我的小表弟表妹来我家玩基本上都是会中病毒的,这次他们又考验我了.因为中的病毒比较多所以不知道病毒的名字,没办法找到专门对付病毒的办法,而且我的瑞星安全中心也因为给病毒关闭了.把services.msc里的RsRavMon Service关闭之后安全中心就无法启动各种监控,我每次把那启动之后就能开安全中心了,但是只要重新启动之后那个选项又给关闭了.所以麻烦大家给点办法处理下/

急救

2006-08-18,21:34:25

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows XP Professional Service Pack 2 - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvMediaCenter><; RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <yassistse><"C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <YOKAssiant><Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant uninstall>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINDOWS\System32\Userinit.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
[网络快车]
  <C:\Documents and Settings\彭胜华\「开始」菜单\程序\启动\网络快车.lnk><N>
[快捷方式 到 RavMon]
  <C:\Documents and Settings\彭胜华\「开始」菜单\程序\启动\快捷方式 到 RavMon.lnk><N>

==================================
服务
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

==================================
浏览器加载项
[Yahoo!Photo]
  {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll, Yahoo! China>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <F:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[DragSearch BHO]
  {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL, yahoo! china>
[]
  {A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\PROGRA~1\KuGoo\KUGOO3~1.OCX, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <F:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[金山快译(&K)]
  {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <C:\PROGRA~1\Kingsoft\FastAIT\IEBand.dll, >
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[雅虎助手]
  {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll, yahoo! china>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[添加到雅虎订阅(&Y)]
  <res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT, N/A>
[雅虎搜索]
  <res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/203, N/A>

==================================

[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
    [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll]  <Yahoo! China><3, 0, 0, 1002>
    [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll]  <Yahoo! China><3, 0, 0, 1001>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll]  <Yahoo! China><3, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll]  <3721.com><2, 1, 1, 87>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yoptimum.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yxpstyle.dll]  <Yahoo! China><3, 0, 0, 1000>
[PID: 1284][C:\Program Files\TTPlayer\TTPlayer.exe]  <Alen Soft><4, 6, 7, 0>
    [C:\Program Files\TTPlayer\ttpcomm.dll]  <N/A><N/A>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\Program Files\TTPlayer\ttpres.dll]  <Alen Soft><4, 6, 7, 0>
    [C:\Program Files\TTPlayer\AddIn\ttp_lrcsh.dll]  <N/A><N/A>
[PID: 192][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  <yahoo! china><3, 2, 2, 1067>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll]  <yahoo! china><3, 0, 3, 1038>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ysearch.dll]  <Yahoo! China><3, 0, 1, 1001>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasnoad.dll]  <yahoo! china><3, 0, 0, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yzsNetProto.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yaswiper.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasiesec.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ysettings.dll]  <yahoo! china><3, 0, 1, 1001>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ymailp.dll]  <Yahoo! China><3.0.0.1006>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\WINDOWS\System32\xunleibho_v4.dll]  <><4, 3, 2, 29>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll]  <yahoo! china><3, 0, 0, 1001>
    [C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll]  <CNNIC><2, 0, 0, 0>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL]  <yahoo! china><3, 0, 0, 1000>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [D:\PROGRA~1\KuGoo\KUGOO3~1.OCX]  <N/A><N/A>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yassist.dll]  <Yahoo! China><3, 0, 7, 1012>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll]  <Yahoo! China><3, 0, 0, 1002>
    [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll]  <Yahoo! China><3, 0, 0, 1001>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll]  <Yahoo! China><3, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll]  <3721.com><2, 1, 1, 87>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yoptimum.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yxpstyle.dll]  <Yahoo! China><3, 0, 0, 1000>
[PID: 2436][F:\Program Files\Tencent\Tencent\qq\QQ.exe]  <TENCENT><0, 0, 0, 0>
    [F:\Program Files\Tencent\Tencent\qq\CoralAssist.DLL]  <Coral Team><4.5.0 build 20060515>
    [F:\Program Files\Tencent\Tencent\qq\CoralQQ.DLL]  <Coral Team><4.5.1 Build 20060620>
    [F:\Program Files\Tencent\Tencent\qq\ipsearcher.dll]  <N/A><1.0.0.4>
    [F:\Program Files\Tencent\Tencent\qq\QQBaseClassInDll.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQHelperDll.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\BasicCtrlDll.dll]  <Tencent><5, 0, 200, 160>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [F:\Program Files\Tencent\Tencent\qq\QQAPI.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
    [F:\Program Files\Tencent\Tencent\qq\LoginCtrl.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\npkcntc.dll]  <INCA Internet Co., Ltd.><2006, 3, 2, 1>
    [F:\Program Files\Tencent\Tencent\qq\npkpdb.dll]  <INCA Internet Co., Ltd.><2003, 10, 1, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQRes.dll]  <tencent><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\WizardCtrl.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQMainFrame.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
    [F:\Program Files\Tencent\Tencent\qq\CQQApplication.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\NewSkin.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\HostingMgr.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\CameraDll.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\MailSummary.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQSpace.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\System32\msdmo.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\QQGroupMng.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\GroupLive.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\UserDefinedHead.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQPlugin.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\QQConfigPlugin.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\LongConnection.dll]  <tencent><5, 0, 200, 160>
    [F:\Program Files\Tencent\Tencent\qq\QRingMng.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\PhoneAPI.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\DialerAllinOne.dll]  <tencent><1, 4, 0, 0>
    [F:\Program Files\Tencent\Tencent\qq\QQAllInOne.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\SCCore.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\QQPet.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQCustomFace.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\FlashAvatarDll.dll]  <><1, 4, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQSceneMng.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\QQAvatar.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\qqgroupdisk.dll]  <深圳腾讯科技><2, 1, 101, 40>
    [F:\Program Files\Tencent\Tencent\qq\GroupConnection.dll]  <Tencent><5, 0, 202, 170>
    [F:\Program Files\Tencent\Tencent\qq\QQSysMsgMng.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [F:\Program Files\Tencent\Tencent\qq\BQQApplication.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [F:\Program Files\Tencent\Tencent\qq\CommercesMng.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQUdpGetFileLib.dll]  <tencent><0, 2, 2, 3>
    [F:\Program Files\Tencent\Tencent\qq\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
    [F:\Program Files\Tencent\Tencent\qq\QQZip.dll]  <tencent><0, 3, 2, 4>
    [F:\Program Files\Tencent\Tencent\qq\QQMMSender.dll]  <N/A><N/A>
    [F:\Program Files\Tencent\Tencent\qq\QQSettingCtrl.dll]  <><1, 0, 0, 1>
    [F:\Program Files\Tencent\Tencent\qq\QQNetDisk.dll]  <深圳腾讯科技><7, 2, 103, 141>
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 2448][F:\Program Files\Tencent\Tencent\qq\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [F:\Program Files\Tencent\Tencent\qq\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 4068][E:\毒打病毒工具\systools\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

看到旁边的那个“手动”了吗？把它改成“自动”