瑞星卡卡安全论坛

完美卸载 - 系统检查检测报告!
建议:修复时请按照高手的反馈编号在修复工具中打勾进行修复.
--------------------------系统环境-------------------------
检测日期: 2008-8-8 10:12
Windows: Microsoft Windows XP
ServicePack: Service Pack 3
Update: 2600.xpsp.080413-2111
Internet Explorer: 6.0.2900.5512

-----------------------网络基础安全测试--------------------
密码安全检测:已经设置了管理员密码,建议:将密码复杂度和长度提高!
网络漏洞检测:空连接检查安全!
服务名称        是否运行              描述
RemoteRegistry [已停止] [说明:这个服务可能被利用远程操作注册表]
Windows Time  [运行中] [说明:这个服务可能被黑客利用来启动木马]
Telnet        [已停止] [说明:这个服务可能被黑客登录到您计算机]
Messenger      [已停止] [说明:这个服务常被广告商用来发垃圾广告]
Server        [运行中] [说明:如果你的电脑不用局域网中,可以关闭]
建议在[控制面板]-[管理工具]-[服务]中,找到这些服务关闭并设置为[禁用].
-----------------------计算机网络端口----------------------
协议      端口号              端口类型
TCP        135        未知类型
TCP        445        未知类型
TCP      1025        未知类型
TCP      6059        未知类型
TCP      1959        未知类型
TCP      1961        未知类型
TCP      1963        未知类型
TCP      1969        未知类型
TCP      1974        未知类型
TCP      1975        未知类型
TCP      1981        未知类型
TCP      1983        未知类型
TCP      1991        未知类型
TCP      1995        未知类型
TCP      1026        未知类型
TCP        139        未知类型
TCP        445        未知类型
TCP        500        未知类型
TCP      4500        未知类型
TCP        123        未知类型
TCP      1900        未知类型
TCP        123        未知类型
TCP      1841        未知类型
TCP      1900        未知类型
TCP        123        未知类型
TCP        137        未知类型
TCP        138        未知类型
TCP      1900        未知类型

