求助:被恶意网站骚扰

求助:这几个:http://music.aqqr.com/ http://www.sogua.com/ http://ok.bo00.com/ok.htm http://ent.sogua.com/news/ts.htm 一直弹! 求高手帮助!!还有http://www.nb46.com/movie/movie.htm  用恶意网站清理助手等工具都无效,卡卡助手也不能显示了

hijackthis扫描结果如下,请高手指点:
Logfile of HijackThis v1.99.1
Scan saved at 9:09:38, on 2006-9-14
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Rising\Rav\CCenter.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Rising\Rav\Ravmond.exe
d:\program files\rising\rfw\rfwsrv.exe
D:\WINDOWS\system32\brsvc01a.exe
D:\WINDOWS\system32\brss01a.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Rising\Rav\RavStub.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
d:\program files\rising\rfw\RfwMain.exe
D:\Program Files\切换控制程序\netctl.exe
D:\Program Files\Rising\Rav\RavTask.exe
D:\Program Files\Rising\Rav\Ravmon.exe
D:\WINDOWS\System32\hkcmd.exe
D:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Analog Devices\SoundMAX\Smax4.exe
D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\DOCUME~1\bgsh\LOCALS~1\Temp\hijackthis.zip 的临时目录 2

\HijackThis.exe

R3 - Default URLSearchHook is missing
O2 - BHO: Shockwave Flash Object - {14A21378-5BB1-4BC4-95D5-

5D3F51527F6F} - D:\WINDOWS\system32\l3codecx.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] D:\WINDOWS\IME\imjp8_1

\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] D:\WINDOWS\System32

\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] D:\WINDOWS\System32

\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NetCtl] D:\Program Files\切换控制程序

\netctl.exe
O4 - HKLM\..\Run: [IMSCMIG40W] D:\PROGRA~1\COMMON~1\MICROS~1

\IME\IMSC40W\IMSCMIG.EXE /SetPreload /Log
O4 - HKLM\..\Run: [RavTask] "D:\Program

Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "D:\Program

Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [HotKeysCmds] D:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog

Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "D:\Program Files\Analog

Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [hp 1000 firmware] D:\Program Files\hp

LaserJet 1000\fwdl.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32

\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet

Explorer\Control Panel present
O14 - IERESET.INF: START_PAGE_URL=http://www.legend.com
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}

(MsnMessengerSetupDownloadControl Class) -

http://messenger.msn.com/download/MsnMessengerSetupDownloader.

cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{31558D55-4696-4D58-

A394-9C0D2873840E}: NameServer = 202.99.160.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{31558D55-4696-4D58-

A394-9C0D2873840E}: NameServer = 202.99.160.68
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-

8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F}

- D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - D:\WINDOWS\SYSTEM32

\igfxsrvc.dll
O23 - Service: BrSplService (Brother XP spl Service) - brother

Industries Ltd - D:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing

Rising Technology Co., Ltd. - d:\program

files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) -

Beijing Rising Technology Co., Ltd. - d:\program

files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter)

- Beijing Rising Technology Co., Ltd. - D:\Program

Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising

Technology Co., Ltd. - D:\Program Files\Rising\Rav\Ravmond.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service

(default)) - Analog Devices, Inc. - D:\Program Files\Analog

Devices\SoundMAX\SMAgent.exe

最后编辑2006-09-14 12:36:22