瑞星卡卡安全论坛

W10 64

RAV 24.17.00.70

RFW  24.00.43.03

首先，防火墙我长期设置为手动升级，但是，开机后RFW还是自动访问网络进行了后台更新（这是已知的bug），与此同时，我手动升级了联盟版68至70，成功。附（RFW日志）

这次后台更新的现象是无尽地循环，update进程出现，然后是后台安装程序，不断循环。

期间，桌面上被我删除的防火墙快捷方式会不断地重复生成，托盘不断启动与退出，Windows在后期开始提示“无防火墙被启用“的警告。

升级前期可以上网，体现为同时手动升级的RAV升级顺利，几分钟后断网。据此判断后台的更新包含了防火墙的驱动，类似于RFW在执行修复程序。

但不同于修复程序，手动托盘点升级会显示“后台升级中”（正是有这个提示我才知道后台在更新）。

最后，日志结束于“更新失败”，防火墙所有监控无法打开，灰墙，循环停止，网络不通。

此后我执行了一次修复（不保留设置），无尽的循环又开始了，手动禁用网卡，并没能打断循环模式。

在控制面板内不断点卸载防火墙，见缝插针，循环停止，很显然，循环需要的进程被我占用了。

目前RFW已被卸载，网络访问正常，防火墙由微软系统接替。

附：循环模式截图








用户系统信息：Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko LBBROWSER

附件: 24.00.43.03.rar

补充，与以下帖子系同一电脑http://bbs.ikaka.com/showtopic-9335866.aspx

这是奔溃了的赶脚 赶紧让工程师远控解决吧:kaka6:

楼主这两天比较忙，先把以下日志发来吧：
C:\Program Files (x86)\Rising\RSD\updater.exe
C:\Program Files (x86)\Rising\RSD\updater.exe2

附件: SETUP.EXE2.log (2016-6-1 20:51:30, 512.05 K)
该附件被下载次数 490

附件: SETUP.EXE.log (2016-6-1 20:51:30, 431.72 K)
该附件被下载次数 456

文件已收集。

附件: updater.exe.log (2016-6-6 16:29:11, 345.83 K)
该附件被下载次数 472

收到，谢谢，在查了。

卸载联盟版和防火墙后，W10 更新了KB3140741，目前防火墙和联盟版运行正常

看了一下您的日志，日志在5月31日的上午，的确出现了多次的防火墙升级，但是升级的方式并不是后台升级的，您再确认一下，您在那天没有手动点击过升级吗？还有就是6月6日的时候，您开机发现有后台升级，然后您就卸载了防火墙，但是6月6日开机的升级并不是防火墙的升级，而是您机器上的rising安全路由。

[2016-05-31][18:55:19:240][5860][5864]: [DETAIL]CommdLine: "C:\Program Files (x86)\Rising\RSD\updater.exe "  /Silence /lang 936 /subkey RAV
[2016-05-31][18:55:19:444][5860][5864]: [DETAIL]CRsUpdateClass::Initialize...
[2016-05-31][18:55:19:444][5860][5864]: [DETAIL]CRsUpdateClass InitComx3
[2016-05-31][18:55:19:444][5860][5864]: [DETAIL]CRsSetupClass InitComx3  GetModuleFileName=C:\Program Files (x86)\Rising\RSD
[2016-05-31][18:55:19:475][5860][5864]: [DETAIL]CRsUpdateClass InitComx3 Load C:\Program Files (x86)\Rising\RSD WorkPath C:\Program Files (x86)\Rising\RSD
[2016-05-31][18:55:19:694][5860][5864]: [DETAIL]Log Module Path: D:\Rising\Rav\rslog.dll
[2016-05-31][18:55:19:694][5860][5864]: [DETAIL]InitCommunication...
[2016-05-31][18:55:19:694][5860][5864]: [ACTION]IProcCommManager::Init(RAV) ...
[2016-05-31][18:55:19:709][5860][5864]: [DETAIL]InitCommunication Successfully...
[2016-05-31][18:55:19:709][5860][5864]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:19:740][5860][5864]: [DETAIL]CRsUpdateClass::IsSupportCustomDownload...
[2016-05-31][18:55:19:897][5860][5864]: [ACTION]succeed to download http://rsup10.rising.com.cn/rs2011/rsrsd.xml
[2016-05-31][18:55:19:944][5860][5864]: [ACTION]succeed to download http://rsdownauto.rising.com.cn/rs2011/pcver/rssetup/23_00_01_40/rssetup_xml.zip
[2016-05-31][18:55:19:944][5860][5864]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:20:256][5860][5864]: [ALERT]Update Component: Name = rssetup; oldver = 23.00.01.36; newver = 23.00.01.40
[2016-05-31][18:55:20:256][5860][5864]: [ACTION]IncUpdate Component: Name = rssetup; oldver = 23.00.01.36; newver = 23.00.01.40
[2016-05-31][18:55:20:272][5860][5864]: [ACTION]succeed to download http://rsdownauto.rising.com.cn/rs2011/pcver/rssetup/23_00_01_40/rssetup.inf
[2016-05-31][18:55:20:287][5860][5864]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:20:303][5860][5864]: [ACTION]succeed to download http://rsdownauto.rising.com.cn/rs2011/pcver/rssetup/23_00_01_40/23_00_01_36/PatchInfo.ini
[2016-05-31][18:55:20:303][5860][5864]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:20:334][5860][5864]: [ACTION]succeed to download http://rsdownauto.rising.com.cn/rs2011/pcver/rssetup/23_00_01_40/23_00_01_36/RSSETUP_rp.zip1
[2016-05-31][18:55:20:334][5860][5864]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:20:490][5860][5864]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:20:490][5860][5864]: [ACTION]Update exit code = 0x00000000
[2016-05-31][18:55:20:490][5860][5864]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][18:55:20:490][5860][5864]: [DETAIL] CRsUpdateClass UnInitComx3...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL] CRsUpdateClass UnInitComx3... ok
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL]UnInitCommunication...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL]UnInitCommunication End...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL]CRsUpdateClass::Uninitialize m_pRsDBLog...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL]CRsUpdateClass::Uninitialize m_hLogDll...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL]CRsUpdateClass::Uninitialize m_pRsUpdateContext...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL] CRsUpdateClass UnInitComx3...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL]UnInitCommunication...
[2016-05-31][18:55:20:506][5860][5864]: [DETAIL]UnInitCommunication End...
[2016-05-31][18:55:21:740][5972][5976]: [DETAIL]CommdLine: "C:\Program Files (x86)\Rising\RSD\updater.exe" /UPDATED /SUBKEY RAV /SILENCE  /LANG 936
[2016-05-31][18:55:21:756][5972][5976]: [DETAIL]CRsUpdateClass::Initialize...
