|
这是我电脑SREng的扫描结果 我就知道我电脑有问题 但不知道具体在哪里
哪位高手帮忙看下 - 2007-04-09,11:27:39
- System Repair Engineer 2.4.12.806
- Smallfrogs ([url]http://www.KZTechs.com[/url])
- Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能
- 以下内容被选中:
- 所有的启动项目(包括注册表、启动文件夹、服务等)
- 浏览器加载项
- 正在运行的进程(包括进程模块信息)
- 文件关联
- Winsock 提供者
- Autorun.inf
- HOSTS 文件
- 启动项目
- 注册表
- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
- <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe> [(Verified)Microsoft Windows XP Publisher]
- [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
- <load><> [N/A]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
- <kav><"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"> [Kaspersky Lab]
- <pppoe helper run><D:\setup\pppoe.exe> [安腾网络]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
- <shell><Explorer.exe> [(Verified)Microsoft Windows XP Publisher]
- <Userinit><c:\windows\system32\userinit.exe,> [(Verified)Microsoft Windows XP Publisher]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
- <AppInit_DLLs><> [N/A]
- [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
- <UIHost><logonui.exe> [(Verified)Microsoft Windows XP Publisher]
- ==================================
- 启动文件夹
- [Adobe Reader Speed Launch]
- <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk --> D:\PROGRA~1\Adobe\READER~1.0\Reader\READER~1.EXE [Adobe Systems Incorporated]><N>
- [Adobe Reader Synchronizer]
- <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Synchronizer.lnk --> D:\PROGRA~1\Adobe\READER~1.0\Reader\ADOBEC~1.EXE []><N>
- ==================================
- 服务
- [27D19B4E / 27D19B4E][Stopped/Auto Start]
- <C:\WINDOWS\System32\27D19B4E.EXE -service><Microsoft Corporation>
- [卡巴斯基反病毒6.0 / AVP][Running/Auto Start]
- <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe -r><Kaspersky Lab>
- [Human Interface Device Access / HidServ][Stopped/Disabled]
- <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
- [InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
- <C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe><Macrovision Corporation>
- [Windows Gateway / Live][Running/Auto Start]
- <C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\WINDOWS\System32\udcjn.dll><Microsoft Corporation>
- [NVIDIA Display Driver Service / NVSvc][Stopped/Disabled]
- <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
- [Server Advance / ServerAC][Stopped/Auto Start]
- <><N/A>
- [Windows DHCP Service / WinDHCPsvc][Stopped/Auto Start]
- <C:\WINDOWS\System32\rundll32.exe windhcp.ocx,start><Microsoft Corporation>
- ==================================
- 驱动程序
- [Rising TDI Base Driver / BaseTDI][Running/Auto Start]
- <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
- [C-Media WDM Audio Interface / cmuda][Running/Manual Start]
- <system32\drivers\cmuda.sys><C-Media Inc>
- [dlwa / dlwaf][Running/Boot Start]
- <\SystemRoot\System32\DRIVERS\dlwaf.sys><N/A>
- [gmer / gmer][Stopped/Manual Start]
- <System32\DRIVERS\gmer.sys><GMER>
- [HOOKAPI / HOOKAPI][Stopped/Manual Start]
- <\??\C:\PROGRAM FILES\RISING\RAV\HOOKAPI.SYS><N/A>
- [安腾上网助手 v1.1. release 2006.11.27 / IAmt][Running/Manual Start]
- <System32\DRIVERS\iamt.sys><amtium>
- [kl1 / kl1][Running/Boot Start]
- <\SystemRoot\System32\drivers\kl1.sys><Kaspersky Lab>
- [klif / klif][Running/System Start]
- <\??\C:\WINDOWS\System32\drivers\klif.sys><Kaspersky Lab>
- [Netgroup Packet Filter / NPF][Stopped/Manual Start]
- <system32\drivers\npf.sys><Politecnico di Torino>
- [npkcrypt / npkcrypt][Running/Auto Start]
- <\??\D:\Program Files\Tencent\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
- [nv / nv][Running/Manual Start]
- <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
- [oreans32 / oreans32][Stopped/System Start]
- <\??\C:\WINDOWS\system32\drivers\oreans32.sys><N/A>
- [Direct Parallel Link Driver / Ptilink][Running/Manual Start]
- <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
- [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
- <System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
- [Secdrv / Secdrv][Stopped/Manual Start]
- <System32\DRIVERS\secdrv.sys><N/A>
- [sptd / sptd][Running/Boot Start]
- <\SystemRoot\System32\Drivers\sptd.sys><N/A>
- [TrojanFindDriverNT / TrojanFindDriverNT][Stopped/Manual Start]
- <\??\C:\WINDOWS\System32\NtDriver.sys><N/A>
- ==================================
- 浏览器加载项
- [ThunderIEHelper Class]
- {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v8.dll, >
- [HelperObject Class]
- {00C6482D-C502-44C8-8409-FCE54AD9C208} <C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll, TechSmith Corporation>
- [Adobe PDF Reader Link Helper]
