瑞星卡卡安全论坛

打开ie 防火墙发现病毒：Script.JS.Spywad.b  在临时文件夹里，被删除！不过没用
同时又发现了网页有这个病毒在F:\Program Files\Internet Explorer\iexplore.exe"且删不掉
用HijackThis扫描 发现O19 - User stylesheet: F:\WINNT\windows.dat（2k大） 安全模式下用killbox删掉了。重新启动后windows.dat程序又出现了
我的浏览器还是被劫持！
请问怎么办？各位大虾救命！！
附扫描日至：
Logfile of HijackThis v1.99.1
Scan saved at 11:11:38, on 2005-7-31
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
F:\WINNT\System32\smss.exe
F:\WINNT\system32\winlogon.exe
F:\WINNT\system32\services.exe
F:\WINNT\system32\lsass.exe
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\PROGRAM FILES\RISING\RAV\RavStub.exe
c:\program files\rising\rising\rfw\rfwsrv.exe
F:\WINNT\system32\svchost.exe
F:\WINNT\system32\spoolsv.exe
F:\WINNT\system32\svchost.exe
F:\WINNT\system32\MSTask.exe
F:\WINNT\system32\stisvc.exe
F:\WINNT\System32\WBEM\WinMgmt.exe
F:\WINNT\system32\svchost.exe
F:\WINNT\Explorer.EXE
c:\program files\rising\rising\rfw\RfwMain.exe
C:\Program Files\Rising\Rav\RavMon.exe
F:\WINNT\system32\ctfmon.exe
F:\WINNT\system32\NOTEPAD.EXE
C:\Program Files\新建文件夹\HijackThis.exe

O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\迅

雷\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program

Files\迅雷\getAllurl.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program

Files\腾迅qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\腾迅

qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program

Files\腾迅qq\SendMMS.htm
O8 - Extra context menu item: 豪杰超级解霸V8实时播放 - C:\Program

Files\MPURLGET.HTM
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} -

C:\Program Files\腾迅qq\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ -

{c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\腾迅

qq\QQ.EXE
O9 - Extra button: (no name) -

{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\腾迅

qq\QQIEHelper.dll (file missing)
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 -

{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\腾迅

qq\QQIEHelper.dll (file missing)
O19 - User stylesheet: F:\WINNT\windows.dat
O23 - Service: Ati HotKey Poller - Unknown owner -

F:\WINNT\system32\Ati2evxx.exe (file missing)
O23 - Service: Logical Disk Manager Administrative Service

(dmadmin) - VERITAS Software Corp. - F:\WINNT\System32\dmadmin.exe
O23 - Service: Rising Personal Firewall Service (RfwService) -

Beijing Rising Technology Corporation Limited - c:\program

files\rising\rising\rfw\rfwsrv.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising

Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe