴6.0网络安全套责\nfio.ppl]  [Kaspersky Lab, 6.0.0.299]
[d:\卡巴斯基\卡巴6.0网络安全套责\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.299]
[PID: 3888 / pandonghui][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[PID: 2880 / pandonghui][C:\WINDOWS\explorer.exe]  [Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
[C:\WINDOWS\system32\PortableDeviceApi.dll]  [Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006)]
[C:\WINDOWS\system32\QQPINYIN.IME]  [Tencent, 1, 1, 113, 201]
[F:\TOOLS\解压\rarext.dll]  [N/A, ]
[D:\卡巴斯基\卡巴6.0网络安全套责\shellex.dll]  [Kaspersky Lab, 6.0.0.299]
[D:\QQ\qdshm.dll]  [, 1, 0, 101, 20]
[D:\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
[F:\TOOLS\杀马\AVG Anti-Spyware 7.5\context.dll]  [GRISOFT s.r.o., 7, 5, 1, 36]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[C:\WINDOWS\system32\asfsipc.dll]  [Microsoft Corporation, 1.1.00.3917]
[C:\PROGRA~1\MICROS~2\OFFICE11\MCPS.DLL]  [Microsoft Corporation, 11.0.5510]
[PID: 1596 / pandonghui][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[PID: 1616 / pandonghui][D:\QQ\QQ.exe]  [TENCENT, 8,0,714,1791]
[D:\QQ\QQBaseClassInDll.dll]  [TENCENT, 8,0,714,1791]
[D:\QQ\QQHelperDll.dll]  [TENCENT, 8,0,714,1791]
[D:\QQ\BasicCtrlDll.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[D:\QQ\MSIMG32.dll]  [N/A, ]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[D:\QQ\FinePlus.dll]  [N/A, ]
[D:\QQ\fphelper.dll]  [N/A, ]
[D:\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
[D:\QQ\RICHED20.dll]  [Microsoft Corporation, 5.31.23.1218]
[D:\QQ\QQAPI.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\LoginCtrl.dll]  [TENCENT, 8,0,714,1791]
[D:\QQ\LoginCtrlRes.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\QQRes.dll]  [TENCENT, 8,0,714,1791]
[D:\QQ\QQMainFrame.dll]  [N/A, ]
[D:\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\ieframe.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[D:\QQ\QQPlugin.dll]  [N/A, ]
[D:\QQ\UnReadMsgMgr.dll]  [N/A, ]
[D:\QQ\CQQApplication.dll]  [N/A, ]
[D:\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
[D:\QQ\NewSkin.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\MailSummary.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\QQSpace.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\vbscript.dll]  [N/A, ]
[D:\QQ\encode.dll]  [Microsoft Corporation, 5.6.0.8825]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[C:\WINDOWS\system32\msdmo.dll]  [, ]
[D:\QQ\QQKnowledgeSearch.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\OEMApplication.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\QQGroupMng.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\QQAvatar.dll]  [N/A, ]
[C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\QQ\QQAllInOne.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\SCCore.dll]  [TENCENT, 1, 6, 0, 2]
[D:\QQ\CameraDll.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\QQPet.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\UserDefinedHead.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\QQSysMsgMng.dll]  [N/A, ]
[D:\QQ\QQConfigPlugin.dll]  [TENCENT, 8,0,713,1791]
[C:\WINDOWS\system32\l3codeca.acm]  [Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
[D:\QQ\QQCustomFace.dll]  [N/A, ]
[D:\QQ\QRingMng.dll]  [N/A, ]
[D:\QQ\LongConnection.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\GroupConnection.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\BQQApplication.dll]  [N/A, ]
[D:\QQ\PersonalDesktop.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\CommercesMng.dll]  [TENCENT, 8,0,713,1791]
[D:\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 330]
[D:\QQ\AddrSearch.dll]  [腾讯科技（深圳）有限公司, 2, 0, 1, 10]
[D:\QQ\QQSceneMng.dll]  [N/A, ]
[D:\QQ\QQDoctor\TSVulMdw.dat]  [TENCENT, 2007, 12, 18, 3]
[PID: 3172 / pandonghui][D:\QQ\TXPlatform.exe]  [Tencent, 1, 0, 170, 0]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[PID: 3152 / pandonghui][F:\杂七杂八\sreng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
[C:\WINDOWS\system32\Normaliz.dll]  [Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735)]
[C:\WINDOWS\system32\iertutil.dll]  [Microsoft Corporation, 7.00.6000.16640 (vista_gdr.080213-1606)]
[C:\WINDOWS\system32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[C:\Program Files\360safe\safemon\safemon.dll]  [360.CN, 4, 1, 0, 1006]
[F:\杂七杂八\sreng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]
[C:\WINDOWS\system32\xunyount.dll]  [N/A, ]
[F:\杂七杂八\sreng2\Plugins\NTFSTREAM.SRE]  [Smallfrogs Studio, 1, 0, 0, 5]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
xunyou over MSAFD Tcpip [TCP/IP]
C:\WINDOWS\system32\xunyount.dll(, N/A)
xunyou over MSAFD Tcpip [UDP/IP]
C:\WINDOWS\system32\xunyount.dll(, N/A)
xunyou over MSAFD Tcpip [RAW/IP]
C:\WINDOWS\system32\xunyount.dll(, N/A)
xunyou
C:\WINDOWS\system32\xunyount.dll(, N/A)

