==============================================================
金山清理
专家系统诊断报告
该诊断报告由金山清理专家提供
http://www.duba.net
==============================================================
诊断
时间: 2008-03-28, 12:02
诊断平台: Windows XP [5.1.2600] Service Pack 2
IE版本:
Internet Explorer V6.0.2180.2900
计算机物理内存: 1023(MB)
当前可用内存: 679(MB)
硬盘总大小: 55(GB)
硬盘可用空间: 11(GB)
清理专家版本: 2007,12,28,3
恶意
软件库版本: 2008.03.26.1
漏洞库版本: 2008.03.11.1
==============================================================
映像劫持
==============================================================
该项来源: HKEY_LOCAL_
MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File
Execution Options
<ctfmon.exe> <SoundMan.exe>
文件路径: C:\WINDOWS\SoundMan.exe [分析中] []
==============================================================
启动文件夹位置
==============================================================
Common Startup: C:\Documents and Settings\All Users\「开始」菜单\
程序\启动
Startup: C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
Common Startup: %ALLUSERSPROFILE%\「开始」菜单\程序\启动
==============================================================
Host File
==============================================================
127.0.0.1 localhost
127.0.0.1 tttt.591jx.com
127.0.0.1 jx.llzjz.cn
127.0.0.1 eee.avpkav.com
127.0.0.1 fff.tesekl.info
127.0.0.1
www.dj8910.com
127.0.0.1 test.591jx.com
127.0.0.1 1.9797aiai.com
127.0.0.1 2.9797aiai.com
127.0.0.1 3.9797aiai.com
127.0.0.1 4.9797aiai.com
127.0.0.1 5.9797aiai.com
127.0.0.1 2.kv8.info
127.0.0.1
www.88feel.cn
127.0.0.1 feel.88feel.cn
127.0.0.1 exe.xinniankl.com
127.0.0.1 the.microgood.net
127.0.0.1 xin.xinniankl.com
127.0.0.1 xxx.wofala.info
127.0.0.1 aaa.wd03.info
127.0.0.1 xxx.wd01.info
127.0.0.1
www.ip580.com
127.0.0.1 url.hao365.org
127.0.0.1 xxx.huilaiba.info
127.0.0.1 bankdiyed.cn
127.0.0.1 59.vc
127.0.0.1 086199.service-google.cn
127.0.0.1 bt.etimes888.com
127.0.0.1
www.hua28.com
127.0.0.1
www.wg771.com
127.0.0.1
www.2323938.com
127.0.0.1 xxx.llsj123.com
127.0.0.1 a.topxxxx.cn
127.0.0.1 picon.chinaren.com
127.0.0.1 blog.wcad.cn
127.0.0.1 s101-cnzz.com
127.0.0.1 a.bkyes.com
127.0.0.1 yoooooooo.bkyes.com
127.0.0.1 vestb.lu158.cn
127.0.0.1 xiazai.
cpushpop.com
127.0.0.1 iii.chsip.net
127.0.0.1 d.wacsy.com
127.0.0.1 web.haoliuliang.com
127.0.0.1 ad.haoliuliang.com
127.0.0.1 mm.haoliuliang.com
127.0.0.1
www.hao12321.cn
127.0.0.1
www.likeall.cn
127.0.0.1 asdfasdf.88y.net
127.0.0.1 down.laladan.cn
127.0.0.1 psp.kalengzi.cn
127.0.0.1 xxx.zttwp.cn
127.0.0.1 ce.laladan.cn
127.0.0.1 xxx.laladan.cn
127.0.0.1 udd.yooosky.com
127.0.0.1 uee.yooosky.com
127.0.0.1 uff.yooosky.com
127.0.0.1 cc.fockfock.com
==============================================================
系统服务
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
[secctrl] [已启用] <c:\windows\system32\rundll32.exe comr3260.
dll,scan>
文件路径: C:\WINDOWS\system32\comr3260.dll [分析中]
==============================================================
驱动程序
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
[dohs] [已启用] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp54.tmp>
文件路径: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp54.tmp [服务器忙]
[drop] [已启用] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp46.tmp>
文件路径: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp46.tmp [服务器忙]
[jtio] [已启用] <\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tmp73.tmp>
[KBaseZS] [已禁用] <\??\I:\KBaseZS.sys>
[sptd] [已启用] <System32\Drivers\sptd.sys>
文件路径: C:\WINDOWS\system32\Drivers\sptd.sys [文件无法访问]
==============================================================
当前
进程
==============================================================
名称: SoundMan.exe [已启用]
命令行: SoundMan.exe "C:\WINDOWS\system32\ctfmon.exe"
文件路径: C:\WINDOWS\SoundMan.exe [分析中]
模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVBVM60.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation)
模块文件: C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL (Kingsoft Corporation)
模块文件: C:\WINDOWS\system32\COMCTL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
模块文件: C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll (Kingsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wsock32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RASAPI32.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\sensapi.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation)
