瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 求助!卡巴斯基反病毒数据库遭破坏后出了一系列状况,请高手帮忙看看日志!

1   1  /  1  页   跳转

求助!卡巴斯基反病毒数据库遭破坏后出了一系列状况,请高手帮忙看看日志!

求助!卡巴斯基反病毒数据库遭破坏后出了一系列状况,请高手帮忙看看日志!

我装的是WIN2000,256M内存。装了在这里看到的卡巴斯基后,一个星期后提示卡巴斯基反病毒数据库受到攻击,被破坏。卸载掉卡巴之后想重装,就老提示“CRC校验失败”,后用朋友解压过的卡巴安装,就提示“该软件已经遭病毒感染或下载过程已损坏”,安装仍然失败。用买的瑞星在线杀毒,在下载过程中也有同样的提示,所以瑞星在线杀毒也用不。之后从A盘启动用瑞星查毒,没有查出病毒。没办法现在重新装了瑞星,在安全模式下查毒,仍然没有查到毒。但是想运行或安装下载的软件仍然不断提示失败,似乎只要是下载的软件就不行。特把用hijackthis扫描的日志发上来,请高手们帮我看看,哪里可能有问题,是不是哪个系统文件被破坏了?
Logfile of HijackThis v1.99.1
Scan saved at 9:41:33, on 2005-8-25
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\PROGRAM FILES\RISING\RAV\RavStub.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Herosoft\HeroV8\SYSEXPLR.EXE
C:\WINNT\SOUNDMAN.EXE
C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
C:\PROGRA~1\RISING\RAV\RAVMON.EXE
C:\WINNT\system32\internat.exe
C:\dzh\internet\hypwise.exe
c:\dzh\internet\hypmain.exe
C:\Program Files\QQ2005\QQ.exe
C:\Program Files\QQ2005\TIMPlatform.exe
C:\londip\system\londip.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\QQ2005\QQexternal.exe
D:\ha_hijackthis_1991\HijackThis.exe
C:\WINNT\system32\wuauclt.exe

O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\QQ2005\QQIEHelper.dll
O2 - BHO: 百度搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\WINNT\DOWNLO~1\BaiDuBar.dll
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: 百度搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\WINNT\DOWNLO~1\BaiDuBar.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SysExplr] C:\Herosoft\HeroV8\SYSEXPLR.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - Global Startup: Microsoft Office.lnk = D:\program\office2k\Office\OSA9.EXE
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\QQ2005\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\QQ2005\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\QQ2005\SendMMS.htm
O9 - Extra button: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE
O9 - Extra 'Tools' menuitem: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\QQ2005\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\QQ2005\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\QQ2005\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\QQ2005\QQIEHelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1124190310395
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/Ver2005/OL2005.cab
O16 - DPF: {F138084D-84D7-48CD-BEA8-04772457516E} (VqqSpeedDlProxy Class) - http://218.85.138.27/vqqsdl1009.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2DDD293-EEE7-4570-8010-7745E5E2F39B}: NameServer = 202.100.192.68 202.100.199.8
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
如蒙早复,不胜感激!!
最后编辑2005-08-25 13:34:31
分享到:
gototop
 

自己顶起来!请斑竹和各路高手进来帮忙看看呀~~
gototop
 

日志上看不出问题...

用System Repair Engineer 1.1.0.269 修复试下


gototop
 

谢谢hellokiddy
gototop
 

下载了System Repair Engineer 1.1.0.269,因为是第一次用这个系统修复软件,所以先选择了“智能扫描”,但是扫描结果显示系统没有需要修复的出错的地方,请问hellokiddy及各位大侠,还有别的办法能解决下载东西之后安装出错的问题吗?
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT