我的电脑这两天突然很慢
****
2008-08-03,17:09:51
System Repair Engineer 2.5.16.900 Emergency Scan Mode
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 3, v.3300 (Build 2600)
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><D:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Component Publisher]
<SRS Audio Sandbox><"D:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme> [SRS Labs, Inc.]
<Power Notes><"H:\软件集合\绿色小软^_^\便签\Notes.exe"> [Power Soft]
<PC Suite Tray><"D:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray> []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
<run><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
<Userinit><D:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<WPDShServiceObj><D:\WINDOWS\system32\WPDShServiceObj.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
<WinlogonNotify: klogon><D:\WINDOWS\system32\klogon.dll> [(Verified)Kaspersky Lab]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
<IE7 Uninstall Stub><D:\WINDOWS\system32\ieudinit.exe> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\wmp11.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><D:\WINDOWS\dog2.scr> [N/A]
==================================
启动文件夹
N/A
==================================
服务
[Ati HotKey Poller / Ati HotKey Poller][Stopped/Manual Start]
<D:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[ATI Smart / ATI Smart][Stopped/Manual Start]
<D:\WINDOWS\system32\ati2sgag.exe><>
[卡巴斯基互联网安全套装7.0个人版 / AVP][Running/Manual Start]
<"D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r><Kaspersky Lab>
[Contrl Center of Storm Media / ccosm][Stopped/Manual Start]
<D:\Program Files\StormII\stormliv.exe /asservice><北京暴风网际科技有限公司>
[Human Interface Device Access / HidServ][Stopped/Disabled]
<D:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[ServiceLayer / ServiceLayer][Running/Manual Start]
<"D:\Program Files\PC Connectivity Solution\ServiceLayer.exe"><Nokia.>
==================================
驱动程序
[ati2mtag / ati2mtag][Running/Manual Start]
<system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[kl1 / kl1][Running/Boot Start]
<\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
<\??\D:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Kaspersky Anti-Virus NDIS Filter / klim5][Running/Manual Start]
<system32\DRIVERS\klim5.sys><Kaspersky Lab>
[Nokia USB Phone Parent / nmwcd][Stopped/Manual Start]
<system32\drivers\nmwcd.sys><Nokia>
[Nokia USB Generic / nmwcdc][Stopped/Manual Start]
<system32\drivers\nmwcdc.sys><Nokia>
[Nokia USB Port / nmwcdcj][Stopped/Manual Start]
<system32\drivers\nmwcdcj.sys><Nokia>
[Nokia USB Modem / nmwcdcm][Stopped/Manual Start]
<system32\drivers\nmwcdcm.sys><Nokia>
[PortTalk / PortTalk][Stopped/Manual Start]
<System32\Drivers\PortTalk.sys><Beyond Logic http://www.beyondlogic.org>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
<system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[sptd / sptd][Running/Boot Start]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[SRS Labs Audio Sandbox (WDM) / SRS_SSCFilter][Running/Manual Start]
<system32\drivers\srs_sscfilter_i386.sys><>
[VIA AGP Filter / viaagp1][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>
[ViaIde / ViaIde][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[Vinyl AC'97 Audio Controller (WDM) / VIAudio][Running/Manual Start]
<system32\drivers\vinyl97.sys><VIA Technologies, Inc.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
<system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[SOVIC PC Camera / ZSMC301b][Running/Manual Start]
<System32\Drivers\usbVM31b.sys><VM>
==================================
浏览器加载项
[ThunderAtOnce Class]
{01443AEC-0FD1-40fd-9C87-E93D1494C233} <H:\winxp\thunder5.8\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <H:\winxp\thunder5.8\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[启动迅雷5]
{09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <H:\winxp\thunder5.8\Thunder.exe, Thunder Networking Technologies,LTD>
[ThunderAtOnce Class]
{01443AEC-0FD1-40FD-9C87-E93D1494C233} <H:\winxp\thunder5.8\ComDlls\TDAtOnce_Now.dll, Thunder Networking Technologies,LTD>
[AcroIEHlprObj Class]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[IEHandle Class]
{31EBA2E2-58B2-4980-9C41-F12F5F1422C5} <D:\WINDOWS\system32\TPHANDLE.dll, 江苏科建教育软件有限责任公司>
[Thunder Agent Class]
{485463B7-8FB2-4B3B-B29B-8B919B0EACCE} <H:\winxp\thunder5.8\ComDlls\ThunderAgent_Now.dll, Thunder Networking Technologies,LTD>
[XMP Class]
{6483F145-A768-4C41-AACC-52D4D7845851} <D:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work, >
[XDRM]
{693571CB-54A3-4E90-9D52-EEAE1334E2D3} <D:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work, >
[MediaComm Class]
{7670648D-461B-42AF-BDFE-46D26AF5EFF2} <H:\winxp\thunder5.8\Components\InMedia\MediaAddin17.dll, Thunder Networking Technologies,LTD>
[Thunder Browser Helper]
{889D2FEB-5411-4565-8998-1DD2C5261283} <H:\winxp\thunder5.8\ComDlls\xunleiBHO_Now.dll, Thunder Networking Technologies,LTD>
[Windows Live Sign-in Helper]
{9030D464-4C02-4ABF-8ECC-5164760863C6} <D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[RMGetLicense Class]
{A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <D:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation>
[DapCtrl Class]
{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} <D:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5803.60.(808).dll, ShenZhen Thunder Networking Technologies Ltd.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx, Adobe Systems, Inc.>
[Thunder DapPlayer]
{EEDD6FF9-13DE-496B-9A1C-D78B3215E266} <H:\winxp\thunder5.8\Components\DownAndPlay\DapPlayer3.0.5712.71.808.dll, ShenZhen Thunder Networking Technologies Ltd.>
[XPPlayer Class]
{F3E70CEA-956E-49CC-B444-73AFE593AD7F} <D:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.0.0.181.(809).dll, Xunlei Networking Technologies,LTD>
[&U使用纳米机器人下载并收藏]
<H:\软件集合\上，下载类软件\纳米机器人\Data\du.html, N/A>
[使用“文语通”朗读选定内容]
<D:\Program Files\iFly Info Tek\iReader2.0\\ir_Select.htm, N/A>
[使用“文语通”朗读链接]
<D:\Program Files\iFly Info Tek\iReader2.0\\ir_Link.htm, N/A>
