自己会弹出网页，首页也被修改了。隐藏文件也显示不出来了。我这有日志，高手帮我分析下。
日志文件 Trend Micro HijackThis v 2.0.2
日志保存时间: 10:25:19,2009-2-5
操作系统: Windows XP SP3 (WinNT 5.01.2600)
IE版本: Internet Explorer v6.00 SP3 (6.00.2900.5512)
启动模式: 正常
正在运行的进程:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\Rising\Rav\CCENTER.EXE
C:\WINDOWS\System32\svchost.exe
F:\IEj劫持\完美卸~1\PnpWMmng.exe
D:\Rising\Rav\RavMonD.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Rising\Rav\rsnetsvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Rising\AntiSpyware\rstray.exe
D:\Rising\Rav\RsTray.exe
C:\WINDOWS\RTHDCPL.EXE
F:\IEj劫持\完美卸载V2009\AutoDetect.exe
F:\IEj劫持\完美卸载V2009\WmSysPro.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
E:\刺客\飞速Tudou\TudouVa.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\StormII\stormliv.exe
C:\WINDOWS\system32\PnkBstrA.exe
D:\Rising\Rav\RavTask.exe
D:\Rising\Rav\ScanFrm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\StormII\stMgr.exe
C:\WINDOWS\system32\ping.exe
C:\Program Files\Rising\AntiSpyware\knownsvr.exe
c:\program files\internet explorer\iexplore.exe
C:\Documents and Settings\Administrator\桌面\工具\HijackThis.exe
O2 - BHO: Thunder AtOnce - {01443AEC-0FD1-40fd-9C87-E93D1494C233} - C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: IEHlprObj Class - {AA9742E6-AB51-48a8-831C-C1EB757C3E61} - C:\WINDOWS\system32\lingyuhelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Tencent.FaceQQ.1 - {C92AE615-4D46-4489-96FA-C5D6A38B3AB1} - C:\WINDOWS\system32\faceQQ.dll
O3 - IE 工具栏: 锋力领域搜索 - {07A5BABA-6C77-4863-BD39-71962861753A} - C:\WINDOWS\system32\lingyu.dll
O3 - IE 工具栏: 百度工具栏 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - IE 工具栏: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [runeip] "C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup
O4 - HKLM\..\Run: [RavTray] "D:\Rising\Rav\RsTray.exe" -system
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [PoweronscanWMXZ] F:\IEj劫持\完美卸载V2009\AutoDetect.exe -OnPower
O4 - HKLM\..\Run: [RegFireWall] F:\IEj劫持\完美卸载V2009\WmSysPro.exe -PowerOn
O4 - HKLM\..\RunOnce: [KKDelay] C:\Program Files\Rising\AntiSpyware\RunOnce.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\RunOnce: [ringsig] C:\Documents and Settings\All Users\Application Data\ruixing.exe
O4 - HKUS\S-1-5-19\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Startup: 启动飞速土豆.lnk = ?
O8 - 扩展右键菜单项: 使用迅雷下载 - C:\Program Files\Thunder\Program\geturl.htm
O8 - 扩展右键菜单项: 使用迅雷下载全部链接 - C:\Program Files\Thunder\Program\getallurl.htm
O8 - 扩展右键菜单项: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - 扩展右键菜单项: 按该网址进行领域搜索 - C:\WINDOWS\system32\lingyu.htm
O8 - 扩展右键菜单项: 按该网页进行领域搜索 - C:\WINDOWS\system32\lingyuWeb.htm
O8 - 扩展右键菜单项: 添加到QQ表情 - D:\Program Files\Tencent\QQ\AddEmotion.htm
O9 - 额外的按钮: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\Thunder (2)\Thunder.exe
O9 - 额外的“工具”菜单项目: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - D:\Thunder (2)\Thunder.exe
O9 - 额外的按钮: (未命名) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - 额外的“工具”菜单项目: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (EditCtrl Class) -
https://img.alipay.com/download/2121/aliedit.cabO16 - DPF: {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A} (DLoader Class) -
http://dl.uc.sina.com/cab/downloader.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{F65DC460-548A-4733-A98F-D4481B44F964}: NameServer = 202.97.224.69 202.97.224.68
O18 - Protocol: KuGoo - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx
O18 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\WINDOWS\system32\KuGoo3DownXControl.ocx
O18 - Protocol: qgame - {C79BF22F-25C4-4D3D-8183-14149EAB9C0C} - (没有文件)
O20 - AppInit_DLLs: kmon.dll
O23 - NT 服务: Contrl Center of Storm Media (ccosm) - 北京暴风网际科技有限公司 - C:\Program Files\StormII\stormliv.exe
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc32.exe(文件不存在)
O23 - NT 服务: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - NT 服务: PnpWMmng - Unknown owner - F:\IEj劫持\完美卸~1\PnpWMmng.exe(文件不存在)
O23 - NT 服务: Rav Process Communication Center (RavCCenter) - Beijing Rising Information Technology Co., Ltd. - D:\Rising\Rav\CCENTER.EXE
O23 - NT 服务: Rising RavTask Manager (RavTask) - Beijing Rising Information Technology Co., Ltd. - D:\Rising\Rav\RavTask.exe
O23 - NT 服务: Rising RealTime Monitor (RsRavMon) - Beijing Rising Information Technology Co., Ltd. - D:\Rising\Rav\RavMonD.exe
O23 - NT 服务: Rising Scan Service (RsScanSrv) - Beijing Rising Information Technology Co., Ltd. - D:\Rising\Rav\ScanFrm.exe
--
文件结束 - 6143 字节
用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) ; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)
