<C:\WINNT\etb\pokapoka65.exe

最近的瑞星杀不掉，

不管是在什么模式下。

Logfile of HijackThis v1.99.1
Scan saved at 19:15:39, on 2005-9-9
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

运行进程:           
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
C:\WINNT\etb\pokapoka65.exe
C:\WINNT\system32\internat.exe
C:\WINNT\system32\Rundll32.exe
C:\WINNT\system32\conime.exe
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\PROGRAM FILES\RISING\RAV\RavStub.exe
c:\program files\rising\rav\RAVMON.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Tencent\QQ\QQ.exe
C:\Documents and Settings\enif\桌面\HijackThis.exe

该用户帖子内容已被屏蔽

Process list saved on 19:22:48, on 2005-9-9
Platform: Windows 2000 SP4 (WinNT 5.00.2195)

[pid][full path to filename][file version][company name]
156C:\WINNT\System32\smss.exe5.0.2195.6601Microsoft Corporation
188C:\WINNT\system32\csrss.exe5.0.2195.6601Microsoft Corporation
208C:\WINNT\system32\winlogon.exe5.0.2195.6714Microsoft Corporation
236C:\WINNT\system32\services.exe5.0.2195.6700Microsoft Corporation
248C:\WINNT\system32\lsass.exe5.0.2195.6695Microsoft Corporation
432C:\WINNT\system32\svchost.exe5.0.2134.1Microsoft Corporation
448C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE17.0.0.1rising
360C:\WINNT\System32\WBEM\WinMgmt.exe1.50.1085.100Microsoft Corporation
740C:\WINNT\Explorer.EXE5.0.3700.6690Microsoft Corporation
796C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe2.99.85.0Conexant Systems Inc.
812C:\WINNT\System32\svchost.exe5.0.2134.1Microsoft Corporation
868C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE17.0.0.39Beijing Rising Technology Co., Ltd.
884C:\WINNT\etb\pokapoka65.exe
896C:\WINNT\system32\internat.exe5.0.2920.0Microsoft Corporation
724C:\WINNT\system32\Rundll32.exe5.0.2134.1Microsoft Corporation
276C:\WINNT\system32\conime.exe5.0.2195.6655Microsoft Corporation
940C:\PROGRAM FILES\RISING\RAV\Ravmond.exe17.0.1.53Beijing Rising Technology Co., Ltd.
556C:\PROGRAM FILES\RISING\RAV\RavStub.exe17.0.0.27Beijing Rising Technology Co., Ltd.
1028c:\program files\rising\rav\RAVMON.EXE17.0.1.37Beijing Rising Technology Co., Ltd.
292C:\Program Files\Internet Explorer\iexplore.exe6.0.2800.1106Microsoft Corporation
900C:\Program Files\Tencent\QQ\QQ.exe13.81.0.8228TENCENT
1364C:\Documents and Settings\enif\桌面\HijackThis.exe1.99.0.1Soeperman Enterprises Ltd.


DLLs loaded by process C:\WINNT\etb\pokapoka65.exe:

[full path to filename][file version][company name]
C:\WINNT\system32\ntdll.dll5.0.2195.6685Microsoft Corporation
C:\WINNT\system32\kernel32.dll5.0.2195.6688Microsoft Corporation
C:\WINNT\system32\SHLWAPI.dll6.0.2800.1612Microsoft Corporation
C:\WINNT\system32\msvcrt.dll6.1.9844.0Microsoft Corporation
C:\WINNT\system32\GDI32.dll5.0.2195.6660Microsoft Corporation
C:\WINNT\system32\USER32.DLL5.0.2195.6688Microsoft Corporation
C:\WINNT\system32\ADVAPI32.dll5.0.2195.6710Microsoft Corporation
C:\WINNT\system32\RPCRT4.DLL5.0.2195.6701Microsoft Corporation
C:\WINNT\system32\urlmon.dll6.0.2800.1485Microsoft Corporation
C:\WINNT\system32\ole32.dll5.0.2195.6692Microsoft Corporation
C:\WINNT\system32\VERSION.dll5.0.2195.6623Microsoft Corporation
C:\WINNT\system32\LZ32.DLL5.0.2195.6611Microsoft Corporation
C:\WINNT\system32\OLEAUT32.dll2.40.4522.0Microsoft Corporation
C:\WINNT\system32\IMM32.DLL5.0.2195.6655Microsoft Corporation
C:\WINNT\system32\comctl32.dll5.81.4916.400Microsoft Corporation
C:\WINNT\system32\CLBCATQ.DLL2000.2.3504.0Microsoft Corporation
C:\WINNT\system32\INDICDLL.dll5.0.2920.0Microsoft Corporation
C:\WINNT\DOWNLO~1\CONFLICT.1\CnsMin.dll1.5.1.4北京三七二一科技有限公司
C:\WINNT\system32\NETAPI32.dll5.0.2195.6601Microsoft Corporation
C:\WINNT\system32\SECUR32.DLL5.0.2195.6695Microsoft Corporation
C:\WINNT\system32\NETRAP.DLL5.0.2134.1Microsoft Corporation
C:\WINNT\system32\SAMLIB.DLL5.0.2195.6666Microsoft Corporation
C:\WINNT\system32\WS2_32.DLL5.0.2195.6601Microsoft Corporation
C:\WINNT\system32\WS2HELP.DLL5.0.2134.1Microsoft Corporation
C:\WINNT\system32\WLDAP32.DLL5.0.2195.6666Microsoft Corporation
C:\WINNT\system32\DNSAPI.DLL5.0.2195.6680Microsoft Corporation
C:\WINNT\system32\WSOCK32.DLL5.0.2195.6603Microsoft Corporation
C:\DOCUME~1\enif\LOCALS~1\Temp\262968_292_884_1292_65.41.tmp1
C:\DOCUME~1\enif\LOCALS~1\Temp\460414_292_884_1392_65.41.tmp1
C:\DOCUME~1\enif\LOCALS~1\Temp\12386528_292_884_1400_65.41.tmp1

killbox____这个是什么？

楼主的HijackThis日志请发完整...

<C:\WINNT\etb\pokapoka65.exe

___这个文件找不到，而且，pokapoka65.exe，这个进程是不可见的，

只有用HijackThis才可见，用KILLBOX，找不到这个进程。

兄弟 打开注册表 把关于pokapoka65.exe的都删了，
然后再到C:\WINNT\etb\pokapoka65.exe把pokapoka65.exe删了估计会好了把