瑞星卡卡安全论坛技术交流区反病毒/反流氓软件论坛 绿伞就变为红伞-所有监控已禁用!!!!!!!!!!!!!

123   3  /  3  页   跳转

绿伞就变为红伞-所有监控已禁用!!!!!!!!!!!!!

先调出任务管理器,结束msime.exe进程
运行System Repair Engineer,使用“启动项目,注册表”来删除以下选项
<KernelFaultCheck><C:\WINDOWS\system32\msime.exe>
删除:
C:\WINDOWS\system32\msime.exe
gototop
 

完成后修复瑞星,不行的话重装...
gototop
 

正在运行的进程
[PID: 432][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 488][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 512][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 556][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 568][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 712][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 760][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 820][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 868][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 996][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1192][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [C:\DOCUME~1\gg\LOCALS~1\Temp\ubhc2mk.dll]  <WinRAR archiver><3, 4, 2, 0>
    [C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll]  <Nero AG><2, 0, 0, 6>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll]  <Nero AG><2, 0, 0, 8>
    [E:\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Common Files\Ahead\lib\MediaLibraryNSE.dll]  <Nero AG><1, 0, 1, 8>
    [C:\Program Files\Common Files\Ahead\lib\NMDataServices.dll]  <Nero AG><1, 0, 1, 9>
    [C:\Program Files\Common Files\Ahead\lib\NMPluginBase.dll]  <Nero AG><1, 0, 1, 9>
    [C:\Program Files\Common Files\Ahead\lib\NMCoFoundation.dll]  <Nero AG><1, 0, 1, 9>
    [C:\Program Files\Common Files\Ahead\lib\NMVDS.dll]  <Nero AG><1, 0, 1, 9>
    [C:\Program Files\Common Files\Ahead\lib\NMIndexStoreSvrPS.dll]  <Nero AG><1, 0, 1, 9>
[PID: 1252][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1468][C:\WINDOWS\system32\msime.exe]  <Microsoft Corporation><5.1.2600.2180>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 1484][C:\WINDOWS\system32\RUNDLL32.EXE]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 1532][C:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 1540][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 1560][C:\Program Files\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30>
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 1672][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  <Microsoft Corporation><7.00.9466>
[PID: 1960][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 1168][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1108][C:\WINDOWS\system32\szwbservice.exe]  <N/A><N/A>
    [C:\WINDOWS\system32\SzwbConn.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\StrokeMBHandle.dll]  <N/A><N/A>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 1928][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
[PID: 164][C:\Program Files\Rising\Rav\Rav.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 75>
    [C:\Program Files\Rising\Rav\PlugIn\RsPgScan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RavUI.Dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 61>
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RavUIMsg.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 25>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 240][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
gototop
 

[d:\Program Files\Tencent\QQ\QQIEHelper.dll]  <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
    [E:\Acrobat 7.0\ActiveX\AcroPDF.CHS]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\WINDOWS\system32\PNCRT.dll]  <Real Networks, Inc><6.0.0.0>
    [C:\Program Files\Common Files\Real\Common\pnrs3260.dll]  <RealNetworks, Inc.><6.0.9.3985>
    [C:\WINDOWS\system32\SZWB.IME]  <三讯技术><2006.1>
    [C:\WINDOWS\system32\StrokeMBHandle.dll]  <N/A><N/A>
    [C:\DOCUME~1\gg\LOCALS~1\Temp\ubhc2mk.dll]  <WinRAR archiver><3, 4, 2, 0>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 1552][C:\WINDOWS\system32\WISPTIS.EXE]  <Microsoft Corporation><1.0.2201.0 (xpsp1.020820-1800)>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [C:\DOCUME~1\gg\LOCALS~1\Temp\ubhc2mk.dll]  <WinRAR archiver><3, 4, 2, 0>
[PID: 648][E:\迅雷\Program\Thunder5.exe]  <Thunder Networking Technologies,LTD><5.2.0.207>
    [E:\迅雷\Program\UpdateDownload.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 8>
    [E:\迅雷\Program\download_interface.dll]  <Thunder Networking Technologies,LTD><1, 0, 3, 70>
    [E:\迅雷\Program\log4cplus.dll]  <><1, 0, 2, 1>
    [E:\迅雷\Program\stlport_vc646.dll]  <STLport Consulting, Inc.><4.6.2003.1031>
    [E:\迅雷\Program\asyn_dns.dll]  <N/A><N/A>
    [E:\迅雷\Program\msgmanage.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 15>
    [E:\迅雷\Program\historyinfo_manage.dll]  <Thunder Networking Technologies,LTD><5, 2, 0, 148>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [E:\迅雷\Program\RegisterDll.dll]  <Thunder Networking Technologies,LTD><1, 2, 0, 7>
    [E:\迅雷\Program\FloatBar.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 2>
    [E:\迅雷\Components\InMedia\iEmbedShell.dll]  < ><1, 0, 0, 5>
    [E:\迅雷\Components\InMedia\iEmbed.dll]  < ><2, 1, 0, 29>
    [E:\迅雷\Components\P4PClient\P4PClient.dll]  <Thunder Networking Technologies,LTD><1, 0, 1, 6>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [E:\迅雷\Program\iTargetAd.dll]  <Thunder Networking Technologies,LTD><1, 0, 0, 60>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>
[PID: 1816][E:\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\PROGRA~1\baidu\iexp\BDSrHook.dll]  <><1, 0, 0, 43>
    [d:\Herosoft\HeroV8\VCvtShell.dll]  <herosoft><1, 0, 0, 1>

==================================
gototop
 
123   3  /  3  页   跳转
页面顶部
Powered by Discuz!NT