【回复“邦源动力”的帖子】
把我发的帖子看完！ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

【回复“暗黑破坏神”的帖子】
现在试试ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

问题：监控屡屡被关闭，不可以自动启动，可以手动启动，病毒杀不彻底，安全模式下无法打开杀毒软件，扫描日志如下：
2006-11-01,09:05:35

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002A><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [N/A]
    <miniqqlive><"C:\Program Files\Tencent\QQLive\MiniQQLive.exe">  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><EXPLORER.EXE>  [(Verified)Microsoft Corporation]
    <Userinit><userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{61232086-2086-1232-8612-086230861232}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\20861232.dll>  [N/A]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><>  [N/A]
    <{26122322-3220-2032-8612-080862322012}><C:\Program Files\Common Files\SYSTEM\26103282.dll>  [N/A]

==================================
启动文件夹
[102328]
  <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\102328.exe -->  [N/A]><N>
[Adobe Reader Speed Launch]
  <C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk --> D:\ADOBER~1\Reader\READER~1.EXE [Adobe Systems Incorporated]><H>
[102328]
  <C:\Documents and Settings\shu chengyi\「开始」菜单\程序\启动\102328.exe -->  [N/A]><N>

==================================
服务
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Rising Proxy  Service / RfwProxySrv]
  <d:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
  <D:\Program Files\Rising\Rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <"D:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[SoundMAX Agent Service / SoundMAX Agent Service (default)]
  <C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>

==================================
驱动程序
[aeaudio / aeaudio]
  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[Rising TDI Base Driver / BaseTDI]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[ExpScaner / ExpScaner]
  <\??\D:\Program Files\Rising\Rav\ExpScan.sys><>
[HOOKAPI / HOOKAPI]
  <\??\D:\PROGRAM FILES\RISING\RAV\HOOKAPI.SYS><瑞星软件有限公司>
[HookCont / HookCont]
  <\??\D:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
  <\??\D:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
  <\??\D:\Program Files\Rising\Rav\HookSys.sys><Rising>
[HookUrl / HookUrl]
  <\??\D:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[MEMSCAN / MEMSCAN]
  <\??\D:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mProcRs / mProcRs]
  <\??\d:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[npkcrypt / npkcrypt]
  <\??\F:\QQ\npkcrypt.sys><N/A>
[nv / nv]
  <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsFwDrv / RsFwDrv]
  <\??\D:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[Secdrv / Secdrv]
  <System32\DRIVERS\secdrv.sys><N/A>
[SIS AGP Bus Filter / sisagp]
  <\SystemRoot\System32\DRIVERS\sisagp.sys><Silicon Integrated Systems Corporation>
[SiS PCI Fast Ethernet Adapter Driver / SISNIC]
  <System32\DRIVERS\sisnic.sys><SiS Corporation>
[smwdm / smwdm]
  <system32\drivers\smwdm.sys><Analog Devices, Inc.>

==================================
浏览器加载项
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[超级兔子上网精灵]
  {43869BB3-22FD-4F15-9B46-238106BA2F4E} <D:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology>
[LiveMediaOcx Control]
  {9242BB35-0DB0-43AC-8DFC-8EA07E63B92A} <C:\PROGRA~1\Tencent\QQLive\QQLive.ocx, N/A>
[上传到QQ网络硬盘]
  <F:\QQ\AddToNetDisk.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://D:\OFFICE~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <F:\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <F:\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <F:\QQ\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
  <D:\BitSpirit\bsurl.htm, N/A>

ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

==================================
正在运行的进程
[PID: 296][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 352][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 376][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\WINDOWS\System32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[PID: 420][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 432][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 592][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 628][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\System32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[PID: 688][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 708][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 740][d:\program files\rising\rfw\rfwproxy.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 14]
    [d:\program files\rising\rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13]
    [d:\program files\rising\rfw\MonMid.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 2]
[PID: 760][D:\Program Files\Rising\Rfw\rfwsrv.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 33]
    [D:\Program Files\Rising\Rfw\RfwRule.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 13]
    [D:\Program Files\Rising\Rfw\rfwlog.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 6]
    [D:\Program Files\Rising\Rfw\Rfwdrv.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 21]
    [D:\Program Files\Rising\Rfw\MonDrv.dll]  [rs, 1, 0, 0, 4]
    [D:\Program Files\Rising\Rfw\ProcLib.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 9]
[PID: 952][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[PID: 1212][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
    [C:\Program Files\Common Files\SYSTEM\26103282.dll]  [N/A, N/A]
    [C:\WINDOWS\System32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [D:\Adobe Reader\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [D:\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1276][D:\Program Files\Rising\Rfw\RfwMain.exe]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 52]
    [D:\Program Files\Rising\Rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 23]
    [C:\WINDOWS\System32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
    [D:\Program Files\Rising\Rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\Program Files\Rising\Rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Common Files\SYSTEM\26103282.dll]  [N/A, N/A]
[PID: 1396][C:\WINDOWS\System32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\Program Files\Common Files\SYSTEM\26103282.dll]  [N/A, N/A]
[PID: 1436][D:\Program Files\Rising\Rav\RavMon.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 33]
    [D:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 26]
    [D:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
    [D:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Common Files\SYSTEM\26103282.dll]  [N/A, N/A]
[PID: 1680][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\WINDOWS\System32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]
[PID: 1720][C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE]  [Microsoft Corporation, 7.00.9466]
[PID: 1780][C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe]  [Analog Devices, Inc., 3, 2, 6, 0]
[PID: 1032][D:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 1128][D:\Program Files\Rising\Rav\Ravmond.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 1, 35]
    [D:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 19]
    [D:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [D:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\Program Files\Rising\Rav\RsLog.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [D:\Program Files\Rising\Rav\HOOKSYS.dll]  [Beijing Rising Technology Co., Ltd., 18, 1, 0, 11]
    [D:\Program Files\Rising\Rav\Scanner.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 32]
    [D:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [D:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [D:\Program Files\Rising\Rav\regmon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [D:\Program Files\Rising\Rav\HookWeb.dll]  [rising, 18, 0, 0, 2]
    [D:\Program Files\Rising\Rav\MemMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [D:\Program Files\Rising\Rav\expscan.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [D:\Program Files\Rising\Rav\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
    [D:\Program Files\Rising\Rav\MailMon.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [D:\Program Files\Rising\Rav\SpamEng.dll]  [N/A, 18, 0, 0, 6]
    [D:\Program Files\Rising\Rav\engine.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 35]
    [D:\Program Files\Rising\Rav\PostTrt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 18]
    [D:\Program Files\Rising\Rav\UnExe.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 11]
    [D:\Program Files\Rising\Rav\ScanExec.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 15]
    [D:\Program Files\Rising\Rav\ScanEx.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 30]
    [D:\Program Files\Rising\Rav\RSUnpack.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 19]
    [D:\Program Files\Rising\Rav\ExtFile.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 24]
    [D:\Program Files\Rising\Rav\NvFile.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 7]
    [D:\Program Files\Rising\Rav\ScanMac.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 10]
    [D:\Program Files\Rising\Rav\ScanSct.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 20]
    [D:\Program Files\Rising\Rav\Unpacker.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [D:\Program Files\Rising\Rav\RsStore.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [D:\Program Files\Rising\Rav\ExtOLE.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 6]
    [D:\Program Files\Rising\Rav\ScanNet.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[PID: 1048][D:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
    [D:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [D:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1704][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 500][C:\WINDOWS\System32\conime.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 1904][D:\Program Files\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\System32\SYNCOR11.DLL]  [SoundMAX, 1.2.3]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1 www1.tmdqq.net
127.0.0.1 www3.57185.com
127.0.0.1 www.im123.net
127.0.0.1 www.im133.com
9.9.9.9 skypetools.tom.com
9.9.9.9 download.3721.com
9.9.9.9 assistant.3721.com
9.9.9.9 iebar.t2t2.com
9.9.9.9 www.94lm.com
9.9.9.9 365tan.com
9.9.9.9 www.duduw.com
9.9.9.9 duduw.com
9.9.9.9 alexa.com
9.9.9.9 www.alexa.com
9.9.9.9 data.alexa.com
9.9.9.9 client.alexa.com
9.9.9.9 log.alexa.com
9.9.9.9 redirect.alexa.com
9.9.9.9 cgi.alexa.com
9.9.9.9 www.cool-pic.com
9.9.9.9 www.511ku.com
9.9.9.9 www.511q.com
9.9.9.9 www.fvip.cn
9.9.9.9 17rm.com
9.9.9.9 www.mv23.com
9.9.9.9 www.911y.com
9.9.9.9 www.kanhaha.com
9.9.9.9 168.tu9.cn
9.9.9.9 liao8.top22.cn
9.9.9.9 top22.cn
9.9.9.9 tu9.cn
9.9.9.9 liao8.tu9.cn
9.9.9.9 www.haha9999.com
9.9.9.9 haha9999.com
9.9.9.9 www.mmm168.com
9.9.9.9 www.rm78.com
9.9.9.9 rm78.com
9.9.9.9 v.511.cc
9.9.9.9 www.kvip.cn
9.9.9.9 www.10uu.com
9.9.9.9 168.8799.com
9.9.9.9 www.movieon.net
9.9.9.9 www.18mei.com
9.9.9.9 vod.xp99.net
9.9.9.9 vcd.58so.com
9.9.9.9 www.movie78.com
9.9.9.9 www.103h.com
9.9.9.9 www.kan8dy.com
9.9.9.9 www.yk88.com
9.9.9.9 www.qq500.cn
9.9.9.9 www.921mn.com
9.9.9.9 www.38mtv.com
9.9.9.9 www.591mn.com
9.9.9.9 liao2.sees8.com
9.9.9.9 www.66pp.net
9.9.9.9 www.581mm.com
9.9.9.9 www.cl258.com
9.9.9.9 www.sedy8.com
9.9.9.9 www.531kdy.com
9.9.9.9 www.ku90.com
9.9.9.9 www.47028.com
9.9.9.9 client.jogo.cn
9.9.9.9 vod.mmm168.com
9.9.9.9 www.521lan.com
9.9.9.9 www.dy87.com
9.9.9.9 www.55p5.com
9.9.9.9 liao.kkddd.com
9.9.9.9 www.ddkkk.com
9.9.9.9 www.setu8.com
9.9.9.9 www.mfvo.com
9.9.9.9 vod.soucn.net
9.9.9.9 vod.88997.com
9.9.9.9 www.777dy.com
9.9.9.9 pi.51.net
9.9.9.9 liao8.ip33.cn
9.9.9.9 2liao8.ip33.cn
9.9.9.9 www.kku98.com
9.9.9.9 wwv.86565.com
9.9.9.9 wwv.vbdy.com
9.9.9.9 00565.com
9.9.9.9 www.88588cc.com
9.9.9.9 www.bb90dy.com
9.9.9.9 www.0011222.com
9.9.9.9 www.5k8dy.com
9.9.9.9 www.0730dy.com
9.9.9.9 www.5111dy.com
9.9.9.9 www.999ko.com
9.9.9.9 www.gongzhusms.com
9.9.9.9 www.cc911.com
9.9.9.9 www.rongtv.com
9.9.9.9 www.8000ys.com
9.9.9.9 www.9myy.com
9.9.9.9 www.920dy.net
9.9.9.9 www.gying.com
9.9.9.9 www.irdex.com
9.9.9.9 count.zhaodl.com

ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

【回复“喀斯特喀斯特”的帖子】

用SRENG删除以下启动项：

启动项目
注册表

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{61232086-2086-1232-8612-086230861232}><C:\Program Files\Common Files\Microsoft

Shared\MSINFO\20861232.dll> [N/A]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><> [N/A]
<{26122322-3220-2032-8612-080862322012}><C:\Program Files\Common

Files\SYSTEM\26103282.dll> [N/A]


启动文件夹
[102328]
<C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\102328.exe --> [N/A]

[102328]
<C:\Documents and Settings\shu chengyi\「开始」菜单\程序\启动\102328.exe --> [N/A]><N>


如果HOST文件不是你修改的，改为127.0.0.1 localhost

重启到安全模式，显示隐藏文件，删除以下文件：

C:\Program Files\Common Files\Microsoft Shared\MSINFO\20861232.dll

C:\Program Files\Common Files\SYSTEM\26103282.dll

C:\Documents and Settings\All Users.WINDOWS\「开始」菜单\程序\启动\102328.exe
C:\Documents and Settings\shu chengyi\「开始」菜单\程序\启动\102328.exe

如果文件无法删除，下载Unlocker,下载地址：http://free5.ys168.com/?ljs3509，在常用软件区。
文件名：unlocker1.8.5.exe 191.1KB。下载完成后安装，找到无法删除的文件，右键选择"unlocker"，查看一下哪个进程在占用该文件，结束对应进程后再删除文件，也可以从Unlocker左侧下方的下拉列表中选择"删除"。ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

我是服务里没有这两项:

Rising Process Communication Center

RsRavMon Service
ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

非常感谢大侠,按照你的方法我的内存无法监控的问题得已解决!
谢谢!!!ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

偶来回答试试!!
我也遇到上面的问题!!
我是这么做的!!
监控中心被病毒干掉后,(也就是打不开)先找到Rising/Rav/Smartup将瑞星升级到最新版本!然后启动瑞星杀毒!!
  杀完后!在程序--->瑞星--->卸载瑞星,然后重新安装瑞星,这里有一步很重要,就是在安装的时候一定要把网关掉,这样才可以在安装后启动瑞星监控中心,如果你是在连网的状态下安装,那肯定不会重新启动监控中心的,至于为什么,我想这可能是瑞星的一个网络验证!
只要跳过这一步!!就可以重新启动监控中心,那你就能再次看到那把可爱的小绿伞了!

到这里还没有完!
装好后,在启动瑞星,再次杀毒!
以确保完无一失!!

记住平时在正常的情况下,你最好在Rising/Rav/下,用BackRav做一个瑞星安装包来安装,这样可以省好多事!!

需要提醒的是:你安装的时候必须要有密码才可以!!
所以没有正版的,就没有办法!!
如果需要安装包,我会传上来!!
ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

按LZ方法  提示出现错误5  话说快点解决这个问题行不~ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx

我的系统是XP SP2 瑞星版本是最新的18.51.31
我的是邮件发送和接收监控被禁用，按以上方法修复说修复成功，但重启系统后还是一样，桔黄的伞ॸó’ñ%î<bbs.ikaka.com¢Õ0›Iãëx