小伞变红啊,急救!总有msime.exe和IEXPLORE.exe bbs.ikaka.com

塞纳河流星 - 2006-8-15 9:30:00

扫描报告:2006-08-15,09:17:29

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background> [Microsoft Corporation]
<Start><Start.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [Microsoft Corporation]
<MSPY2002><C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC> []
<SoundMan><SOUNDMAN.EXE> [Realtek Semiconductor Corp.]
<KBD><C:\HP\KBD\KBD.EXE> [Hewlett-Packard Company]
<ATIPTA><C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe> [ATI Technologies, Inc.]
<RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<BigDogPath><C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera> []
<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<spoolsv><C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer> []
<WebThunder><D:\讯雷\Thunder Network\WebThunder\WebThunder.exe> [深圳市迅雷网络技术有限公司]
<RavTask><"D:\瑞星杀毒\杀毒\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<Start><Start.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<KernelFaultCheck><C:\WINDOWS\system32\msime.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe ntio.exe> []
<Userinit><userinit.exe,C:\WINDOWS\system32\userint.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
<WinlogonNotify: AtiExtEvent><Ati2evxx.dll> [ATI Technologies Inc.]

==================================
启动文件夹
[腾讯QQ]
<C:\Documents and Settings\fengye\「开始」菜单\程序\启动\腾讯QQ.lnk><N>

==================================
服务
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[ATI Smart / ATI Smart]
<C:\WINDOWS\system32\ati2sgag.exe><>
[GrayX / GrayX]
<C:\WINDOWS\Grow.exe><N/A>
[InstallDriver Table Manager / IDriverT]
<"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
[LexBce Server / LexBceS]
<C:\WINDOWS\system32\LEXBCES.EXE><Lexmark International, Inc.>
[Rising Proxy Service / RfwProxySrv]
<c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"D:\瑞星杀毒\杀毒\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

==================================
浏览器加载项
[WebThunder Browser Helper]
{00000AAA-A363-466E-BEF5-9BB68697AA7F} <D:\讯雷\Thunder Network\WebThunder\WebThunderBHO_011.dll, Thunder Networking Technologies,LTD>
[wmpdrm]
{0E674588-66B7-4E19-9D0E-2053B800F69F} <C:\WINDOWS\system32\wmpdrm.dll, Allsum Info. Tech. Ltd.>
[Shockwave Flash Object]
{14A21378-5BB1-4BC4-95D5-5D3F51527F6F} <C:\WINDOWS\system32\smflash.ocx, Macromedia, Inc.>
[Status Class]
{7BDAF75A-0D6F-4F50-AFE9-333D08DF4005} <C:\PROGRA~1\baigoo\baigoobh.dll, >
[启动Web迅雷]
{962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg, N/A>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
{E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[Msp Class]
{EF9F1C48-1A63-495A-9317-B7B71B34A9CF} <C:\WINDOWS\Downloaded Program Files\dddmsp.dll, >
[WebThunder Browser Helper]
{00000AAA-A363-466E-BEF5-9BB68697AA7F} <D:\讯雷\Thunder Network\WebThunder\WebThunderBHO_011.dll, Thunder Networking Technologies,LTD>
[wmpdrm]
{0E674588-66B7-4E19-9D0E-2053B800F69F} <C:\WINDOWS\system32\wmpdrm.dll, Allsum Info. Tech. Ltd.>
[Shockwave Flash Object]
{14A21378-5BB1-4BC4-95D5-5D3F51527F6F} <C:\WINDOWS\system32\smflash.ocx, Macromedia, Inc.>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[MediaComm Class]
{7670648D-461B-42AF-BDFE-46D26AF5EFF2} <D:\讯雷\Thunder Network\WebThunder\MediaAddin06.dll, Thunder Networking Technologies,LTD>
[Status Class]
{7BDAF75A-0D6F-4F50-AFE9-333D08DF4005} <C:\PROGRA~1\baigoo\baigoobh.dll, >
[BrowserObject Class]
{808EAF87-61B8-4EEA-8B85-27480D1BDBEE} <C:\PROGRA~1\baigoo\bgook.dll, baigoo>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[上传到QQ网络硬盘]
<D:\QQ2006\2006\AddToNetDisk.htm, N/A>
[使用Web迅雷下载]
<D:\讯雷\Thunder Network\WebThunder\GetUrl.htm, N/A>
[使用Web迅雷下载全部链接]
<D:\讯雷\Thunder Network\WebThunder\GetAllUrl.htm, N/A>
[添加到QQ自定义面板]
<D:\QQ2006\2006\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\QQ2006\2006\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\QQ2006\2006\SendMMS.htm, N/A>
[访问通用网址]
<, N/A>

塞纳河流星 - 2006-8-15 9:32:00

正在运行的进程
[PID: 448][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 512][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 540][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\Ati2evxx.dll] <ATI Technologies Inc.><6.14.10.4114>
[PID: 584][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
[PID: 596][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 736][C:\WINDOWS\system32\Ati2evxx.exe] <ATI Technologies Inc.><6.14.10.4114>
[C:\WINDOWS\system32\Ati2edxx.dll] <ATI Technologies, Inc.><6, 14, 10, 2496>
[PID: 768][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 832][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
[PID: 916][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
[PID: 972][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1100][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1208][c:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
[c:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
[c:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
[c:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
[c:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4>
[c:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
[PID: 1320][C:\WINDOWS\system32\Ati2evxx.exe] <ATI Technologies Inc.><6.14.10.4114>
[C:\WINDOWS\system32\Ati2edxx.dll] <ATI Technologies, Inc.><6, 14, 10, 2496>
[PID: 1376][C:\WINDOWS\Explorer.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[C:\WINDOWS\system32\ansi.dll] <N/A><N/A>
[D:\讯雷\Thunder Network\WebThunder\WebThunderBHO_011.dll] <Thunder Networking Technologies,LTD><6, 0, 0, 2>
[C:\WINDOWS\system32\smflash.ocx] <Macromedia, Inc.><9.0.25.0>
[C:\PROGRA~1\baigoo\baigoobh.dll] <><1, 0, 1, 1008>
[D:\瑞星杀毒\杀毒\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[D:\QQ2006\2006\qdshm.dll] <><1, 0, 1, 2>
[D:\瑞星杀毒\杀毒\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1508][C:\WINDOWS\system32\LEXBCES.EXE] <Lexmark International, Inc.><9.42>
[C:\WINDOWS\system32\lexp2p32.dll] <Lexmark International, Inc.><9.42>
[C:\WINDOWS\system32\lex2kusb.dll] <Lexmark International, Inc.><9.42>
[PID: 1544][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\system32\LEXLMPM.DLL] <Lexmark International, Inc.><96.9.42>
[C:\WINDOWS\system32\LexBce.dll] <Lexmark International, Inc.><9.42>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LVCMPP5C.dll] <Lenovo (Beijing) Ltd.><1.0.1.14>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620>
[C:\WINDOWS\system32\LVCMpwr.dll] <Lenovo (Beijing) Ltd.><1, 0, 1, 0>
[PID: 1548][C:\WINDOWS\system32\LEXPPS.EXE] <Lexmark International, Inc.><9.42>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
[C:\WINDOWS\system32\LEXBCE.DLL] <Lexmark International, Inc.><9.42>

