查看了一下论坛相关帖子，发现给出的解决办法在我这里不使用，不知道是不是病毒变种，请各位大侠分析一下。
HijackThis_zww汉化版扫描日志 V1.99.1
保存于 17:26:36, 日期 2005-7-11
操作系统： Windows XP SP1 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRAM FILES\RISING\RAV\RavStub.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
C:\PROGRA~1\RISING\RAV\RAVMON.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Sony\HotKey Utility\HKServ.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.exe
C:\WINDOWS\System32\hookdump.exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\HijackThis1991汉化版\HijackThis1991zww.exe
R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
O2 - BHO: 卡卡安全助手 - {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} - (no file)
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - 启动项HKLM\\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - 启动项HKLM\\Run: [RavMon] C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - 启动项HKLM\\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [hkserv] "C:\Program Files\Sony\HotKey Utility\HKServ.exe"
O4 - HKCU\..\Run: [hkwnd] "C:\Program Files\Sony\HotKey Utility\HKWnd.exe"
O4 - HKCU\..\Run: [Intel system tool] C:\WINDOWS\System32\hookdump.exe
O4 - Global Startup: systray.lnk = C:\WINDOWS\system32\systray.exe
O9 - 浏览器额外的按钮: 访问瑞星网站 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E444} - http://www.rising.com.cn (file missing)
O9 - 浏览器额外的按钮: 访问卡卡社区 - {FF2DE7A6-ECB1-4CBC-9C0E-D92A9E66E445} - http://www.ikaka.com (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/
O15 - 添加的受信任的 IP 地址范围: http://132.228.39.16
O16 - DPF: {22A88341-AFCB-45F0-A856-C2BAE74F878E} (InstallX Class) - http://www.75tz.com/codacv3/inst2_ax.cab
O16 - DPF: {5E2664B2-F672-4956-B5B8-C07978766BDF} (PDFEncrypt Control) - http://132.228.39.16/wxweboa/public/css.nsf/AttachFile/PDFCtrlVC/$FILE/PDFCtrlVC.cab
O16 - DPF: {8222A979-F1CA-43D5-9ED8-D4A6AB93FCF5} (IdealScanCtrl.UserControl1) - http://132.228.39.16/wxweboa/public/css.nsf/AttachFile/IdealScan/$FILE/IdealScanCtrl.CAB
O16 - DPF: {96492DA7-C9FE-44F5-B6E3-7826130F54F9} (UpDownload.MyControl) - http://132.228.39.16/wxweboa/public/css.nsf/AttachFile/UpDownload/$FILE/UpDownload.CAB
O16 - DPF: {A9FE5B7F-FF70-47B6-B7CA-7304B123F95D} (FlowViewX Control) - http://132.228.39.16/wxweboa/public/css.nsf/AttachFile/FlowView/$FILE/FlowView.cab
O16 - DPF: {E0FE703B-0A98-4325-9885-8B626035EE13} (PDFCtrl.WordToPDF) - http://132.228.39.16/wxweboa/public/css.nsf/AttachFile/PDFCTRl/$FILE/PDFCtrl.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{C5725D11-CEE1-4B77-8EFF-DB04B189E572}: NameServer = 221.228.255.1,218.2.135.1
O23 - NT 服务: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
O23 - NT 服务: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
