最近老出现一个弹出的页面为http://219.157.148.155/pop?.htm 的一个窗口，其中？是从１－４的字符，偶尔会一次弹出三个以上。一般为一个。瑞星杀毒无任何提示，木马清查也为发现问题，急求解。下面为卡卡助手日至扫描的情况，请高手给予解答。

现在这个弹出的ＩＰ换成了一个*****.3322.org 的域名了．．不定时的弹出．有时一中午也不见弹出．有时频繁弹出．．

网上说是ＩＳＰ搞鬼．偶也不知道啊．反正瑞星是查不出问题．

扫描日至

HijackThis_815汉化版扫描日志 V1.99.1
保存于      1:58:33, 日期 2006-3-15
操作系统：  Windows 2003  (WinNT 5.02.3790)
浏览器：    Internet Explorer v6.00 (6.00.3790.0000)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe
C:\WINDOWS\system32\Dfssvc.exe
C:\Program Files\racer-henan-cnc\racer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\racer-henan-cnc\RacerKp.exe
D:\Tencent\QQ.exe
D:\Tencent\TIMPlatform.exe
C:\ZRM2000\ZRW32.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HappyShow\mplayerc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\conime.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\工具相关\HijackThis1991汉化版\HijackThis1991zww.exe

O3 - IE工具栏增项: (no name) - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B}? - (no file)
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1139398536847
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (AxSubmitControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{704EAAF0-B3CE-411E-B9C7-DA88BA5A5888}: NameServer = 202.102.224.68,202.102.227.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{704EAAF0-B3CE-411E-B9C7-DA88BA5A5888}: NameServer = 202.102.224.68,202.102.227.68
O17 - HKLM\System\CS2\Services\Tcpip\..\{704EAAF0-B3CE-411E-B9C7-DA88BA5A5888}: NameServer = 202.102.224.68,202.102.227.68
O17 - HKLM\System\CS3\Services\Tcpip\..\{704EAAF0-B3CE-411E-B9C7-DA88BA5A5888}: NameServer = 202.102.224.68,202.102.227.68
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe