瑞星卡卡安全论坛

我家有2台电脑,都用了卡卡杀毒后就上不去QQ了,输入帐号密码,一登陆就自动关了,试了很多次了.公司的电脑用了也上不去,不过有错误信息!~高手帮忙看看,我什么都不懂啊!!!~~谢谢了啊,急~~~~

QQ提示的错误信息:
Microsoft Windows XP Service Pack 3 [Build 5.1.2600]
QQ 18.5.777  SP0 KB1 D2417512C28657107857DC248CAA8F4E
-----------------------------------
Type: EXCEPTION_ACCESS_VIOLATION
Address: 0x02B35956
Error: Read address 0xFFFFFFFF
Call stack:
0x02B10000[25956] tavo1.dll: (45308173,45154304,3,0)
0x7C920000[13A23] ntdll.dll: (2010220586,18349824,18272728,18272728)
0x7C800000[C126] kernel32.dll: (0,18349824,54263732,2009113526)
0x77BE0000[2A33B] msvcrt.dll: (0,2010220586,71,18272728)
0x77BE0000[2A3B6] msvcrt.dll: (18272728,2010220586,71,18272728)
0X7C800000[B713] kernel32.dll: (71,18272728,2147086336,-2066000384)
0X77D10000[882A] USER32.dll: (0,0,0,0)

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; WPS)

重装QQ

可能把感染文件删了 从装QQ吧

内存的DLL文件访问失败
LZ重新安装吧

还是没用啊,怎么办啊,不会叫我重新装系统吧,我重新装完QQ貌似变了错误提示

重新装了变成这样了
目标程序发生[可持续]异常，详细信息：[异常类型] EXCEPTION_ACCESS_VIOLATION／
[异常地址] 0x00FA5956／
[出错原因]:对地址[0xFFFFFFFF]进行读操作／操作系统:Microsoft Windows XP Service Pack 3 [Build 5.1.2600]

Registers:
EAX=FFFFFFFF EBX=70000000 ECX=618B2159 EDX=60B90024
ESI=0305FEB4 EDI=00000000 EBP=0305FEC0 ESP=0305FE9C
EIP=00FA5956
Bytes at cs:Eip:
CD 20 2B C4 83 C1 0C 83 F8 18 81 39 C3 CC CC CC 75 07 25 80 0D 00 00 CD 20 83 E9 0C 1B C1 13 C3

Call stack:
0x00F80000[25956] <C:\WINDOWS\system32\tavo1.dll>:    - 0x00FA5956(00FA590D,00F80000,00000003,00000000)
0x7C920000[13A23] ntdll.dll:    - 0x7C933A23(00182000,01175438,011776C8,011776C8)
0x7C800000[C126] kernel32.dll:    - 0x7C80C126(00000000,01175438,0305FFB4,77C0A3B6)
0x77BE0000[2A33B] msvcrt.dll:    - 0x77C0A33B(00000000,00182000,00000000,011776C8)
0x77BE0000[2A3B6] msvcrt.dll:    - 0x77C0A3B6(011776C8,00182000,00000000,011776C8)
0X7C800000[B713] kernel32.dll:    - 0x7C80B713(00000000,00000000,00000000,00000000)

依偶的经验，在杀毒设置选项中，不选择杀毒失败后的删除被感染文件 。。。

卸载卡卡看是否可以登录QQ

卸载了还是没用:kaka4:

将防火墙都关闭，尝试登录QQ，还不行就去反病毒区扫描日志分析。

关了还是没用啊,卡卡都被我删了,怎么看日志啊,我想是把不该删的文件给删了,能不能恢复的?

错误提示

Microsoft Windows XP Service Pack 3 [Build 5.1.2600]

QQ 18.5.777  SP0 KB1 D2417512C28657107857DC248CAA8F4E
-----------------------------------
Type: EXCEPTION_ACCESS_VIOLATION
Address: 0x02A35C59
Error: Read address 0xFFFFFFFF

Call stack:
0x02A10000[25C59] tavo1.dll: (44260374,44105728,3,0)
0x7C920000[13A23] ntdll.dll: (2010220586,18304824,18279592,18279592)
0x7C800000[C126] kernel32.dll: (0,18304824,54263732,2009113526)
0x77BE0000[2A33B] msvcrt.dll: (0,2010220586,71,18279592)
0x77BE0000[2A3B6] msvcrt.dll: (18279592,2010220586,71,18279592)
0X7C800000[B713] kernel32.dll: (71,18279592,2147086336,-2066000384)
0X77D10000[882A] USER32.dll: (0,0,0,0)


