公司电脑每打开一个网页就会弹出http://www.qqye.com/9/1.htm这个网站..
怎么屏蔽都弄不掉..如何处理???

【回复“啊多多”的帖子】
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
下载HIJACKHTIS导出全部日志

HijackThis@Qoo的扫描日志  V1.97.7
Scan saved at 9:20:39, on 2006-03-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\E_S00RP2.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\SAgent4.exe
C:\WINDOWS\system32\wdfmgr.exe
c:\program files\rising\rfw\RfwMain.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Rising\Rav\RavTask.exe
C:\WINDOWS\svchost.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\Program Files\Internet Explorer\PLUGINS\svchost.exe
C:\Program Files\jdssoftware\wabdc7share\flyenglishspirit.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Tencent\QQ\QQ.exe
C:\Program Files\Tencent\QQ\TIMPlatform.exe
C:\Program Files\Tencent\QQ\qqpet\qqpet.exe
C:\Program Files\Tencent\QQ\QQ.exe
C:\Documents and Settings\OFFICE3\My Documents\My Pictures\新建文件夹\PetRevels-1.3.1-20051219174130\PetRevels.exe
C:\Program Files\Common Files\smartde\sde.exe
D:\Microsoft Office\Office\EXCEL.EXE
C:\Program Files\Tencent\QQ\qqpet\qqpet.exe
C:\Program Files\Tencent\TT\TTraveler.exe
c:\program files\rising\rfw\RfwCfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Downloads\hijackthis1.97_qoo\HijackThis.exe

R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
R3 - URLSearchHook:
O2 - BHO: (no name) - _{15DDE989-CD45-4561-BF99-D22C0D5C2B74}? - (no file)
O2 - BHO: (no name) - _{16A770A0-0E87-4278-B748-2460D64A8386}? - (no file)
O2 - BHO: yPhtb - _{33BBE430-0E42-4f12-B075-8D21ACB10DCB}? - (no file)
O2 - BHO: 360
O2 - BHO: QQIEHelper - _{54EBD53A-9BC1-480B-966A-843A333CA162}? - (no file)
O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINDOWS\system32\wmpdrm.dll
O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F}? - (no file)
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410}? - (no file)
O2 - BHO:
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B}? - (no file)
O2 - BHO: NewWeb Controller - {9ACEEE30-143F-471A-AA45-72B061FE7D60}? - (no file)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\downlo~1\CnsHook.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4}? - (no file)
O2 - BHO: MEobjectSDT - {D4D5C535-BA95-4327-870D-A33826FDD17A}? - (no file)
O3 - Toolbar: (no name) - {F60C7D81-8471-4D40-AAFE-56D318F34C2D}? - (no file)
O3 - Toolbar: (no name) - {406F94F0-504F-4a40-8DFD-58B0666ABEBD}? - (no file)
O3 - Toolbar: ????? - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - HKLM\..\Run: [EPSON ME 1] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3W1.EXE /P10 "EPSON ME 1" /O6 "USB003" /M "ME 1"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [CnsMin] Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [System Manager] C:\WINDOWS\svchost.exe
O4 - HKLM\..\Run: [SVCHOST] C:\Program Files\Internet Explorer\PLUGINS\svchost.exe
O4 - HKLM\..\Run: [JdsEnglishSpirit] C:\Program Files\jdssoftware\wabdc7share\flyenglishspirit.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: NTUSER.DAT
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Startup: AdobeWeb.log
O4 - Startup: ErrorLog.txt
O4 - Global Startup: ntuser.dat
O4 - Global Startup: ntuser.dat.LOG
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: QQ (HKLM)
O11 - Options group: [!CNS] 
O15 - Trusted Zone: http://www.7xi.net
O17 - HKLM\System\CCS\Services\Tcpip\..\{6B8C9F13-03F5-44CB-B325-129A096ECCE9}: NameServer = 202.103.24.68,202.103.0.117

谢谢~可是我今天发现用TT不会有IE那种状况发生啊?是不是IE滴漏洞比较多啊?

错了V1.97.7
找个版本v１.９９.１的

晕。。。等我发了以后连网站都开不了。直接格式化了。。简直是噩梦！

1.进入注册表，查找,点开始---运行，输入regedit
“HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”
删除Run下面的相应项就可以了；
或者在“开始”→“运行”处输入“msconfig”，把启动下面相应的那个网站前面的“√”去掉，重新启动计算机就可以了。

2.修复IE