我打开 搜刮，和其他一些网页的时候就会转向www.7336.com.请问要怎么办才好。


谢谢你们了！！

请用最新版Hijackthis1.99.1扫描一个log贴上来。

hijackThis下载地址见置顶贴
[必读]本版说明及常用小软件下载
http://forum.ikaka.com/topic.asp?board=67&artid=5188931

运行HijackThis，先点[扫描系统并保存日志]或[Do a system scan and save a logfile]按钮，扫描完成后，LOG将会在自动弹出的记事本中显示，再从记事本里复制/粘贴到贴子里。如果LOG比较长，一贴发不完，你可以分成几个部分发在回贴里。

谢谢！我正在找Hijackthis1.99.1，一会再问你。

请问这个软件怎么用。有什么要求吗。我软件已经下完。麻烦给我说下步骤行吗。

请按照魔法学徒斑竹的方法做，方便大家分析。

Logfile of HijackThis v1.99.1
Scan saved at 21:33:48, on 2005-7-18
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\PROGRAM FILES\RISING\RAV\Ravmond.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
C:\WINNT\system32\internat.exe
C:\WINNT\system32\conime.exe
C:\WINNT\system32\wuauclt.exe
E:\软件\Hijackthis1.99.1\HijackThis.exe

O1 - Hosts: 218.5.76.54 www.hung-ya.com
O1 - Hosts: 218.5.76.54 hung-ya.com
O1 - Hosts: 218.5.76.54 www.hung-ya.com
O1 - Hosts: 218.5.76.54 hung-ya.com
O1 - Hosts: 218.5.76.54 www.bbs.hungya.com
O1 - Hosts: 218.5.76.54 bbs.hungya.com
O1 - Hosts: 218.5.76.54 www.popoq.com
O1 - Hosts: 218.5.76.54 popoq.com
O1 - Hosts: 218.5.76.54 www.jokescn.com
O1 - Hosts: 218.5.76.54 jokescn.com
O1 - Hosts: 218.5.76.54 www.xdvod.com
O1 - Hosts: 218.5.76.54 xdvod.com
O1 - Hosts: 218.5.76.54 www.qq38.com
O1 - Hosts: 218.5.76.54 qq38.com
O1 - Hosts: 218.5.76.54 www.qq38.com
O1 - Hosts: 218.5.76.54 qq38.com
O1 - Hosts: 218.5.76.54 www.5929.com
O1 - Hosts: 218.5.76.54 5929.com
O1 - Hosts: 218.5.76.54 www.xunlei.com
O1 - Hosts: 218.5.76.54 xunlei.com
O1 - Hosts: 218.5.76.54 www.verycd.com
O1 - Hosts: 218.5.76.54 verycd.com
O1 - Hosts: 218.5.76.54 www.zhao118.com
O1 - Hosts: 218.5.76.54 zhao118.com
O1 - Hosts: 218.5.76.54 www.zhao118.com
O1 - Hosts: 218.5.76.54 zhao118.com
O1 - Hosts: 218.5.76.54 www.61th.com
O1 - Hosts: 218.5.76.54 61th.com
O1 - Hosts: 218.5.76.54 www.15pp.com
O1 - Hosts: 218.5.76.54 15pp.com
O1 - Hosts: 218.5.76.54 www.vod99.com
O1 - Hosts: 218.5.76.54 vod99.com
O1 - Hosts: 218.5.76.54 www.xdvod.com
O1 - Hosts: 218.5.76.54 xdvod.com
O1 - Hosts: 218.5.76.54 www.5929.com
O1 - Hosts: 218.5.76.54 5929.com
O1 - Hosts: 218.5.76.54 www.verycd.com
O1 - Hosts: 218.5.76.54 verycd.com
O1 - Hosts: 218.5.76.54 www.haowz.com
O1 - Hosts: 218.5.76.54 haowz.com
O1 - Hosts: 218.5.76.54 www.15pp.com
O1 - Hosts: 218.5.76.54 15pp.com
O1 - Hosts: 218.5.76.54 www.61th.com
O1 - Hosts: 218.5.76.54 61th.com
O1 - Hosts: 218.5.76.54 www.wg101.com
O1 - Hosts: 218.5.76.54 wg101.com
O1 - Hosts: 218.5.76.54 www.k234.com
O1 - Hosts: 218.5.76.54 k234.com
O1 - Hosts: 218.5.76.54 www.hao358.com
O1 - Hosts: 218.5.76.54 hao358.com
O1 - Hosts: 218.5.76.54 www.hao358.com
O1 - Hosts: 218.5.76.54 hao358.com
O1 - Hosts: 218.5.76.54 www.mtvdy.com
O1 - Hosts: 218.5.76.54 mtvdy.com
O1 - Hosts: 218.5.76.54 www.20so.com
O1 - Hosts: 218.5.76.54 20so.com
