各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供
http://www.360safe.com
诊断时间: 2007-08-17 14:11:21
诊断平台: Microsoft Windows XP Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:510.42MB - 当前可用内存:171.19MB
100 - 未知 - Process: SwiWiFiComm.exe [] - C:\Program Files\Sierra Wireless Inc\AirCard 700 Series\SwiWiFiComm.exe
100 - 未知 - Process: UpdCSrv.exe [UpdateClientSrv Module] - C:\Program Files\WaveFax\Client\UpdCSrv.exe
100 - 未知 - Process: DLACTRLW.EXE [Drive Letter Access Component] - C:\WINDOWS\Syst
\DLA\DLACTRLW.EXE
100 - 未知 - Process: jusched.exe [Java(TM) Platform SE binary] - C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
100 - 未知 - Process: bgsmsnd.exe [pdfMachine background process] - C:\WINDOWS\syst\bgsmsnd.exe
100 - 未知 - Process: FreeNote.exe [FreeNote] - D:\software\FreeNote V1.261\FreeNote.exe
100 - 未知 - Process: WFAXConn.exe [WaveFax Connector] - C:\Program Files\WaveFax\Client\WFAXConn.exe
100 - 未知 - Process: ISUSPM.exe [InstallShield Update Service Update Manager] - c:\progra~1\common~1\instal~1\update~1\isuspm.exe /scheduler
100 - 未知 - Process: agent.exe [InstallShield Update Service Agent] - C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
100 - 未知 - Process: nlnotes.exe [] - D:\lotus\notes\NLNOTES.EXE
100 - 未知 - Process: ntaskldr.exe [] - D:\lotus\notes\ntaskldr.EXE D:\lotus\notes\ntaskldr.EXE
O2 - 未知 - BHO: (pdfMachine) - [pdfMachine Toolbar for IE] - {56CF4856-ECB4-4e46-A897-A378821F97B9} - C:\WINDOWS\syst\bgstb.dll
O2 - 未知 - BHO: (DriveLetterAccess) - [Drive Letter Access Component] - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - 未知 - BHO: (SSVHelper Class) - [Java(TM) Platform SE binary] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - 未知 - BHO: (Adobe PDF Conversion Toolbar Helper) - [Adobe IE plugin] - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - 未知 - Toolbar: (Adobe PDF) - [Adobe IE plugin] - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - 未知 - Toolbar: (pdfMachine) - [pdfMachine Toolbar for IE] - {56CF4856-ECB4-4e46-A897-A378821F97B9} - C:\WINDOWS\system32\bgstb.dll
O4 - 未知 - HKLM\..\Run: [IBMPRC] [ibmprc Application] C:\IBMTOOLS\UTILS\ibmprc.exe
O4 - 未知 - HKLM\..\Run: [PWRMGRTR] [IBM ThinkPad Power Manager Background Monitor and Tray Battery Gauge] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - 未知 - HKLM\..\Run: [BLOG] [] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - 未知 - HKLM\..\Run: [bgsmsnd.exe] [pdfMachine background process] C:\WINDOWS\system32\bgsmsnd.exe
O4 - 未知 - HKLM\..\Run: [AirCardEnabler] [Network Adapter Manager] "C:\Program Files\Sierra Wireless Inc\Network Adapter Manager\Network Adapter Manager.exe"
O4 - 未知 - HKLM\..\Run: [Storm2Set] [] C:\WINDOWS\system32\rundll32.exe "C:\PROGRA~1\StormII\StormSet.dll",CheckEnv
O4 - 未知 - HKCU\..\Run: [FreeNote] [FreeNote] D:\software\FreeNote V1.261\FreeNote.exe
O4 - 未知 - Startup folder: [Connector.lnk] [] C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Connector.lnk
O8 - 未知 - Extra context menu item: &使用快车(FlashGet)下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - 未知 - Extra context menu item: &使用快车(FlashGet)下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - 未知 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - 未知 - Extra context menu item: 转换为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - 未知 - Extra context menu item: 转换为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - 未知 - Extra context menu item: 转换选定的链接为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - 未知 - Extra context menu item: 转换选定的链接为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - 未知 - Extra context menu item: 转换选项为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - 未知 - Extra context menu item: 转换选项为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - 未知 - Extra context menu item: 转换链接目标为 Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - 未知 - Extra context menu item: 转换链接目标为现有 PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - 未知 - Extra button: Sun Java 控制台(HKLM) - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - 未知 - Extra button: 信息检索(HKLM) - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - 未知 - Extra button: 更新 ThinkPad 软件(HKLM) - C:\Program Files\Lenovo\PkgMgr\\PkgMgr.exe
