请将杀毒软件升级至20.17版，再观察该问题是否还会出现。
如果问题依旧请将瑞星安装目录rav下的 RavMonD.exe.txt （找此文件时请选择不要隐藏已知文件类型的扩展名）文件跟帖上传到论坛，谢谢！

需要注意的事项：
1，本机是否有病毒?
2, 如果开机之后出现红伞，确认用任务管理器能不能看到RavMonD.exe？
3，如果不能，马上把 RavMonD.exe.txt 从瑞星安装目录下拷贝上来，然后发到论坛上

新注意事项：
1，如果ravmond.exe 在，请修复系统，如果提示修复失败。卸了重装
这个时候，就不要提交日志了
关键是看ravmond.exe 在不在

RAVMOND.exe
进程文件： RAVMOND 或者 RAVMOND.exe
进程名称： 瑞星杀毒软件
 
描述：
RAVMOND.exe是瑞星杀毒软件相关监控程序。注意：RAVMOND.exe也可能是Lovegate.F木马相关程序。该木马允许攻击者访问你的计算机，窃取密码和个人数据。


出品者： Rising
属于： 瑞星杀毒软件

系统进程： 否
后台程序： 是
使用网络： 是
硬件相关： 否
常见错误： 未知N/A
内存使用： 未知N/A 
安全等级 (0-5): 4
间谍软件： 否
广告软件： 否
病毒： 是
木马: 否

这种情况很少出现,我的机子偶尔也是这样,特别是我杀毒的时候,下面的小伞会出现红色,应该没事的!

建议升级到20.17以后版本的网友们，当托盘内出现红伞状态时（特别是每次开机后查看，若是红伞时），请将瑞星杀毒软件当前安装目录下的RavMonD.exe.txt以附件的跟帖形式上传上来，以便楼主能够第一时间搜集到日志信息，尽快解决网友们遇到的问题。

原来是20.16.XX，偶尔开机小红伞，但可以自己手动开启监控

刚升级的20.17.10
现在开机显示文件监控关闭
手动点开启全部监控后，却显示文件监控，邮件监控，网页监控3个都关闭
一直小黄伞了

[3912] 2007-11-06 15:15:43:765 : WinMain begin!!!
[3912] 2007-11-06 15:15:44:093 : Init Cfg Begin!
[3912] 2007-11-06 15:15:44:093 : Init LogManager Begin!
[3912] 2007-11-06 15:15:44:921 : Init AccessRuleManager Begin!
[3912] 2007-11-06 15:15:45:156 : Init DriverCenter Begin!
[3912] 2007-11-06 15:15:45:937 : Load m_ProcComHelp Begin!!
[3912] 2007-11-06 15:15:45:937 : Create CommunicationObject Begin!!
[3912] 2007-11-06 15:15:46:312 : RavmonD.Control.File,CRavMonBase::Init
[3912] 2007-11-06 15:15:46:312 : RavmonD.Control.File,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:46:875 : CFileAccessControl::AccessThread Create!
[3912] 2007-11-06 15:15:46:875 : CFileAccessControl::AccessAtctionThread Create!
[3912] 2007-11-06 15:15:46:890 : MonIint RAVMOND_CONTROL_FILE
[3912] 2007-11-06 15:15:46:890 : RavmonD.Control.Reg,CRavMonBase::Init
[3912] 2007-11-06 15:15:46:890 : RavmonD.Control.Reg,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:47:406 : CRegAccessControl::AccessThread!
[3912] 2007-11-06 15:15:47:484 : MonIint RAVMOND_CONTROL_REG
[3912] 2007-11-06 15:15:47:484 : RavmonD.Control.Proc,CRavMonBase::Init
[3912] 2007-11-06 15:15:47:484 : RavmonD.Control.Proc,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:47:968 : CProcessAccessControl::AccessThread!
[3912] 2007-11-06 15:15:47:968 : CProcessAccessControl::AccessAtctionThread!
[3912] 2007-11-06 15:15:47:968 : MonIint RAVMOND_CONTROL_PROC
[3912] 2007-11-06 15:15:47:968 : RavmonD.Control.Api,CRavMonBase::Init
[3912] 2007-11-06 15:15:47:968 : RavmonD.Control.Api,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:48:296 : CSysAccessControl::NtAccessThread!
[3912] 2007-11-06 15:15:48:296 : CSysAccessControl::W32AccessThread!
[3912] 2007-11-06 15:15:48:296 : CSysAccessControl::AccessAtctionThread!
[3912] 2007-11-06 15:15:48:296 : MonIint RAVMOND_CONTROL_API
[3912] 2007-11-06 15:15:48:296 : RavmonD.Virus.Action,CRavMonBase::Init
[3912] 2007-11-06 15:15:48:296 : RavmonD.Virus.Action,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:48:625 : CVirusAtcion::InitVirusAction!
[3912] 2007-11-06 15:15:49:031 : CVirusAtcion::CreateObject IRSStoreObj!
[3912] 2007-11-06 15:15:49:031 : MonIint RAVMOND_ACTION
[3912] 2007-11-06 15:15:49:031 : RavmonD.Detect.Proc,CRavMonBase::Init
[3912] 2007-11-06 15:15:49:031 : RavmonD.Detect.Proc,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:49:281 : CDetectProc::AccessThread Create!
[3912] 2007-11-06 15:15:49:281 : MonIint RAVMOND_DETECT_PROC
[3912] 2007-11-06 15:15:49:359 : CMailMonitor::Init WSAStartup!!
[3912] 2007-11-06 15:15:49:390 : CMailMonitor::Init m_MailMonHelp.Load!!
[3912] 2007-11-06 15:15:49:515 : CMailMonitor::Init m_KillMailScanObj.Init!!
[3912] 2007-11-06 15:15:49:656 : Start KillFileThread !!!
[3912] 2007-11-06 15:15:49:656 : CMailMonitor::Init StartAcceptPort!!
[3912] 2007-11-06 15:15:49:656 : CMailMonitor::Init NetThread!!
[3912] 2007-11-06 15:15:49:656 : CMailMonitor::Init m_MailMonHelp.InitMonitor!!
[3912] 2007-11-06 15:15:49:703 : CMailMonitor::Init MailPortChange!!
[3912] 2007-11-06 15:15:49:703 : RavmonD.Mon.Mail,CRavMonBase::Init
[3912] 2007-11-06 15:15:49:703 : RavmonD.Mon.Mail,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:49:984 : MonIint RAVMOND_MON_MAIL
[3912] 2007-11-06 15:15:49:984 : CWebMonitor m_WebMonHelp.Load
[3912] 2007-11-06 15:15:50:078 : CWebMonitor m_KillWebMonScanObj.Init
