电脑里有IE插件，显示是awvtt.dll,根本删除不了，总是弹出国外广告，请问是什么病毒

请到http://forum.ikaka.com/topic.asp?board=28&artid=8105899
下载HijackThis
下载后运行HijackThis.rar,再运行HijackThis.exe
单机＂扫描日志并保存日志＂
把保存的日志复制粘贴上来．

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional  (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>  [Microsoft Corporation]
    <eMuleAutoStart><; >  []
    <Error Safe><; "C:\Program Files\Error Safe Free\ers.exe" /min>  []
    <H/PC Connection Agent><; "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE">  [Microsoft Corporation]
    <KpopMon><; >  []
    <RBot v2 with NetAPI exploit traded with billgates I gave my mother Greetz - OG - Bluehell Irc Server><C:\WINDOWS\System32\glossary.exe>  []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices]
    <Sun Java Console for Windows NT & XP><jconsole.exe>  []
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
    <run><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Apoint><; C:\Program Files\Apoint\Apoint.exe>  [Alps Electric Co., Ltd.]
    <BLUESPACE.EXE><; C:\Program Files\Sony\BlueSpace\BlueSpace.exe>  [Sony Corporation]
    <HKSERV.EXE><; C:\Program Files\Sony\HotKey Utility\HKserv.exe>  [Sony Corporation]
    <HotKeysCmds><; C:\WINDOWS\System32\hkcmd.exe>  [Intel Corporation]
    <IgfxTray><; C:\WINDOWS\System32\igfxtray.exe>  [Intel Corporation]
    <IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <IMSCMIG40W><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40W\IMSCMIG.EXE /SetPreload /Log>  [Microsoft Corporation]
    <iTunesHelper><; C:\Program Files\iTunes\iTunesHelper.exe>  [Apple Computer, Inc.]
    <JOGSERV2.EXE><; C:\Program Files\Sony\Jog Dial Utility\JogServ2.exe>  [Sony Corporation]
    <KAVRun><; >  []
    <Kulansyn><; >  []
    <MINI_BFYY><; C:\Program Files\Ringz Studio\Storm Downloader\StormDownloader.exe>  []
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <RavTask><; "C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <RfwMain><; "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Corporation Limited]
    <SBWatchDog.EXE><; >  []
    <StormCodec_Helper><; "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  []
    <TeaDogCalendar><; C:\Program Files\TeaDogCalendar\Calendar.exe>  [FunLine]
    <yassistse><"C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">  [Yahoo! China]
    <YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>  [Yahoo! China]
    <RBot v2 with NetAPI exploit traded with billgates I gave my mother Greetz - OG - Bluehell Irc Server><C:\WINDOWS\System32\glossary.exe>  []
    <pavsvc><C:\WINDOWS\System32\pavsvc.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]
    <Sun Java Console for Windows NT & XP><jconsole.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe C:\WINDOWS\System32\glossary.exe>  []
    <Userinit><C:\WINDOWS\System32\userinit.exe,C:\WINDOWS\System32\glossary.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\awvtt]
    <WinlogonNotify: awvtt><C:\WINDOWS\System32\awvtt.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Group Policy]
    <WinlogonNotify: Group Policy><C:\WINDOWS\system32\lvj4091qe.dll>  []
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><; C:\WINDOWS\System32\KFC茶~1.SCR>  []

==================================
启动文件夹
服务
[C-DillaCdaC11BA / C-DillaCdaC11BA]
  <C:\WINDOWS\System32\drivers\CDAC11BA.EXE><Macrovision>
[iPod 服务 / iPodService]
  <C:\Program Files\iPod\bin\iPodService.exe><Apple Computer, Inc.>
[Rising Personal Firewall Service / RfwService]
  <C:\Program Files\Rising\Rfw\rfwsrv.exe><Beijing Rising Technology Corporation Limited>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Sony SPTI Service / SPTISRV]
  <C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe><Sony Corporation>

浏览器加载项
[]
  {0382E7BB-6B51-4991-9026-45B44A1D8928} <C:\WINDOWS\System32\awvtt.dll, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[雅虎助手]
  {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar0.dll, yahoo! china>
[超级兔子上网精灵]
  {43869BB3-22FD-4F15-9B46-238106BA2F4E} <C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll, Xiang Feng Technology>
[上传到QQ网络硬盘]
  <C:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 1452][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
    [C:\WINDOWS\system32\ibrop.dll]  <N/A><N/A>
[PID: 360][C:\WINDOWS\System32\glossary.exe]  <N/A><N/A>
[PID: 476][C:\Program Files\Rising\Rfw\RfwMain.exe]  <Beijing Rising Technology Corporation Limited><3, 1, 0, 18>
    [C:\Program Files\Rising\Rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 40>
    [C:\Program Files\Rising\Rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
    [C:\Program Files\Rising\Rfw\PngDll.dll]  <Rising><17, 0, 0, 2>
[PID: 616][C:\WINDOWS\System32\WgaTray.exe]  <Microsoft Corporation><1.5.0540.0>
[PID: 740][C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe]  <Yahoo! China><3, 0, 0, 1001>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAssecblk.dll]  <Yahoo! China><3, 0, 0, 1002>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAsMenu.dll]  <Yahoo! China><3, 0, 0, 1001>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yMenuInfo.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yIEAngel.dll]  <Yahoo! China><3, 0, 0, 1000>
[PID: 780][C:\WINDOWS\System32\pavsvc.exe]  <N/A><N/A>
[PID: 940][C:\WINDOWS\System32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 464][C:\Program Files\UNICOM\cdma.exe]  <><1, 0, 0, 8>
    [C:\Program Files\UNICOM\skin.dll]  <><1, 0, 0, 1>
    [C:\Program Files\UNICOM\cdma.dll]  <N/A><N/A>
[PID: 452][C:\WINDOWS\System32\conime.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1716][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yaLive.dll]  <yahoo! china><3, 2, 5, 1075>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [C:\WINDOWS\System32\AcSignIcon.dll]  <Autodesk><16.0.0.86>
    [C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll]  <Xiang Feng Technology><2, 2, 0, 1612>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar0.dll]  <yahoo! china><3, 0, 7, 1051>
    [C:\Program Files\Yahoo!\Assistant\Assist\ysearch.dll]  <Yahoo! China><3, 0, 3, 1004>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasnoad.dll]  <yahoo! china><3, 0, 1, 1003>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yzsNetProto.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll]  <Yahoo! China><3, 0, 2, 1004>
    [C:\Program Files\Yahoo!\Assistant\Assist\yrss.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\yaswiper.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\yasiesec.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\ysettings.dll]  <yahoo! china><3, 0, 3, 1006>
    [C:\Program Files\Yahoo!\Assistant\Assist\ymailp.dll]  <Yahoo! China><3.0.0.1006>
    [C:\WINDOWS\System32\awvtt.dll]  <N/A><N/A>
    [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll]  <Yahoo! China><3, 0, 1, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll]  <Yahoo! China><3, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll]  <3721.com><2, 1, 1, 87>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yoptimum.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll]  <Yahoo! China><3, 0, 0, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yxpstyle.dll]  <Yahoo! China><3, 0, 0, 1000>
[PID: 2204][C:\Program Files\Super Rabbit\MagicSet\MagicSet.exe]  <Super Rabbit Soft><7.76>
[PID: 2264][C:\Program Files\Super Rabbit\MagicSet\magicset.exe]  <Super Rabbit Soft><7.76>
[PID: 3984][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yaLive.dll]  <yahoo! china><3, 2, 5, 1075>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [C:\WINDOWS\System32\AcSignIcon.dll]  <Autodesk><16.0.0.86>
    [C:\Program Files\Super Rabbit\MagicSet\haokanbar.dll]  <Xiang Feng Technology><2, 2, 0, 1612>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar0.dll]  <yahoo! china><3, 0, 7, 1051>
    [C:\Program Files\Yahoo!\Assistant\Assist\ysearch.dll]  <Yahoo! China><3, 0, 3, 1004>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasnoad.dll]  <yahoo! china><3, 0, 1, 1003>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yzsNetProto.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll]  <Yahoo! China><3, 0, 2, 1004>
    [C:\Program Files\Yahoo!\Assistant\Assist\yrss.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\yaswiper.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\yasiesec.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\Program Files\Yahoo!\Assistant\Assist\ysettings.dll]  <yahoo! china><3, 0, 3, 1006>
    [C:\Program Files\Yahoo!\Assistant\Assist\ymailp.dll]  <Yahoo! China><3.0.0.1006>
    [C:\WINDOWS\System32\awvtt.dll]  <N/A><N/A>
    [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll]  <Yahoo! China><3, 0, 1, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll]  <Yahoo! China><3, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll]  <3721.com><2, 1, 1, 87>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yoptimum.dll]  <Yahoo! China><3, 0, 0, 1000>
    [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll]  <Yahoo! China><3, 0, 0, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yxpstyle.dll]  <Yahoo! China><3, 0, 0, 1000>
[PID: 2320][C:\PROGRA~1\Yahoo!\ASSIST~1\ylive.exe]  <Yahoo! China><3, 0, 1, 1007>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <Yahoo! China><3, 0, 2, 1020>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yaLive.dll]  <yahoo! china><3, 2, 5, 1075>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  <Yahoo! China><3, 0, 1, 1010>
    [C:\Program Files\Yahoo!\Assistant\yNotifier.dll]  <yahoo! china><3, 0, 0, 1000>
[PID: 2560][C:\WINDOWS\Explorer.exe]  <Microsoft Corporation><6.00.2600.0000 (xpclient.010817-1148)>
    [C:\WINDOWS\System32\awvtt.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\AcSignIcon.dll]  <Autodesk><16.0.0.86>
    [C:\WINDOWS\system32\ibrop.dll]  <N/A><N/A>
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  <Autodesk><16.0.0.86>
    [C:\WINDOWS\System32\igfxpph.dll]  <Intel Corporation><3,0,0,1132>
    [C:\WINDOWS\System32\hccutils.DLL]  <Intel Corporation><3,0,0,1132>
    [C:\WINDOWS\System32\igfxdev.dll]  <Intel Corporation><3,0,0,1132>
    [C:\WINDOWS\System32\igfxres.dll]  <Intel Corporation><3,0,0,1132>
    [C:\WINDOWS\System32\igfxsrvc.dll]  <Intel Corporation><3,0,0,1132>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 3520][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
    [C:\WINDOWS\System32\AcSignIcon.dll]  <Autodesk><16.0.0.86>
[PID: 3692][C:\DOCUME~1\VAIO\LOCALS~1\Temp\Rar$EX00.288\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================