求助,我用的C版红伞,昨天开始出现启动后,桌面右下角没有红伞图标的情况
是间歇性的,有时候启动有,有什么又没有,我用SReng扫了下
麻烦大家帮我看看,问题出在哪里,防火墙用的是COMODO
- 2007-02-26,10:02:20
- System Repair Engineer 2.3.13.690
- Smallfrogs (http://www.KZTechs.com)
- Windows XP Professional Service Pack 2 (Build 2600)
- - 管理权限用户 - 完整功能
- 以下内容被选中:
- 所有的启动项目(包括注册表、启动文件夹、服务等)
- 浏览器加载项
- 正在运行的进程(包括进程模块信息)
- 文件关联
- Winsock 提供者
- Autorun.inf
- HOSTS 文件
- 启动项目
- 注册表
- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
- <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
- [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
- <load><> [N/A]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
- <COMODO Firewall Pro><"C:\Program Files\Comodo\Firewall\CPF.exe" /background> [(Verified)COMODO]
- <avgnt><"C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min> [Avira GmbH]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
- <shell><Explorer.exe> [(Verified)Microsoft Corporation]
- <Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
- <AppInit_DLLs><> [N/A]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
- <UIHost><logonui.exe> [(Verified)Microsoft Corporation]
- ==================================
- 启动文件夹
- N/A
- ==================================
- 服务
- [AntiVir PersonalEdition Classic Scheduler / AntiVirScheduler][Running/Auto Start]
- <C:\Program Files\AntiVir PersonalEdition Classic\sched.exe><Avira GmbH>
- [AntiVir PersonalEdition Classic Guard / AntiVirService][Running/Auto Start]
- <C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe><AVIRA GmbH>
- [Ati HotKey Poller / Ati HotKey Poller][Stopped/Disabled]
- <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
- [ATI Smart / ATI Smart][Stopped/Disabled]
- <C:\WINDOWS\system32\ati2sgag.exe><>
- [Comodo Application Agent / CmdAgent][Running/Auto Start]
- <C:\Program Files\Comodo\Firewall\cmdagent.exe><COMODO>
- [Human Interface Device Access / HidServ][Stopped/Disabled]
- <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
- [SoundMAX Agent Service / SoundMAX Agent Service (default)][Running/Auto Start]
- <C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>
- [Spyware Terminator Realtime Shield Service / sp_rssrv][Stopped/Disabled]
- <F:\TDdownload\SpywareTerminator\Spyware Terminator\sp_rsser.exe><N/A>
- ==================================
- 驱动程序
- [aeaudio / aeaudio][Running/Manual Start]
- <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
- [ati2mtag / ati2mtag][Running/Manual Start]
- <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
- [avgio / avgio][Running/System Start]
- <\??\C:\Program Files\AntiVir PersonalEdition Classic\avgio.sys><AVIRA GmbH>
- [avgntflt / avgntflt][Running/Manual Start]
- <\??\C:\Program Files\AntiVir PersonalEdition Classic\avgntflt.sys><AVIRA GmbH>
- [Comodo Application Engine / CmdMon][Running/System Start]
- <System32\DRIVERS\cmdmon.sys><Comodo Research Lab., Inc.>
- [Comodo Network Engine / Inspect][Running/Boot Start]
- <\SystemRoot\System32\DRIVERS\inspect.sys><COMODO>
- [MidiSyn / MidiSyn][Stopped/Manual Start]
- <system32\drivers\MidiSyn.sys><Analog Devices Inc>
- [npkcrypt / npkcrypt][Running/Auto Start]
- <\??\C:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
- [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
- <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
- [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
- <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
- [Secdrv / Secdrv][Stopped/Manual Start]
- <system32\DRIVERS\secdrv.sys><N/A>
- [smwdm / smwdm][Running/Manual Start]
- <system32\drivers\smwdm.sys><Analog Devices, Inc.>
- [Spyware Terminator Driver 2 / sp_rsdrv2][Running/System Start]
- <\??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys><N/A>
- [TCP/IP Protocol Driver / Tcpip][Running/System Start]
- <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
- [viaraid / viaraid][Running/Boot Start]
- <\SystemRoot\system32\DRIVERS\viaraid.sys><VIA Technologies inc,.ltd>
- ==================================
- 浏览器加载项
- [Thunder Browser Helper]
- {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
- [信息检索(&R)]
- {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
- [Thunder Browser Helper]
- {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder\ComDlls\XunLeiBHO_007.dll, Thunder Networking Technologies,LTD>
- [&使用迅雷下载]
- <C:\Program Files\Thunder\Program\geturl.htm, N/A>
- [&使用迅雷下载全部链接]
- <C:\Program Files\Thunder\Program\getallurl.htm, N/A>
- [导出到 Microsoft Office Excel(&X)]
- <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
- [用比特精灵下载(&B)]
