最近恶意弹出广告一直困扰着我，十分讨厌，我已经在hosts中屏蔽了一些，但是还是有2个无法屏蔽，现在我用HijackThis扫描系统请高手帮忙解决，先谢了！
HijackThis@Qoo的扫描日志  V1.97.7
Scan saved at 12:59:51, on 2005-12-31
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HeroV8\SYSEXPLR.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CursorXP\CursorXP.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\BitSpirit\BitSpirit.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\li\桌面\hijackthis1.97_qoo\HijackThis.exe

O2 - BHO: std software - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O2 - BHO: (no name) - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\system32\microapmddt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [SysExplr] C:\Program Files\HeroV8\SYSEXPLR.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DAEMON Tools-2052] "C:\Program Files\D-Tools\daemon.exe"  -lang 2052
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CursorXP] C:\Program Files\CursorXP\CursorXP.exe
O4 - Startup: NTUSER.DAT
O4 - Startup: NTUSER.DAT.LOG
O4 - Startup: ntuser.ini
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item:  >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\MMSASS~1.DLL/mms.htm
O8 - Extra context menu item: Save豪杰超级解霸V8实时播放 - C:\Program Files\HeroV8\MPURLGET.HTM
O8 - Extra context menu item: 使用网际快车下载 - C:\Documents and Settings\li\
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Documents and Settings\li\
O8 - Extra context menu item: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm
O8 - Extra context menu item: 豪杰超级解霸V8实时播放 - C:\Program Files\HeroV8\MPURLGET.HTM
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O17 - HKLM\System\CCS\Services\Tcpip\..\{3CB31BF4-D0C0-4300-B290-AB36781A92A0}: NameServer = 202.98.96.68 202.97.7.17

【回复“yuren78”的帖子】
用hijackthis修复这些:
O2 - BHO: std software - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O2 - BHO: (no name) - {B8CCDD47-38E4-4CD2-B7FA-3B4B690F74BD} - C:\WINDOWS\system32\microapmddt.dll
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: >> 彩信发送 << - res://C:\PROGRA~1\MMSASS~1\MMSASS~1.DLL/mms.htm

找到:
C:\WINDOWS\SYSTEM32\stdup.dll
C:\WINDOWS\system32\microapmddt.dll
C:\PROGRA~1\MMSASS~1\目录删除

找到:
C:\WINDOWS\SYSTEM32\stdup.dll
C:\WINDOWS\system32\microapmddt.dll
C:\PROGRA~1\MMSASS~1\目录删除
找到后删除吗？

引用:

【yuren78的贴子】找到: C:\WINDOWS\SYSTEM32\stdup.dll C:\WINDOWS\system32\microapmddt.dll C:\PROGRA~1\MMSASS~1\目录删除 找到后删除吗？ ...........................

全部删除

删除不了stdup.dll请参考:http://forum.ikaka.com/topic.asp?board=67&artid=7423269