- {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
- [GigagetIEHelper Class]
- {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} <C:\WINDOWS\System32\gigagetbho_v10.dll, Giganology Inc.>
- [QQBrowserHelperObject Class]
- {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
- [Thunder Browser Helper]
- {889D2FEB-5411-4565-8998-1DD2C5261283} <D:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll, N/A>
- [Web反病毒保护]
- {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
- [信息检索(&R)]
- {92780B25-18CC-41C8-B9BE-3C9C571A8263} <C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL, Microsoft Corporation>
- [QQ]
- {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\qq\QQ.EXE, TENCENT>
- [QQIEFloatBarCfgCmd Class]
- {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
- [SnagIt]
- {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} <C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll, TechSmith Corporation>
- [CEditCtrl Object]
- {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\System32\aliedit\AliEdit.dll, [url]www.alipay.com>[/url]
- [Shockwave Flash Object]
- {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
- [CPasswordEditCtrl Object]
- {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\System32\qqedit\qqedit.dll, 腾讯科技(深圳)有限公司>
- [BoBo P2P多媒体网络点播/广播/直播系统 V3]
- {EC0978ED-24E3-403C-AB7A-060E388553E6} <C:\WINDOWS\DOWNLO~1\BOBO_A~1.OCX, 广州易播信息科技有限公司>
- [WangWangObj Class]
- {6E213FC7-DD5A-4115-B7E6-D4C7838C361E} <D:\Program Files\淘宝旺旺\WangWangX4.dll, 阿里软件(中国)有限公司>
- [&Download All by Gigaget]
- <C:\Program Files\Giganology\Gigaget\getallurl.htm, N/A>
- [&Download by Gigaget]
- <C:\Program Files\Giganology\Gigaget\geturl.htm, N/A>
- [&使用迅雷下载]
- <, N/A>
- [上传到QQ网络硬盘]
- <D:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
- [添加到QQ自定义面板]
- <D:\Program Files\Tencent\qq\AddPanel.htm, N/A>
- [添加到QQ表情]
- <D:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
- [用QQ彩信发送该图片]
- <D:\Program Files\Tencent\qq\SendMMS.htm, N/A>
- ==================================
- 正在运行的进程
- [PID: 764][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
- [PID: 836][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
- [C:\WINDOWS\System32\27D19B4E.DLL] [Microsoft Corporation, ]
- [PID: 1500][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
- [C:\WINDOWS\System32\27D19B4E.DLL] [Microsoft Corporation, ]
- [C:\WINDOWS\system32\kdxeh.dll] [N/A, ]
- [C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\PDM.DLL] [Microsoft Corporation, 7.00.9466]
- [C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\2052\mdmui.dll] [Microsoft Corporation, 7.00.9466]
- [C:\WINDOWS\System32\cmdbcs.dll] [N/A, ]
- [C:\WINDOWS\System32\mppds.dll] [N/A, ]
- [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 8.0.0.0]
- [C:\WINDOWS\System32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.7190]
- [C:\WINDOWS\System32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.7190]
- [C:\WINDOWS\System32\nvshell.dll] [NVIDIA Corporation, 6.14.10.10031]
- [C:\Program Files\WinRAR\rarext.dll] [N/A, ]
- [C:\Program Files\TechSmith\SnagIt 7\SnagItShellExt.dll] [TechSmith 公司, 1.0.0.1]
- [C:\Program Files\TechSmith\SnagIt 7\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0]
- [C:\Program Files\TechSmith\SnagIt 7\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
- [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll] [Kaspersky Lab, 6.0.0.299]
- [C:\WINDOWS\System32\xunleibho_v8.dll] [, 4, 5, 1, 33]
- [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200]
- [C:\Program Files\superutilbar\superutilbar.dll] [[url]www.shiyongsousuo.com[/url], 2, 1, 8, 24]
- [PID: 984][D:\setup\pppoe.exe] [安腾网络, 1.1]
- [C:\WINDOWS\System32\cmdbcs.dll] [N/A, ]
- [PID: 968][C:\WINDOWS\System32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
- [PID: 620][D:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\BIB.dll] [Adobe Systems Incorporated, 1.2.01]
- [D:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.dll] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\AGM.dll] [Adobe Systems Incorporated, 4.16.72]
- [D:\Program Files\Adobe\Reader 8.0\Reader\CoolType.dll] [Adobe Systems Incorporated, 5.03.73]
