这几天打开任何软件和游戏，金山网镖应用规则都会出现一个“TODO：（文件说明）”的程序名称，我已经把局域网，互联网，邮件都禁止了。另外在软件和游戏文件夹中可以找到新建的该程序，但删除后快捷方式就不管用了。其它没有任何影响。请问这是什么原因？是否属于病毒？应该i如何处理？谢谢！

[ 本帖最后由 一把锈剑 于 2008-8-22 11:06 编辑 ]

TODO：（文件说明） 如果是程序的话 可以压缩后提交到样本区

金山网镖是这样提示的：该应用程序已经改变，是否允许继续访问网络？
下面是打开金山毒霸时的详细信息
该应用程序已经改变，是否允许继续访问网络？
程序：TODO: <文件说明>
路径：D:\Kingsoft Internet Security 2008\Internals.exe
产品版本: 1.0.0.4
创建日期: 2008-08-19 03:13:02
网络操作: 连接远程网络
网络协议: TCP
远程地址: 61.172.201.194
远程端口: 80

文件打包上传

这是金山毒霸，金山清理专家，金山网镖被新建后的压缩文件。

[ 本帖最后由 一把锈剑 于 2008-8-22 11:02 编辑 ]

卸载毒霸
换路径重新安装
然后进入安全模式全面扫描下病毒和恶意软件

确认压缩包中肯定没有问题

谢谢大家，我已经将系统恢复到之前的备份。
不知道还会不会出现这种问题啊，这是第二次恢复了，前一次是在恢复后的第三天又出现同一个问题的~~~~

我也有这个问题。但是图传不上来。

看看图

所有的上网程序都出现这个。

我也有这个问题，所有执行程序都生成一个另外一个名字的执行程序如Foxmail.exe，就是Foxmailw.exe，快捷方式也指向这个文件，属性里面公司名就是TODO: ,运行的时候卡巴斯基会报有检测到风险软件 'Worm.P2P.generic'.，并且在文件夹里面生成一个data的文件夹，里面都是些乱七八糟的文件，见图片

楼主是不是前两天打了新出的系统补丁，我的机子也有这种情况。应该是补丁打的问题，我已经把所有的跟TODO公司有关的文件删除了。

我也有这个问题，我发现有许多文件夹下面都有这样的情况，一般是 XX.EXE 文件旁边会生成一个 XX_RUN.EXE 的文件，然后所有快捷方式都指向这个EXE文件，也偶尔会有类似 XXs.EXE 、XXe.exe 、XXa.exe 这种文件生成，在我的IEXPLORER.EXE后就有IEXPLORER12.EXE、IEXPLORER15.EXE、IEXPLORER21.EXE、IEXOLORERA.EXE几个EXE文件出来。一起生成的还有一些随机英文单词的文件 XXXX.CCS、XXXX.INI、XXXX.BAT、XXXX.DAT这些文件，文件名都一样，扩展名不一样，在QQ和迅雷目录下还有两个文件夹生成，DATA 和 CLIENTDATE ，这些英文文件名都及其不对劲，要不讲不通、要不在文件夹出现的很扎眼，一般很好分辨。还有，一般这些垃圾文件中，相同的扩展名的文件大小一样，里面内容也一样，生成的那些EXE文件也都一样大，都是425K，我在我硬盘里查到了1000多个425K的、文件名不对劲的EXE文件，他们的创建时间都是一样的，也就是感染这个病毒或者木马的时间。我就手动把那些文件处理掉了。

以我的水平，我也就能做怎么多了，但是毕竟不治本，求高手解决一下。

附件是我提取的QQ文件夹下的可以文件。

我也遇见了，各个盘符中文件增加了很多，都是一个日期，一样大小，文件名不一致。很烦恼。期盼解决。

看来这个问题太稀有罕见了，网上查了大半天，什么结果也没有，只有这个论坛有人讨论这个~~
咱都中新招了

我邮箱219cn@163.com，希望跟病友们交流一下，更希望高手帮助解决

手动删除是没有用的，很快你就会发现又有新建的文件。
我昨天已经试过了，郁闷中~~~~~~~~~~~~~·

不好意思我的金山清理专家已经打不开了，这是用360导出的报告。

各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
诊断时间: 2008-08-23  12:14:41
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V7.0.5730.13 Build:75730
计算机物理内存:1023.30MB - 当前可用内存:618.66MB
100 - 未知 - Process: kpfwsvc.exe [Kingsoft Personal Firewall Service] - D:\Kingsoft Internet Security 2008\KPfwSvc.EXE
100 - 未知 - Process: kwatch.exe [Kingsoft AntiVirus KWatch Service] - D:\Kingsoft Internet Security 2008\KWatch.EXE
100 - 未知 - Process: kavstart.exe [Kingsoft Antivirus Security Center] - D:\Kingsoft Internet Security 2008\KAVStart.exe
100 - 未知 - Process: kpfw32.exe [Kingsoft Personal Firewall] - D:\Kingsoft Internet Security 2008\kpfw32.exe
100 - 未知 - Process: GoogleToolbarNotifier.exe [GoogleToolbarNotifier] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
100 - 未知 - Process: stormliv.exe [暴风影音媒体控制中心] - D:\暴风影音3.6\stormliv.exe /asservice
100 - 未知 - Process: kissvc.exe [Kingsoft AntiVirus Service Manager] - D:\Kingsoft Internet Security 2008\KISSvc.EXE
100 - 未知 - Process: kmailmon.exe [Kingsoft Antivirus Email Scan] - D:\Kingsoft Internet Security 2008\KMailMon.EXE
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://tb.265.com/
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.google.com
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.google.com/ie
R1 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Use Search Asst=no
O2 - 未知 - BHO: (Google Toolbar Notifier BHO) - [GoogleToolbarNotifier] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - 未知 - BHO: (kingsoft browser shield) - [Kingsoft Antispy Kasbrowsershield] - {D963BE1A-6B35-47DB-B002-49FAE71D85CC} - D:\Kingsoft Internet Security 2008\KASBrowserShield.DLL
O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{710EB7A1-45ED-11D0-924A-0020AFC7AC4D}] - {710EB7A1-45ED-11D0-924A-0020AFC7AC4D} -
O3 - 未知 - Toolbar: (第三方IE工具栏) - [无效的CLSID:{1E796980-9CC5-11D1-A83F-00C04FC99D61}] - {1E796980-9CC5-11D1-A83F-00C04FC99D61} -
O8 - 未知 - Extra context menu item: &V使用Vagaa哇嘎下载 - D:\Vagaa\Data\vg.htm
O9 - 未知 - Extra button: 金山网页防挂马模块设置(HKLM) - D:\Kingsoft Internet Security 2008\IEBuddyExt.DLL
O9 - 未知 - Extra button: @xpsp3res.dll,-20001(HKLM) - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O22 - 未知 - Filename Extention: .hlp - winhlp32.exe %1
O23 - 未知 - Service: ccosm [Contrl Center of Storm Media] - D:\暴风影音3.6\stormliv.exe /asservice - (running)
O23 - 未知 - Service: KISSvc [金山毒霸公共服务程序] - D:\Kingsoft Internet Security 2008\KISSvc.EXE - (running)
O23 - 未知 - Service: KPfwSvc [金山毒霸个人防火墙服务程序] - "D:\Kingsoft Internet Security 2008\KPfwSvc.EXE" - (running)
O23 - 未知 - Service: KWatchSvc [金山毒霸文件实时防毒服务程序] - "D:\Kingsoft Internet Security 2008\KWatch.EXE" - (running)
O28 - 未知 - IELINK: C:\DOCUME~1\ADMINI~1\「开始~1\程序\附件\系统工具\INTERN~2.LNK -  -extoff
O30 - 未知 - HKCU\..\Desktop: [Scrnsave.exe] [] C:\WINDOWS\3DWORL~1.SCR
=======================================
100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: WINLOGON.EXE [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\360safe\safemon\360tray.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: wmpnscfg.exe [window媒体播放器相关程序。] - C:\Program Files\Windows Media Player\WMPNSCFG.exe
100 - 安全 - Process: nvsvc32.exe [nvidia driver helper service在nvida显卡驱动中被安装。] - C:\WINDOWS\system32\nvsvc32.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k HTTPFilter
