求助！～～！　　副带　日志哪给高手来解决下 bbs.ikaka.com

救救救救救救救 - 2007-7-15 12:44:00

瑞星卡卡电脑诊断日志 v1.30 (2007-7-15 12:21:15) 北京瑞星科技股份有限公司

注释: [A]表示该文件存在自启动关联;
[M]表示该文件在内存中;

+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
helpsvc
[A ] 1. c:\windows\system32\inetres.exe

NVSvc
[AM] 2. c:\windows\system32\nvsvc32.exe

ose
[A ] 3. c:\program files\common files\microsoft shared\source engine\ose.exe

RsCCenter
[A ] 4. c:\program files\rising\rav\ccenter.exe

RsRavMon
[A ] 5. c:\program files\rising\rav\ravmond.exe

UMWdf
[A ] 6. c:\windows\system32\wdfmgr.exe

+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
2310_00
[A ] 7. c:\windows\system32\drivers\2310_00.sys

3WAREDRV
[A ] 8. c:\windows\system32\drivers\3waredrv.sys

3WAREGSM
[A ] 9. c:\windows\system32\drivers\3waregsm.sys

3WDRV100
[A ] 10. c:\windows\system32\drivers\3wdrv100.sys

A320RAID
[A ] 11. c:\windows\system32\drivers\a320raid.sys

AAC
[A ] 12. c:\windows\system32\drivers\aac.sys

AACSAS
[A ] 13. c:\windows\system32\drivers\aacsas.sys

AARSI3X
[A ] 14. c:\windows\system32\drivers\aarsi3x.sys

ADPU320
[A ] 15. c:\windows\system32\drivers\adpu320.sys

AEC6210
[A ] 16. c:\windows\system32\drivers\aec6210.sys

AEC6260
[A ] 17. c:\windows\system32\drivers\aec6260.sys

AEC6280
[A ] 18. c:\windows\system32\drivers\aec6280.sys

AEC67160
[A ] 19. c:\windows\system32\drivers\aec67160.sys

AEC67162
[A ] 20. c:\windows\system32\drivers\aec67162.sys

AEC671X
[A ] 21. c:\windows\system32\drivers\aec671x.sys

AEC6880
[A ] 22. c:\windows\system32\drivers\aec6880.sys

AEC6890
[A ] 23. c:\windows\system32\drivers\aec6890.sys

AEC6897
[A ] 24. c:\windows\system32\drivers\aec6897.sys

AEC68X5
[A ] 25. c:\windows\system32\drivers\aec68x5.sys

ALCXWDM
[A ] 26. c:\windows\system32\drivers\alcxwdm.sys

AmdK8
[A ] 27. c:\windows\system32\drivers\amdk8.sys

arc
[A ] 28. c:\windows\system32\drivers\arc.sys

ARCM_X86
[A ] 29. c:\windows\system32\drivers\arcm_x86.sys

BaseTDI
[A ] 30. c:\windows\system32\drivers\basetdi.sys

BCHTSW32
[A ] 31. c:\windows\system32\drivers\bchtsw32.sys

BCRAID
[A ] 32. c:\windows\system32\drivers\bcraid.sys

CPQARRY2
[A ] 33. c:\windows\system32\drivers\cpqarry2.sys

CPQCISSM
[A ] 34. c:\windows\system32\drivers\cpqcissm.sys

CSB6IDE
[A ] 35. c:\windows\system32\drivers\csb6ide.sys

EagleNT
[A ] 36. c:\windows\system32\drivers\eaglent.sys

elxstor
[A ] 37. c:\windows\system32\drivers\elxstor.sys

ExpScaner
[A ] 38. c:\program files\rising\rav\expscan.sys

FASTSX
[A ] 39. c:\windows\system32\drivers\fastsx.sys

FASTTRAK
[A ] 40. c:\windows\system32\drivers\fasttrak.sys

FASTTX2K
[A ] 41. c:\windows\system32\drivers\fasttx2k.sys

FETNDISB
[A ] 42. c:\windows\system32\drivers\fetnd5b.sys

FT8300
[A ] 43. c:\windows\system32\drivers\ft8300.sys

FTSATA2
[A ] 44. c:\windows\system32\drivers\ftsata2.sys

GD31244
[A ] 45. c:\windows\system32\drivers\gd31244.sys

HookCont
[A ] 46. c:\program files\rising\rav\hookcont.sys

HookReg
[A ] 47. c:\program files\rising\rav\hookreg.sys

HookSys
[A ] 48. c:\program files\rising\rav\hooksys.sys

HpCISSs
[A ] 49. c:\windows\system32\drivers\hpcisss.sys

HPCISSS2
[A ] 50. c:\windows\system32\drivers\hpcisss2.sys

HPT371
[A ] 51. c:\windows\system32\drivers\hpt371.sys

HPT374
[A ] 52. c:\windows\system32\drivers\hpt374.sys

HPT3XX
[A ] 53. c:\windows\system32\drivers\hpt3xx.sys

IASTOR
[A ] 54. c:\windows\system32\drivers\iastor.sys

INIA100
[A ] 55. c:\windows\system32\drivers\inia100.sys

IPSRAIDN
[A ] 56. c:\windows\system32\drivers\ipsraidn.sys

ITERAID
[A ] 57. c:\windows\system32\drivers\iteraid.sys

JRAID
[A ] 58. c:\windows\system32\drivers\jraid.sys

KWatch3
[A ] 59. c:\windows\system32\drivers\kwatch3.sys

M5228
[A ] 60. c:\windows\system32\drivers\m5228.sys

M5281
[A ] 61. c:\windows\system32\drivers\m5281.sys

M5287
[A ] 62. c:\windows\system32\drivers\m5287.sys

M5288
[A ] 63. c:\windows\system32\drivers\m5288.sys

M5289
[A ] 64. c:\windows\system32\drivers\m5289.sys

MEGAIDE
[A ] 65. c:\windows\system32\drivers\megaide.sys

megasas
[A ] 66. c:\windows\system32\drivers\megasas.sys

MEMSCAN
[A ] 67. c:\program files\rising\rav\memscan.sys

mraid2k
[A ] 68. c:\windows\system32\drivers\mraid2k.sys

MSAHCI
[A ] 69. c:\windows\system32\drivers\msahci.sys

NFRD960
[A ] 70. c:\windows\system32\drivers\nfrd960.sys

NVATABUS
[A ] 71. c:\windows\system32\drivers\nvatabus.sys

NVRAID
[A ] 72. c:\windows\system32\drivers\nvraid.sys

PNP649R
[A ] 73. c:\windows\system32\drivers\pnp649r.sys

PNP680
[A ] 74. c:\windows\system32\drivers\pnp680.sys

PNP680R
[A ] 75. c:\windows\system32\drivers\pnp680r.sys

ql2300
[A ] 76. c:\windows\system32\drivers\ql2300.sys

RAIDSRC
[A ] 77. c:\windows\system32\drivers\raidsrc.sys

RR232X
[A ] 78. c:\windows\system32\drivers\rr232x.sys

RsAntiSpyware
[A ] 79. c:\windows\system32\drivers\rsboot.sys

RsNTGDI
[A ] 80. c:\windows\system32\drivers\rsntgdi.sys

RSPPSYS
[A ] 81. c:\program files\rising\rav\rsppsys.sys

RTL8023xp
[A ] 82. c:\windows\system32\drivers\rtnicxp.sys

S150SX8
[A ] 83. c:\windows\system32\drivers\s150sx8.sys

Secdrv
[A ] 84. c:\windows\system32\drivers\secdrv.sys

SI3112
[A ] 85. c:\windows\system32\drivers\si3112.sys

SI3112R
[A ] 86. c:\windows\system32\drivers\si3112r.sys

SI3114
[A ] 87. c:\windows\system32\drivers\si3114.sys

SI3114R
[A ] 88. c:\windows\system32\drivers\si3114r.sys

SI3114R5
[A ] 89. c:\windows\system32\drivers\si3114r5.sys

SI3124
[A ] 90. c:\windows\system32\drivers\si3124.sys

SI3124R
[A ] 91. c:\windows\system32\drivers\si3124r.sys

SI3124R5
[A ] 92. c:\windows\system32\drivers\si3124r5.sys

SI3132
[A ] 93. c:\windows\system32\drivers\si3132.sys

SI3132R5
[A ] 94. c:\windows\system32\drivers\si3132r5.sys

SiFilter
[A ] 95. c:\windows\system32\drivers\siwinacc.sys

SISIDE
[A ] 96. c:\windows\system32\drivers\siside.sys

SISRAID
[A ] 97. c:\windows\system32\drivers\sisraid.sys

SISRAID2
[A ] 98. c:\windows\system32\drivers\sisraid2.sys

SISRAID4
