只需一步，快速开始
后使用快捷导航
玩游戏时就卡或直接掉线
该用户从未签到
马上注册，结交更多好友，享用更多功能，让你轻松玩转社区。
才可以下载或查看，没有帐号？
System Repair Engineer 2.8.4.1331
Smallfrogs ()
Windows XP Professional Service Pack 3 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
& & 所有的启动项目（包括注册表、启动文件夹、服务等）
& & 浏览器加载项
& & 正在运行的进程（包括进程模块信息）
& & 文件关联
& & Winsock 提供者
& & Autorun.inf
& & HOSTS 文件
& & 进程特权扫描
& & 计划任务
& & Windows 安全更新检查
& & API HOOK
& & 隐藏进程
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
& & &ctfmon.exe&&C:\WINDOWS\system32\ctfmon.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &load&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
& & &NvCplDaemon&&RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
& & &nwiz&&nwiz.exe /install&&&[]
& & &RTHDCPL&&RTHDCPL.EXE&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
& & &NvMediaCenter&&RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
& & &kxesc&&&C:\Program Files\Kingsoft\Kingsoft Antivirus\kxetray.exe& -autorun&&&[(Verified)Zhuhai&&Kingsoft Software Co.,Ltd]
& & &KSafeTray&&&C:\Program Files\KSafe\KSafeTray.exe& -autorun&&&[(Verified)Kingsoft Security Co.,Ltd]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &shell&&Explorer.exe&&&[(Verified)Microsoft Windows Component Publisher]
& & &Userinit&&C:\WINDOWS\system32\userinit.exe,&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
& & &AppInit_DLLs&&&&&[N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
& & &UIHost&&logonui.exe&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
& & &{AEB-11d0-97EE-00C04FD91972}&&shell32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
& & &PostBootReminder&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &CDBurn&&%SystemRoot%\system32\SHELL32.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &WebCheck&&%SystemRoot%\system32\webcheck.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &SysTray&&C:\WINDOWS\system32\stobject.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
& & &WinlogonNotify: crypt32chain&&crypt32.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
& & &WinlogonNotify: cryptnet&&cryptnet.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
& & &WinlogonNotify: cscdll&&cscdll.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
& & &WinlogonNotify: dimsntfy&&%SystemRoot%\System32\dimsntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
& & &WinlogonNotify: ScCertProp&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
& & &WinlogonNotify: Schedule&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
& & &WinlogonNotify: sclgntfy&&sclgntfy.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
& & &WinlogonNotify: SensLogn&&WlNotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
& & &WinlogonNotify: termsrv&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
& & &WinlogonNotify: wlballoon&&wlnotify.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
& & &{-A8BA-11D1-B96B-00A0C90312E1}&&%SystemRoot%\system32\browseui.dll&&&[(Verified)Microsoft Windows Component Publisher]
& & &{8C7461EF-2B13-11d2-BE35-0}&&%SystemRoot%\system32\browseui.dll&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
& & &SCRNSAVE.EXE&&C:\WINDOWS\system32\ssmypics.scr&&&[(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
& & &Alcmtr&&; ALCMTR.EXE&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
& & &AlcWzrd&&; ALCWZRD.EXE&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
& & &RTHDCPL&&; RTHDCPL.EXE&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
& & &SoundMan&&; SOUNDMAN.EXE&&&[(Verified)Microsoft Windows Hardware Compatibility Publisher]
==================================
启动文件夹
N/A
==================================
服务
[Google 更新服务 (gupdate) / gupdate][Stopped/Manual Start]
&&&&C:\Program Files\Google\Update\GoogleUpdate.exe& /svc&&Google Inc.&
[Google Software Updater / gusvc][Stopped/Manual Start]
&&&&C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe&&&Google&
[Help and Support / helpsvc][Stopped/Disabled]
&&&C:\WINDOWS\System32\svchost.exe -k netsvcs--&%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll&&N/A&
[Human Interface Device Access / HidServ][Stopped/Disabled]
&&&C:\WINDOWS\System32\svchost.exe -k netsvcs--&%SystemRoot%\System32\hidserv.dll&&N/A&
[Kingsoft Rescue Service / Kingsoft Rescue Service][Running/Auto Start]
&&&C:\Program Files\kingsoft\KSM\ksmsvc.exe&&&
[KSafe service / KSafeSvc][Running/Auto Start]
&&&&C:\Program Files\KSafe\KSafeSvc.exe& -svc&&Kingsoft Corporation&
[Kingsoft Core Service / kxescore][Running/Auto Start]
&&&&C:\Program Files\Kingsoft\Kingsoft Antivirus\kxescore.exe& /service kxescore&&Kingsoft Corporation&
[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
&&&&&(File is missing)&
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
&&&C:\WINDOWS\system32\nvsvc32.exe&&NVIDIA Corporation&
==================================
驱动程序
[Ambfilt / Ambfilt][Stopped/Manual Start]
&&&system32\drivers\Ambfilt.sys&&Creative&
[AMD Processor Driver / AmdK8][Running/System Start]
&&&system32\DRIVERS\AmdK8.sys&&Advanced Micro Devices&
[AMD Low Level Device Driver / AmdLLD][Running/Manual Start]
&&&system32\DRIVERS\AmdLLD.sys&&AMD, Inc.&
[apf001 / apf001][Stopped/Manual Start]
&&&\??\C:\WINDOWS\system32\apf001.sys&&N/A&
[BC / BC][Running/Boot Start]
&&&\SystemRoot\system32\Drivers\BC.sys&&Kingsoft Corporation&
[GamesGuardNet / GamesGuardNet][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\drivers\GamesGuardNet.dat&&GamesGuard&
[gdrv / gdrv][Stopped/Manual Start]
&&&\??\C:\WINDOWS\gdrv.sys&&Windows (R) 2000 DDK provider&
[Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start]
&&&system32\DRIVERS\HDAudBus.sys&&Windows (R) Server 2003 DDK provider&
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
&&&system32\drivers\RtkHDAud.sys&&Realtek Semiconductor Corp.&
[KAVBootC / KAVBootC][Running/Boot Start]
&&&\SystemRoot\system32\drivers\KAVBootC.sys&&Kingsoft Corporation&
[KDHacker / KDHacker][Running/System Start]
&&&\??\C:\Program Files\Kingsoft\Kingsoft Antivirus\security\kxescan\kdhacker.sys&&Kingsoft Corporation&
[kisknl / kisknl][Running/Auto Start]
&&&\??\C:\WINDOWS\system32\drivers\kisknl.sys&&Kingsoft Corporation&
[kmodurl / kmodurl][Running/System Start]
&&&\??\C:\Program Files\KSafe\kmodurl.sys&&Kingsoft Corporation&
[KSafeBootCheck / KSafeBootCheck][Stopped/Boot Start]
&&&\SystemRoot\system32\Drivers\ksafebc.sys&&N/A&
[ksapi / ksapi][Running/Manual Start]
&&&\??\C:\WINDOWS\system32\drivers\ksapi.sys&&Kingsoft Corporation&
[Monfilt / Monfilt][Stopped/Manual Start]
&&&system32\drivers\Monfilt.sys&&Creative Technology Ltd.&
[nv / nv][Running/Manual Start]
&&&system32\DRIVERS\nv4_mini.sys&&NVIDIA Corporation&
[NVIDIA nForce 10/100/1000 Mbps Ethernet&&/ NVENETFD][Running/Manual Start]
&&&system32\DRIVERS\NVENETFD.sys&&NVIDIA Corporation&
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
&&&system32\DRIVERS\nvnetbus.sys&&NVIDIA Corporation&
[AMD PCNET Compatable Adapter Driver / PCnet][Stopped/Manual Start]
&&&system32\DRIVERS\pcntpci5.sys&&AMD Inc.&
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
&&&system32\DRIVERS\ptilink.sys&&Parallel Technologies, Inc.&
[Secdrv / Secdrv][Stopped/Manual Start]
&&&system32\DRIVERS\secdrv.sys&&Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.&
[SATALink driver accelerator / SiFilter][Running/Boot Start]
&&&\SystemRoot\system32\drivers\SiWinAcc.sys&&Silicon Image, Inc.&
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
&&&system32\DRIVERS\tcpip.sys&&Microsoft Corporation&
==================================
浏览器加载项
[BaiduMusicCtrl Class]
&&{3CB-4ED8-A155-A42D00746B25} &C:\Program Files\Baidu\BaiduMusicCtrl\BaiduMusicCtrl.dll, (Signed) , Inc.&
[]
&&{0EA37B17-6B8B--F3A4AA69C27A} &, &
[Windows Media Player]
&&{22D6F312-B0F6-11D0-94AB-E95} &C:\WINDOWS\system32\wmpdxm.dll, (Signed) Microsoft Corporation&
[DHTML Edit Control Safe for Scripting for IE5]
&&{2D360201-FFF5-11D1-8D03-00A0C959BC0A} &C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, (Signed) Microsoft Corporation&
[BaiduMusicCtrl Class]
&&{3CB-4ED8-A155-A42D00746B25} &C:\Program Files\Baidu\BaiduMusicCtrl\BaiduMusicCtrl.dll, (Signed) , Inc.&
[Agent Class]
&&{-8FB2-4B3B-B29B-8B919B0EACCE} &C:\Program Files\Thunder Network\Thunder\BHO\ThunderAgent7.2.3.3254.dll, (Signed) 深圳市迅雷网络技术有限公司&
[QQPYChecker Class]
&&{-9DF7-45ef-88EF-F42C0EA33A43} &C:\Program Files\Tencent\QQPinyin\4.4.\QQImeChecker.dll, (Signed) Tencent&
[迅雷发行IE支持]
&&{5FFF24BC-DC02--A8E2C93FE407} &C:\Program Files\Thunder Network\Thunder\BHO\xlfxctrl1.0.1.64.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Windows Media Player]
&&{6BF52A52-394A-11D3-B153-00C04F79FAA6} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[Access UserInfo by Script]
&&{6EE9CD3E-A386-4DAE-DBF927AE} &C:\Program Files\Thunder Network\Thunder\BHO\UserAgent1.0.2.10.dll, (Signed) 深圳市迅雷网络技术有限公司&
[Microsoft Web 浏览器]
&&{A-11D0-A96B-00C04FD705A2} &C:\WINDOWS\system32\shdocvw.dll, (Signed) Microsoft Corporation&
[]
&&{889D2FEB-98-1DD2C5261283} &, &
[OFrameObject Class]
&&{73-482E-B13C-776C048EC890} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.2).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[VersionDetector Class]
&&{9EFFB1-AEF6-B2A3FE8BFE9B} &C:\Program Files\Common Files\Thunder Network\KanKan\vd.1.1.0.32.(88).dll, (Signed) ShenZhen Thunder Networking Technologies,Ltd.&
[APlayer Control]
&&{A1-4B9D-91FC-B9C461DBE9DD} &C:\Program Files\Common Files\Thunder Network\APlayer\APlayer_001.dll, (Signed) ShenZhen Thunder Networking Technologies, LTD&
[DapCtrl Class]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} &C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.2).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[LiveDapCtrl Class]
&&{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F9} &C:\Program Files\Common Files\Thunder Network\KanKan\LiveDapCtrl.1.0.0.9.(193).dll, (Signed) ShenZhen Thunder Networking Technologies Ltd.&
[]
&&{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} &, &
[SearchAssistantOC]
&&{B45FF030--85DE-00C04FA35C89} &%SystemRoot%\system32\shdocvw.dll, (Signed) N/A&
[C0A-E5D5-4501-CE15EDF6819D Class]
&&{C0A-E5D5-4501-CE15EDF6819D} &, &
[AUDIO__MP3 Moniker Class]
&&{CD3AFA76-B84F-48F0-9393-7EDC} &C:\WINDOWS\system32\wmp.dll, (Signed) Microsoft Corporation&
[Shockwave Flash Object]
&&{D27CDB6E-AE6D-11CF-96B8-} &C:\WINDOWS\system32\Macromed\Flash\Flash11g.ocx, (Signed) Adobe Systems, Inc.&
[xoliimpl Class]
&&{DD5BF6D1--9DFA-5C343CAF178E} &C:\WINDOWS\xinstaller.dll, (Signed) 深圳市迅雷技术有限公司&
[PlayerCtrl Class]
&&{E05BC2A3-9A46-4A32-80C9-023A473F5B23} &D:\backup\QQ\Plugin\Com.Tencent.QQMusic\bin\QQMusic\QzoneMusic.dll, (Signed) Tencent&
[]
&&{E68--484C3F4C47D7} &C:\Program Files\Common Files\Thunder Network\APlayer\Codecs\xlvsource.ax, (Signed) &
[E5A-EAC2D11C53 Class]
&&{E5A-EAC2D11C53} &, &
[]
&&{F3E70CEA-956E-49CC-B444-73AFE593AD7F} &, &
[使用迅雷看看播放器播放]
&&&C:\Documents and Settings\All Users\Application Data\Thunder Network\XMP4\core\program\XmpIEMenu.htm, N/A&
==================================
正在运行的进程
[PID: 616][\SystemRoot\System32\smss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 744][\??\C:\WINDOWS\system32\csrss.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
[PID: 800][\??\C:\WINDOWS\system32\winlogon.exe]&&[Microsoft Corporation, 5.1. (xpsp.3)]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 892][C:\WINDOWS\system32\services.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp_sp3_gdr.4)]
[PID: 904][C:\WINDOWS\system32\lsass.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.3)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1092][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1156][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll]&&[Thunder Networking Technologies,LTD, 1, 0,&&2,&&25]
& & [C:\WINDOWS\system32\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\system32\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
[PID: 1252][C:\WINDOWS\System32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll]&&[Thunder Networking Technologies,LTD, 1, 0,&&2,&&25]
& & [C:\WINDOWS\System32\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\System32\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
[PID: 1344][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll]&&[Thunder Networking Technologies,LTD, 1, 0,&&2,&&25]
& & [C:\WINDOWS\system32\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\system32\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
[PID: 1412][C:\WINDOWS\system32\svchost.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.1)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 1796][C:\WINDOWS\Explorer.EXE]&&[(Verified) Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\Common Files\Thunder Network\KanKan\xappex.1.1.1.38.(140).dll]&&[深圳市迅雷网络技术有限公司, 1.1.1.38]
& & [C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\Pusher\xappdrv.1.0.0.11.dll]&&[, 1, 0, 0, 11]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kwsui.dll]&&[Kingsoft Corporation, ,83]
& & [C:\Program Files\KSafe\ksfmon.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,83]
& & [C:\WINDOWS\system32\nvcpl.dll]&&[NVIDIA Corporation, 6.14.11.0117]
& & [C:\WINDOWS\system32\NVRSZHC.DLL]&&[NVIDIA Corporation, 6.14.11.0117]
& & [C:\WINDOWS\system32\nvapi.dll]&&[NVIDIA Corporation, 6.14.11.0117]
& & [C:\WINDOWS\system32\nvshell.dll]&&[, ]
& & [C:\Program Files\WinRAR\rarext.dll]&&[, ]
& & [D:\Wopti\WoptiEncryptModule.dll]&&[Wopti, 1.6.10.816]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kavmenu.dll]&&[Kingsoft Corporation, ,15]
& & [C:\Program Files\HaoZip\HaoZipExt.dll]&&[好压软件工作室, 2.6.1.8450]
[PID: 1816][C:\Program Files\kingsoft\KSM\ksmsvc.exe]&&[, ,2082]
& & [C:\Program Files\kingsoft\KSM\kdump.dll]&&[Kingsoft Corporation, ,1453]
& & [C:\Program Files\kingsoft\KSM\kxestat.dll]&&[Kingsoft Corporation, ,986]
& & [C:\Program Files\kingsoft\KSM\ksapi.dll]&&[Kingsoft Corporation, ,73]
& & [C:\Program Files\kingsoft\KSM\ksinst.dll]&&[Kingsoft Corporation, ,2618]
& & [C:\Program Files\kingsoft\KSM\kxebase.dll]&&[Kingsoft Corporation, ,309]
& & [C:\Program Files\kingsoft\KSM\scom.dll]&&[Kingsoft Corporation, ,309]
& & [C:\Program Files\kingsoft\KSM\kxecore\kxelog.dll]&&[Kingsoft Corporation, ,309]
& & [C:\Program Files\kingsoft\KSM\kxecore\kxecore.dll]&&[Kingsoft Corporation, ,402]
& & [C:\Program Files\kingsoft\KSM\kxecore\kxestat.dll]&&[Kingsoft Corporation, ,986]
& & [C:\Program Files\kingsoft\KSM\ksmcorex.dll]&&[Kingsoft Corporation, ,2690]
& & [C:\Program Files\kingsoft\KSM\ksmbrfix.dll]&&[Kingsoft Corporation, ,1403]
& & [C:\Program Files\kingsoft\KSM\sqlite.dll]&&[N/A, ]
& & [C:\Program Files\kingsoft\KSM\ksbwsspx.dll]&&[Kingsoft Corporation, ,2374]
& & [C:\Program Files\kingsoft\KSM\khandler.dll]&&[Kingsoft Corporation, ,2036]
& & [C:\Program Files\kingsoft\KSM\kseescan.dll]&&[Kingsoft Corporation, ,1967]
& & [C:\Program Files\kingsoft\KSM\ksesscan.dll]&&[Kingsoft Corporation, ,1967]
& & [C:\Program Files\kingsoft\KSM\kseutil.dll]&&[Kingsoft Corporation, ,1960]
& & [C:\Program Files\kingsoft\KSM\wfs.dll]&&[Kingsoft Corporation, ,1847]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\kingsoft\KSM\kae\kaecore.dat]&&[Kingsoft Corporation, ,1847]
& & [C:\Program Files\kingsoft\KSM\ksbwdet2.dll]&&[Kingsoft Corporation, ,2707]
& & [C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll]&&[Thunder Networking Technologies,LTD, 1, 0,&&2,&&25]
& & [C:\WINDOWS\system32\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\system32\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\Program Files\kingsoft\KSM\kavifr.dll]&&[Kingsoft Corporation, ,74]
[PID: 1944][C:\Program Files\KSafe\KSafeSvc.exe]&&[Kingsoft Corporation, 3.3.1.1823]
& & [C:\Program Files\KSafe\json.dll]&&[N/A, ]
& & [C:\Program Files\KSafe\kdump.dll]&&[Kingsoft Corporation, ,2002]
& & [C:\Program Files\KSafe\kxebase.dll]&&[Kingsoft Corporation, ,402]
& & [C:\Program Files\KSafe\scom.dll]&&[Kingsoft Corporation, ,402]
& & [C:\Program Files\KSafe\kxecore\kxecore.dll]&&[Kingsoft Corporation, ,402]
& & [C:\Program Files\KSafe\kse\ksbcommsp.dll]&&[Kingsoft Corporation, ,2126]
& & [C:\Program Files\KSafe\kexectrl.dll]&&[Kingsoft Corporation, ,1422]
& & [C:\Program Files\KSafe\kwssp.dll]&&[Kingsoft Corporation, .1822]
& & [C:\Program Files\KSafe\netstat.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\KSafe\fwproxy.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\KSafe\kse\ksecansp.dll]&&[Kingsoft Corporation, ,1878]
& & [C:\Program Files\KSafe\kse\ksecorex.dll]&&[Kingsoft Corporation, ,1751]
& & [C:\Program Files\KSafe\KEng\kae\kaecore.dat]&&[Kingsoft Corporation, ,1752]
& & [C:\Program Files\KSafe\kse\wfs.dll]&&[Kingsoft Corporation, ,1070]
& & [C:\Program Files\KSafe\kse\sqlite.dll]&&[Kingsoft Corporation, ,781]
& & [C:\Program Files\KSafe\kse\ksbwdet2.dll]&&[Kingsoft Corporation, ,2170]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\KSafe\KEng\kae\karchive.dat]&&[Kingsoft Corporation, ,1454]
& & [C:\Program Files\KSafe\KEng\kae\kaearcha.dat]&&[Kingsoft Corporation, ,1454]