O9 - 未知 - Extra button: 快车(FlashGet)(HKLM) - C:\Program Files\FlashGet\FlashGet.exe
O11 - 未知 - Options Group: Java (Sun)
O16 - 未知 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - 未知 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (EditCtrl) - https://img.alipay.com/download/1101/aliedit.cab
O16 - 未知 - DPF: {CAFECAFE-0013-0001-0013-ABCDEFABCDEF} (JInitiator 1.3.1.13) -
O16 - 未知 - DPF: {CAFECAFE-0013-0001-0018-ABCDEFABCDEF} (JInitiator 1.3.1.18) -
O16 - 未知 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} (Java Plug-in 1.5.0_10) - http://java.sun.com/update/1.5.0 ... 10-windows-i586.cab
O16 - 未知 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} (Java Plug-in 1.6.0_01) - http://java.sun.com/update/1.6.0 ... 01-windows-i586.cab
O16 - 未知 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_01) - http://java.sun.com/update/1.6.0 ... 01-windows-i586.cab
O23 - 未知 - Service: Dmtddioqvcmk [Dmtddioqvcmk] - - (not running)
O23 - 未知 - Service: HP Status Server [HP Status Server] - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBOID.EXE - (not running)
O23 - 未知 - Service: Pml Driver HPZ12 [Pml Driver HPZ12] - C:\WINDOWS\system32\hpzipm12.dll - (running)
O23 - 未知 - Service: PsaSrv [IBM PSA Access Driver Control] - C:\WINDOWS\system32\PsaSrv.exe - (not running)
O23 - 未知 - Service: QCONSVC [QCONSVC] - System32\QCONSVC.EXE - (running)
O23 - 未知 - Service: SwiWiFiComm [SwiWiFiComm] - C:\Program Files\Sierra Wireless Inc\AirCard 700 Series\SwiWiFiComm.exe - (running)
O23 - 未知 - Service: TpKmpSVC [IBM KCU Service] - C:\WINDOWS\system32\TpKmpSVC.exe - (running)
O23 - 未知 - Service: WaveFax UpdateClient [WaveFax UpdateClient] - C:\Program Files\WaveFax\Client\UpdCSrv.exe - (running)
=======================================
100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: ibmpmsvc.exe [ibm笔记本电源管理相关软件。] - C:\WINDOWS\system32\ibmpmsvc.exe
100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] -
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: rfwsrv.exe [瑞星出品的防火墙程序，用于抵御黑客攻击。] -
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: rrpcsb.exe [ibm笔记本电脑相关程序。] - C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
100 - 安全 - Process: MDM.EXE [debug除错管理用于调试应用程序和microsoft office中的microsoft script editor脚本编辑器。] - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k HPZ12
100 - 安全 - Process: QCONSVC.EXE [ibm笔记本电脑相关程序。] - C:\WINDOWS\System32\QCONSVC.EXE
100 - 安全 - Process: SMAgent.exe [一个声卡相关软件。] - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
100 - 安全 - Process: TPHDEXLG.exe [ibm公司出品的硬盘自动保护(active protection system)软件。] - C:\WINDOWS\System32\TPHDEXLG.EXE
100 - 安全 - Process: TpKmpSvc.exe [ibm thinkpad笔记本相关程序。] - C:\WINDOWS\system32\TpKmpSVC.exe
100 - 安全 - Process: wdfmgr.exe [windows media player播放器相关程序。] - C:\WINDOWS\system32\wdfmgr.exe
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k HTTPFilter
100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\Explorer.EXE
100 - 安全 - Process: rfwmain.exe [瑞星公司出品的瑞星杀毒软件个人防火墙程序,用于抵御黑客攻击。] - c:\program files\rising\rfw\RfwMain.exe
100 - 安全 - Process: TpShocks.exe [ibm笔记本电脑相关驱动程序。] - C:\WINDOWS\system32\TpShocks.exe
100 - 安全 - Process: TPHKMGR.exe [是IBM Thinkpad笔记本电脑系统工具程序。它用于配置FN扩展键。 ] - C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
100 - 安全 - Process: TPONSCR.exe [ibm笔记本电脑的相关程序。] - C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe
100 - 安全 - Process: EZEJMNAP.EXE [IBM ThinkPad电脑EasyEject工具，用于在你的Thinkpad笔记本电脑上容易的连接多个设备。 ] - C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
100 - 安全 - Process: TpScrex.exe [ibm笔记本相关软件的一部分。] - C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe
100 - 安全 - Process: SynTPLpr.exe [触摸板相关程序。] - C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
100 - 安全 - Process: SynTPEnh.exe [美国新思公司出版的触摸板驱动程序的一部分。] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
100 - 安全 - Process: SMax4PNP.exe [声卡相关软件。] - C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
100 - 安全 - Process: issch.exe [installshield software 公司出品的相关软件更新程序。] - C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
100 - 安全 - Process: ibmmessages.exe [ibm公司出品的ibm笔记本电脑自带的即时通信程序。] - C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
100 - 安全 - Process: ibmprc.exe [ibm公司相关产品。] - C:\IBMTOOLS\UTILS\ibmprc.exe
100 - 安全 - Process: QCTRAY.EXE [ibm笔记本电脑相关程序。] - C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE
100 - 安全 - Process: QCWLICON.EXE [ibm出品的thinkpad笔记本电脑的相关程序。] - C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
100 - 安全 - Process: rundll32.exe [windows rundll32为了需要调用dlls的程序。] - C:\WINDOWS\system32\rundll32.exe
100 - 安全 - Process: RavTask.exe [瑞星出品的杀毒软件相关程序。] -
100 - 安全 - Process: acrotray.exe [acrobat distiller的一部分，用于打印pdf文档。] - C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
100 - 安全 - Process: runiep.exe [卡卡上网安全助手IE防漏墙相关程序。] - C:\Program Files\Rising\AntiSpyware\runiep.exe
100 - 安全 - Process: Network Adapter Manager.exe [sierra wireless公司出品的无线网卡相关程序。] - C:\Program Files\Sierra Wireless Inc\Network Adapter Manager\Network Adapter Manager.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: msmsgs.exe [microsoft出品的msn messenger即时通讯软件。] - C:\Program Files\Messenger\msmsgs.exe
100 - 安全 - Process: DLG.exe [bvrp软件classic phone tools sofrware suite的数字连接检测。] - C:\Program Files\Digital Line Detect\DLG.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k imgsvc
100 - 安全 - Process: RavMonD.exe [瑞星杀毒软件的一部分。] -
100 - 安全 - Process: RavMon.exe [瑞星杀毒软件防火墙。] -
100 - 安全 - Process: RavStub.exe [瑞星出品的杀毒软件相关程序。] - C:\Program Files\Rising\Rav\RavStub.exe
100 - 安全 - Process: xdict.exe [金山公司出品的金山词霸单词翻译软件。] - C:\Program Files\Kingsoft\Powerword 2006\xdict.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士相关程序。] - C:\Program Files\360safe\360Safe.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时监控程序。] - C:\Program Files\360safe\safemon\360Tray.exe
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O2 - 安全 - BHO: (Adobe PDF Reader Link Helper) - [Adobe Reader， 查看和打印 Adobe 便携文档格式 (PDF) 文件。] - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - 安全 - BHO: (FGCatchUrl) - [网际快车，支持下载后的文件管理] - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - 安全 - BHO: (FlashGet GetFlash Class) - [网际快车相关程序。] - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - 安全 - Toolbar: (快车(FlashGet)) - [FlashGet IE工具条。] - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O3 - 安全 - Toolbar: (卡卡上网安全助手) - [卡卡安全助手工具条软件相关程序。] - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 安全 - HKLM\..\Run: [IMJPMIG8.1] [微软Microsoft输入法编辑器程序。] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 安全 - HKLM\..\Run: [PHIME2002ASync] [输入法软件相关程序。] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 安全 - HKLM\..\Run: [PHIME2002A] [输入法软件相关程序。] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 安全 - HKLM\..\Run: [TPKMAPHELPER] [ibm笔记本电脑相关程序。] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - 安全 - HKLM\..\Run: [TpShocks] [ibm笔记本电脑相关驱动程序。] TpShocks.exe
O4 - 安全 - HKLM\..\Run: [TPHOTKEY] [ibm thinkpad笔记本应用程序。] C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - 安全 - HKLM\..\Run: [TP4EX] [ibm thinkpad系列笔记本驱动程序。] tp4ex.exe
O4 - 安全 - HKLM\..\Run: [EZEJMNAP] [ibm thinkpad笔记本相关软件。] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - 安全 - HKLM\..\Run: [SynTPLpr] [新思手写板，多用于各种笔记本触摸板驱动程序设置] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - 安全 - HKLM\..\Run: [SynTPEnh] [新思手写板，多用于各种笔记本触摸板驱动程序设置] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - 安全 - HKLM\..\Run: [SoundMAXPnP] [analog device公司声卡驱动程序。] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - 安全 - HKLM\..\Run: [SoundMAX] [analog device公司声卡驱动程序。] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - 安全 - HKLM\..\Run: [ATIPTA] [ati显卡驱动的系统托盘图标，可调节显卡属性] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - 安全 - HKLM\..\Run: [ISUSPM Startup] [installshield安装包服务计划任务升级程序。] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - 安全 - HKLM\..\Run: [ISUSScheduler] [installshield 公司出品的相关软件。] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - 安全 - HKLM\..\Run: [DLA] [hp刻录机相关软件。] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - 安全 - HKLM\..\Run: [ibmmessages] [ibm的技术支持软件。] C:\Program Files\IBM\Messages By IBM\\ibmmessages.exe
O4 - 安全 - HKLM\..\Run: [QCTRAY] [ibm笔记本电脑相关程序。] C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE
O4 - 安全 - HKLM\..\Run: [QCWLICON] [ibm thinkpad笔记本应用程序。] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
O4 - 安全 - HKLM\..\Run: [MSPY2002] [是微软Microsoft翻译工具的一部分。] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 安全 - HKLM\..\Run: [RfwMain] [瑞星防火墙程序，抵御黑客攻击。] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 安全 - HKLM\..\Run: [IMSCMig] [微软拼音输入法安装工具。 ] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 安全 - HKLM\..\Run: [Acrobat Assistant 7.0] [adobe公司出品的acrobat distiller软件，用于打印pdf文档。] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - 安全 - HKLM\..\Run: [SunJavaUpdateSched] [java升级相关软件。] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - 安全 - HKLM\..\Run: [runeip] [卡卡上网安全助手相关程序。] "C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] C:\Program Files\360safe\safemon\360Tray.exe /start
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - HKCU\..\Run: [ibmmessages] [ibm的技术支持软件。] C:\Program Files\IBM\Messages By IBM\ibmmessages.exe
O4 - 安全 - HKCU\..\Run: [MSMSGS] [是MSN Messenger网络聊天工具的主程序] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - 安全 - Startup folder: [Adobe Acrobat Speed Launcher.lnk] [Adobe Reader启动项相关程序。] C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Acrobat Speed Launcher.lnk
O4 - 安全 - Startup folder: [Digital Line Detect.lnk] [bvrp软件公司出品的电话相关软件。] C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Digital Line Detect.lnk
O8 - 安全 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - 安全 - Extra button: Windows Messenger(HKLM) - C:\Program Files\Messenger\msmsgs.exe
O11 - 安全 - Options Group: Java (IBM)
O16 - 安全 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (招商银行个人版) -
https://www.sz1.cmbchina.com/download/CMBEdit.cab
O16 - 安全 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in) -
http://java.sun.com/update/1.6.0 ... 01-windows-i586.cab
O16 - 安全 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (中国工商银行个人银行) -
https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - 安全 - DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} (Java Plug-in) -
http://java.sun.com/products/plugin/1.4.2/jinstall-142-win.cab
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O18 - 安全 - Protocol: OFFICE 相关 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O23 - 安全 - Service: Adobe LM Service [adobe公司相关产品的许可服务程序。] - "C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" - (not running)
O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe - (running)
O23 - 安全 - Service: HP Port Resolver [惠普打印机网络支持相关程序。] - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPBPRO.EXE - (not running)
