好像还有弹出广告网页，这是日志，帮我看看：
2006-07-24,07:13:30
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows 2000 Professional Service Pack 4 (Build 2195)
- Administrative User - Completed Functions Allowed
Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Boot Items
Registry
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Synchronization Manager><mobsync.exe /logon> [Microsoft Corporation]
<vptray><C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vptray.exe> [Symantec Corporation]
<ATIModeChange><Ati2mdxx.exe> [ATI Technologies, Inc.]
<EZEJMNAP><C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe> [Lenovo Group Limited]
<TPHOTKEY><C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe> []
<BMMGAG><RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor> [IBM Corp.]
<BMMLREF><C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE> []
<PRPCMonitor><PRPCUI.exe> [Intel Corporation]
<SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe> [Synaptics, Inc.]
<SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [Synaptics, Inc.]
<QCWLICON><C:\PROGRA~1\ThinkPad\CONNEC~1\QCWLIcon.exe> [IBM Corp.]
<CdnCtr><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINNT\system32\Userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
<WinlogonNotify: NavLogon><C:\WINNT\system32\NavLogon.dll> []
==================================
Startup Folders
[Acrobat Assistant]
<C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk><N>
==================================
Services
[Ati HotKey Poller / Ati HotKey Poller]
<C:\WINNT\system32\Ati2evxx.exe><N/A>
[Configuresoft ECM Remote Client / CSIRemoteC]
<C:\winnt\ECM4\Remote\CSIRemoteCSvc.exe><Configuresoft Inc.>
[Cisco Systems, Inc. VPN Service / CVPND]
<c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe><Cisco Systems, Inc.>
[DefWatch / DefWatch]
<C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe><Symantec Corporation>
[Logical Disk Manager Administrative Service / dmadmin]
<C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[EvtEng / EvtEng]
<C:\Program Files\Intel\Wireless\Bin\EvtEng.exe><Intel Corporation>
[ThinkPad PM Service / IBMPMSVC]
<C:\WINNT\system32\ibmpmsvc.exe><N/A>
[Intel File Transfer / Intel File Transfer]
<C:\WINNT\system32\cba\xfr.exe><Intel? Corporation>
[Intel PDS / Intel PDS]
<C:\WINNT\system32\cba\pds.exe><Intel? Corporation>
[iPassConnectEngine / iPassConnectEngine]
<C:\Program Files\iPass\iPassConnect\iPassConnectEngine.exe><iPass>
[iPCAgent / iPCAgent]
<C:\Program Files\iPass\iPassConnect\iPCAgent.exe><iPass, Inc.>
[Symantec AntiVirus Client / Norton AntiVirus Server]
<C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe><Symantec Corporation>
[QCONSVC / QCONSVC]
<System32\QCONSVC.EXE><IBM Corp.>
[RegSrvc / RegSrvc]
<C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe><Intel Corporation>
[Spectrum24 Event Monitor / S24EventMonitor]
<C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe><Intel Corporation>
[WLTRYSVC / WLTRYSVC]
<C:\WINNT\System32\wltrysvc.exe C:\WINNT\System32\bcmwltry.exe><N/A>
==================================
Browser Add-ons
[Google Toolbar Helper]
{AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINNT\system32\kakatool.dll, Beijing Rising Technology Co., Ltd.>
[&Google]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar2.dll, Google Inc.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Google 搜索(&G)]
<res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html, N/A>
[上传到QQ网络硬盘]
<C:\Pf20040930\Personal\it\Tencent\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
<C:\Pf20040930\Personal\it\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<C:\Pf20040930\Personal\it\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<C:\Pf20040930\Personal\it\Tencent\QQ\SendMMS.htm, N/A>
==================================
Running Processes
[PID: 220][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 244][\??\C:\WINNT\system32\csrss.exe] <Microsoft Corporation><5.00.2195.6601>
[PID: 240][\??\C:\WINNT\system32\winlogon.exe] <Microsoft Corporation><5.00.2195.6997>
[C:\WINNT\system32\NavLogon.dll] <N/A><N/A>
[PID: 292][C:\WINNT\system32\services.exe] <Microsoft Corporation><5.00.2195.7035>
[C:\WINNT\system32\dmserver.dll] <VERITAS Software Corp.><2195.6605.297.3>
[PID: 304][C:\WINNT\system32\lsass.exe] <Microsoft Corporation><5.00.2195.7011>
[PID: 420][C:\WINNT\system32\ibmpmsvc.exe] <N/A><N/A>
[PID: 472][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 496][C:\Program Files\Intel\Wireless\Bin\EvtEng.exe] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 83>
[PID: 528][C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe] <Intel Corporation ><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL] <Intel Corporation><9, 0, 1, 83>
[C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll] <Intel Corporation><9, 0, 1, 83>
[PID: 564][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 664][C:\WINNT\system32\spoolsv.exe] <Microsoft Corporation><5.00.2195.7059>
[C:\WINNT\system32\pdfports.dll] <Adobe Systems Incorporated.><5.0.000>
[C:\Program Files\Adobe\Acrobat 5.0\Distillr\adistres.dll] <N/A><N/A>
[PID: 724][c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe] <Cisco Systems, Inc.><4.0 (Rel)>
[C:\WINNT\system32\vsdata.dll] <Zone Labs Inc.><3.7.078.001>
[PID: 760][C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe] <Symantec Corporation><8.00.01.425>
[PID: 796][C:\WINNT\system32\cba\pds.exe] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[C:\WINNT\system32\CSL.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\CSSM32s.dll] <Intel Corporation><1, 1, 2, 3>
[PID: 852][C:\Program Files\iPass\iPassConnect\iPCAgent.exe] <iPass, Inc.><3, 35, 0, 0>
[PID: 896][C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe] <Symantec Corporation><8.00.01.425>
[C:\WINNT\system32\CBA.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\MsgSys.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\NTS.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\PDS.DLL] <Intel? Corporation><6.12.0.103 E>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVLU.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\i2ldvp3.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAPI32.DLL] <Symantec Corp.><4.1.0.22>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060719.024\NAVEX32a.DLL] <Symantec Corporation><20061.1.0.14>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060719.024\NAVENG32.DLL] <Symantec Corporation><20061.1.0.14>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NAVAP32.DLL] <Symantec Corporation><9.0.0.15>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\NotesExt.dll] <Symantec Corporation><8.00.01.425>
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\vpmsece.dll] <Symantec Corporation><8.00.01.425>
[C:\WINNT\system32\amslib.dll] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[PID: 928][C:\WINNT\System32\QCONSVC.EXE] <IBM Corp.><3, 7, 1, 0>
[PID: 968][C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe] <Intel Corporation><9, 0, 1, 83>
[PID: 1028][C:\WINNT\system32\regsvc.exe] <Microsoft Corporation><5.00.2195.6701>
[PID: 1040][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6972>
[PID: 1104][C:\WINNT\system32\Suss.exe] <Microsoft Corporation><5.00.2195.2097>
[PID: 1048][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0100>
[PID: 1180][C:\WINNT\System32\wltrysvc.exe] <N/A><N/A>
[PID: 1200][C:\WINNT\System32\bcmwltry.exe] <Sony Ericsson Mobile Communications AB><3.31.19.0>
[PID: 1216][C:\WINNT\system32\cba\xfr.exe] <Intel? Corporation><6.12.0.103 E>
[C:\WINNT\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[C:\WINNT\system32\cbaxfr.dll] <Intel? Corporation><6.12.0.103 E>
