[求助] 清理专家系统诊断报告

ksdbex08182643

新兵

积分: 3
威望: 5
元宝: 0
铜钱: 4

1楼大中小发表于 2008-2-20 14:30 只看该作者

清理专家系统诊断报告

前两天系统也不知道中什么毒，就崩溃了，我用电脑自带的一键还原，还原了系统后用金三毒霸查杀了一遍，杀了几个病毒，算是恢复了正常，可是感觉系统比以前慢了许多，上网的速度也不行了。于是再用清理专家在线诊断了下，发现了许多未知可疑项目，自己又不敢轻易删除修复，所以请各位好心的大虾帮帮忙，看看是什么问题。
以下是导出的诊断报告：

==============================================================
      金山清理专家系统诊断报告
该诊断报告由金山清理专家提供 http://www.duba.net
==============================================================
诊断时间:       2008-02-20, 14:15
诊断平台:       Windows XP [5.1.2600] Service Pack 2
IE版本:       Internet Explorer V7.0.13.5730
计算机物理内存:  2047(MB)
当前可用内存: 1070(MB)
硬盘总大小:    136(GB)
硬盘可用空间: 116(GB)
清理专家版本: 2007,12,28,3
恶意软件库版本:  2008.02.19.1
漏洞库版本:    2008.02.17.1

==============================================================
      启动文件夹位置
==============================================================
Common Startup:    C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Startup:          C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
Common Startup:    %ALLUSERSPROFILE%\「开始」菜单\程序\启动
==============================================================
      文件扩展名关联
==============================================================
.ASF          <"D:\超级兔子\快乐影音\KLPlayer\klplayer.exe" "%1">
文件路径: D:\超级兔子\快乐影音\KLPlayer\klplayer.exe [分析中]
.AVI          <"D:\超级兔子\快乐影音\KLPlayer\klplayer.exe" "%1">
文件路径: D:\超级兔子\快乐影音\KLPlayer\klplayer.exe [分析中]
.M3U          <"D:\超级兔子\快乐影音\KLPlayer\klplayer.exe" "%1">
文件路径: D:\超级兔子\快乐影音\KLPlayer\klplayer.exe [分析中]
.WMA          <"D:\超级兔子\快乐影音\KLPlayer\klplayer.exe" "%1">
文件路径: D:\超级兔子\快乐影音\KLPlayer\klplayer.exe [分析中]
.MPG(.MPEG)    <"D:\超级兔子\快乐影音\KLPlayer\klplayer.exe" "%1">
文件路径: D:\超级兔子\快乐影音\KLPlayer\klplayer.exe [分析中]

==============================================================
      Host File
==============================================================
127.0.0.1    localhost
==============================================================
      系统服务
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
      [HidServ] [已禁用]          <%SystemRoot%\System32\hidserv.dll>

==============================================================
      驱动程序
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
      [VIDC.FFDS] [已启用]          <ff_vfw.dll>
      文件路径: C:\windows\system32\ff_vfw.dll [分析中]
      [msacm.avis] [已启用]       <ff_acm.acm>
--------------------------------------------------------------
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
      [ATSpy] [已启用]             <\??\C:\windows\system32\ATSpy.sys>
      [EagleNT] [已启用]          <\??\C:\WINDOWS\system32\drivers\EagleNT.sys>
      [RRamdisk] [已启用]          <system32\DRIVERS\rramdisk.sys>
      文件路径: C:\windows\system32\DRIVERS\rramdisk.sys [分析中]
      [TesSafe] [已启用]          <\??\C:\WINDOWS\system32\TesSafe.sys>
      文件路径: C:\WINDOWS\system32\TesSafe.sys [分析中]

