我在打开IE是经常自动弹出猫普网，右下角弹出小广告，真的烦死了，请大虾帮忙解决。
Logfile of HijackThis v1.99.1
Scan saved at 10:33:49, on 2006-3-24
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
d:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
d:\Program Files\Rising\Rav\Ravmond.exe
d:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
d:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\system32\netdde.exe
C:\Program Files\Common Files\ArchestrA\aaLogger.exe
C:\Autodesk Network License Manager\lmgrd.exe
D:\Program Files\Common Files\Siemens\ACE\bin\CCAgent.exe
D:\Program Files\Common Files\Siemens\ACE\bin\CCEServer.exe
C:\Autodesk Network License Manager\adskflex.exe
C:\Program Files\Common Files\ArchestrA\NTServApp.exe
C:\WINDOWS\Intellution\iLicenseSvc.exe
d:\PROGRA~1\MICROS~1\MSSQL$~1\binn\sqlservr.exe
C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
D:\Program Files\Siemens\Step7\S7BIN\s7asysvx.exe
D:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe
D:\Program Files\Common Files\Siemens\EXE\S7WCWEBX.exe
d:\program files\common files\siemens\exe\s7wlmgrx.exe
C:\Program Files\SIEMENS\SIMATIC.NET\SimNetCom\sim9sync.exe
C:\Program Files\SIEMENS\SIMATIC.NET\opc2\bincfg\scorecfg.exe
C:\Program Files\SIEMENS\SIMATIC.NET\opc2\bincfg\SServCFG.exe
C:\Program Files\SIEMENS\SIMATIC.NET\SimNetCom\simnetpnpman.exe
D:\Program Files\Common Files\Siemens\s7wnrmsx\s7wnrmsx.exe
C:\Program Files\Common Files\ArchestrA\slssvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
D:\Program Files\Common Files\Siemens\s7wnsmsx\s7wnsmsx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\ArchestrA\wwlogsvc.exe
D:\Program Files\Common Files\Siemens\sws\almsrv\almsrvx.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\WINDOWS\Explorer.EXE
d:\program files\rising\rfw\RfwMain.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
D:\Program Files\BenQ\Q-HotkeyMgr\HotkeySensor.exe
C:\Program Files\BenQ\QMedia Center\PCMService.exe
D:\Program Files\Rising\Rav\RavTask.exe
D:\Program Files\Common Files\Siemens\S7ubtoox\s7ubtstx.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\Program Files\Common Files\Siemens\EXE\S7wlsapx.exe
D:\Program Files\Rising\Rav\Ravmon.exe
C:\Program Files\SIEMENS\SIMATIC.NET\opc2\bincfg\_simpcmon.exe
D:\Program Files\Common Files\Siemens\EXE\S7wlpapx.exe
C:\WINDOWS\system32\service.exe
C:\WINDOWS\system32\ICO.EXE
D:\Program Files\BenQ\QPower\QPower.exe
C:\WINDOWS\system32\FSRremoS.EXE
C:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Common Files\Siemens\Sqlany\dbsrv7.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
D:\Program Files\Rising\Rav\Rav.exe
C:\Program Files\Internet Explorer\iexplore.exe
E:\SoftWare\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Q-HotkeyMgr] "d:\Program Files\BenQ\Q-HotkeyMgr\HotkeySensor.exe"
O4 - HKLM\..\Run: [Q-MediaBar] "d:\Program Files\BenQ\Q-MediaBar\QBar.exe" /stop
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\BenQ\QMedia Center\PCMService.exe"
O4 - HKLM\..\Run: [QMusic2] "d:\Program Files\BenQ\QMusic2\QMAgent.exe"
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [RavTask] "d:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "d:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [S7UB Start] "D:\Program Files\Common Files\Siemens\S7ubtoox\s7ubtstx.exe" -StartDB
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [S7WLSAPX] D:\Program Files\Common Files\Siemens\EXE\S7wlsapx.exe
O4 - HKLM\..\Run: [simpcmon] C:\Program Files\SIEMENS\SIMATIC.NET\opc2\bincfg\_simpcmon.exe
O4 - HKLM\..\Run: [S7wlpapx] D:\Program Files\Common Files\Siemens\EXE\S7wlpapx.exe
O4 - HKLM\..\Run: [service] C:\WINDOWS\system32\service.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [QPower] D:\Program Files\BenQ\QPower\QPower.exe /s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [updateMgr] D:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_5 -reboot 1