[3912] 2007-11-06 15:15:50:156 : CWebMonitor m_WebMonHelp.InitWebMon
[3912] 2007-11-06 15:15:50:156 : RavmonD.Mon.Web,CRavMonBase::Init
[3912] 2007-11-06 15:15:50:156 : RavmonD.Mon.Web,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:50:531 : MonIint RAVMOND_MON_WEB
[3912] 2007-11-06 15:15:50:531 : m_PreScanObj init begin!
[3912] 2007-11-06 15:15:50:546 : m_KillExeScanObj init begin!
[3912] 2007-11-06 15:15:50:546 : m_KillDataScanObj init begin!
[3912] 2007-11-06 15:15:50:562 : RavmonD.Mon.File,CRavMonBase::Init
[3912] 2007-11-06 15:15:50:562 : RavmonD.Mon.File,CreateCommunicationObject begin
[3912] 2007-11-06 15:15:50:921 : MonIint RAVMOND_MON_FILE
[1240] 2007-11-06 15:34:51:796 : WinMain begin!!!
[1240] 2007-11-06 15:34:51:890 : Init Cfg Begin!
[1240] 2007-11-06 15:34:52:656 : Init LogManager Begin!
[1240] 2007-11-06 15:34:53:828 : Init AccessRuleManager Begin!
[1240] 2007-11-06 15:34:54:625 : Init DriverCenter Begin!
[1240] 2007-11-06 15:34:55:531 : Load m_ProcComHelp Begin!!
[1240] 2007-11-06 15:34:55:531 : Create CommunicationObject Begin!!
[1240] 2007-11-06 15:34:55:656 : RavmonD.Control.File,CRavMonBase::Init
[1240] 2007-11-06 15:34:55:656 : RavmonD.Control.File,CreateCommunicationObject begin
[1240] 2007-11-06 15:34:55:890 : CFileAccessControl::AccessThread Create!
[1240] 2007-11-06 15:34:55:890 : CFileAccessControl::AccessAtctionThread Create!
[1240] 2007-11-06 15:34:55:953 : MonIint RAVMOND_CONTROL_FILE
[1240] 2007-11-06 15:34:55:953 : RavmonD.Control.Reg,CRavMonBase::Init
[1240] 2007-11-06 15:34:55:953 : RavmonD.Control.Reg,CreateCommunicationObject begin
[1240] 2007-11-06 15:34:56:031 : CRegAccessControl::AccessThread!
[1240] 2007-11-06 15:34:56:187 : MonIint RAVMOND_CONTROL_REG
[1240] 2007-11-06 15:34:56:187 : RavmonD.Control.Proc,CRavMonBase::Init
[1240] 2007-11-06 15:34:56:187 : RavmonD.Control.Proc,CreateCommunicationObject begin
[1240] 2007-11-06 15:34:56:265 : CProcessAccessControl::AccessThread!
[1240] 2007-11-06 15:34:56:265 : CProcessAccessControl::AccessAtctionThread!
[1240] 2007-11-06 15:34:56:312 : MonIint RAVMOND_CONTROL_PROC
[1240] 2007-11-06 15:34:56:312 : RavmonD.Control.Api,CRavMonBase::Init
[1240] 2007-11-06 15:34:56:312 : RavmonD.Control.Api,CreateCommunicationObject begin
[1240] 2007-11-06 15:34:56:406 : CSysAccessControl::NtAccessThread!
[1240] 2007-11-06 15:34:56:406 : CSysAccessControl::W32AccessThread!
[1240] 2007-11-06 15:34:56:421 : CSysAccessControl::AccessAtctionThread!
[1240] 2007-11-06 15:34:56:421 : MonIint RAVMOND_CONTROL_API
[1240] 2007-11-06 15:34:56:421 : RavmonD.Virus.Action,CRavMonBase::Init
[1240] 2007-11-06 15:34:56:421 : RavmonD.Virus.Action,CreateCommunicationObject begin
[1240] 2007-11-06 15:34:56:531 : CVirusAtcion::InitVirusAction!
[1240] 2007-11-06 15:34:56:578 : CVirusAtcion::CreateObject IRSStoreObj!
[1240] 2007-11-06 15:34:56:718 : MonIint RAVMOND_ACTION
[1240] 2007-11-06 15:34:56:718 : RavmonD.Detect.Proc,CRavMonBase::Init
[1240] 2007-11-06 15:34:56:718 : RavmonD.Detect.Proc,CreateCommunicationObject begin
[1240] 2007-11-06 15:34:56:828 : CDetectProc::AccessThread Create!
[1240] 2007-11-06 15:34:56:828 : MonIint RAVMOND_DETECT_PROC
[1240] 2007-11-06 15:34:56:875 : CMailMonitor::Init WSAStartup!!
[1240] 2007-11-06 15:34:56:890 : CMailMonitor::Init m_MailMonHelp.Load!!
[1240] 2007-11-06 15:34:56:953 : CMailMonitor::Init m_KillMailScanObj.Init!!
[1240] 2007-11-06 15:34:57:375 : CMailMonitor::Init m_KillMailScanObj.Init Err!!
[1240] 2007-11-06 15:34:57:375 : RavmonD.Mon.Mail,ExceptionErr
[1240] 2007-11-06 15:34:57:375 : CWebMonitor m_WebMonHelp.Load
[1240] 2007-11-06 15:34:57:390 : CWebMonitor m_KillWebMonScanObj.Init
[1240] 2007-11-06 15:34:57:390 : RavmonD.Mon.Web,ExceptionErr
[1240] 2007-11-06 15:34:57:390 : m_PreScanObj init begin!
[1240] 2007-11-06 15:34:57:390 : RavmonD.Mon.File,ExceptionErr
[1236] 2007-11-06 15:42:17:000 : WinMain begin!!!
[1236] 2007-11-06 15:42:17:093 : Init Cfg Begin!
[1236] 2007-11-06 15:42:17:859 : Init LogManager Begin!
[1236] 2007-11-06 15:42:19:171 : Init AccessRuleManager Begin!
[1236] 2007-11-06 15:42:19:906 : Init DriverCenter Begin!
[1236] 2007-11-06 15:42:21:015 : Load m_ProcComHelp Begin!!
[1236] 2007-11-06 15:42:21:015 : Create CommunicationObject Begin!!
[1236] 2007-11-06 15:42:21:156 : RavmonD.Control.File,CRavMonBase::Init
[1236] 2007-11-06 15:42:21:156 : RavmonD.Control.File,CreateCommunicationObject begin
[1236] 2007-11-06 15:42:21:343 : CFileAccessControl::AccessThread Create!
[1236] 2007-11-06 15:42:21:343 : CFileAccessControl::AccessAtctionThread Create!
[1236] 2007-11-06 15:42:21:453 : MonIint RAVMOND_CONTROL_FILE
[1236] 2007-11-06 15:42:21:453 : RavmonD.Control.Reg,CRavMonBase::Init
[1236] 2007-11-06 15:42:21:453 : RavmonD.Control.Reg,CreateCommunicationObject begin
[1236] 2007-11-06 15:42:21:531 : CRegAccessControl::AccessThread!
[1236] 2007-11-06 15:42:21:593 : MonIint RAVMOND_CONTROL_REG
[1236] 2007-11-06 15:42:21:593 : RavmonD.Control.Proc,CRavMonBase::Init
[1236] 2007-11-06 15:42:21:593 : RavmonD.Control.Proc,CreateCommunicationObject begin
[1236] 2007-11-06 15:42:21:671 : CProcessAccessControl::AccessThread!
[1236] 2007-11-06 15:42:21:671 : CProcessAccessControl::AccessAtctionThread!
[1236] 2007-11-06 15:42:21:718 : MonIint RAVMOND_CONTROL_PROC
[1236] 2007-11-06 15:42:21:718 : RavmonD.Control.Api,CRavMonBase::Init
[1236] 2007-11-06 15:42:21:718 : RavmonD.Control.Api,CreateCommunicationObject begin
[1236] 2007-11-06 15:42:21:875 : CSysAccessControl::NtAccessThread!
[1236] 2007-11-06 15:42:21:875 : CSysAccessControl::W32AccessThread!
[1236] 2007-11-06 15:42:21:875 : CSysAccessControl::AccessAtctionThread!
[1236] 2007-11-06 15:42:21:875 : MonIint RAVMOND_CONTROL_API
[1236] 2007-11-06 15:42:21:875 : RavmonD.Virus.Action,CRavMonBase::Init
[1236] 2007-11-06 15:42:21:875 : RavmonD.Virus.Action,CreateCommunicationObject begin
[1236] 2007-11-06 15:42:22:000 : CVirusAtcion::InitVirusAction!
[1236] 2007-11-06 15:42:22:062 : CVirusAtcion::CreateObject IRSStoreObj!
[1236] 2007-11-06 15:42:22:218 : MonIint RAVMOND_ACTION
[1236] 2007-11-06 15:42:22:218 : RavmonD.Detect.Proc,CRavMonBase::Init
[1236] 2007-11-06 15:42:22:218 : RavmonD.Detect.Proc,CreateCommunicationObject begin
[1236] 2007-11-06 15:42:22:328 : CDetectProc::AccessThread Create!
[1236] 2007-11-06 15:42:22:328 : MonIint RAVMOND_DETECT_PROC
[1236] 2007-11-06 15:42:22:375 : CMailMonitor::Init WSAStartup!!
[1236] 2007-11-06 15:42:22:375 : CMailMonitor::Init m_MailMonHelp.Load!!
[1236] 2007-11-06 15:42:22:437 : CMailMonitor::Init m_KillMailScanObj.Init!!
[1236] 2007-11-06 15:42:22:859 : CMailMonitor::Init m_KillMailScanObj.Init Err!!
[1236] 2007-11-06 15:42:22:859 : RavmonD.Mon.Mail,ExceptionErr
[1236] 2007-11-06 15:42:22:859 : CWebMonitor m_WebMonHelp.Load
[1236] 2007-11-06 15:42:22:875 : CWebMonitor m_KillWebMonScanObj.Init
[1236] 2007-11-06 15:42:22:875 : RavmonD.Mon.Web,ExceptionErr
[1236] 2007-11-06 15:42:22:875 : m_PreScanObj init begin!
[1236] 2007-11-06 15:42:22:875 : RavmonD.Mon.File,ExceptionErr

