各位老大，高手，请帮帮小弟，小弟的机子可能中了几个病毒了，现在搞到杀毒软件时不时会自动升级，本来都升了级的，不久又会自动升级。还有哪个BaiDu，我在注册表里也删不了，一删它就会动不了，自动死机。我见不对头，就把以前备份的注册表导了进去，结果有些项更新不了，哪个BaiDu还在，一去删它，问题又同样出来了！接着我用HijackThis V1.98.2汉化版去扫描它，然后把它删了，但接着扫，它又还在，这个是BaiDu这个病毒的问题。还有一个是我用HijackThis去扫描发现原来我的机子被“域劫持”了，我该怎么办，各位老大大侠，救命啊，小弟的扫描Logo如下：
正在运行的进程:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Panda Software\熊猫卫士钛金版2004\APVXDWIN.EXE
D:\WINDOWS\System32\ctfmon.exe
D:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
D:\Program Files\Panda Software\熊猫卫士钛金版2004\PsImSvc.exe
D:\WINDOWS\System32\wdfmgr.exe
D:\Program Files\Panda Software\熊猫卫士钛金版2004\WebProxy.exe
D:\WINDOWS\system32\NOTEPAD.EXE
D:\Program Files\VnetClient1.6\VnetClient.exe
D:\Program Files\Internet Explorer\iexplore.exe
F:\应用程序\HijachThis V1.98.2汉化版\HijackThis V1.98.2汉化版.exe
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - D:\PROGRA~1\baidu\bar\baidubar.dll (file missing)
O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - D:\PROGRA~1\baidu\bar\baidubar.dll (file missing)
O4 - HKLM\..\Run: [APVXDWIN] "D:\Program Files\Panda Software\熊猫卫士钛金版2004\APVXDWIN.EXE" /s
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\System32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O10 - Broken Internet access because of LSP provider 'd:\program files\panda software\
O16 - DPF: {371B29D9-4563-4E7F-B93D-F85ED5682ABC} (CoRaise Player
Object) - http://202.104.212.55/tsplay/tsplay.cab
O16 - DPF: {59CCB4A0-727D-11CF-AC36-00AA00A47DD2} (Timer
Object) - http://www.xintv.com/download/ietimer.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3A5220D4-E0CA-4A7C-810F-455C11C140B3}: NameServer = 202.96.128.86 202.96.128.166
噢，我忘了说明一下，第06项是小弟自己用哪个系统维护大师将哪个Intnet选项锁上了的，还有那两个016是上网站看电影的播放器来的，还有一点就是我一删了第010那项这扫描Logo就会变成如下了，很烦，请看：
正在运行的进程:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Panda Software\熊猫卫士钛金版2004\APVXDWIN.EXE
D:\WINDOWS\System32\ctfmon.exe
D:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
D:\Program Files\Panda Software\熊猫卫士钛金版2004\PsImSvc.exe
D:\WINDOWS\System32\wdfmgr.exe
D:\Program Files\Panda Software\熊猫卫士钛金版2004\WebProxy.exe
D:\WINDOWS\system32\NOTEPAD.EXE
D:\Program Files\VnetClient1.6\VnetClient.exe
D:\Program Files\Internet Explorer\iexplore.exe
F:\应用程序\HijachThis V1.98.2汉化版\HijackThis V1.98.2汉化版.exe
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - D:\PROGRA~1\baidu\bar\baidubar.dll (file missing)
O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - D:\PROGRA~1\baidu\bar\baidubar.dll (file missing)
O4 - HKLM\..\Run: [APVXDWIN] "D:\Program Files\Panda Software\熊猫卫士钛金版2004\APVXDWIN.EXE" /s
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\System32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O10 - Broken Internet access because of LSP provider 'd:\program files\panda software\
O16 - DPF: {371B29D9-4563-4E7F-B93D-F85ED5682ABC} (CoRaise Player
Object) - http://202.104.212.55/tsplay/tsplay.cab
O18 - Protocol: ipp - (no CLSID) - (no file)
O18 - Protocol: msdaipp - (no CLSID) - (no file)
谢谢老大，我刚火速去你们推荐的地方看了看，又赶紧下载了那里推荐的最新版本的HijackThis，现在的最新扫描如下：
HijackThis_815汉化版扫描日志 V1.99.1
保存于 23:04:49, 日期 2005-11-13
操作系统： Windows XP (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP1 (6.00.2600.0000)
当前运行的进程：
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Panda Software\熊猫卫士钛金版2004\APVXDWIN.EXE
D:\WINDOWS\System32\ctfmon.exe
D:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
D:\Program Files\Panda Software\熊猫卫士钛金版2004\PsImSvc.exe
D:\WINDOWS\System32\wdfmgr.exe
D:\Program Files\Panda Software\熊猫卫士钛金版2004\WebProxy.exe
D:\WINDOWS\system32\NOTEPAD.EXE
D:\Program Files\VnetClient1.6\VnetClient.exe
F:\应用程序\HijachThis V1.99.2汉化版\HijackThis1991zww.exe
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - D:\PROGRA~1\baidu\bar\baidubar.dll (file missing)
O3 - IE工具栏增项: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - D:\PROGRA~1\baidu\bar\baidubar.dll (file missing)
O4 - 启动项HKLM\\Run: [APVXDWIN] "D:\Program Files\Panda Software\熊猫卫士钛金版2004\APVXDWIN.EXE" /s
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\System32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O10 - Broken Internet access because of LSP provider 'd:\program files\panda software\
O16 - DPF: {371B29D9-4563-4E7F-B93D-F85ED5682ABC} (CoRaise Player
Object) - http://202.104.212.55/tsplay/tsplay.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3A5220D4-E0CA-4A7C-810F-455C11C140B3}: NameServer = 202.96.128.86 202.96.128.166
O23 - NT 服务: Gray_Pigeon_Server (GrayPigeonServer) - Unknown owner - D:\WINDOWS\G_Server.exe
O23 - NT 服务: Panda Process Protection Service (PavPrSrv) - Panda Software - D:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - NT 服务: Panda anti-virus service (PAVSRV) - Panda Software - D:\Program Files\Panda Software\熊猫卫士钛金版2004\pavsrv51.exe
O23 - NT 服务: Panda IManager Service (PSIMSVC) - Panda Software Internacional - D:\Program Files\Panda Software\熊猫卫士钛金版2004\PsImSvc.exe
请救救小弟，Please！！！
