请高手看（有日志）：电脑在上网一小段时间后会自动重启。如何解决？ - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛请高手看（有日志）：电脑在上网一小段时间后会自动重启。如何解决？

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

2 / 2 页

跳转页

请高手看（有日志）：电脑在上网一小段时间后会自动重启。如何解决？

tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:	发表于： 2006-09-05 10:57 \| 只看楼主短消息资料字号：小中大 11楼正在运行的进程 [PID: 308][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 376][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 400][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 444][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 456][C:\WINDOWS\system32\savedump.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 464][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [PID: 632][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 656][C:\Program Files\Rising\Rav\CCenter.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [PID: 672][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 744][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 768][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 780][C:\Program Files\Rising\Rav\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 7> [C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RsLog.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18> [C:\Program Files\Rising\Rav\HOOKSYS.dll] <Rising><18, 1, 0, 9> [C:\Program Files\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 28> [C:\Program Files\Rising\Rav\libload.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\VirusLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\regmon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\HookWeb.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\MemMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8> [C:\Program Files\Rising\Rav\expscan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3> [C:\Program Files\Rising\Rav\MailMon.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\SpamEng.dll] <N/A><18, 0, 0, 4> [C:\Program Files\Rising\Rav\engine.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [C:\Program Files\Rising\Rav\PostTrt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\UnExe.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\ScanExec.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\ScanEx.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\Program Files\Rising\Rav\NvFile.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanMac.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7> [C:\Program Files\Rising\Rav\ScanSct.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10> [C:\Program Files\Rising\Rav\Unpacker.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3> [C:\Program Files\Rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [PID: 844][C:\Program Files\Rising\Rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 25> [C:\Program Files\Rising\Rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 10> [C:\Program Files\Rising\Rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6> [C:\Program Files\Rising\Rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 19> [C:\Program Files\Rising\Rfw\MonDrv.dll] <rs><1, 0, 0, 4> [C:\Program Files\Rising\Rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9> [PID: 1012][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)> [PID: 1156][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:

tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:	发表于： 2006-09-05 10:58 \| 只看楼主短消息资料字号：小中大 12楼 [PID: 1336][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\dllwm.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [PID: 1340][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE] <Microsoft Corporation><7.00.9466> [PID: 1412][C:\WINDOWS\System32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.5672> [PID: 1448][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)> [PID: 1524][C:\Program Files\Rising\Rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 40> [C:\Program Files\Rising\Rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23> [C:\Program Files\Rising\Rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1568][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [PID: 1808][C:\PROGRA~1\svhost32.exe] <N/A><N/A> [C:\WINDOWS\System32\dllwm.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1820][C:\WINDOWS\System32\revtemp.exe] <N/A><N/A> [PID: 1832][C:\WINDOWS\System32\msime.exe] <Microsoft Corporation><5.1.2600.2180> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1880][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.30> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [PID: 1924][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3208> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 2036][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22> [C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4> [C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2> [C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6> [C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 228][C:\WINDOWS\command\rundll32.exe] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 292][C:\WINDOWS\Intel\rundll32.exe] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 300][C:\Program Files\Microsoft\svhost32.exe] <N/A><N/A> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 328][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 356][C:\Program Files\Messenger\msmsgs.exe] <Microsoft Corporation><4.7.0041> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [PID: 1748][C:\WINDOWS\System32\wuauclt.exe] <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)> [PID: 1488][C:\WINDOWS\System32\wuauclt.exe] <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)> [PID: 1940][E:\Tools\专\HIJACKTHIS\HijackThis1991zww.exe] <Soeperman Enterprises Ltd.><1.99.0001> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\dllwm.dll] <N/A><N/A> [C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 13> [PID: 2116][E:\Tools\专\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505> [C:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1> [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\dllwm.dll] <N/A><N/A> ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者
tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:

tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:	发表于： 2006-09-05 11:00 \| 只看楼主短消息资料字号：小中大 13楼 C:\PROGRA~1\svhost32.exe？？这个程序先是没有的，可能是昨天晚上才有的，请帮我看看啊。开机时还老是提示系统从一个致命的错误中恢复过来。
tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:

独孤豪侠横据古稀狮帖子:11896 注册: 2005-08-10 来自:花果山	发表于： 2006-09-05 11:02 \| 短消息资料字号：小中大 14楼 C:\PROGRA~1\svhost32.exe F3 - REG:win.ini: load=C:\PROGRA~1\svhost32.exe O4 - 启动项HKLM\\Run: [Tray] C:\WINDOWS\command\rundll32.exe O4 - 启动项HKLM\\Run: [zt] C:\WINDOWS\Intel\rundll32.exe O4 - 启动项HKLM\\Run: [ms] C:\Program Files\Microsoft\svhost32.exe [C:\WINDOWS\System32\msdll.dll] <N/A><N/A> [C:\WINDOWS\System32\ztdll.dll] <N/A><N/A> [C:\WINDOWS\System32\tdll.dll] <N/A><N/A> [C:\WINDOWS\System32\dllwm.dll] <N/A><N/A>
独孤豪侠横据古稀狮帖子:11896 注册: 2005-08-10 来自:花果山

独孤豪侠横据古稀狮帖子:11896 注册: 2005-08-10 来自:花果山	发表于： 2006-09-05 11:03 \| 短消息资料字号：小中大 15楼为什么我指出的这几个文件在你第一份日志里都没有?
独孤豪侠横据古稀狮帖子:11896 注册: 2005-08-10 来自:花果山

tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:	发表于： 2006-09-05 12:44 \| 只看楼主短消息资料字号：小中大 16楼第一份日志是前天中的，后面的则是昨天中的。所以不同啊！那么这几个毒要如何才能清除，使我的机子能正常啊。要不老是开机就重启，真的晕死了啊！
tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:

tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:	发表于： 2006-09-05 12:59 \| 只看楼主短消息资料字号：小中大 17楼还有那个WINDOWS的保持自动更新的程序是那一个啊？每次开机都很慢才出来，我又不要它自动更新，我想在启动项中清除它，不让它出现。
tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:

tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:	发表于： 2006-09-05 13:18 \| 只看楼主短消息资料字号：小中大 18楼那位高手指点一二啊，我的机子我急着要用啊，它老这样重启，是个大问题啊！
tswly9401 初生襁褓狮帖子:72 注册: 2006-08-23 来自:

<<上一主题|下一主题>>

12

2 / 2 页

跳转页

页面顶部

Powered by Discuz!NT