用AVG和瑞星全盘扫没扫到病毒
任务管理器里能看到RavMonD.exe进程

听楼主说的修复后现在恢复小绿伞了，重起正常

我的情况跟三楼的兄弟一样，我已经升级到最新版本了，是什么原因吗？

刚升级到最新，只是黄伞，邮件监控被禁用了怎么回事？

555 我的也是小红伞
任务管理器里面没有RavMonD.exe.
以前开机可以手动启动.可是最近手动也不行了.
修复了也不管用.
[420] 2007-11-07 16:39:47:234 : WinMain begin!!!
[420] 2007-11-07 16:39:47:250 : Init Cfg Begin!
[420] 2007-11-07 16:39:47:250 : Init LogManager Begin!
[420] 2007-11-07 16:39:47:250 : Init AccessRuleManager Begin!
[420] 2007-11-07 16:39:47:250 : Init DriverCenter Begin!
[420] 2007-11-07 16:39:47:359 : Load m_ProcComHelp Begin!!
[420] 2007-11-07 16:39:47:359 : Create CommunicationObject Begin!!
[420] 2007-11-07 16:39:47:843 : RavmonD.Control.File,CRavMonBase::Init
[420] 2007-11-07 16:39:47:843 : RavmonD.Control.File,CreateCommunicationObject begin
[420] 2007-11-07 16:39:48:406 : CFileAccessControl::AccessThread Create!
[420] 2007-11-07 16:39:48:406 : CFileAccessControl::AccessAtctionThread Create!
[420] 2007-11-07 16:39:48:406 : MonIint RAVMOND_CONTROL_FILE
[420] 2007-11-07 16:39:48:406 : RavmonD.Control.Reg,CRavMonBase::Init
[420] 2007-11-07 16:39:48:406 : RavmonD.Control.Reg,CreateCommunicationObject begin
[420] 2007-11-07 16:39:48:937 : CRegAccessControl::AccessThread!
[420] 2007-11-07 16:39:48:937 : MonIint RAVMOND_CONTROL_REG
[420] 2007-11-07 16:39:48:937 : RavmonD.Control.Proc,CRavMonBase::Init
[420] 2007-11-07 16:39:48:937 : RavmonD.Control.Proc,CreateCommunicationObject begin
[420] 2007-11-07 16:39:49:171 : CProcessAccessControl::AccessThread!
[420] 2007-11-07 16:39:49:171 : CProcessAccessControl::AccessAtctionThread!
[420] 2007-11-07 16:39:49:171 : MonIint RAVMOND_CONTROL_PROC
[420] 2007-11-07 16:39:49:187 : RavmonD.Control.Api,CRavMonBase::Init
[420] 2007-11-07 16:39:49:187 : RavmonD.Control.Api,CreateCommunicationObject begin
[420] 2007-11-07 16:39:49:437 : CSysAccessControl::NtAccessThread!
[420] 2007-11-07 16:39:49:437 : CSysAccessControl::W32AccessThread!
[420] 2007-11-07 16:39:49:437 : CSysAccessControl::AccessAtctionThread!
[420] 2007-11-07 16:39:49:437 : MonIint RAVMOND_CONTROL_API
[420] 2007-11-07 16:39:49:437 : RavmonD.Virus.Action,CRavMonBase::Init
[420] 2007-11-07 16:39:49:437 : RavmonD.Virus.Action,CreateCommunicationObject begin
[420] 2007-11-07 16:39:49:671 : CVirusAtcion::InitVirusAction!
[420] 2007-11-07 16:39:49:734 : CVirusAtcion::CreateObject IRSStoreObj!
[420] 2007-11-07 16:39:49:765 : MonIint RAVMOND_ACTION
[420] 2007-11-07 16:39:49:765 : RavmonD.Detect.Proc,CRavMonBase::Init
[420] 2007-11-07 16:39:49:765 : RavmonD.Detect.Proc,CreateCommunicationObject begin
[420] 2007-11-07 16:39:50:203 : CDetectProc::AccessThread Create!
[420] 2007-11-07 16:39:50:281 : MonIint RAVMOND_DETECT_PROC
[420] 2007-11-07 16:39:50:328 : CMailMonitor::Init WSAStartup!!
[420] 2007-11-07 16:39:50:328 : CMailMonitor::Init m_MailMonHelp.Load!!
[420] 2007-11-07 16:39:50:390 : CMailMonitor::Init m_KillMailScanObj.Init!!
[420] 2007-11-07 16:39:50:656 : Start KillFileThread !!!
[420] 2007-11-07 16:39:50:656 : CMailMonitor::Init StartAcceptPort!!
[420] 2007-11-07 16:39:50:656 : CMailMonitor::Init NetThread!!
[420] 2007-11-07 16:39:50:656 : CMailMonitor::Init m_MailMonHelp.InitMonitor!!
[420] 2007-11-07 16:39:50:703 : CMailMonitor::Init MailPortChange!!
[420] 2007-11-07 16:39:50:703 : RavmonD.Mon.Mail,CRavMonBase::Init
[420] 2007-11-07 16:39:50:703 : RavmonD.Mon.Mail,CreateCommunicationObject begin
[420] 2007-11-07 16:39:50:921 : MonIint RAVMOND_MON_MAIL
[420] 2007-11-07 16:39:50:921 : CWebMonitor m_WebMonHelp.Load
[420] 2007-11-07 16:39:50:953 : CWebMonitor m_KillWebMonScanObj.Init
[420] 2007-11-07 16:39:50:953 : CWebMonitor m_WebMonHelp.InitWebMon
[420] 2007-11-07 16:39:50:953 : RavmonD.Mon.Web,CRavMonBase::Init
[420] 2007-11-07 16:39:50:953 : RavmonD.Mon.Web,CreateCommunicationObject begin
[420] 2007-11-07 16:39:51:187 : MonIint RAVMOND_MON_WEB
[420] 2007-11-07 16:39:51:187 : m_PreScanObj init begin!
[420] 2007-11-07 16:39:51:187 : m_KillExeScanObj init begin!
[420] 2007-11-07 16:39:51:203 : m_KillDataScanObj init begin!
[420] 2007-11-07 16:39:51:203 : RavmonD.Mon.File,CRavMonBase::Init
[420] 2007-11-07 16:39:51:203 : RavmonD.Mon.File,CreateCommunicationObject begin