100 - 安全 - Process: wmpnetwk.exe [window媒体播放器相关程序。] - C:\Program Files\Windows Media Player\WMPNetwk.exe
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: iexplore.exe [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\IEXPLORE.EXE
100 - 安全 - Process: iexplore.exe [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\360safe\360Safe.exe
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://go.microsoft.com/fwlink/?LinkId=69157
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://go.microsoft.com/fwlink/?LinkId=54896
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://go.microsoft.com/fwlink/?LinkId=69157
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://go.microsoft.com/fwlink/?LinkId=54896
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O2 - 安全 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块。] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载监视器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll
O2 - 安全 - BHO: (Google Toolbar Helper) - [Google搜索工具条。] - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - 安全 - Toolbar: (&Google) - [Google IE 客户端工具栏。] - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 安全 - HKLM\..\Run: [KavStart] [金山出品的金山毒霸杀毒软件。] "D:\Kingsoft Internet Security 2008\KAVStart.exe" -startup
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] D:\360safe\safemon\360tray.exe /start
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - HKCU\..\Run: [KavPFW] [金山出品的防火墙软件。] "D:\Kingsoft Internet Security 2008\kpfw32.exe" -startup
O4 - 安全 - HKCU\..\Run: [swg] [Goolge工具栏相关程序。] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - 安全 - HKCU\..\Run: [WMPNSCFG] [Windows Media Player的相关程序。] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - 安全 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder\Program\geturl.htm
O8 - 安全 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder\Program\getallurl.htm
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O11 - 安全 - Options Group: International*
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - 安全 - Service: gusvc [Google升级相关服务。] - "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe" - (not running)
O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (running)
O25 - 安全 - ABOUT: DesktopItemNavigationFailure - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: NavigationCanceled - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: NavigationFailure - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: OfflineInformation - res://ieframe.dll/offcancl.htm
O25 - 安全 - ABOUT: PostNotCached - res://ieframe.dll/repost.htm
=======================================
O31 - 未知 - SODL: {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {30D02401-6A81-11d0-8274-00C04FD5AE38} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {E7E4BC40-E76A-11CE-A9BB-00AA004AE837} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {FBF23B40-E3F0-101B-8488-00AA003E56F8} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {3C374A40-BAE4-11CF-BF7D-00AA006946EE} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {FF393560-C2A7-11CF-BFF4-444553540000} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {7BD29E00-76C1-11CF-9DD0-00A0C9034933} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {7BD29E01-76C1-11CF-9DD0-00A0C9034933} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {3DC7A020-0ACD-11CF-A9BB-00AA004AE837} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {871C5380-42A0-1069-A2EA-08002B30309D} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {88C6C381-2E85-11D0-94DE-444553540000} - C:\WINDOWS\system32\occache.dll - Microsoft Corporation - Object Control Viewer - 7.0.6000.16705 - 102912 - aa7fcdb11613763a5c0fe2ce3afff147
O31 - 未知 - SEApproved: {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {F5175861-2688-11d0-9C5E-00AA00A45957} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {08165EA0-E946-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {7D559C10-9FE9-11d0-93F7-00AA0059CE02} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {E6CC6978-6B6E-11D0-BECA-00C04FD940BE} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {D8BD2030-6FC9-11D0-864F-00AA006809D9} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} - C:\WINDOWS\system32\webcheck.dll - Microsoft Corporation - Web Site Monitor - 7.0.6000.16705 - 233472 - 065fa8cb66717702552b532fe6caefed
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {692F0339-CBAA-47e6-B5B5-3B84DB604E87} - C:\WINDOWS\system32\extmgr.dll - Microsoft Corporation - Extensions Manager - 7.0.6000.16705 - 133120 - 210d4cee64f09b8630c6a2a2182e842c
O31 - 未知 - SEApproved: 无效的CLSID：Shell Extensions for RealOne Player -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 129024 - 60fe004235a8108446dcfc1e526fde0e
O31 - 未知 - SEApproved: {1CDB2949-8F65-4355-8456-263E7C208A5D} - C:\WINDOWS\system32\nvshell.dll -  -  - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A47} - C:\WINDOWS\system32\nvshell.dll -  -  - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc
O31 - 未知 - SEApproved: {1E9B04FB-F9E5-4718-997B-B8DA88302A48} - C:\WINDOWS\system32\nvshell.dll -  -  - 6.14.10.11044 - 466944 - 64b7edf5a424b25508be1026879ff6dc
O31 - 未知 - SEApproved: {07C45BB1-4A8C-4642-A1F5-237E7215FF66} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {1C1EDB47-CE22-4bbb-B608-77B48F83C823} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {205D7A97-F16D-4691-86EF-F3075DCCA57D} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {3028902F-6374-48b2-8DC6-9725E775B926} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {43886CD5-6529-41c4-A707-7B3C92C05E68} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {44C76ECD-F7FA-411c-9929-1B77BA77F524} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {4B78D326-D922-44f9-AF2A-07805C2A3560} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {6038EF75-ABFC-4e59-AB6F-12D397F6568D} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {6CF48EF8-44CD-45d2-8832-A16EA016311B} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {73CFD649-CD48-4fd8-A272-2070EA56526B} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {9D958C62-3954-4b44-8FAB-C4670C1DB4C2} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {B31C5FAE-961F-415b-BAF0-E697A5178B94} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {BC476F4C-D9D7-4100-8D4E-E043F6DEC409} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {E6EE9AAC-F76B-4947-8260-A9F136138E11} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {F2CF5485-4E02-4f68-819C-B92DE9277049} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - SEApproved: {FDE7673D-2E19-4145-8376-BBD58C4BC7BA} - C:\WINDOWS\system32\ieframe.dll - Microsoft Corporation - Internet Explorer - 7.0.6000.16705 - 6066176 -
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 129024 - 60fe004235a8108446dcfc1e526fde0e
O31 - 未知 - LSA: Security Packages - sv1_0.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll -  -  -  - 0 -
=======================================
O40 - Explorer.EXE - ppstream.com - c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll - vodrc - fde33fb446cfd4aa014b100e917c9fa6
