瑞星卡卡安全论坛

最近，，电脑开机后，里面总会连续播放一首不知名的英文歌曲。。
声音履盖了原本播放的音乐
听说，是世界杯期间流行的一种木马病毒。

找不到病毒文件放置在哪里。。

因为不敢随便改动注册表
就运行msconfig  系统配置实用程序，将服务和启动内的一些项设为禁用。
再启动瑞星杀毒。
。。
将拦截一些可疑插件。
在进程诊断时。。发现。
rundll32.exe 31k  木马 Microsoft Corporation 怀疑为恶意程序或病毒，请使用杀毒软件进行查杀。
rundll32.exe 31k  木马 Microsoft Corporation 怀疑为恶意程序或病毒，请使用杀毒软件进行查杀。
Rundll32.exe 31k  木马 Microsoft Corporation 怀疑为恶意程序或病毒，请使用杀毒软件进行查杀。
ScanBD.exe 376k  未知 Beijing Rising Technology Co., Ltd. 
sde.exe 32k  木马 北京兴华基业软件技术有限公司 一个Adware/Spyware软件，可能导致用户隐私泄漏。
spoolsv.exe 52k  未知 Microsoft Corporation
WinRAR.exe 804k  未知

不知道这些哪个是病毒。。

开机后。。一段时间消失了。。

但过一段时间。。又会出现。。。反复。。。。


请各位高手帮忙！谢谢~

为什么瑞星杀毒软件下载版的监控小伞总是红色的？

请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

2006-09-10,21:29:58

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <CnsMin><Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32>  [北京三七二一科技有限公司]
    <YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>  [ ]
    <yassistse><"C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe">  [Yahoo!]
    <Win32 USB2 Driver><rem svchosting.exe>  []
    <nwiz><rem nwiz.exe /install>  []
    <MyIMLite_UpDate><>  []
    <MyIMLite><>  []
    <ISC_UpDate><>  []
    <ISC><>  []
    <helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32>  []
    <conscorr><rem C:\WINDOWS\conscorr.exe>  []
    <avicap32><rem >  []
    <win comm><rem ; rem C:\Program Files\Win Comm\WinComm.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><C:\WINDOWS\DOWNLO~1\CnsHook.dll>  [北京三七二一科技有限公司]
    <{B29BAAE8-492E-45E6-A023-B13988B8A4FE}><C:\WINDOWS\System32\Latv.dll>  []
    <{FB147576-C6AA-4D71-A979-D82FD00115CB}><C:\WINDOWS\System32\Clfuei.dll>  []
    <{7BBA0B41-D44B-4B7A-A163-6CE9E5866649}><C:\WINDOWS\System32\Cutzbd.dll>  []
    <{625FEE8F-BA7E-4563-B6A4-DF7EEDA6FB64}><C:\WINDOWS\System32\Sqkie.dll>  []
    <{7E539959-B73A-40D8-A86F-3B722879FACE}><C:\WINDOWS\System32\Iboh.dll>  []
    <{49B6BF35-634B-4C1C-9D28-8CEB1CDB97AE}><C:\WINDOWS\System32\Ybeiqg.dll>  []
    <{C27B0217-67FE-4E0F-A3DF-797064E012E8}><C:\WINDOWS\System32\Ikob.dll>  []
    <{61274B68-22A4-49C9-9D32-821C05F60295}><C:\WINDOWS\System32\Glzitj.dll>  []
    <{A2D9856F-50F8-4263-8317-17ECAB0EBA73}><C:\WINDOWS\System32\Eqinfj.dll>  []
    <{7C6BAB05-57DD-4D74-BAB0-1978E0F78E09}><C:\WINDOWS\System32\Upddv.dll>  []
    <{27AFB67D-B5EE-4A39-9A5F-3951FFE4D74B}><C:\WINDOWS\System32\Lofpk.dll>  []
    <{61BE1357-F312-4E9D-9235-388A53B6B5A7}><C:\WINDOWS\System32\Scjv.dll>  []
    <{F02062C3-B719-411E-8D03-E096597F4342}><C:\WINDOWS\System32\Sniq.dll>  []
    <{005FFF2C-E421-4356-B422-D180F58957A7}><C:\WINDOWS\System32\Xzdi.dll>  []
    <{AE0D3AD5-ED0C-42AD-B961-8C27CA3A3CAF}><C:\WINDOWS\System32\Cnelmf.dll>  []
    <{BC3A9936-91B3-409A-A6B5-779F8E2AE30B}><C:\WINDOWS\System32\Uaestv.dll>  []
    <{214F8AF6-FD1B-4FB2-ABE9-7FDCFF2ED292}><C:\WINDOWS\System32\Dkrffi.dll>  []
    <{E7942332-1154-4248-8D1B-F9FB08A33CCB}><C:\WINDOWS\System32\Ksfyiw.dll>  []
    <{81AB04F9-9F5E-4B83-9B6F-E2120F1099D4}><C:\WINDOWS\System32\Hhfys.dll>  []
    <{A01418D9-4E06-40F5-B96C-7E0539E43D49}><C:\WINDOWS\System32\Qcqnkc.dll>  []
    <{A9067954-5699-4284-AF69-0BF27301612B}><C:\WINDOWS\System32\Wtrafs.dll>  []
    <{F577BA92-8F28-459A-AE38-4A94E7A1A563}><C:\WINDOWS\System32\Qjhwd.dll>  []
    <{75873D3B-0326-44D2-8E44-4BF30A6F6F30}><C:\WINDOWS\System32\Ywsav.dll>  []
    <_{32CD708B-60A7-4C00-9377-D73EAA495F0F}><Rising Execute File Exts hook>  []

==================================

==================================
启动文件夹
服务
[.Net Boot Service / .Net Boot Service]
  <C:\WINDOWS\System32\big5_gb2312.exe><N/A>
[Database information combine / DbooInfo]
  <C:\WINDOWS\dbmsinfo.exe><易易加速科技有限公司>
[Win32 USB2 Driver / Microsoft Config]
  <"C:\WINDOWS\System32\svchosting.exe" -netsvcs><N/A>
[NVIDIA Driver Helper Service / NVSvc]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Process Communication Center / RsCCenter]
  <"E:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"E:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[SDAgent Service / SDAgentService]
  <C:\Program Files\Common Files\smartde\sde.exe><北京兴华基业软件技术有限公司>

==================================
浏览器加载项
[]
  {005FFF2C-E421-4356-B422-D180F58957A7} <C:\WINDOWS\System32\Xzdi.dll, N/A>
[KAVIEHelper Class]
  {1B2F92A1-CDAF-4511-9382-91E3F5CE0880} <C:\PROGRA~1\KOS\KOSIEBar.dll, 金山软件股份有限公司>
[]
  {214F8AF6-FD1B-4FB2-ABE9-7FDCFF2ED292} <C:\WINDOWS\System32\Dkrffi.dll, N/A>
[]
  {27AFB67D-B5EE-4A39-9A5F-3951FFE4D74B} <C:\WINDOWS\System32\Lofpk.dll, N/A>
[IE Address Browser Helper]
  {2A0176FE-008B-4706-90F5-BBA532A49731} <C:\Program Files\SearchNet\SNHpr.dll, Beijing Zhongsou Online Software>
[Yahoo!Photo]
  {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll, Yahoo.>
[HrmQtgas Class]
  {39786EF2-DFD4-EF88-F449-56026C8EB446} <, N/A>
[CaiShowBH Class]
  {3AF40CB8-B3BA-4E2D-8968-4BF8DB172997} <C:\Program Files\CaiShow Tech\CaiShow\BrowerHelper.dll, TODO: <公司名>>
[IE Browser Helper]
  {3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\x4v8.dll, N/A>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[]
  {49B6BF35-634B-4C1C-9D28-8CEB1CDB97AE} <C:\WINDOWS\System32\Ybeiqg.dll, N/A>
[NetAccelerate Class]
  {5673A7C0-95CC-4646-BB07-3BD71234CEF9} <C:\WINDOWS\System32\MicrosoftNet.dll, N/A>
[Hssdtobj Class]
  {5D15CEAC-3B27-4863-AAEA-93A4C8A6C57D} <C:\WINDOWS\System32\hssdtobm.dll, 易易加速科技有限公司>
[]
  {61274B68-22A4-49C9-9D32-821C05F60295} <C:\WINDOWS\System32\Glzitj.dll, N/A>
[]
  {61BE1357-F312-4E9D-9235-388A53B6B5A7} <C:\WINDOWS\System32\Scjv.dll, N/A>
[]
  {625FEE8F-BA7E-4563-B6A4-DF7EEDA6FB64} <C:\WINDOWS\System32\Sqkie.dll, N/A>
[]
  {75873D3B-0326-44D2-8E44-4BF30A6F6F30} <C:\WINDOWS\System32\Ywsav.dll, N/A>
[BandIE Class]
  {77FEF28E-EB96-44FF-B511-3185DEA48697} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.>
[]
  {7BBA0B41-D44B-4B7A-A163-6CE9E5866649} <C:\WINDOWS\System32\Cutzbd.dll, N/A>
[]
  {7C6BAB05-57DD-4D74-BAB0-1978E0F78E09} <C:\WINDOWS\System32\Upddv.dll, N/A>
[]
  {7E539959-B73A-40D8-A86F-3B722879FACE} <C:\WINDOWS\System32\Iboh.dll, N/A>
[]
