已经用瑞星杀过毒了，还是无法去除84852C的启动项
Logfile of HijackThis v1.99.1
Scan saved at 15:55:52, on 2006-11-3
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\MRTServ.exe
C:\WINDOWS\SYSTEM32\RUNDLLFROMWIN2000.EXE
D:\Rising\Rav\CCenter.exe
D:\Rising\Rav\RavTask.exe
D:\Rising\Rav\RavMon.exe
D:\Rising\Rav\Ravmond.exe
D:\Rising\Rav\RavStub.exe
D:\Rising\Rav\RsAgent.exe
C:\WINDOWS\msagent\AgentSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
I:\1\HijackThis.com

O2 - BHO: baiduba Class - {CE7C3CF0-4B15-11D1-ABED-709549C18686} - C:\WINDOWS\baiduba.dll
O4 - HKLM\..\Run: [RavTask] "D:\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: 84852C.exe
O4 - Global Startup: 84852C.exe
O15 - Trusted Zone: http://oa.szkwj.com
O15 - Trusted Zone: http://www.szkwj.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{760C0551-8CCD-467D-9F42-53A9296B8AA2}: NameServer = 10.10.10.68
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: CWShredder Service - InterMute, Inc. - I:\1\CWShredder.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Rising\Rav\Ravmond.exe
O23 - Service: Windows_Server (Windows_Serversses) - Unknown owner - C:\WINDOWS\system32\servicecs.exe (file missing)