[提交Bug] [BUG反馈] 3.0.3.9常驻进程

进程

提交Bug

是否试过重新安装到新目录	no
TheWorld版本	3.0.3.9
操作系统	xp sp2
IE版本	ie7
系统辅助安全软件	瑞星
使用的文字输入法	-
问题现象描述	明明已经关闭，但进程任然存在且占用很多CPU，导致我无法安全删除U盘。另外在这里的电脑上TW3第一次启动要很久，经常都是未响应，（不是窗口全白就是只能显示部分界面，可能是防假死的问题）需要靠运气才能成功启动
问题重现方法	这次是下载，关闭主程序，下载完成后关闭下载，不保证能重现

各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供 http://www.360.cn
诊断时间: 2009-07-14  13:14:09
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V7.0.5730.11 Build:75730
计算机物理内存:895.11MB - 当前可用内存:466.07MB
100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] - C:\Program Files\Rising\Rav\CCenter.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: RavMonD.exe [Rising Realtime Moniter] - C:\PROGRAM FILES\RISING\RAV\ravmond.exe
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe
100 - 安全 - Process: RavStub.exe [Rising RavStub] - C:\PROGRAM FILES\RISING\RAV\RavStub.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: mDNSResponder.exe [Bonjour Service] - C:\Program Files\Bonjour\mDNSResponder.exe
100 - 安全 - Process: DevSvc.exe [Capture Device Service] - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
100 - 安全 - Process: RavService.exe [RavService] - C:\Program Files\Rising\Rav\RavService.exe
100 - 安全 - Process: wxsyncli.exe [成都吉胜科技有限公司推出的万象网络文件同步服务。] - C:\WINDOWS\system32\wxsyncli.exe
100 - 安全 - Process: RavTray.exe [RavNet Tray] - C:\Program Files\Rising\Rav\RavTray.exe
100 - 安全 - Process: RSTray.exe [RSTray] - C:\Program Files\Rising\AntiSpyware\rstray.exe
100 - 安全 - Process: Clsmn.exe [一款网吧管理软件客户端程序。] - C:\WINDOWS\system32\Clsmn.exe
100 - 安全 - Process: ULCDRSvr.exe [ULCDRSvr] - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
100 - 安全 - Process: rundll32.exe [windows rundll32为了需要调用dlls的程序。] - C:\WINDOWS\system32\Rundll32.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\WINDOWS\system32\conime.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k imgsvc
100 - 安全 - Process: wscntfy.exe [是microsoft windows安全系统和输出当前安全身份的一部分，用于其电脑的稳定性以及安全运行的。] - C:\WINDOWS\system32\wscntfy.exe
100 - 安全 - Process: TTraveler.exe [腾讯浏览器相关进程。] - C:\Program Files\Tencent\TT\bin\TTraveler.exe
100 - 安全 - Process: AppleMobileDeviceService.exe [Apple Mobile Device Service] - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\explorer.exe
100 - 安全 - Process: TheWorld.exe [TheWorld] - G:\世界之窗\TheWorld.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - E:\program files\360\360Safe\360Safe.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - E:\program files\360\360Safe\safemon\360Tray.exe
100 - 安全 - Process: LiveUpdate360.exe [360升级加速器] - E:\program files\360\360Safe\LiveUpdate360.exe
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=http://go.microsoft.com/fwlink/?LinkId=69157
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://go.microsoft.com/fwlink/?LinkId=54896
R0 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://go.microsoft.com/fwlink/?LinkId=54896
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL=http://go.microsoft.com/fwlink/?LinkId=69157
R0 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL=http://go.microsoft.com/fwlink/?LinkId=54896
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
O2 - 安全 - BHO: (QQCycloneHelper Class) - [腾讯出品的超级旋风下载组件相关文件。] - {00000000-12C9-4305-82F9-43058F20E8D2} - C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll
O2 - 安全 - BHO: (ThunderAtOnce Class) - [迅雷浏览器高级特性支持模块。] - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - 安全 - BHO: (QQ工具栏) - [QQ工具栏。] - {29CF293A-1E7D-4069-9E11-E39698D0AF95} - C:\Program Files\Tencent\QQToolbar\IEBar.dll
O2 - 安全 - BHO: (BandIE Class) - [百度超级搜霸相关插件。] - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - 安全 - BHO: (Thunder Browser Helper) - [迅雷附带下载**器相关文件。] - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
O2 - 安全 - BHO: (卡卡上网安全助手) - [卡卡上网安全助手，网络辅助工具。] - {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} - C:\WINDOWS\system32\UrlFilter.dll
O2 - 安全 - BHO: (Google Toolbar Notifier BHO) - [GoogleToolbarNotifier] - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - e:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - 安全 - BHO: (FlashGetBHO) - [FlashGet 浏览器帮助对象。] - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Documents and Settings\user\Application Data\FlashGetBHO\FlashGetBHO3.dll
O2 - 安全 - BHO: (Windows Live Toolbar Helper) - [MSN 搜索工具栏，搜索工具栏。] - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - 安全 - Toolbar: (Windows Live Toolbar) - [MSN工具栏相关程序。] - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - 安全 - Toolbar: (百度工具栏) - [百度超级搜霸相关程序。] - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - 安全 - Toolbar: (QQ工具栏) - [QQ工具栏。] - {29CF293A-1E7D-4069-9E11-E39698D0AF95} - C:\Program Files\Tencent\QQToolbar\IEBar.dll
O4 - 安全 - HKLM\..\Run: [RavTray] [瑞星公司出品的杀毒软件相关程序。] "C:\Program Files\Rising\Rav\RavTray.exe"
O4 - 安全 - HKLM\..\Run: [runeip] [卡卡上网安全助手相关程序。] "C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup
O4 - 安全 - HKLM\..\Run: [wxClient] [一款网吧管理软件相关程序。] C:\WINDOWS\system32\Clsmn.exe
O4 - 安全 - HKLM\..\Run: [stup.exe] [腾讯qq地址栏搜索插件相关程序。] Rundll32.exe C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll,Rundll32 R
O4 - 安全 - HKLM\..\Run: [TkBellExe] [是Real Networks产品定时升级检测程序。] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 安全 - HKLM\..\Run: [KernelFaultCheck] [windows的错误报告工具] %systemroot%\system32\dumprep 0 -k
O4 - 安全 - HKLM\..\Run: [QuickTime Task] [quicktime：媒体播放器。] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - 安全 - HKLM\..\Run: [360Safebox] [360安全卫士保险箱相关程序。] "e:\Program Files\360\360safebox\safeboxTray.exe" /r
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] e:\Program Files\360\360Safe\safemon\360tray.exe /start
O4 - 安全 - HKLM\..\RunOnce: [KKDelay] [RunOnce Application] C:\Program Files\Rising\AntiSpyware\RunOnce.exe
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - HKCU\..\Run: [swg] [Goolge工具栏相关程序。] e:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - 安全 - HKCU\..\Run: [PPS Accelerator] [PPS 网络加速器] C:\Program Files\PPStream\ppsap.exe
O8 - 安全 - Extra context menu item: 使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\geturl.htm
O8 - 安全 - Extra context menu item: 使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm
O9 - 安全 - Extra button: 启动迅雷5(HKLM)(HKLM) - C:\Program Files\Thunder Network\Thunder\Thunder.exe
O11 - 安全 - Options Group: International*
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - 安全 - Service: Apple Mobile Device [给 Apple 移动设备提供接口。] - "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" - (running)
O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe - (not running)
O23 - 安全 - Service: Bonjour Service [Bonjour 允许 iTunes 和 Safari 等应用程序在局域网上广告和发现服务。运行 Bonjour 可让您连接到 Apple TV 等硬件设备以及 iTunes 共享和 AirTunes 等软件服务。如果您禁用 Bonjour，则任何明确依赖它的网络服务都将无法开启。] - "C:\Program Files\Bonjour\mDNSResponder.exe" - (running)
O23 - 安全 - Service: Capture Device Service [Manages device arrival and removal event. This service is provided by InterVideo.] - "C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe" - (running)
O23 - 安全 - Service: ccosm [Contrl Center of Storm Media] - D:\休闲聊天\stormliv.exe /asservice - (not running)
O23 - 安全 - Service: EventSystem [] - C:\WINDOWS\system32\es.dll - (running)
O23 - 安全 - Service: gusvc [Google升级相关服务。] - "E:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe" - (not running)
O23 - 安全 - Service: iPod Service [iPod 硬件管理服务] - "C:\Program Files\iPod\bin\iPodService.exe" - (not running)
O23 - 安全 - Service: Nla [Microsoft Windows Sockets 2.0 Service Provider] - C:\WINDOWS\System32\mswsock.dll - (running)
O23 - 安全 - Service: NVSvc [是NVIDIA显示卡相关程序。] - C:\WINDOWS\system32\nvsvc32.exe - (not running)
O23 - 安全 - Service: ose [可保存用于更新和修复的安装文件，并且在下载安装程序更新和 Watson 错误报告时必须使用。] - "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" - (not running)
O23 - 安全 - Service: RavService [瑞星杀毒软件网络版客户端通讯代理] - "C:\Program Files\Rising\Rav\RavService.exe" - (running)
O23 - 安全 - Service: RsCCenter [Rising Process Communication Center] - "C:\Program Files\Rising\Rav\CCenter.exe" - (running)
O23 - 安全 - Service: RsRavMon [Rising RealTime Monitor] - "C:\PROGRAM FILES\RISING\RAV\Ravmond.exe" - (not running)
O23 - 安全 - Service: SysmonLog [Performance Logs and Alerts Service] - C:\WINDOWS\system32\smlogsvc.exe - (not running)
O23 - 安全 - Service: UleadBurningHelper [Ulead Burning Helper] - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe - (running)
O23 - 安全 - Service: usprserv [是一个属于微软Windows操作系统的系统程序，用于执行DLL文件。] - C:\WINDOWS\System32\svchost.exe -k netsvcs - (not running)
O25 - 安全 - ABOUT: DesktopItemNavigationFailure - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: NavigationCanceled - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: NavigationFailure - res://ieframe.dll/navcancl.htm
O25 - 安全 - ABOUT: OfflineInformation - res://ieframe.dll/offcancl.htm
O25 - 安全 - ABOUT: PostNotCached - res://ieframe.dll/repost.htm
=======================================
O31 - 未知 - SEApproved: {42071714-76d4-11d1-8b24-00a0c9068ff3} - deskpan.dll -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Shell extensions for file compression -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：加密上下文菜单 -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {00E7B358-F65B-4dcf-83DF-CD026B94BFD4} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {e82a2d71-5b2f-43a0-97b8-81be15854de8} - C:\WINDOWS\system32\dfshim.dll - Microsoft Corporation - Application Deployment Support Library - 2.0.50727.42 - 83456 - b3511383c8be3a8c5b88a78971fc1141
O31 - 未知 - SEApproved: {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} - C:\WINDOWS\system32\dfshim.dll - Microsoft Corporation - Application Deployment Support Library - 2.0.50727.42 - 83456 - b3511383c8be3a8c5b88a78971fc1141
O31 - 未知 - SEApproved: {5E2121EE-0300-11D4-8D3B-444553540000} - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll -  - ACE Context Menu - 2.0.0.0 - 73728 - 3a9f70479a886dcc8e5151326156472d
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 129024 - 60fe004235a8108446dcfc1e526fde0e
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 129024 - 60fe004235a8108446dcfc1e526fde0e
O31 - 未知 - BootExecute:  bsmain -  -  -  - 0 -
O31 - 未知 - LSA: Notification Packages -  -  -  -  - 0 -
O31 - 未知 - LSA: Notification Packages - cecli.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - sv1_0.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll -  -  -  - 0 -
=======================================
O40 - winlogon.exe -  - C:\WINDOWS\system32\LogUser.dll -  - f139337731bdc467f8378e0221c46b67
O40 - winlogon.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5spi.dll - e-Border DRiver LSP hooks - 369de7b7eff442f6749b972c1a2c96cb
O40 - winlogon.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5impl.dll - e-Border driver LSP implementation - 0f6272a294439c43f76ecee9bdd3ce31
O40 - winlogon.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5cred.dll - e-Border Credential Cache - 55eab27887d1912d46b392eab756ce58
O40 - lsass.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5spi.dll - e-Border DRiver LSP hooks - 369de7b7eff442f6749b972c1a2c96cb
O40 - lsass.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5impl.dll - e-Border driver LSP implementation - 0f6272a294439c43f76ecee9bdd3ce31
O40 - lsass.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5cred.dll - e-Border Credential Cache - 55eab27887d1912d46b392eab756ce58
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5spi.dll - e-Border DRiver LSP hooks - 369de7b7eff442f6749b972c1a2c96cb
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5impl.dll - e-Border driver LSP implementation - 0f6272a294439c43f76ecee9bdd3ce31
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5cred.dll - e-Border Credential Cache - 55eab27887d1912d46b392eab756ce58
O40 - svchost.exe - Apple Inc. - C:\Program Files\Bonjour\mdnsNSP.dll - Bonjour Namespace Provider - 0e3e56064e162ee9cc48698355098301
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5spi.dll - e-Border DRiver LSP hooks - 369de7b7eff442f6749b972c1a2c96cb
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5impl.dll - e-Border driver LSP implementation - 0f6272a294439c43f76ecee9bdd3ce31
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5cred.dll - e-Border Credential Cache - 55eab27887d1912d46b392eab756ce58
O40 - svchost.exe - Apple Inc. - C:\Program Files\Bonjour\mdnsNSP.dll - Bonjour Namespace Provider - 0e3e56064e162ee9cc48698355098301
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5spi.dll - e-Border DRiver LSP hooks - 369de7b7eff442f6749b972c1a2c96cb
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5impl.dll - e-Border driver LSP implementation - 0f6272a294439c43f76ecee9bdd3ce31
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5cred.dll - e-Border Credential Cache - 55eab27887d1912d46b392eab756ce58
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5spi.dll - e-Border DRiver LSP hooks - 369de7b7eff442f6749b972c1a2c96cb
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5impl.dll - e-Border driver LSP implementation - 0f6272a294439c43f76ecee9bdd3ce31
O40 - svchost.exe - Permeo Technologies Inc. - C:\Program Files\Permeo\e-Border Driver\s5cred.dll - e-Border Credential Cache - 55eab27887d1912d46b392eab756ce58
O40 - svchost.exe - Apple Inc. - C:\Program Files\Bonjour\mdnsNSP.dll - Bonjour Namespace Provider - 0e3e56064e162ee9cc48698355098301
O40 - explorer.exe -  - C:\Program Files\WinRAR\rarext.dll -  - 60fe004235a8108446dcfc1e526fde0e
O40 - explorer.exe -  - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll - ACE Context Menu - 3a9f70479a886dcc8e5151326156472d
=======================================
O41 - Apaidi - Apaidi - C:\WINDOWS\system32\drivers\Apaidi.sys - (running) -  -  - f60f0a380c6cf97dc05c7d01adb2c217
O41 - BdGuard - BDGUARD Dynamic Link Library - C:\WINDOWS\system32\drivers\BDGuard.SYS - (running) - BDGUARD Dynamic Link Library -  - d8ad2f959208197455aa4a2a67be9f69
O41 - IGALIVE - IGALIVE - C:\Program Files\IGALIVE\IGALIVE.sys - (running) -  -  - 42176ecf283effca8b27f4a3572b8237
O41 - wxNDA - 万象网络硬盘驱动 - C:\WINDOWS\system32\drivers\wxNDA.sys - (running) - 万象网络硬盘驱动 - 成都吉胜科技 - 51d03460cee24bfc25634399f358cadf
O41 - askd - askd - C:\WINDOWS\system32\drivers\askd.ahc - (not running) -  -  - e1dc6da7d05834991fb7dde2fa75cf5e
O41 - DAEDriver54 - DAEDriver54 - C:\Documents and Settings\user\桌面\TE\dak32.sys - (not running) -  -  -
O41 - EagleNT - EagleNT - C:\WINDOWS\system32\drivers\EagleNT.sys - (not running) -  -  -
O41 - TesDrvPt - Kernel helper of the Tencent's game trojan killer - C:\WINDOWS\system32\TesDrvPt.sys - (not running) - Kernel helper of the Tencent's game trojan killer - TENCENT - 2a8c5332ef826ca8dbbe81ef11297b86
O41 - TKP - TKP - C:\WINDOWS\system32\DRIVERS\7fe7 - (not running) -  -  -
O41 - WINIO - WINIO - D:\按键精灵\qmnms.sys - (not running) -  -  -