瑞星卡卡安全论坛

Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 15:34    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0
Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 15:28    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0
Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 15:22    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0
Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 15:16    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0
Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 12:36    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0
Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 12:30    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0
Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 11:17    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0
Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 11:11    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0
Trojan.PSW.Lmir.lgn    删除成功    2006-10-01 11:05    文件监控    C:\DOCUME~1\XiaXing\LOCALS~1\Temp    3.exe>>FSG2.0

这个病毒怎么删不了啊，一会就有，总是提示删除成功，在安全模式下面也杀了，启动后又有。。求高手指点。。。

扫个日志上来看看吧！

关闭系统还原，清空IE临时文件夹

Logfile of HijackThis v1.99.1
Scan saved at 16:20:25, on 2006-10-1
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Tm\QQ\QQ.exe
D:\Program Files\Tencent\qq\TIMPlatform.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\conime.exe
C:\DOCUME~1\XiaXing\LOCALS~1\Temp\Rar$EX00.516\HijackThis.exe

O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\RunOnce: [RavStub] "C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKLM\..\RunOnce: [360Safe] Rundll32.exe C:\PROGRA~1\360safe\AntiAdwa.dll,KillAdware
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O16 - DPF: {ACFE8232-03C5-4AEC-AF5E-42B806724096} (KSHScan Control) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{8F15A7BC-EC5F-49A0-9F4F-EE989CC6B172}: NameServer = 202.103.0.68,202.103.0.117
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe

关闭了啊，也清空了，好象嵌在哪个程序里面，昏死了

就是每次提示病毒然后又生成两个病毒文件
Launcher.exe
mywow.dll