& & [C:\Program Files\KSafe\KEng\kae\kaeolea.dat]&&[Kingsoft Corporation, ,1454]
& & [C:\Program Files\KSafe\KEng\kae\kaearchb.dat]&&[Kingsoft Corporation, ,1540]
& & [C:\Program Files\KSafe\kse\BKReScan.dll]&&[Kingsoft Corporation, ,1917]
& & [C:\Program Files\KSafe\ksscore.dll]&&[Kingsoft Corporation, ,4]
& & [C:\Program Files\KSafe\khandler.dll]&&[Kingsoft Corporation, ,2036]
& & [C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll]&&[Thunder Networking Technologies,LTD, 1, 0,&&2,&&25]
& & [C:\WINDOWS\system32\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\system32\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\Program Files\KSafe\KEng\kae\kaecoref.dat]&&[Kingsoft Corporation, ,1454]
& & [C:\Program Files\KSafe\KEng\kae\kaecorem.dat]&&[Kingsoft Corporation, ,1328]
& & [C:\Program Files\KSafe\KEng\kae\kaecorea.dat]&&[Kingsoft Corporation, ,1454]
& & [C:\Program Files\KSafe\KEng\kae\kaecoreo.dat]&&[Kingsoft Corporation, ,1757]
& & [C:\Program Files\KSafe\khistory.dll]&&[Kingsoft Corporation, ,2224]
& & [C:\Program Files\KSafe\ksreng3.dll]&&[Kingsoft Corporation, ,2174]
& & [C:\Program Files\KSafe\kscanner.dll]&&[Kingsoft Corporation, ,2212]
& & [C:\Program Files\KSafe\kplugeng.dll]&&[Kingsoft Corporation, 3.3.1.1834]
[PID: 568][C:\WINDOWS\system32\spoolsv.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp_sp3_gdr.6)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 860][C:\WINDOWS\RTHDCPL.EXE]&&[Realtek Semiconductor Corp., 2.1.4.9]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kwsui.dll]&&[Kingsoft Corporation, ,83]
& & [C:\Program Files\KSafe\ksfmon.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,83]
[PID: 952][C:\WINDOWS\system32\RUNDLL32.EXE]&&[Microsoft Corporation, 5.1. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\WINDOWS\system32\NvMcTray.dll]&&[NVIDIA Corporation, 6.14.11.0117]
& & [C:\WINDOWS\system32\nvapi.dll]&&[NVIDIA Corporation, 6.14.11.0117]
& & [C:\WINDOWS\system32\NVRSZHC.DLL]&&[NVIDIA Corporation, 6.14.11.0117]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kwsui.dll]&&[Kingsoft Corporation, ,83]
[PID: 1328][C:\Program Files\KSafe\KSafeTray.exe]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\KSafe\json.dll]&&[N/A, ]
& & [C:\WINDOWS\system32\msi.dll]&&[Microsoft Corporation, 4.5.]
& & [C:\Program Files\KSafe\ksfmon.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\KSafe\kdump.dll]&&[Kingsoft Corporation, ,2002]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\KSafe\ksafedb.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\KSafe\kvip\kvipsvc.dll]&&[Kingsoft Corporation, ,203]
& & [C:\Program Files\KSafe\kvip\kvip.dll]&&[Kingsoft Corporation, ,209]
& & [C:\Program Files\KSafe\khistory.dll]&&[Kingsoft Corporation, ,2224]
& & [C:\Program Files\KSafe\kwsctrl.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\KSafe\kse\bkrescan.dll]&&[Kingsoft Corporation, ,1917]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kwsui.dll]&&[Kingsoft Corporation, ,83]
& & [C:\Program Files\KSafe\kse\sqlite.dll]&&[Kingsoft Corporation, ,781]
& & [C:\Program Files\KSafe\krunopt.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\KSafe\ksafeup.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll]&&[Thunder Networking Technologies,LTD, 1, 0,&&2,&&25]
& & [C:\WINDOWS\system32\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\system32\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\Program Files\KSafe\zlib1.dll]&&[, 1.2.3]
