请帮我一下啊。我的电脑前几天在17173看跑跑卡丁车的最新视频的时候被劫持了。一直不停的弹网页 ，瑞星查不出来毒。而且把我的超级兔子蔽了，一点兔子就自动关机，我的QQ游戏还有些游戏都被他弄不见了。而且正常模式下我用HijackThis_815扫描。然后选择修复了，重新扫描的时候又还在。然后我进入安全模式扫描，修复。没有了，但是一进入正常模式，他们就又存在了。安全模式下兔子可以运行，但是他显示未发现流氓软件``崩溃````
HijackThis_815汉化版扫描日志 V1.99.1
保存于 22:15:24, 日期 2006-11-1
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\rising\rfw\RfwMain.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\GreenNet\USB ADSL\CnxDslTb.exe
C:\WINDOWS\system32\ctfmon.exe
D:\PPStream\PPStream.exe
D:\QQ\qq.exe
C:\WINDOWS\system32\conime.exe
D:\QQ\TIMPlatform.exe
c:\program files\rising\rfw\ScanBD.exe
d:\WebThunder\WebThunder.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
D:\扫描日志\HijackThis1991zww.exe
R3 - URLSearchHook: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\PROGRA~1\3721\Assist\asbar.dll
O1 - Hosts: 202.75.218.253 www.hao123.com
O1 - Hosts: 202.75.218.253 www.7b.com.cn
O1 - Hosts: 202.75.218.253 www.7939.com
O1 - Hosts: 202.75.218.253 www.360safe.com
O1 - Hosts: 202.75.218.253 360safe.com
O1 - Hosts: 202.75.218.253 update.360safe.com
O1 - Hosts: 202.75.218.253 dl.360safe.com
O1 - Hosts: 202.75.218.253 bbs.360safe.com
O1 - Hosts: 202.75.218.253 count16.51yes.com
O1 - Hosts: 202.75.218.253 count18.51yes.com
O1 - Hosts: 202.75.218.253 count20.51yes.com
O1 - Hosts: 202.75.218.253 www.btbaicai.com
O1 - Hosts: 202.75.218.253 btbaicai.com
O1 - Hosts: 202.75.218.253 www.pctutu.com
O1 - Hosts: 202.75.218.253 www.7322.com
O1 - Hosts: 202.75.218.253 www.5566.net
O1 - Hosts: 202.75.218.253 www.9991.com
O1 - Hosts: 202.75.218.253 forum.ikaka.com
O1 - Hosts: 202.75.218.253 www.ikaka.com
O1 - Hosts: 202.75.218.253 www.piaoxue.com
O1 - Hosts: 202.75.218.253 forum.jiangmin.com
O1 - Hosts: 202.75.218.253 update.jiangmin.com
O1 - Hosts: 202.75.218.253 post.baidu.com
O1 - Hosts: 202.75.218.253 zhidao.baidu.com
O1 - Hosts: 202.75.218.253 update.rising.com.cn
O1 - Hosts: 202.75.218.253 online.rising.com.cn
O1 - Hosts: 202.75.218.253 dl.pconline.com.cn
O1 - Hosts: 202.75.218.253 space.uwants.com
O1 - Hosts: 202.75.218.253 www.pcav.cn
O1 - Hosts: 202.75.218.253 mopery.hits.io
O1 - Hosts: 202.75.218.253 www.goodmv.cn
O1 - Hosts: 202.75.218.253 www.5566.net
O1 - Hosts: 202.75.218.253 www.piaoxue.com
O1 - Hosts: 202.75.218.253 www.luosoft.com
O1 - Hosts: 202.75.218.253 luosoft.com
O1 - Hosts: 202.75.218.253 www.7255.com
O1 - Hosts: 202.75.218.253 dl.pconline.com.cn
O1 - Hosts: 202.75.218.253 www.spjoy.com
O1 - Hosts: 202.75.218.253 c01.caishow.com
O1 - Hosts: 202.75.218.253 c02.caishow.com
O1 - Hosts: 202.75.218.253 c03.caishow.com
O1 - Hosts: 202.75.218.253 c04.caishow.com
O1 - Hosts: 202.75.218.253 www.caishow.com
O1 - Hosts: 202.75.218.253 union.caishow.com
O1 - Hosts: 202.75.218.253 ad01.a8.com
O1 - Hosts: 202.75.218.253 ad02.a8.com
O1 - Hosts: 202.75.218.253 sg.a8.com
O1 - Hosts: 202.75.218.253 www.adanywhere.cn
O1 - Hosts: 202.75.218.253 ip.adanywhere.cn
O1 - Hosts: 202.75.218.253 ip1.adanywhere.cn
O1 - Hosts: 202.75.218.253 ip2.adanywhere.cn
O1 - Hosts: 202.75.218.253 www.bannerbox.cn
O1 - Hosts: 202.75.218.253 www.caiqiyue.com
O1 - Hosts: 202.75.218.253 toolsbar.kuaiso.com
O1 - Hosts: 202.75.218.253 www.kuaiso.com
O1 - Hosts: 202.75.218.253 www.2t2t.cn
O1 - Hosts: 202.75.218.253 3.a.kal.cn
O1 - Hosts: 202.75.218.253 ip.alexaanywhere.com
O1 - Hosts: 202.75.218.253 go.ipcenter.cn
