下面是我用木马清道夫做的系统诊断报告,请高手看看哦 实在是头疼啊!
系统诊断报告
本报告由<Windows木马清道夫>提供
http://www.fygsoft.com报告生成时间：[2008-06-26 20:04:54]
操作系统为：WindowsXP 5.1.2600.2 Service Pack 2
Internet Explorer版本为：V7.0.5730.13 Build:75730
总共内存为：1534M 剩余内存为：1089M
进程模块信息：
1 (安全进程)：C:\WINDOWS\system32\smss.exe 命令行: \SystemRoot\System32\smss.exe
2 (安全进程)：c:\WINDOWS\system32\csrss.exe 命令行: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
3 (安全进程)：c:\WINDOWS\system32\winlogon.exe 命令行: winlogon.exe
4 (安全进程)：c:\WINDOWS\system32\services.exe 命令行: C:\WINDOWS\system32\services.exe
5 (安全进程)：c:\WINDOWS\system32\lsass.exe 命令行: C:\WINDOWS\system32\lsass.exe
6 (安全进程)：c:\WINDOWS\system32\svchost.exe 命令行: C:\WINDOWS\system32\svchost -k DcomLaunch
7 (安全进程)：c:\WINDOWS\system32\svchost.exe 命令行: C:\WINDOWS\system32\svchost -k rpcss
8 未知进程：c:\program files\Rising\Rav\CCenter.exe 命令行: "C:\Program Files\Rising\Rav\CCenter.exe"
9 (安全进程)：c:\WINDOWS\system32\svchost.exe 命令行: C:\WINDOWS\System32\svchost.exe -k netsvcs
10 (安全进程)：c:\WINDOWS\system32\svchost.exe 命令行: C:\WINDOWS\system32\svchost.exe -k NetworkService
11 (安全进程)：c:\WINDOWS\system32\svchost.exe 命令行: C:\WINDOWS\system32\svchost.exe -k LocalService
12 未知进程：c:\program files\Rising\Rav\RavMonD.exe 命令行: "C:\PROGRAM FILES\RISING\RAV\ravmond.exe" -step
13 - 未知模块：c:\program files\Rising\Rav\BWList.dll
14 - 未知模块：c:\WINDOWS\system32\mfc71.dll
15 - 未知模块：c:\WINDOWS\system32\msvcr71.dll
16 - 未知模块：c:\WINDOWS\system32\msvcp71.dll
17 - 未知模块：c:\program files\Rising\Rav\RsAppMgr.dll
18 - 未知模块：c:\program files\Rising\Rav\CfgDll.dll
19 - 未知模块：c:\program files\Rising\Rav\RsLog.dll
20 - 未知模块：c:\program files\Rising\Rav\ProcCom.dll
21 - 未知模块：c:\program files\Rising\Rav\RsCommX2.dll
22 - 未知模块：c:\program files\Rising\Rav\MonRule.dll
23 - 未知模块：c:\program files\Rising\Rav\HOOKSYS.dll
24 - 未知模块：c:\program files\Rising\Rav\HookReg.dll
25 - 未知模块：c:\program files\Rising\Rav\HookNtos.dll
26 - 未知模块：c:\program files\Rising\Rav\rswalmon.dll
27 - 未知模块：c:\program files\Rising\Rav\recomp.dll
28 - 未知模块：c:\program files\Rising\Rav\refs.dll
29 - 未知模块：c:\program files\Rising\Rav\ffr.dll
30 - 未知模块：c:\program files\Rising\Rav\RsStore.dll
31 - 未知模块：c:\program files\Rising\Rav\HookCont.dll
32 - 未知模块：c:\program files\Rising\Rav\FakeScan.dll
33 - 未知模块：c:\program files\Rising\Rav\Scanner.dll
34 - 未知模块：c:\program files\Rising\Rav\VirusLib.dll
35 - 未知模块：c:\program files\Rising\Rav\relibldr.dll
36 - 未知模块：c:\program files\Rising\Rav\HookWeb.dll
37 - 未知模块：c:\program files\Rising\Rav\ExtFile.dll
38 - 未知模块：c:\program files\Rising\Rav\pearc.dll
39 - 未知模块：c:\program files\Rising\Rav\nvfile.dll
40 - 未知模块：c:\program files\Rising\Rav\scanexec.dll
41 - 未知模块：c:\program files\Rising\Rav\unexe.dll
42 - 未知模块：c:\program files\Rising\Rav\ScanEX.dll
43 - 未知模块：c:\program files\Rising\Rav\ScanPack.dll
44 - 未知模块：c:\program files\Rising\Rav\revm.dll
45 - 未知模块：c:\program files\Rising\Rav\urutils.dll
46 - 未知模块：c:\program files\Rising\Rav\ur000.dat
47 - 未知模块：c:\program files\Rising\Rav\scriptci.dll
48 - 未知模块：c:\program files\Rising\Rav\uroutine.dll
49 - 未知模块：c:\program files\Rising\Rav\ur001.dat