[420] 2007-11-07 16:39:51:453 : MonIint RAVMOND_MON_FILE
[1824] 2007-11-07 16:41:33:375 : WinMain begin!!!
[1824] 2007-11-07 16:41:33:375 : Init Cfg Begin!
[1824] 2007-11-07 16:41:33:390 : Init LogManager Begin!
[1824] 2007-11-07 16:41:33:390 : Init AccessRuleManager Begin!
[1824] 2007-11-07 16:41:33:390 : Init DriverCenter Begin!
[1824] 2007-11-07 16:41:33:421 : Load m_ProcComHelp Begin!!
[1824] 2007-11-07 16:41:33:421 : Create CommunicationObject Begin!!
[1824] 2007-11-07 16:41:33:562 : RavmonD.Control.File,CRavMonBase::Init
[1824] 2007-11-07 16:41:33:562 : RavmonD.Control.File,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:33:734 : CFileAccessControl::AccessThread Create!
[1824] 2007-11-07 16:41:33:734 : CFileAccessControl::AccessAtctionThread Create!
[1824] 2007-11-07 16:41:33:734 : MonIint RAVMOND_CONTROL_FILE
[1824] 2007-11-07 16:41:33:734 : RavmonD.Control.Reg,CRavMonBase::Init
[1824] 2007-11-07 16:41:33:734 : RavmonD.Control.Reg,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:33:906 : CRegAccessControl::AccessThread!
[1824] 2007-11-07 16:41:33:921 : MonIint RAVMOND_CONTROL_REG
[1824] 2007-11-07 16:41:33:921 : RavmonD.Control.Proc,CRavMonBase::Init
[1824] 2007-11-07 16:41:33:921 : RavmonD.Control.Proc,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:34:093 : CProcessAccessControl::AccessThread!
[1824] 2007-11-07 16:41:34:093 : CProcessAccessControl::AccessAtctionThread!
[1824] 2007-11-07 16:41:34:093 : MonIint RAVMOND_CONTROL_PROC
[1824] 2007-11-07 16:41:34:093 : RavmonD.Control.Api,CRavMonBase::Init
[1824] 2007-11-07 16:41:34:093 : RavmonD.Control.Api,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:34:265 : CSysAccessControl::NtAccessThread!
[1824] 2007-11-07 16:41:34:265 : CSysAccessControl::W32AccessThread!
[1824] 2007-11-07 16:41:34:265 : CSysAccessControl::AccessAtctionThread!
[1824] 2007-11-07 16:41:34:265 : MonIint RAVMOND_CONTROL_API
[1824] 2007-11-07 16:41:34:265 : RavmonD.Virus.Action,CRavMonBase::Init
[1824] 2007-11-07 16:41:34:265 : RavmonD.Virus.Action,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:34:437 : CVirusAtcion::InitVirusAction!
[1824] 2007-11-07 16:41:34:437 : CVirusAtcion::CreateObject IRSStoreObj!
[1824] 2007-11-07 16:41:34:437 : MonIint RAVMOND_ACTION
[1824] 2007-11-07 16:41:34:437 : RavmonD.Detect.Proc,CRavMonBase::Init
[1824] 2007-11-07 16:41:34:437 : RavmonD.Detect.Proc,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:34:609 : CDetectProc::AccessThread Create!
[1824] 2007-11-07 16:41:34:609 : MonIint RAVMOND_DETECT_PROC
[1824] 2007-11-07 16:41:34:625 : CMailMonitor::Init WSAStartup!!
[1824] 2007-11-07 16:41:34:625 : CMailMonitor::Init m_MailMonHelp.Load!!
[1824] 2007-11-07 16:41:34:625 : CMailMonitor::Init m_KillMailScanObj.Init!!
[1824] 2007-11-07 16:41:34:656 : Start KillFileThread !!!
[1824] 2007-11-07 16:41:34:656 : CMailMonitor::Init StartAcceptPort!!
[1824] 2007-11-07 16:41:34:656 : CMailMonitor::Init NetThread!!
[1824] 2007-11-07 16:41:34:656 : CMailMonitor::Init m_MailMonHelp.InitMonitor!!
[1824] 2007-11-07 16:41:34:671 : CMailMonitor::Init MailPortChange!!
[1824] 2007-11-07 16:41:34:671 : RavmonD.Mon.Mail,CRavMonBase::Init
[1824] 2007-11-07 16:41:34:671 : RavmonD.Mon.Mail,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:34:828 : MonIint RAVMOND_MON_MAIL
[1824] 2007-11-07 16:41:34:828 : CWebMonitor m_WebMonHelp.Load
[1824] 2007-11-07 16:41:34:843 : CWebMonitor m_KillWebMonScanObj.Init
[1824] 2007-11-07 16:41:34:843 : CWebMonitor m_WebMonHelp.InitWebMon
[1824] 2007-11-07 16:41:34:843 : RavmonD.Mon.Web,CRavMonBase::Init
[1824] 2007-11-07 16:41:34:843 : RavmonD.Mon.Web,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:35:015 : MonIint RAVMOND_MON_WEB
[1824] 2007-11-07 16:41:35:015 : m_PreScanObj init begin!
[1824] 2007-11-07 16:41:35:015 : m_KillExeScanObj init begin!
[1824] 2007-11-07 16:41:35:015 : m_KillDataScanObj init begin!
[1824] 2007-11-07 16:41:35:015 : RavmonD.Mon.File,CRavMonBase::Init
[1824] 2007-11-07 16:41:35:015 : RavmonD.Mon.File,CreateCommunicationObject begin
[1824] 2007-11-07 16:41:35:187 : MonIint RAVMOND_MON_FILE
[2564] 2007-11-07 16:41:54:718 : WinMain begin!!!