[A ] 99. c:\windows\system32\drivers\sisraid4.sys

SPTRAK
[A ] 100. c:\windows\system32\drivers\sptrak.sys

ST8350
[A ] 101. c:\windows\system32\drivers\st8350.sys

SYMMPI
[A ] 102. c:\windows\system32\drivers\symmpi.sys

TRM3X5
[A ] 103. c:\windows\system32\drivers\trm3x5.sys

ULSATA
[A ] 104. c:\windows\system32\drivers\ulsata.sys

ULSATA2
[A ] 105. c:\windows\system32\drivers\ulsata2.sys

ULTIMA
[A ] 106. c:\windows\system32\drivers\ultima.sys

ULTIMARX
[A ] 107. c:\windows\system32\drivers\ultimarx.sys

ViaIde
[A ] 108. c:\windows\system32\drivers\viaidexp.sys

VIAMRAID
[A ] 109. c:\windows\system32\drivers\viamraid.sys

viapdsk
[A ] 110. c:\windows\system32\drivers\viapdsk.sys

vmscsi
[A ] 111. c:\windows\system32\drivers\vmscsi.sys

WD7296A
[A ] 112. c:\windows\system32\drivers\wd7296a.sys

+ IE浏览器加载模块
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{889D2FEB-5411-4565-8998-1DD2C5261283}
[AM] 113. c:\program files\thunder network\thunder\comdlls\xunleibho_002.dll

+ 资源管理器加载模块
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
text/xml
[A ] 114. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 115. c:\windows\system32\hticons.dll

Portable Media Devices
[A ] 116. c:\windows\system32\audiodev.dll

Portable Media Devices Menu
[A ] 116. c:\windows\system32\audiodev.dll

Microsoft Office HTML Icon Handler
[AM] 117. c:\program files\microsoft office\office11\msohev.dll

Web Folders
[A ] 118. c:\program files\common files\microsoft shared\web folders\msonsext.dll

WinRAR shell extension
[A ] 119. c:\program files\winrar\rarext.dll

Shell Extensions for RealOne Player
[A ] 120. c:\program files\real\realplayer\rpshell.dll

NvCpl DesktopContext Class
[AM] 121. c:\windows\system32\nvcpl.dll

Play on my TV helper
[AM] 121. c:\windows\system32\nvcpl.dll

Desktop Explorer
[AM] 122. c:\windows\system32\nvshell.dll

Desktop Explorer Menu
[AM] 122. c:\windows\system32\nvshell.dll

nView Desktop Context Menu
[AM] 122. c:\windows\system32\nvshell.dll

RISING
[AM] 123. c:\windows\system32\ravext.dll

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{32CD708B-60A7-4C00-9377-D73EAA495F0F}
[AM] 123. c:\windows\system32\ravext.dll

+ 用户登陆自运行项目
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
runeip
[AM] 124. c:\program files\rising\antispyware\runiep.exe

SoundMan
[A ] 125. c:\windows\system32\soundman.exe

RavTask
[A ] 126. c:\program files\rising\rav\ravtask.exe

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
RavStub
[AM] 127. c:\program files\rising\rav\ravstub.exe

KKDelay
[A ] 128. c:\program files\rising\antispyware\runonce.exe

+ 开机执行
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 129. c:\windows\system32\bsmain.exe

[A ] 130. c:\windows\system32\kknative.exe

救救救救救救救 - 2007-7-15 12:45:00

+ 映像劫持
+ HKCR\.html
htmlfile\Edit\Command
[A ] 131. c:\program files\microsoft office\office11\msohtmed.exe

htmlfile\Print\Command
[A ] 131. c:\program files\microsoft office\office11\msohtmed.exe