  {81AB04F9-9F5E-4B83-9B6F-E2120F1099D4} <C:\WINDOWS\System32\Hhfys.dll, N/A>
[]
  {A01418D9-4E06-40F5-B96C-7E0539E43D49} <C:\WINDOWS\System32\Qcqnkc.dll, N/A>
[]
  {A2D9856F-50F8-4263-8317-17ECAB0EBA73} <C:\WINDOWS\System32\Eqinfj.dll, N/A>
[]
  {A9067954-5699-4284-AF69-0BF27301612B} <C:\WINDOWS\System32\Wtrafs.dll, N/A>
[]
  {AE0D3AD5-ED0C-42AD-B961-8C27CA3A3CAF} <C:\WINDOWS\System32\Cnelmf.dll, N/A>
[]
  {B29BAAE8-492E-45E6-A023-B13988B8A4FE} <C:\WINDOWS\System32\Latv.dll, N/A>
[]
  {BC3A9936-91B3-409A-A6B5-779F8E2AE30B} <C:\WINDOWS\System32\Uaestv.dll, N/A>
[]
  {C27B0217-67FE-4E0F-A3DF-797064E012E8} <C:\WINDOWS\System32\Ikob.dll, N/A>
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司>
[SDObmObj Class]
  {D4D5C535-BA95-4327-870D-A33826FDD17A} <C:\WINDOWS\System32\obwbkya.dll, 北京兴华基业软件技术有限公司>
[]
  {E7942332-1154-4248-8D1B-F9FB08A33CCB} <C:\WINDOWS\System32\Ksfyiw.dll, N/A>
[]
  {F02062C3-B719-411E-8D03-E096597F4342} <C:\WINDOWS\System32\Sniq.dll, N/A>
[]
  {F577BA92-8F28-459A-AE38-4A94E7A1A563} <C:\WINDOWS\System32\Qjhwd.dll, N/A>
[]
  {FB147576-C6AA-4D71-A979-D82FD00115CB} <C:\WINDOWS\System32\Clfuei.dll, N/A>
[Yahoo 3.5G电邮]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail, N/A>
[寻宝乐趣多]
  {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao, N/A>
[雅虎助手]
  {5D73EE86-05F1-49ed-B850-E423120EC338} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\qq\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\qq\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[]
  {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair, N/A>
[]
  {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean, N/A>
[金山快译(&K)]
  {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <C:\PROGRA~1\Kingsoft\FASTAI~1\IEBand.dll, >
[百度超级搜霸]
  {B580CF65-E151-49C3-B73F-70B13FCA8E86} <C:\PROGRA~1\baidu\bar\baidubar.dll, Baidu.com, Inc.>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll, Yahoo!>
[完美网译通]
  {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} <C:\WINDOWS\WORLD2\TOOLBAR\hmtoolbar.dll, 北京完美时空有限公司>
[金山毒霸安全助手]
  {EF72500A-C234-46C4-BF0A-9AA6913DDF34} <C:\PROGRA~1\KOS\KOSIEBar.dll, 金山软件股份有限公司>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[金山毒霸在线产品升级]
  {52DF16E3-6C4F-4B22-8BAF-09263E463B48} <C:\PROGRA~1\KOS\KOSInit.ocx, 金山软件股份有限公司>
[CMCBooter Object]
  {53AF6E02-F18F-4228-AC13-3E79773FBE50} <C:\WINDOWS\System32\Booter.ocx, 北京高维视讯科技有限公司>
[上传到QQ网络硬盘]
  <C:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[添加到雅虎订阅(&Y)]
  <res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\qq\SendMMS.htm, N/A>
[雅虎搜索]
  <res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/246, N/A>