塞纳河流星 - 2006-8-15 9:33:00

[PID: 1812][C:\WINDOWS\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.0.38>
[PID: 1832][C:\HP\KBD\KBD.EXE] <Hewlett-Packard Company><1.0.2.2.20205>
[C:\HP\KBD\led.dll] <Hewlett-Packard Company><1.0.2.0>
[C:\HP\KBD\USB.dll] <Hewlett-Packard Company><1.0.2.2.112404>
[C:\HP\KBD\ps2.dll] <Hewlett-Packard Company><1.0.2.2.112404>
[C:\HP\KBD\msg.dll] <Hewlett-Packard Company><1.0.2.2.112404>
[C:\HP\KBD\osd.dll] <Hewlett-Packard Company><1.0.2.2.112404>
[C:\HP\KBD\sct.dll] <Hewlett-Packard Company><1.0.2.2.90204>
[C:\HP\KBD\onl.dll] <Hewlett-Packard Company><1.0.2.0>
[C:\HP\KBD\aol.dll] <Hewlett-Packard Company><1.0.2.2.122104>
[C:\HP\KBD\url.dll] <Hewlett-Packard Company><1.0.2.2.92704>
[C:\HP\KBD\cfg.dll] <Hewlett-Packard Company><1.0.2.1>
[C:\HP\KBD\MSIKBDIF.DLL] <Hewlett-Packard Company><1.0.2.0>
[PID: 1840][C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe] <ATI Technologies, Inc.><6.14.10.5145>
[C:\Program Files\ATI Technologies\ATI Control Panel\atipdsxx.dll] <ATI Technologies, Inc.><6.14.10.5145>
[C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATRPUIXX.CHS] <ATI Technologies, Inc.><6.14.10.5145>
[C:\Program Files\ATI Technologies\ATI Control Panel\atipdxxx.dll] <ATI Technologies, Inc.><6.14.10.5145>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 1856][C:\Program Files\Rising\Rfw\rfwmain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
[C:\Program Files\Rising\Rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[C:\Program Files\Rising\Rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 1868][C:\WINDOWS\VM_STI.EXE] <BIGDOG><4, 2, 610, 4>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[C:\WINDOWS\system32\VM31bPrp.Ax] <Vimicro><1.00.01.00>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 1876][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3512>
[PID: 1992][D:\讯雷\Thunder Network\WebThunder\WebThunder.exe] <深圳市迅雷网络技术有限公司><1, 1, 6, 41>
[D:\讯雷\Thunder Network\WebThunder\taskmanage.dll] <Thunder Networking Technologies,LTD><1, 1, 0, 42>
[D:\讯雷\Thunder Network\WebThunder\download_interface.dll] <Thunder Networking Technologies,LTD><1, 0, 3, 70>
[D:\讯雷\Thunder Network\WebThunder\asyn_dns.dll] <N/A><N/A>
[D:\讯雷\Thunder Network\WebThunder\RegisterDll.dll] <Thunder Networking Technologies,LTD><2, 0, 0, 13>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
[D:\讯雷\Thunder Network\WebThunder\historyinfo_manage.dll] <Thunder Networking Technologies,LTD><5, 2, 0, 150>
[D:\讯雷\Thunder Network\WebThunder\UpdateDownload.dll] <Thunder Networking Technologies,LTD><1, 0, 1, 8>
[D:\讯雷\Thunder Network\WebThunder\UpdateExec.dll] <Thunder Networking Technologies,LTD><1, 0, 1, 5>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[D:\讯雷\Thunder Network\WebThunder\iEmbedShell.dll] <　><1, 0, 0, 10>
[D:\讯雷\Thunder Network\WebThunder\iEmbed03.dll] <　><2, 2, 1, 33>
[D:\瑞星杀毒\杀毒\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 2028][D:\瑞星杀毒\杀毒\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[D:\瑞星杀毒\杀毒\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\瑞星杀毒\杀毒\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\瑞星杀毒\杀毒\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\瑞星杀毒\杀毒\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 136][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 172][C:\Program Files\Messenger\msmsgs.exe] <Microsoft Corporation><4.7.3000>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 208][D:\瑞星杀毒\杀毒\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 32>
[D:\瑞星杀毒\杀毒\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[D:\瑞星杀毒\杀毒\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\瑞星杀毒\杀毒\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\瑞星杀毒\杀毒\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\瑞星杀毒\杀毒\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\瑞星杀毒\杀毒\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\瑞星杀毒\杀毒\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 236][C:\PROGRA~1\baigoo\baigoo.exe] <baigoo.com><1, 0, 0, 1008>

塞纳河流星 - 2006-8-15 9:33:00

[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[C:\PROGRA~1\baigoo\Bgooex.dll] <><1, 0, 0, 1008>
[PID: 1936][C:\WINDOWS\system32\taskmgr.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 384][C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE] <Microsoft Corporation><11.0.5604>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[D:\瑞星杀毒\杀毒\Rising\Rav\RsPlugIn.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
[D:\瑞星杀毒\杀毒\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[C:\PROGRA~1\Kingsoft\XDict\PWOFFI~1.DLL] <N/A><N/A>
[C:\PROGRA~1\COMMON~1\KingSoft\Extract\KSEngine.dll] <金山软件有限公司><3, 0, 0, 0>
[C:\PROGRA~1\COMMON~1\KingSoft\Extract\XDPopWnd.dll] <Kingsoft><1, 0, 0, 0>
[C:\PROGRA~1\COMMON~1\KingSoft\Extract\XImage32.dll] <N/A><N/A>
[C:\PROGRA~1\COMMON~1\KingSoft\Extract\KSVoice.dll] <N/A><N/A>
[D:\瑞星杀毒\杀毒\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LVCMUI5C.DLL] <Lenovo (Beijing) Ltd.><0,3,0,0>
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LVCMSTRN.DLL] <Lenovo (Beijing) Ltd.><1.0.1.14>
[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LVCMDR5C.DLL] <Lenovo (Beijing) Ltd.><0,3,0,0>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 1268][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1336][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 2488][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
[PID: 2596][C:\WINDOWS\system32\wscntfy.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[PID: 3020][C:\WINDOWS\regedit.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[PID: 2836][D:\瑞星杀毒\杀毒\Rising\Rav\Rav.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 75>
[D:\瑞星杀毒\杀毒\Rising\Rav\PlugIn\RsPgScan.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
[D:\瑞星杀毒\杀毒\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[D:\瑞星杀毒\杀毒\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
[D:\瑞星杀毒\杀毒\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[D:\瑞星杀毒\杀毒\Rising\Rav\RavUI.Dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 61>
[D:\瑞星杀毒\杀毒\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[D:\瑞星杀毒\杀毒\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[D:\瑞星杀毒\杀毒\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[D:\瑞星杀毒\杀毒\Rising\Rav\Scanner.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
[D:\瑞星杀毒\杀毒\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[D:\瑞星杀毒\杀毒\Rising\Rav\RavUIMsg.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
[D:\瑞星杀毒\杀毒\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 2920][D:\瑞星杀毒\杀毒\Rising\Rav\RsAgent.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[D:\瑞星杀毒\杀毒\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 2936][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 1984][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[C:\WINDOWS\system32\KakaTool.dll] <Beijing Rising Technology Co., Ltd.><2, 0, 0, 9>
[D:\讯雷\Thunder Network\WebThunder\WebThunderBHO_011.dll] <Thunder Networking Technologies,LTD><6, 0, 0, 2>
[C:\WINDOWS\system32\wmpdrm.dll] <Allsum Info. Tech. Ltd.><2, 0, 0, 1>
[C:\WINDOWS\system32\smflash.ocx] <Macromedia, Inc.><9.0.25.0>
[C:\PROGRA~1\baigoo\baigoobh.dll] <><1, 0, 1, 1008>
[C:\PROGRA~1\baigoo\bgook.dll] <baigoo><1, 0, 0, 1008>
[C:\PROGRA~1\baigoo\plugin\bgoobar\bgoobar.dll] <BAIGOO><1, 0, 0, 1007>
[C:\PROGRA~1\baigoo\plugin\bgoocos\bgoocos.dll] <BAIGOO><1.0.0.1007>
[D:\瑞星杀毒\杀毒\Rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx] <Macromedia, Inc.><8,0,22,0>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[PID: 3268][F:\动漫\智能扫描\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\PROGRA~1\baigoo\baigoohk.dll] < ><1, 0, 0, 1008>
[d:\Herosoft\HeroV8\VCvtShell.dll] <herosoft><1, 0, 0, 1>
[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>

==================================
文件关联
.TXT Error. [notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. [hh.exe %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI Error. [notepad.exe %1]
.INF Error. [notepad.exe %1]
.VBS Error. [wscript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

mopery - 2006-8-15 9:51:00

打开SRE 系统修复修复文件关联...

[GrayX / GrayX]
<C:\WINDOWS\Grow.exe><N/A>
鸽子..安全模式...打开注册表编辑器，展开：HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
搜索GrayX 删除..
删除
C:\WINDOWS\Grow.exe

<KernelFaultCheck><C:\WINDOWS\system32\msime.exe> [Microsoft Corporation]
参考顶置帖...

打开SRE 启动项目注册表
<shell>编辑改成 Explorer.exe
重启删除
ntio.exe(搜一下...搜到后压缩发送bin59420@yahoo.com.cn)

http://www.pctutu.com/srmsdown.asp
下载超级兔子..用超级兔子清理王卸载流氓软件...(安全模式...)

