瑞星每次都杀出了很多trojan.dl.delf.eai病毒，但每次开机杀毒又有。
而且主页被good.allxun.com窜改。通过卡卡助手改不过来。请高手指教，下面是用卡卡扫描的日志：
Logfile of Kaka v2. 0. 0. 9 Scan Module v2. 0. 0. 1
Scan saved at 13:11:57, on 2006-11-08
Platform: Microsoft Windows XP Professional Service Pack 2 (Build 2600)
MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158))
Running processes:
[smss.exe]
CommandLine =
[csrss.exe]
CommandLine = C:\WINDOWS\system32\csrss.exe
ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
[winlogon.exe]
CommandLine = winlogon.exe
[services.exe]
CommandLine = C:\WINDOWS\system32\services.exe
[lsass.exe]
CommandLine = C:\WINDOWS\system32\lsass.exe
[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost -k DcomLaunch
[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost -k rpcss
[CCenter.exe]
CommandLine = "d:\Program Files\Rising\Rav\CCenter.exe"
[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost.exe -k netsvcs
[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost.exe -k NetworkService
[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost.exe -k LocalService
[rfwsrv.exe]
CommandLine = "d:\program files\rising\rfw\rfwsrv.exe"
[spoolsv.exe]
CommandLine = C:\WINDOWS\system32\spoolsv.exe
[rundllfromwin2000.exe]
CommandLine = C:\WINDOWS\SYSTEM32\RUNDLLFROMWIN2000.EXE C:\WINDOWS\SYSTEM32\WBEM\ADFEZZ14.DLL,Export 1087
[cisrv.exe]
CommandLine = C:\WINDOWS\system32\cisrv.exe
[pmsgr.exe]
CommandLine = c:\windows\pmsgr.exe
[rfwmain.exe]
CommandLine = -StartUp
[RavTask.exe]
CommandLine = "D:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE" -SYSTEM
[WangWang.exe]
CommandLine = "D:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
[Mixer.exe]
CommandLine = "C:\WINDOWS\Mixer.exe" /startup
[ctfmon.exe]
CommandLine = "C:\WINDOWS\system32\ctfmon.exe"
[QQ.exe]
CommandLine = "D:\Program Files\Tencent\QQ\QQ.exe"
[iexplore.exe]
CommandLine = "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
[TIMPlatform.exe]
CommandLine = "d:\Program Files\Tencent\QQ\TIMPlatform.exe" -Embedding
[Thunder.exe]
CommandLine = "d:\Program Files\Thunder Network\Thunder\Thunder.exe"
[EXCEL.EXE]
CommandLine = "C:\Program Files\Microsoft Office\Office10\excel.exe" /e
[RsAgent.exe]
CommandLine = "D:\Program Files\Rising\Rav\RsAgent.exe"
[AgentSvr.exe]
CommandLine = C:\WINDOWS\msagent\AgentSvr.exe -Embedding
[Rav.exe]
CommandLine = "d:\Program Files\Rising\Rav\RAV.EXE"
[RavMon.exe]
CommandLine = "d:\Program Files\Rising\Rav\RAVMON.EXE"
[RavMonD.exe]
CommandLine = "d:\Program Files\Rising\Rav\Ravmond.exe"
[Explorer.EXE]
