瑞星卡卡安全论坛

各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供 http://www.360safe.com
诊断时间: 2006-08-08  18:12:40
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180  Build: 62900.2180

FormVersion: 1.1
100 - Process: csrss.exe - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestTh*煗
100 - Process: winlogon.exe - winlogon.exe
100 - Process: services.exe - C:\WINDOWS\system32\services.exe
100 - Process: lsass.exe - C:\WINDOWS\system32\lsass.exe
100 - Process: svchost.exe - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - Process: svchost.exe - C:\WINDOWS\system32\svchost -k rpcss
100 - Process: svchost.exe - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - Process: svchost.exe - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - Process: svchost.exe - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - Process: spoolsv.exe - C:\WINDOWS\system32\spoolsv.exe
100 - Process: avp.exe -
100 - Process: ewidoctrl.exe - "C:\Program Files\ewido\security suite\ewidoctrl.exe"
100 - Process: ewidoguard.exe -
100 - Process: wdfmgr.exe - C:\WINDOWS\system32\wdfmgr.exe
100 - Process: explorer.exe - explorer.exe 1
100 - Process: alg.exe - C:\WINDOWS\System32\alg.exe
100 - Process: smss.exe - C:\WINDOWS\smss.exe
100 - Process: conime.exe - C:\WINDOWS\system32\conime.exe
100 - Process: RavTask.exe - "C:\Program Files\Rising\Rav\RavTask.exe" -system
100 - Process: pfw.exe -
100 - Process: avp.exe -
100 - Process: ctfmon.exe - "C:\WINDOWS\system32\ctfmon.exe"
100 - Process: Rav.exe - "C:\Program Files\Rising\Rav\rav.exe" -BOOTSCAN
100 - Process: wuauclt.exe - "C:\WINDOWS\system32\wuauclt.exe" /RunStoreAsComServer Local\[384]SUSDSa9c9f7e2d3b48e4ca7ac7ff084bc08c8
100 - Process: 360Safe.exe - "C:\Program Files\360safe\360Safe.exe"
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=about:blank
R3 - URLSearchHook: (地址栏挂钩) - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} -
O4 - HKLM\..\Run: [CertificateRegistration] SafeSignCertReg.exe
O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [SKYNET Personal FireWall] C:\PROGRA~1\SKYNET\FIREWALL\pfw.exe
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup folder: [腾讯QQ.lnk] C:\Documents and Settings\owfnuser\「开始」菜单\程序\启动\腾讯QQ.lnk
O8 - Extra context menu item: &使用迅雷下载 - e:\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - e:\Thunder\getallurl.htm
O9 - Extra button: 卡巴斯基Web反病毒保护插件(HKLM)
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O10 - Winsock LSP: C:\WINDOWS\system32\cn_spi.dll
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (中国工商银行个人银行) - https://mybank.icbc.com.cn/icbc/perbank/AXSafeControls.cab
O16 - DPF: {ACFE8232-03C5-4AEC-AF5E-42B806724096} (金山毒霸检疫站) - http://safe.qq.com/scan/KAllScan.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (瑞星免费在线查毒插件) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O16 - DPF: 无效的CLSID：{EF6205C1-3F17-4829-BCB5-1336ED89E356} (江民在线查毒) - http://club.jiangmin.com/kvscan/KvDown.cab
O17 - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{63B98BA1-7693-45F0-BA8D-66A744E67B12}: NameServer = 192.168.1.1
O17 - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{CC75A482-206A-45C2-96F1-011C4A8115C6}: NameServer = 60.191.134.197 60.191.134.204
O23 - Service: AVP - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
O23 - Service: Dnscache - C:\WINDOWS\system32\dnsrslvr.dll
O23 - Service: EventSystem - C:\WINDOWS\system32\es.dll
O23 - Service: ewido security suite control - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: RfwProxySrv - 使远程用户能修改此计算机上的注册表设置。如果此服务被终止，只有此计算机上的用户才能修改注册表。如果此服务被禁用，任何依赖它的服务将无法启动。
O23 - Service: RfwService - C:\Program Files\Rising\Rfw\rfwsrv.exe
O23 - Service: RsCCenter - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon - C:\Program Files\Rising\Rav\RavMonD.exe
O23 - Service: Templates - C:\WINDOWS\system32\svchost.exe

360安全卫士，为您的系统提供最全面的保护
最新下载：http://download.360safe.com