+ HKCR\.htm
htmlfile\Edit\Command
[A ] 131. c:\program files\microsoft office\office11\msohtmed.exe

htmlfile\Print\Command
[A ] 131. c:\program files\microsoft office\office11\msohtmed.exe

+ 其他自启动项目
+ C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
腾讯QQ.lnk
[AM] 132. c:\program files\tencent\qq\qq.exe

+ 正在运行的进程
+ 00000130(304) Ras.exe
00400000[0013F000]
[ M] 133. c:\program files\rising\antispyware\ras.exe

10000000[000A3000]
[ M] 134. c:\program files\rising\antispyware\rasgui.dll

01500000[0001B000]
[AM] 123. c:\windows\system32\ravext.dll

01580000[0001B000]
[ M] 135. c:\program files\rising\antispyware\ieprot.dll

02960000[0002F000]
[ M] 136. c:\program files\rising\antispyware\engine.dll

02A90000[00012000]
[ M] 137. c:\program files\rising\antispyware\zip.dll

02360000[00019000]
[ M] 138. c:\program files\rising\rav\ravscrch.dll

72C80000[00008000]
[ M] 139. c:\windows\system32\msacm32.drv

+ 000001d0(464) smss.exe

+ 00000214(532) csrss.exe

+ 0000022c(556) winlogon.exe
72C80000[00008000]
[ M] 139. c:\windows\system32\msacm32.drv

+ 00000258(600) services.exe

+ 00000264(612) lsass.exe

+ 00000300(768) svchost.exe

+ 0000033c(828) svchost.exe

+ 00000390(912) svchost.exe

+ 000003cc(972) nvsvc32.exe
00400000[00027000]
[AM] 2. c:\windows\system32\nvsvc32.exe

+ 000003d0(976) svchost.exe

+ 00000410(1040) svchost.exe

+ 00000508(1288) spoolsv.exe

+ 00000568(1384) Explorer.EXE
014A0000[0001B000]
[ M] 135. c:\program files\rising\antispyware\ieprot.dll

72C80000[00008000]
[ M] 139. c:\windows\system32\msacm32.drv

10000000[00748000]
[AM] 121. c:\windows\system32\nvcpl.dll

01970000[00036000]
[ M] 140. c:\windows\system32\nvrszhc.dll

01D50000[00073000]
[AM] 122. c:\windows\system32\nvshell.dll

01810000[0000C000]
[AM] 113. c:\program files\thunder network\thunder\comdlls\xunleibho_002.dll

23700000[0001A000]
[ M] 141. c:\program files\rising\rav\rscommon.dll

+ 000005bc(1468) RavStub.exe
00400000[00018000]
[AM] 127. c:\program files\rising\rav\ravstub.exe

10000000[0001B000]
[ M] 142. c:\program files\rising\rav\rscommx.dll

23700000[0001A000]
[ M] 141. c:\program files\rising\rav\rscommon.dll

+ 00000654(1620) runiep.exe
00400000[00012000]
[AM] 124. c:\program files\rising\antispyware\runiep.exe

00C00000[0001B000]
[ M] 135. c:\program files\rising\antispyware\ieprot.dll

+ 000006ac(1708) ctfmon.exe
10000000[0001B000]
[ M] 135. c:\program files\rising\antispyware\ieprot.dll

+ 00000720(1824) QQ.exe
00400000[001B4000]
[AM] 132. c:\program files\tencent\qq\qq.exe