O23 - 安全 - Service: IBM Rapid Restore Ultra Service [IBM的备份和恢复软件IBM Rapid Restore Ultra相关服务。] - "C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe" - (running)
O23 - 安全 - Service: IBMPMSVC [IBM笔记本电脑电源管理相关程序。 ] - C:\WINDOWS\system32\ibmpmsvc.exe - (running)
O23 - 安全 - Service: RfwProxySrv [瑞星防火墙相关程序。] - c:\program files\rising\rfw\rfwproxy.exe - (not running)
O23 - 安全 - Service: RfwService [是瑞星个人防火墙相关程序。] - c:\program files\rising\rfw\rfwsrv.exe - (running)
O23 - 安全 - Service: RsCCenter [是瑞星杀毒软件控制台相关程序。] - "C:\Program Files\Rising\Rav\CCenter.exe" - (running)
O23 - 安全 - Service: RsRavMon [是瑞星杀毒软件相关监控程序。] - "C:\Program Files\Rising\Rav\Ravmond.exe" - (running)
O23 - 安全 - Service: SoundMAX Agent Service (default) [是Analog SoundMAX声卡产品相关程序。] - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe - (running)
O23 - 安全 - Service: TPHDEXLGSVC [ibm笔记本电脑的主动保护系统相关程序。] - System32\TPHDEXLG.EXE - (running)
=======================================
O31 - 未知 - Folder Menu: {F9DB5320-233E-11D1-9F84-707F02C10627} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll - Adobe Systems, Inc. - PDF Shell Extension - 7.0.0.0 - 110592 - 4b0991cd076b617a2231b19a6663c1c9
O31 - 未知 - Notify: QConGina - C:\WINDOWS\system32\QConGina.dll - IBM Corp. - IBM Access Connections - GINA Component. - 3.7.1.0 - 262144 - 460652adf76b91a0b901819dad793ec1
O31 - 未知 - Notify: tphotkey - C:\WINDOWS\system32\tphklock.dll - - - - 24576 - 0176ee5f305c0c61438ad1d3a76e26d1
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression - - - - - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 - - - - - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} - - - - - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} - - - - - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} - - - - - 0 -
O31 - 未知 - SEApproved: {1D2680C9-0E2A-469d-B787-065558BC7D43} - C:\WINDOWS\system32\mscoree.dll - Microsoft Corporation - Microsoft .NET Runtime Execution Engine - 2.0.50727.253 - 271360 - b5b67ee09b52d7129b8041b9bd411f7b
O31 - 未知 - SEApproved: {DEE12703-6333-4D4E-8F34-738C4DCC2E04} - C:\Program Files\Sonic\RecordNow!\RecordNow!\shlext.dll - - Shell Extensions - 7.0.0.0 - 73728 - cba9461ff0e1d42ddf8c709b44e60f83
O31 - 未知 - SEApproved: {E91B2703-013E-4A99-AD33-2B6FB00AA356} - C:\Program Files\Sonic\RecordNow!\RecordNow!\shlext.dll - - Shell Extensions - 7.0.0.0 - 73728 - cba9461ff0e1d42ddf8c709b44e60f83
O31 - 未知 - SEApproved: {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL - Sonic Solutions - Drive Letter Access Component - 5.20.9.0 - 110652 - 94d61fa6df58a22f139121b945d22083
O31 - 未知 - SEApproved: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\RavExt.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.9 - 106496 - fa20734a7acabcfe9d727fb343da4e8a
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 124416 - 1b089bd70767a1ca5419a24b581cc753
O31 - 未知 - SEApproved: {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll - Adobe Systems Inc. - Adobe Acrobat Context Menu - 7.0.7.142 - 581632 - f72f179a6a23c77988f31cee8c5d2326
O31 - 未知 - SEApproved: 无效的CLSID：Filzip Shell Extension - - - - - 0 -
O31 - 未知 - SEApproved: {8f7261d0-d2b9-11d2-9909-00605205b24c} - C:\Program Files\GlobalSCAPE\CuteFTP 8 Professional\CuteShell.dll - GlobalSCAPE Texas, LP. - - 50.6.3.2 - 163840 - 9e29ac81e4303ff0878fb4ba100b688f
O31 - 未知 - Directory Menu: {8f7261d0-d2b9-11d2-9909-00605205b24c} - C:\Program Files\GlobalSCAPE\CuteFTP 8 Professional\CuteShell.dll - GlobalSCAPE Texas, LP. - - 50.6.3.2 - 163840 - 9e29ac81e4303ff0878fb4ba100b688f
O31 - 未知 - Directory Menu: {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} - C:\WINDOWS\system32\RavExt.dll - Beijing Rising Technology Co., Ltd. - Rising Shell Ext Module - 19.0.0.9 - 106496 - fa20734a7acabcfe9d727fb343da4e8a
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll - - - - 124416 - 1b089bd70767a1ca5419a24b581cc753
