瑞星卡卡安全论坛

软件“监控中心”中的“邮件发送监控”和“邮件接受监控”自动变为禁用状态。
右下角的瑞星图标变也为暗浅红黄色。
2。昨天还没问题，今天早上升级病毒库后，就出现了。手动启用两个监控，却没反映。网也断了！
3。重启后，飞鸽传书软件提示 TCP/IP出错。不能上网，卸载网卡重装也没用。杀毒也杀不出任何病毒！！

未知家族病毒分析
扫描结果:
无可疑文件


系统活动进程
C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\MSACM32.DRV

C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\WSCOMMCNTR1.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\WEBSERVICES1.DLL

C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\WINDOWS\SYSTEM32\DRIVERS\CDAC11BA.EXE
C:\WINDOWS\SYSTEM32\NVSVC32.EXE
C:\PROGRAM FILES\RISING\RAV\RAVSTUB.EXE
C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL

C:\WINDOWS\SYSTEM32\ALG.EXE
C:\PROGRAM FILES\AUTOCAD 2004\ACAD.EXE
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\AC1ST16.DLL
C:\PROGRAM FILES\AUTOCAD 2004\MSVCR70.DLL
C:\PROGRAM FILES\AUTOCAD 2004\MSVCP70.DLL
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\ACDB16.DLL
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\ACGE16.DLL
C:\PROGRAM FILES\AUTOCAD 2004\MFC70.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACUI16.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ANAV.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ADUI16.DLL
C:\PROGRAM FILES\AUTOCAD 2004\DSWHIP.DLL
C:\PROGRAM FILES\AUTOCAD 2004\HEIDI8.DLL
C:\PROGRAM FILES\AUTOCAD 2004\DLINT8.DLL
C:\PROGRAM FILES\AUTOCAD 2004\SFTTABAC.DLL
C:\PROGRAM FILES\AUTOCAD 2004\USERDATA.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ADLMDLL.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ADCTRLS.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ADUI16RES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ANAVRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACUI16RES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\DSWHIPRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\SFTTABACRES.DLL
C:\DOCUME~1\1\LOCALS~1\TEMP\~EF60C6\~DF394B.TMP
C:\DOCUME~1\1\LOCALS~1\TEMP\~EF60C6\~DE8C3A.TMP
C:\PROGRAM FILES\AUTOCAD 2004\ADCTRLSRES.DLL
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACADBTN.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACADRES.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ADLMRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PRXYINET.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PRXYINETRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\OLEAPROT.ARX
C:\PROGRAM FILES\AUTOCAD 2004\COLORRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\DRV\GDI8.HDI
C:\PROGRAM FILES\AUTOCAD 2004\DRV\GDI8RES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\DRV\SZB8.HDI
C:\PROGRAM FILES\AUTOCAD 2004\DRV\RBLAST8.HDI
C:\PROGRAM FILES\AUTOCAD 2004\DRV\GDIFONT8.HDI
C:\PROGRAM FILES\AUTOCAD 2004\ACGS.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACGSRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\APPERR.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PLOTCFG8.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PCTRES8.DLL
C:\PROGRAM FILES\AUTOCAD 2004\APPERRRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PLCFMGR.DLL
C:\PROGRAM FILES\AUTOCAD 2004\MSVCI70.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PLCFMGRRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PLCFERR.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PM8.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PMRES8.DLL
C:\PROGRAM FILES\AUTOCAD 2004\PMUTIL8.DLL
C:\PROGRAM FILES\AUTOCAD 2004\HCREG8.DLL
C:\PROGRAM FILES\AUTOCAD 2004\HCREG8RES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\VL.ARX
C:\PROGRAM FILES\AUTOCAD 2004\VLMSG.DLL
C:\PROGRAM FILES\AUTOCAD 2004\VLLIB.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACAPP.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACDBLCLKEDIT.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACDBLCLKEDITPE.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACDBLCLKEDITRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACDIM.ARX
C:\PROGRAM FILES\AUTOCAD 2004\SHAREAC.DLL
C:\PROGRAM FILES\AUTOCAD 2004\SHAREMFC.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACDIMRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACEPLOTX.ARX
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\ACHAPI16.DBX
C:\PROGRAM FILES\AUTOCAD 2004\ACEPLOTXRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACHLNKUI.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACHLNKUIRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACIDROPMGR.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACIDROPMGRRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACLAYERP.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACLAYERPRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACSIGN.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACSIGNRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACSPACETRANS.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACSPACETRANSRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACSTD.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACSTSTDRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACTP.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACTC.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACTCUI.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACTCRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACTCUIRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\WHOHAS.ARX
C:\PROGRAM FILES\AUTOCAD 2004\WHOHASRES.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACETLODR.ARX
C:\PROGRAM FILES\AUTOCAD 2004\WSCOMMCNTRACCON.ARX
C:\PROGRAM FILES\AUTOCAD 2004\WSCOMMCNTRACCONRES.DLL
C:\WINDOWS\SYSTEM32\ACSIGNICON.DLL
C:\PROGRAM FILES\AUTOCAD 2004\ACMTED.ARX
C:\PROGRAM FILES\AUTOCAD 2004\ACMTEDRES.DLL
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\ADRESC16.DLL
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\ACSIGNCORE16.DLL

C:\DOCUME~1\1\LOCALS~1\TEMP\~E5D141.TMP
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL

C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\WINDOWS\SYSTEM32\ACSIGNICON.DLL
C:\PROGRAM FILES\COMMON FILES\AUTODESK SHARED\ACSIGNCORE16.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\WINDOWS\SYSTEM32\NVCPL.DLL
C:\WINDOWS\SYSTEM32\NVRSZHC.DLL
C:\WINDOWS\SYSTEM32\NVSHELL.DLL
C:\WINDOWS\SYSTEM32\RAVEXT.DLL
C:\PROGRA~1\WINZIP\WZSHLSTB.DLL
C:\PROGRAM FILES\WINRAR\RAREXT.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL
C:\PROGRAM FILES\TENCENT\SSPLUS\SADDR.DLL

C:\DOCUMENTS AND SETTINGS\1\桌面\RSDETECT.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL

C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL

C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL

C:\HEROSOFT\HERO3000\SYSEXPLR.EXE
C:\HEROSOFT\HERO3000\AVCDROM.DLL
C:\HEROSOFT\HERO3000\COOLMENU.DLL
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\HEROSOFT\HERO3000\SYS936.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL

C:\WINDOWS\SYSTEM32\RUNDLL32.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL

C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\2.0.301.7164\GTN.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\2.0.301.7164\RES_ZH-TW.DLL
C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBARNOTIFIER\2.0.301.7164\SWG.DLL

C:\PROGRAM FILES\RISING\RAV\RSAGENT.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMX.DLL

C:\WINDOWS\MSAGENT\AGENTSVR.EXE
C:\WINDOWS\SYSTEM32\REMOTEDBG.DLL
C:\PROGRA~1\TENCENT\SSPLUS\SPLUS.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV




[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)