瑞星的工程师好伟大，问题终于解决了，我说最近两天重启怎么不出现小红伞了，不用手动再启用监控了

原来是20.16.XX，前两天开机小红伞一次，升级后解决，今天早晨开机又是小红伞，已经是最新版本。6号杀毒没有发现任何病毒
省略一部分，说字节太长，晕

[1136] 2007-11-07 17:11:18:650 : m_KillDataScanObj init begin!
[1136] 2007-11-07 17:11:18:650 : RavmonD.Mon.File,CRavMonBase::Init
[1136] 2007-11-07 17:11:18:650 : RavmonD.Mon.File,CreateCommunicationObject begin
[1136] 2007-11-07 17:11:18:740 : MonIint RAVMOND_MON_FILE
[2640] 2007-11-08 01:40:11:464 : WinMain begin!!!
[2640] 2007-11-08 01:40:11:504 : Init Cfg Begin!
[2640] 2007-11-08 01:40:11:524 : Init LogManager Begin!
[2640] 2007-11-08 01:40:12:305 : Init AccessRuleManager Begin!
[2640] 2007-11-08 01:40:12:636 : Init DriverCenter Begin!
[2640] 2007-11-08 01:40:14:669 : Load m_ProcComHelp Begin!!
[2640] 2007-11-08 01:40:14:669 : Create CommunicationObject Begin!!
[2640] 2007-11-08 01:40:15:029 : RavmonD.Control.File,CRavMonBase::Init
[2640] 2007-11-08 01:40:15:029 : RavmonD.Control.File,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:15:360 : CFileAccessControl::AccessThread Create!
[2640] 2007-11-08 01:40:15:360 : CFileAccessControl::AccessAtctionThread Create!
[2640] 2007-11-08 01:40:15:410 : MonIint RAVMOND_CONTROL_FILE
[2640] 2007-11-08 01:40:15:410 : RavmonD.Control.Reg,CRavMonBase::Init
[2640] 2007-11-08 01:40:15:410 : RavmonD.Control.Reg,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:15:680 : CRegAccessControl::AccessThread!
[2640] 2007-11-08 01:40:15:790 : MonIint RAVMOND_CONTROL_REG
[2640] 2007-11-08 01:40:15:790 : RavmonD.Control.Proc,CRavMonBase::Init
[2640] 2007-11-08 01:40:15:790 : RavmonD.Control.Proc,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:16:061 : CProcessAccessControl::AccessThread!
[2640] 2007-11-08 01:40:16:061 : CProcessAccessControl::AccessAtctionThread!
[2640] 2007-11-08 01:40:16:281 : MonIint RAVMOND_CONTROL_PROC
[2640] 2007-11-08 01:40:16:281 : RavmonD.Control.Api,CRavMonBase::Init
[2640] 2007-11-08 01:40:16:281 : RavmonD.Control.Api,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:16:511 : CSysAccessControl::NtAccessThread!
[2640] 2007-11-08 01:40:16:511 : CSysAccessControl::W32AccessThread!
[2640] 2007-11-08 01:40:16:511 : CSysAccessControl::AccessAtctionThread!
[2640] 2007-11-08 01:40:16:541 : MonIint RAVMOND_CONTROL_API
[2640] 2007-11-08 01:40:16:541 : RavmonD.Virus.Action,CRavMonBase::Init
[2640] 2007-11-08 01:40:16:541 : RavmonD.Virus.Action,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:16:812 : CVirusAtcion::InitVirusAction!
[2640] 2007-11-08 01:40:17:042 : CVirusAtcion::CreateObject IRSStoreObj!
[2640] 2007-11-08 01:40:17:072 : MonIint RAVMOND_ACTION
[2640] 2007-11-08 01:40:17:072 : RavmonD.Detect.Proc,CRavMonBase::Init
[2640] 2007-11-08 01:40:17:072 : RavmonD.Detect.Proc,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:17:312 : CDetectProc::AccessThread Create!
[2640] 2007-11-08 01:40:17:312 : MonIint RAVMOND_DETECT_PROC
[2640] 2007-11-08 01:40:17:352 : CMailMonitor::Init WSAStartup!!
[2640] 2007-11-08 01:40:17:352 : CMailMonitor::Init m_MailMonHelp.Load!!
[2640] 2007-11-08 01:40:17:393 : CMailMonitor::Init m_KillMailScanObj.Init!!
[2640] 2007-11-08 01:40:17:503 : Start KillFileThread !!!
[2640] 2007-11-08 01:40:17:503 : CMailMonitor::Init StartAcceptPort!!
[2640] 2007-11-08 01:40:17:523 : CMailMonitor::Init NetThread!!
[2640] 2007-11-08 01:40:17:523 : CMailMonitor::Init m_MailMonHelp.InitMonitor!!
[2640] 2007-11-08 01:40:17:543 : CMailMonitor::Init MailPortChange!!
[2640] 2007-11-08 01:40:17:543 : RavmonD.Mon.Mail,CRavMonBase::Init
[2640] 2007-11-08 01:40:17:543 : RavmonD.Mon.Mail,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:17:803 : MonIint RAVMOND_MON_MAIL
[2640] 2007-11-08 01:40:17:803 : CWebMonitor m_WebMonHelp.Load
[2640] 2007-11-08 01:40:17:843 : CWebMonitor m_KillWebMonScanObj.Init
[2640] 2007-11-08 01:40:17:843 : CWebMonitor m_WebMonHelp.InitWebMon
[2640] 2007-11-08 01:40:17:843 : RavmonD.Mon.Web,CRavMonBase::Init
[2640] 2007-11-08 01:40:17:843 : RavmonD.Mon.Web,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:18:094 : MonIint RAVMOND_MON_WEB
[2640] 2007-11-08 01:40:18:094 : m_PreScanObj init begin!
[2640] 2007-11-08 01:40:18:104 : m_KillExeScanObj init begin!
[2640] 2007-11-08 01:40:18:104 : m_KillDataScanObj init begin!
[2640] 2007-11-08 01:40:18:114 : RavmonD.Mon.File,CRavMonBase::Init
