瑞星卡卡安全论坛在线技术支持在线技术支持[已关闭] 求助!svchost.exe应用程序错误,怎么办?

123   1  /  3  页   跳转

求助!svchost.exe应用程序错误,怎么办?

求助!svchost.exe应用程序错误,怎么办?

我的电脑一直上网,并安装了瑞星正版的杀毒软件和防火墙,并定期升级(大概10天左右)
可是从周三(9.13)开始,开机一会(状态栏显示上网连接的时候)便会提示:“svchost.exe应用程序错误 0x7c9305f8指令引用的0x00000010内存。该内存不能为read”,然后选择“确定”停止该程序,“取消”调试该程序。点“取消”开始VC调试(晕~自己当然不会调试了~)。出现该提示后,出去“混音器”不能使用(双击“声音控制器”提示没有活动的混音器可以使用),有各种警告音,但各种媒体都播放不了。其他一切正常。

郁闷! 这是什么原因造成的呢,该如何解决呢?请各位大侠出手相助,在下不胜感激……

说明一下,我的xp-2系统是自动升级补丁的


按照 电脑侠客 的指示,用HijackThis1991修复、扫描结果如下,望各位大侠相助!
Mƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°
最后编辑2006-09-29 11:46:48
分享到:
gototop
 

HijackThis_815汉化版扫描日志 V1.99.1
保存于      9:01:11, 日期 2006-9-18
操作系统:  Windows XP SP2 (WinNT 5.01.2600)
浏览器:    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程:         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\Rising\Rav\CCenter.exe
D:\Rising\Rav\Ravmond.exe
d:\rising\rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
d:\rising\rfw\RfwMain.exe
D:\Rising\Rav\RavStub.exe
C:\WINDOWS\System32\tcpsvcs.exe
D:\Rising\Rav\RavTask.exe
D:\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\HijackThis1991zww\HijackThis1991zww.exe

O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file)
O2 - BHO: Microsoft Solo Browser Helper Object - {E3DB85B5-C559-4894-B474-42E89FAA1EFD} - C:\WINDOWS\system32\winmsd.dll (file missing)
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\FLASHGET\fgiebar.dll
O3 - IE工具栏增项: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - 启动项HKLM\\Run: [RfwMain] "D:\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [RavTask] "D:\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [RavScanBD] ; "D:\Rising\Rav\ScanBD.exe" /INST
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - D:\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - D:\FlashGet\jc_all.htm
O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\FLASHGET\flashget.exe
O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\FLASHGET\flashget.exe
O14 - IERESET.INF: START_PAGE_URL=about:blank
O15 - “受信任的站点”中添加项: easyabc.95599.cn
O15 - “受信任的站点”中添加项: www.95599.cn
O16 - DPF: {7260569F-1D40-4E7F-B95B-2E68D35668B9} (MofileUploadX Control) - http://www.mofile.com/activex/UploadFX.CAB
O16 - DPF: {AD0CB4E1-37FB-44A9-A42B-0B084491FB73} (LTCPlayer Class) - http://www.lt21.com.cn/control/ltctrl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A7C3D222-DF01-42CC-96FE-3312D06B9DDE}: NameServer = 69.50.188.180,195.255.176.31
O17 - HKLM\System\CS1\Services\Tcpip\..\{A7C3D222-DF01-42CC-96FE-3312D06B9DDE}: NameServer = 69.50.188.180,195.255.176.31
O18 - 列举现有的协议: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - NT 服务: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Rising\Rav\Ravmond.exe

Mƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°
gototop
 

另外,用autoruns扫描结果如下:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run+ RavScanBDFile not found: ;+ RavTaskRavTimerBeijing Rising Technology Co., Ltd.d:\rising\rav\ravtask.exe+ RfwMainRising Personal FireWall Main ProgramBeijing Rising Technology Co., Ltd.d:\rising\rfw\rfwmain.exeHKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved+ Display Panning CPL ExtensionFile not found: deskpan.dll+ HyperTerminal Icon ExtHyperTerminal Applet LibraryHilgraeve, Inc.c:\windows\system32\hticons.dll+ RISINGRising Shell Ext ModuleBeijing Rising Technology Co., Ltd.c:\windows\system32\ravext.dll+ Shell Extensions for RealOne PlayerRealPlayer Shell ExtensionsRealNetworks, Inc.c:\program files\real\realplayer\rpshell.dll+ WinRAR shell extensionc:\program files\winrar\rarext.dllHKLM\Software\Classes\Folder\Shellex\ColumnHandlers+ PDF Shell ExtensionPDF Shell ExtensionAdobe Systems, Inc.d:\adobe\acrobat 7.0\activex\pdfshell.dllHKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects+ Windows ToyClassFile not found: C:\WINDOWS\system32\winmsd.dllHKLM\Software\Microsoft\Internet Explorer\Toolbar+ FlashGet BarFlashGet IE BarAmaze Softd:\flashget\fgiebar.dllHKLM\Software\Microsoft\Internet Explorer\Extensions+ &FlashGetFlashGetFlashGet.comd:\flashget\flashget.exeTask Scheduler+ DM_Install_Program.jobFile not found: c:\windows\temp\ie6setup-crack.exeHKLM\System\CurrentControlSet\Services+ RfwServiceRising Personal Firewall ServiceBeijing Rising Technology Co., Ltd.d:\rising\rfw\rfwsrv.exe+ RsCCenterCCenterBeijing Rising Technology Co., Ltd.d:\rising\rav\ccenter.exe+ RsRavMonRavMondBeijing Rising Technology Co., Ltd.d:\rising\rav\ravmond.exeHKLM\System\CurrentControlSet\Services+ ALCXWDMAvance AC'97 Audio Driver (WDM)Avance Logic, Inc.c:\windows\system32\drivers\alcxwdm.sys+ BaseTDIbasetdiBeijing Rising Technology Co., Ltd.c:\windows\system32\drivers\basetdi.sys+ basic2NTRksample driverConexantc:\windows\system32\drivers\hsf_bsc2.sys+ ExpScanerExpScan.sysd:\rising\rav\expscan.sys+ FallbackFallback driverConexantc:\windows\system32\drivers\hsf_fall.sys+ FsksFSKsNT driverConexantc:\windows\system32\drivers\hsf_fsks.sys+ HookContTDI HOOK DriverRising tech Co. ltdd:\rising\rav\hookcont.sys+ HookRegd:\rising\rav\hookreg.sys+ HookSysHooksysRisingd:\rising\rav\hooksys.sys+ HookUrlHookUrlBeijing Rising Technology Co., Ltd.d:\rising\rfw\hookurl.sys+ HSF_DPHSF_DP driverConexant Systems, Inc.c:\windows\system32\drivers\hsfdpsp2.sys+ hsf_msftWinACHSF driverConexantc:\windows\system32\drivers\hsf_msft.sys+ HSFHWBS2HSF_HWB2 WDM driverConexant Systems, Inc.c:\windows\system32\drivers\hsfbs2s2.sys+ K56K56NT driverConexantc:\windows\system32\drivers\hsf_k56k.sys+ mdmxsdkDiagnostic Interface DRIVERConexantc:\windows\system32\drivers\mdmxsdk.sys+ MEMSCANMemScan Driver瑞星软件有限公司d:\rising\rav\memscan.sys+ mProcRsRising Personal FireWall  mprocrs.sysBeijing Rising Technology Co., Ltd.d:\rising\rfw\mprocrs.sys+ npkcryptnProtect KeyCrypt DriverINCA Internet Co., Ltd.d:\qq\npkcrypt.sys+ PtilinkDirect Parallel Link DriverParallel Technologies, Inc.c:\windows\system32\drivers\ptilink.sys+ PxHelp20Px Engine Device Driver for Windows 2000/XPSonic Solutionsc:\windows\system32\drivers\pxhelp20.sys+ RksampleRksample WDM driverConexantc:\windows\system32\drivers\hsf_samp.sys+ RsFwDrvnt_fwdrvBeijing Rising Technology Co., Ltd.d:\rising\rfw\rsfwdrv.sys+ rtl8139NDIS 5.0 driver                                                                  Realtek Semiconductor Corporation                                                c:\windows\system32\drivers\rtl8139.sys+ SecdrvSafeDisc driverc:\windows\system32\drivers\secdrv.sys+ SiS315SiS Compatible Super VGA DriverSilicon Integrated Systems Corporationc:\windows\system32\drivers\sisgrp.sys+ sisagpSiS NT AGP FilterSilicon Integrated Systems Corporationc:\windows\system32\drivers\sisagp.sys+ SoftFaxFaxNT driverConexantc:\windows\system32\drivers\hsf_faxx.sys+ TonesTonesNT driverConexantc:\windows\system32\drivers\hsf_tone.sys+ TrojanFindDriverNTFile not found: C:\WINDOWS\system32\NtDriver.sys+ V124V124NT driverConexantc:\windows\system32\drivers\hsf_v124.sys+ winachsfHSF_CNXT driverConexant Systems, Inc.c:\windows\system32\drivers\hsfcxts2.sysHKCU\Control Panel\Desktop\Scrnsave.exe+ ; C:\WINDOWS\System32\水中芭~1.SCRFile not found: ;HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors+ Lexmark Network PortLEXLMPM DLLLexmark International, Inc.c:\windows\system32\lexlmpm.dllMƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°
gototop
 

用HIJACKTHIS修复以下项:
O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file)
O2 - BHO: Microsoft Solo Browser Helper Object - {E3DB85B5-C559-4894-B474-42E89FAA1EFD} -
C:\WINDOWS\system32\winmsd.dll (file missing)


如果存在C:\WINDOWS\system32\winmsd.dll,请删除

另外请搜索一下你的磁盘中有几个svchost.exe文件,其版本,文件大小和属性贴上来。(截图)
Mƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°
gototop
 

[img][/img]http://img654.photo.163.com/pluochang/72057462/2036847148.jpgMƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°
gototop
 

怎么发图呀?Mƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°
gototop
 

搜索结果:Mƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°

附件附件:

您所在的用户组无法下载或查看附件

gototop
 

你查看一下每个svchost的版本及公司信息。应该都是microsoft的程序。然后再看一下系统还有什么问题Mƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°
gototop
 

三个文件只有版本不同,公司都是Microsoft Corporation,产品名称都是Microsoft® Windows® Operating System
系统除了不能播放媒体(各种警告音都正常),其他都正常……
出现错误警告之前能播放媒体,出现后,点击“取消”便不能播了。
还有,第二个文件不知是什么东西……?
Mƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°

附件附件:

您所在的用户组无法下载或查看附件

gototop
 

各文件属性:Mƒˆ÷¨¿$U bbs.ikaka.com3¨X̦E§‡š°

附件附件:

您所在的用户组无法下载或查看附件

gototop
 
123   1  /  3  页   跳转
页面顶部
Powered by Discuz!NT