[IMGA]http://bbs.kingsoft.com/attachments/2004/08/18/0fmxvg==_qoH8Ipy10zvR.jpg[/IMGA]
HijackThis@Qoo的扫描日志   V1.97.7
Scan saved at 18:59:27, on 2004-8-18
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HEDY\KBS01\hotkey.exe
C:\Program Files\HEDY\REMOTE\Remote_2k.exe
C:\WINDOWS\system32\rundll32.exe
D:\NetSpeeder\NetSpeeder.exe
D:\金山毒霸\KAVSVC.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
D:\金山毒霸\KAVSvcUI.EXE
C:\PROGRA~1\HEDY\KBS01\hkload.exe
D:\金山毒霸\KAVPFW.EXE
C:\WINDOWS\System32\ctfmon.exe
D:\金山毒霸\KAVPlus.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MwIE\MwIE.exe
E:\QQ\QQ.exe
E:\QQ\TIMPlatform.exe
D:\HijackThis.exe

R3 - Default URLSearchHook is missing
O1 - Hosts: 207.46.156.156 www.microsoft.com #0
O1 - Hosts: 218.244.44.6 cns.3721,com #0
O1 - Hosts: 61.135.133.109 www.sohu.com #0
O1 - Hosts: 202.43.216.55 cn.yahoo.com #0
O1 - Hosts: 218.244.44.10 www.3721,com #0
O1 - Hosts: 202.102.158.188 www.e-tax.com.cn #0
O1 - Hosts: 202.106.168.121 www.163.com #0
O2 - BHO: (no name) - {9AFD91F9-6B03-4D22-A1E1-67D224CB7AB1} - d:\NetSpeeder\IEMate.dll
O3 - Toolbar: ????? - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: ????? - {A9BE2902-C447-420A-BB7F-A5DE921E6138} - D:\\

O3 - Toolbar: ????? - {1B0E7716-898E-48cc-9690-4E338E8DE1D3} - C:\PROGRA~1\3721\Assist\assist.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\FLASHGET\fgiebar.dll
O3 - Toolbar: Alexa - {3CEFF6CD-6F08-4E4D-BCCD-FF7415288C3B} - C:\WINDOWS\System32\SHDOCVW.DLL
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [jmekey] C:\Program Files\HEDY\KBS01\hotkey.exe
O4 - HKLM\..\Run: [HEDY_CONTROLLER] C:\Program Files\HEDY\REMOTE\Remote_2k.exe
O4 - HKLM\..\Run: [KAVRun] D:\\

O4 - HKLM\..\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - HKLM\..\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - HKLM\..\Run: [NetSpeeder] "d:\NetSpeeder\NetSpeeder.exe" hide
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Super Rabbit SRRestore] D:\MAGICSET\SRRest.exe /autosave
O4 - HKLM\..\Run: [iDuba Personal FireWall] D:\\

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [iDuba Personal FireWall] D:\\

O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O4 - Startup: ntuser.dat
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O11 - Options group: [!ANetSpeeder]  NetSpeeder
O11 - Options group: [!CNS]  
O14 - IERESET.INF: START_PAGE_URL=about:blank
O16 - DPF: {2D4851FD-0BFE-11D4-9260-9AF666D52059} (GameX Class) - http://211.93.80.143/game/system/activex/gamex.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/do ... 338C922/wmv9VCM.CAB
O16 - DPF: {69A72A8A-84ED-4A75-8CE7-263DBEF3E5D3} (BrowserProxy4 Class) - http://www.pop895.com/Alexa7.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsof ... CAB?38096.146400463
O16 - DPF: {C0C13879-6A17-429E-80F1-60B23FC1F720} (FcBoot Class) - http://211.93.80.143/game/system/activex/fcboot.cab
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/ssc ... ommon/bin/cabsa.cab
O16 - DPF: {C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} (Kingsoft DUBA OnlineScan) - http://online.kingsoft.com/antiscan/kavclean.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/p ... s/flash/swflash.cab
O16 - DPF: {DA984A6D-508E-11D6-AA49-0050FF3C628D} (Ravonline) - http://download.rising.com.cn/QQ/QQkill/rsonline.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4C0A0A21-FCC3-4D93-B849-A12FED22734A}: NameServer = 202.102.134.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{FFDAFCA5-2F03-4FC8-A4E0-68E64A218BD5}: NameServer = 202.102.154.3 202.102.152.3
[em06][em06][em06][em06][em06][em06]

谁帮我看看啊！

8懂，灭看出哪里出wt鸟~

昨天和朋友去钓了一天的鱼，开心~

开心就好````~!

不懂

有点深了

要不 重做个系统？

帮我看看附图的提示什么原因啊？好多东西装不了啊！

试试用你Windows下的  user.dat  和  system。dat这两个注册表文件恢复注册表试试！

你的贴图太差，不清晰。

具体什么步骤啊？

那你不会放大了看啊！现在论坛不允许上传附件了！