50 - 未知模块：c:\program files\Rising\Rav\ur023.dat
51 - 未知模块：c:\program files\Rising\Rav\ScanSct.dll
52 未知进程：c:\program files\Rising\Rav\RavStub.exe 命令行: "C:\PROGRAM FILES\RISING\RAV\RavStub.exe" /RAVMOND=1023
53 - 未知模块：c:\program files\Rising\Rav\ProcCom.dll
54 - 未知模块：c:\program files\Rising\Rav\RsCommX2.dll
55 - 未知模块：c:\program files\Rising\Rav\RsCommon.dll
56 (安全进程)：c:\WINDOWS\explorer.exe 命令行: C:\WINDOWS\Explorer.EXE
57 - 未知模块：c:\WINDOWS\system32\nvrszhc.dll
58 - 未知模块：c:\WINDOWS\system32\nvshell.dll
59 - 未知模块：c:\program files\Rising\Rav\RsCommon.dll
60 (安全进程)：c:\WINDOWS\system32\spoolsv.exe 命令行: C:\WINDOWS\system32\spoolsv.exe
61 未知进程：c:\program files\StormII\stormliv.exe 命令行: "C:\Program Files\StormII\stormliv.exe" /asservice
62 (安全进程)：c:\WINDOWS\system32\nvsvc32.exe 命令行: C:\WINDOWS\system32\nvsvc32.exe
63 (安全进程)：c:\WINDOWS\system32\alg.exe 命令行: C:\WINDOWS\System32\alg.exe
64 未知进程：c:\program files\Rising\Rav\RavMon.exe 命令行: C:\PROGRAM FILES\RISING\RAV\RavMon.exe -SYSTEM
65 - 未知模块：c:\WINDOWS\system32\mfc71.dll
66 - 未知模块：c:\WINDOWS\system32\msvcr71.dll
67 - 未知模块：c:\WINDOWS\system32\msvcp71.dll
68 - 未知模块：c:\program files\Rising\Rav\ProcCom.dll
69 - 未知模块：c:\program files\Rising\Rav\RsCommX2.dll
70 - 未知模块：c:\program files\Rising\Rav\RsCommon.dll
71 - 未知模块：c:\program files\Rising\Rav\recomp.dll
72 - 未知模块：c:\program files\Rising\Rav\refs.dll
73 - 未知模块：c:\program files\Rising\Rav\VirusLib.dll
74 - 未知模块：c:\program files\Rising\Rav\relibldr.dll
75 - 未知模块：c:\program files\Rising\Rav\RsAppMgr.dll
76 - 未知模块：c:\program files\Rising\Rav\CfgDll.dll
77 - 未知模块：c:\program files\Rising\Rav\MonRule.dll
78 - 未知模块：c:\program files\Rising\Rav\PngDll.dll
79 - 未知模块：c:\program files\Rising\Rav\RsGuiLib.dll
80 - 未知模块：c:\program files\Rising\Rav\RsXML.dll
81 未知进程：c:\program files\EzButton\EzButton.EXE 命令行: "C:\Program Files\EzButton\EzButton.EXE"
82 - 未知模块：c:\program files\EzButton\SZUPFUTL.DLL
83 - 未知模块：c:\program files\EzButton\OSDUTL.DLL
84 - 未知模块：c:\program files\EzButton\RGNMAKER.DLL
85 - 未知模块：c:\program files\EzButton\CDROMUTL.DLL
86 - 未知模块：c:\program files\EzButton\MIXERUTL.DLL
87 - 未知模块：c:\program files\EzButton\COMFNUTL.DLL
88 - 未知模块：c:\program files\EzButton\LGKCUTL.DLL
89 - 未知模块：c:\program files\EzButton\WND2FILE.DLL
90 - 未知模块：c:\program files\EzButton\TKBARUTL.DLL
91 - 未知模块：c:\program files\EzButton\PtIOUTL.dll
92 - 未知模块：c:\ftc2008\FTCMon.dll
93 未知进程：c:\program files\Lenovo\energycut\utilty.exe 命令行: "C:\Program Files\Lenovo\EnergyCut\utilty.exe"
94 - 未知模块：c:\program files\Lenovo\energycut\KbdHook.dll
95 - 未知模块：c:\ftc2008\FTCMon.dll
96 未知进程：c:\program files\Lenovo\energycut\energycut.exe 命令行: "C:\Program Files\Lenovo\EnergyCut\EnergyCut.exe"
97 - 未知模块：c:\program files\Lenovo\energycut\HookLib.dll
98 - 未知模块：c:\ftc2008\FTCMon.dll
99 (安全进程)：c:\program files\Apoint2K\Apoint.exe 命令行: "C:\Program Files\Apoint2K\Apoint.exe"
100 - 未知模块：c:\ftc2008\FTCMon.dll
101 (安全进程)：c:\WINDOWS\AGRSMMSG.exe 命令行: "C:\WINDOWS\AGRSMMSG.exe"
102 - 未知模块：c:\ftc2008\FTCMon.dll
103 未知进程：c:\program files\Rising\Rav\RavTask.exe 命令行: "C:\Program Files\Rising\Rav\RavTask.exe" -system