O1 - Hosts: 218.5.76.54 www.dd1000.com
O1 - Hosts: 218.5.76.54 dd1000.com
O1 - Hosts: 218.5.76.54 www.v1000.com
O1 - Hosts: 218.5.76.54 v1000.com
O1 - Hosts: 218.5.76.54 www.huise.com
O1 - Hosts: 218.5.76.54 huise.com
O1 - Hosts: 218.5.76.54 www.916918.com
O1 - Hosts: 218.5.76.54 916918.com
O1 - Hosts: 218.5.76.54 www.ye263.com
O1 - Hosts: 218.5.76.54 ye263.com
O1 - Hosts: 218.5.76.54 www.c-cb.com
O1 - Hosts: 218.5.76.54 c-cb.com
O1 - Hosts: 218.5.76.54 www.zhao123.com
O1 - Hosts: 218.5.76.54 zhao123.com
O1 - Hosts: 218.5.76.54 www.51115.com
O1 - Hosts: 218.5.76.54 51115.com
O1 - Hosts: 218.5.76.54 www.4399.com
O1 - Hosts: 218.5.76.54 4399.com
O1 - Hosts: 218.5.76.54 www.chinagames.net
O1 - Hosts: 218.5.76.54 chinagames.net
O1 - Hosts: 218.5.76.54 www.skycn.com
O1 - Hosts: 218.5.76.54 skycn.com
O1 - Hosts: 218.5.76.54 www.tiexue.net
O1 - Hosts: 218.5.76.54 tiexue.net
O1 - Hosts: 218.5.76.54 www.qq163.com
O1 - Hosts: 218.5.76.54 qq163.com
O1 - Hosts: 218.5.76.54 www.tt67.com
O1 - Hosts: 218.5.76.54 tt67.com
O1 - Hosts: 218.5.76.54 www.chinamp3.com
O1 - Hosts: 218.5.76.54 chinamp3.com
O1 - Hosts: 218.5.76.54 www.pg168.com
O1 - Hosts: 218.5.76.54 pg168.com
O1 - Hosts: 218.5.76.54 www.yymp3.com
O1 - Hosts: 218.5.76.54 yymp3.com
O1 - Hosts: 218.5.76.54 www.yy138.com
O1 - Hosts: 218.5.76.54 yy138.com
O1 - Hosts: 218.5.76.54 www.dj99.com
O1 - Hosts: 218.5.76.54 dj99.com
O1 - Hosts: 218.5.76.54 www.sogua.com
O1 - Hosts: 218.5.76.54 sogua.com
O1 - Hosts: 218.5.76.54 www.snsn.net
O1 - Hosts: 218.5.76.54 snsn.net
O1 - Hosts: 218.5.76.54 www.flash8.net
O1 - Hosts: 218.5.76.54 flash8.net
O1 - Hosts: 218.5.76.54 www.mop.com
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FLASHGET\jccatch.dll
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\fgiebar.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [RavTimer] C:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - HKLM\..\Run: [RavMon] C:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKCU\..\Run: [internat.exe] internat.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O14 - IERESET.INF: SEARCH_PAGE_URL=
O14 - IERESET.INF: START_PAGE_URL=
O17 - HKLM\System\CCS\Services\Tcpip\..\{27FD8F52-DD5C-40B6-9B8D-B6C19405E62B}: NameServer = 61.233.154.33,61.233.154.34
O17 - HKLM\System\CS1\Services\Tcpip\..\{27FD8F52-DD5C-40B6-9B8D-B6C19405E62B}: NameServer = 61.233.154.33,61.233.154.34
O17 - HKLM\System\CS2\Services\Tcpip\..\{27FD8F52-DD5C-40B6-9B8D-B6C19405E62B}: NameServer = 61.233.154.33,61.233.154.34
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe

发完。可以了吗。就是关闭所有窗口运行就行了是吗。 不用社文件家隐藏什么之类的吧。我第一次来，看得有点乱，不对的地方从第一步告诉我行吗。
非常谢谢了。麻烦了！！

关闭所有ie窗口，运行Hijackthis，扫描结束后在下列选项前打上勾，然后选修复“Fix Checked”：

所有01项
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

要在安全模式下吗

不用