怎么一从起完之后 金山总杀一个系统的文件Win32 OR TrojDownloader 有这个 好像还有个什么模块 我一从起还没到桌面就提示模块错误 这是怎么回事啊 谁能帮帮我？
==============================================================
金山清理专家系统诊断报告
该诊断报告由金山清理专家提供
http://www.duba.net
==============================================================
诊断时间: 2008-06-27, 18:23
诊断平台: Windows XP [5.1.2600] Service Pack 2
IE版本: Internet Explorer V7.0.13.5730
计算机物理内存: 510(MB)
当前可用内存: 92(MB)
硬盘总大小: 55(GB)
硬盘可用空间: 37(GB)
清理专家版本: 2008.06.13.404
恶意软件库版本: 2008.06.03.1
漏洞库版本: 2008.06.02.1
==============================================================
常规启动项
==============================================================
该项来源: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
[bgswitch] <C:\WINDOWS\system32\bgswitch.exe>
文件路径: C:\WINDOWS\system32\bgswitch.exe [分析中]
[miniqqlive] <"C:\Program Files\Tencent\QQLive\MiniQQLive.exe">
文件路径: C:\Program Files\Tencent\QQLive\MiniQQLive.exe [分析中]
==============================================================
启动文件夹位置
==============================================================
Common Startup: C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Startup: C:\Documents and Settings\a13132140813\「开始」菜单\程序\启动
Common Startup: %ALLUSERSPROFILE%\「开始」菜单\程序\启动
==============================================================
Host File
==============================================================
127.0.0.1 localhost
==============================================================
系统服务
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
[HidServ] [已禁用] <%SystemRoot%\System32\hidserv.dll>
[Service_Template] [已启用] <C:\WINDOWS\system32\kaspper2.txt>
[UMWdf] [已启用] <C:\WINDOWS\system32\wdfmgr.exe>
[Wuauclt] [已启用] <%SystemRoot%\system32\Wuauclt.dll>
文件路径: C:\WINDOWS\system32\Wuauclt.dll [分析中]
==============================================================
驱动程序
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
[AACSAS] [已启用] <System32\BIRD\aacsas.sys>
文件路径: C:\WINDOWS\system32\BIRD\aacsas.sys [分析中]
[CDA1000] [已启用] <System32\BIRD\cda1000.sys>
文件路径: C:\WINDOWS\system32\BIRD\cda1000.sys [分析中]
[CPQCISSM] [已启用] <System32\BIRD\cpqcissm.sys>
文件路径: C:\WINDOWS\system32\BIRD\cpqcissm.sys [分析中]
[EagleNT] [已启用] <\??\C:\WINDOWS\system32\drivers\EagleNT.sys>
[FASTSX] [已启用] <System32\BIRD\fastsx.sys>
文件路径: C:\WINDOWS\system32\BIRD\fastsx.sys [分析中]
[FASTTX2K] [已启用] <System32\BIRD\fasttx2k.sys>
文件路径: C:\WINDOWS\system32\BIRD\fasttx2k.sys [分析中]
[FT8300] [已启用] <System32\BIRD\ft8300.sys>
文件路径: C:\WINDOWS\system32\BIRD\ft8300.sys [分析中]
[FTSATA2] [已启用] <System32\DRIVERS\ftsata2.sys>
[IASTOR] [已启用] <System32\BIRD\iaStor.sys>
文件路径: C:\WINDOWS\system32\BIRD\iaStor.sys [分析中]
[M5287] [已启用] <System32\BIRD\m5287.sys>
文件路径: C:\WINDOWS\system32\BIRD\m5287.sys [分析中]
[mr40khu] [已启用] <System32\DRIVERS\mr40khu.sys>
文件路径: C:\WINDOWS\system32\DRIVERS\mr40khu.sys [文件无法访问]
[NVATABUS] [已启用] <System32\BIRD\NVATABUS.SYS>
文件路径: C:\WINDOWS\system32\BIRD\NVATABUS.SYS [分析中]
[SI3112R] [已启用] <System32\BIRD\SI3112r.sys>
文件路径: C:\WINDOWS\system32\BIRD\SI3112r.sys [分析中]
[SISRAID] [已启用] <System32\BIRD\SiSRaid.sys>
文件路径: C:\WINDOWS\system32\BIRD\SiSRaid.sys [分析中]
[ULSATA] [已启用] <System32\BIRD\ulsata.sys>
文件路径: C:\WINDOWS\system32\BIRD\ulsata.sys [分析中]
[ULSATA2] [已启用] <System32\BIRD\ulsata2.sys>
文件路径: C:\WINDOWS\system32\BIRD\ulsata2.sys [分析中]
==============================================================
BHO
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
[QQToolbar]
{29CF293A-1E7D-4069-9E11-E39698D0AF95} <C:\Program Files\Tencent\QQToolbar\IEBar.dll>
[Computers Class]
{FFFFEECE-FD18-8222-2FB0-2935B9EA0623} <C:\WINDOWS\system32\1025\COMPUT~1.DLL>
文件路径: C:\WINDOWS\system32\1025\COMPUT~1.DLL [分析中]
==============================================================
当前进程
==============================================================
名称: MiniQQLive.exe [已启用]
命令行: "C:\Program Files\Tencent\QQLive\MiniQQLive.exe"
文件路径: C:\Program Files\Tencent\QQLive\MiniQQLive.exe [分析中] (Tencent)
模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation)
模块文件: C:\Program Files\Tencent\QQLive\LiveUtlt.dll (Tencent)
模块文件: C:\Program Files\Tencent\QQLive\log.dll
模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation)
模块文件: C:\Program Files\Tencent\QQLive\XMLParser.dll (Tencent)
模块文件: C:\Program Files\Tencent\QQLive\ExceptCatch.dll (Tencent)
模块文件: C:\WINDOWS\system32\imagehlp.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\COMCTL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll (Microsoft Corporation)
模块文件: C:\Program Files\Tencent\QQLive\Skin.dll (Tencent)
模块文件: C:\WINDOWS\system32\MSIMG32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation)
模块文件: C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll (TENCENT)
模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation)
模块文件: C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\KMailOEBand.DLL (Kingsoft Corporation)
模块文件: C:\Program Files\Kingsoft\Kingsoft Internet Security 2008\kis.dll (Kingsoft Corporation)
模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\apphelp.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation)
模块文件: C:\Program Files\Tencent\QQLive\ADManage.dll (Tencent)
模块文件: C:\Program Files\Tencent\QQLive\proxy.dll
模块文件: C:\Program Files\Tencent\QQLive\Encrypt.dll
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL (Microsoft Corporation)
[
本帖最后由 KSDA12678696 于 2008-6-27 10:40 编辑 ]