O40 - Explorer.EXE - Microsoft Corporation - D:\Kingsoft Internet Security 2008\MFC80U.DLL - MFCDLL Shared Library - Retail Version - ccc2e312486ae6b80970211da472268b
O40 - Explorer.EXE - Microsoft Corporation - D:\Kingsoft Internet Security 2008\MSVCR80.dll - Microsoft? C Runtime Library - e4fece18310e23b1d8fee993e35e7a6f
O40 - Explorer.EXE - Microsoft Corporation - D:\Kingsoft Internet Security 2008\MSVCP80.dll - Microsoft? C++ Runtime Library - 4c8a880eabc0b4d462cc4b2472116ea1
=======================================
O41 - CSB6IDE - ServerWorks CSB6 PCI IDE Bus Driver - C:\WINDOWS\system32\drivers\csb6ide.sys - (running) - ServerWorks CSB6 PCI IDE Bus Driver - ServerWorks Corporation - 7a49f7091e79cc364d8df1c6ea845756
O41 - FASTSX - Promise FastTRAK SX4/SX4000 Driver for Windows - C:\WINDOWS\system32\drivers\fastsx.sys - (running) - Promise FastTRAK SX4/SX4000 Driver for Windows - Promise Technology, Inc. - 9c6a1e10b7db24e943472d36c9a946b6
O41 - FASTTRAK - Promise FastTrak Series Driver for Win2000 - C:\WINDOWS\system32\drivers\fasttrak.sys - (running) - Promise FastTrak Series Driver for Win2000 - Promise Technology, Inc. - d3a41b9167c11b0fa0cb7c61fc876982
O41 - FASTTX2K - Promise Driver for Windows 2000 - C:\WINDOWS\system32\drivers\fasttx2k.sys - (running) - Promise Driver for Windows 2000 - Promise Technology, Inc. - 0c4b12ed12f76de62c843acab01eec98
O41 - FT8300 - Promise FastTRAK SX4300/8300 Driver for Windows family - C:\WINDOWS\system32\drivers\ft8300.sys - (running) - Promise FastTRAK SX4300/8300 Driver for Windows family - Promise Technology, Inc. - 8a2a0239beeeaa9585c7fc701d28766c
O41 - FTSATA2 - Promise Driver for Windows Server 2003 - C:\WINDOWS\system32\drivers\ftsata2.sys - (running) - Promise Driver for Windows Server 2003 - Promise Technology, Inc. - 65b50b303ff74a5517117ba3d25dbe7f
O41 - JRAID - JMicron JR036X RAID Driver - C:\WINDOWS\system32\drivers\Jraid.sys - (running) - JMicron JR036X RAID Driver - JMicron Technology Corp. - f64fc8ff777ca76a81c097df7641306d
O41 - M5281 - ALi SATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5281.sys - (running) - ALi SATA RAID Controller Driver - ALi Corporation - a51cd61975297508d4483fcbf931d86c
O41 - M5289 - ULi SATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5289.sys - (running) - ULi SATA RAID Controller Driver - ULi Electronics Inc. - e1ca1ea9ad7c8c50ea533829a6854d63
O41 - S150SX8 - Promise SATAII150 SX8 Driver for WindowsXP - C:\WINDOWS\system32\drivers\S150sx8.sys - (running) - Promise SATAII150 SX8 Driver for WindowsXP - Promise Technology, Inc. - 13d1e68b006ae72276079f5fcbe5a471
O41 - SiFilter - Windows Accelerator Driver - C:\WINDOWS\system32\drivers\SiWinAcc.sys - (running) - Windows Accelerator Driver - Silicon Image, Inc. - 72cf151fb410e544904dbc7d7f29b796
O41 - SISIDE - SiS PCI Mini IDE Driver - C:\WINDOWS\system32\drivers\siside.sys - (running) - SiS PCI Mini IDE Driver - Silicon Integrated Systems Corp. - b4485881bd8aed9b157a2e6cf43c2d51
O41 - SPTRAK - Promise SuperTrak Family Driver for WindowsNT - C:\WINDOWS\system32\drivers\Sptrak.sys - (running) - Promise SuperTrak Family Driver for WindowsNT - Promise Technology, Inc. - 65ceb5c72bdf1eefc02520fecc746bc8
O41 - ST8350 - Promise SuperTrak EX8350/EX8300 for Windows Family - C:\WINDOWS\system32\drivers\st8350.sys - (running) - Promise SuperTrak EX8350/EX8300 for Windows Family - Promise Technology, Inc. - f14b53dc0f5ca6ff8ae68671563e0229
O41 - 2310_00 - rr2310/2300 Miniport Driver - C:\WINDOWS\system32\drivers\2310_00.sys - (not running) - rr2310/2300 Miniport Driver - HighPoint Technologies, Inc. - 5d6bb83030b95418d79861afa339ba3d
O41 - 3WAREDRV - 3WAREDRV - C:\WINDOWS\system32\drivers\3wareDrv.sys - (not running) -  -  - 1409d36340affc6c64504fd8df7c78c4
O41 - 3WAREGSM - 3ware Miniport Driver - C:\WINDOWS\system32\drivers\3waregsm.sys - (not running) - 3ware Miniport Driver - 3ware, Inc. - 1726340c97d99a2102e40f174ee10b94
O41 - 3WDRV100 - 3ware SCSI Miniport Driver - C:\WINDOWS\system32\drivers\3wDrv100.sys - (not running) - 3ware SCSI Miniport Driver - 3ware, Inc. - 499fc6c753959fac45e5de73f8d8bfcd
O41 - A320RAID - Adaptec HostRAID for Ultra320 SCSI - C:\WINDOWS\system32\drivers\a320raid.sys - (not running) - Adaptec HostRAID for Ultra320 SCSI - Adaptec, Inc. - ec8c685100387d4a7a7be2dce922c6d3
O41 - AAC - Adaptec RAID Miniport Driver - C:\WINDOWS\system32\drivers\aac.sys - (not running) - Adaptec RAID Miniport Driver - Adaptec, Inc. - 3d5eb200db71476b16d06fbfbe6ef79d
O41 - AACSAS - Adaptec SAS RAID Miniport Driver - C:\WINDOWS\system32\drivers\aacsas.sys - (not running) - Adaptec SAS RAID Miniport Driver - Adaptec, Inc. - 871d406ad544ead2c60a92311af0bf2c
O41 - AARSI3X - Adaptec HostRAID for Serial ATA - C:\WINDOWS\system32\drivers\AARSI3X.SYS - (not running) - Adaptec HostRAID for Serial ATA - Adaptec, Inc. - b3e94f6babb3c27b9f33316009994016
O41 - AEC6210 - AEC6210 - C:\WINDOWS\system32\drivers\AEC6210.sys - (not running) -  - ACARD Technology Corp. - 38e6c035e89fb8b079301e71b2523f3d
O41 - AEC6260 - ID=0006, 0007 - C:\WINDOWS\system32\drivers\AEC6260.sys - (not running) - ID=0006, 0007 - ACARD Technology Corp. - db227bd0ba1f29bb38950f8fd97caa35
O41 - AEC6280 - Miniport driver for AEC6280 - C:\WINDOWS\system32\drivers\AEC6280.SYS - (not running) - Miniport driver for AEC6280 - ACARD Technology Corp. - ee2f9e19adc03629fa3f7b13d74a50d3
O41 - AEC67160 - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - C:\WINDOWS\system32\drivers\AEC67160.SYS - (not running) - AEC67160 PCI Ultra3 LVD/SE Adapter Driver - ACARD Technology Corp. - e4df365ddba4ec020864912114ddcbcb
O41 - AEC67162 - AEC67162 PCI Ultra3 LVD Adapter Driver - C:\WINDOWS\system32\drivers\aec67162.sys - (not running) - AEC67162 PCI Ultra3 LVD Adapter Driver - ACARD Technology Corp. - 8a125de77899c1788cb15debb81904c3
O41 - AEC671X - AEC671X PCI Ultra/W SCSI3 Adapter Driver - C:\WINDOWS\system32\drivers\AEC671X.SYS - (not running) - AEC671X PCI Ultra/W SCSI3 Adapter Driver - ACARD Technology Corp. - 9493824293585203212d0157cb2430a7
O41 - AEC6880 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\drivers\AEC6880.SYS - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 31a835900711ecc252504ee7df52cde9
O41 - AEC6890 - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - C:\WINDOWS\system32\drivers\AEC6890.SYS - (not running) - AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver - ACARD Technology Corp. - 415f252cee34bbf839acbcadb2bc85ce
O41 - AEC6897 - RAID miniport driver for AEC6897/AEC6898 - C:\WINDOWS\system32\drivers\aec6897.sys - (not running) - RAID miniport driver for AEC6897/AEC6898 - ACARD Technology Corp. - 9941c8c24a5e40a65b347680ad98e000
O41 - AEC68X5 - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - C:\WINDOWS\system32\drivers\aec68X5.sys - (not running) - AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver - ACARD Technology Corp. - 78c4c9ad0da00d3ecfe05b49ee1a769f
O41 - ARCM_X86 - WINDOWS X86-32 SCSIPORT DRIVER for ARECA SATA RAID host controller - C:\WINDOWS\system32\drivers\arcm_x86.sys - (not running) - WINDOWS X86-32 SCSIPORT DRIVER for ARECA SATA RAID host controller - ARECA  Technology Corporation - c86d417dffe165e92ac5d4a660e96eef
O41 - BCRAID - RAIDCore MiniPort - C:\WINDOWS\system32\drivers\bcraid.sys - (not running) - RAIDCore MiniPort - Broadcom Corporation - e94ed0016f92d2b59df9ae26dbca96e2
O41 - CPQARRY2 - Compaq Smart Array Controllers SCSI Miniport Driver - C:\WINDOWS\system32\drivers\CPQARRY2.sys - (not running) - Compaq Smart Array Controllers SCSI Miniport Driver - Hewlett-Packard Company - d31cb94a4acad58abb6cf74b7ef1ce1f
O41 - CPQCISSM - Smart Array 5x and 6x Controllers SCSI Miniport Driver - C:\WINDOWS\system32\drivers\CpqCissm.sys - (not running) - Smart Array 5x and 6x Controllers SCSI Miniport Driver - Hewlett-Packard Company - 902eedf31bfd1ee653e8bfb99a55bac7
O41 - GD31244 - Intel GD31244 SATA Miniport - C:\WINDOWS\system32\drivers\gd31244.sys - (not running) - Intel GD31244 SATA Miniport - Intel Corporation - 4b490d1fda79f5121704793505a86e56
O41 - HPT371 - HPT3xx Miniport Driver - C:\WINDOWS\system32\drivers\hpt371.sys - (not running) - HPT3xx Miniport Driver - HighPoint Technologies, Inc. - fca00761d77567e201cbb8d910e19eeb
O41 - HPT374 - HPT374 Miniport Driver - C:\WINDOWS\system32\drivers\hpt374.sys - (not running) - HPT374 Miniport Driver - HighPoint Technologies, Inc. - 695b6d41b00d2f4f8e8c0bf00e9f80e7
O41 - HPT3XX - HPT3xx Miniport Driver - C:\WINDOWS\system32\drivers\hpt3xx.sys - (not running) - HPT3xx Miniport Driver - HighPoint Technologies, Inc. - 9f2dfe54317b1cd38143686935a278d9
O41 - INIA100 - INITIO INI-A10XU2W SCSI miniport - C:\WINDOWS\system32\drivers\inia100.sys - (not running) - INITIO INI-A10XU2W SCSI miniport - Initio corp. - 456863752c33648032c66987a8904ea0
O41 - IPSRAIDN - IBM ServeRAID Controller Driver - C:\WINDOWS\system32\drivers\ipsraidn.sys - (not running) - IBM ServeRAID Controller Driver - IBM Corporation - c8594550880b16a31c99ec42b106e14f
O41 - M5228 - M5228 ATA RAID Controller Driver - C:\WINDOWS\system32\drivers\m5228.sys - (not running) - M5228 ATA RAID Controller Driver - ALi Corporation. - 06c174e5c7845055c3d6317709af6423
O41 - M5287 - ULi SATA Controller Driver - C:\WINDOWS\system32\drivers\m5287.sys - (not running) - ULi SATA Controller Driver - ULi Electronics Inc. - 87cf2d570f452a5c1b9fc5c5a44389a5
O41 - M5288 - ULi SATA Controller Driver - C:\WINDOWS\system32\drivers\m5288.sys - (not running) - ULi SATA Controller Driver - ULi Electronics Inc. - 485ed377977dc9661626aaab614504cf
O41 - mraid2k - MEGARAID SCSI Controller Driver for Windows 2000 PAE - C:\WINDOWS\system32\drivers\MRAID2K.SYS - (not running) - MEGARAID SCSI Controller Driver for Windows 2000 PAE - American Megatrends, Inc. - a7bb113a38b04c0296bfa76b41d92f95
O41 - NVATABUS - NVIDIA? nForce(TM) IDE Performance Driver - C:\WINDOWS\system32\drivers\nvatabus.sys - (not running) - NVIDIA? nForce(TM) IDE Performance Driver - NVIDIA Corporation - c03e15101f6d9e82cd9b0e7d715f5de3
O41 - PNP649R - IDE RAID miniport driver - C:\WINDOWS\system32\drivers\PnP649r.sys - (not running) - IDE RAID miniport driver - CMD Technology, Inc. - 5a5a6a1003eecd15df2f383972e86188
O41 - PNP680 - DMA capable ATA miniport driver - C:\WINDOWS\system32\drivers\Pnp680.sys - (not running) - DMA capable ATA miniport driver - Silicon Image, Inc. - 023657a82e76ad98f3fafbd1ec425a71
O41 - PNP680R - DMA capable ATA RAID miniport driver  - C:\WINDOWS\system32\drivers\PnP680r.sys - (not running) - DMA capable ATA RAID miniport driver  - Silicon Image, Inc - a1d7a9214b71ebbb6f31cb84aac15525
O41 - RAIDSRC - Intel(r)/ICP Miniport Driver - C:\WINDOWS\system32\drivers\raidsrc.sys - (not running) - Intel(r)/ICP Miniport Driver - Intel/ICP - babeb90ee932411aae20701d8a0da67d
