我自从用了个威金病毒的免疫批处文件~我WGIN2000~P4系统~一重启就一起跳出DOS窗口文件名C:\WINNT\system32\Rundll32.exe.，只有雅虎助手才可以阻止这个程序一直运行。
还有我怎么现在安装IE6.0装不了~说要关了些程序~可我一开机就运行IE6。0也不是行~是何原因，请指教！
HijackThis_zww汉化版扫描日志 V1.99.1
保存于 16:04:48, 日期 2006-9-30
操作系统： Windows 2000 SP4 (WinNT 5.00.2195)
浏览器： Internet Explorer v5.00 SP1 (5.00.2920.0000)
当前运行的进程：
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\msdtc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\llssrv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\conime.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINNT\system32\Rundll32.exe
C:\WINNT\system32\rundll32.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINNT\system32\internat.exe
C:\WINNT\System32\mdm.exe
C:\WINNT\system32\NOTEPAD.EXE
\192.168.1.110\游戏更新\我的文档\反病毒工具\hijackthis\HijackThis1991zww.exe
R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
O1 - Hosts: 61.152.252.24 www.xg1278.com
O1 - Hosts: 61.152.252.24 kk7999.com
O1 - Hosts: 61.152.252.24 www.kk7999.com
O1 - Hosts: 61.152.252.24 bb789.com
O1 - Hosts: 61.152.252.24 www.bb789.com
O1 - Hosts: 61.152.252.24 138777.com
O1 - Hosts: 61.152.252.24 www.138777.com
O1 - Hosts: 61.152.252.24 tj5566.com
O1 - Hosts: 61.152.252.24 www.tj5566.com
O1 - Hosts: 61.152.252.24 tj789.com
O1 - Hosts: 61.152.252.24 www.tj789.com
O1 - Hosts: 61.152.252.24 999199.com
O1 - Hosts: 61.152.252.24 www.999199.com
O1 - Hosts: 61.152.252.24 6043.com
O1 - Hosts: 61.152.252.24 www.6043.com
O1 - Hosts: 61.152.252.24 69996.com
O1 - Hosts: 61.152.252.24 www.69996.com
O1 - Hosts: 61.152.252.24 4489.com
O1 - Hosts: 61.152.252.24 www.4489.com
O1 - Hosts: 61.152.252.24 22331.hk
O1 - Hosts: 61.152.252.24 www.22331.hk
O1 - Hosts: 61.152.252.24 90.hk
O1 - Hosts: 61.152.252.24 www.90.hk
O1 - Hosts: 61.152.252.24 96.hk
O1 - Hosts: 61.152.252.24 www.96.hk
O1 - Hosts: 61.152.252.24 hk96.com
O1 - Hosts: 61.152.252.24 www.hk96.com
O1 - Hosts: 61.152.252.24 23331.hk
O1 - Hosts: 61.152.252.24 www.23331.hk
O1 - Hosts: 61.152.252.24 5813.com
O1 - Hosts: 61.152.252.24 www.5813.com
O1 - Hosts: 61.152.252.24 www.xg334.com
O1 - Hosts: 61.152.252.24 six678.com
O1 - Hosts: 61.152.252.24 www.six678.com
O1 - Hosts: 61.152.252.24 zq078.com
O1 - Hosts: 61.152.252.24 www.zq078.com
O1 - Hosts: 61.152.252.24 zqsj518.com
O1 - Hosts: 61.152.252.24 www.zqsj518.com
O1 - Hosts: 61.152.252.24 678987.com
O1 - Hosts: 61.152.252.24 www.678987.com
O1 - Hosts: 61.152.252.24 31689.com
O1 - Hosts: 61.152.252.24 www.31689.com
O1 - Hosts: 61.152.252.24 35655.com
O1 - Hosts: 61.152.252.24 www.35655.com
O1 - Hosts: 61.152.252.24 4454.cn
O1 - Hosts: 61.152.252.24 www.4454.cn
O1 - Hosts: 61.152.252.24 www.zq5558.com
O1 - Hosts: 61.152.252.24 59991.com
O1 - Hosts: 61.152.252.24 www.59991.com
O1 - Hosts: 61.152.252.24 56667.com
O1 - Hosts: 61.152.252.24 www.56667.com
O1 - Hosts: 61.152.252.24 mark991.com
O1 - Hosts: 61.152.252.24 www.mark991.com
O1 - Hosts: 61.152.252.24 648888.com
O1 - Hosts: 61.152.252.24 www.648888.com
O1 - Hosts: 61.152.252.24 ml68.com
O1 - Hosts: 61.152.252.24 www.ml68.com
O1 - Hosts: 61.152.252.24 hk678.hk
O1 - Hosts: 61.152.252.24 www.hk678.hk
O1 - Hosts: 61.152.252.24 53136.com
O1 - Hosts: 61.152.252.24 www.53136.com
O1 - Hosts: 61.152.252.24 53136.net
O1 - Hosts: 61.152.252.24 www.53136.net
O1 - Hosts: 61.152.252.24 83136.com
O1 - Hosts: 61.152.252.24 www.83136.com
O1 - Hosts: 61.152.252.24 k08.cn
O1 - Hosts: 61.152.252.24 www.k08.cn
O1 - Hosts: 61.152.252.24 25458.com
O1 - Hosts: 61.152.252.24 www.25458.com
O1 - Hosts: 61.152.252.24 128008.com
O1 - Hosts: 61.152.252.24 www.128008.com
O1 - Hosts: 61.152.252.24 ak258.com
O1 - Hosts: 61.152.252.24 www.ak258.com
O1 - Hosts: 61.152.252.24 30871.com
O1 - Hosts: 61.152.252.24 www.30871.com
O1 - Hosts: 61.152.252.24 65538.com
O1 - Hosts: 61.152.252.24 www.65538.com
O1 - Hosts: 61.152.252.24 z118.net
O1 - Hosts: 61.152.252.24 www.z118.net
O1 - Hosts: 61.152.252.24 0678.net
O1 - Hosts: 61.152.252.24 www.0678.net
O1 - Hosts: 61.152.252.24 99197.com
O1 - Hosts: 61.152.252.24 www.99197.com
O1 - Hosts: 61.152.252.24 6043.com
O1 - Hosts: 61.152.252.24 www.6043.com
O1 - Hosts: 61.152.252.24 875888.com
O1 - Hosts: 61.152.252.24 www.875888.com
O1 - Hosts: 61.152.252.24 882388.com
O1 - Hosts: 61.152.252.24 www.882388.com
O1 - Hosts: 61.152.252.24 59869.com
O1 - Hosts: 61.152.252.24 www.59869.com
O1 - Hosts: 61.152.252.24 ok58888.com
O1 - Hosts: 61.152.252.24 www.ok58888.com
O1 - Hosts: 61.152.252.24 kkttt.com
O1 - Hosts: 61.152.252.24 www.kkttt.com
O1 - Hosts: 61.152.252.24 34345.com
O1 - Hosts: 61.152.252.24 www.34345.com
O1 - Hosts: 61.152.252.24 89335.com
O1 - Hosts: 61.152.252.24 www.89335.com
O1 - Hosts: 61.152.252.24 88785.com
O1 - Hosts: 61.152.252.24 www.88785.com
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINNT\DOWNLO~1\cnshook.dll
O3 - IE工具栏增项: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\PROGRA~1\Kingsoft\FASTAI~1\IEBand.dll
O3 - IE工具栏增项: (no name) - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - (no file)
O3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - 启动项HKLM\\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINNT\DOWNLO~1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [helper.dll] C:\WINNT\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - 启动项HKLM\\Run: [NMGameX_AutoRun] C:\WINNT\system32\Rundll32.exe NMGameX.dll,LiveProcess /aa
O4 - 启动项HKLM\\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - 启动项HKLM\\Run: [yassistse] "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - Startup: 继续 Windows Update 安装.lnk = D:\ie60\ie6setup.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\install\QQ2006\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\install\QQ2006\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\install\QQ2006\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\install\QQ2006\SendMMS.htm
O8 - IE右键菜单中的新增项目: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/246
O9 - 浏览器额外的按钮: 就要你 - {42CE9921-7259-11D6-B76A-0010A48548DC} - url:http://www.91ni.com (file missing)
O9 - 浏览器额外的按钮: Yahoo 3.5G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing)
O9 - 浏览器额外的按钮: 名品折扣 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://adtaobao.allyes.com/main/adfclick?db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816 (file missing)
O9 - 浏览器额外的按钮: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing)
O9 - 浏览器额外的按钮: 雅虎WIDGET - {6354ABE6-05F1-49ed-B850-E423120EC338} - http://cn.widget.yahoo.com/index.htm?source=Cns (file missing)
O9 - 浏览器额外的按钮: 网吧.net计划 - {64187580-726B-11D6-B76A-0010A48548DC} - url:http://www.sicent.net (file missing)
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\install\QQ2006\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\install\QQ2006\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\install\QQ2006\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\install\QQ2006\QQIEHelper.dll
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O11 - Options group: [!CNS] 中文上网
O16 - DPF: {3FB2A3BC-F243-43D1-B6BC-CA863C9A9B0E} (ButtonMAC Control) - http://www.gotogame.com.cn/cybercafe/dkey/ButtonMACXControl1.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{1451FFB7-5EEC-4360-B9FA-199A9FA40142}: NameServer = 202.101.98.54,202.101.98.55
O17 - HKLM\System\CCS\Services\Tcpip\..\{72CD7197-0E86-4184-BD39-908320521F52}: NameServer = 202.101.98.55,202.101.138.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{1451FFB7-5EEC-4360-B9FA-199A9FA40142}: NameServer = 202.101.98.54,202.101.98.55
O17 - HKLM\System\CS2\Services\Tcpip\..\{1451FFB7-5EEC-4360-B9FA-199A9FA40142}: NameServer = 202.101.98.54,202.101.98.55
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