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1    localhost
127.0.0.1  yu.8s7.net
127.0.0.1  1.jopanqc.com
127.0.0.1  2.joppnqq.com
127.0.0.1  wg.47255.com
127.0.0.1  1.joppnqq.com
127.0.0.1  xxx.m111.biz
127.0.0.1  1.jopenqc.com
127.0.0.1  1.jopenkk.com
127.0.0.1  xxx.vh7.biz
127.0.0.1  xxx.j41m.com
127.0.0.1  3.joppnqq.com
127.0.0.1  d.93se.com
127.0.0.1  www.868wg.com
127.0.0.1  xxx.mmma.biz
127.0.0.1  ilove.com
127.0.0.1  tp.shpzhan.cn
127.0.0.1  www.tomwg.com
127.0.0.1  www.cike007.cn
127.0.0.1  www.22aaa.com
127.0.0.1  xx.exiao01.com
127.0.0.1  www.exiao01.com
127.0.0.1  www.exiao01.com
127.0.0.1  new.749571.com
127.0.0.1  xtx.kv8.info
127.0.0.1  cao.kv8.info
127.0.0.1  1.jopmmqq.com
127.0.0.1  171817.171817.com
127.0.0.1  d2.llsging.com
127.0.0.1  down.malasc.cn
127.0.0.1  llboss.com
127.0.0.1  nx.51ylb.cn
127.0.0.1  my.531jx.cn
127.0.0.1  qqq.dzydhx.com
127.0.0.1  qqq.hao1658.com
127.0.0.1  www.333292.com
127.0.0.1  down.18dd.net
127.0.0.1  up.22x44.com
127.0.0.1  aaa.faba01.com
127.0.0.1  bad.tqdlt.cn
127.0.0.1  1.chsipo.com
127.0.0.1  c3.aishangai.net
127.0.0.1  c2.aishangai.net
127.0.0.1  xxx.188dm.com
127.0.0.1  x2.1a2b3c1.com
127.0.0.1  d1.163500.net
127.0.0.1  down.google-serv.cn

==================================
进程特权扫描
特殊特权被允许： SeDebugPrivilege [PID = 2296, C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2296, C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2304, F:\TOOLS\杀马\AVG ANTI-SPYWARE 7.5\CRAVGAS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3732, C:\PROGRAM FILES\CHINANET\VNETCLIENT.EXE]

==================================
API HOOK
RVA  错误： LoadLibraryA (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA  错误： LoadLibraryExA (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA  错误： LoadLibraryExW (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA  错误： LoadLibraryW (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)
RVA  错误： GetProcAddress (危险等级: 高,  被下面模块所HOOK: \??\C:\WINDOWS\system32\drivers\klif.sys)

==================================
隐藏进程
N/A

显示全部楼层 · 发表于 2008-4-11 16:41:21

报告是欠缺的
将完整的报告压缩附件上传

显示全部楼层 · 发表于 2008-4-11 16:49:16

已经上传好了帮忙看下吧

显示全部楼层 · 发表于 2008-4-11 16:54:07

1.建议使用XDelBox删除以下文件：(XDelBox1.3下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择从剪贴板导入，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。

c:\windows\system32\xunyount.dll

2.删除重启后使用SREng修复下面各项：

启动项目－－注册表之如下项删除：
[load] <>
[run] <>

**************以上分析报告由SREngLog分析助手提供******************
分析：etly
时间：2008-4-11
SREngLog分析助手 1.3 (20070808 更新 BY 草莽书生)

ie加载项太多了
使用windows清理助手清理一下吧

显示全部楼层 · 发表于 2008-4-11 17:05:26

c:\windows\system32\xunyount.dll
这个删掉了

这个看不懂？？？
启动项目－－注册表之如下项删除：
[load] <>
[run] <>

显示全部楼层 · 发表于 2008-4-11 17:07:41

使用sreng删除
置顶帖的软件集有的下载sreng

显示全部楼层 · 发表于 2008-4-11 17:11:19

我有这软件问题是你说的[load] <>
[run] <>
这是什么我找不到

显示全部楼层 · 发表于 2008-4-11 17:13:22

启动项那里找不到么？？
那也可以不用理睬~
因为键值是空的，
有没该项都一样

[已解决] 我电脑为什么这么卡？（以上传）

本帖子中包含更多资源

本帖子中包含更多资源