O31 - 未知 - BootExecute: bsmain - - - - 0 -
O31 - 未知 - BootExecute: - - - - 0 -
O31 - 未知 - LSA: Notification Packages - wdmon.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - sv1_0.dll - - - - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll - - - - 0 -
=======================================
O40 - winlogon.exe - - C:\WINDOWS\system32\tphklock.dll - - 0176ee5f305c0c61438ad1d3a76e26d1
O40 - lsass.exe - - C:\WINDOWS\system32\pwdmon.dll - - fda9b01ed6a2e9eeb9792d2207e1c53d
O40 - svchost.exe - Oracle Corporation - C:\Oracle\product\10.1.0\Client_1\bin\oci.dll - Oracle Call Interface - ff09e77d1418dc30656d91d29632366a
O40 - svchost.exe - Hewlett-Packard - c:\windows\system32\hpzipm12.dll - PmlDrv Module - 75cf9de0a67af916ed591743dfb69694
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\RavExt.dll - Rising Shell Ext Module - fa20734a7acabcfe9d727fb343da4e8a
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\shlhook.dll - shlhook Module - 47c020cafb8486eb33061f7ccdf206b6
O40 - Explorer.EXE - IBM Corp. - C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL - IBM ThinkPad Power Manager Background Monitor and Tray Battery Gauge - d4d48405a05306c2adab59705e829db4
O40 - Explorer.EXE - - C:\PROGRA~1\ThinkPad\UTILIT~1\US\PWRMGRRT.DLL - - 2a68fc8b38991b6c42d803d7d616c217
O40 - Explorer.EXE - - C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL - - d4a21b60f44f127af9f28649c3bf299f
O40 - Explorer.EXE - IBM Corporation - C:\WINDOWS\system32\Sensor.dll - IBM Active Protection System - Shock Sensor Module - 766b98982b8c879fb9d85470c6aa6c52
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\AntiSpyware\ieprot.dll - IE Protector - 369c1d78953b00cf8306e7028654092d
O40 - Explorer.EXE - Adobe Systems, Inc. - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll - PDF Shell Extension - 4b0991cd076b617a2231b19a6663c1c9
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MSVCR71.dll - Microsoft? C Runtime Library - 86f1895ae8c5e8b17d99ece768a70732
O40 - Explorer.EXE - Sonic Solutions - C:\WINDOWS\System32\DLA\DLASHX_W.DLL - Drive Letter Access Component - 94d61fa6df58a22f139121b945d22083
O40 - Explorer.EXE - Sonic Solutions - C:\WINDOWS\system32\DLAAPI_W.DLL - Drive Letter Access Component - 4c45075e9c876b290449172b6fa3e0cd
O40 - Explorer.EXE - Sonic Solutions - C:\WINDOWS\System32\DLA\DLACResW.dll - Drive Letter Access Component - 72affb69a49ffbddd43ade0bd3f44e54
O40 - Explorer.EXE - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\RSCOMMON.DLL - Rising Common Function Dynamic Link Library - 58432e6c58f1b4c339adc1a79bf864b6
O40 - Explorer.EXE - GlobalSCAPE Texas, LP. - C:\Program Files\GlobalSCAPE\CuteFTP 8 Professional\CuteShell.dll - - 9e29ac81e4303ff0878fb4ba100b688f
O40 - Explorer.EXE - Adobe Systems Inc. - C:\Program Files\Adobe\Acrobat 7.0\Acrobat Elements\ContextMenu.dll - Adobe Acrobat Context Menu - f72f179a6a23c77988f31cee8c5d2326
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MFC71.DLL - MFCDLL Shared Library - Retail Version - f35a584e947a5b401feb0fe01db4a0d7
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MSVCP71.dll - Microsoft? C++ Runtime Library - 561fa2abb31dfa8fab762145f81667c2
O40 - Explorer.EXE - Microsoft Corporation - C:\WINDOWS\system32\MFC71CHS.DLL - MFC Language Specific Resources - ecfff2dffbb1cae3a00cb2ab9bff8cef
O40 - rundll32.exe - IBM Corp. - C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL - IBM ThinkPad Power Manager Background Monitor and Tray Battery Gauge - d4d48405a05306c2adab59705e829db4
O40 - rundll32.exe - - C:\PROGRA~1\ThinkPad\UTILIT~1\US\PWRMGRRT.DLL - - 2a68fc8b38991b6c42d803d7d616c217
O40 - rundll32.exe - - C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRIF.DLL - - d4a21b60f44f127af9f28649c3bf299f
