|lz系统检测报告
| <智能杀毒伴侣 Version 1.0.0.8> 自动安全分析报告 |
| [ --2006 年11 月12 日13 时48 分24 秒 --]|
| [ ----- Microsoft Windows XP ----- ]|
| [ --- IE浏览器插件 --- ]|
启动迅雷5|E:\Thunder\Thunder.exe|{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}
联想|
http://www.lenovo.com|{6096E38F-5AC1-4391-8EC4-75DFA92FB32F}
QQ|E:\QQ\QQ.EXE|{c95fe080-8f5d-11d2-a20b-00aa003c157b}
|{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6}|{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6}
Messenger|C:\Program Files\Messenger\msmsgs.exe|{FB5F1910-F110-11d2-BB9E-00C04F795683}
QQBrowserHelperObject Class|E:\QQ\QQIEHelper.dll|{54EBD53A-9BC1-480B-966A-843A333CA162}
BandIE Class|C:\PROGRA~1\baidu\bar\BaiduBar.dll|{77FEF28E-EB96-44FF-B511-3185DEA48697}
Thunder Browser Helper|E:\Thunder\ComDlls\XunLeiBHO_004.dll|{889D2FEB-5411-4565-8998-1DD2C5261283}
百度－紫光华宇搜索工具栏|C:\PROGRA~1\baidu\bar\BaiduBar.dll|{B580CF65-E151-49C3-B73F-70B13FCA8E86}
| [ --- 系统网络连接 --- ]|
0.0.0.0 : 0|C:\WINDOWS\system32\svchost.exe|[ 监听 ]
213.202.247.102 : 65520|C:\WINDOWS\system32\winlogon.exe|<已连接>－－－－－－－－－－－－－中了木马了！
0.0.0.0 : 0|C:\WINDOWS\System32\alg.exe|[ 监听 ]
*.*.*.* : *|C:\WINDOWS\system32\lsass.exe|
*.*.*.* : *|C:\WINDOWS\system32\svchost.exe|
*.*.*.* : *|C:\WINDOWS\system32\svchost.exe|
*.*.*.* : *|C:\WINDOWS\system32\svchost.exe|
*.*.*.* : *|C:\WINDOWS\system32\svchost.exe|
*.*.*.* : *|C:\WINDOWS\system32\svchost.exe|
*.*.*.* : *|C:\WINDOWS\system32\lsass.exe|
*.*.*.* : *|C:\WINDOWS\System32\svchost.exe|
*.*.*.* : *|C:\WINDOWS\System32\svchost.exe|
*.*.*.* : *|C:\WINDOWS\Explorer.EXE|
*.*.*.* : *|C:\Program Files\Windows Media Player\wmplayer.exe|
*.*.*.* : *|C:\WINDOWS\System32\svchost.exe|
| [ --- 系统自动启动 --- ]|
BaiduInstall|c:\windows\system32\rundll32.exe|HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
IMJPMIG8.1|c:\windows\ime\imjp8_1\imjpmig.exe|HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
PHIME2002ASync|c:\windows\system32\ime\tintlgnt\tintsetp.exe|HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
PHIME2002A|c:\windows\system32\ime\tintlgnt\tintsetp.exe|HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
VTTimer|C:\WINDOWS\system32\vttimer.exe|HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
r|c:\windows\down\rundll32.exe|HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run－－－－－－－－－木马
SoundMan|C:\WINDOWS\soundman.exe|HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
wl|c:\windows\system32\svvosts.exe|HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run－－－－－－木马
wow|c:\windows\system32\launcher.exe|HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run－－－－－－－－－－木马
ctfmon.exe|c:\windows\system32\ctfmon.exe|HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Load|c:\windows\rundl132.exe|HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows [Load]－－－－－－－－木马
腾讯QQ.lnk|E:\QQ\QQ.exe|
| [ --- 未知进程模块 --- ]|
智能杀毒伴侣 1.0.0.9.exe|D:\智能杀毒伴侣 1[1].0.0.9\智能杀毒伴侣 1.0.0.9.exe|斯玛特科技 陈维嘉
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|－－－－－－－病毒
engine.dll|G:\spx图\spx\engine.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－ － －－－－－－－－－－－什么软件的？病毒吧？
USERENV.dll|System|－－－－－－－－－－ －－－－－－－－－－－－－－－什么软件的？病毒吧？
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation－－－－－－－－－－－不是微软的文件
wmpband.dll|C:\PROGRA~1\WINDOW~1\wmpband.dll|Microsoft Corporation－－－－－－－－－－－不是微软的文件
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|－－－－－－－－－－－－－什么软件的？病毒吧？
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation－－－－－－－－－－－－－不是微软的文件
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－－－－－－－－－－－－－－－－什么软件的？病毒吧？
mywow.dll|C:\WINDOWS\system32\mywow.dll|－－－－－－－－－－－－－－－－－什么软件的？病毒吧？
BaiduBar.dll|C:\PROGRA~1\baidu\bar\BaiduBar.dll|Baidu.com, Inc.
rarext.dll|C:\Program Files\WinRAR\rarext.dll|
engine.dll|G:\spx图\spx\engine.dll|
Dll.dll|C:\WINDOWS\Dll.dll|－－－－－－－－－－－－－－－－－－－－－－－什么软件的？病毒吧？
XunLeiBHO_004.dll|E:\Thunder\ComDlls\XunLeiBHO_004.dll|Thunder Networking Technologies,LTD
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|－－－－－－－－－处理掉
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－－处理掉
VTTimer.exe|C:\WINDOWS\system32\VTTimer.exe|S3 Graphics, Inc.
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－－处理掉
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－－处理掉
rundll32.exe|C:\WINDOWS\down\rundll32.exe|－－－－－－－－－处理掉
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－－处理掉
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|－－－－－－－－－处理掉
SOUNDMAN.EXE|C:\WINDOWS\SOUNDMAN.EXE|Realtek Semiconductor Corp.
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|－－－－－－－－－处理掉
rxdll.dll|C:\WINDOWS\rxdll.dll|
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|－－－－－－－－－处理掉
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－－处理掉
Metin2_PatchOnly.exe|E:\game\YT\Metin2_PatchOnly.exe|Ymir Entertainment
DSETUP.dll|E:\game\YT\DSETUP.dll|Microsoft Corporation
PATCHW32.dll|E:\game\YT\PATCHW32.dll|
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|－－－－－－－－－处理掉
Flash9.ocx|C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx|Adobe Systems, Inc.
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation－－－－－－－－－处理掉
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－－处理掉
Maxthon.exe|C:\Program Files\Maxthon\Maxthon.exe|Maxthon International Ltd.
maxzlib.dll|C:\Program Files\Maxthon\maxzlib.dll|
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
odbcbcp.dll|C:\WINDOWS\system32\odbcbcp.dll|Microsoft Corporation
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－－处理掉
real_time.dll|C:\Program Files\Maxthon\Services\RealTime\real_time.dll|－－－－－－－－－处理掉，病毒
Flash9.ocx|C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx|Adobe Systems, Inc.
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation－－－－－－－－－处理掉
engine.dll|G:\spx图\spx\engine.dll|
FREEWB.IME|C:\WINDOWS\system32\FREEWB.IME|Delphi Fan Studio
Logo1_.exe|C:\WINDOWS\Logo1_.exe|－－－－－－－－－处理掉，围巾，你中了围巾，
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
spx.exe|G:\spx图\spx\spx.exe|MoodySoft
ICQMAPI.dll|G:\spx图\spx\ICQMAPI.dll|
lpng.dll|G:\spx图\spx\lpng.dll|
freeze.dll|G:\spx图\spx\freeze.dll|
engine.dll|G:\spx图\spx\engine.dll|
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|－－－－－－－－ －处理掉
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation－－－－－－－－－处理掉
QQ.exe|E:\腾讯QQ\QQ.exe|TENCENT
QQBaseClassInDll.dll|E:\腾讯QQ\QQBaseClassInDll.dll|
QQHelperDll.dll|E:\腾讯QQ\QQHelperDll.dll|
BasicCtrlDll.dll|E:\腾讯QQ\BasicCtrlDll.dll|Tencent
MFC42.DLL|E:\腾讯QQ\MFC42.DLL|Microsoft Corporation
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
LoginCtrl.dll|E:\腾讯QQ\LoginCtrl.dll|
RICHED32.DLL|E:\腾讯QQ\RICHED32.DLL|Microsoft Corporation
RICHED20.dll|E:\腾讯QQ\RICHED20.dll|Microsoft Corporation
QQAPI.dll|E:\腾讯QQ\QQAPI.dll|
npkcntc.dll|E:\腾讯QQ\npkcntc.dll|INCA Internet Co., Ltd.