- <C:\Program Files\BitSpirit\bsurl.htm, N/A>
- ==================================
- 正在运行的进程
- [PID: 488][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 540][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 568][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [C:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4121]
- [PID: 612][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 624][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 760][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 832][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [C:\WINDOWS\system32\GameLink.dll] [N/A, N/A]
- [PID: 892][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [C:\WINDOWS\system32\GameLink.dll] [N/A, N/A]
- [PID: 932][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1252][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
- [C:\WINDOWS\system32\GameLink.dll] [N/A, N/A]
- [C:\Program Files\Thunder\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
- [PID: 1352][C:\Program Files\AntiVir PersonalEdition Classic\sched.exe] [Avira GmbH, 7.00.00.34]
- [C:\Program Files\AntiVir PersonalEdition Classic\schedr.dll] [ Avira GmbH, 7.00.18.00]
- [C:\Program Files\AntiVir PersonalEdition Classic\avevtlog.dll] [Avira GmbH, 7.00.00.12]
- [C:\Program Files\AntiVir PersonalEdition Classic\sqlite3.dll] [N/A, 3, 3, 6, 0]
- [PID: 1388][C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe] [AVIRA GmbH, 7.00.00.45]
- [C:\Program Files\AntiVir PersonalEdition Classic\GUARDMSG.DLL] [Avira GmbH, 7.00.05.00]
- [C:\Program Files\AntiVir PersonalEdition Classic\avevtlog.dll] [Avira GmbH, 7.00.00.12]
- [C:\Program Files\AntiVir PersonalEdition Classic\sqlite3.dll] [N/A, 3, 3, 6, 0]
- [C:\Program Files\AntiVir PersonalEdition Classic\AVPREF.DLL] [Avira GmbH, 7.00.02.00]
- [C:\Program Files\AntiVir PersonalEdition Classic\SMTPLIB.DLL] [Avira GmbH, 1.02.00.09]
- [C:\Program Files\AntiVir PersonalEdition Classic\AVEWIN32.DLL] [Avira GmbH, 7.3.1.38]
- [C:\WINDOWS\system32\GameLink.dll] [N/A, N/A]
- [PID: 1484][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe] [Analog Devices, Inc., 3, 2, 6, 0]
- [PID: 1540][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [C:\WINDOWS\system32\GameLink.dll] [N/A, N/A]
- [PID: 1740][C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe] [Avira GmbH, 7.00.01.06]
- [C:\Program Files\AntiVir PersonalEdition Classic\avgcmxp.dll] [Avira GmbH, 7.00.01.01]
- [C:\Program Files\AntiVir PersonalEdition Classic\AVWINLL.DLL] [Avira GmbH, 1.00.00.06]
- [C:\WINDOWS\system32\GameLink.dll] [N/A, N/A]
- [PID: 1792][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 868][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
- [PID: 1092][C:\Program Files\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 5, 9, 80]
- [C:\Program Files\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2]
- [C:\Program Files\Thunder\ComDlls\XunLeiBHO_007.dll] [Thunder Networking Technologies,LTD, 5, 0, 1, 4]
- [C:\WINDOWS\system32\GameLink.dll] [N/A, N/A]
- [C:\Program Files\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1]
- [PID: 508][D:\反病毒文件夹\SREng\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
- [C:\WINDOWS\system32\GameLink.dll] [N/A, N/A]
- ==================================
- 文件关联
- .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .EXE OK. ["%1" %*]
- .COM OK. ["%1" %*]
- .PIF OK. ["%1" %*]
- .REG OK. [regedit.exe "%1"]
- .BAT OK. ["%1" %*]
- .SCR OK. ["%1" /S]
- .CHM OK. ["C:\WINDOWS\hh.exe" %1]
- .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
- .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
- .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
- .LNK OK. [{00021401-0000-0000-C000-000000000046}]
- ==================================
- Winsock 提供者
- Easy2Game-TCPChain
- C:\WINDOWS\system32\GameLink.dll(N/A, N/A)
- Easy2Game-UDPChain
- C:\WINDOWS\system32\GameLink.dll(N/A, N/A)
- Easy2Game-UDPChain
- C:\WINDOWS\system32\GameLink.dll(N/A, N/A)
- Easy2Game-TCPChain
- C:\WINDOWS\system32\GameLink.dll(N/A, N/A)
- Easy2Game-TCPFilter
- C:\WINDOWS\system32\GameLink.dll(N/A, N/A)
- Easy2Game-UDPFilter
- C:\WINDOWS\system32\GameLink.dll(N/A, N/A)
- Easy2Game-UDPFilter
- C:\WINDOWS\system32\GameLink.dll(N/A, N/A)
- Easy2Game-TCPFilter
- C:\WINDOWS\system32\GameLink.dll(N/A, N/A)
- ==================================
- Autorun.inf
- N/A
- ==================================
- HOSTS 文件
- 127.0.0.1 localhost
- ==================================
- API HOOK
- N/A
- ==================================
复制代码 |