==============================================================
      当前进程
==============================================================
名称:    srdshow.exe  [已启用]
文件路径: D:\超级兔子\MagicSet\srdshow.exe  [分析中] (Super Rabbit)
模块文件: C:\windows\system32\ntdll.dll                (Microsoft Corporation)
模块文件: C:\windows\system32\kernel32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\user32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\GDI32.dll                (Microsoft Corporation)
模块文件: C:\windows\system32\advapi32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\RPCRT4.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\Secur32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\oleaut32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\msvcrt.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\ole32.dll                (Microsoft Corporation)
模块文件: C:\windows\system32\version.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\comctl32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\winspool.drv             (Microsoft Corporation)
模块文件: C:\windows\system32\shell32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\SHLWAPI.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\wininet.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\Normaliz.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\iertutil.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\URLMON.DLL             (Microsoft Corporation)
模块文件: C:\windows\system32\comdlg32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\wsock32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\WS2_32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\WS2HELP.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\SHFolder.dll             (Microsoft Corporation)
模块文件: C:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll (Microsoft Corporation)
模块文件: C:\windows\system32\winmm.dll                (Microsoft Corporation)
模块文件: C:\windows\system32\IMM32.DLL                (Microsoft Corporation)
模块文件: C:\windows\system32\LPK.DLL                (Microsoft Corporation)
模块文件: C:\windows\system32\USP10.dll                (Microsoft Corporation)
模块文件: C:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation)
模块文件: C:\windows\system32\uxtheme.dll             (Microsoft Corporation)
模块文件: C:\金山毒霸\Kingsoft Internet Security 2008\KMailOEBand.DLL (Kingsoft Corporation)
模块文件: C:\金山毒霸\Kingsoft Internet Security 2008\kis.dll (Kingsoft Corporation)
模块文件: C:\windows\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL (Microsoft Corporation)
模块文件: C:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (Microsoft Corporation)
模块文件: C:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (Microsoft Corporation)
模块文件: C:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL (Microsoft Corporation)
模块文件: C:\windows\system32\MSCTF.dll                (Microsoft Corporation)
模块文件: C:\windows\system32\msctfime.ime             (Microsoft Corporation)
模块文件: C:\windows\system32\olepro32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\mswsock.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\hnetcfg.dll             (Microsoft Corporation)
模块文件: C:\windows\System32\wshtcpip.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\DNSAPI.dll             (Microsoft Corporation)
模块文件: C:\windows\System32\winrnr.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\WLDAP32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\rasadhlp.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\CLBCATQ.DLL             (Microsoft Corporation)
模块文件: C:\windows\system32\COMRes.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\xpsp2res.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msxml3.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mlang.dll                (Microsoft Corporation)
模块文件: C:\windows\system32\RASAPI32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\rasman.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\NETAPI32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\TAPI32.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\rtutils.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\USERENV.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\sensapi.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\msv1_0.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\iphlpapi.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\perfos.dll             (Microsoft Corporation)
模块文件: C:\windows\system32\Apphelp.dll             (Microsoft Corporation)
模块文件: D:\超级兔子\MagicSet\SRshutdown.dll
模块文件: C:\windows\system32\IMAGEHLP.DLL             (Microsoft Corporation)

==============================================================
      IE扩展按钮
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions
      [启动迅雷5]
      <{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}> <C:\Program Files\Thunder Network\Thunder\Thunder.exe>
      文件路径: C:\Program Files\Thunder Network\Thunder\Thunder.exe [分析中]

==============================================================
      ActiveX控件
==============================================================
该项来源: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats
      [XMP Class]
      <{6483F145-A768-4C41-AACC-52D4D7845851}>       <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>
      文件路径: C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work [分析中]
      [SopCore Control]
      <{8FEFF364-6A5F-4966-A917-A3AC28411659}>       <C:\PROGRA~1\SopCast\sopocx.ocx>
      文件路径: C:\PROGRA~1\SopCast\sopocx.ocx [分析中]

==============================================================
      其他安全区域
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      [显示摇曳 CPL 扩展] <deskpan.dll>

TOP

kingken

五级士官

积分: 1729
威望: 2830
元宝: 0
铜钱: 1172

2楼大中小发表于 2008-2-20 14:54 只看该作者

[TesSafe] [已启用] <\??\C:\WINDOWS\system32\TesSafe.sys>
文件路径: C:\WINDOWS\system32\TesSafe.sys [分析中]
这个很奇怪……禁用或清除它再重启系统试试，把文件传上来查查看有没有毒

[ 本帖最后由 kingken 于 2008-2-20 15:14 编辑 ]

心凉

TOP

‹‹ 上一主题 | 下一主题 ››