只要连上网，不做任何事情。从瑞星个人防火墙里面就会看到与
219.133.37.245:4619的连接，状态SYN_sent，进程程序同样是G:\Program Files\Internet Explorer\IEXPLORE.EXE（与浏览器相同），但是PID不同。
我想是中木马了，但是杀软查不出来，又下了一个冰刃查看，但是从该进程的模块信息中似乎没找到可疑文件。总之很诡异。
下面是扫描日志（我的系统盘符是G:）
Logfile of HijackThis v1.99.1
Scan saved at 15:41:31, on 2007-4-8
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\system32\svchost.exe
g:\program files\rising\rfw\rfwsrv.exe
G:\Program Files\Internet Explorer\IEXPLORE.EXE
G:\WINDOWS\Explorer.EXE
g:\program files\rising\rfw\RfwMain.exe
G:\WINDOWS\system32\ctfmon.exe
G:\Program Files\Internet Explorer\IEXPLORE.EXE
G:\WINDOWS\system32\osk.exe
G:\WINDOWS\system32\MSSWCHX.EXE
g:\program files\rising\rfw\RfwCfg.exe
G:\WINDOWS\system32\NOTEPAD.EXE
G:\Documents and Settings\Administrator\桌面\hijackthis\HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - G:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - G:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - G:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - G:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - G:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - G:\Program Files\Tencent\QQ\QQ.EXE
O16 - DPF: {1DABF8D5-8430-4985-9B7F-A30E53D709B3} (InstallHelper Class) - http://cache.tv.qq.com/qqlive_ocx/QQLiveInstaller.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{99F281F9-0255-492B-82D9-1F96ACAA2B82}: NameServer = 202.103.44.150 202.103.24.68
O18 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - G:\PROGRA~1\KuGoo3\InExtend\KUGOO3~1.OCX
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - G:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O23 - Service: - Unknown owner - G:\WINDOWS\svhost.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - G:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - g:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - g:\program files\rising\rfw\rfwsrv.exe