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoCAD 启动加速器.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: ☆使用歪博士保存当前图片 - res://C:\Program Files\Websaver\IEMenu.DLL/203
O8 - Extra context menu item: ☆使用歪博士保存当前文档 - res://C:\Program Files\Websaver\IEMenu.DLL/201
O8 - Extra context menu item: ☆使用歪博士保存当前连接 - res://C:\Program Files\Websaver\IEMenu.DLL/202
O8 - Extra context menu item: ☆使用歪博士快速保存当前文档 - res://C:\Program Files\Websaver\IEMenu.DLL/225
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用网际快车下载 - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O9 - Extra button: ☆使用歪博士快速保存当前文档 - {5986CEC2-B0FF-4db1-9C0B-67FE9BEEC80E} - res://C:\Program Files\Websaver\IEMenu.DLL/225 (file missing)
O9 - Extra 'Tools' menuitem: ☆使用歪博士快速保存当前文档 - {5986CEC2-B0FF-4db1-9C0B-67FE9BEEC80E} - res://C:\Program Files\Websaver\IEMenu.DLL/225 (file missing)
O9 - Extra button: ☆使用歪博士保存当前文档 - {7FE8033B-6270-4492-B007-4E6D331FDDC5} - res://C:\Program Files\Websaver\IEMenu.DLL/201 (file missing)
O9 - Extra 'Tools' menuitem: ☆使用歪博士保存当前文档 - {7FE8033B-6270-4492-B007-4E6D331FDDC5} - res://C:\Program Files\Websaver\IEMenu.DLL/201 (file missing)
O17 - HKLM\System\CCS\Services\Tcpip\..\{F21E1730-9059-4D1D-B580-B077264BE967}: NameServer = 192.168.1.1,61.139.2.69,202.98.96.68
O20 - Winlogon Notify: IntelWireless - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll
O23 - Service: ArchestrA Logger (aaLogger) - Invensys Systems, Inc. - C:\Program Files\Common Files\ArchestrA\aaLogger.exe
O23 - Service: Automation License Manager Service (almservice) - SIEMENS AG - D:\Program Files\Common Files\Siemens\sws\almsrv\almsrvx.exe
O23 - Service: any name - Macrovision Corporation - C:\Autodesk Network License Manager\lmgrd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: CCAgent - SIEMENS AG - D:\Program Files\Common Files\Siemens\ACE\bin\CCAgent.exe
O23 - Service: CCEClient - SIEMENS AG - D:\Program Files\Common Files\Siemens\ACE\bin\CCEClient.exe
O23 - Service: CCEServer - SIEMENS AG - D:\Program Files\Common Files\Siemens\ACE\bin\CCEServer.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Fix - GE Fanuc International, Inc. - D:\DYNAMICS\fixsrv.exe
O23 - Service: FS Service Control - Wonderware Corporation - C:\Program Files\Common Files\ArchestrA\NTServApp.exe
O23 - Service: HealthSystemInfo - Unknown owner - D:\Program Files\Schneider Electric\Unity Pro\HealthSystemInfo.exe
O23 - Service: Intellution Licensing Service (iLicenseSvc) - GE Fanuc International, Inc. - C:\WINDOWS\Intellution\iLicenseSvc.exe
O23 - Service: OpcEnum - OPC Foundation - C:\WINDOWS\system32\OpcEnum.exe
O23 - Service: OwnershipProtocol - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\OProtSvc.exe
O23 - Service: PVI Manager (PviManSvcx) - Bernecker + Rainer, Industrie-Elektronik Ges.m.b.H, A-5142, Austria, Europe - D:\BrAutomation\Bin\PviMan.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - d:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - d:\Program Files\Rising\Rav\Ravmond.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: S7 Global Services (s7asysvx) - SIEMENS AG - D:\Program Files\Siemens\Step7\S7BIN\s7asysvx.exe
O23 - Service: SIMATIC IEPG Help Service (s7oiehsx) - SIEMENS AG - D:\Program Files\Common Files\Siemens\S7IEPG\s7oiehsx.exe
O23 - Service: SIMATIC WinAC FeatureServer (S7WCWEBX) - Unknown owner - D:\Program Files\Common Files\Siemens\EXE\S7WCWEBX.exe
O23 - Service: SIMATIC WinLC Instance Manager (S7wlmgrx) - SIEMENS AG - d:\program files\common files\siemens\exe\s7wlmgrx.exe
O23 - Service: SIMATIC NET Synchronization Service (sim9sync) - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\SimNetCom\sim9sync.exe
O23 - Service: SIMATIC NET Configuration Server - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\bincfg\scorecfg.exe
O23 - Service: SIMATIC NET Configuration Service - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\bincfg\SServCFG.exe
O23 - Service: SIMATIC NET Core Server DP - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\bindp\scoredp.exe
O23 - Service: SIMATIC NET Core Server DP2 - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\bindp2\scoredp2.exe
O23 - Service: SIMATIC NET Core Server FDL - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\binfdl\scorefdl.exe
O23 - Service: SIMATIC NET Core Server FMS - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\binfms\scorefms.exe
O23 - Service: SIMATIC NET Core Server PD - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\binpd\scorepd.exe
O23 - Service: SIMATIC NET Core Server PROFINET CbA - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\binPN\scorepn.exe
O23 - Service: SIMATIC NET Core Server PROFINET IO - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\binpnio\scorepnio.exe
O23 - Service: SIMATIC NET Core Server S7 - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\binS7\SCoreS7.exe
O23 - Service: SIMATIC NET Core Server SNMP - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\binSNMP\scoresnmp.exe
O23 - Service: SIMATIC NET Core Server SR - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\opc2\binsr\scoresr.exe
O23 - Service: SIMATIC NET P&P Manager - Siemens AG - C:\Program Files\SIEMENS\SIMATIC.NET\SimNetCom\simnetpnpman.exe
O23 - Service: SIMATIC NET Route Manager (SIMATIC NET RouteManager) - SIEMENS AG - D:\Program Files\Common Files\Siemens\s7wnrmsx\s7wnrmsx.exe
O23 - Service: Wonderware SuiteLink (slssvc) - Invensys Systems, Inc. - C:\Program Files\Common Files\ArchestrA\slssvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SIMATIC NET Station-Manager (StatMgr) - Siemens AG - D:\Program Files\Common Files\Siemens\s7wnsmsx\s7wnsmsx.exe
O23 - Service: Wonderware Logger (WWLOGSVC) - Wonderware Corporation - C:\Program Files\Common Files\ArchestrA\wwlogsvc.exe
O23 - Service: Wonderware NetDDE Helper (WWNetDDE) - Invensys Systems, Inc. - C:\Program Files\Common Files\ArchestrA\wwnetdde.exe
O23 - Service: WwRpcSvr - Wonderware Corporation - C:\WINDOWS\system32\wwinstsvc.exe

修复
O4 - HKLM\..\Run: [service] C:\WINDOWS\system32\service.exe

删除
C:\WINDOWS\system32\service.exe（注意文件名，别删错了）

谢谢!已将该项删除。

日死千橡互连～～