[2640] 2007-11-08 01:40:18:114 : RavmonD.Mon.File,CreateCommunicationObject begin
[2640] 2007-11-08 01:40:18:314 : MonIint RAVMOND_MON_FILE
[1144] 2007-11-08 07:02:22:726 : WinMain begin!!!
[1144] 2007-11-08 07:02:22:756 : Init Cfg Begin!
[1144] 2007-11-08 07:02:23:397 : Init LogManager Begin!
[1144] 2007-11-08 07:02:23:907 : Init AccessRuleManager Begin!
[1144] 2007-11-08 07:02:24:168 : Init DriverCenter Begin!
[1144] 2007-11-08 07:02:24:999 : Load m_ProcComHelp Begin!!
[1144] 2007-11-08 07:02:24:999 : Create CommunicationObject Begin!!
[1144] 2007-11-08 07:02:25:049 : Create Communication Object Err!! 00000000
[1144] 2007-11-08 07:02:25:550 : Create CommunicationObject Begin!!
[1144] 2007-11-08 07:02:25:610 : RavmonD.Control.File,CRavMonBase::Init
[1144] 2007-11-08 07:02:25:610 : RavmonD.Control.File,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:25:690 : CFileAccessControl::AccessThread Create!
[1144] 2007-11-08 07:02:25:690 : CFileAccessControl::AccessAtctionThread Create!
[1144] 2007-11-08 07:02:25:770 : MonIint RAVMOND_CONTROL_FILE
[1144] 2007-11-08 07:02:25:770 : RavmonD.Control.Reg,CRavMonBase::Init
[1144] 2007-11-08 07:02:25:770 : RavmonD.Control.Reg,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:25:860 : CRegAccessControl::AccessThread!
[1144] 2007-11-08 07:02:25:970 : MonIint RAVMOND_CONTROL_REG
[1144] 2007-11-08 07:02:25:970 : RavmonD.Control.Proc,CRavMonBase::Init
[1144] 2007-11-08 07:02:25:970 : RavmonD.Control.Proc,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:26:141 : CProcessAccessControl::AccessThread!
[1144] 2007-11-08 07:02:26:141 : CProcessAccessControl::AccessAtctionThread!
[1144] 2007-11-08 07:02:26:591 : MonIint RAVMOND_CONTROL_PROC
[1144] 2007-11-08 07:02:26:591 : RavmonD.Control.Api,CRavMonBase::Init
[1144] 2007-11-08 07:02:26:591 : RavmonD.Control.Api,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:26:681 : CSysAccessControl::NtAccessThread!
[1144] 2007-11-08 07:02:26:691 : CSysAccessControl::W32AccessThread!
[1144] 2007-11-08 07:02:26:691 : CSysAccessControl::AccessAtctionThread!
[1144] 2007-11-08 07:02:26:691 : MonIint RAVMOND_CONTROL_API
[1144] 2007-11-08 07:02:26:691 : RavmonD.Virus.Action,CRavMonBase::Init
[1144] 2007-11-08 07:02:26:691 : RavmonD.Virus.Action,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:26:772 : CVirusAtcion::InitVirusAction!
[1144] 2007-11-08 07:02:27:543 : CVirusAtcion::CreateObject IRSStoreObj!
[1144] 2007-11-08 07:02:27:603 : MonIint RAVMOND_ACTION
[1144] 2007-11-08 07:02:27:603 : RavmonD.Detect.Proc,CRavMonBase::Init
[1144] 2007-11-08 07:02:27:603 : RavmonD.Detect.Proc,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:27:713 : CDetectProc::AccessThread Create!
[1144] 2007-11-08 07:02:27:713 : MonIint RAVMOND_DETECT_PROC
[1144] 2007-11-08 07:02:27:883 : CMailMonitor::Init WSAStartup!!
[1144] 2007-11-08 07:02:27:883 : CMailMonitor::Init m_MailMonHelp.Load!!
[1144] 2007-11-08 07:02:27:973 : CMailMonitor::Init m_KillMailScanObj.Init!!
[1144] 2007-11-08 07:02:28:093 : Start KillFileThread !!!
[1144] 2007-11-08 07:02:28:104 : CMailMonitor::Init StartAcceptPort!!
[1144] 2007-11-08 07:02:28:114 : CMailMonitor::Init NetThread!!
[1144] 2007-11-08 07:02:28:114 : CMailMonitor::Init m_MailMonHelp.InitMonitor!!
[1144] 2007-11-08 07:02:28:114 : CMailMonitor::Init MailPortChange!!
[1144] 2007-11-08 07:02:28:114 : RavmonD.Mon.Mail,CRavMonBase::Init
[1144] 2007-11-08 07:02:28:114 : RavmonD.Mon.Mail,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:28:184 : MonIint RAVMOND_MON_MAIL
[1144] 2007-11-08 07:02:28:184 : CWebMonitor m_WebMonHelp.Load
[1144] 2007-11-08 07:02:28:214 : CWebMonitor m_KillWebMonScanObj.Init
[1144] 2007-11-08 07:02:28:214 : CWebMonitor m_WebMonHelp.InitWebMon
[1144] 2007-11-08 07:02:28:214 : RavmonD.Mon.Web,CRavMonBase::Init
[1144] 2007-11-08 07:02:28:214 : RavmonD.Mon.Web,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:28:294 : MonIint RAVMOND_MON_WEB
[1144] 2007-11-08 07:02:28:294 : m_PreScanObj init begin!
[1144] 2007-11-08 07:02:28:294 : m_KillExeScanObj init begin!
[1144] 2007-11-08 07:02:28:294 : m_KillDataScanObj init begin!
[1144] 2007-11-08 07:02:28:304 : RavmonD.Mon.File,CRavMonBase::Init
[1144] 2007-11-08 07:02:28:304 : RavmonD.Mon.File,CreateCommunicationObject begin
[1144] 2007-11-08 07:02:28:384 : MonIint RAVMOND_MON_FILE