--------------------计算机系统组件体检----------------------
[编号:0]
[名称:\SystemRoot\System32\smss.exe]
[类型:运行进程]
[内容:未知]
[编号:1]
[名称:\??\C:\WINDOWS\system32\csrss.exe]
[类型:运行进程]
[内容:未知]
[编号:2]
[名称:\??\C:\WINDOWS\system32\winlogon.exe]
[类型:运行进程]
[内容:未知]
[编号:3]
[名称:C:\WINDOWS\system32\services.exe]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:4]
[名称:C:\WINDOWS\system32\lsass.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:5]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:6]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:7]
[名称:C:\Program Files\Rising\Rav\CCenter.exe]
[类型:运行进程]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:8]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:9]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:10]
[名称:C:\WINDOWS\system32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:11]
[名称:C:\PROGRAM FILES\RISING\RAV\ravmond.exe]
[类型:运行进程]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:12]
[名称:C:\Program Files\Rising\Rfw\rfwsrv.exe]
[类型:运行进程]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:13]
[名称:C:\Program Files\Rising\Rfw\rfwProxy.exe]
[类型:运行进程]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:14]
[名称:C:\Program Files\Rising\Rfw\rfwstub.exe]
[类型:运行进程]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:15]
[名称:C:\PROGRAM FILES\RISING\RAV\RavStub.exe]
[类型:运行进程]
[内容:RavStub Application Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:16]
[名称:C:\WINDOWS\system32\spoolsv.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:17]
[名称:C:\WINDOWS\system32\wdfmgr.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:18]
[名称:C:\WINDOWS\System32\alg.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:19]
[名称:C:\WINDOWS\Explorer.EXE]
[类型:运行进程]
[内容:Microsoft(R) Windows(R) Operating System (C) Microsoft Corporation. All rights reserved.]
[编号:20]
[名称:C:\Program Files\Rising\Rfw\RfwMain.exe]
[类型:运行进程]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:21]
[名称:C:\PROGRAM FILES\RISING\RAV\RavMon.exe]
[类型:运行进程]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:22]
[名称:C:\Program Files\Rising\Rav\RavTask.exe]
[类型:运行进程]
[内容:Rising Antivirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:23]
[名称:C:\WINDOWS\system32\ctfmon.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:24]
[名称:C:\WINDOWS\system32\conime.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:25]
[名称:C:\WINDOWS\System32\svchost.exe]
[类型:运行进程]
[内容:Microsoft? Windows? Operating System ? Microsoft Corporation. All rights reserved.]
[编号:26]
[名称:E:\DOWNLOADS\syssec\syssec.exe]
[类型:运行进程]
[内容:Hijackthis-China电脑安全体检中国绿软基地专用版 版权所有 (C) 2006]
[编号:27]
[分隔符:---------------------------------------------------------------------]
[编号:28]
[名称:C:\Program Files\Rising\Rfw\ijt_base.dll]
[类型:已加载DLL]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:29]
[名称:C:\Program Files\Rising\Rfw\olemon.dll]
[类型:已加载DLL]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:30]
[名称:C:\PROGRAM FILES\RISING\RAV\BWList.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:31]
[名称:C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:32]
[名称:C:\PROGRAM FILES\RISING\RAV\CfgDll.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:33]
[名称:C:\PROGRAM FILES\RISING\RAV\RsLog.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:34]
[名称:C:\PROGRAM FILES\RISING\RAV\ProcCom.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:35]
[名称:C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:36]
[名称:C:\PROGRAM FILES\RISING\RAV\MonRule.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:37]
[名称:C:\PROGRAM FILES\RISING\RAV\Hooksys.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:38]
[名称:C:\PROGRAM FILES\RISING\RAV\HookReg.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:39]
[名称:C:\PROGRAM FILES\RISING\RAV\HookNtos.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:40]
[名称:C:\PROGRAM FILES\RISING\RAV\rswalmon.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:41]
[名称:C:\PROGRAM FILES\RISING\RAV\recomp.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:42]
[名称:C:\PROGRAM FILES\RISING\RAV\refs.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:43]
[名称:C:\PROGRAM FILES\RISING\RAV\ffr.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:44]
[名称:C:\Program Files\Rising\Rav\RsStore.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:45]
[名称:C:\PROGRAM FILES\RISING\RAV\HookCont.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:46]
[名称:C:\Program Files\Rising\Rav\fakescan.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:47]
[名称:C:\Program Files\Rising\Rav\Scanner.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:48]
[名称:C:\PROGRAM FILES\RISING\RAV\viruslib.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:49]
[名称:C:\PROGRAM FILES\RISING\RAV\relibldr.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:50]
[名称:C:\PROGRAM FILES\RISING\RAV\HookWeb.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:51]
[名称:C:\PROGRAM FILES\RISING\RAV\nvfile.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:52]
[名称:C:\PROGRAM FILES\RISING\RAV\scanexec.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:53]
[名称:C:\PROGRAM FILES\RISING\RAV\unexe.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:54]
[名称:C:\PROGRAM FILES\RISING\RAV\scanex.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:55]
[名称:C:\PROGRAM FILES\RISING\RAV\pearc.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:56]
[名称:C:\PROGRAM FILES\RISING\RAV\extfile.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:57]
[名称:C:\Program Files\Rising\Rfw\ProcCom.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:58]
[名称:C:\Program Files\Rising\Rfw\RsCommX2.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:59]
[名称:C:\Program Files\Rising\Rfw\RSAPPMGR.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:60]
[名称:C:\Program Files\Rising\Rfw\CfgDll.dll]
[类型:已加载DLL]
[内容:Rising AntiVirus 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:61]
[名称:C:\Program Files\Rising\Rfw\RfwRule.dll]
[类型:已加载DLL]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:62]
[名称:C:\Program Files\Rising\Rfw\rfwlog.dll]
[类型:已加载DLL]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:63]
[名称:C:\Program Files\Rising\Rfw\Rfwdrv.dll]
[类型:已加载DLL]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]
[编号:64]
[名称:C:\Program Files\Rising\Rfw\ijt_ctrl.dll]
[类型:已加载DLL]
[内容:Rising Personal FireWall 2008 Copyright(C) 2008 Beijing Rising Information Technology Co., Ltd. All Rights Reserved.]

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

楼主描述一下具体有什么问题？
建议使用System Repair Engineer扫描日志作为附件上传，以便于解答～ 
下载页面：http://www.kztechs.com/sreng/download.html
操作方法：
1、下载后解压缩，运行SREngLdr.EXE；
2、如果无法打开尝试把SREngLdr.EXE改名为123.com，并复制到c:\windows目录下运行；
3、依次点击【智能扫描】-【扫描】，耐心等待，扫描结束后点击【保存报告】；
4、选择保存路径，文件名保持默认，直接点击【保存】；
5、将日志文件SREngLOG.log作为附件上传，同时务必详细描述问题现象，如果有查杀不净的病毒务必提供病毒名和路径。
注意：扫描前请尽量关闭QQ、游戏、下载工具、媒体播放器等应用程序。

如果无法运行，请到http://bbs.ikaka.com/showtopic-8517758.aspx下载修改后的sreng工具
或者直接下载：http://bbs.ikaka.com/attachment.aspx?attachmentid=412527