[2016-05-31][18:55:21:756][5972][5976]: [DETAIL]CRsUpdateClass InitComx3
[2016-05-31][18:55:21:756][5972][5976]: [DETAIL]CRsSetupClass InitComx3  GetModuleFileName=C:\Program Files (x86)\Rising\RSD
[2016-05-31][18:55:21:803][5972][5976]: [DETAIL]CRsUpdateClass InitComx3 Load C:\Program Files (x86)\Rising\RSD WorkPath C:\Program Files (x86)\Rising\RSD
[2016-05-31][18:55:22:021][5972][5976]: [DETAIL]Log Module Path: D:\Rising\Rav\rslog.dll
[2016-05-31][18:55:22:021][5972][5976]: [DETAIL]InitCommunication...
[2016-05-31][18:55:22:021][5972][5976]: [ACTION]IProcCommManager::Init(RAV) ...
[2016-05-31][18:55:22:021][5972][5976]: [DETAIL]InitCommunication Successfully...
[2016-05-31][18:55:22:037][5972][5976]: [DETAIL]CRsUpdateClass::IsSupportCustomDownload...
[2016-05-31][18:55:22:147][5972][5976]: [ACTION]succeed to download http://rsup10.rising.com.cn/rs2014/RsPcVer17p.xml
[2016-05-31][18:55:22:162][5972][5976]: [DETAIL]CRsUpdateClass::PreUpdateDownload...
[2016-05-31][18:55:22:178][5972][5976]: [DETAIL]CopyBaseLib Return: 0
[2016-05-31][18:55:22:178][5972][5976]: [DETAIL]CopyZipLib Return: 0
[2016-05-31][18:55:22:178][5972][5976]: [ACTION]Update from 25.00.00.68 to 25.00.00.70
[2016-05-31][18:55:22:287][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAP/CompsVer25.00.00.70.inf
[2016-05-31][18:55:22:428][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/CLOUD/25_00_01_51/CLOUD_xml.zip
[2016-05-31][18:55:22:428][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:22:553][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/HOOKBASE/25_00_01_51/HOOKBASE_xml.zip
[2016-05-31][18:55:22:553][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:22:818][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAPBASE/25_00_01_51/RAPBASE_xml.zip
[2016-05-31][18:55:22:818][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:22:865][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAVCONFIG/25_00_01_51/RAVCONFIG_xml.zip
[2016-05-31][18:55:22:865][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:24:147][5972][5976]: [ALERT]Update Component: Name = CLOUD; oldver = 25.00.01.18; newver = 25.00.01.51
[2016-05-31][18:55:24:147][5972][5976]: [ACTION]IncUpdate Component: Name = CLOUD; oldver = 25.00.01.18; newver = 25.00.01.51
[2016-05-31][18:55:24:193][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/CLOUD/25_00_01_51/CLOUD.inf
[2016-05-31][18:55:24:193][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:24:225][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/CLOUD/25_00_01_51/25_00_01_18/PatchInfo.ini
[2016-05-31][18:55:24:225][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:24:334][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/CLOUD/25_00_01_51/25_00_01_18/cloud_rp.zip1
[2016-05-31][18:55:24:334][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:24:693][5972][5976]: [ALERT]Update Component: Name = HOOKBASE; oldver = 25.00.01.42; newver = 25.00.01.51
[2016-05-31][18:55:24:693][5972][5976]: [ACTION]IncUpdate Component: Name = HOOKBASE; oldver = 25.00.01.42; newver = 25.00.01.51
[2016-05-31][18:55:24:725][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/HOOKBASE/25_00_01_51/HOOKBASE.inf
[2016-05-31][18:55:24:725][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:24:772][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/HOOKBASE/25_00_01_51/25_00_01_42/PatchInfo.ini
[2016-05-31][18:55:24:772][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:24:865][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/HOOKBASE/25_00_01_51/25_00_01_42/hookbase_rp.zip1
[2016-05-31][18:55:24:865][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:25:756][5972][5976]: [ALERT]Update Component: Name = RAPBASE; oldver = 25.00.01.43; newver = 25.00.01.51
