为以下网站：
http://www1.139.com/learn.html?cid=426
http://www.iwanto.com.cn/pop.html
还有两个不定时的弹出来。。随便说一下。我的是笔记本。。。。

最后是hijackthis的扫描报告：
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
F:\Rising\Rav\CCenter.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Intel\Wireless\Bin\EvtEng.exe
D:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
D:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
F:\Rising\Rav\Ravmond.exe
f:\rising\rfw\rfwsrv.exe
D:\WINDOWS\system32\spoolsv.exe
F:\Rising\Rav\RavStub.exe
f:\rising\rfw\RfwMain.exe
D:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
D:\WINDOWS\system32\wdfmgr.exe
D:\WINDOWS\System32\alg.exe
D:\WINDOWS\system32\wscntfy.exe
D:\program files\internet explorer\iexplore.exe
D:\program files\internet explorer\iexplore.exe
D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\WINDOWS\stsystra.exe
D:\WINDOWS\system32\igfxsrvc.exe
D:\WINDOWS\system32\igfxpers.exe
D:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
D:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
F:\Rising\Rav\RavTask.exe
D:\WINDOWS\system32\CTFMON.EXE
F:\360safe\360Safe.exe
D:\WINDOWS\explorer.exe
D:\WINDOWS\system32\wuauclt.exe
D:\WINDOWS\system32\rundll32.exe
D:\WINDOWS\system32\conime.exe
f:\rising\rfw\rfwproxy.exe
D:\DOCUME~1\julie\LOCALS~1\Temp\zt.exe
D:\DOCUME~1\julie\LOCALS~1\Temp\wow.exe
F:\Maxthon\Maxthon.exe
D:\WINDOWS\system32\wuauclt.exe
D:\DOCUME~1\julie\LOCALS~1\Temp\hijackthis.zip 的临时目录 3\HijackThis.exe

F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,rundll32.exe D:\WINDOWS\system32\winsys16_061201.dll start,rundll32.exe D:\WINDOWS\system32\windown_2.dll mymain
O4 - HKLM\..\Run: [IMJPMIG8.1] "D:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ISUSPM Startup] D:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [igfxtray] D:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] D:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] D:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "D:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "D:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [RavTask] "F:\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "F:\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [sys] D:\WINDOWS\Intel\rundll32.exe
O4 - HKLM\..\Run: [ms] D:\Program Files\Microsoft\svhost32.exe
O4 - HKLM\..\RunOnce: [360Safe] Rundll32.exe F:\360safe\AntiAdwa.dll,KillAdware
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O20 - Winlogon Notify: igfxcui - D:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - D:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - D:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - F:\Rising\Rav\Ravmond.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - D:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - D:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

运行Hijackthis，把下面的选中打上钩，修复
F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,rundll32.exe D:\WINDOWS\system32\winsys16_061201.dll start,rundll32.exe D:\WINDOWS\system32\windown_2.dll mymain
O4 - HKLM\..\Run: [ISUSScheduler] "D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [sys] D:\WINDOWS\Intel\rundll32.exe
O4 - HKLM\..\Run: [ms] D:\Program Files\Microsoft\svhost32.exe
重启按F８进入安全模式下
显示隐藏文件
删除：
D:\WINDOWS\Intel\rundll32.exe
D:\Program Files\Microsoft\svhost32.exe
D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\WINDOWS\system32\windown_2.dll
D:\WINDOWS\system32\winsys16_061201.dll
D:\DOCUME~1\julie\LOCALS~1\Temp\清空文件夹

问题是解决了。但是bwgcy.dll无法加载。
怎么释放这个加载项啊。
我笨。找不到。呵呵。。。

在“开始”→“运行”→输入“REGEDIT”回车，打开注册表编辑器再按F3键，在搜索项里输入弹出的对话框的“文件名”的绝对路径及文件名或它相对应的程序名及它相关的项目再删除即可，当搜索至删除完毕即可，再在“开始菜单”→“运行”→输入“msconfig”回车→进入“系统配置实用程序”→击“启动”卡找到它有关的项目去它掉的钩选项即可。（在修改注册表之前要先关闭瑞星所有监控完成之后再打开它）