[使用迅雷下载]
<H:\winxp\thunder5.8\Program\geturl.htm, N/A>
[使用迅雷下载全部链接]
<H:\winxp\thunder5.8\Program\getallurl.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[查看当前站点排名]
<http://alexa.chinaz.com/alexa.htm, N/A>
[添加到反广告横幅]
<D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm, N/A>
==================================
正在运行的进程
[PID: 760][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 840][\??\D:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 864][\??\D:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[D:\WINDOWS\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4113]
[D:\WINDOWS\system32\klogon.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 912][D:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 924][D:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2034)]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1060][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 1184][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 1212][D:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1284][D:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-0707)]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1664][D:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.3300 (xpsp.080125-2028)]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[D:\WINDOWS\system32\LockFile.dll] [N/A, ]
[D:\Program Files\Nokia\Nokia PC Suite 6\phonebrowser.dll] [Nokia, 6, 85, 89, 5]
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] [Nokia, 6, 85, 107, 5]
[D:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr] [Nokia, 6, 85, 59, 0]
[D:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr] [Nokia, 6, 85, 17, 0]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[H:\winxp\thunder5.8\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
[H:\winxp\thunder5.8\Components\ResWorker\DsBho_01.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 20]
[H:\winxp\thunder5.8\Components\ResWorker\DataProcessor_01.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
[H:\winxp\thunder5.8\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.29]
[D:\Program Files\Unlocker\UnlockerCOM.dll] [N/A, ]
[D:\Program Files\WinRAR\rarext.dll] [N/A, ]
[H:\软件集合\上，下载类软件\纳米机器人\Data\NamipanExt1.dll] [N/A, ]
[D:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ShellEx.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\7-Zip\7-zip.dll] [N/A, ]
[D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 6.0.0.2003051500]
[PID: 1768][D:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 1776][D:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe] [SRS Labs, Inc., 2.1.0.0]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1788][H:\软件集合\绿色小软^_^\便签\Notes.exe] [Power Soft, 3.22.1.2097]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1796][D:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe] [, 6, 85, 11, 5]
[D:\Program Files\Nokia\Nokia PC Suite 6\QtCore4.dll] [N/A, ]
[D:\Program Files\Nokia\Nokia PC Suite 6\QtGui4.dll] [N/A, ]
[D:\Program Files\Nokia\Nokia PC Suite 6\QtXml4.dll] [N/A, ]
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSSupportSetup.DLL] [Nokia, 6, 85, 26, 0]
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.DLL] [Nokia, 6, 85, 107, 5]
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSL.dll] [Nokia, 6, 85, 12, 0]
[D:\Program Files\PC Connectivity Solution\ConnAPI.dll] [Nokia., 6, 85, 94, 7]
[D:\Program Files\PC Connectivity Solution\DAAPI.dll] [Nokia, 6, 85, 91, 7]
[D:\Program Files\PC Connectivity Solution\PCCS_DBAPI.DLL] [Nokia, 6, 85, 14, 0]
[D:\Program Files\PC Connectivity Solution\VersitConverter.dll] [Nokia, 6, 85, 49, 5]
[D:\Program Files\Nokia\Nokia PC Suite 6\styles\NGLStyle.dll] [Nokia, 6, 85, 8, 1]
[D:\Program Files\Nokia\Nokia PC Suite 6\imageformats\qjpeg4.dll] [N/A, ]
[D:\Program Files\PC Connectivity Solution\ConfServer.dll] [Nokia, 6, 85, 38, 0]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 564][D:\Program Files\PC Connectivity Solution\ServiceLayer.exe] [Nokia., 6, 85, 91, 15]
[D:\Program Files\PC Connectivity Solution\NclTools.dll] [Nokia, 6, 85, 34, 2]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 1860][H:\软件集合\vstar5.0\VStart.exe] [3L软件工作室(3LSoft), 5.15.0014]
[D:\WINDOWS\system32\vb6chs.dll] [Microsoft Corporation, 6.00.8988]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[PID: 672][D:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 1024][D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prremote.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\FSSync.dll] [Kaspersky Lab, 7.0.5.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\AVPGS.PPL] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\CLLDR.DLL] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prloader.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prkernel.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\winreg.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\mkavio.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\avpgui.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\nfio.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\fsdrvplg.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\basegui.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\thpimpl.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\qb.ppl] [Kaspersky Lab, 7.0.0.125]
[PID: 1696][D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prremote.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\FSSync.dll] [Kaspersky Lab, 7.0.5.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\AVPGS.PPL] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\CLLDR.DLL] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prloader.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prkernel.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\winreg.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\mkavio.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\tm.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\nfio.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\fsdrvplg.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\bl.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\wmihlpr.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\regmap.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\ndetect.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\crpthlpr.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\schedule.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\timer.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\thpimpl.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\lic.ppl] [Kaspersky Lab, 7.0.0.139]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\report.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\hashmd5.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\avs.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\avpmgr.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\wdiskio.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\avlib.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\vmarea.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\avspm.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\avp3info.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\prupdate.ppl] [Kaspersky Lab, 7.0.0.152]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\Updater.dll] [Kaspersky Lab, 7.0.0.152]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\diffs.dll] [Kaspersky Lab, 7.0.0.146]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll] [Kaspersky Lab, 7.0.0.125]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\ahids.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\CKAHUM.dll] [Kaspersky Lab, 7.0.0.146]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\CKAHComm.dll] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\ckahrule.dll] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\antispam.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\ahfw.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\CKAHStat.dll] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\oas.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\aphish.ppl] [Kaspersky Lab, 7.0.0.149]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\mc.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\resip.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\popupchk.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\aphisht.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\adialtsk.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\sc.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\httpscan.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\dtreg.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\httpanlz.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\procmon.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\pdm.ppl] [Kaspersky Lab, 7.0.0.139]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\privctrl.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\prutil.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\sfdb.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\trafmon2.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\avp1.ppl] [Kaspersky Lab, 7.0.0.149]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\l_llio.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\smtpprtc.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\pop3prtc.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\maildisp.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\imapprtc.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\nntpprtc.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\ichk2.ppl] [Kaspersky Lab, 7.0.0.146]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\ichksa.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\filemap.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\hashcont.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\hccmp.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\iwgen.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\uniarc.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\minizip.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\cab.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\arj.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\rar.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\lha.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\mdb.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\msoe.ppl] [Kaspersky Lab, 7.0.0.125]
[d:\program files\kaspersky lab\kaspersky internet security 7.0\qb.ppl] [Kaspersky Lab, 7.0.0.125]
[PID: 536][D:\WINDOWS\system32\taskmgr.exe] [Microsoft Corporation, 5.1.2600.3300 (xpsp.080125-2028)]
[PID: 2440][D:\Documents and Settings\Administrator\Local Settings\Temp\0123ps.com] [Smallfrogs Studio, 2.5.16.900]
[D:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll] [Kaspersky Lab, 7.0.0.125]
==================================
文件关联
.TXT Error. [D:\WINDOWS\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. ["hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [D:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 1776, D:\PROGRAM FILES\SRS LABS\AUDIO SANDBOX\SRSSSC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1788, H:\软件集合\绿色小软^_^\便签\NOTES.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1796, D:\PROGRAM FILES\NOKIA\NOKIA PC SUITE 6\PCSUITE.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 564, D:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\SERVICELAYER.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1860, H:\软件集合\VSTAR5.0\VSTART.EXE]
==================================
API HOOK
RVA 错误： LoadLibraryA (危险等级: 高, 被下面模块所HOOK: \??\D:\WINDOWS\system32\drivers\klif.sys)
RVA 错误： LoadLibraryExA (危险等级: 高, 被下面模块所HOOK: \??\D:\WINDOWS\system32\drivers\klif.sys)
RVA 错误： LoadLibraryExW (危险等级: 高, 被下面模块所HOOK: \??\D:\WINDOWS\system32\drivers\klif.sys)
RVA 错误： LoadLibraryW (危险等级: 高, 被下面模块所HOOK: \??\D:\WINDOWS\system32\drivers\klif.sys)
RVA 错误： GetProcAddress (危险等级: 高, 被下面模块所HOOK: \??\D:\WINDOWS\system32\drivers\klif.sys)
==================================
隐藏进程
N/A
****
