没办法，删不了，想手工删又和帖子的情况不完全一样，笨点又不会举一反三！在下感激不尽，QQ；66791069
看看进程吧
HijackThis_zww汉化版扫描日志 V1.99.1
保存于 23:29:41, 日期 2005-9-30
操作系统： Windows XP SP1 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP1 (6.00.2800.1106)
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\rundll32.exe
E:\瑞星\RISING\RAV\CCENTER.EXE
E:\瑞星\RISING\RAV\Ravmond.exe
C:\WINDOWS\System32\Rundll32.exe
E:\瑞星\RISING\RAV\RavStub.exe
E:\瑞星\KAVPFW.EXE
C:\Program Files\wsearch\Search.exe
E:\瑞星\RISING\RAV\RAVTIMER.EXE
E:\瑞星\RISING\RAV\RAVMON.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\ctfmon.exe
E:\瑞星\Rising\Rav\Rav.exe
E:\瑞星\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
F:\download\HijackThis1991zww.exe
O2 - BHO: 好看123上网精灵 - {00000000-280E-445B-B051-A8B2DA7E798A} - E:\超级兔子\MagicSet\HaokanBar.dll
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\System32\xunleibho_v8.dll
O2 - BHO: Helper
Object Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - (no file)
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\Program Files\3721\Assist\Angling.dll
O2 - BHO: AssistII - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\downlo~1\CnsHook.dll
O3 - IE工具栏增项: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
O3 - IE工具栏增项: 上网助手 - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: 好看123上网精灵 - {FEDF637B-F631-4583-A210-33CC828D42DB} - E:\超级兔子\MagicSet\HaokanBar.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] ; C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [InsertImage] ; d:\Program Files\!Sunv\DFVCD2003\InsertImage.exe
O4 - 启动项HKLM\\Run: [rfw] ; C:\Program Files\rising\Rfw\Rfw.exe
O4 - 启动项HKLM\\Run: [SuperCalendar] ; E:\PROGRA~1\SUPERK~1\SuperCal.exe
O4 - 启动项HKLM\\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [iDuba Personal FireWall] E:\瑞星\KAVPFW.EXE
O4 - 启动项HKLM\\Run: [MoveSearch] C:\Program Files\wsearch\Search.exe
O4 - 启动项HKLM\\Run: [assistse] ; "C:\PROGRA~1\3721\assistse.exe"
O4 - 启动项HKLM\\Run: [RavTimer] E:\瑞星\RISING\RAV\RAVTIMER.EXE
O4 - 启动项HKLM\\Run: [RavMon] E:\瑞星\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - 启动项HKLM\\RunOnce: [RavStub] "E:\瑞星\RISING\RAV\ravstub.exe" /RUNONCE
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Kugoo] ; F:\PROGRA~1\KUGOO2\KUGOO.EXE
O4 - HKCU\..\Run: [iDuba Personal Firewall] E:\瑞星\KAVPFW.EXE
O4 - HKCU\..\Run: [Super Rabbit Desktop Search] ; E:\超级兔子\MagicSet\SRSearch.exe
O4 - HKCU\..\Run: [Super Rabbit IEPro] E:\超级兔子\MagicSet\SRIECLI.EXE /LOAD
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Startup: 迅雷4.lnk = F:\xuelei5\Thunder.exe
O4 - Startup: 金山词霸 2005.lnk = E:\PowerWord 2005\xdict.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - F:\xuelei5\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - F:\xuelei5\getAllurl.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - F:\QQ\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - F:\QQ\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - F:\QQ\qq\SendMMS.htm
O9 - 浏览器额外的按钮: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm (file missing)
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - F:\浩方对战平台\GameClient.exe
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.rd.yahoo.com/auct/promo/3721/200508/ielogo-wcfashion/*http://cn.promo.auctions.yahoo.com/200507/fashion/index.html?refcode=3721200508ielogo-wcfashion (file missing)
O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O11 - Options group: [!CNS] 上网助手-地址栏搜索
O16 - DPF: {33331111-1111-1111-1111-611111193457} -
file://c:\ex.cab
O16 - DPF: {33331111-1111-1111-1111-611111193458} -
file://c:\ex.cab
O16 - DPF: {33331111-1111-1111-1111-622221193458} -
file://c:\ex.cab
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {64311111-1111-1121-1111-111191113457} -
file://c:\eied_s7.cab
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://202.96.140.111:1995/talk.cab
O16 - DPF: {88734439-46D0-42C0-A13F-7E881EE550CF} (Filetran Control) - http://www.bluesky.cn/download/filetran.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{37C5AF3D-99BA-4D55-B333-344E31FE0F54}: NameServer = 202.99.160.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{7299E70A-B697-432D-AD20-79EC264C3EB8}: NameServer = 202.99.160.68 202.99.168.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{37C5AF3D-99BA-4D55-B333-344E31FE0F54}: NameServer = 202.99.160.68
O17 - HKLM\System\CS2\Services\Tcpip\..\{37C5AF3D-99BA-4D55-B333-344E31FE0F54}: NameServer = 202.99.160.68
O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34546} - C:\WINDOWS\System32\vbsys2.dll
O23 - NT 服务: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - NT 服务: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - NT 服务: LicCtrl Service (LicCtrlService) - Unknown owner - rundll32.exe (file missing)
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - rising - E:\瑞星\RISING\RAV\CCENTER.EXE
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - E:\瑞星\RISING\RAV\Ravmond.exe
O23 - NT 服务: System.exe - Unknown owner - C:\WINDOWS\System.exe
O23 - NT 服务: Visual Studio Analyzer RPC bridge - Unknown owner - (no file)