[C:\WINDOWS\system32\quartz32.dll] <><4, 0, 0, 0>
需要用LSPFix 来修复..
LSPFix(汉化版) 下载地址:http://forum.ikaka.com/topic.asp?board=67&artid=5188931
(8楼...)
同时下载WinsockXPFix.exe...(2楼...)
----------------------------------------------------------------
先运行LSPFix ... 勾上我确定要进行修复操作 ...
然后将quartz32.dll移到右边...点下完成...
----------------------------------------------------------------
如果在操作之后不能上网...请用WinsockXPFix.exe 修复一下即可...安全模式下..

开始-所有程序-瑞星杀毒软件-添加删除组件-修复

塞纳河流星 - 2006-8-15 10:03:00

多谢啊大哥,我去试试

geminichen - 2006-8-15 10:11:00

瑞星监控中心无法启动

点击【开始】－【运行】输入cmd,进入DOS提示符下；
运行 cd..（回车）；
cd program files （此步骤是进入系统默认的软件安装目录）；
cd rising （此步骤是进入默认的瑞星安装目录）；
cd rav （此步骤是进入杀毒软件安装目录）；
ravmond –install
ccenter –instal

瑞星监控不能打开的原因是Rising Process Communication Center服务没有启动,只要启动服务就可以打开了！启动方法如下：
首先打开控制面板！然后双击管理工具，再然后双击服务！找到Rising Process Communication Center，然后双击它，将它启动，启动类型为自动。
还有就是：
启动主程序，点“工具列表”，选择“瑞星监控中心”，点“运行”，在弹出的窗口中依次选择“文件监控”，点“开启监控”，再点“引导区监控”，点“开启监控”，依此类推。
再在主程序的“设置”→“详细设置”→“瑞星监控中心”，钩先“启动计算机时，启动瑞星监控中心”。

瑞星监控中心禁用内存监控问题

瑞星杀毒软件监控程序（任务栏中图标是“绿色雨伞”）包括如下几个监控模块：实时监控包括：文件监控、内存监控、邮件发送监控、邮件接收监控、网页监控、注册表监控、引导区监控、漏洞攻击监控。

监控模块没有成功加载或者计算机监控图标呈现黄色打开状态或者红色收起状态，请您首先尝试手动启动监控程序，方法：鼠标右键单击瑞星实时监控图标（桌面右下角任务栏中的小雨伞），在弹出的菜单中选择【开启所有监控】
若问题依旧，可能由以下几种情况引起，请您根据本人计算机情况，参考如下操作:

一.计算机病毒:请您手动启动实时监控,使用最新版本杀毒软件全盘杀毒;
二.软件冲突:
卸载桌面主题修改软件,并恢复Windows默认登陆设置.
三.实时监控程序文件丢失:
请您修复瑞星杀毒软件:
1.在显示器屏幕左下方点击'开始'-'程序'-'瑞星杀毒软件'-'添加删除组件';
2.选择'修复';
3.点击“下一步”...'完成'.
四.服务没有成功加载:
重新加载服务,选择'服务与应用程序'-'服务';
'启动'或者'重新启动'Rising Process Communication Center'和'RsRavMon Service';

整监控设置也不成？

备份后尝试修复

备份步骤：

开始→程序→瑞星杀毒软件→瑞星工具→瑞星安装包制作程序

在本地硬盘中建立安装备份

建立安装备份后完全卸载当前瑞星

使用备份安装包重新安装瑞星

重新安装瑞星时会提示输入ID和序列号

输入当前瑞星的ID和序列号

此安装备份已包含当前瑞星的所有设置

修复步骤：

开始→程序→瑞星杀毒软件→添加删除组件→修复

还是不行的话建议

完全卸载已安装的瑞星

使用备份安装包安装

或凭正版瑞星用户ID和序列号到

瑞星产品升级更新服务：
http://update.rising.com.cn/register/pcver/upgrade.htm

下载并安装

安装前卸载已安装的瑞星
参考资料：别人的帖子,我转发

我的伞也是突然打不开的，按这个步骤做，就打开了。

肯定可以的。

瑞星卡卡安全论坛