104 - 未知模块：c:\program files\Rising\Rav\ProcCom.dll
105 - 未知模块：c:\program files\Rising\Rav\RsCommX2.dll
106 - 未知模块：c:\program files\Rising\Rav\RsCommon.dll
107 - 未知模块：c:\program files\Rising\Rav\RsAppMgr.dll
108 - 未知模块：c:\program files\Rising\Rav\CfgDll.dll
109 未知进程：c:\program files\Rising\antispyware\runiep.exe 命令行: "C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup
110 - 未知模块：c:\program files\Rising\antispyware\mfc71.dll
111 - 未知模块：c:\program files\Rising\antispyware\msvcr71.dll
112 - 未知模块：c:\WINDOWS\system32\ieprot.dll
113 - 未知模块：c:\ftc2008\FTCMon.dll
114 (安全进程)：c:\WINDOWS\system32\ctfmon.exe 命令行: "C:\WINDOWS\system32\ctfmon.exe"
115 - 未知模块：c:\ftc2008\FTCMon.dll
116 (安全进程)：c:\program files\Apoint2K\ApntEx.exe 命令行: "Apntex.exe"
117 - 未知模块：c:\ftc2008\FTCMon.dll
118 未知进程：c:\program files\Tencent\QQ\QQ.exe 命令行: "C:\Program Files\Tencent\QQ\QQ.exe"
119 - 未知模块：c:\program files\Tencent\QQ\qqbaseclassindll.dll
120 - 未知模块：c:\program files\Tencent\QQ\qqhelperdll.dll
121 - 未知模块：c:\program files\Tencent\QQ\basicctrldll.dll
122 - 未知模块：c:\program files\Tencent\QQ\Mfc42.dll
123 - 未知模块：c:\program files\Tencent\QQ\Riched32.dll
124 - 未知模块：c:\program files\Tencent\QQ\riched20.dll
125 - 未知模块：c:\program files\Tencent\QQ\QQAPI.dll
126 - 未知模块：c:\program files\Tencent\QQ\TIMProxy.dll
127 - 未知模块：c:\program files\Tencent\QQ\loginctrl.dll
128 - 未知模块：c:\program files\Tencent\QQ\loginctrlres.dll
129 - 未知模块：c:\ftc2008\FTCMon.dll
130 - 未知模块：c:\program files\Tencent\QQ\QQRes.dll
131 - 未知模块：c:\program files\Tencent\QQ\wizardctrl.dll
132 - 未知模块：c:\program files\Tencent\QQ\qqmainframe.dll
133 - 未知模块：c:\program files\Tencent\QQ\GdiPlus.dll
134 - 未知模块：c:\program files\Tencent\QQ\unreadmsgmgr.dll
135 - 未知模块：c:\program files\Tencent\QQ\cqqapplication.dll
136 - 未知模块：c:\program files\Tencent\QQ\flashavatardll.dll
137 - 未知模块：c:\program files\Tencent\QQ\NewSkin.dll
138 - 未知模块：c:\program files\Tencent\QQ\mailsummary.dll
139 - 未知模块：c:\program files\Tencent\QQ\qqknowledgesearch.dll
140 - 未知模块：c:\program files\Tencent\QQ\qqallinone.dll
141 - 未知模块：c:\program files\Tencent\QQ\SCCore.dll
142 - 未知模块：c:\program files\Tencent\QQ\cameradll.dll
143 - 未知模块：c:\program files\Tencent\QQ\QQSpace.dll
144 - 未知模块：c:\program files\Tencent\QQ\vbscript.dll
145 - 未知模块：c:\program files\Tencent\QQ\qqgroupmng.dll
146 - 未知模块：c:\program files\Tencent\QQ\QQAvatar.dll
147 - 未知模块：c:\program files\Tencent\QQ\userdefinedhead.dll
148 - 未知模块：c:\program files\Tencent\QQ\QQPlugin.dll
149 - 未知模块：c:\program files\Tencent\QQ\qqconfigplugin.dll
150 - 未知模块：c:\program files\Tencent\QQ\qqcustomface.dll
151 - 未知模块：c:\program files\Tencent\QQ\QRingMng.dll
152 - 未知模块：c:\program files\Tencent\QQ\longconnection.dll
153 - 未知模块：c:\program files\Tencent\QQ\PhoneAPI.dll
154 - 未知模块：c:\program files\Tencent\QQ\dialerallinone.dll
155 - 未知模块：c:\program files\Tencent\QQ\QQPet.dll
156 - 未知模块：c:\program files\Tencent\QQ\qqsysmsgmng.dll
157 - 未知模块：c:\program files\Tencent\QQ\bqqapplication.dll
158 - 未知模块：c:\program files\Tencent\QQ\commercesmng.dll
159 - 未知模块：c:\program files\Tencent\QQ\personaldesktop.dll