CommandLine = C:\WINDOWS\explorer.exe
[system.exe]
CommandLine = "C:\WINDOWS\system32\system.exe"
[iexplore.exe]
CommandLine = "C:\Program Files\Internet Explorer\iexplore.exe" http://viruslist.rising.com.cn/v.asp?q=Trojan.DL.Delf.eai
[iexplore.exe]
CommandLine = "C:\Program Files\Internet Explorer\iexplore.exe" http://www.ikaka.com/?tag=Unknown&exp=0
[KkScan.exe]
CommandLine = "d:\Program Files\Rising\KakaToolBar\KkScan.exe"
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=good.allxun.com
R3 - URLSearchHook: YOK Search Class - {88351CEF-BAC0-4A9B-8380-31A173E2926F} - C:\Program Files\YOK.com\SuperSearch\YOK_SuperSearch.dll
F0 - system.ini: Shell=
O1 - Hosts: 127.0.0.1 LOCALHOST
O1 - Hosts: 127.0.0.1 WWW.POWERNUM123.COM
O1 - Hosts: 127.0.0.1 WWW.POWERNUM123.COM.CN
O1 - Hosts: 127.0.0.1 POWERNUM123.COM
O1 - Hosts: 127.0.0.1 POWERNUM123.COM.CN
O1 - Hosts: 127.0.0.1 WWW.CHEBL.COM
O1 - Hosts: 127.0.0.1 WWW.CHEBL.CN
O1 - Hosts: 127.0.0.1 WWW.CHEBL.COM.CN
O1 - Hosts: 127.0.0.1 CHEBL.COM
O1 - Hosts: 127.0.0.1 CHEBL.COM.CN
O1 - Hosts: 127.0.0.1 CHEBL.CN
O1 - Hosts: 127.0.0.1 WWW.CHEBULUO.COM.CN
O1 - Hosts: 127.0.0.1 WWW.CHEBULUO.COM
O1 - Hosts: 127.0.0.1 WWW.CHEBULUO.CN
O1 - Hosts: 127.0.0.1 CHEBULUO.COM.CN
O1 - Hosts: 127.0.0.1 CHEBULUO.COM
O1 - Hosts: 127.0.0.1 CHEBULUO.CN
O1 - Hosts: 127.0.0.1 WWW.17SP.COM
O1 - Hosts: 127.0.0.1 WWW.17SP.COM.CN
O1 - Hosts: 127.0.0.1 17SP.COM
O1 - Hosts: 127.0.0.1 17SP.COM.CN
O1 - Hosts: 127.0.0.1 WWW.FEIKONG.COM
O1 - Hosts: 127.0.0.1 WWW.FEIKONG.COM.CN
O1 - Hosts: 127.0.0.1 WWW.FEIKONG.CN
O1 - Hosts: 127.0.0.1 FEIKONG.COM
O1 - Hosts: 127.0.0.1 FEIKONG.COM.CN
O1 - Hosts: 127.0.0.1 FEIKONG.CN
O1 - Hosts: 127.0.0.1 WWW.HACONG.COM
O1 - Hosts: 127.0.0.1 HACONG.COM
O1 - Hosts: 127.0.0.1 WWW.XBXBXBXB.COM
O1 - Hosts: 127.0.0.1 WWW.SOBT.COM
O1 - Hosts: 127.0.0.1 WWW.SOBT.COM.CN
O1 - Hosts: 127.0.0.1 WWW.SOBT.CN
O1 - Hosts: 127.0.0.1 WWW.SOBT.NET
O1 - Hosts: 127.0.0.1 SOBT.COM
O1 - Hosts: 127.0.0.1 SOBT.COM.CN
O1 - Hosts: 127.0.0.1 SOBT.CN
O1 - Hosts: 127.0.0.1 SOBT.NET
O1 - Hosts: 127.0.0.1 WWW.XBXBXBXBXB.COM
O1 - Hosts: 127.0.0.1 XBXBXBXB.COM
O1 - Hosts: 127.0.0.1 XBXBXBXBXB.COM
O1 - Hosts: 127.0.0.1 WWW.NFSINFO.COM
O1 - Hosts: 127.0.0.1 NFSINFO.COM
O1 - Hosts: 127.0.0.1 CRMEASE.COM
O1 - Hosts: 127.0.0.1 HONGBANGZHU.COM
O1 - Hosts: 127.0.0.1 LINUX007.COM
O1 - Hosts: 127.0.0.1 LOSPLE.COM
O1 - Hosts: 127.0.0.1 LOSTEMPLE.COM
O1 - Hosts: 127.0.0.1 WWW.CRMEASE.COM
O1 - Hosts: 127.0.0.1 WWW.HONGBANGZHU.COM
O1 - Hosts: 127.0.0.1 WWW.LINUX007.COM
O1 - Hosts: 127.0.0.1 WWW.LOSPLE.COM
