1   1  /  1  页   跳转

[求助] ravmond.exe进程关机时注册表文件仍在使用

ravmond.exe进程关机时注册表文件仍在使用

每次关机下次再开机就有这个警告,瑞星不会坏吧?
(我用的是windows7家庭普通版,瑞星全功能软件)



日志名称:          Application
来源:            Microsoft-Windows-User Profiles Service
日期:            2010/6/16 19:31:48
事件 ID:        1530
任务类别:          无
级别:            警告
关键字:         
用户:            SYSTEM
计算机:          lenovo-PC
描述:
Windows 检测到注册表文件仍在由其他应用程序或服务使用。将立即卸载此文件。包含注册表文件的应用程序或服务以后可能无法正确运行。
详细信息 -
10 user registry handles leaked from \Registry\User\S-1-5-21-2703450207-2250672997-3406795786-1001:
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software\Policies
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 896 (\Device\HarddiskVolume2\Program Files\Rising\Ris\RavMonD.exe) has opened key \REGISTRY\USER\S-1-5-21-2703450207-2250672997-3406795786-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings

用户系统信息:Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729)
最后编辑cat2004 最后编辑于 2010-06-17 19:15:47
分享到:
gototop
 

回复: ravmond.exe进程关机时注册表文件仍在使用

gototop
 

回复:ravmond.exe进程关机时注册表文件仍在使用

我从系统和瑞星新装的第一天就是这样滴
gototop
 

回复:ravmond.exe进程关机时注册表文件仍在使用

windows7家庭普通版32位  版本6.1(内部版本7600)
瑞星全功能软件22.00.04.12    病毒库22.52.03.03
最后编辑cat2004 最后编辑于 2010-06-17 19:15:09
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT