电脑总是每隔3-5分钟弹出窗口，说出错。检查发现C:\Documents and Settings\All Users\Application Data多了“ThePeakSoapSettings”文件夹，里面有一个执行文件，总是要修改ie的搜索项。进入安全模式delete这个文件夹后好了。但重新上网后，又出现了。
怎么办呢》是什么问题？谢谢。。

建议您下载并使用HijackThis1.99.1

HijackThis下载地址请参考：
【必读】本版说明及常用小软件下载
http://forum.ikaka.com/topic.asp?board=67&artid=5188931

HijackThis的使用方法-----请参考--瑞星HijackThis专题
http://it.rising.com.cn/newSite/Channels/anti_virus/Antivirus_Faq/TopicExplorerPagePackage/hijackthis.htm

运行HijackThis，先点[扫描]或[Scan]按钮，扫描完成后，[扫描]或[Scan]按钮会变为[保存Log]或[Save Log]按钮，点击它，LOG将会在记事本中显示，再从记事本里复制/粘贴到贴子里。
如果LOG比较长，一贴发不完，你可以分成几个部分发在回贴里。

【回复“飞跃迷离”的帖子】
Logfile of HijackThis v1.99.1
Scan saved at 圣西罗之虎 18:54:51, on 2005-11-05
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\系统软件\rising\Rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
D:\网络软件\msn plus\MsgPlus.exe
C:\Program Files\msnshell\msnshell.exe
D:\系统软件\RISING\RAV\RAVTIMER.EXE
C:\WINDOWS\vsnpstd3.exe
D:\系统软件\RISING\RAV\RAVMON.EXE
D:\系统软件\rising\Rfw\rfwmain.exe
C:\WINDOWS\System32\ctfmon.exe
c:\progra~1\intern~1\iexplore.exe
D:\系统软件\Webshots\webshots.scr
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\crypserv.exe
D:\系统软件\RISING\RAV\CCENTER.EXE
C:\program files\internet explorer\iexplore.exe
D:\系统软件\RISING\RAV\Ravmond.exe
C:\WINDOWS\System32\svchost.exe
D:\系统软件\RISING\RAV\RavStub.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
D:\网络软件\Maxthon\Maxthon.exe
C:\Program Files\JJOL\IME\JJSvr.EXE
C:\Program Files\Common Files\Symantec Shared\SymSetup\{3BD0196C-6553-460c-A0C4-90D8AE5D60D2}.exe
C:\WINDOWS\System32\msiexec.exe
C:\WINDOWS\NOTEPAD.EXE
C:\Documents and Settings\Bluewater\桌面\248783200522382732\HijackThis.exe
C:\WINDOWS\System32\MsiExec.exe
C:\WINDOWS\System32\MsiExec.exe

R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: 卡卡安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\System32\KakaTool.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [MessengerPlus3] "D:\网络软件\msn plus\MsgPlus.exe"
O4 - HKLM\..\Run: [MSNShell] C:\Program Files\msnshell\msnshell.exe autorun
O4 - HKLM\..\Run: [RavTimer] D:\系统软件\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [RavMon] D:\系统软件\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RfwMain] D:\系统软件\rising\Rfw\rfwmain.exe
O4 - HKLM\..\Run: [Soapsettingslinkweb] C:\Documents and Settings\All Users\Application Data\ThePeakSoapSettings\amen poke.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [lockshope] C:\DOCUME~1\BLUEWA~1\APPLIC~1\TRAYLO~1\love tick.exe
O4 - HKCU\..\Run: [Soapsettingslinkweb] C:\Documents and Settings\All Users\Application Data\ThePeakSoapSettings\DashPoll.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Webshots.lnk = ?
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8819C261-5B61-4628-908C-9BE795EABEC3} (IE Class) - http://www.95599.sh.cn/download/cert/ABC.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BC207F7D-3E63-4ACA-99B5-FB5F8428200C} - http://bar.baidu.com/update/IESearch.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{81CBFBF7-52BA-4DE9-B472-50C101C6C51C}: NameServer = 202.96.209.6 202.96.209.133
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe
O23 - Service: Logical System Manage (llsserver) - Unknown owner - C:\Program Files\Common Files\llserv.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - (no file)
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - (no file)
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - D:\系统软件\rising\Rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - D:\系统软件\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\系统软件\RISING\RAV\Ravmond.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

重新启动到安全模式（进入安全模式的方法:重新启动电脑, 开机自动检测完后, 按[F8]键(可以一直按到启动菜单出来为止), 选择安全模式(Safe Mode)进入Windows。）

请关闭所有IE界面，重新使用HijackThis扫描一次，选中下面建议修复的项目，让HijackThis修复，修复前请允许HijackThis保留备份。（如果楼主知道是安全的可以不必勾选）
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [Soapsettingslinkweb] C:\Documents and Settings\All Users\Application Data\ThePeakSoapSettings\amen poke.exe
O4 - HKCU\..\Run: [lockshope] C:\DOCUME~1\BLUEWA~1\APPLIC~1\TRAYLO~1\love tick.exe
O4 - HKCU\..\Run: [Soapsettingslinkweb] C:\Documents and Settings\All Users\Application Data\ThePeakSoapSettings\DashPoll.exe

删除目录C:\Documents and Settings\All Users\Application Data\ThePeakSoapSettings

多谢，已经照医嘱执行了