各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供 http://www.360safe.com
诊断时间: 2007-06-12 15:58:31
诊断平台: Microsoft Windows 2000 Service Pack 4
IE版本: Internet Explorer V6.0.2800.1106 Build:62800.1106
计算机物理内存:255MB - 当前可用内存:107MB
100 - 未知 - Process: guard.exe [AVG Anti-Spyware guard] - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
100 - 未知 - Process: QQ.exe [QQ] - D:\Program Files\Tencent\QQ\QQ.exe
100 - 未知 - Process: TIMPlatform.exe [TIMPlatform] - D:\Program Files\Tencent\QQ\TIMPlatform.exe
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.hztt.com/bbs/index.asp
O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{710EB7A1-45ED-11D0-924A-0020AFC7AC4D}] - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} -
O8 - 未知 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - 未知 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - 未知 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - 未知 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 未知 - Extra button: 信息检索(HKLM) - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - 未知 - Extra button: 腾讯QQ(HKLM) - D:\Program Files\Tencent\QQ\QQ.EXE
O9 - 未知 - Extra button: &FlashGet(HKLM) - C:\PROGRA~1\FLASHGET\flashget.exe
O16 - 未知 - DPF: {3A48E3BA-304B-43B6-8738-FD37F35D2206} (UploadFile Control) - http://196.100.100.28/UploadFileProj1.ocx
O16 - 未知 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (PasswordEditCtrl) - https://password.qq.com/download/qqedit2.cab
O22 - 未知 - Filename Extention: .hlp - winhlp32.exe %1
O23 - 未知 - Service: AVP [Provides protection against computer viruses and another dangerous software.] - "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r - (not running)
O30 - 未知 - HKCU\..\Desktop: [Scrnsave.exe] [] C:\WINNT\广联达~1.SCR
=======================================
100 - 安全 - Process: smss.exe [该进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINNT\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINNT\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512,512 Windows=On SubSystemType=Windows ServerDll=ba
100 - 安全 - Process: WINLOGON.EXE [windows nt用户登陆程序。] - C:\WINNT\system32\winlogon.exe
100 - 安全 - Process: SERVICES.EXE [用于管理windows服务系统进程。] - C:\WINNT\system32\services.exe
100 - 安全 - Process: LSASS.EXE [本地安全权限服务控制windows安全机制。] - C:\WINNT\system32\lsass.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINNT\system32\svchost -k rpcss
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINNT\system32\spoolsv.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINNT\system32\svchost.exe -k netsvcs
100 - 安全 - Process: regsvc.exe [远程注册表服务用于访问在远程计算机的注册表。] - C:\WINNT\system32\regsvc.exe
100 - 安全 - Process: mstask.exe [windows计划任务用于设定继承在什么时间或者什么日期备份或者运行。] - C:\WINNT\system32\MSTask.exe
100 - 安全 - Process: winmgmt.exe [windows management service透过windows management instrumentation data (wmi)技术处理来自应用客户端的请求。] - C:\WINNT\System32\WBEM\WinMgmt.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINNT\system32\svchost.exe -k wugroup
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINNT\Explorer.EXE
100 - 安全 - Process: CTFMON.EXE [office xp输入法图标。] - C:\WINNT\system32\ctfmon.exe
100 - 安全 - Process: wuauclt.exe [windows操作系统后台程序，用于系统升级。] - C:\WINNT\system32\wuauclt.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士相关程序。] - C:\Program Files\360safe\360Safe.exe
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINNT\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINNT\system32\blank.htm
O3 - 安全 - Toolbar: (@msdxmLC.dll,-1@2052,电台(&R)) - [是Windows Media Player播放器ActiveX控制相关文件。] - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - 安全 - HKLM\..\Run: [Synchronization Manager] [资料同步管理器] mobsync.exe /logon
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] ctfmon.exe
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - 安全 - Extra button: 卡巴斯基Web反病毒保护插件(HKLM) - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O18 - 安全 - Protocol: OFFICE 相关 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O23 - 安全 - Service: AVG Anti-Spyware Guard [一款杀毒软件AVG的相关服务。] - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe - (running)
O23 - 安全 - Service: Fax [微软Microsoft传真服务相关程序，该服务允许用户创建和发送传真到微软Office组件中。] - C:\WINNT\system32\faxsvc.exe - (not running)
O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINNT\system32\nvsvc32.exe - (not running)
O23 - 安全 - Service: Pml Driver HPZ12 [是惠普PSC 2100、2200、4100和6100系列打印机驱动服务。] - C:\WINNT\system32\HPZipm12.exe - (not running)
=======================================
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 -
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 121344 - c65af3789883af8a6e5e5405949bdcc6
O31 - 未知 - SEApproved: {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} - C:\Program Files\Real\RealPlayer\rpshell.dll - RealNetworks, Inc. - RealPlayer Shell Extensions - 1.0.1.1946 - 49198 - 68718fbfe1513aaeed9bf319d912bb47
O31 - 未知 - SEApproved: {E4A9C627-C787-41B7-A42E-45AC32836D35} - C:\Program Files\KingCopy\cpystmnu.dll - CuteSoft - Cutesoft KingCopy Shell Extensions - 1.0.0.12 - 42496 - 2e43a5fd025394c124c51508cd3ae450
O31 - 未知 - SEApproved: {68f32140-2ca3-11d0-acc1-444553540000} - C:\Program Files\ACDSee\picaview.dll - ACD Systems, Ltd. - PicaView 系统扩展 DLL - 2.0.0.78 - 487424 - 053432fff82198e62c0162be6c5c60f9
O31 - 未知 - SEApproved: {5E44E225-A408-11CF-B581-008029601108} - C:\Program Files\HP CD-Writer\DirectCD\shellex.dll - Adaptec - DirectCD Shell Extention DLL - 4.3.1.166 - 167936 - 605618859c163101d56888f163452fc9
O31 - 未知 - Directory Menu: {E4A9C627-C787-41B7-A42E-45AC32836D35} - C:\Program Files\KingCopy\cpystmnu.dll - CuteSoft - Cutesoft KingCopy Shell Extensions - 1.0.0.12 - 42496 - 2e43a5fd025394c124c51508cd3ae450
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 121344 - c65af3789883af8a6e5e5405949bdcc6
O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 -
=======================================
O40 - Explorer.EXE - Microsoft Corporation - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCR80.dll - Microsoft? C Runtime Library - 16d7ddf3b659f7cf1cb9f4dcff4219f0
O40 - Explorer.EXE - Microsoft Corporation - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\MSVCP80.dll - Microsoft? C++ Runtime Library - 2bc650257fb0867abd54fd460ec2bafc
O40 - Explorer.EXE - - D:\Program Files\Tencent\QQ\qdshm.dll - QQDiskShellMenu Module - 1dc4b691b63c4b18f41d33d53081017d
O40 - Explorer.EXE - Microsoft Corporation - D:\Program Files\Tencent\QQ\MFC42.DLL - MFCDLL Shared Library - Retail Version - 3c0e5e93b0ed3e933a48f0b886c47be8