O41 - RR232X - RR232x Miniport Driver - C:\WINDOWS\system32\drivers\rr232x.sys - (not running) - RR232x Miniport Driver - HighPoint Technologies, Inc. - 6f5264f9c2ebe1a9dd00d934ae6672ac
O41 - SI3112 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3112.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - e9d85bb639d02d237dcad68e73d0e98a
O41 - SI3112R - Serial ATA RAID miniport driver - C:\WINDOWS\system32\drivers\Si3112r.sys - (not running) - Serial ATA RAID miniport driver - Silicon Image, Inc - c82f9b4993f502361067e3ab61d46f7a
O41 - SI3114 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3114.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - 9c67403714df81c8bdf177ce440c9d84
O41 - SI3114R - SATARAID miniport driver - C:\WINDOWS\system32\drivers\Si3114r.sys - (not running) - SATARAID miniport driver - Silicon Image, Inc - d78d5bcf78d38cf846f1f1fdde718acc
O41 - SI3114R5 - SATA SoftRAID 5 miniport driver - C:\WINDOWS\system32\drivers\Si3114r5.sys - (not running) - SATA SoftRAID 5 miniport driver - Silicon Image, Inc - bf4177bfa0397c6a01ed493240318eae
O41 - SI3124 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3124.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - c48aaff4947d87ebf6c42d9fced3df7a
O41 - SI3124R - SATARAID miniport driver (PRE-RELEASE) - C:\WINDOWS\system32\drivers\Si3124r.sys - (not running) - SATARAID miniport driver (PRE-RELEASE) - Silicon Image, Inc - 0c71855057883e63ca2c19736cbab018
O41 - SI3124R5 - SATA SoftRAID 5 miniport driver - C:\WINDOWS\system32\drivers\Si3124r5.sys - (not running) - SATA SoftRAID 5 miniport driver - Silicon Image, Inc - 085200d2a56c58ad77ef733082cb6ad4
O41 - SI3132 - Serial ATA miniport driver - C:\WINDOWS\system32\drivers\Si3132.sys - (not running) - Serial ATA miniport driver - Silicon Image, Inc. - 6e42ca2af3516cda7f3776a186ca4f78
O41 - SI3132R5 - SATA SoftRAID 5 miniport driver - C:\WINDOWS\system32\drivers\Si3132r5.sys - (not running) - SATA SoftRAID 5 miniport driver - Silicon Image, Inc - 07adf4521fe169623cc13fc8303bb519
O41 - SISRAID - SiS RAID Miniport Driver - C:\WINDOWS\system32\drivers\sisraid.sys - (not running) - SiS RAID Miniport Driver - Silicon Integrated Systems - 826b83cdaafb6e164bbc1d77cb99e2ce
O41 - SYMMPI - LSI Logic Fusion-MPT MiniPort Driver (ScsiPort) - C:\WINDOWS\system32\drivers\symmpi.sys - (not running) - LSI Logic Fusion-MPT MiniPort Driver (ScsiPort) - LSI Logic - 10258f3ff6ebaa3e00f1ffb4724764d9
O41 - TRM3X5 - Miniport Driver - C:\WINDOWS\system32\drivers\TRM3X5.SYS - (not running) - Miniport Driver - Tekram Technology Co., Ltd. - abc610753d5b67813e98b37eeb10ccc8
O41 - ULTIMA - build(291) - C:\WINDOWS\system32\drivers\ultima.sys - (not running) - build(291) - Aralion INC. - 8062e7527f8dd54c21b2217f9412fbb3
O41 - ULTIMARX - build(306) - C:\WINDOWS\system32\drivers\ULTIMARX.sys - (not running) - build(306) - Aralion INC. - 0f3c67cee76280db580cb469be8bdae8
O41 - vmscsi - VMware SCSI Controller - C:\WINDOWS\system32\drivers\vmscsi.sys - (not running) - VMware SCSI Controller - VMware, Inc. - cd8a1f04836111dc0e6c0cd904b3c660
O41 - WD7296A - WD7296a SCSI Driver - C:\WINDOWS\system32\drivers\WD7296A.SYS - (not running) - WD7296a SCSI Driver - Western Digital Corporation - 9713aaa2933d0c93026dfd38de6040b9
=======================================
360Safe.exe=4.3.0.1001
AntiAdwa.dll=4.2.0.1001
AntiEng.dll=4.3.0.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=4.2.0.1002
live.dll=1.0.1.1028
=======================================
操作历史报告：
2008-08-22 10:59
清理恶评插件 - 雅虎助手&上网助手 - C:\WINDOWS\assist.dat
=======================================

把清理专家 KASMAIN.EXE 该名称 123.com 然后运行