O1 - Hosts: 127.0.0.1 WWW.LOSTEMPLE.COM
O1 - Hosts: 127.0.0.1 SMARTALLYES.COM
O1 - Hosts: 127.0.0.1 51CPM.NET
O1 - Hosts: 127.0.0.1 51CPM.COM
O1 - Hosts: 127.0.0.1 YIQILAI.COM
O1 - Hosts: 127.0.0.1 UPDATE.SMARTALLYES.COM
O1 - Hosts: 127.0.0.1 MDMDMDMDMD.COM
O1 - Hosts: 127.0.0.1 WWW.SMARTALLYES.COM
O1 - Hosts: 127.0.0.1 WWW.51CPM.NET
O1 - Hosts: 127.0.0.1 WWW.51CPM.COM
O1 - Hosts: 127.0.0.1 WWW.YIQILAI.COM
O1 - Hosts: 127.0.0.1 WWW.MDMDMDMDMD.COM
O1 - Hosts: 127.0.0.1 QUANTUMBIZS.COM
O1 - Hosts: 127.0.0.1 WWW.QUANTUMBIZS.COM
O1 - Hosts: 127.0.0.1 PDSHN.COM
O1 - Hosts: 127.0.0.1 WWW.PDSHN.COM
O1 - Hosts: 127.0.0.1 PKPKPK.COM
O1 - Hosts: 127.0.0.1 WWW.PKPKPK.COM
O1 - Hosts: 127.0.0.1 PKPKPK.NET
O1 - Hosts: 127.0.0.1 WWW.PKPKPK.NET
O1 - Hosts: 127.0.0.1 OOOOOS.COM
O1 - Hosts: 127.0.0.1 WWW.OOOOOS.COM
O1 - Hosts: 127.0.0.1 CCTV06.COM
O1 - Hosts: 127.0.0.1 WWW.CCTV06.COM
O1 - Hosts: 127.0.0.1 FEIXIN.ORG
O1 - Hosts: 127.0.0.1 WWW.FEIXIN.ORG
O1 - Hosts: 127.0.0.1 PENGK.COM
O1 - Hosts: 127.0.0.1 WWW.PENGK.COM
O1 - Hosts: 127.0.0.1 QQYE.COM
O1 - Hosts: 127.0.0.1 WWW.QQYE.COM
O1 - Hosts: 127.0.0.1 XIA3.COM
O1 - Hosts: 127.0.0.1 WWW.XIA3.COM
O1 - Hosts: 127.0.0.1 XIAZAI1.COM
O1 - Hosts: 127.0.0.1 WWW.XIAZAI1.COM
O1 - Hosts: 127.0.0.1 CCWINFO.NET
O1 - Hosts: 127.0.0.1 WWW.CCWINFO.NET
O1 - Hosts: 127.0.0.1 DDPDDP.COM
O1 - Hosts: 127.0.0.1 WWW.DDPDDP.COM
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v8.dll
O2 - BHO: - {003169BC-AB68-482F-AEA6-B51A47BDDB83} - C:\WINDOWS\system32\ATIAngetser.dll (file missing)
O2 - BHO: MyIEHelper Class - {16B770A0-0E87-4278-B748-2460D64A8386} - (file missing)
O2 - BHO: (file missing)
O2 - BHO: (file missing)
O2 - BHO: ra
Object Class - {46F194EB-B7DB-4B7A-BD42-5FF39FD17664} - C:\PROGRA~1\pcast\hbcast.dll
O2 - BHO: (file missing)
O2 - BHO: (file missing)
O2 - BHO: Shockwave Flash 0bject - {5DEC5988-D0D5-4F03-B89E-97845B875F0D} - C:\WINDOWS\system32\dsnap.dll
O2 - BHO: YokToolbarBho Class - {75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} - C:\Program Files\YOK.com\SuperSearch\YOK_SuperSearch.dll
O2 - BHO: WinSC Class - {9ACEEE31-1440-471B-AA46-72B061FE7D61} - C:\WINDOWS\system32\SCIntruder.dll (file missing)
O2 - BHO: - {A653063A-12A7-667B-BE19-B371F03F36FC} - c:\WINDOWS\system32\system.dll
O2 - BHO: IEHlprObj Class - {DE7C3CF0-4B15-11D1-ABED-709549C10000} - C:\WINDOWS\POPNT.DLL
O3 - Toolbar: YOK超级搜索 - {F869BB38-FFEF-4589-B986-610B7AD0ADA2} - C:\Program Files\YOK.com\SuperSearch\YOK_SuperSearch.dll
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