160 - 未知模块：c:\program files\Tencent\QQ\QQAddr.dll
161 - 未知模块：c:\program files\Tencent\QQ\ImageOle.dll
162 - 未知模块：c:\program files\Tencent\QQ\qqliveqmng.dll
163 - 未知模块：c:\program files\Tencent\QQ\qqscenemng.dll
164 - 未知模块：c:\program files\Tencent\QQ\qqmagicface.dll
165 - 未知模块：c:\program files\Tencent\QQ\addrsearch.dll
166 - 未知模块：c:\program files\Tencent\QQ\groupconnection.dll
167 - 未知模块：c:\program files\Tencent\QQ\qqfiletransfer.dll
168 (安全进程)：c:\WINDOWS\system32\conime.exe 命令行: C:\WINDOWS\system32\conime.exe
169 - 未知模块：c:\ftc2008\FTCMon.dll
170 未知进程：c:\program files\EzButton\volumeled.exe 命令行: "C:\Program Files\EzButton\VolumeLED.exe"
171 - 未知模块：c:\program files\EzButton\PtIOUTL.dll
172 - 未知模块：c:\program files\EzButton\MIXERUTL.DLL
173 - 未知模块：c:\ftc2008\FTCMon.dll
174 未知进程：c:\program files\Tencent\QQ\timplatform.exe 命令行: "C:\Program Files\Tencent\QQ\TIMPlatform.exe" -Embedding
175 - 未知模块：c:\program files\Tencent\QQ\TIMProxy.dll
176 - 未知模块：c:\ftc2008\FTCMon.dll
177 未知进程：c:\program files\ChinaNet\vnetclient.exe 命令行: "C:\Program Files\ChinaNet\VnetClient.exe"
178 - 未知模块：c:\program files\ChinaNet\communicate.dll
179 - 未知模块：c:\program files\ChinaNet\dialmodule.dll
180 - 未知模块：c:\program files\ChinaNet\mfc42.dll
181 - 未知模块：c:\ftc2008\FTCMon.dll
182 - 未知模块：c:\Program Files\ChinaNet\ClientAPI.dll
183 - 未知模块：c:\Program Files\ChinaNet\PlugInContainer.ocx
184 - 未知模块：c:\Program Files\ChinaNet\sign.dll
185 - 未知模块：c:\Program Files\ChinaNet\PostPlug.dll
186 - 未知模块：c:\Program Files\ChinaNet\Advertise.ocx
187 - 未知模块：c:\Program Files\ChinaNet\Gif89a.dll
188 - 未知模块：c:\Program Files\ChinaNet\VnetBs.ocx
189 - 未知模块：c:\Program Files\ChinaNet\AccountPage.dll
190 - 未知模块：c:\Program Files\ChinaNet\accountmgr.dll
191 - 未知模块：c:\Program Files\ChinaNet\VnetSkin.ocx
192 - 未知模块：c:\Program Files\ChinaNet\dialogstyle.dll
193 - 未知模块：c:\Program Files\ChinaNet\Timer.ocx
194 - 未知模块：c:\Program Files\ChinaNet\PluginMan.ocx
195 - 未知模块：c:\Program Files\ChinaNet\NewMessage.dll
196 - 未知模块：c:\Program Files\ChinaNet\PassCtrl.dll
197 - 未知模块：c:\Program Files\ChinaNet\PlugPush.dll
198 - 未知模块：c:\Program Files\ChinaNet\AllInterface.dll
199 - 未知模块：c:\Program Files\ChinaNet\VNetLogin.ocx
200 - 未知模块：c:\Program Files\ChinaNet\StatNum.dll
201 - 未知模块：c:\Program Files\ChinaNet\VNetOnlineUpdate.ocx
202 - 未知模块：c:\Program Files\ChinaNet\AllFunctions.dll
203 - 未知模块：c:\Program Files\ChinaNet\vnetoptlog.dll
204 - 未知模块：c:\program files\Rising\Rav\RavScrch.dll
205 - 未知模块：c:\Program Files\ChinaNet\DlgSkin.ocx
206 - 未知模块：c:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx
207 未知进程：d:\千千静听\TTPlayer.exe 命令行: "D:\千千静听\TTPlayer.exe"
208 - 未知模块：d:\千千静听\ttpcomm.dll
209 - 未知模块：c:\ftc2008\FTCMon.dll
210 - 未知模块：d:\千千静听\ttpres.dll
211 - 未知模块：d:\千千静听\msdmo.dll
212 - 未知模块：d:\千千静听\AddIn\ttp_asf.dll
213 未知进程：c:\ftc2008\ftcleaner.exe 命令行: "C:\ftc2008\FTCleaner.exe"
214 - 未知模块：c:\ftc2008\MSVBVM60.DLL
215 - 未知模块：c:\ftc2008\FTCMon.dll
216 - 未知模块：c:\ftc2008\VB6CHS.DLL
217 - 未知模块：c:\ftc2008\ftcapi.dll
218 - 未知模块：c:\ftc2008\ftcapi3.dll
219 - 未知模块：c:\ftc2008\ftcapi2.dll
220 - 未知模块：c:\ftc2008\RICHTX32.OCX
