Logfile of HijackThis v1.99.0
Scan saved at 18:05:31, on 2006-3-1
Platform: Windows 2000 SP3 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\WINNT\WINLOGON.EXE
C:\WINNT\System32\svchost.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\WINNT\system32\Internat.exe
C:\WINNT\system32\conime.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrator\桌面\HijackThis\HijackThis\HijackThis.exe

F2 - REG:system.ini: Shell=Explorer.exe 1
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [IgfxTray] ; C:\WINNT\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] ; C:\WINNT\system32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [TkBellExe] ; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [Super Rabbit SRRestore] ; C:\PROGRA~1\SUPERR~1\MAGICSET\SRRest.exe /FIRST
O4 - HKLM\..\Run: [Torjan Program] C:\WINNT\WINLOGON.EXE
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CM-SmWizard] C:\WINNT\System\SmWizard.exe
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [Internat.exe] Internat.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{48275E82-70DB-4135-835C-980FA59C3D35}: NameServer = 219.146.0.130,219.150.32.132
O17 - HKLM\System\CS1\Services\Tcpip\..\{48275E82-70DB-4135-835C-980FA59C3D35}: NameServer = 219.146.0.130,219.150.32.132
O17 - HKLM\System\CS2\Services\Tcpip\..\{48275E82-70DB-4135-835C-980FA59C3D35}: NameServer = 219.146.0.130,219.150.32.132
O23 - Service: Rising Process Communication Center - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe

参考方法一：
                    点击【开始】－【运行】输入cmd,进入DOS提示符下；
                    运行 cd..（回车） ；
                    cd program files （此步骤是进入系统默认的软件安装目录）；
                    cd rising （此步骤是进入默认的瑞星安装目录）；
                    cd rav （此步骤是进入杀毒软件安装目录）；
                    ravmond –install
                    ccenter –install
                    注：CD..退回上一级目录 CD***进入**目录 直接X：切换盘符。

                    参考方法二：
                    开始－程序－瑞星杀毒软件－添加删除组建－添加删除
                      去掉瑞星监控前面的钩 然后再选上 下一步