前几天中了熊猫烧香,然后用了了安铁诺和卡巴进行杀毒后,熊猫图标不见了,“Desktop_”的隐藏文件也被手动删除了,但是仍然感觉机器不怎么爽,特别是开机后有个进程SNAFDrv.exe占到100%的CPU使用,但是这个进程表面上却是安铁诺杀毒软件的程序。请高手帮看看,然后给出一个比较好的方案(千万让我洗电脑)
完美卸载 - 系统检查检测报告!
建议:修复时请按照高手的反馈编号在修复工具中打勾进行修复.
--------------------------系统环境-------------------------
检测日期: 2007-1-20 21:10
Windows: Microsoft Windows XP
ServicePack: Service Pack 2
Update: 2600.xpsp_sp2_gdr.050301-1519
Internet Explorer: 6.0.2900.2180
-----------------------网络基础安全测试--------------------
密码安全检测:已经设置了管理员密码,建议:将密码复杂度和长度提高!
网络漏洞检测:空连接检查安全!
服务名称 是否运行 描述
RemoteRegistry [运行中] [说明:这个服务可能被利用远程操作注册表]
Windows Time [运行中] [说明:这个服务可能被黑客利用来启动木马]
Telnet [已停止] [说明:这个服务可能被黑客登录到您计算机]
Messenger [已停止] [说明:这个服务常被广告商用来发垃圾广告]
Server [运行中] [说明:如果你的电脑不用局域网中,可以关闭]
建议在[控制面板]-[管理工具]-[服务]中,找到这些服务关闭并设置为[禁用].
-----------------------计算机网络端口----------------------
协议 端口号 端口类型
TCP 135 微软DCE RPC end-point mapper服务
TCP 445 Microsoft-DS
TCP 1026 未知类型
TCP 139 微软Netbios Name服务(用于文件及打印机共享)
TCP 445 公共Internet文件系统(CIFS)
TCP 500 Internet密钥交换
TCP 1032 Akosch4
TCP 1957 未知类型
TCP 2143 未知类型
TCP 2144 未知类型
TCP 4500 sae-urn
TCP 123 未知类型
TCP 1900 未知类型
TCP 123 未知类型
TCP 1900 未知类型
TCP 2397 未知类型
TCP 123 未知类型
TCP 137 未知类型
TCP 138 未知类型
TCP 1900 未知类型
--------------------计算机系统组件体检----------------------
[编号:0]
[名称:\SystemRoot\System32\smss.exe]
[类型:运行进程]
[内容:未知]
[编号:1]
[名称:\??\C:\WINDOWS\system32\winlogon.exe]
[类型:运行进程]
[内容:未知]
[编号:2]
[名称:C:\WINDOWS\system32\services.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:3]
[名称:C:\WINDOWS\system32\lsass.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:4]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:5]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:6]
[名称:C:\WINDOWS\system32\spoolsv.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:7]
[名称:C:\WINDOWS\Explorer.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:8]
[名称:C:\Program Files\sanlen\AntiUnknown\SNATask.EXE]
[类型:运行进程]
[内容:SNATask 应用程序 版权所有 (C) 2003]
[编号:9]
[名称:C:\Program Files\sanlen\AntiUnknown\sloemnit.exe]
[类型:运行进程]
[内容:demo Application Copyright (C) 2004]
[编号:10]
[名称:C:\Program Files\sanlen\AntiUnknown\SYSWARN.EXE]
[类型:运行进程]
[内容:未知]
[编号:11]
[名称:C:\Program Files\sanlen\AntiUnknown\snatray.EXE]
[类型:运行进程]
[内容:安铁诺防病毒软件2004 版权所有 (C) 2003山丽网安]
[编号:12]
[名称:C:\WINDOWS\system32\ctfmon.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:13]
[名称:C:\Program Files\Antiy Labs\Alive\AliveCenter.exe]
[类型:运行进程]
[内容:未知]
[编号:14]
[名称:C:\WINDOWS\system32\conime.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:15]
[名称:\系统维护\完美卸载V2007 完整版\SysSec.exe]
[类型:运行进程]
[内容:完美卸载V2006-ChinaHijackThis 版权所有 (C) 2006]
[编号:16]
[分隔符:---------------------------------------------------------------------]
[编号:17]
[名称:C:\WINDOWS\system32\klogon.dll]
[类型:已加载DLL]
[内容:Kaspersky Anti-Virus Copyright ? Kaspersky Lab 1996-2006.]
[编号:18]
[名称:E:\Kaspersky Anti-Virus 6.0\scrchpg.dll]
[类型:已加载DLL]
[内容:Kaspersky Anti-Virus Copyright ? Kaspersky Lab 1996-2006.]
[编号:19]
[名称:C:\Program Files\sanlen\AntiUnknown\oehook.dll]
[类型:已加载DLL]
[内容:未知]
[编号:20]
[名称:C:\Program Files\Rising\AntiSpyware\ieprot.dll]
[类型:已加载DLL]
[内容:IE Protector Copyright(c) 1998-2006 Beijing Rising Technology Corporation Limited]
[编号:21]
[名称:C:\Program Files\sanlen\AntiUnknown\SNAURIN.dll]
[类型:已加载DLL]
[内容:安铁诺防病毒软件2004 版权所有 (c) 2004 山丽网安]
[编号:22]
[名称:\临时文件\ewido-e666\ewido\shellexecutehook.dll]
[类型:已加载DLL]
[内容:ewido anti-spyware Copyright ? 2005 Anti-Malware Development a.s.]
[编号:23]
[名称:C:\Program Files\WinRAR\rarext.dll]
[类型:已加载DLL]
[内容:未知]
[编号:24]
[名称:C:\Program Files\sanlen\AntiUnknown\SNAMnuEx.dll]
[类型:已加载DLL]
[内容:安铁诺防病毒软件2004 版权所有 (c) 2004 山丽网安]
[编号:25]
[名称:C:\Program Files\sanlen\AntiUnknown\SNARES.dll]
[类型:已加载DLL]
[内容:Sanlen SNARES Copyright ? 2004]
[编号:26]
[名称:C:\Program Files\sanlen\AntiUnknown\Language\SNACHS.dll]
[类型:已加载DLL]
[内容:未知]
[编号:27]
[名称:E:\Kaspersky Anti-Virus 6.0\ShellEx.dll]
[类型:已加载DLL]
[内容:Kaspersky Anti-Virus Copyright ? Kaspersky Lab 1996-2006.]
[编号:28]
[名称:\临时文件\ewido-e666\ewido\context.dll]
[类型:已加载DLL]
[内容:ewido anti-spyware Copyright ? 2005 Anti-Malware Development a.s.]
[编号:29]
[名称:C:\WINDOWS\system32\WmShell.dll]
[类型:已加载DLL]
[内容:KillSoft RightMenu Copyright 2005]
[编号:30]
[名称:C:\Program Files\sanlen\AntiUnknown\SRINTER.dll]
[类型:已加载DLL]
[内容:安铁诺防病毒软件2004 版权所有 (c) 2004 山丽网安]
[编号:31]
[名称:C:\Program Files\sanlen\AntiUnknown\oestore.dll]
[类型:已加载DLL]
[内容estore Module ]
[编号:32]
[名称:C:\Program Files\sanlen\AntiUnknown\oeapiinitcom.dll]
[类型:已加载DLL]
[内容eapiinitcom Module ]
[编号:33]
[名称:C:\Program Files\sanlen\AntiUnknown\slindect.dll]
[类型:已加载DLL]
[内容:未知]
[编号:34]
[名称:C:\Program Files\sanlen\AntiUnknown\ErrProc.dll]
[类型:已加载DLL]
[内容:ErrorProcess Dynamic Link Library 版权所有 (C) 2003]
[编号:35]
[名称:C:\Program Files\sanlen\AntiUnknown\snarmw.dll]
[类型:已加载DLL]
[内容:安铁诺防病毒软件2004 版权所有 (c) 2004 山丽网安]
[编号:36]
[名称:C:\Program Files\sanlen\AntiUnknown\slregist.dll]
[类型:已加载DLL]
[内容:山丽网安产品注册向导 Copyright (C) 2002 山丽信息安全有限公司]
[编号:37]
[名称:D:\系统维护\完美卸载V2007 完整版\SkinMagic.dll]
[类型:已加载DLL]
[内容:Appspeed SkinMagic Toolkit Copyright ? 2002-2006]
[编号:38]
[名称:C:\WINDOWS\system32\Macromed\flash\flash8.ocx]
[类型:已加载DLL]
[内容:Shockwave Flash Copyright ? 1996-2005 Macromedia, Inc.]
[编号:39]
[分隔符:---------------------------------------------------------------------]
[编号:40]
[名称:IMJPMIG8.1]
[类型:开机启动]
[内容:"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32]
[编号:41]
[名称HIME2002ASync]
[类型:开机启动]
[内容:C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC]
[编号:42]
[名称:SNATask]
[类型:开机启动]
[内容:C:\Program Files\sanlen\AntiUnknown\SNATask.EXE]
[编号:43]
[名称:SYSWARN]
[类型:开机启动]
[内容:C:\Program Files\sanlen\AntiUnknown\SYSWARN.EXE]
[编号:44]
[名称:snatray]
[类型:开机启动]
[内容:C:\Program Files\sanlen\AntiUnknown\snatray.EXE]
[编号:45]
[名称:SNFRSSLV]
[类型:开机启动]
[内容:C:\Program Files\sanlen\AntiUnknown\SNFRSSLV.exe]
[编号:46]
[名称:runeip]
[类型:开机启动]
[内容:C:\Program Files\Rising\AntiSpyware\runiep.exe]
[编号:47]
[名称iveUpatePower]
[类型:开机启动]
[内容:rem MyUpdate.exe]
[编号:48]
[名称:ctfmon.exe]
[类型:开机启动]
[内容:C:\WINDOWS\system32\ctfmon.exe]
[编号:49]
[分隔符:---------------------------------------------------------------------]
[编号:50]
[名称:AFD]
[类型:服务:未知]
[内容:\SystemRoot\System32\drivers\afd.sys]