npkpdb.dll|E:\腾讯QQ\npkpdb.dll|INCA Internet Co., Ltd.
engine.dll|G:\spx图\spx\engine.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|
QQRes.dll|E:\腾讯QQ\QQRes.dll|tencent
QQMainFrame.dll|E:\腾讯QQ\QQMainFrame.dll|
CQQApplication.dll|E:\腾讯QQ\CQQApplication.dll|
NewSkin.dll|E:\腾讯QQ\NewSkin.dll|
HostingMgr.dll|E:\腾讯QQ\HostingMgr.dll|
MailSummary.dll|E:\腾讯QQ\MailSummary.dll|
QQSpace.dll|E:\腾讯QQ\QQSpace.dll|
vbscript.dll|E:\腾讯QQ\vbscript.dll|Microsoft Corporation
QQConfigPlugin.dll|E:\腾讯QQ\QQConfigPlugin.dll|
UserDefinedHead.dll|E:\腾讯QQ\UserDefinedHead.dll|
QQPlugin.dll|E:\腾讯QQ\QQPlugin.dll|
LongConnection.dll|E:\腾讯QQ\LongConnection.dll|tencent
QQSysMsgMng.dll|E:\腾讯QQ\QQSysMsgMng.dll|
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation
QQFileTransfer.dll|E:\腾讯QQ\QQFileTransfer.dll|Tencent
QRingMng.dll|E:\腾讯QQ\QRingMng.dll|
PhoneAPI.dll|E:\腾讯QQ\PhoneAPI.dll|
DialerAllinOne.dll|E:\腾讯QQ\DialerAllinOne.dll|tencent
QQAllInOne.dll|E:\腾讯QQ\QQAllInOne.dll|
CameraDll.dll|E:\腾讯QQ\CameraDll.dll|
SCCore.dll|E:\腾讯QQ\SCCore.dll|
QQPet.dll|E:\腾讯QQ\QQPet.dll|
QQAvatar.dll|E:\腾讯QQ\QQAvatar.dll|
FlashAvatarDll.dll|E:\腾讯QQ\FlashAvatarDll.dll|
BQQApplication.dll|E:\腾讯QQ\BQQApplication.dll|
CommercesMng.dll|E:\腾讯QQ\CommercesMng.dll|
PersonalDesktop.dll|E:\腾讯QQ\PersonalDesktop.dll|深圳市腾讯计算机系统公司QQ工作小组
QQAddr.dll|E:\腾讯QQ\QQAddr.dll|深圳市腾讯计算机系统有限公司
QQSceneMng.dll|E:\腾讯QQ\QQSceneMng.dll|
QQPhoneHelper.dll|E:\腾讯QQ\QQPhoneHelper.dll|腾讯科技（深圳）有限公司
gdiplus.dll|E:\腾讯QQ\gdiplus.dll|Microsoft Corporation
QQCustomFace.dll|E:\腾讯QQ\QQCustomFace.dll|
Flash9.ocx|C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx|Adobe Systems, Inc.
FREEWB.IME|C:\WINDOWS\system32\FREEWB.IME|Delphi Fan Studio
Thunder5.exe|E:\Thunder\Program\Thunder5.exe|Thunder Networking Technologies,LTD
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
TaskManager.dll|E:\Thunder\Program\TaskManager.dll|Thunder Networking Technologies,LTD
download_interface.dll|E:\Thunder\Program\download_interface.dll|xunlei.com
stlport_vc646.dll|E:\Thunder\Program\stlport_vc646.dll|STLport Consulting, Inc.
log4cplus.dll|E:\Thunder\Program\log4cplus.dll|
asyn_dns.dll|E:\Thunder\Program\asyn_dns.dll|
iTargetAD.dll|E:\Thunder\Program\iTargetAD.dll|Thunder Networking Technologies,LTD
BHOStub.dll|E:\Thunder\Program\BHOStub.dll|Thunder Networking Technologies,LTD
LiveUpdate.dll|E:\Thunder\Program\LiveUpdate.dll|
UpdateDownload.dll|E:\Thunder\Program\UpdateDownload.dll|Thunder Networking Technologies,LTD
XLCommunity.dll|E:\Thunder\Components\Community\XLCommunity.dll|Thunder Networking Technologies,LTD
RegisterDll.dll|E:\Thunder\Program\RegisterDll.dll|Thunder Networking Technologies,LTD
P4PClient.dll|E:\Thunder\Components\P4PClient\P4PClient.dll|Thunder Networking Technologies,LTD
XLSearch.dll|E:\Thunder\Components\Search\XLSearch.dll|Thunder Networking Technologies,LTD
iEmbedShell.dll|E:\Thunder\Components\InMedia\iEmbedShell.dll|
iEmbed06.dll|E:\Thunder\Components\InMedia\iEmbed06.dll|
TingTing.dll|E:\Thunder\Plugins\TingTing\TingTing.dll|Thunder Networking Technologies,LTD
Flash9.ocx|C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx|Adobe Systems, Inc.
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation
engine.dll|G:\spx图\spx\engine.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|
msgmanage.dll|E:\Thunder\Program\msgmanage.dll|Thunder Networking Technologies,LTD
QQexternal.exe|E:\腾讯QQ\QQexternal.exe|
BasicCtrlDll.dll|E:\腾讯QQ\BasicCtrlDll.dll|Tencent
MFC42.DLL|E:\腾讯QQ\MFC42.DLL|Microsoft Corporation
QQHelperDll.dll|E:\腾讯QQ\QQHelperDll.dll|
QQBaseClassInDll.dll|E:\腾讯QQ\QQBaseClassInDll.dll|
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
QQRes.dll|E:\腾讯QQ\QQRes.dll|tencent
Flash9.ocx|C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx|Adobe Systems, Inc.
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation
engine.dll|G:\spx图\spx\engine.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
engine.dll|G:\spx图\spx\engine.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|
l3codeca.acm|C:\WINDOWS\system32\l3codeca.acm|Fraunhofer Institut Integrierte Schaltungen IIS
msacm32.drv|C:\WINDOWS\system32\msacm32.drv|Microsoft Corporation
智能杀毒伴侣 1.0.0.9.exe|D:\智能杀毒伴侣 1[1].0.0.9\智能杀毒伴侣 1.0.0.9.exe|斯玛特科技 陈维嘉
248BB948.dll|C:\Program Files\Common Files\Microsoft Shared\MSINFO\248BB948.dll|
engine.dll|G:\spx图\spx\engine.dll|
rxdll.dll|C:\WINDOWS\rxdll.dll|
| [ --- 未知系统服务 --- ]|
| [ --- 未知内核驱动 --- ]|
vtmini.sys|C:\WINDOWS\system32\DRIVERS\vtmini.sys|Copyright (C) VIA/S3 Graphics Co, Ltd.
ALCXWDM.SYS|C:\WINDOWS\system32\drivers\ALCXWDM.SYS|Realtek Semiconductor Corp.
ALCXSENS.SYS|C:\WINDOWS\system32\drivers\ALCXSENS.SYS|Sensaura
vtdisp.dll|C:\WINDOWS\System32\vtdisp.dll|VIA/S3 Graphics Co, Ltd.
BDGuard.SYS|C:\WINDOWS\system32\drivers\BDGuard.SYS|
SmartAVS.sys|C:\WINDOWS\system32\drivers\SmartAVS.sys|All-In-Smart [CWJ]
| [ --- 未知安全 SPI --- ]|
| [ --- 重要文件关联 --- ]|
| [ --- 闪电杀毒报告 --- ]|
| [ --- 重要安全状态 --- ]|
Windows Update相关状态|[启用]----您已经启用了 Windows Update 智能补丁升级 (状态安全)|
Win XP简单文件共享状态|[启用]----Windows XP 操作系统 简单共享功能已经启用 <存在危险>|
Windows NT系统文件保护|[启用]----Windows 系统已经成功[启动]了系统文件保护 (状态安全)|
终端服务(TermSrv) 信息|[启用]----TS 远程终端服务 ,监听端口为 TCP [ 3389 ] <注重安全>|
TCP/IP网络端口筛选状态|[禁用]----假如您"手动"设置网卡的TCP/IP端口过虑功能 <需要注重>|
启用CD-ROM光盘自动播放|[启用]----当CD-ROM光盘放入光驱中系统将自动播放光盘 <系统默认>|
Windows 系统IPC$空连接|[启用]----已经启用 Windows NT 远程共享命名管道IPC$ <建议禁用>|
Windows 系统ADMIN$共享|[禁用]----已经禁用了 Windows NT远程治理共享 Admin$ (状态安全)|
Windows 系统隐藏$ 共享|[禁用]----已经禁用了 Windows NT隐藏共享如 C$ D$ E$ (状态安全)