[2016-05-31][18:55:25:756][5972][5976]: [ACTION]IncUpdate Component: Name = RAPBASE; oldver = 25.00.01.43; newver = 25.00.01.51
[2016-05-31][18:55:25:803][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAPBASE/25_00_01_51/RAPBASE.inf
[2016-05-31][18:55:25:803][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:25:944][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAPBASE/25_00_01_51/wbshelper64.dll_dat.zip
[2016-05-31][18:55:25:944][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:26:084][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAPBASE/25_00_01_51/wbshld.dll_dat.zip
[2016-05-31][18:55:26:084][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:26:147][5972][5976]: [ALERT]Update Component: Name = RAVCONFIG; oldver = 25.00.01.11; newver = 25.00.01.51
[2016-05-31][18:55:26:147][5972][5976]: [ACTION]IncUpdate Component: Name = RAVCONFIG; oldver = 25.00.01.11; newver = 25.00.01.51
[2016-05-31][18:55:26:209][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAVCONFIG/25_00_01_51/RAVCONFIG.inf
[2016-05-31][18:55:26:209][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:26:240][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAVCONFIG/25_00_01_51/25_00_01_11/PatchInfo.ini
[2016-05-31][18:55:26:240][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:26:287][5972][5976]: [ACTION]succeed to download http://d53.rising.com.cn/rs2014/pcver/RAVCONFIG/25_00_01_51/25_00_01_11/ravconfig_rp.zip1
[2016-05-31][18:55:26:287][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:27:147][0072][4556]: [DETAIL]CommdLine: "C:\Program Files (x86)\Rising\RSD\updater.exe" /lang 936 /subkey RFW
[2016-05-31][18:55:27:162][0072][4556]: [DETAIL]CRsUpdateClass::Initialize...
[2016-05-31][18:55:27:162][0072][4556]: [DETAIL]Log Module Path: D:\Rising\Rfw\RfwLog.dll
[2016-05-31][18:55:27:178][0072][4556]: [DETAIL]UploadExtraInfo: Oe3bp27GPVxfVxkILEldD1hR
[2016-05-31][18:55:27:178][0072][4556]: [DETAIL]InitCommunication...
[2016-05-31][18:55:27:178][0072][4556]: [ACTION]IProcCommManager::Init(RFW) ...
[2016-05-31][18:55:27:178][0072][4556]: [DETAIL]InitCommunication Successfully...
[2016-05-31][18:55:27:178][0072][4556]: [ACTION]Setup is running!
[2016-05-31][18:55:28:693][0072][4556]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:28:928][0072][4556]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][18:55:28:928][0072][4556]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][18:55:28:928][0072][4556]: [FATAL]Failed to Initialize
[2016-05-31][18:55:34:256][5972][5976]: [ALERT]Failed to send finish, hr = 80000002, Error = 12150.
[2016-05-31][18:55:34:803][5972][5976]: [ALERT]Failed to send finish, hr = 80000002, Error = 12150.
[2016-05-31][18:55:35:350][5972][5976]: [ALERT]Failed to send finish, hr = 80000002, Error = 12150.
[2016-05-31][18:55:35:865][5972][5976]: [ALERT]Send Finish over 3 time.
[2016-05-31][18:55:36:303][5972][5976]: [DETAIL]Send  WM_UP_UPDAxxxD
[2016-05-31][18:55:36:303][5972][5976]: [DETAIL]CRsUpdateClass::PostUpdateDownload OK ...
[2016-05-31][18:55:36:412][5972][5976]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:55:36:412][5972][5976]: [ACTION]Update exit code = 0x00000000
[2016-05-31][18:55:36:412][5972][5976]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][18:55:36:412][5972][5976]: [DETAIL] CRsUpdateClass UnInitComx3...
[2016-05-31][18:55:36:412][5972][5976]: [DETAIL] CRsUpdateClass UnInitComx3... ok
[2016-05-31][18:55:36:412][5972][5976]: [DETAIL]UnInitCommunication...
[2016-05-31][18:55:36:428][5972][5976]: [DETAIL]UnInitCommunication End...
