Logfile of HijackThis v1.99.1
Scan saved at 12:24:58, on 2006-8-8
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\svchost.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\system32\service.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\桌面\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [KAVPersonal50] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe /minimize
O4 - HKLM\..\Run: [Rundll32.exe] C:\WINDOWS\svchost.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O10 - Broken Internet access because of LSP provider 'c:\program files\
O14 - IERESET.INF: START_PAGE_URL=about:blank
O17 - HKLM\System\CCS\Services\Tcpip\..\{A6311DD0-7E0B-476D-A178-E14B808673AF}: NameServer = 202.102.128.68,202.102.134.68
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

是这个吗？：C:\WINDOWS\svchost.exe
O4 - HKLM\..\Run: [Rundll32.exe] C:\WINDOWS\svchost.exe

kaspersky的reports


Statistics:
"Task start time:2006-8-7 17:50:00"
"Task completion time:2006-8-7 17:52:45"
"Update total size:115.07 KB"
"Downloaded:0.00 KB"

Settings:
Objects being updated:
  Anti-virus database and application modules (patches)
Update type:
  From Internet standard databases
List of update servers:
  http://downloads4.kaspersky-labs.com
  http://downloads2.kaspersky-labs.com
  http://downloads1.kaspersky-labs.com
  ftp://downloads4.kaspersky-labs.com
  ftp://downloads2.kaspersky-labs.com
  ftp://downloads1.kaspersky-labs.com

Report:
ftp://downloads2.kaspersky-labs.com;Error while connecting with the update server;2006-8-7 17:50:23
ftp://downloads1.kaspersky-labs.com;Error while connecting with the update server;2006-8-7 17:50:44
http://downloads4.kaspersky-labs.com;Error while connecting with the update server;2006-8-7 17:51:06
http://downloads2.kaspersky-labs.com;Connection has been established successfully;2006-8-7 17:51:32
daily.avc;Error while loading file;2006-8-7 17:52:15
http://downloads1.kaspersky-labs.com;Error while connecting with the update server;2006-8-7 17:52:36
ftp://downloads4.kaspersky-labs.com;Error while connecting with the update server;2006-8-7 17:52:45

引用:

【菜菜万岁的贴子】是这个吗？：C:\WINDOWS\svchost.exe O4 - HKLM\..\Run: [Rundll32.exe] C:\WINDOWS\svchost.exe ………………

是的，就是这个。请教该怎么办

O10 - Broken Internet access because of LSP provider 'c:\program files\
???????