10000000[0025A000]
[ M] 143. c:\program files\tencent\qq\qqbaseclassindll.dll

005C0000[0009F000]
[ M] 144. c:\program files\tencent\qq\qqhelperdll.dll

00380000[00071000]
[ M] 145. c:\program files\tencent\qq\basicctrldll.dll

60A80000[000F2000]
[ M] 146. c:\program files\tencent\qq\mfc42.dll

621E0000[00005000]
[ M] 147. c:\program files\tencent\qq\riched32.dll

62170000[00068000]
[ M] 148. c:\program files\tencent\qq\riched20.dll

61310000[0003A000]
[ M] 149. c:\program files\tencent\qq\qqapi.dll

62330000[00007000]
[ M] 150. c:\program files\tencent\qq\timproxy.dll

01480000[0001B000]
[ M] 135. c:\program files\rising\antispyware\ieprot.dll

01610000[00038000]
[ M] 151. c:\program files\tencent\qq\loginctrl.dll

608D0000[00099000]
[ M] 152. c:\program files\tencent\qq\loginctrlres.dll

01F80000[004A9000]
[ M] 153. c:\program files\tencent\qq\qqres.dll

60A40000[00032000]
[ M] 154. c:\program files\tencent\qq\mailsummary.dll

61800000[00095000]
[ M] 155. c:\program files\tencent\qq\qqmainframe.dll

603C0000[001A3000]
[ M] 156. c:\program files\tencent\qq\gdiplus.dll

60200000[00124000]
[ M] 157. c:\program files\tencent\qq\cqqapplication.dll

60380000[0003E000]
[ M] 158. c:\program files\tencent\qq\flashavatardll.dll

60C20000[0005E000]
[ M] 159. c:\program files\tencent\qq\newskin.dll

02E30000[000BD000]
[ M] 160. c:\program files\tencent\qq\hostingmgr.dll

60140000[00034000]
[ M] 161. c:\program files\tencent\qq\cameradll.dll

617B0000[00017000]
[ M] 162. c:\program files\tencent\qq\qqknowledgesearch.dll

033E0000[001F1000]
[ M] 163. c:\program files\tencent\qq\qqallinone.dll

62210000[0002B000]
[ M] 164. c:\program files\tencent\qq\sccore.dll

62020000[00022000]
[ M] 165. c:\program files\tencent\qq\qqspace.dll

62380000[00071000]
[ M] 166. c:\program files\tencent\qq\vbscript.dll

61690000[00071000]
[ M] 167. c:\program files\tencent\qq\qqgroupmng.dll

62050000[0003D000]
[ M] 168. c:\program files\tencent\qq\qqsysmsgmng.dll

62360000[00017000]
[ M] 169. c:\program files\tencent\qq\userdefinedhead.dll

619D0000[000D9000]
[ M] 170. c:\program files\tencent\qq\qqplugin.dll

615F0000[0000C000]
[ M] 171. c:\program files\tencent\qq\qqconfigplugin.dll

61350000[0003D000]
[ M] 172. c:\program files\tencent\qq\qqavatar.dll

62150000[00016000]
[ M] 173. c:\program files\tencent\qq\qringmng.dll

60970000[000A8000]
[ M] 174. c:\program files\tencent\qq\longconnection.dll

02580000[0002A000]
[ M] 175. c:\program files\tencent\qq\qqpet.dll

60D20000[00026000]
[ M] 176. c:\program files\tencent\qq\phoneapi.dll

60330000[0000D000]
[ M] 177. c:\program files\tencent\qq\dialerallinone.dll

72C80000[00008000]
[ M] 139. c:\windows\system32\msacm32.drv

60120000[0001F000]
[ M] 178. c:\program files\tencent\qq\bqqapplication.dll

60180000[0004F000]
[ M] 179. c:\program files\tencent\qq\commercesmng.dll

60CA0000[0000F000]
[ M] 180. c:\program files\tencent\qq\personaldesktop.dll

047B0000[00286000]
[ M] 181. c:\program files\tencent\qq\qqaddr.dll

61F60000[0002C000]
[ M] 182. c:\program files\tencent\qq\qqscenemng.dll

01070000[0002A000]
[ M] 183. c:\program files\tencent\qq\addrsearch.dll

+ 00000750(1872) TIMPlatform.exe
00400000[00013000]
[ M] 184. c:\program files\tencent\qq\timplatform.exe

10000000[0001B000]
[ M] 135. c:\program files\rising\antispyware\ieprot.dll

62330000[00007000]
[ M] 150. c:\program files\tencent\qq\timproxy.dll

+ 000007d8(2008) alg.exe

+ 00000e04(3588) iexplore.exe
10000000[0000C000]
[AM] 113. c:\program files\thunder network\thunder\comdlls\xunleibho_002.dll

01140000[0001B000]
[ M] 135. c:\program files\rising\antispyware\ieprot.dll

325C0000[00012000]
[AM] 117. c:\program files\microsoft office\office11\msohev.dll

02520000[00019000]
[ M] 138. c:\program files\rising\rav\ravscrch.dll

瑞星卡卡安全论坛