221 - 未知模块：c:\ftc2008\Riched32.dll
222 - 未知模块：c:\ftc2008\riched20.dll
223 未知进程：c:\ftc2008\fyganalyze.exe 命令行: C:\ftc2008\FygAnalyze.exe
224 - 未知模块：c:\ftc2008\FTCMon.dll
225 - 未知模块：c:\ftc2008\psapi.dll
启动信息：
226 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
227 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
228 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
229 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>
230 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<nwiz><nwiz.exe /install>
231 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<EzButton><C:\Program Files\EzButton\EzButton.EXE>
232 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<EnergyUtility><C:\Program Files\Lenovo\EnergyCut\utilty.exe>
233 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<EnergyCut><C:\Program Files\Lenovo\EnergyCut\EnergyCut.exe>
234 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Apoint><C:\Program Files\Apoint2K\Apoint.exe>
235 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<High Definition Audio Property Page Shortcut><HDAShCut.exe>
236 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<AGRSMMSG><AGRSMMSG.exe>
237 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>
238 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup>
239 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Windows木马防火墙><C:\ftc2008\Trojanwall.exe>
240 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>
241 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Shell><Explorer.exe>
242 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<Userinit><C:\WINDOWS\system32\userinit.exe,>
243 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe>
244 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><ieprot.dll>
245 [C:\Documents and Settings\Owner\「开始」菜单\程序\启动\]
<C:\Documents and Settings\Owner\「开始」菜单\程序\启动\desktop.ini>
246 [C:\Documents and Settings\Owner\「开始」菜单\程序\启动\]
<C:\Documents and Settings\Owner\「开始」菜单\程序\启动\腾讯QQ.lnk>
247 [C:\Documents and Settings\Owner\「开始」菜单\程序\启动\]
<C:\Documents and Settings\Owner\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk>
248 [C:\Documents and Settings\All Users\「开始」菜单\程序\启动\]
<C:\Documents and Settings\All Users\「开始」菜单\程序\启动\desktop.ini>
IE辅助对象BHO信息：
无可疑
IE右键菜单信息：
249 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt]
<使用迅雷下载><C:\Program Files\Thunder Network\Thunder\Program\geturl.htm>
250 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt]
<使用迅雷下载全部链接><C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm>
251 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt]
<导出到 Microsoft Office Excel(&X)><res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000>
252 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt]
<添加到QQ表情><C:\Program Files\Tencent\QQ\AddEmotion.htm>
IE工具栏项信息：
253 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
<{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}><C:\Program Files\Thunder Network\Thunder\Thunder.exe>
254 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
<{6096E38F-5AC1-4391-8EC4-75DFA92FB32F}><
http://www.lenovo.com>
