我现在是用的  WINDOWS 2000 SEVER 版做的一个网站服务器，但是老是出现这样的问题，就是  弹出个小窗口，说系统要在几分钟内关机，然后窗口就消失，有时候不消失，也关不了，然后就是关机了~！！  我查看的系统的日志，看到了这个问题：
事件 ID ( 0 )的描述(在资源( SaService )中)无法找到。本地计算机可能没有必要的注册信息或消息 DLL 文件来从远端计算机显示消息。部分事件包含了下列信息: SaService error: 0, Fail to start engine, please check your configuration..
还有这样的警告：
由于 Active Directory 尚未通过 QoS ACS 管理控制台正确配置，这台主机不能成为 ACS。请通过 QoS ACS 管理控制台配置分网。

求助各位高手，帮忙解决这个问题吧~！！系统我都重做了N次了~~！！

用hijackthis1.99.1 扫描的结果是：
Logfile of HijackThis v1.99.1
Scan saved at 13:33:39, on 2006-3-23
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\Program Files\Rising\Rav\Ravmond.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Abel.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\llssrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\system32\inetsrv\inetinfo.exe
C:\WINNT\system32\msdtc.exe
C:\Program Files\Sygate\SON\sgserv.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
c:\program files\rising\rfw\RfwMain.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\Rising\Rav\Ravmon.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Sygate\son\sygate.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Vagaa\Vagaa.exe
C:\Program Files\Vagaa\VExplorer.exe
F:\TDdownload\ha_hijackthis_1991\HijackThis.exe

R3 - URLSearchHook: (no name) - {BB936323-19FA-4521-BA29-ECA6A121BC78} - (no file)
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINNT\system32\kakatool.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Program Files\Herosoft\Hero 9\STHSDVD.EXE
O9 - Extra 'Tools' menuitem: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Program Files\Herosoft\Hero 9\STHSDVD.EXE
O9 - Extra button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1142583976250
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D986397-E09D-4B27-B436-D95B4C03EA61}: NameServer = 202.102.192.68
O23 - Service: Abel - oxid.it - C:\WINNT\Abel.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - Service: SyGateService (SaService) - Sygate technologies Inc. - C:\Program Files\Sygate\SON\sgserv.exe

还有这个：

Process list saved on 13:34:07, on 2006-3-23
Platform: Windows 2000 SP4 (WinNT 5.00.2195)

[pid][full path to filename][file version][company name]
168C:\WINNT\System32\smss.exe5.0.2195.6601Microsoft Corporation
212C:\WINNT\system32\winlogon.exe5.0.2195.6997Microsoft Corporation
240C:\WINNT\system32\services.exe5.0.2195.7035Microsoft Corporation
260C:\WINNT\system32\lsass.exe5.0.2195.7011Microsoft Corporation
384C:\WINNT\system32\Ati2evxx.exe6.14.10.4110ATI Technologies Inc.
460c:\program files\rising\rfw\rfwsrv.exe4.0.0.30Beijing Rising Technology Co., Ltd.
472C:\WINNT\system32\svchost.exe5.0.2134.1Microsoft Corporation
508C:\Program Files\Rising\Rav\CCenter.exe18.0.0.3Beijing Rising Technology Co., Ltd.
524C:\Program Files\Rising\Rav\Ravmond.exe18.0.1.16Beijing Rising Technology Co., Ltd.
604C:\WINNT\system32\spoolsv.exe5.0.2195.7059Microsoft Corporation
636C:\WINNT\Abel.exe2.8.0.2oxid.it
668C:\WINNT\system32\svchost.exe5.0.2134.1Microsoft Corporation
704C:\WINNT\System32\llssrv.exe5.0.2195.7021Microsoft Corporation
740C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE7.0.9466.0Microsoft Corporation
824C:\WINNT\system32\regsvc.exe5.0.2195.6701Microsoft Corporation
856C:\WINNT\system32\MSTask.exe4.71.2195.6972Microsoft Corporation
876C:\WINNT\system32\stisvc.exe5.0.2195.6656Microsoft Corporation
944C:\WINNT\System32\svchost.exe5.0.2134.1Microsoft Corporation
984C:\Program Files\Rising\Rav\RavStub.exe18.0.0.12Beijing Rising Technology Co., Ltd.
1084C:\WINNT\System32\WBEM\WinMgmt.exe1.50.1085.100Microsoft Corporation
1168C:\WINNT\system32\svchost.exe5.0.2134.1Microsoft Corporation
1188C:\WINNT\system32\Dfssvc.exe5.0.2195.6664Microsoft Corporation
1220C:\WINNT\system32\inetsrv\inetinfo.exe5.0.2195.6620Microsoft Corporation
1248C:\WINNT\system32\msdtc.exe1999.9.3421.3Microsoft Corporation
1700C:\Program Files\Sygate\SON\sgserv.exe4.0.0.1Sygate technologies Inc.
1880C:\WINNT\system32\Ati2evxx.exe6.14.10.4110ATI Technologies Inc.
1920C:\WINNT\Explorer.EXE5.0.3700.6690Microsoft Corporation
1928c:\program files\rising\rfw\RfwMain.exe4.0.0.48Beijing Rising Technology Co., Ltd.
1620C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe6.14.10.5134ATI Technologies, Inc.
1792C:\Program Files\Common Files\Real\Update_OB\realsched.exe0.1.0.3510RealNetworks, Inc.
408C:\Program Files\Rising\Rav\RavTask.exe18.0.0.22Beijing Rising Technology Co., Ltd.
2040C:\Program Files\Rising\Rav\Ravmon.exe18.0.1.16Beijing Rising Technology Co., Ltd.
2076C:\WINNT\system32\internat.exe5.0.2920.0Microsoft Corporation
1752C:\Program Files\Sygate\son\sygate.exe4.5.851.1Sygate Technologies, Inc.
1764C:\Program Files\Internet Explorer\iexplore.exe6.0.2800.1106Microsoft Corporation
2200C:\Program Files\Vagaa\Vagaa.exe2.6.3.1Vagaa Development Team
2204C:\Program Files\Vagaa\VExplorer.exe2.6.2.8TODO: vagaa.com
1968F:\TDdownload\ha_hijackthis_1991\HijackThis.exe1.99.0.1Soeperman Enterprises Ltd.


上面说到的 SYGATE 经常 CPU占用率达到100%  就是Sgserv.exe 这个进程~~!!  请高手帮忙解决~！！

【回复“不言放弃”的帖子】
是的，那是 Sygate 的一个进程，我用的Sygate软件共享上网的~！！  Sgserv.exe 的CPU占用率经常达到100%，然后就要删了重新装一次就好了，但是这也不是个好办法啊~！！

还有我在1楼提的到问题，弹出窗口说离关机还有。。。时间，然后就消失，有时候还会来次真的~！！
我这个机子是做的一个电影网站的服务器，怎么解决呢？

【回复“不言放弃”的帖子】
这个我不太懂，就是突然弹出个小窗口，说是 系统管理员要关机，还有什么的不清楚，我就是系统管理员啊，怎么会出这样的问题~？？

晕了，刚才提示出了这个病毒 Trojan.Proxy.WinEggDrop.a

还有 防火墙侦测到本机程序正在创建 TCP 协议地址对象。详细信息如下：
程序名称：
ck5.exe
文件路径： C:\WINNT\system32\ck5.exe
CmdLine=C:\WINNT\system32\ck5.exe 
访问地址：0.0.0.0：1080[SOCKS代理]
这个又是什么东西？