==============================================
金山清理专家系统诊断报告
该诊断报告由金山清理专家提供
http://www.duba.net
==============================================================
诊断时间: 2008-07-03, 20:58
诊断平台: Windows XP [5.1.2600] Service Pack 2
IE版本: Internet Explorer V6.0.2180.2900
计算机物理内存: 511(MB)
当前可用内存: 198(MB)
硬盘总大小: 132(GB)
硬盘可用空间: 112(GB)
清理专家版本: 2008.06.13.404
恶意软件库版本: 2008.07.02.1
漏洞库版本: 2008.06.26.1
==============================================================
常规启动项
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
[Alert] <c:\program files\starsoftcomm\starcenter\alert.exe>
文件路径: c:\program files\starsoftcomm\starcenter\alert.exe [分析中]
[StarCenter] <c:\program files\starsoftcomm\starcenter\StarCenter.exe>
文件路径: c:\program files\starsoftcomm\starcenter\StarCenter.exe [分析中]
[AutoUpd] <c:\program files\starsoftcomm\starcenter\UpdTray.exe>
文件路径: c:\program files\starsoftcomm\starcenter\UpdTray.exe [分析中]
[ScApiEx] <c:\program files\starsoftcomm\starcenter\ScApiEx.exe>
文件路径: c:\program files\starsoftcomm\starcenter\ScApiEx.exe [分析中]
==============================================================
启动文件夹位置
==============================================================
Common Startup: C:\Documents and Settings\All Users\「开始」菜单\程序\启动
Startup: C:\Documents and Settings\new\「开始」菜单\程序\启动
Common Startup: %ALLUSERSPROFILE%\「开始」菜单\程序\启动
==============================================================
Host File
==============================================================
127.0.0.1 localhost
==============================================================
驱动程序
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
[KBaseZS] [已禁用] <\??\G:\KBaseZS.sys>
[Tcpip] [已启用] <system32\DRIVERS\tcpip.sys/TCP/IP Protocol Driver>
文件路径: C:\WINDOWS\system32\DRIVERS\tcpip.sys [分析中]
==============================================================
当前进程
==============================================================
名称: Thunder5.exe [已启用]
命令行: "F:\Thunder\Program\Thunder5.exe" /413fc6e7 /online
文件路径: F:\Thunder\Program\Thunder5.exe [分析中] (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\BugReport.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCRT.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MFC42.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comdlg32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\COMCTL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVCP60.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MFC42LOC.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RICHED32.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RICHED20.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KMailOEBand.DLL (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\kis.dll (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\MFC80U.DLL (Microsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\MSVCR80.dll (Microsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\MSVCP80.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\TaskManager.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\download_interface.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\MSVCP71.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\MSVCR71.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mlang.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\asyn_frame.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\MSWSOCK.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\ATL71.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\emule_id.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\backend_agent.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\ptl.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\xl_stat.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\fs.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\XLNet.Dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\RASAPI32.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation)
模块文件: F:\Thunder\Program\iTargetAD.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\OLEPRO32.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\asycfilt.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msimg32.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\BHOStub.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\DownAndPlay\DownAndPlay.dll
模块文件: C:\WINDOWS\system32\ATL.DLL (Microsoft Corporation)
模块文件: F:\Thunder\Components\InMedia\iEmbedShell.dll ( )
模块文件: F:\Thunder\Components\InMedia\iEmbed17.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\InMedia\PlayerHelper.dll (thunder)
模块文件: F:\Thunder\Components\InMedia\XLIPC.DLL (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\WINHTTP.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx (Adobe Systems. Inc.)
模块文件: C:\WINDOWS\system32\wsock32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wdmaud.drv (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msacm32.drv (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\midimap.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SXS.DLL (Microsoft Corporation)
模块文件: F:\Thunder\Program\stream.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\p2p.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\xldc.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\p2sp.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\down_dispatcher.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\p2p_upload.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\p2p_local_res.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\al.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\schannel.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\bd.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPTUI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\appHelp.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\shdoclc.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MPR.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\drprov.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\ntlanman.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\NETUI0.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\NETUI1.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\NETRAP.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\SAMLIB.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\davclnt.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSGINA.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINSTA.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ODBC32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\odbcint.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LINKINFO.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ntshrui.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msls31.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msimtf.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\JScript.dll (Microsoft Corporation)
模块文件: F:\Thunder\Components\P4PClient\P4PClient.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\Community\XLCommunity.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\dbghelp.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\RegisterDll.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\MSVCIRT.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\imdt.dll (TODO: <Company name>)
模块文件: F:\Thunder\Components\Security\ThunderSafe.dll (深圳市迅雷网络技术有限公司)
模块文件: F:\Thunder\Components\Security\ConfigManager.dll (深圳市迅雷网络技术有限公司)
模块文件: F:\Thunder\Components\Security\SafeManager.dll (深圳市迅雷网络技术有限公司)
模块文件: C:\WINDOWS\system32\msxml3.dll (Microsoft Corporation)
模块文件: F:\Thunder\Program\XLNetU.Dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Plugins\XLSafeHost\XLSafeHost.dll (深圳市迅雷网络技术有限公司)
模块文件: F:\Thunder\Plugins\XLSafeHost\ThunderKSAV\ThunderKSAV.dll
模块文件: F:\Thunder\Plugins\XLSafeHost\ThunderKSAV\bin\XLScan.dll (Kingsoft Corporation)
模块文件: F:\Thunder\Components\Search\XLSearch.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Program\LiveUpdate.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\dxtrans.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ddrawex.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DDRAW.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DCIMAN32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\dxtmsft.dll (Microsoft Corporation)
模块文件: F:\Thunder\Components\XLSoftBase\XLSoftwareBase.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\WINSPOOL.DRV (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\oledlg.dll (Microsoft Corporation)
模块文件: F:\Thunder\Plugins\GouGouTop\GouGouTop.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Plugins\KanKanTop\KanKanTop.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\ExplorerHelper\ExplorerHelper.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\ComDlls\ThunderAgent_Now.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\OLEACC.dll (Microsoft Corporation)
模块文件: F:\Thunder\ComDlls\xunleiBHO_Now.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\ComDlls\TDAtOnce_Now.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\Tips\TipsClient.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\VPSHELL\VPSHELL.dll (迅雷网络)
模块文件: F:\Thunder\Components\UserExperience\UserExperience.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\ResWorker\DsXlCom.dll
模块文件: F:\Thunder\Components\ResWorker\DataProcessor_00.dll (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\ResWorker\MediaWorker.dll (Thunder Networking Technologies.LTD)
模块文件: C:\WINDOWS\system32\WMVCore.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WMASF.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\AVIFIL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSVFW32.dll (Microsoft Corporation)
模块文件: F:\Thunder\Components\Tips\XLIPC.DLL (Thunder Networking Technologies.LTD)
模块文件: F:\Thunder\Components\DownloadStat\DownloadStat.dll (Thunder Networking Technologies.LTD)
模块文件: E:\Kingsoft Internet Security 2008\KAVIPC2.DLL (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAEPlat.dll (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAEPlatA.DLL (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAESgnLd.DLL (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAEArchA.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAEOLEA.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAECoreA.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAEntryA.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAEngine.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAECore.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAEUnpack.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KARchive.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KUnpaMgr.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAExt2.DAT (Kingsoft Corporation)
模块文件: E:\Kingsoft Internet Security 2008\KAExtend.DAT (Kingsoft Corporation)
名称: DubaTool_AV_Killer742.COM [已启用]
命令行: "G:\DubaTool_AV_Killer742.COM"
文件路径: G:\DubaTool_AV_Killer742.COM [文件无法访问]
模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\comdlg32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\oledlg.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINSPOOL.DRV (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation)
模块文件: G:\KAVDevC.dll (Kingsoft Corporation)
模块文件: C:\WINDOWS\system32\NTMARTA.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SAMLIB.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\appHelp.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\CRYPTUI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\shdoclc.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mlang.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msls31.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wsock32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msimtf.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\JScript.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\RASAPI32.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\wdmaud.drv (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\msacm32.drv (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\midimap.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\mshtmled.dll (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\SXS.DLL (Microsoft Corporation)
模块文件: C:\WINDOWS\system32\actxprxy.dll (Microsoft Corporation)
==============================================================
第3方IE插件
==============================================================
名称: nprfxins.dll [已启用]
文件路径: C:\Program Files\Internet Explorer\PLUGINS\RichFX\Player\nprfxins.dll [分析中]
==============================================================
IE扩展菜单
==============================================================
该项来源: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt
<使用迅雷下载> <F:\Thunder\Program\geturl.htm>
文件路径: F:\Thunder\Program\geturl.htm [分析中]
<添加到QQ自定义面板> <D:\qq\AddPanel.htm>
文件路径: D:\qq\AddPanel.htm [分析中]
<用QQ彩信发送该图片> <D:\qq\SendMMS.htm>
文件路径: D:\qq\SendMMS.htm [分析中]
==============================================================
ActiveX控件
==============================================================
该项来源: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats
[XMP Class]
<{6483F145-A768-4C41-AACC-52D4D7845851}> <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>
文件路径: C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work [分析中]
[XDRM]
<{693571CB-54A3-4E90-9D52-EEAE1334E2D3}> <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work>
文件路径: C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work [分析中]
[VqqSpeedDlProxy Class]
<{9ADACAA6-533E-4383-AFA7-F0A66650B6D8}> <C:\WINDOWS\vqqsdl10.dll>
文件路径: C:\WINDOWS\vqqsdl10.dll [分析中]
[DapCtrl Class]
<{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}> <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5803.59.(995).dll>
文件路径: C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5803.59.(995).dll [分析中]
[Thunder DapPlayer]
<{EEDD6FF9-13DE-496B-9A1C-D78B3215E266}> <F:\Thunder\Components\DownAndPlay\DapPlayer3.0.5712.71.995.dll>
文件路径: F:\Thunder\Components\DownAndPlay\DapPlayer3.0.5712.71.995.dll [分析中]
[XPPlayer Class]
<{F3E70CEA-956E-49CC-B444-73AFE593AD7F}> <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.0.0.177.(996).dll>
文件路径: C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.0.0.177.(996).dll [分析中]
==============================================================
其他安全区域
==============================================================
该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
[显示摇曳 CPL 扩展] <deskpan.dll>