255 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
<{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444}><
http://www.rising.com.cn/?u=RSTB>
256 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
<{FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445}><
http://www.ikaka.com/?u=RSTB>
ActiveX对象DPF信息：
257 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units]
<{D27CDB6E-AE6D-11CF-96B8-444553540000}><C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx>
网络服务SPI信息：
无可疑
映像劫持IFEO信息：
258 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
<Your Image File Name Here without a path><C:\WINDOWS\system32\ntsd -d>
系统服务信息：
259 [ Application Management | AppMgmt | 停用 ]
c:\windows\system32\svchost.exe - c:\windows\system32\appmgmts.dll
260 [ Contrl Center of Storm Media | ccosm | 启动 ]
c:\program files\stormii\stormliv.exe
261 [ COM+ System Application | COMSysApp | 停用 ]
c:\windows\system32\dllhost.exe /processid:{02d4b3f1-fd88-11d1-960d-00805fc79235}
262 [ Human Interface Device Access | HidServ | 停用 ]
c:\windows\system32\svchost.exe - c:\windows\system32\hidserv.dll
263 [ Office Source Engine | ose | 停用 ]
c:\program files\common files\microsoft shared\source engine\ose.exe
264 [ Rising Process Communication Center | RsCCenter | 启动 ]
c:\program files\rising\rav\ccenter.exe
265 [ Rising RealTime Monitor | RsRavMon | 停用 ]
c:\program files\rising\rav\ravmond.exe
266 [ MS Software Shadow Copy Provider | SwPrv | 停用 ]
c:\windows\system32\dllhost.exe /processid:{91ece041-a428-48c9-9efb-a08e154c51d7}
系统驱动信息：
267 [ Dritek General Port I/O | DritekPortIO | 启动 ]
c:\program files\ezbutton\dportio.sys
268 [ FTCkillfile | FTCkillfile | 停用 ]
c:\windows\system32\drivers\ftckillfile.sys
269 [ FTCProtect | FTCProtect | 启动 ]
c:\windows\system32\drivers\ftcprotect.sys
270 [ FTCProTime | FTCProTime | 启动 ]
c:\windows\system32\drivers\ftcprotime.sys
271 [ HookCont | HookCont | 启动 ]
C:\WINDOWS\system32\drivers\hookcont.sys
272 [ HookNtos | HookNtos | 启动 ]
C:\WINDOWS\system32\drivers\hookntos.sys
273 [ HookReg | HookReg | 启动 ]
C:\WINDOWS\system32\drivers\hookreg.sys
274 [ HookSys | HookSys | 启动 ]
C:\WINDOWS\system32\drivers\hooksys.sys
275 [ RsAntiSpyware | RsAntiSpyware | 启动 ]
c:\windows\system32\drivers\rsboot.sys
276 [ RsNTGDI | RsNTGDI | 启动 ]
c:\windows\system32\drivers\rsntgdi.sys
277 [ rspp | rspp | 启动 ]
c:\windows\system32\drivers\rspp.sys
已经加载的驱动信息：
278 C:\WINDOWS\system32\drivers\rsboot.sys
279 C:\WINDOWS\system32\drivers\rsntgdi.sys
280 c:\windows\system32\drivers\rspp.sys
281 C:\WINDOWS\system32\drivers\hooksys.sys
282 C:\WINDOWS\system32\drivers\hookhelp.sys
283 C:\WINDOWS\system32\drivers\hookreg.sys
284 C:\WINDOWS\system32\drivers\hookntos.sys
285 C:\WINDOWS\system32\drivers\hookcont.sys
286 C:\WINDOWS\system32\drivers\dump_atapi.sys
287 C:\WINDOWS\system32\drivers\dump_wmilib.sys
288 c:\program files\ezbutton\dportio.sys
289 C:\WINDOWS\system32\drivers\ftcprotect.sys
290 C:\WINDOWS\system32\drivers\ftcprotime.sys
==============================================
木马清道夫，最受欢迎的木马查杀软件，超强查杀各类木马病毒
下载地址：
http://www.fygsoft.com
