我的电脑不断冒出些乱七八糟的网站，各位大哥帮忙说说是怎么了？

可能是中了流氓软件，试着下一个360安全卫士杀杀看，如不行，请发更详细的报告。

中马...或IE被劫持..

扫份日志上来看看.

怎么扫描日志呀，我是个新手？

引用:

【逍遥狂人的贴子】怎么扫描日志呀，我是个新手？ ………………

http://forum.ikaka.com/topic.asp?board=28&artid=8270267

-。- 无聊的恶意软件

用SER扫下系统，把日志贴上来
SER的使用方法看这里
http://forum.ikaka.com/topic.asp?board=28&artid=8270267

用SER扫下系统，把日志贴上来
SER的使用方法看这里
http://forum.ikaka.com/topic.asp?board=28&artid=8270267

[CODE]

2007-02-23,16:47:47

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <iDuba Personal FireWall><D:\KAVPFW.EXE>  [N/A]
    <Super Rabbit IEPro><D:\Program Files\Super Rabbit\MagicSet\SRIECLI.EXE /LOAD>  [N/A]
    <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background>  [(Verified)Microsoft Corporation]
    <EXPL0RER><C:\WINDOWS\EXPL0RER.exe>  [EXPL0RER]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <333><C:\Syswm1a\svchost.exe>  [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Realtek Semiconductor Corp.]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <StormCodec_Helper><"D:\Program Files\Storm Codec\StormSet.exe" /S /opti>  [N/A]

<TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <KAVRUN><D:\KAVRUN.EXE>  [N/A]
    <Super Rabbit SafeEdit><D:\Program Files\Super Rabbit\MagicSet\SRFC.EXE /Load>  [N/A]
    <SKYNET Personal FireWall><C:\天网\pfw.exe>  [N/A]
    <EyeTel><C:\Program Files\EyeTel\EyeTel.exe -a>  [N/A]
    <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k>  [N/A]
    <DAEMON Tools-1033><"D:\dam\daemon.exe"  -lang 1033>  [N/A]
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
    <RavTask><"C:\Rising\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>  [(Verified)Yahoo! China]
    <yassistse><C:\Program Files\Yahoo!\Assistant\yAssistSe.exe>  [(Verified)Yahoo! China]
    <wgs3><C:\WINDOWS\wgs3.exe>  [N/A]
    <mhs3><C:\WINDOWS\mhs3.exe>  [N/A]
    <wls3><C:\WINDOWS\wls3.exe>  [N/A]
    <load><C:\WINDOWS\uninstall\rundl132.exe>  [N/A]
    <runeip><C:\Rising\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
    <zts3><C:\WINDOWS\zts3.exe>  [N/A]
    <wms3><C:\WINDOWS\wms3.exe>  [N/A]
    <jts3><C:\WINDOWS\jts3.exe>  [N/A]
    <LaLaShow><C:\DOCUME~1\zhang\LOCALS~1\Temp\wl.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><EXPLORER.EXE>  [(Verified)Microsoft Corporation]
    <Userinit><userinit.exe,>  [(Verified)Microsoft Corporation]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
    <{9915CFD1-6B7D-4AC5-ABAC-136924579E91}><C:\Program Files\Internet Explorer\PLUGINS\system88.sys>  [N/A]
    <{A6011F8F-A7F8-49AA-9ADA-49127D43138F}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\NewInfo.rxk>  [N/A]
    <{754FB7D8-B8FE-4810-B363-A788CD060F1F}><C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys>  [N/A]

==================================
启动文件夹
[EPSON Online Register]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\EPSON Online Register.lnk --> C:\PROGRA~1\EPSON\ONLINE~1\ONLINE~1.EXE [N/A]><H>
[QQ游戏启动加速程序]
  <C:\Documents and Settings\zhang\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk --> D:\QQGame\Accel.exe [N/A]><N>

==================================
服务
[342CBD42 / 342CBD42][Stopped/Auto Start]
  <C:\WINDOWS\system32\342CBD42.EXE -service><Microsoft Corporation>
[A2952DD4 / A2952DD4][Stopped/Auto Start]
  <C:\WINDOWS\system32\A2952DD4.EXE -service><Microsoft Corporation>
[ewido anti-spyware 4.0 guard / ewido anti-spyware 4.0 guard][Stopped/Auto Start]
  <D:\Program Files\ewido anti-spyware 4.0\guard.exe><Anti-Malware Development a.s.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Lmserner / LogicalGroup Disker Manager][Stopped/Auto Start]
  <C:\WINDOWS\flasher><N/A>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>