HijackThis@Qoo的扫描日志  V1.97.7
Scan saved at 12:15:58, on 1999-1-1
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
D:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE
D:\PROGRAM FILES\RISING\RAV\RAVMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
D:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\VNETCLIENT1.6\VNETCLIENT.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
D:\新建文件夹\HIJACKTHIS1.97_QOO\HIJACKTHIS.EXE

O4 - HKLM\..\Run: [RavTask] "D:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\RunServices: [RavMond] "D:\Program Files\Rising\Rav\RavMond.exe"
O4 - HKLM\..\RunServices: [RavMon] "D:\Program Files\Rising\Rav\RavMon.exe" -system
O4 - Startup: Windows Media Player.lnk
O4 - Startup: Internet Explorer.lnk
O4 - Startup: MSN Messenger 7.0.lnk
O4 - Startup: Microsoft Excel.lnk
O4 - Startup: Microsoft PowerPoint.lnk
O4 - Startup: Microsoft Word.lnk
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)


帮忙看看,小弟感激不尽.........................

http://forum.ikaka.com/topic.asp?board=28&artid=6979213
下载HIJAKCTHIS
重新导出日志

看看也好亚,小弟已因此几天没睡................

Logfile of HijackThis v1.99.1
Scan saved at 12:36:23, on 1999-1-1
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
D:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE
D:\PROGRAM FILES\RISING\RAV\RAVMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
D:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\PROGRAM FILES\VNETCLIENT1.6\VNETCLIENT.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
D:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
D:\新建文件夹\HIJACKTHIS\HIJACKTHIS.EXE

O4 - HKLM\..\Run: [RavTask] "D:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\RunServices: [RavMond] "D:\Program Files\Rising\Rav\RavMond.exe"
O4 - HKLM\..\RunServices: [RavMon] "D:\Program Files\Rising\Rav\RavMon.exe" -system
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: 易趣购物 - {DE607145-AC19-425e-866A-6D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)
O9 - Extra 'Tools' menuitem: 易趣购物 - {DE607145-AC19-425e-866A-6D70ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=5 (file missing)

看看.........

日志不全
先说说是什么文件提示出错吧

c:\_RESTORE\temp\A0001179(每次我开机,都拿瑞星杀,杀来又杀去,就是杀不去,想删不能删,说系统出错,杀出个脚本,名叫Trojan.WinREG.StartPage.d    望君能相助,小弟涕泪流)

c:\_RESTORE？
关闭系统还原
安全模式下断网查杀

看看

怎么去安全模式亚?

我系统是me