- [D:\Program Files\Adobe\Reader 8.0\Reader\ACE.dll] [Adobe Systems Incorporated, 2.10.64]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Search.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Search5.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\SendMail.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\EScript.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\EWH32.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\DigSig.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\PPKLite.api] [Adobe Systems Incorporated, 8.0.0.0]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\ReadOutLoud.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Checkers.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\eBook.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\HLS.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Annots.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\IA32.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\DVA.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\weblink.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\AcroForm.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Multimedia.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Updater.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\ImageViewer.API] [Adobe Systems Inc., 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\MakeAccessible.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\SaveAsRTF.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\PDDom.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\reflow.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Accessibility.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [D:\Program Files\Adobe\Reader 8.0\Reader\plug_ins\Spelling.api] [Adobe Systems Incorporated, 8.0.0.2006102300]
- [C:\WINDOWS\System32\cmdbcs.dll] [N/A, ]
- [D:\Program Files\Adobe\Reader 8.0\Reader\AdobeUpdater.dll] [Adobe Systems Incorporated, 5, 0, 0, 316]
- [C:\WINDOWS\System32\cmdbcs.dll] [N/A, ]
- [PID: 1512][D:\Program Files\TTPlayer\TTPlayer.exe] [Alen Soft, 4, 6, 9, 0]
- [D:\Program Files\TTPlayer\ttpcomm.dll] [N/A, ]
- [D:\Program Files\TTPlayer\ttpres.dll] [Alen Soft, 4, 6, 9, 0]
- [D:\Program Files\TTPlayer\msdmo.dll] [Microsoft Corporation, 6.03.01.0400]
- [D:\Program Files\TTPlayer\AddIn\ttp_asf.dll] [N/A, ]
- [D:\Program Files\TTPlayer\AddIn\ttp_aac.dll] [N/A, ]
- [D:\Program Files\TTPlayer\AddIn\ttp_ac3dts.dll] [N/A, ]
- [C:\WINDOWS\System32\cmdbcs.dll] [N/A, ]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\VSFilter.dll] [Gabest, 1, 0, 1, 3]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\PmpSplt.ax] [cooleyes, 1, 0, 0, 8]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\RMSplt.ax] [Gabest, 1, 0, 1, 1]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\aac_ps.ax] [, 1.1]
- [C:\WINDOWS\System32\mpg2splt.ax] [, ]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\VgmSplt.ax] [DS USA, Inc, 1, 0, 11, 19]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\TTASplt.ax] [-, 1, 0, 0, 203]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\splitter.ax] [, 1.6.224.23]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\mkzlib.dll] [N/A, ]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\mkunicode.dll] [N/A, ]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\SHNTrans.ax] [N/A, ]
- [C:\WINDOWS\System32\ffdshow.ax] [, 1.0.2.2028]
- [C:\WINDOWS\System32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
- [C:\Program Files\Ringz Studio\Storm Codec\Codecs\TRLDRP6.ax] [, 4, 7, 2, 9]
- [C:\WINDOWS\System32\iac25_32.ax] [Intel Corporation, 2.05.53]
- [PID: 3488][D:\setup\safetools\sreng2\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
- [C:\WINDOWS\System32\cmdbcs.dll] [N/A, ]
- ==================================
- 文件关联
- .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .EXE OK. ["%1" %*]
- .COM OK. ["%1" %*]
- .PIF OK. ["%1" %*]
- .REG OK. [regedit.exe "%1"]
- .BAT OK. ["%1" %*]
- .SCR OK. ["%1" /S]
- .CHM OK. ["C:\WINDOWS\hh.exe" %1]
- .HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
- .INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
- .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
- .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
- .LNK OK. [{00021401-0000-0000-C000-000000000046}]
- ==================================
- Winsock 提供者
- N/A
- ==================================
- Autorun.inf
- N/A
- ==================================
- HOSTS 文件
- 127.0.0.1 localhost
- ==================================
- API HOOK
- RVA 错误: LoadLibraryA (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xF6A1FB25)
- RVA 错误: LoadLibraryExA (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xF6A1FD67)
- RVA 错误: LoadLibraryExW (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xF6A1FF0B)
- RVA 错误: LoadLibraryW (危险等级: 一般, 被下面模块所HOOK: Dest Addr: 0xF6A1FC49)
- RVA 错误: GetProcAddress (危险等级: 高, 被下面模块所HOOK: Dest Addr: 0xF6A1FE8F)
- ==================================
- 隐藏进程
- N/A
- ==================================
复制代码 |
|