瑞星卡卡安全论坛

请各位帮忙看一下我用瑞星听诊器查出的一个概率为百分之七十的疑似木马，文件名为（IEXPLORES.EXE）。这个文件用瑞星杀不掉，也搜索不到在那里。坛里几位高人让我扫一个日志上来，现把日志贴上，请坛内高人帮忙看看，指导我该怎么办，我这里先谢谢了。日志附后：

Logfile of HijackThis v1.99.1
Scan saved at 8:17:39, on 2006-4-11
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\WINDOWS\System32\nvsvc32.exe
D:\Program Files\rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\!SUNV\GraspWord\SysHotKey.exe
D:\Program Files\!Sunv\DFKC2003\SmartA.exe
D:\Program Files\Kingsoft\kingplayer2003\cdsprite.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\PROGRA~1\!Sunv\DFKC2003\SmartDF.exe
D:\Program Files\rising\Rav\RavTask.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\MSMSGS.EXE
D:\Program Files\rising\Rav\Ravmon.exe
D:\Program Files\WinRAR\WinRAR.exe
D:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.468\HijackThis.exe

O2 - BHO: (no name) - {3D898C55-74CC-4B7C-B5F1-45913F368388} - (no file)
O3 - Toolbar: 东方快车 - {3EA85E14-887D-4E2F-91E2-3158CE58ED62} - D:\Program Files\!Sunv\DFKC2003\IEBand.DLL
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [驱动自动安装] D:\pauto.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MS-4011 Memory Patch] I:\常用软件（1）\瑞星\RavSasser.exe -Patch
O4 - HKLM\..\Run: [SysHotKey_DFDD] C:\Program Files\Common Files\!SUNV\GraspWord\SysHotKey.exe
O4 - HKLM\..\Run: [DFKCSmartAssistant] D:\Program Files\!Sunv\DFKC2003\SmartA.exe
O4 - HKLM\..\Run: [MsWinb] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX01.907\MsWinb.exe
O4 - HKLM\..\Run: [kpcdst] D:\Program Files\Kingsoft\kingplayer2003\cdsprite.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ISUSPM Startup] c:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [Cmpnt] C:\WINDOWS\system\ntdllf.exe
O4 - HKLM\..\Run: [RavTask] "D:\Program Files\rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\RunServices: [Shell] c:\windows\system\mainsv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MsWinb] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX01.907\MsWinb.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [Ntcheck] C:\WINDOWS\mapserver.exe
O4 - HKCU\..\Run: [NBJ] "D:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check(2).lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: 东方快车-保存翻译后的网页 - D:\Program Files\!Sunv\DFKC2003\ExtSave.htm
O9 - Extra button: 东方快车 - {0B66EBA4-5F53-40e4-B17B-A0E9BC1E8D50} - D:\Program Files\!Sunv\DFKC2003\IEBand.DLL
O9 - Extra button: 联想 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.lenovo.com (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: 东方大典 - {d7489fa7-4f38-da83-e876-ad56f2e8d761} - D:\PROGRA~1\!Sunv\EasyDict\PlugInIE.dll
O9 - Extra 'Tools' menuitem: &Easy Dict - {d7489fa7-4f38-da83-e876-ad56f2e8d761} - D:\PROGRA~1\!Sunv\EasyDict\PlugInIE.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Program Files\rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Program Files\rising\Rav\Ravmond.exe