& & [C:\Program Files\KSafe\KEng\ksignup.dll]&&[Kingsoft Corporation, 1.1.0.1822]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,83]
& & [C:\Program Files\KSafe\ksafevul.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\KSafe\KEng\KSGMerge.DLL]&&[Kingsoft Corporation, ,1656]
& & [C:\Program Files\KSafe\kvip\kvipcore.dll]&&[Kingsoft Corporation, ,209]
& & [C:\Program Files\KSafe\kavmgr.dll]&&[Kingsoft Corporation, 3.3.1.1822]
[PID: 1384][C:\WINDOWS\system32\ctfmon.exe]&&[(Verified) Microsoft Corporation, 5.1. (xpsp.5)]
& & [C:\WINDOWS\system32\UxTheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kwsui.dll]&&[Kingsoft Corporation, ,83]
[PID: 2624][C:\WINDOWS\system32\nvsvc32.exe]&&[NVIDIA Corporation, 6.14.11.0117]
& & [C:\WINDOWS\system32\nvapi.dll]&&[NVIDIA Corporation, 6.14.11.0117]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
[PID: 2172][D:\盛大传奇\YMQSLEGIYPF.dat]&&[GamesGuard, 1.0.6.1]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\KSafe\ksfmon.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kwsui.dll]&&[Kingsoft Corporation, ,83]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,83]
& & [C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll]&&[Thunder Networking Technologies,LTD, 1, 0,&&2,&&25]
& & [C:\WINDOWS\system32\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\system32\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
[PID: 3744][D:\盛大传奇\新建文件夹\SREngLdr.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
[PID: 536][D:\盛大传奇\新建文件夹\SRE983d474e.EXE]&&[Smallfrogs Studio, 2.8.4.1331]
& & [C:\WINDOWS\system32\uxtheme.dll]&&[Microsoft Corporation, 6.00. (xpsp.5)]
& & [C:\Program Files\KSafe\ksfmon.dll]&&[Kingsoft Corporation, 3.3.1.1822]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kwsui.dll]&&[Kingsoft Corporation, ,83]
& & [C:\Program Files\Kingsoft\Kingsoft Antivirus\kswebshield.dll]&&[Kingsoft Corporation, ,83]
& & [C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll]&&[Thunder Networking Technologies,LTD, 1, 0,&&2,&&25]
& & [C:\WINDOWS\system32\MSVCP71.dll]&&[Microsoft Corporation, 7.10.6030.0]
& & [C:\WINDOWS\system32\MSVCR71.dll]&&[Microsoft Corporation, 7.10.6030.0]
==================================
文件关联
.TXT&&Error. [C:\WINDOWS\notepad.exe %1]
.EXE&&OK. [&%1& %*]
.COM&&OK. [&%1& %*]
.PIF&&OK. [&%1& %*]
.REG&&OK. [regedit.exe &%1&]
.BAT&&OK. [&%1& %*]
.SCR&&OK. [&%1& /S]
.CHM&&Error. [&hh.exe& %1]
.HLP&&OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI&&Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF&&OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS&&OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.JS& &OK. [%SystemRoot%\System32\WScript.exe &%1& %*]
.LNK&&OK. [{0-}]
==================================
Winsock 提供者
XunLei Net Monitor
& & C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll(Thunder Networking Technologies,LTD, net monitor lsp)
XunLei Net Monitor TCP/IP [MSAFD Tcpip [TCP/IP]]
& & C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll(Thunder Networking Technologies,LTD, net monitor lsp)
XunLei Net Monitor UDP/IP [MSAFD Tcpip [UDP/IP]]
& & C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll(Thunder Networking Technologies,LTD, net monitor lsp)
XunLei Net Monitor RAW/IP [MSAFD Tcpip [RAW/IP]]
& & C:\Program Files\Common Files\Thunder Network\NetMon\net_monitor1.0.2.25.dll(Thunder Networking Technologies,LTD, net monitor lsp)
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&www.szbaina.net
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&:99
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.lyjc.net
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&www.jdds.net
188.165.59.187&&
188.165.59.187&&www.sxyhzy.net
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.77cqw.in
188.165.59.187&&
188.165.59.187&&.cn
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.7zzz.net
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.sf1234.cc
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&www.hookdlq.net
188.165.59.187&&
188.165.59.187&&
188.165.59.187&&
==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 800, C:\WINDOWS\SYSTEM32\WINLOGON.EXE]
==================================
计划任务
[已启用] KsafeDelay.job
& && &&&C:\Program Files\KSafe\KSafeTray.exe -delayruncheck
[已禁用] GoogleUpdateTaskMachineUA.job
& && &&&C:\Program Files\Google\Update\GoogleUpdate.exe
[已禁用] GoogleUpdateTaskMachineCore.job
& && &&&C:\Program Files\Google\Update\GoogleUpdate.exe
==================================
Windows 安全更新检查
Microsoft .NET Framework 版本 1.1，简体中文版
KB925850,&&Windows Media Player 11
KB940157,&&用于 Windows XP 的 Windows 搜索 4.0 (KB940157)
KB902344,&&启用了 WMDRM 的 Media Player 更新程序 (KB902344)
KB909520,&&Microsoft 基本智能卡加密服务提供程序包： x86 (KB909520)
KB951847,&&Microsoft .NET Framework 3.5 Service Pack 1 和 .NET Framework 3.5 Family Update (KB951847) x86
KB980373,&&Microsoft Office Outlook 2003 安全更新 (KB980373) MS10-045
KB981716,&&Microsoft Office Access 2003 帮助更新 (KB981716) MS10-044
KB982665,&&Windows XP 安全更新程序 (KB982665) MS10-055
KB2293428,&&Microsoft Office Outlook 2003 安全更新 (KB2293428) MS10-064
KB2293428,&&Windows Live 软件包
KB2449798,&&Microsoft Office Outlook 2003 更新 (KB2449798)
KB2510581,&&Windows XP 安全更新程序 (KB2510581) MS11-031
KB2539581,&&Microsoft Office 2003 更新 (KB2539581)
KB2501584,&&Microsoft Office File Validation Add-in
KB2493523,&&Microsoft Office 2003 安全更新 (KB2493523) MS11-055
KB982670,&&用于 Windows XP x86 的 Microsoft .NET Framework 4 Client Profile (KB982670)
KB2596520,&&Outlook 2003 垃圾邮件筛选器更新 (KB2596520)
KB2617986,&&Microsoft Silverlight (KB2617986)
KB2641690,&&Windows XP 更新程序 (KB2641690)
KB2553084,&&Microsoft Office Publisher 2003 安全更新 (KB2553084) MS11-091
KB2633952,&&Windows XP 更新程序 (KB2633952)
KB931125,&&Windows XP 的根证书更新 [2012 年 2 月] (KB931125)
KB2621440,&&Windows XP 安全更新程序 (KB2621440) MS12-020
KB2641653,&&Windows XP 安全更新程序 (KB2641653) MS12-018
KB2647518,&&用于 Windows XP 的 ActiveX Killbit 更新汇总 (KB2647518)
KB890830,&&Windows 恶意软件删除工具 - 2012 年 3 月 (KB890830)
KB2598246,&&Outlook 2003 垃圾邮件筛选器更新 (KB2598246)
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
日志没看出什么。是在什么操作以后出现这种情况的？
本帖最后由 中国毒客 于
22:13 编辑
首先你看一下&&网络是否稳定 是否在玩游戏时开启了其他什么程序
网络配置和状态&&用什么上网&&路由还是直接用猫上网&&路由上网&&网络容易不稳定&&
你开启了GOOLGE的一些服务&&可以在运行里输入services.msc 在弹出来的服务里找到
Google 更新服务 (gupdate)
C:\Program Files\Google\Update\GoogleUpdate.exe
它的开启也影响网速
还有在玩游戏时&&金山产品也会占用网络资源
你在玩游戏时&&将金山&&调成 免打扰模式
这些都不太重要.只能说是客观原因，对于楼主所提供的问题基本没有解决帮助。&
中国毒客 发表于
首先你看一下&&网络是否稳定 是否在玩游戏时开启了其他什么程序
网络配置和状态&&用什么上网&&路由还是直接 ...
这些都不太重要.只能说是客观原因，对于楼主所提供的问题基本没有解决帮助。
那能说说你们的看法和解决方案？&
tanyunlin2003 发表于
这些都不太重要.只能说是客观原因，对于楼主所提供的问题基本没有解决帮助。
受教了&&那能说说你们的看法和解决方案？
188.165.59.187 LZ为什么在host里绑定一个法国的IP？
麻烦还是请楼主提供以下 游戏情况 以及使用时开了什么软件等 及网络提供商和网速。
逛了这许久，何不进去瞧瞧？
关注我们：