Modules:
-----------------------------------
[ 0x00390000 ] C:\WINDOWS\system32\Normaliz.dll [6.0.5441.0,2006-06-29 12:05:42]
[ 0x00400000 ] D:\工具\QQ\QQ.exe [8.0.777.1805,2008-05-14 09:32:28]
[ 0x00E00000 ] C:\WINDOWS\system32\kavo1.dll [,2008-08-23 07:06:46]
[ 0x00ED0000 ] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\miscr3.dll [7.0.0.125,2007-06-28 05:46:57]
[ 0x00F10000 ] D:\卡巴激活码\comx3.dll [21.0.0.24,2008-07-23 00:27:06]
[ 0x00F40000 ] D:\卡巴激活码\Syslay.dll [21.0.0.6,2008-07-23 00:33:30]
[ 0x01350000 ] C:\WINDOWS\system32\xpsp2res.dll [5.1.2600.5512,2008-04-13 14:39:24]
[ 0x01BC0000 ] D:\工具\QQ\QQRes.dll [8.0.776.1805,2008-05-14 23:22:36]
[ 0x02A10000 ] C:\WINDOWS\system32\tavo1.dll [,2008-08-05 12:40:49]
[ 0x03A20000 ] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\dnsq.dll [7.0.0.125,2007-06-28 05:46:55]
[ 0x03A40000 ] C:\WINDOWS\system32\WLDAP32.dll [5.1.2600.5512,2008-04-13 23:13:39]
[ 0x10000000 ] D:\工具\QQ\QQBaseClassInDll.dll [8.0.777.1805,2008-05-14 22:07:06]
[ 0x41D50000 ] C:\WINDOWS\system32\iertutil.dll [7.0.6000.16674,2008-04-23 01:16:40]
[ 0x41FD0000 ] C:\WINDOWS\system32\WININET.dll [7.0.6000.16674,2008-04-23 01:16:35]
[ 0x420B0000 ] C:\WINDOWS\system32\urlmon.dll [7.0.6000.16674,2008-04-23 01:16:35]
[ 0x5ADC0000 ] C:\WINDOWS\system32\uxtheme.dll [6.0.2900.5512,2008-04-13 23:13:20]
[ 0x5EFE0000 ] C:\WINDOWS\system32\OLEPRO32.DLL [5.1.2600.5512,2008-04-13 23:13:24]
[ 0x5FDD0000 ] C:\WINDOWS\system32\NETAPI32.dll [5.1.2600.5512,2008-04-13 23:12:54]
[ 0x60000000 ] C:\WINDOWS\system32\kmon.dll [1.0.0.25,2008-08-14 05:37:19]
[ 0x600A0000 ] D:\工具\QQ\BasicCtrlDll.dll [8.0.777.1805,2008-05-14 07:15:30]
[ 0x60240000 ] D:\工具\QQ\CQQApplication.dll [,2008-05-14 09:16:58]
[ 0x60410000 ] D:\工具\QQ\FlashAvatarDll.dll [1.4.0.1,2008-03-13 22:47:18]
[ 0x60450000 ] D:\工具\QQ\gdiplus.dll [5.1.3102.2180,2004-08-04 04:50:55]
[ 0x608A0000 ] D:\工具\QQ\LoginCtrl.dll [8.0.777.1805,2008-05-14 09:19:50]
[ 0x608F0000 ] D:\工具\QQ\LoginCtrlRes.dll [8.0.777.1805,2008-05-14 09:19:48]
[ 0x60A80000 ] D:\工具\QQ\MailSummary.dll [8.0.777.1805,2008-05-14 09:32:08]
[ 0x60AC0000 ] D:\工具\QQ\MFC42.DLL [6.0.8665.0,1999-12-10 15:17:01]
[ 0x60C60000 ] D:\工具\QQ\NewSkin.dll [8.0.777.1805,2008-05-14 09:11:13]
[ 0x60FD0000 ] C:\WINDOWS\system32\hnetcfg.dll [5.1.2600.5512,2008-04-13 23:12:29]
[ 0x613B0000 ] D:\工具\QQ\QQAPI.dll [8.0.777.1805,2008-05-14 09:19:58]
[ 0x61890000 ] D:\工具\QQ\QQHelperDll.dll [8.0.777.1805,2008-05-14 09:11:46]
[ 0x61980000 ] D:\工具\QQ\QQKnowledgeSearch.dll [8.0.777.1805,2008-05-14 09:14:19]
[ 0x619D0000 ] D:\工具\QQ\QQMainFrame.dll [,2008-05-14 09:22:23]
[ 0x61BE0000 ] C:\WINDOWS\system32\MFC42LOC.DLL [6.0.8665.0,2001-08-31 20:01:06]
[ 0x61BF0000 ] D:\工具\QQ\QQPlugin.dll [,2008-05-14 09:22:42]
[ 0x62420000 ] D:\工具\QQ\QQSpace.dll [8.0.777.1805,2008-05-14 09:21:00]
[ 0x62590000 ] D:\工具\QQ\RICHED20.dll [5.31.23.1218,2003-03-26 00:45:31]
[ 0x62600000 ] D:\工具\QQ\RICHED32.DLL [5.0.2134.1,1999-12-10 15:14:55]
[ 0x62780000 ] D:\工具\QQ\UnReadMsgMgr.dll [,2008-05-14 09:32:23]
[ 0x627C0000 ] D:\工具\QQ\vbscript.dll [5.6.0.7426,2002-02-26 19:58:03]
[ 0x62C20000 ] C:\WINDOWS\system32\LPK.DLL [5.1.2600.5512,2008-04-13 23:12:47]
[ 0x68000000 ] C:\WINDOWS\system32\rsaenh.dll [5.1.2600.5507,2008-03-18 11:39:32]
[ 0x68D60000 ] C:\WINDOWS\system32\DBGHELP.dll [5.1.2600.5512,2008-04-13 23:12:18]
[ 0x70E20000 ] C:\WINDOWS\system32\asycfilt.dll [5.1.2600.5512,2008-04-13 23:12:46]
[ 0x719C0000 ] C:\WINDOWS\System32\mswsock.dll [5.1.2600.5625,2008-06-20 14:46:00]
[ 0x71A00000 ] C:\WINDOWS\System32\wshtcpip.dll [5.1.2600.5512,2008-04-13 23:14:42]
[ 0x71A10000 ] C:\WINDOWS\system32\WS2HELP.dll [5.1.2600.5512,2008-04-13 23:14:33]
[ 0x71A20000 ] C:\WINDOWS\system32\WS2_32.dll [5.1.2600.5512,2008-04-13 23:14:32]
[ 0x71A40000 ] C:\WINDOWS\system32\WSOCK32.dll [5.1.2600.5512,2008-04-13 23:14:44]
[ 0x73620000 ] C:\WINDOWS\system32\msdmo.dll [6.5.2600.5512,2008-04-13 23:14:14]
[ 0x73640000 ] C:\WINDOWS\system32\msctfime.ime [5.1.2600.5512,2008-04-13 23:13:56]
[ 0x73AF0000 ] C:\WINDOWS\system32\AVICAP32.dll [5.1.2600.0,2001-08-31 19:58:59]
[ 0x73B40000 ] C:\WINDOWS\system32\MSVFW32.dll [5.1.2600.5512,2008-04-13 23:15:28]
[ 0x73FA0000 ] C:\WINDOWS\system32\USP10.dll [1.420.2600.5512,2008-04-13 23:13:19]
[ 0x74680000 ] C:\WINDOWS\system32\MSCTF.dll [5.1.2600.5512,2008-04-13 23:13:55]
[ 0x759D0000 ] C:\WINDOWS\system32\userenv.dll [5.1.2600.5512,2008-04-13 23:13:18]
[ 0x75AF0000 ] C:\WINDOWS\system32\devenum.dll [6.5.2600.5512,2008-04-13 23:12:29]
[ 0x75E00000 ] C:\WINDOWS\system32\SXS.DLL [5.1.2600.5512,2008-04-13 23:13:19]
[ 0x75FF0000 ] C:\WINDOWS\system32\MSVCP60.dll [6.2.3104.0,2008-04-13 23:15:26]
[ 0x76060000 ] C:\WINDOWS\system32\setupapi.dll [5.1.2600.5512,2008-04-13 23:13:04]
[ 0x762D0000 ] C:\WINDOWS\system32\WINSTA.dll [5.1.2600.5512,2008-04-13 23:13:33]
[ 0x762F0000 ] C:\WINDOWS\system32\MSIMG32.dll [5.1.2600.5512,2008-04-13 23:14:46]
[ 0x76300000 ] C:\WINDOWS\system32\IMM32.DLL [5.1.2600.5512,2008-04-13 23:13:07]
[ 0x765E0000 ] C:\WINDOWS\system32\crypt32.dll [5.131.2600.5512,2008-04-13 23:13:04]
[ 0x76990000 ] C:\WINDOWS\system32\ole32.dll [5.1.2600.5512,2008-04-13 23:13:16]
[ 0x76B10000 ] C:\WINDOWS\system32\WINMM.dll [5.1.2600.5512,2008-04-13 23:13:53]
[ 0x76BC0000 ] C:\WINDOWS\system32\PSAPI.DLL [5.1.2600.5512,2008-04-13 23:12:59]
[ 0x76C00000 ] C:\WINDOWS\system32\wintrust.dll [5.131.2600.5512,2008-04-13 23:13:34]
[ 0x76C60000 ] C:\WINDOWS\system32\IMAGEHLP.dll [5.1.2600.5512,2008-04-13 23:12:42]
[ 0x76D30000 ] C:\WINDOWS\system32\iphlpapi.dll [5.1.2600.5512,2008-04-13 23:12:27]
[ 0x76DB0000 ] C:\WINDOWS\system32\MSASN1.dll [5.1.2600.5512,2008-04-13 23:13:49]
[ 0x76EF0000 ] C:\WINDOWS\system32\DNSAPI.dll [5.1.2600.5625,2008-06-20 14:46:00]
[ 0x76F20000 ] C:\WINDOWS\system32\Wtsapi32.dll [5.1.2600.5512,2008-04-13 23:14:48]
[ 0x76F80000 ] C:\WINDOWS\System32\winrnr.dll [5.1.2600.5512,2008-04-13 23:13:24]
[ 0x76F90000 ] C:\WINDOWS\system32\rasadhlp.dll [5.1.2600.5512,2008-04-13 23:12:55]
[ 0x76FA0000 ] C:\WINDOWS\system32\CLBCATQ.DLL [2001.12.4414.700,2008-04-13 23:12:34]
[ 0x77020000 ] C:\WINDOWS\system32\COMRes.dll [2001.12.4414.700,2008-04-13 23:12:55]
[ 0x770F0000 ] C:\WINDOWS\system32\OLEAUT32.dll [5.1.2600.5512,2008-04-13 23:13:17]
[ 0x77180000 ] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll [6.0.2900.5512,2008-04-13 23:11:56]
[ 0x77BD0000 ] C:\WINDOWS\system32\VERSION.dll [5.1.2600.5512,2008-04-13 23:13:19]
[ 0x77BE0000 ] C:\WINDOWS\system32\msvcrt.dll [7.0.2600.5512,2008-04-13 23:15:27]
[ 0x77D10000 ] C:\WINDOWS\system32\USER32.dll [5.1.2600.5512,2008-04-13 23:13:17]
[ 0x77DA0000 ] C:\WINDOWS\system32\ADVAPI32.dll [5.1.2600.5512,2008-04-13 23:12:25]
[ 0x77E50000 ] C:\WINDOWS\system32\RPCRT4.dll [5.1.2600.5512,2008-04-13 23:13:02]
[ 0x77EF0000 ] C:\WINDOWS\system32\GDI32.dll [5.1.2600.5512,2008-04-13 23:12:17]
[ 0x77F40000 ] C:\WINDOWS\system32\SHLWAPI.dll [6.0.2900.5512,2008-04-13 23:13:15]
[ 0x77FC0000 ] C:\WINDOWS\system32\Secur32.dll [5.1.2600.5512,2008-04-13 23:13:21]
[ 0x7C800000 ] C:\WINDOWS\system32\kernel32.dll [5.1.2600.5512,2008-04-13 23:13:26]
[ 0x7C920000 ] C:\WINDOWS\system32\ntdll.dll [5.1.2600.5512,2008-04-13 23:13:25]
[ 0x7D590000 ] C:\WINDOWS\system32\SHELL32.dll [6.0.2900.5512,2008-04-13 23:13:10]
___________________________________

:kaka4: :kaka4: :kaka4: :kaka4: :kaka4: :kaka4: :kaka4: :kaka4: :kaka4: :kaka4: :kaka4: :kaka4:

使用System Repair Engineer扫描日志，将日志作为附件上传上来。
下载页面：http://kztechs.com/sreng/download.html
操作方法：
1、下载后解压缩sreng2.zip；
2、运行SREngPS.EXE；
3、依次点击【智能扫描】-【扫描】；
4、耐心等待，扫描结束后点击【保存报告】；
5、选择保存路径，文件名保持默认，直接点击【保存】；
6、打开保存的日志文件SREngLOG.log，完整复制全部内容，新建一个文本文档，将日志中的全部内容粘贴到“新建文本文档.txt”中；
7、将“新建文本文档.txt”作为附件上传，同时务必详细描述问题现象，如果有查杀不净的病毒务必提供病毒名和路径。
注意：扫描前请尽量关闭QQ、游戏、下载工具、媒体播放器等应用程序。