瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 【求助】正版瑞星用不了(附图和扫描日志)

1   1  /  1  页   跳转

【求助】正版瑞星用不了(附图和扫描日志)

【求助】正版瑞星用不了(附图和扫描日志)

正版瑞星一开机就死重新安装和在安全模式下都不行,帮偶看看!

扫描日志:
2006-07-09,16:29:43

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Home Edition Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>  [Microsoft Corporation]
    <MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background>  [Microsoft Corporation]
    <MsnMsgr><; "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background>  [Microsoft Corporation]
    <RealPlayer><; "d:\Program Files\Ringz Studio\Storm Codec\realplay.exe" /RunUPGToolCommandReBoot>  [RealNetworks, Inc.]
    <updateMgr><; D:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1>  []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <ATIModeChange><Ati2mdxx.exe>  [ATI Technologies, Inc.]
    <CARPService><carpserv.exe>  [Conexant Systems, Inc.]
    <WinManager><C:\WINDOWS\System32\SVCH0ST.EXE>  []
    <RavTimer><C:\Program Files\Rising\Rav\RavTimer.exe>  [Beijing Rising Technology Co., Ltd.]
    <RavMon><C:\Program Files\Rising\Rav\RavMon.exe -system>  [Beijing Rising Technology Co., Ltd.]
    <RfwMain><C:\Program Files\Rising\Rfw\rfwmain.exe>  [Beijing Rising Technology Corporation Limited]
    <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k>  []
    <ATIPTA><; C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe>  [ATI Technologies, Inc.]
    <Display Settings><; C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s>  [Hewlett-Packard]
    <QT4HPOT><; C:\Program Files\HPQ\One-Touch\OneTouch.EXE>  [Dritek System Inc.]
    <StormCodec_Helper><; "d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  []
    <SynTPEnh><; C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [Synaptics, Inc.]
    <SynTPLpr><; C:\Program Files\Synaptics\SynTP\SynTPLpr.exe>  [Synaptics, Inc.]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <WangWang><; "d:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE">  [淘宝(中国)软件有限公司]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]

==================================
启动文件夹
服务
[HP Configuration Interface Service / HPConfig]
  <C:\WINDOWS\system32\HPConfig.exe><Hewlett-Packard>
[HPWirelessMgr / HPWirelessMgr]
  <C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe><Hewlett-Packard Co.>
[Rising Personal Firewall Service / RfwService]
  <C:\Program Files\Rising\Rfw\rfwsrv.exe><Beijing Rising Technology Corporation Limited>
[Rising Process Communication Center / RsCCenter]
  <C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><rising>

==================================
浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\System32\xunleibho_v14.dll, Thunder Networking Technologies,LTD>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[DragSearch BHO]
  {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, N/A>
[MMSAssist BHO]
  {6671A431-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[免费精彩视频超流畅在线观看]
  {022C4009-5283-4365-97BF-144054B40E2E} <http://itv.mop.com, N/A>
[MMSAssistMenu]
  {6671A433-5C3D-463d-A7CF-5587F9B7E191} <C:\PROGRA~1\MMSASS~1\Mmsass~1.dll, >
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[易趣购物]
  {DE607145-AC19-425e-868A-8D70ABDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=5, N/A>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[pCastPanel Class]
  {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} <C:\WINDOWS\Downloaded Program Files\pCastCtl.dll, >

==================================
正在运行的进程
[PID: 116][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 168][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 192][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
    [C:\WINDOWS\System32\tssoft32.acm]  <DSP GROUP, INC.><1.01>
    [C:\WINDOWS\System32\tsd32.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\sl_anet.acm]  <Sipro Lab Telecom Inc.><3.02>
    [C:\WINDOWS\System32\l3codeca.acm]  <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
    [C:\WINDOWS\System32\iac25_32.ax]  <Intel Corporation><2.05.53>
    [C:\WINDOWS\System32\vct3216.acm]  <Voxware, Inc.><1.6.0.17>
    [C:\WINDOWS\System32\vct3216.dll]  <Voxware, Inc.><1.6.0.12>
    [C:\WINDOWS\System32\msms001.vwp]  <Voxware, Inc.><2.0.2.61>
    [C:\WINDOWS\System32\mvoice.vwp]  <Voxware, Inc.><2.0.0.12.01>
    [C:\WINDOWS\System32\vorbis.acm]  <HMS http://hp.vector.co.jp/authors/VA012897/><0, 0, 3, 6>
[PID: 236][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 248][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 408][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 432][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 656][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [D:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\WINDOWS\System32\tssoft32.acm]  <DSP GROUP, INC.><1.01>
    [C:\WINDOWS\System32\tsd32.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\sl_anet.acm]  <Sipro Lab Telecom Inc.><3.02>
    [C:\WINDOWS\System32\l3codeca.acm]  <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
    [C:\WINDOWS\System32\iac25_32.ax]  <Intel Corporation><2.05.53>
    [C:\WINDOWS\System32\vct3216.acm]  <Voxware, Inc.><1.6.0.17>
    [C:\WINDOWS\System32\vct3216.dll]  <Voxware, Inc.><1.6.0.12>
    [C:\WINDOWS\System32\msms001.vwp]  <Voxware, Inc.><2.0.2.61>
    [C:\WINDOWS\System32\mvoice.vwp]  <Voxware, Inc.><2.0.0.12.01>
    [C:\WINDOWS\System32\vorbis.acm]  <HMS http://hp.vector.co.jp/authors/VA012897/><0, 0, 3, 6>
[PID: 1144][G:\sreng2\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

附件附件:

下载次数:152
文件类型:application/octet-stream
文件大小:
上传时间:2006-7-9 16:58:31
描述:



最后编辑2006-07-09 17:21:28
分享到:
gototop
 

这个建议你去csc.rising.com.cn,寻求技术人员的在线支持。
gototop
 

[C:\WINDOWS\System32\tssoft32.acm] <DSP GROUP, INC.><1.01>
[C:\WINDOWS\System32\tsd32.dll] <N/A><N/A>
[C:\WINDOWS\System32\sl_anet.acm] <Sipro Lab Telecom Inc.><3.02>
[C:\WINDOWS\System32\l3codeca.acm] <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
[C:\WINDOWS\System32\iac25_32.ax] <Intel Corporation><2.05.53>
[C:\WINDOWS\System32\vct3216.acm] <Voxware, Inc.><1.6.0.17>
[C:\WINDOWS\System32\vct3216.dll] <Voxware, Inc.><1.6.0.12>
[C:\WINDOWS\System32\msms001.vwp] <Voxware, Inc.><2.0.2.61>
[C:\WINDOWS\System32\mvoice.vwp] <Voxware, Inc.><2.0.0.12.01>
[C:\WINDOWS\System32\vorbis.acm] <HMS http://hp.vector.co.jp/authors/VA012897/><0, 0, 3, 6>

这些是什么???
gototop
 

这些后缀都好奇怪
gototop
 

楼上的,你不懂就不要跟贴,你问我是什么,我要知道就不问了。我都急死了……
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT