最近老是死机,老是跳出网页,"2006世界杯女主持选票"之类的,瑞星监控没了影,点他没反应....我要疯了,帮帮我吧....

Logfile of HijackThis v1.99.1
Scan saved at 9:57:27, on 2006-6-4
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
F:\Rising\Rav\RavTask.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
D:\TT\TTraveler.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\user\桌面\新建文件夹\杀毒\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: wmpdrm - {0E674588-66B7-4E19-9D0E-2053B800F69F} - C:\WINDOWS\system32\wmpdrm.dll
O2 - BHO: std software - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O4 - HKLM\..\Run: [spoolsv] C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer
O4 - HKLM\..\Run: [RavTask] "f:\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [迅雷4] d:\Thunder\MediaIssue\TDUpdate.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [KuGoo3] "D:\KUGOO3\KUGOO.EXE"
O4 - Startup: 腾讯QQ.lnk = D:\QQ\QQ.exe
O4 - Startup: 播霸网络电视.lnk = C:\Program Files\pcast\PodcastbarMini\PodcastBarMiniStarter.exe
O11 - Options group: [TBH]  搜搜地址栏搜索
O16 - DPF: {05DA0521-0B6B-458C-BFB1-1EFEF1F3C8FF} (SSOClientAgent Class) - http://member.segame.com/common/SEGAme.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125471258375
O16 - DPF: {7B41B7AC-3496-4C13-A70F-DE6B60A6A8A8} (MGAME manager Class) - http://download.mgame.com/download/cab/mgmanagerv1001.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{61EA9E5A-2ACF-4445-B361-B84DAFE0ECA7}: NameServer = 61.153.177.196 61.153.177.198
O21 - SSODL: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - (no file)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ATI Smarter - Unknown owner - C:\WINDOWS\Smarter.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Unknown owner - D:\Rising\Rav\CCenter.exe (file missing)
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - f:\Rising\Rav\Ravmond.exe
O23 - Service: R_Server - Unknown owner - C:\WINDOWS\system32\R_Server.exe
O23 - Service: Windows Media Player - Unknown owner - C:\WINDOWS\G_Server1.23.exe

O23 - Service: R_Server - Unknown owner - C:\WINDOWS\system32\R_Server.exe
O23 - Service: Windows Media Player - Unknown owner - C:\WINDOWS\G_Server1.23.exe
中了两个鸽子

O23 - Service: ATI Smarter - Unknown owner - C:\WINDOWS\Smarter.exe
我的天,又一只鸽子

O23 - Service: R_Server - Unknown owner - C:\WINDOWS\system32\R_Server.exe
1.开始-运行输入regedit,打开注册表编辑器，定位到HKEY_LOCAL_MACHINE\ SYSTEM \ CURRENTCONTROLSET \ SERVICES分支，删除左栏中的病毒服务名r_server
2.重启系统，在“文件夹选项”的“查看”面板中勾选“显示系统文件”、“显示所有的文件和文件夹”两项，点击“确定”按钮。然后在%windows%下寻找病毒文件名C:\WINDOWS\R_server.exe,C:\WINDOWS\r_server.dll,C:\WINDOWS\r_server_Hook.dll,C:\WINDOWS\rserver_key.dll,能找到的都删除

其它两个照此处理

哇，厲害啊！R_Server 原來是鴿子來的，我還以爲什麽好東西，我電腦裏有好幾個類似的哦，哈哈。難怪我的密碼老被人改

O4 - Startup: 播霸网络电视.lnk = C:\Program Files\pcast\PodcastbarMini\PodcastBarMiniStarter.exe

楼主试试删除播霸，删除后再重启电脑，看看它是否死灰复燃阴魂不散？

学习！！！

学习！！！!