O40 - rundll32.exe - IBM Corporation - C:\WINDOWS\system32\Sensor.dll - IBM Active Protection System - Shock Sensor Module - 766b98982b8c879fb9d85470c6aa6c52
O40 - rundll32.exe - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\AntiSpyware\ieprot.dll - IE Protector - 369c1d78953b00cf8306e7028654092d
=======================================
O41 - ANC - IBM Access Connections - ANC - C:\WINDOWS\system32\drivers\ANC.sys - (running) - IBM Access Connections - ANC - IBM Corp. - 11ab185a7af224800bbfb5b836974a17
O41 - BaseTDI - basetdi - C:\WINDOWS\system32\drivers\basetdi.sys - (running) - basetdi - Beijing Rising Technology Co., Ltd. - 0064810c1b03f2c889130b669a4ce937
O41 - DLABOIOM - Drive Letter Access Component - C:\WINDOWS\system32\DLA\DLABOIOM.SYS - (running) - Drive Letter Access Component - Sonic Solutions - ee4325becef51b8c32b4329097e4f301
O41 - DLACDBHM - Shared Driver Component - C:\WINDOWS\system32\drivers\DLACDBHM.SYS - (running) - Shared Driver Component - Sonic Solutions - d979bebcf7edcc9c9ee1857d1a68c67b
O41 - DLADResN - Drive Letter Access Component - C:\WINDOWS\system32\DLA\DLADResN.SYS - (running) - Drive Letter Access Component - Sonic Solutions - d8bf3fd2830e045e5540f3a9a7c15945
O41 - DLAIFS_M - Drive Letter Access Component - C:\WINDOWS\system32\DLA\DLAIFS_M.SYS - (running) - Drive Letter Access Component - Sonic Solutions - 752376e109a090970bfa9722f0f40b03
O41 - DLAOPIOM - Drive Letter Access Component - C:\WINDOWS\system32\DLA\DLAOPIOM.SYS - (running) - Drive Letter Access Component - Sonic Solutions - 62ee7902e74b90bf1ccc4643fc6c07a7
O41 - DLAPoolM - Drive Letter Access Component - C:\WINDOWS\system32\DLA\DLAPoolM.SYS - (running) - Drive Letter Access Component - Sonic Solutions - 5c220124c5afeaee84a9bb89d685c17b
O41 - DLARTL_N - Shared Driver Component - C:\WINDOWS\system32\drivers\DLARTL_N.SYS - (running) - Shared Driver Component - Sonic Solutions - 7ee0852ae8907689df25049dcd2342e8
O41 - DLAUDFAM - Drive Letter Access Component - C:\WINDOWS\system32\DLA\DLAUDFAM.SYS - (running) - Drive Letter Access Component - Sonic Solutions - 4ebb78d9bbf072119363b35b9b3e518f
O41 - DLAUDF_M - Drive Letter Access Component - C:\WINDOWS\system32\DLA\DLAUDF_M.SYS - (running) - Drive Letter Access Component - Sonic Solutions - 333b770e52d2cea7bd86391120466e43
O41 - DRVMCDB - Device Driver - C:\WINDOWS\system32\drivers\DRVMCDB.SYS - (running) - Device Driver - Sonic Solutions - fd0f95981fef9073659d8ec58e40aa3c
O41 - DRVNDDM - Device Driver Manager - C:\WINDOWS\system32\drivers\DRVNDDM.SYS - (running) - Device Driver Manager - Sonic Solutions - b4869d320428cdc5ec4d7f5e808e99b5
O41 - EGATHDRV - IBM eGatherer Kernel Module - C:\WINDOWS\system32\egathdrv.sys - (running) - IBM eGatherer Kernel Module - IBM Corporation - 2d0fc676d159525f6cd74c3302c7a61c
O41 - ExpScaner - ExpScan.sys - C:\Program Files\Rising\Rav\ExpScan.sys - (running) - ExpScan.sys - - 5a690926c7181d5c0b2721016442c9c3
O41 - HookCont - HookCont - C:\Program Files\Rising\Rav\HookCont.sys - (running) - HookCont - Rising - 3926cb7b005564bc77d6b40235c53817
O41 - HookReg - HookReg - C:\Program Files\Rising\Rav\HOOKREG.sys - (running) - - - 997c395147f8e5b3f714bdd112fe8945
O41 - HookSys - Hooksys - C:\Program Files\Rising\Rav\HookSys.sys - (running) - Hooksys - Rising - 265b67f85db6226f2439e13e7c1fa8bf
O41 - HookUrl - HookUrl - C:\Program Files\Rising\Rfw\HookUrl.sys - (running) - HookUrl - Beijing Rising Technology Co., Ltd. - 93768ab1e576eef2de107eddbc586e9b
O41 - ibmfilter - IBM FFE and RRU filter driver - C:\WINDOWS\system32\drivers\ibmfilter.sys - (running) - IBM FFE and RRU filter driver - IBM - 67cbdd7e1d9866f83d8921829893435a
O41 - IBMTPCHK - IBMTPCHK - C:\WINDOWS\system32\drivers\IBMBLDID.SYS - (running) - - - 73893e9a62d869a0409df9c12a0ebefe
O41 - MEMSCAN - MemScan Driver - C:\Program Files\Rising\Rav\MemScan.sys - (running) - MemScan Driver - Beijing Rising Technology Co., Ltd. - a909256ef59a987fda249aa3ded01e76
O41 - mProcRs - Rising Personal FireWall mprocrs.sys - c:\program files\Rising\Rfw\mProcRs.sys - (running) - Rising Personal FireWall mprocrs.sys - Beijing Rising Technology Co., Ltd. - 3659b3132bc2c05db37b8c5e65687159
O41 - pfc - Padus(R) ASPI Shell - C:\WINDOWS\system32\drivers\pfc.sys - (running) - Padus(R) ASPI Shell - Padus, Inc. - 957b82ec80ad7ead64e5e47df6b0dc40
O41 - PMEM - Physical Memory Driver - C:\WINDOWS\system32\drivers\PMEMNT.SYS - (running) - Physical Memory Driver - Microsoft Corporation - fa292805788528c083f416e151b60ab6
O41 - PxHelp20 - Px Engine Device Driver for Windows 2000/XP - C:\WINDOWS\system32\drivers\pxhelp20.sys - (running) - Px Engine Device Driver for Windows 2000/XP - Sonic Solutions - 86724469cd077901706854974cd13c3e
O41 - RsAntiSpyware - Anti-RootKit Driver - C:\WINDOWS\system32\drivers\RsBoot.sys - (running) - Anti-RootKit Driver - Beijing Rising Technology Co., Ltd. - f9edc97f228c046832a24b5a76017912
O41 - RsFwDrv - nt_fwdrv - C:\Program Files\Rising\Rfw\rsfwdrv.sys - (running) - nt_fwdrv - Beijing Rising Technology Co., Ltd. - 1869e55cfacff0ff786d4ba6d2340ee2
O41 - RsNTGDI - RsNTGDI - C:\WINDOWS\system32\drivers\RsNTGdi.sys - (running) - RsNTGDI - Beijing Rising Technology Co., Ltd. - 17214e7b192cb93ff014fca1484b97ad
O41 - RSPPSYS - RSPPSYS.SYS - C:\Program Files\Rising\Rav\rsppsys.sys - (running) - RSPPSYS.SYS - Rising - f38c10d8c21626a4878ea16717e971fa
O41 - Smapint - SMAPI I/O - C:\WINDOWS\system32\drivers\SMAPINT.SYS - (running) - SMAPI I/O - Microsoft Corporation - 26341d0dd225d19fd50e0ee3c3c77502
O41 - TDSMAPI - TDSMAPI - C:\WINDOWS\system32\drivers\TDSMAPI.SYS - (running) - - - e9512ac82fff83808549267078b38fe5
O41 - TPInput - IBM SATA Power Management Driver - C:\WINDOWS\system32\drivers\TPInput.sys - (running) - IBM SATA Power Management Driver - IBM Corporation - f53589467c0a112bec1835c72457a8a1
O41 - TPPWRIF - TPPWRIF - C:\WINDOWS\system32\drivers\TPPWRIF.SYS - (running) - - - 44672de6cea9569c21c4b7a8d2560750
O41 - TSMAPIP - TSMAPIP - C:\WINDOWS\system32\drivers\TSMAPIP.SYS - (running) - - - f2aba3066d7921d7fcdbd66dea88be11
O41 - NPF - NPF Driver - C:\WINDOWS\system32\drivers\npf.sys - (not running) - NPF Driver - Politecnico di Torino - ce48bb59fdb4e38de3712a05fee29e25
O41 - PcdrNdisuio - PCDR NDIS User mode I/O Driver - C:\WINDOWS\system32\drivers\pcdrndisuio.sys - (not running) - PCDR NDIS User mode I/O Driver - Windows (R) 2000 DDK provider - 505cba425df3bb230f244e1c23221058
O41 - psadd - SMI Driver - C:\WINDOWS\system32\drivers\psadd.sys - (not running) - SMI Driver - IBM Corporation - 30b10051866ede0ca089082fb4dabdea
O41 - QCNDISIF - IBM Access Connections - Intermediate Protocol Driver. - C:\WINDOWS\system32\drivers\qcndisif.sys - (not running) - IBM Access Connections - Intermediate Protocol Driver. - IBM Corporation. - 8127cd3d08a48793d2c155fb4d9af8ef
O41 - xAntiArp - xAntiArp - C:\WINDOWS\system32\DRIVERS\xAntiArp.sys - (not running) - - -
=======================================
360Safe.exe=3.6.0.1001
AntiAdwa.dll=3.5.1.1001
AntiEng.dll=3.5.2.1002
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
live.dll=1.0.1.1019
=======================================
操作历史报告：
2007-08-17 13:58
清理恶评插件 - 腾讯QQ附带的QQIEHelper插件 -
清理恶评插件 - 灰鸽子变种0003 - C:\WINDOWS\G_SERV~1.DLL
清理恶评插件 - cpush广告软件 -
----------全面诊断修复历史----------
2007-08-17 14:05
O6 - 危险 - 禁止IE首页相关设置 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
O6 - 危险 - 禁止IE相关功能 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions
=======================================
360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基V6.0
最新免费下载：
http://www.360safe.com
