发表于： 2009-04-23 20:01 | 只看楼主 短消息 资料
字号： 小 中 大 1楼

高手,帮我看看

我的电脑上开机出现<无法定位程序输入点?SET-----------@Z于动态链接库RSGUILIB.DLL上>
而且杀毒软件的监控老是自动关了,点杀毒按钮也杀不了毒了,
我试了好多方法,修复过,重装过,有时修复过好杀毒,也杀不出毒,但不知怎么的一会又不能了.
我重装过开始好用,一升级重启又不能用了,我搞有两天了实在没办法了,请求帮助!




Logfile of HijackThis v1.99.1
Scan saved at 20:00:38, on 2009-4-23
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\Ati2evxx.exe
C:\windows\system32\svchost.exe
D:\系统软件\杀毒\sha du\Rising\Rav\CCENTER.EXE
D:\系统软件\杀毒\Rising\Rfw\CCENTER.EXE
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
D:\系统软件\杀毒\kaka\rstray.exe
C:\windows\system32\ctfmon.exe
D:\应用软件\拨号软件\新建文件夹\Hellonet5.01\hnserv.exe
C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe
D:\系统软件\杀毒\sha du\Rising\Rav\RavTask.exe
D:\系统软件\杀毒\Rising\Rfw\RavTask.exe
D:\系统软件\杀毒\sha du\Rising\Rav\ScanFrm.exe
C:\windows\system32\shadow\ShadowService.exe
D:\系统软件\杀毒\Rising\Rfw\rsnetsvr.exe
C:\windows\system32\svchost.exe
D:\系统软件\杀毒\sha du\Rising\Rav\RegGuide.exe
D:\绿色应用软件\鼠标来手写\desk\FullScr32.ExE
D:\应用软件\拨号软件\新建文件夹\Hellonet5.01\HelloNet.exe
D:\应用软件\QQ1\qq2\QQ.exe
D:\应用软件\QQ1\QQ\TXPlatform.exe
D:\应用软件\QQ1\cmqq\qq\QQ.exe
D:\系统软件\杀毒\RISING\RFW\RSTRAY.EXE
D:\系统软件\杀毒\Rising\Rfw\rfwsrv.exe
D:\应用软件\QQ1\cmqq\qq\QQ.exe
D:\系统软件\杀毒\SHA DU\RISING\RAV\RSTRAY.EXE
D:\系统软件\杀毒\SHA DU\RISING\RAV\Ravmond.exe
D:\系统软件\Maxthon\新建文件夹\Maxthon2\Maxthon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\系统软件\杀毒\sha du\Rising\Rav\rsmain.exe
D:\系统软件\杀毒\其他杀毒，进程\ha_hijackthis_1991\HijackThis.exe

O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - D:\应用软件\迅雷\0000\Thunder\ComDlls\TDAtOnce_Now.dll (file missing)
O2 - BHO: IE2EMBHO Class - {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} - D:\easyMule\modules\IE2EM.dll (file missing)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - D:\系统软件\超级兔子\000\MagicSet\haokanbar.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - (no file)
O2 - BHO: 卡卡上网安全助手 - {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} - C:\windows\system32\UrlFilter.dll
O2 - BHO: PPVADownloader - {A986E409-30CC-4185-89BB-AB212C104524} - C:\Program Files\PPLiveVA\DownloaderManager.dll
O3 - Toolbar: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - D:\系统软件\超级兔子\000\MagicSet\haokanbar.dll
O4 - HKLM\..\Run: [RFWTray] "D:\系统软件\杀毒\Rising\Rfw\RsTray.exe" -system
O4 - HKLM\..\Run: [runeip] "D:\系统软件\杀毒\kaka\rstray.exe" /startup
O4 - HKLM\..\Run: [RavTray] "D:\系统软件\杀毒\sha du\Rising\Rav\RsTray.exe" -system
O4 - HKLM\..\Run: [RavTimer] D:\系统软件\杀毒\SHADU~1\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] D:\系统软件\杀毒\SHADU~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKLM\..\Run: [RunShadowTip] C:\windows\system32\Shadow\ShadowTip.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [SRS Audio Sandbox] "C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe" /hideme
O8 - Extra context menu item: 使用迅雷下载 - D:\应用软件\迅雷\Program\geturl.htm
O8 - Extra context menu item: 使用迅雷下载全部链接 - D:\应用软件\迅雷\Program\getallurl.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\应用软件\QQ1\QQ\AddEmotion.htm
O9 - Extra button: (no name) - RsAutorunsDisabled - (no file)
O9 - Extra button: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:\windows\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:\windows\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International
O14 - IERESET.INF: START_PAGE_URL=http://www.foundertech.com
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (EditCtrl Class) - https://img.alipay.com/download/2121/aliedit.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1229374628453
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1229374600046
O17 - HKLM\System\CCS\Services\Tcpip\..\{CD513DE6-A8E7-43E0-9899-E5B518C2A719}: NameServer = 218.2.135.1 61.147.37.1
O20 - AppInit_DLLs: kmon.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\windows\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HelloNet PPPoE Service (HelloNet_PPPoE_Service) - Unknown owner - D:\应用软件\拨号软件\新建文件夹\Hellonet5.01\hnserv.exe" -service (file missing)
O23 - Service: Qvod Terminal - Shenzhen QVOD Technology Co.,Ltd - D:\应用软件\网络电视\快播\QvodPlayer\QvodTerminal.exe
O23 - Service: Rav Process Communication Center (RavCCenter) - Beijing Rising Information Technology Co., Ltd. - D:\系统软件\杀毒\sha du\Rising\Rav\CCENTER.EXE
O23 - Service: Rising RavTask Manager (RavTask) - Unknown owner - D:\系统软件\杀毒\sha du\Rising\Rav\RavTask.exe" RavTask (file missing)
O23 - Service: Rfw Process Communication Center (RfwCCenter) - Beijing Rising Information Technology Co., Ltd. - D:\系统软件\杀毒\Rising\Rfw\CCENTER.EXE
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Information Technology Co., Ltd. - D:\系统软件\杀毒\Rising\Rfw\rfwsrv.exe
O23 - Service: Rising RfwTask Manager (RfwTask) - Unknown owner - D:\系统软件\杀毒\Rising\Rfw\RavTask.exe" RfwTask (file missing)
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Information Technology Co., Ltd. - D:\系统软件\杀毒\SHA DU\RISING\RAV\CCENTER.EXE
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Information Technology Co., Ltd. - D:\系统软件\杀毒\SHA DU\RISING\RAV\Ravmond.exe
O23 - Service: Rising Scan Service (RsScanSrv) - Beijing Rising Information Technology Co., Ltd. - D:\系统软件\杀毒\sha du\Rising\Rav\ScanFrm.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Shadow System Service (ShadowSystemService) - Unknown owner - C:\windows\system32\shadow\ShadowService.exe


用户系统信息：Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)