刚刚做了系统，怎么有这么多进程呀？ 是不是病毒？

我的系统是
WIN2000
高手告诉我
我查毒也没有病毒

HijackThis_zww汉化版扫描日志 V1.99.1
保存于      10:28:49, 日期 2006-3-1
操作系统：  Windows 2000 SP4 (WinNT 5.00.2195)
浏览器：    Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程：         
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\termsrv.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\msdtc.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINNT\System32\tcpsvcs.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\llssrv.exe
C:\WINNT\System32\sfmprint.exe
C:\WINNT\System32\WINDOW~1\Server\nspmon.exe
C:\WINNT\System32\WINDOW~1\Server\nscm.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\snmp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\wins.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\dns.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\WINNT\System32\sfmsvc.exe
C:\WINNT\System32\WINDOW~1\Server\nspm.exe
C:\WINNT\System32\WINDOW~1\Server\nsum.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\system32\dllhost.exe
C:\WINNT\system32\dllhost.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\rdpclip.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\Rundll32.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rfw\rfwmain.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINNT\system32\internat.exe
C:\PROGRA~1\TENCENT\AdPlus\Runner.exe
C:\Program Files\Rising\Rav\Ravmon.exe
D:\MirServer\RunGate\网关验证器.exe
D:\MirServer\M2自动数据备份.exe
D:\MirServer\远程登陆器服务\登录器服务端.exe
D:\MirServer\Tools\天涯启动\天涯控制器.exe
D:\MirServer\DBServer\DBServer.exe
D:\MirServer\LoginSrv\LoginSrv.exe
D:\MirServer\LogServer\LogDataServer.exe
D:\MirServer\Mir200\M2Server.exe
D:\MirServer\RunGate\RunGate.exe
D:\MirServer\RunGate\RunGate.exe
D:\MirServer\RunGate\RunGate.exe
D:\MirServer\RunGate\RunGate.exe
D:\MirServer\SelGate\SelGate.exe
D:\MirServer\LoginGate\LoginGate.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\Rundll32.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\Program Files\Rising\Rfw\rfwmain.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINNT\system32\internat.exe
C:\PROGRA~1\TENCENT\AdPlus\Runner.exe
C:\WINNT\system32\taskmgr.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\ylive.exe
C:\WINNT\TEMP\is-T4DL6.tmp\is-Q72EK.tmp
C:\WINNT\TEMP\is-JGI6C.tmp\is-6PC1H.tmp
C:\WINNT\TEMP\is-72TT6.tmp\is-9CH7T.tmp
C:\WINNT\TEMP\is-BRBGS.tmp\is-2L8RK.tmp
C:\WINNT\TEMP\is-0UOFE.tmp\is-OD92C.tmp
C:\WINNT\TEMP\is-76LMQ.tmp\is-VE6QH.tmp
C:\WINNT\TEMP\is-8AJFM.tmp\is-DAFVQ.tmp
C:\WINNT\TEMP\is-9OIOO.tmp\is-32G2E.tmp
C:\WINNT\TEMP\is-LTKJV.tmp\is-OF2CH.tmp
C:\WINNT\TEMP\is-58DOM.tmp\is-LHKTS.tmp
C:\WINNT\TEMP\is-5IF8T.tmp\is-TDBR8.tmp
C:\WINNT\TEMP\is-6JRVB.tmp\is-OHRUC.tmp
C:\WINNT\TEMP\is-FIFRH.tmp\is-4J0MC.tmp
C:\WINNT\TEMP\is-9S4I5.tmp\is-QHNMP.tmp
C:\WINNT\TEMP\is-1KDOK.tmp\is-47J61.tmp
C:\WINNT\TEMP\is-FCD6J.tmp\is-1U2ET.tmp
C:\WINNT\TEMP\is-76M4K.tmp\is-EIBOI.tmp
C:\WINNT\TEMP\is-6FB5A.tmp\is-2RL1Q.tmp
C:\WINNT\TEMP\is-KE509.tmp\is-AMS83.tmp
C:\WINNT\TEMP\is-U7LE9.tmp\is-IBSS5.tmp
C:\WINNT\TEMP\is-P82UJ.tmp\is-RVPTL.tmp
C:\WINNT\TEMP\is-Q1V77.tmp\is-20C5H.tmp
C:\WINNT\TEMP\is-06K8R.tmp\is-5FUIM.tmp
C:\WINNT\TEMP\is-C3T4A.tmp\is-1KUL7.tmp
C:\WINNT\TEMP\is-IQLEQ.tmp\is-HTH2M.tmp
C:\WINNT\TEMP\is-M2334.tmp\is-G65A1.tmp
C:\WINNT\TEMP\is-8FT48.tmp\is-GASTC.tmp
F:\常用软件\远程\mstsc.exe
C:\WINNT\TEMP\is-6E489.tmp\is-D7D8D.tmp
C:\WINNT\TEMP\is-DA4G4.tmp\is-3VORA.tmp
C:\WINNT\TEMP\is-NB9RQ.tmp\is-ACJVQ.tmp
C:\WINNT\TEMP\is-DDQPE.tmp\is-52T4S.tmp
C:\WINNT\TEMP\is-8ASNE.tmp\is-TC2VA.tmp
D:\QQ\QQ.exe
D:\QQ\TIMPlatform.exe
C:\Program Files\Rising\Rav\Rav.exe
C:\Program Files\Rising\Rav\RsAgent.exe
C:\WINNT\msagent\AgentSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Thunder Network\Thunder\Thunder.exe
C:\Documents and Settings\Administrator\桌面\新建文件夹\2535952005811174944\HijackThis1991zww.exe

R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll
R3 - URLSearchHook: QQ Search Hook - {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9} - C:\Program Files\TENCENT\AdPlus\IEHelp.dll
O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINNT\system32\xunleibho_v13.dll
O2 - BHO: Tencent Browser Helper - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\AdPlus\IEHelp.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yangling.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - D:\QQ\QQIEHelper.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINNT\downlo~1\CnsHook.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - IE工具栏增项: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\Program Files\BitComet\BitCometBar\BitCometBar0.3.dll
O3 - IE工具栏增项: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [SoundMAXPnP] rem C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - 启动项HKLM\\Run: [SoundMAX] rem "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - 启动项HKLM\\Run: [NvCplDaemon] rem RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] rem nwiz.exe /install
O4 - 启动项HKLM\\Run: [YLive.exe] rem C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - 启动项HKLM\\Run: [yassistse] rem "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINNT\downlo~1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [TkBellExe] rem "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [StormCodec_Helper] rem "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [AddrPlus3] rem C:\PROGRA~1\TENCENT\AdPlus\Runner.exe C:\PROGRA~1\TENCENT\AdPlus\QAHook1.dll Rundll32
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [NvMediaCenter] rem RUNDLL32.EXE C:\WINNT\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Startup: 腾讯QQ.lnk = D:\QQ\QQ.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\QQ\SendMMS.htm
O8 - IE右键菜单中的新增项目: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/246
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao (file missing)
O9 - 浏览器额外的按钮: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing)
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\QQ\QQ.EXE
O9 - 浏览器额外的按钮: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - 浏览器额外的“工具”菜单项: 易趣购物 - {DE60714F-AC17-427e-861A-FD60CBDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\QQ\QQIEHelper.dll
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O11 - Options group: [!CNS]  网络实名
O11 - Options group: [TBH]  QQ地址栏搜索插件
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - file://C:\Documents and Settings\Administrator\Local Settings\Temp\EI40_\msxml4.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3206A7D0-159D-4590-8A7E-36819C36464A}: NameServer = 202.102.152.3
O17 - HKLM\System\CCS\Services\Tcpip\..\{C05B7317-3142-42FD-BF5F-56ACDBE797FE}: NameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{3206A7D0-159D-4590-8A7E-36819C36464A}: NameServer = 202.102.152.3
O17 - HKLM\System\CS2\Services\Tcpip\..\{3206A7D0-159D-4590-8A7E-36819C36464A}: NameServer = 202.102.152.3
O23 - NT 服务: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

引用:

【不言放弃的贴子】开机时按F8 可以不停地按动F8 然后选择“safe mode”或“安全模式”进入安全模式下 再用HIJACKTHIS修复 O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - //C:\Documents and Settings\Administrator\Local Settings\Temp\EI40_\msxml4.cab 删除C:\WINNT\TEMP下的所有文件及文件夹 另外个人认为 或许有可疑程序插入了C:\WINNT\Explorer.EXE进程 先这样操作一下吧 ...........................

我根据你的操作了，可是还是自动出现那些进程，C:\WINNT\TEMP下还自动出现文件，
还有别的方法吗？
C:\WINNT\Explorer.EXE这个进程是我的远程桌面进程

已经搞定，是别人访问我的网站的日制~~