O40 - Explorer.EXE - ACD Systems, Ltd. - C:\Program Files\ACDSee\picaview.dll - PicaView 系统扩展 DLL - 053432fff82198e62c0162be6c5c60f9
O40 - Explorer.EXE - CuteSoft - C:\Program Files\KingCopy\cpystmnu.dll - Cutesoft KingCopy Shell Extensions - 2e43a5fd025394c124c51508cd3ae450
O40 - Explorer.EXE - Microsoft Corporation - C:\WINNT\system32\c_g18030.dll - GB18030 DBCS-Unicode Conversion DLL - da94863982d5d1d4fb31eb79131c93cd
O40 - Explorer.EXE - Tencent - D:\Program Files\Tencent\QQ\DShared.dll - DShared DLL - 1f9e6b6a7b631b34838f2c7c138101e3
=======================================
O41 - drvmcdb - Device Driver - C:\WINNT\system32\drivers\drvmcdb.sys - (running) - Device Driver - VERITAS Software, Inc. - 0a2c0641428de9e16426cdf483535cb9
O41 - HPUATA - USBAT Mass Storage Class Client driver - C:\WINNT\system32\drivers\HPUATA.sys - (running) - USBAT Mass Storage Class Client driver - SCM Microsystems Inc. - 660ba95e61da919c0e9afc2bf3babe6f
O41 - klif - spuper-ptor - C:\WINNT\system32\drivers\klif.sys - (running) - spuper-ptor - Kaspersky Lab - 6197b679ea867da4bd42d9a440cef663
O41 - npkcrypt - nProtect KeyCrypt Driver - D:\Program Files\Tencent\QQ\npkcrypt.sys - (running) - nProtect KeyCrypt Driver - INCA Internet Co., Ltd. - 8bcb281a2540e7aff0cd00f9878fe21f
O41 - PxHelp20 - PxHelper Device Driver for Windows 2000 - C:\WINNT\system32\drivers\pxhelp20.sys - (running) - PxHelper Device Driver for Windows 2000 - VERITAS Software, Inc. - 6edbddf6a3f0183aef674ba313e7ca42
O41 - ADProt - ADProt - C:\WINNT\system32\drivers\ADProt.sys - (not running) - - -
O41 - BdGuard - BdGuard - C:\WINNT\system32\drivers\BDGuard.SYS - (not running) - - -
O41 - cmpci - C-Media Audio WDM Driver - C:\WINNT\system32\drivers\cmaudio.sys - (not running) - C-Media Audio WDM Driver - C-Media Inc - e5842ccf0953d3d46d5e26427b67e901
O41 - kmsinput - kmsinput - C:\WINNT\system32\drivers\kmsinput.sys - (not running) - - - f8d6ebcb50c02b42c5ffd5393229c6b6
=======================================
360Safe.exe=3.4.0.1003
AntiAdwa.dll=3.4.0.1001
AntiEng.dll=3.4.0.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
safelive.exe=1.0.0.2007
live.dll=1.0.1.1015
=======================================
操作历史报告：
----------清理恶评软件历史----------
2007-06-12 13:12
清理恶评软件 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\baidubar.dll
清理恶评软件 - 百度搜索伴侣 - C:\WINNT\system32\IEXP_LOG.TXT
2007-06-12 13:14
清理恶评软件 - 百度超级搜霸 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77FEF28E-EB96-44FF-B511-3185DEA48697}
----------插件卸载操作历史----------
2007-06-12 13:15
插件管理 - 中文搜搜 - C:\PROGRA~1\TENCENT\Adplus\SSAddr.dll
插件管理 - 超级旋风下载组件 -
插件管理 - 360safe实时保护功能模块 -
2007-06-12 13:16
插件管理 - 中文搜搜 - C:\PROGRA~1\TENCENT\Adplus\SSAddr.dll
2007-06-12 13:17
插件管理 - 中文搜搜 - C:\Program Files\TENCENT\Adplus
----------全面诊断修复历史----------
2007-03-16 08:02
O4 - 危险 - BaiduInstall - C:\WINNT\system32\rundll32.exe C:\PROGRA~1\baidu\bar\BDBAR_~1\BaiduBar.dll,Install
2007-06-12 15:58
O2 - 危险 - BandIE Class - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - 危险 - 百度超级搜霸 - C:\PROGRA~1\baidu\bar\baidubar.dll
=======================================
360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基V6.0
最新免费下载：http://www.360safe.com
谢谢 |
[复制链接]
发表于 2007-6-12 16:04:18
发表于 2007-6-12 16:17:20