O1 - Hosts: 202.75.218.253 www.2yin.cn
O1 - Hosts: 202.75.218.253 wwww.systeel.com.cn
O1 - Hosts: 202.75.218.253 go.baibaoxiang.cn
O1 - Hosts: 202.75.218.253 www.gao58.com
O1 - Hosts: 202.75.218.253 www.2tu.cn
O1 - Hosts: 202.75.218.253 www.91tu.cn
O1 - Hosts: 202.75.218.253 www.haotop.com
O1 - Hosts: 202.75.218.253 news01.virussky.com
O1 - Hosts: 202.75.218.253 news02.virussky.com
O1 - Hosts: 202.75.218.253 news03.virussky.com
O1 - Hosts: 202.75.218.253 news04.virussky.com
O1 - Hosts: 202.75.218.253 news40.virussky.com
O1 - Hosts: 202.75.218.253 news41.virussky.com
O1 - Hosts: 202.75.218.253 news42.virussky.com
O1 - Hosts: 202.75.218.253 www.an85.com
O1 - Hosts: 202.75.218.253 an85.com
O1 - Hosts: 202.75.218.253 www.ycdy.com
O1 - Hosts: 202.75.218.253 ycdy.com
O1 - Hosts: 202.75.218.253 down.virussky.com
O1 - Hosts: 202.75.218.253 update.virussky.com
O1 - Hosts: 202.75.218.253 www.maipao.com
O1 - Hosts: 202.75.218.253 www.sina-baidu.com
O1 - Hosts: 202.75.218.253 www.maohehe.com
O1 - Hosts: 202.75.218.253 www.1717kan.cn
O1 - Hosts: 202.75.218.253 www.feixue.net
O1 - Hosts: 202.75.218.253 www.xingkongitv.com
O1 - Hosts: 202.75.218.253 about-blank.cc
O1 - Hosts: 202.75.218.253 www.xfkz.com
O1 - Hosts: 202.75.218.253 xfkz.com
O1 - Hosts: 202.75.218.253 www.365tan.com
O1 - Hosts: 202.75.218.253 cg.9e3.com
O1 - Hosts: 202.75.218.253 www.qqplayer.net
O1 - Hosts: 202.75.218.253 www.sosok.com
O1 - Hosts: 202.75.218.253 img.zhangxiu.com
O1 - Hosts: 202.75.218.253 www.okeaa.com
O1 - Hosts: 202.75.218.253 www.winopen.cn
O1 - Hosts: 202.75.218.253 dnl-eu1.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-eu2.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-eu3.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-eu4.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-eu5.kaspersky-labs.com
O1 - Hosts: 202.75.218.253 dnl-us1.kaspersky-labs.com
O2 - BHO: WebThunderBHO - {00000AAA-A363-466E-BEF5-9BB68697AA7F} - d:\WebThunder\WebThunderBHO_015.dll
O2 - BHO: AssistII - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\PROGRA~1\3721\Assist\asbar.dll
O3 - IE工具栏增项: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\PROGRA~1\3721\Assist\asbar.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera
O4 - 启动项HKLM\\Run: [CnxDslTaskBar] C:\Program Files\GreenNet\USB ADSL\CnxDslTb.exe
O4 - 启动项HKLM\\Run: [A] C:\WINDOWS\system32\rundll32.exe mont.dll s
O4 - 启动项HKLM\\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - 启动项HKLM\\RunOnce: [RavStub] "C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 使用Web迅雷下载 - d:\WebThunder\GetUrl.htm
O8 - IE右键菜单中的新增项目: 使用Web迅雷下载全部链接 - d:\WebThunder\GetAllUrl.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - 浏览器额外的“工具”菜单项: 启动Web迅雷 - {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} - http://my.xunlei.com (file missing)
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\QQ\QQ.EXE
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.tomatolei.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{19C52385-DFB9-4958-9495-61C6BB3C5326}: NameServer = 202.99.192.66 202.99.192.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{19C52385-DFB9-4958-9495-61C6BB3C5326}: NameServer = 202.99.192.66 202.99.192.68
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - NT 服务: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
