Logfile of HijackThis v1.99.1
Scan saved at 0:21:06, on 2005-11-29
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\msdtc.exe
C:\WINNT\system32\svchost.exe
C:\Winfgate\winntfgate.exe
C:\WINNT\System32\llssrv.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\SOUNDMAN.EXE
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\VTTimer.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\internat.exe
C:\Program Files\ZETRONIC\ZEUPDATE\zeupdsvr.exe
C:\WINNT\system32\Dfssvc.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\Hintsoft\PubwinServer\version\bin\ServiceManager.exe
C:\Program Files\Hintsoft\SyncAgent\SyncAgent.exe
C:\Winfgate\ServerGuard.exe
C:\Program Files\Hintsoft\PubwinServer\appServ\bin\wrapper.exe
C:\Program Files\Hintsoft\PubwinServer\appServ\java\bin\java.exe
C:\Program Files\Hintsoft\PubwinConsole\PubwinConsole.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\Program Files\Rising\Rav\RAVTASK.EXE
C:\Program Files\Rising\Rav\Ravmond.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\Program Files\Rising\Rav\RAVMON.EXE
C:\Program Files\ZETRONIC\过滤王网吧版2.8数字证书版 - 控制台\PW_Manager.exe
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE
F:\Program Files\Tencent\qq\QQ.exe
F:\Program Files\Tencent\qq\TIMPlatform.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINNT\system32\mdm.exe
C:\WINNT\System32\termsrv.exe
C:\WINNT\system32\cmd.exe
C:\WINNT\system32\cmd.exe
C:\WINNT\system32\ftp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Rising\Rav\Rav.exe
C:\WINNT\system32\tlntsvr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINNT\explorer.exe
F:\常用软件\155847200541134207\HijackThis.exe

O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - Startup: Pubwin EP服务控制器.lnk = C:\Program Files\Hintsoft\PubwinServer\version\bin\ServiceManager.exe
O4 - Startup: SyncAgent.lnk = C:\Program Files\Hintsoft\SyncAgent\SyncAgent.exe
O4 - Global Startup: 服务管理器.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Program Files\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - F:\Program Files\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Program Files\Tencent\qq\SendMMS.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{AF95B59F-79A4-4B46-ABE6-C0F2F71BC7AC}: NameServer = 202.102.224.68,202.102.227.68
O23 - Service: Pubwin Application Server (AppServer) - Unknown owner - C:\Program Files\Hintsoft\PubwinServer\appServ\bin\wrapper.exe" -s "C:\Program Files\Hintsoft\PubwinServer\appServ\conf\wrapper.conf (file missing)
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: FG3000 Server (FG3000Server) - Zhuhai Zetronic Ltd. - C:\Winfgate\winntfgate.exe
O23 - Service: Pubwin Update (PubwinUpdate) - Unknown owner - C:\Program Files\Hintsoft\PubwinServer\version\bin\wrapper.exe" -s "C:\Program Files\Hintsoft\PubwinServer\version\conf\wrapper.conf (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: VnetPigeon_Server (VnetPigeonServer) - Unknown owner - C:\WINNT\VnetServer.exe
O23 - Service: Zetronic Update Service (ZeupdServer) - Zhuhai Zetronic Ltd. - C:\Program Files\ZETRONIC\ZEUPDATE\zeupdsvr.exe
麻烦看下~~都一个多星期了