还是没解决，帮帮我 - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛还是没解决，帮帮我

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

1

1 / 1 页

跳转页

还是没解决，帮帮我

wj678 初生襁褓狮帖子:22 注册: 2005-11-25 来自:	发表于： 2005-11-27 16:44 \| 显示全部短消息资料字号：小中大 1楼还是没解决，帮帮我没有雨伞。关机时出现“程序没有响应，RAVTIMER。EXE” 杀毒杀不到。 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell + 1 File not found: 1 + 1 File not found: 1 + 1 File not found: 1 + 1 File not found: 1 + 1 File not found: 1 + 1 File not found: 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run + Cmaudio CmiCnfg DLL C-Media Corporation c:\windows\system\cmicnfg.cpl + InCD File not found: ; + MoveSearch File not found: ; + NeroFilterCheck NeroCheck Ahead Software Gmbh c:\windows\system32\nerocheck.exe + PCTVOICE File not found: ; + RavMon File not found: ; + RavTimer RavTimer Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravtimer.exe + RfwMain File not found: ; + TkBellExe RealNetworks Scheduler RealNetworks, Inc. c:\program files\common files\real\update_ob\realsched.exe + Torjan Program File not found: ; + VirtualDrive File not found: ; + 迅雷4 File not found: C:\Program Files\Thunder Network\Thunder\MediaIssue\TDUpdate.exe C:\Documents and Settings\All Users\「开始」菜单\程序\启动 + EPSON Status Monitor 3 Environment Check(2).lnk StatusMonitor3 Environment Check SEIKO EPSON CORPORATION c:\windows\system32\spool\drivers\w32x86\3\e_srcv02.exe + Watch.lnk Watch Dog Common Group c:\windows\twain_32\a24u16k\watch.exe C:\Documents and Settings\Administrator\「开始」菜单\程序\启动 + PowerReg Scheduler.exe PRegScheduler MFC Application c:\documents and settings\administrator\「开始」菜单\程序\启动\powerreg scheduler.exe HKLM\System\CurrentControlSet\Services + C-DillaSrv C-Dilla RTS Service C-Dilla Ltd c:\windows\system32\drivers\cdantsrv.exe + EpsonBidirectionalAgent eEBAPI Status Agent SEIKO EPSON CORPORATION c:\program files\common files\epson\ebapi\eebagent.exe + EpsonBidirectionalService c:\program files\common files\epson\ebapi\eebsvc.exe + InCDsrv Helper service for the InCD filesystem driver Ahead Software AG c:\program files\ahead\incd\incdsrv.exe + P4P Service Sogou P4P Service Sohu.com Inc. c:\program files\p4p\p2psvr.exe + RfwService Rising Personal Firewall Service Beijing Rising Technology Corporation Limited c:\program files\rising\rfw\rfwsrv.exe + RsCCenter CCenter rising c:\program files\rising\rav\ccenter.exe + RsRavMon RavMon Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravmond.exe HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved + RISING Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects + AcroIEHlprObj Class Adobe Acrobat IE Helper Version 6.0 for ActivieX Adobe Systems Incorporated c:\program files\adobe\acrobat 6.0\reader\activex\acroiehelper.dll + AntiFish Class AntiPhish Module Yahoo Inc. c:\program files\3721\assist\angling.dll + BandIE Class BaiduBar Module Baidu.com, Inc. c:\program files\baidu\bar\baidubar.dll + CPub Object IE Monitor Sohu.com Inc. c:\program files\p4p\sodaie.dll + InsIII c:\windows\system32\webpst2.dll + QQBrowserHelperObject Class QQIEHelper Module 深圳市腾讯计算机系统有限公司 c:\program files\tencent\qq\qqiehelper.dll + ThunderIEHelper Class xunleibho Module c:\windows\system32\xunleibho_v5.dll + 上网助手 CoolBar 3721 c:\program files\3721\assist\asbar.dll HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks + toolbar.dll 捜狗直通车 Sohu.com Inc. c:\program files\p4p\toolbar.dll HKLM\Software\Microsoft\Internet Explorer\Toolbar + toolbar.dll 捜狗直通车 Sohu.com Inc. c:\program files\p4p\toolbar.dll + 上网助手 CoolBar 3721 c:\program files\3721\assist\asbar.dll HKLM\Software\Microsoft\Internet Explorer\Extensions + SoQ File not found: http://www.soq.com + Yahoo 1G电邮 File not found: http://cn.mail.yahoo.com/promo/rd1 + 清理上网记录 File not found: http://assistant.3721.com/clean1.htm?fb=Cns + 情景聊天 File not found: http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ + 上网助手 File not found: http://assistant.3721.com/index.htm?fb=Cns + 手机短信 File not found: http://sms.3721.com/ie/index.htm + 腾讯QQ QQ TENCENT c:\program files\tencent\qq\qq.exe + 修复浏览器 File not found: http://assistant.3721.com/security1.htm?fb=Cns + 寻宝乐趣多 File not found: http://hot.3721.com/rd/shop_btn.htm + 易趣购物 File not found: http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-219?cn=song;icon;hp&mpro=http://www.ebay.com.cn HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls + C:\WINDOWS\system32\SoDAHK.DLL SODA Library c:\windows\system32\sodahk.dll HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors + EPSON V3 2KMonitor361 EPSON Bidirectional Monitor SEIKO EPSON CORPORATION c:\windows\system32\e_sl2361.dll 2005-11-27 17:15:15
wj678 初生襁褓狮帖子:22 注册: 2005-11-25 来自:	分享到：

wj678 初生襁褓狮帖子:22 注册: 2005-11-25 来自:	发表于： 2005-11-27 17:15 \| 显示全部短消息资料字号：小中大 2楼 HijackThis_zww汉化版扫描日志 V1.99.1 保存于 17:07:16, 日期 2005-11-27 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE C:\WINDOWS\CSRSS.exe C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\P4P\p2psvr.exe c:\program files\rising\rfw\rfwsrv.exe C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE C:\PROGRAM FILES\RISING\RAV\Ravmond.exe C:\WINDOWS\system32\svchost.exe C:\PROGRAM FILES\RISING\RAV\RavStub.exe c:\program files\rising\rfw\RfwMain.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Rising\Rav\RavMon.exe C:\download\4483172005624221516\HijackThis1991zww.exe R3 - URLSearchHook: MyURLSearchHook Class - {982CB676-38F0-4D9A-BB72-D9371ABE876E} - C:\Program Files\P4P\ToolBar.dll F2 - REG:system.ini: Shell=Explorer.exe O2 - BHO: (no name) - AutorunsDisabled - (no file) O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v5.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: SohuDAIEHelper - {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} - C:\Program Files\P4P\sodaie.dll O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\Program Files\3721\Assist\Angling.dll O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: AssistII - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\PROGRA~1\3721\assist\asbar.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\zh-cn\msntb.dll O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - (no file) O3 - IE工具栏增项: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file) O3 - IE工具栏增项: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\PROGRA~1\3721\assist\asbar.dll O3 - IE工具栏增项: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\zh-cn\msntb.dll O3 - IE工具栏增项: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll O4 - 启动项HKLM\\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - 启动项HKLM\\Run: [VirtualDrive] ; C:\Program Files\FarStone\VirtualDrive\vdtask.exe /AutoRestore /Silence O4 - 启动项HKLM\\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload O4 - 启动项HKLM\\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - 启动项HKLM\\Run: [迅雷4] C:\Program Files\Thunder Network\Thunder\MediaIssue\TDUpdate.exe O4 - 启动项HKLM\\Run: [Torjan Program] ; C:\WINDOWS\CSRSS.exe O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - 启动项HKLM\\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE O4 - 启动项HKLM\\Run: [RavMon] ; C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM O4 - 启动项HKLM\\Run: [RfwMain] ; C:\Program Files\Rising\Rfw\rfwmain.exe O4 - 启动项HKLM\\Run: [PCTVOICE] ; pctspk.exe O4 - 启动项HKLM\\Run: [MoveSearch] ; C:\Program Files\wsearch\Search.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - Startup: PowerReg Scheduler.exe O4 - Global Startup: Watch.lnk = C:\WINDOWS\twain_32\A24U16K\WATCH.exe O4 - Global Startup: EPSON Status Monitor 3 Environment Check(2).lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getAllurl.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用搜狗直通车下载 - C:\Program Files\P4P\dl.htm O8 - IE右键菜单中的新增项目: 发送图片到手机 - C:\Program Files\P4P\cx.htm O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm O8 - IE右键菜单中的新增项目: 百度-搜索MP3 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUMP3.HTM O8 - IE右键菜单中的新增项目: 百度-搜索图片 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUIMG.HTM O8 - IE右键菜单中的新增项目: 百度-搜索新闻 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUNEWS.HTM O8 - IE右键菜单中的新增项目: 百度-搜索歌词 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDULYRIC.HTM O8 - IE右键菜单中的新增项目: 百度-搜索网页 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUSEARCH.HTM O8 - IE右键菜单中的新增项目: 百度-搜索贴吧 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDUPOST.HTM O8 - IE右键菜单中的新增项目: 百度-词典搜索 - res://C:\PROGRA~1\baidu\bar\baidubar.dll/BAIDU_DIC.HTM O9 - 浏览器额外的按钮: (no name) - AutorunsDisabled - (no file) O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing) O9 - 浏览器额外的按钮: 我的订阅 - {8755CE6E-0BF7-4441-8751-FB728941B0B4} - C:\Program Files\P4P\rss.dll O9 - 浏览器额外的按钮: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing) O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing) O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing) O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing) O11 - Options group: [!CNS] 上网助手-地址栏搜索 O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/Ver2005/OL2005.cab O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview 控件) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx O17 - HKLM\System\CCS\Services\Tcpip\..\{5E8F3904-8F4B-4E25-96C5-6F65A0D5AF44}: NameServer = 85.255.115.101,85.255.112.115 O20 - AppInit_DLLs: C:\WINDOWS\system32\SoDAHK.DLL O23 - NT 服务: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE O23 - NT 服务: EpsonBidirectionalAgent - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe O23 - NT 服务: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe O23 - NT 服务: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - NT 服务: P4P Service - Sohu.com Inc. - C:\Program Files\P4P\p2psvr.exe O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - c:\program files\rising\rfw\rfwsrv.exe O23 - NT 服务: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe O23 - NT 服务: SolidWorks SolidNetWork License Manager - Unknown owner - D:\王涛\软件\SolidWorks 2005 中文版\Sw2005_SP0_licenses\SolidWorks SolidNetWork License Manager\lmgrd.exe (file missing) O23 - NT 服务: TJ-4 - Unknown owner - C:\flexlm\lmgrd.exe (file missing)
wj678 初生襁褓狮帖子:22 注册: 2005-11-25 来自:

<<上一主题|下一主题>>

1

1 / 1 页

跳转页

页面顶部

Powered by Discuz!NT