清理专家诊断的，高手看看

lq7628

新兵

积分: 1
威望: 2
元宝: 0
铜钱: 2

1楼大中小发表于 2008-2-23 09:13 只看该作者

清理专家诊断的，高手看看

==============================================================
      金山清理专家系统诊断报告

该诊断报告由金山清理专家提供 http://www.duba.net
==============================================================

诊断时间:       2008-02-23, 09:09
诊断平台:       Windows XP [5.1.2600] Service Pack 2
IE版本:       Internet Explorer V6.0.2180.2900
计算机物理内存:  511(MB)
当前可用内存: 226(MB)
硬盘总大小:    37(GB)
硬盘可用空间: 24(GB)
清理专家版本: 2007,12,28,3
恶意软件库版本:  2008.02.22.1
漏洞库版本:    2008.02.17.1

==============================================================
      常规启动项
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

      [360Antiarp]       <F:\360\360safe\antiarp\antiarp.exe /start>
      文件路径: F:\360\360safe\antiarp\antiarp.exe [分析中]

==============================================================
      启动文件夹位置
==============================================================

Common Startup:    C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Startup:          C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
Common Startup:    %ALLUSERSPROFILE%\「开始」菜单\程序\启动

==============================================================
      文件扩展名关联
==============================================================

.ASF          <"F:\111\影音\Storm.exe" /play "%1">
文件路径: F:\111\影音\Storm.exe [分析中]

.AVI          <"F:\111\影音\Storm.exe" /play "%1">
文件路径: F:\111\影音\Storm.exe [分析中]

.M3U          <"F:\111\影音\Storm.exe" /play "%1">
文件路径: F:\111\影音\Storm.exe [分析中]

.WMA          <"F:\111\影音\Storm.exe" /play "%1">
文件路径: F:\111\影音\Storm.exe [分析中]

.MPG(.MPEG)    <"F:\111\影音\Storm.exe" /play "%1">
文件路径: F:\111\影音\Storm.exe [分析中]

==============================================================
      Host File
==============================================================

127.0.0.1    localhost

==============================================================
      系统服务
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

      [HidServ] [已禁用]          <%SystemRoot%\System32\hidserv.dll>

==============================================================
      驱动程序
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32

      [msacm.avis] [已启用]       <ff_acm.acm>

--------------------------------------------------------------
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

      [ATSpy] [已启用]             <\??\C:\WINDOWS\system32\ATSpy.sys>

      [HidUsb] [已启用]             <system32\drivers\HidUsb.sys>

      [MouHid] [已启用]             <system32\drivers\MouHid.sys>

      [QKeyService] [已启用]       <system32\KeyCrypt.sys>
      文件路径: C:\WINDOWS\system32\KeyCrypt.sys [分析中]

      [TesSafe] [已启用]          <\??\C:\WINDOWS\system32\TesSafe.sys>
      文件路径: C:\WINDOWS\system32\TesSafe.sys [分析中]

      [WINIO] [已启用]             <\??\D:\简单游\Jdyou3\简单游\qmnms.sys>

==============================================================
      BHO
==============================================================

该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

      [SafeMon Class]
      {B69F34DD-F0F9-42DC-9EDD-957187DA688D}  <F:\360\360safe\safemon\safemon.dll>
      文件路径: F:\360\360safe\safemon\safemon.dll [分析中]

==============================================================
      当前进程
==============================================================

名称:    antiarp.exe  [已启用]
命令行: "F:\360\360safe\antiarp\antiarp.exe" /start
文件路径: F:\360\360safe\antiarp\antiarp.exe  [分析中]  (奇虎网)
模块文件: C:\WINDOWS\system32\ntdll.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comdlg32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msvcrt.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHELL32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\uxtheme.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSCTF.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\icmp.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msctfime.ime             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RASAPI32.DLL             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasman.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\NETAPI32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\TAPI32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rtutils.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINMM.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\sensapi.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USERENV.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msv1_0.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wsock32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MPRAPI.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ACTIVEDS.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\adsldpc.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ATL.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SAMLIB.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SETUPAPI.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll             (Microsoft Corporation)

名称:    Thunder5.exe  [已启用]
命令行: "F:\寻雷\5.00\Program\Thunder5.exe" /cbbf956f
文件路径: F:\寻雷\5.00\Program\Thunder5.exe  [分析中] (Thunder Networking Technologies,LTD)
模块文件: C:\WINDOWS\system32\ntdll.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Program\BugReport.dll          (迅雷网络)
模块文件: C:\WINDOWS\system32\USER32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHELL32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msvcrt.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMAGEHLP.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINMM.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MFC42.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comdlg32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\COMCTL32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCP60.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MFC42LOC.DLL             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RICHED32.DLL             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RICHED20.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\uxtheme.dll             (Microsoft Corporation)
模块文件: F:\金山\Kingsoft Internet Security 2008\KMailOEBand.DLL (Kingsoft Corporation)
模块文件: F:\金山\Kingsoft Internet Security 2008\kis.dll (Kingsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSCTF.dll                (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Program\TaskManager.dll       (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Program\download_interface.dll (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Program\stlport_vc646.dll       (STLport Consulting, Inc.)
模块文件: F:\寻雷\5.00\Program\asyn_dns.dll          (Thunder Networking Technologies,LTD)
模块文件: C:\WINDOWS\system32\iphlpapi.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSWSOCK.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Program\streammedialib.dll
模块文件: F:\寻雷\5.00\Program\al.dll
模块文件: C:\WINDOWS\system32\DNSAPI.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Program\xldc.dll                (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Program\bd.dll                (Thunder Networking Technologies,LTD)
模块文件: C:\WINDOWS\system32\CLBCATQ.DLL             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\COMRes.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mlang.dll                (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Program\XLNet.Dll             (Thunder Networking Technologies,LTD)
模块文件: C:\WINDOWS\system32\msctfime.ime             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Program\iTargetAD.dll          (Thunder Networking Technologies,LTD)
模块文件: C:\WINDOWS\system32\OLEPRO32.DLL             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\asycfilt.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msimg32.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Program\BHOStub.dll             (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\DownAndPlay\DownAndPlay.dll
模块文件: C:\WINDOWS\system32\ATL.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx (Adobe Systems, Inc.)
模块文件: C:\WINDOWS\system32\WSOCK32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RASAPI32.DLL             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasman.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\NETAPI32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\TAPI32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rtutils.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINTRUST.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msv1_0.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\sensapi.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wdmaud.drv             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USERENV.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msacm32.drv             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSACM32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\midimap.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SXS.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\schannel.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Components\InMedia\iEmbedShell.dll (　)
模块文件: F:\寻雷\5.00\Components\InMedia\iEmbed15.dll  (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\InMedia\XLIPC.DLL    (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\InMedia\PlayerHelper.dll (thunder)
模块文件: F:\寻雷\5.00\Components\InMedia\XLNet.dll    (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\P4PClient\P4PClient.dll (Thunder Networking Technologies,LTD)
模块文件: C:\WINDOWS\system32\shdocvw.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPTUI.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\shdoclc.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\xpsp2res.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mshtml.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msls31.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\PSAPI.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msimtf.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Components\Community\XLCommunity.dll (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Program\RegisterDll.dll       (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Program\MSVCIRT.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\appHelp.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Components\Security\ThunderSafe.dll (深圳市迅雷网络技术有限公司)
模块文件: F:\寻雷\5.00\Program\ATL71.DLL             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Components\Security\XLSafeUI.dll (深圳市迅雷网络技术有限公司)
模块文件: C:\WINDOWS\system32\jscript.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Components\Search\XLSearch.dll (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Program\LiveUpdate.dll          (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Plugins\XLSafeHost\XLSafeHost.dll (深圳市迅雷网络技术有限公司)
模块文件: F:\寻雷\5.00\Plugins\XLSafeHost\ThunderKSAV\ThunderKSAV.dll
模块文件: F:\寻雷\5.00\Plugins\XLSafeHost\ThunderKSAV\bin\XLScan.dll (Kingsoft Corporation)
模块文件: F:\寻雷\5.00\Plugins\KanKanTop\KanKanTop.dll  (Thunder Networking Technologies,LTD)
模块文件: C:\WINDOWS\system32\ddrawex.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DDRAW.dll                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DCIMAN32.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Components\ExplorerHelper\ExplorerHelper.dll (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\ComDlls\ThunderAgent_Now.dll    (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\ComDlls\xunleiBHO_Now.dll       (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\ComDlls\TDAtOnce_Now.dll       (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\Tips\TipsClient.dll (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\VPSHELL\VPSHELL.dll (迅雷网络)
模块文件: F:\寻雷\5.00\Components\UserExperience\UserExperience.dll (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\Tips\XLIPC.DLL       (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\ResWorker\DsXlCom.dll
模块文件: F:\寻雷\5.00\Components\ResWorker\DataProcessor_00.dll (Thunder Networking Technologies,LTD)
模块文件: F:\寻雷\5.00\Components\ResWorker\MediaWorker.dll (Thunder Networking Technologies,LTD)
模块文件: C:\WINDOWS\system32\WMVCore.DLL             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WMASF.DLL                (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\AVIFIL32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVFW32.dll             (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SETUPAPI.dll             (Microsoft Corporation)
模块文件: F:\寻雷\5.00\Components\DownloadStat\DownloadStat.dll (深圳市迅雷网络技术有限公司)

                                                         求个高手帮看下有问题吗，谢谢了

TOP

AVEBC

中将(样本管理组)

积分: 8211
威望: 15892
元宝: 0
铜钱: 4592

2楼大中小发表于 2008-2-25 10:49 只看该作者

似乎没什么问题哦

我是XO!请你们狠狠的用样本砸死我把!
样本QQ群:34520456
如何扫描SRENG,请点击
http://hi.baidu.com/ksantivirus/blog/item/6c72de90041cc78ea977a4fc.html

TOP

‹‹ 上一主题 | 下一主题 ››