HelixLog.txt什么文件呀???_求婚

举报 HelixLogtxt

帖子标题:

举报 HelixLogtxt

帖子内容:

现象:没有卸载项/无法卸载,

历史操作:不知道什么时候就安装了。C:\\HelixLogtxt

备注:

我的诊断报告:

各位高手：

非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！

该诊断报告由360安全卫士提供 http://www360safecom

诊断时间: 2007-01-20 12:26:52

诊断平台: Microsoft Windows XP Service Pack 2

IE版本: Internet Explorer V6029002180 Build:629002180

计算机物理内存:1015MB - 当前可用内存:485MB

100 - 未知 - Process: KWSProdexe [Workstation Tray GUI Component] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\kwsprodexe

100 - 未知 - Process: BitCometexe [BitComet - a BitTorrent Client] - G:\Program Files\BitComet\BitCometexe

100 - 未知 - Process: emuleexe [eMule] - G:\Program Files\eMule\emuleexe

100 - 未知 - Process: Up2Dateexe [KeepUp2date Component] - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\Up2Dateexe

100 - 未知 - Process: WinAVIexe [] - C:\Program Files\WinAVIVideoConverter\WinAVIexe

O1 - 未知 - Host: 14024162 nt_server2

O8 - 未知 - Extra context menu item: &使用快车(FlashGet)下载 - D:\tool\FlashGet\jc_linkhtm

O8 - 未知 - Extra context menu item: &使用快车(FlashGet)下载全部链接 - D:\tool\FlashGet\jc_allhtm

O8 - 未知 - Extra context menu item: &使用暴风下载器下载 - D:\tool\Ringz Studio\Storm Downloader\geturlhtm

O8 - 未知 - Extra context menu item: 上传到QQ网络硬盘 - D:\tool\Tencent\QQ\AddToNetDiskhtm

O8 - 未知 - Extra context menu item: 导出到 Microsoft Excel(&x) - res://C:\PROGRA~1\MICROS~2\Office10\EXCELEXE/3000

O9 - 未知 - Extra button: Sun Java 控制台(HKLM) - C:\Program Files\Java\jre150_01\bin\npjpi150_01dll

O9 - 未知 - Extra button: &FlashGet(HKLM) - D:\tool\FlashGet\flashgetexe

O11 - 未知 - Options Group: Java (Sun)

O16 - 未知 - DPF: {15DDE989-CD45-4561-BF99-D22C0D5C2B85} (新浪ViVi收藏夹) - http://vivisinacomcn/control/vivicab

O16 - 未知 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://gomicrosoftcom/fwlink/linkid=39204

O16 - 未知 - DPF: {281174BA-C918-4B14-96B4-DEEBE9B0DF45} (TaxControlX Control) - http://140241666/chinataxskskjdk/common/TaxControlXcab

O16 - 未知 - DPF: {799BB2EC-572A-42A9-84AD-112806F4F551} (Imweb Control) - http://activexdownparancom/paranactivex/data/imwebcab

O16 - 未知 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} (Java Plug-in 150_01) - http://javasuncom/update/150/jinstall-1_5_0_01-windows-i586cab

O23 - 未知 - Service: Applog [启用对应用程序错误处理的支持。无法终止此服务。] - C:\WINDOWS\system32\applog\netuser32dll - (running)

O23 - 未知 - Service: AtWork [启用 HTTP 安全通讯管理服务，保护 Windows 的网络程序安全运行。无法终止此服务。] - C:\WINDOWS\system32\hxftddll - (running)

O23 - 未知 - Service: dmserver [监测和监视新硬盘驱动器并向逻辑磁盘管理器管理服务发送卷的信息以便配置。如果此服务被终止，动态磁盘状态和配置信息会过时。如果此服务被禁用，任何依赖它的服务将无法启动。] - C:\WINDOWS\System32\seplbglld1l - (not running)

O23 - 未知 - Service: epcd [管理并控制RPC服务数据库。] - C:\WINDOWS\system32\epcdexe - (running)

O23 - 未知 - Service: KLBLMain [卡巴斯基反病毒windows工作站为计算机提供了反病毒功能] - "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\kavmmexe" -run bl -n Workstation -v 5000 -ttsr 10000000 - (running)

O23 - 未知 - Service: OracleOraHome81ClientCache [OracleOraHome81ClientCache] - c:\oracle\ora81\BIN\ONRSDEXE - (not running)

O23 - 未知 - Service: SoSCAR [提供传输协议的数据安全保护机制，有效维护数据传输中的安全及完整。] - C:\WINDOWS\SYSTEM32\RUNDLL32EXE C:\WINDOWS\SYSTEM32\WBEM\ERTIQDLL,Export 1087 - (not running)

O23 - 未知 - Service: SYBBCK_PRINCE_BS [Sybase BCKServer _ PRINCE_BS] - C:\SYBASE\bin\bcksrvrexe -SPRINCE_BS -R - (not running)

O23 - 未知 - Service: SYBHIS_PRINCE_HS [Sybase HISServer_PRINCE_HS] - C:\SYBASE\bin\histsrvrexe -SPRINCE_HS -C - (not running)

O23 - 未知 - Service: SYBMON_PRINCE_MS [Sybase MONServer _ PRINCE_MS] - C:\SYBASE\bin\monsrvrexe -MPRINCE_MS -C - (not running)

O23 - 未知 - Service: SYBSQL_PRINCE [Sybase SQLServer _ PRINCE] - C:\SYBASE\bin\sqlsrvrexe -sPRINCE -C - (not running)

O23 - 未知 - Service: WebCliant [使基于 Windows 的程序能创建、访问和修改基于 Internet 的文件。如果此服务被终止，将会失去这些功能。] - C:\WINDOWS\svchostexe - (not running)

O23 - 未知 - Service: Win32DDS [Provides system and desktop level support to the display driver] - C:\WINDOWS\system32\\rundll32exe windds32dll,input - (not running)

O23 - 未知 - Service: WinDHCPsvc [为远程计算机注册并更新 IP 地址。] - C:\WINDOWS\system32\\rundll32exe windhcpocx,input - (not running)

=======================================

100 - 安全 - Process: smssexe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smssexe

100 - 安全 - Process: csrssexe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrssexe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base

100 - 安全 - Process: winlogonexe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogonexe

100 - 安全 - Process: servicesexe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\servicesexe

100 - 安全 - Process: lsassexe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsassexe

100 - 安全 - Process: svchostexe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch

100 - 安全 - Process: svchostexe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss

100 - 安全 - Process: svchostexe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchostexe -k netsvcs

100 - 安全 - Process: svchostexe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchostexe -k NetworkService

100 - 安全 - Process: svchostexe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchostexe -k LocalService

100 - 安全 - Process: spoolsvexe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsvexe

100 - 安全 - Process: scardsvrexe [对插入在计算机智能卡阅读器中的智能卡进行管理和访问控制。] - C:\WINDOWS\System32\SCardSvrexe

100 - 安全 - Process: svchostexe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchostexe -k netsvcs

100 - 安全 - Process: IEXPLOREEXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\IEXPLOREEXE

100 - 安全 - Process: wdfmgrexe [windows media player播放器相关程序。] - C:\WINDOWS\system32\wdfmgrexe

100 - 安全 - Process: algexe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\algexe

100 - 安全 - Process: explorerexe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\ExplorerEXE

100 - 安全 - Process: hkcmdexe [intel显卡驱动相关软件。] - C:\WINDOWS\system32\hkcmdexe

100 - 安全 - Process: igfxpersexe [intel公共用户界面模块。] - C:\WINDOWS\system32\igfxpersexe

100 - 安全 - Process: RTHDCPLEXE [瑞昱出品的声卡相关程序。] - C:\WINDOWS\RTHDCPLEXE

100 - 安全 - Process: 360trayexe [360安全卫士实时保护模块] - C:\Program Files\360safe\safemon\360trayexe

100 - 安全 - Process: ctfmonexe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmonexe

100 - 安全 - Process: wuaucltexe [windows操作系统后台程序，用于系统升级。] - C:\WINDOWS\system32\wuaucltexe

100 - 安全 - Process: 360Safeexe [360安全卫士相关程序。] - C:\Program Files\360safe\360safeexe

100 - 安全 - Process: IEXPLOREEXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexploreexe

R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blankhtm

R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blankhtm

O2 - 安全 - BHO: (新浪ViVi收藏夹) - [新浪ViVi工具条相关文件。] - {15DDE989-CD45-4561-BF99-D22C0D5C2B85} - C:\WINDOWS\DOWNLO~1\vivimindll

O3 - 安全 - Toolbar: (新浪ViVi收藏夹) - [新浪ViVi工具条相关文件。] - {15DDE989-CD45-4561-BF99-D22C0D5C2B85} - C:\WINDOWS\DOWNLO~1\vivimindll

O4 - 安全 - HKLM\\Run: [IMJPMIG81] [微软Microsoft输入法编辑器程序。] "C:\WINDOWS\IME\imjp8_1\IMJPMIGEXE" /Spoil /RemAdvDef /Migration32

O4 - 安全 - HKLM\\Run: [PHIME2002ASync] [输入法软件相关程序。] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETPEXE /SYNC

O4 - 安全 - HKLM\\Run: [PHIME2002A] [输入法软件相关程序。] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETPEXE /IMEName

O4 - 安全 - HKLM\\Run: [IgfxTray] [是Intel显卡配置和诊断程序，会同Intel 810芯片组的集成显卡安装。] C:\WINDOWS\system32\igfxtrayexe

O4 - 安全 - HKLM\\Run: [HotKeysCmds] [是Intel显示卡相关程序，用于配置和诊断相关设备。] C:\WINDOWS\system32\hkcmdexe

O4 - 安全 - HKLM\\Run: [Persistence] [inter用户界面模块程序。] C:\WINDOWS\system32\igfxpersexe

O4 - 安全 - HKLM\\Run: [RTHDCPL] [realtek声卡特性设置软件相关程序。] RTHDCPLEXE

O4 - 安全 - HKLM\\Run: [Alcmtr] [一款声卡相关程序。] ALCMTREXE

O4 - 安全 - HKLM\\Run: [NeroFilterCheck] [nero cd/dvd刻录软件。] C:\WINDOWS\system32\NeroCheckexe

O4 - 安全 - HKLM\\Run: [StormCodec_Helper] [是暴风影音的插件。] "C:\Program Files\Ringz Studio\Storm Codec\StormSetexe" /S /opti

O4 - 安全 - HKLM\\Run: [IMSCMIG40W] [微软拼音输入法相关文件。] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40W\IMSCMIGEXE /SetPreload /Log

O4 - 安全 - HKLM\\Run: [KAV50] [卡巴斯基杀毒软件。] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\kwsprodexe" -run -n Workstation -v 5000 -chkss

O4 - 安全 - HKLM\\Run: [360Safetray] [360安全卫士实时保护模块。] C:\Program Files\360safe\safemon\360trayexe

O4 - 安全 - HKCU\\Run: [ctfmonexe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmonexe

O4 - 安全 - Startup folder: [Microsoft Officelnk] [是offfice的一个快捷方式。 ] C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Officelnk

O8 - 安全 - Extra context menu item: 使用影音传送带下载 - D:\tool\Xi\NetTransport 2\NTAddLinkhtml

O8 - 安全 - Extra context menu item: 使用影音传送带下载全部链接 - D:\tool\Xi\NetTransport 2\NTAddListhtml

O9 - 安全 - Extra button: Windows Messenger(HKLM) - C:\Program Files\Messenger\msmsgsexe

O16 - 安全 - DPF: 无效的CLSID：{00000161-9980-0010-8000-00AA00389B71} ({00000161-9980-0010-8000-00AA00389B71}) - http://codecsmicrosoftcom/codecs/i386/msaudcab

O16 - 安全 - DPF: 无效的CLSID：{3334504D-9980-0010-8000-00AA00389B71} ({3334504D-9980-0010-8000-00AA00389B71}) - http://downloadmicrosoftcom/download/0/C/8/0C8EDFAB-30BC-4792-898E-2DABE27B2C4D/mp43dmoCAB

O16 - 安全 - DPF: 无效的CLSID：{33564D57-9980-0010-8000-00AA00389B71} ({33564D57-9980-0010-8000-00AA00389B71}) - http://downloadmicrosoftcom/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmocab

O16 - 安全 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office升级工具) - http://officemicrosoftcom/officeupdate/content/opuc3cab

O16 - 安全 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (Windows升级工具V5) - http://updatemicrosoftcom/windowsupdate/v6/V5Controls/en/x86/client/wuweb_sitecab1132622952765

O16 - 安全 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in) - http://javasuncom/update/150/jinstall-1_5_0_01-windows-i586cab

O23 - 安全 - Service: Macromedia Licensing Service [是macromedia公司网页三剑客软件的注册程序。] - "C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensingexe" - (not running)

=======================================

O40 - svchostexe - Microsoft Corporation - c:\windows\system32\hxftddll - szdj - 65bb0c1337fdc68ea84511f8284af346

O40 - svchostexe - Oracle Corporation - c:\oracle\ora81\bin\ocidll - Oracle Call Interface - a7b41fe90cf7bd1678e8d2ef294e310b

O40 - svchostexe - - c:\windows\system32\applog\netuser32dll - - 4cf5d8f6627418c19abc982cb2133146

O40 - ExplorerEXE - - C:\WINDOWS\system32\windds32dll - - 4258c91d62f309fb4313e0b68a2c50d1

O40 - ExplorerEXE - - C:\Program Files\Common Files\Microsoft Shared\MSINFO\38E540E7dll - - 5651653fb011a4b781b5fe33dc2125f2

O40 - ExplorerEXE - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExtdll - Nero Digital Shell Extension - 26dba338263661fe10808a749e3ac90b

O40 - ExplorerEXE - Microsoft Corporation - C:\Program Files\Common Files\Ahead\Lib\MFC71DLL - MFCDLL Shared Library - Retail Version - f35a584e947a5b401feb0fe01db4a0d7

O40 - ExplorerEXE - Microsoft Corporation - C:\Program Files\Common Files\Ahead\Lib\MSVCR71dll - Microsoft C Runtime Library - 86f1895ae8c5e8b17d99ece768a70732

O40 - ExplorerEXE - Microsoft Corporation - C:\Program Files\Common Files\Ahead\Lib\MSVCP71dll - Microsoft C++ Runtime Library - 561fa2abb31dfa8fab762145f81667c2

O40 - ExplorerEXE - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShelldll - Nero BackItUp Application - e9326059c9d45700654ea5f31d991624

O40 - ExplorerEXE - Microsoft Corporation - C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71UDLL - MFCDLL Shared Library - Retail Version - 7b93c623333f121dc9e689ccb1b7a733

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\ShellExdll - Kaspersky Labs Shell Extension - c7430b048ef1f737d8fe8a4e1b088ae0

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\scr_ch_pgdll - Kaspersky Anti-Virus Script Checker - 6482f9eb725cf597b56d66f1526bf4cf

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\scrch_agdll - Script Checker KCA part - 682763a39212ed27d3bad1cd3d8c6121

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\kltracedll - - 5ba1fd6bed1907edbc4aaa848fbac33a

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\MSVCP61dll - User-Generated Microsoft (R) C/C++ Runtime Library - 9d2fdb246d6e09c3d83396a3f30b1b0a

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\klcscdll - -

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\FSSyncdll - FSSYNCDLL - eafa1485148963728c6e453414b09e21

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\pr_remotedll - PR_REMOTE - 8e1ac89a52a343586689c2797a9f83a3

O40 - ExplorerEXE - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for Workstation 5\prloaderdll - Prague Loader - fa664ea4144dca45e4e609ee131f72e4

O40 - ExplorerEXE - 北京新浪信息技术有限公司 - C:\WINDOWS\DOWNLO~1\vivimindll - 新浪ViVi收藏夹 - ab178673cb3a05e323b762212c027a1f

