病毒监控查到我的D盘内有病毒，名字叫Backdoor.Godbot.i 但瑞星杀毒软件杀不了，我自己手工删除文件又找不到文件，怎么办？ 路径是D:\Windows\System32\lsasrv.exe  但本人亲自找不到那文件。请各位高手指点迷津

用hijackthis1.99.1把日志扫描上来看看

附件:hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 15:11:29, on 2005-7-18
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
D:\PROGRAM FILES\RISING\RAV\RavStub.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\System32\lsasrv.exe
D:\WINDOWS\Explorer.EXE
D:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
D:\PROGRA~1\RISING\RAV\RAVMON.EXE
D:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\WINDOWS\System32\ctfmon.exe
D:\WINDOWS\system32\sss.exe
D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
D:\Program Files\Tencent\QQ\QQ.exe
D:\Program Files\Tencent\QQ\TIMPlatform.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\WinRAR\WinRAR.exe
D:\DOCUME~1\梁嘉男\LOCALS~1\Temp\Rar$EX00.077\HijackThis.exe

O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: 卡卡安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - D:\WINDOWS\System32\KakaTool.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [RavTimer] D:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] D:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: 使用网际快车下载 - D:\PROGRA~1\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\PROGRA~1\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - D:\WINDOWS\web\related.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - 访问瑞星网站 (file missing)
O9 - Extra button: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - 访问卡卡社区 (file missing)
O17 - HKLM\System\CCS\Services\Tcpip\..\{B96AC7A6-CD1D-4D87-A895-6356CB0C2781}: NameServer = 169.254.253.174,223.255.188.241
O17 - HKLM\System\CCS\Services\Tcpip\..\{D1A9EE59-5D1D-4FD1-ADF0-81FC79FB93CC}: NameServer = 202.96.128.166 202.96.128.86
O20 - AppInit_DLLs: APIHookDll.dll
O23 - Service: Local Security Authority Server (LSA Server) - Unknown owner - D:\WINDOWS\System32\lsasrv.exe
O23 - Service: MAPI Mail Client (MAPI) - Unknown owner - D:\WINDOWS\system32\sss.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe

修复:O23 - Service: Local Security Authority Server (LSA Server) - Unknown owner - D:\WINDOWS\System32\lsasrv.exe

显示隐藏文件,找到D:\WINDOWS\System32\lsasrv.exe删除.
找到HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
删除lsasrv.exe

试过了还找不到文件

重启,进入安全模式显示系统文件查找

给个图你对着找应该没问题了
我的电脑--工具--文件夹选项--查看--显示所有文件（如图）

谢谢高手们的帮助，我在98下找到并删除了文件

可能文件被隐藏了.显示隐藏看看.瑞星应该可以杀出来