[2016-05-31][18:55:36:428][5972][5976]: [DETAIL]CRsUpdateClass::Uninitialize m_pRsDBLog...
[2016-05-31][18:55:36:428][5972][5976]: [DETAIL]CRsUpdateClass::Uninitialize m_hLogDll...
[2016-05-31][18:55:36:428][5972][5976]: [DETAIL]CRsUpdateClass::Uninitialize m_pRsUpdateContext...
[2016-05-31][18:55:36:428][5972][5976]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][18:55:36:428][5972][5976]: [DETAIL] CRsUpdateClass UnInitComx3...
[2016-05-31][18:55:36:428][5972][5976]: [DETAIL]UnInitCommunication...
[2016-05-31][18:55:36:428][5972][5976]: [DETAIL]UnInitCommunication End...
[2016-05-31][18:56:54:322][5744][3908]: [DETAIL]CommdLine: "C:\Program Files (x86)\Rising\RSD\updater.exe" /lang 936 /subkey RFW
[2016-05-31][18:56:54:338][5744][3908]: [DETAIL]CRsUpdateClass::Initialize...
[2016-05-31][18:56:54:338][5744][3908]: [DETAIL]Log Module Path: D:\Rising\Rfw\RfwLog.dll
[2016-05-31][18:56:54:354][5744][3908]: [DETAIL]UploadExtraInfo: VbTia8ZAA1NUCQ89EkZWUU5k
[2016-05-31][18:56:54:354][5744][3908]: [DETAIL]InitCommunication...
[2016-05-31][18:56:54:354][5744][3908]: [ACTION]IProcCommManager::Init(RFW) ...
[2016-05-31][18:56:54:354][5744][3908]: [DETAIL]InitCommunication Successfully...
[2016-05-31][18:56:54:354][5744][3908]: [ACTION]Setup is running!
[2016-05-31][18:56:55:776][5744][3908]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][18:56:55:994][5744][3908]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][18:56:55:994][5744][3908]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][18:56:55:994][5744][3908]: [FATAL]Failed to Initialize
[2016-05-31][19:07:36:469][7232][7192]: [DETAIL]CommdLine: "C:\Program Files (x86)\Rising\RSD\updater.exe" /silence /lang 936 /subkey RFW
[2016-05-31][19:07:36:484][7232][7192]: [DETAIL]CRsUpdateClass::Initialize...
[2016-05-31][19:07:36:500][7232][7192]: [DETAIL]Log Module Path: D:\Rising\Rfw\RfwLog.dll
[2016-05-31][19:07:36:500][7232][7192]: [DETAIL]UploadExtraInfo: hrHgs8rAOy0BVgJYKjgDDkMB
[2016-05-31][19:07:36:500][7232][7192]: [DETAIL]InitCommunication...
[2016-05-31][19:07:36:500][7232][7192]: [ACTION]IProcCommManager::Init(RFW) ...
[2016-05-31][19:07:36:516][7232][7192]: [DETAIL]InitCommunication Successfully...
[2016-05-31][19:07:36:531][7232][7192]: [DETAIL]CRsUpdateClass::IsSupportCustomDownload...
[2016-05-31][19:07:36:563][7232][7192]: [ALERT]Failed to download http://rsup10.rising.com.cn/rs2011/rsrsd.xml. ErrCode = 12007; hr = -2147483640
[2016-05-31][19:07:37:078][7232][7192]: [ALERT]Failed to download http://rsup10.rising.com.cn/rs2011/rsrsd.xml. ErrCode = 12007; hr = -2147483640
[2016-05-31][19:07:37:594][7232][7192]: [ALERT]Failed to download http://rsup10.rising.com.cn/rs2011/rsrsd.xml. ErrCode = 12007; hr = -2147483640
[2016-05-31][19:07:38:110][7232][7192]: [ALERT]Failed to download http://rsup10.rising.com.cn/rs2011/rsrsd.xml. ErrCode = 12007; hr = -2147483640
[2016-05-31][19:07:38:625][7232][7192]: [ALERT]Failed to download http://rsup10.rising.com.cn/rs2011/rsrsd.xml. ErrCode = 12007; hr = -2147483640
[2016-05-31][19:07:39:141][7232][7192]: [ALERT]Failed to download http://rsup10.rising.com.cn/rs2011/rsrsd.xml. ErrCode = 12007; hr = -2147483640
[2016-05-31][19:07:39:657][7232][7192]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][19:07:39:657][7232][7192]: [ACTION]Update exit code = 0x00000005
[2016-05-31][19:07:39:657][7232][7192]: [DETAIL]CRsUpdateClass::WriteLog...
[2016-05-31][19:07:40:672][7232][7192]: [ACTION]Broadcast RAV_CCENTER_UPDATE_FINISH Message ver=24.00.43.03, result=-1
[2016-05-31][19:07:40:922][7232][7192]: [DETAIL]CRsUpdateClass::Uninitialize...
[2016-05-31][19:07:40:922][7232][7192]: [DETAIL]CRsUpdateClass::Uninitialize...