O40 - ExplorerEXE - Alcohol Soft Development Team - D:\tool\ALCOHO~1\ALCOHO~1\AXShlExdll - AXShlExdll - 0c1d3ca7d2c8a48ab01dfa958e150169

O40 - ExplorerEXE - - C:\Program Files\UltraEdit\ue32ctmndll - 界面扩充功能 DLL - 62ec7c1c94afddf1c8fa0ca18ca6e65e

O40 - ExplorerEXE - - d:\tool\EditPlus 2\eppshelldll - - 9549616d6d8a0c167ed6a886cb3aee94

O40 - ExplorerEXE - Adobe Systems Inc - C:\Program Files\Adobe\Acrobat 60\Acrobat Elements\ContextMenudll - Adobe Acrobat Elements - cddbd1e9b24c0cdf9c8c5be2dc27b5d4

O40 - ExplorerEXE - Microsoft Corporation - c:\windows\system32\hxftddll - szdj - 65bb0c1337fdc68ea84511f8284af346

=======================================

O41 - a347bus - Plug and Play BIOS Extension - C:\WINDOWS\system32\drivers\a347bussys - (running) - Plug and Play BIOS Extension - - 1f61cacacb521215f39061789147968c

O41 - a347scsi - SCSI miniport - C:\WINDOWS\system32\drivers\a347scsisys - (running) - SCSI miniport - - 113e4b318bbaa7483ca4e582a4d63f49

O41 - Klif - spuper-ptor - C:\WINDOWS\system32\drivers\klifsys - (running) - spuper-ptor - Kaspersky Labs - 315026b83fe2afed0a3a239d3d8c0790

O41 - Klmc - Kaspersky Anti-Virus Mail Checker Proxy - C:\WINDOWS\system32\drivers\Klmcsys - (running) - Kaspersky Anti-Virus Mail Checker Proxy - Kaspersky Lab - ee6d062d4e0cde97db0f7e1c1b0a682f

O41 - DCN530 - DigitalChina DCN-530TX Fast Ethernet Adapter WinXP Driver - C:\WINDOWS\system32\drivers\DCN530N5sys - (not running) - DigitalChina DCN-530TX Fast Ethernet Adapter WinXP Driver - Digitalchina Networks Limited - 824c455a3d838fef4cb0a3bf2e9ed5b4

O41 - InCDFs - InCDFs - C:\WINDOWS\system32\drivers\InCDFssys - (not running) - - -

O41 - InCDPass - InCDPass - C:\WINDOWS\system32\drivers\InCDPasssys - (not running) - - -

O41 - InCDRm - InCDRm - C:\WINDOWS\system32\drivers\InCDRmsys - (not running) - - -

O41 - jbdedaef - jbdedaef - C:\WINDOWS\system32\drivers\jbdedaefsys - (not running) - - -

O41 - npkcrypt - npkcrypt - D:\tool\Tencent\QQ\npkcryptsys - (not running) - - -

O41 - seplbgll - seplbgll - C:\WINDOWS\system32\drivers\seplbgllsys - (not running) - - - d8841f0700b1d1a2c89622a0d96bc017

O41 - vcddev - Virtual Native Network Driver - C:\WINDOWS\system32\drivers\vcdvnicsys - (not running) - Virtual Native Network Driver - VNN BJ - 8043f2ad16b8b98335481c872aa2ff26

=======================================

360Safeexe=3013002

AntiAdwadll=2221000

AntiEngdll=3012001

AntiActidll=2003000

CleanHisdll=3001001

safeliveexe=1002007

livedll=1001011

=======================================

操作历史报告：

----------查杀恶意软件历史----------

2007-01-18 13:39

查杀恶意软件 - Cnnic中文上网 - 危险 - C:\Program Files\CNNIC\Cdn

查杀恶意软件 - Cnnic无忧上网工具条 - 危险 -

查杀恶意软件 - 实用网址导航(酷站导航) - 危险 - C:\WINDOWS\system32\Scoretxt

2007-01-18 13:40

查杀恶意软件 - 实用网址导航(酷站导航) - 危险 -

2007-01-18 16:45

查杀恶意软件 - Adobe Reader附带的BHO插件 - 安全 -

2007-01-19 08:09