==================================

正在运行的进程
[PID: 600][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 660][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 684][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 728][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 740][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 896][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 996][E:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1024][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1184][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1240][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1260][E:\Program Files\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 29>
    [E:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [E:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1384][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\3721\alrex.dll]  <><1, 0, 0, 1>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 8>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 7, 1326>
    [C:\PROGRA~1\3721\alLiveEx.dll]  < ><1, 0, 3, 1006>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  <><2, 1, 4, 1044>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 1, 1007>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll]  <Yahoo! China><1, 1, 3, 1035>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 8, 1048>
    [C:\PROGRA~1\baidu\bar\baidubar.dll]  <Baidu.com, Inc.><2, 0, 2, 99>
    [C:\WINDOWS\System32\obwbkya.dll]  <北京兴华基业软件技术有限公司><1, 7, 0, 0>
[PID: 1576][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.1699 (xpsp2.050610-1533)>
[PID: 1856][C:\WINDOWS\System32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\WINDOWS\DOWNLO~1\CnsMinEx.dll]  <国风因特软件(北京)有限公司><1, 0, 3, 3>
[PID: 496][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 664][C:\WINDOWS\System32\nvsvc32.exe]  <NVIDIA Corporation><6.13.10.2832>
[PID: 1172][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1268][C:\WINDOWS\System32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: DNSRV(bld4act)>
[PID: 1540][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe]  < ><2, 0, 0, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  <><2, 1, 4, 1044>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 1, 1007>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Ynotifier.dll]  <><1, 0, 0, 5>
[PID: 1548][C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe]  <Yahoo!><1, 0, 1, 1001>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAssecblk.dll]  <Yahoo><1, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yMenuInfo.dll]  <Yahoo><1, 0, 0, 2>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yIEAngel.dll]  <Yahoo><1, 0, 1, 1001>
    [C:\PROGRA~1\Yahoo!\Assistant\shell\yAsMenu.dll]  <Yahoo><1, 0, 1, 1006>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
[PID: 1616][C:\WINDOWS\system32\rundll32.exe]  <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 7, 1326>
    [C:\PROGRA~1\3721\notifier.dll]  <><1, 0, 0, 4>
    [C:\PROGRA~1\3721\alLiveEx.dll]  < ><1, 0, 3, 1006>
    [C:\PROGRA~1\3721\regkper.dll]  <N/A><N/A>
[PID: 208][C:\WINDOWS\System32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 616][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\3721\scrblock.dll]  <3721><1, 0, 1, 1000>
    [C:\PROGRA~1\3721\alrex.dll]  <><1, 0, 0, 1>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yscrblock.dll]  <Yahoo><1, 0, 2, 1002>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\WINDOWS\DOWNLO~1\CnsHint.dll]  <3721><1, 0, 1, 0>
    [C:\PROGRA~1\3721\autolive.dll]  <><1, 1, 7, 1326>
    [C:\PROGRA~1\3721\alLiveEx.dll]  < ><1, 0, 3, 1006>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  <><2, 1, 4, 1044>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 1, 1007>
    [C:\WINDOWS\DOWNLO~1\cnsplus.dll]  <3721><1, 0, 0, 2>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll]  <Yahoo!><2, 1, 8, 1048>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yaswiper.dll]  <Yahoo><1, 0, 1, 1004>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasiesec.dll]  <Yahoo><1, 0, 2, 1003>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasnoad.dll]  <><1, 1, 4, 1006>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yzsNetProto.dll]  <Yahoo><1, 0, 0, 1>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll]  <Yahoo! China><1, 1, 3, 1035>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll]  <Yahoo! China><1, 0, 1, 1015>
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 8>
    [C:\PROGRA~1\baidu\bar\baidubar.dll]  <Baidu.com, Inc.><2, 0, 2, 99>
    [C:\PROGRA~1\KOS\KOSIEBar.dll]  <金山软件股份有限公司><2006, 2, 16, 1>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll]  <Yahoo.><1, 0, 2, 1002>
    [C:\Program Files\CaiShow Tech\CaiShow\BrowerHelper.dll]  <TODO: <公司名>><1.0.0.1>
    [C:\WINDOWS\System32\hssdtobm.dll]  <易易加速科技有限公司><1, 0, 0, 0>
    [C:\WINDOWS\System32\obwbkya.dll]  <北京兴华基业软件技术有限公司><1, 7, 0, 0>
    [D:\Program Files\Rising\Rav\RavScrCh.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [c:\progra~1\yahoo!\assist~1\assist\yadfil~1.dll]  < ><1, 0, 3, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrepair.dll]  <Yahoo><1, 0, 8, 1321>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasfsks.dll]  <3721.com><2, 1, 1, 87>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yoptimum.dll]  <Yahoo><1, 0, 1, 1001>
    [C:\PROGRA~1\yahoo!\assistant\Shell\yAssecblk.dll]  <Yahoo><1, 0, 2, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yXPStyle.dll]  <Yahoo><1, 0, 2, 1309>
    [C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx]  <Adobe Systems, Inc.><9,0,16,0>
    [C:\WINDOWS\System32\Macromed\Common\SwSupport.dll]  <Adobe Systems, Inc.><10.1.3r18>
[PID: 1780][C:\Program Files\Common Files\smartde\sde.exe]  <北京兴华基业软件技术有限公司><1, 7, 0, 0>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\WINDOWS\System32\smgykeb.dll]  <北京兴华基业软件技术有限公司><1, 7, 6, 0>
[PID: 972][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 1764][C:\DOCUME~1\wangrong\LOCALS~1\Temp\Rar$EX00.657\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
[PID: 124][D:\程序软件\upiea.exe]  <欧鹏><V2 Beta8>
    [C:\DOCUME~1\wangrong\LOCALS~1\Temp\E_4\krnln.fnr]  <><1, 0, 0, 1>
    [C:\PROGRA~1\3721\helper.dll]  <><1, 1, 0, 1325>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 7, 1024>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 3, 8>
    [C:\DOCUME~1\wangrong\LOCALS~1\Temp\E_4\iext.fnr]  <><1, 0, 0, 1>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

谢谢楼上~~

打开System Repair Engineer（也就是你的扫描日志软件SREng.exe），点“启动项目，服务，点“Win32服务应用程序”勾选“隐藏微软服务”选中病毒服务Net Boot Service ,Database information combine,Win32 USB2 Driver ,SDAgent Service，选择“删除服务”点“设置”选择“否”最后重启。（每一个逗号隔开的就是一个病毒的服务，请逐一删除）
重启动后删除
C:\Program Files\Common Files\smartde
C:\WINDOWS\System32\svchosting.exe
C:\WINDOWS\dbmsinfo.exe
C:\WINDOWS\System32\big5_gb2312.exe

为了更方便修复其余的项
请下载HijackThis.exe，扫描并保存报告帖上来。
http://forum.ikaka.com/topic.asp?board=67&artid=5188931

忘了按什么键粘帖桌面了
C:\Program Files\Common Files\smartde
删了一半，，就删除不掉了。
系统提示：删除文件或删除文件夹出错，
请确定磁盘未满或未被写保护，而且文件未被使。

C:\WINDOWS\System32\svchosting.exe
没有上面的文件，，只有一个类似的svchost，，不知道是不是。。没有删。

C:\WINDOWS\System32\big5_gb2312.exe

电脑里有SYSTEM下没有，只有一个big5 属性是NLS文件。。未知应用程序；另一个是gb2312.uce

只删除了C:\WINDOWS\dbmsinfo.exe！

另：
HijackThis.exe。。正在下。。

Logfile of HijackThis v1.99.1
Scan saved at 23:19:30, on 2006-9-10
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
E:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
E:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Rundll32.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\smartde\sde.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\软件\HijackThis.exe

R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
R3 - URLSearchHook: (no name) - {7BBA0B41-D44B-4B7A-A163-6CE9E5866649} - C:\WINDOWS\System32\Cutzbd.dll (file missing)
R3 - URLSearchHook: (no name) - {625FEE8F-BA7E-4563-B6A4-DF7EEDA6FB64} - C:\WINDOWS\System32\Sqkie.dll (file missing)
R3 - URLSearchHook: (no name) - {7E539959-B73A-40D8-A86F-3B722879FACE} - C:\WINDOWS\System32\Iboh.dll (file missing)
R3 - URLSearchHook: (no name) - {49B6BF35-634B-4C1C-9D28-8CEB1CDB97AE} - C:\WINDOWS\System32\Ybeiqg.dll (file missing)
R3 - URLSearchHook: (no name) - {C27B0217-67FE-4E0F-A3DF-797064E012E8} - C:\WINDOWS\System32\Ikob.dll (file missing)
R3 - URLSearchHook: (no name) - {61274B68-22A4-49C9-9D32-821C05F60295} - C:\WINDOWS\System32\Glzitj.dll (file missing)
R3 - URLSearchHook: (no name) - {A2D9856F-50F8-4263-8317-17ECAB0EBA73} - C:\WINDOWS\System32\Eqinfj.dll (file missing)
R3 - URLSearchHook: (no name) - {7C6BAB05-57DD-4D74-BAB0-1978E0F78E09} - C:\WINDOWS\System32\Upddv.dll (file missing)
R3 - URLSearchHook: (no name) - {27AFB67D-B5EE-4A39-9A5F-3951FFE4D74B} - C:\WINDOWS\System32\Lofpk.dll (file missing)
R3 - URLSearchHook: (no name) - {61BE1357-F312-4E9D-9235-388A53B6B5A7} - C:\WINDOWS\System32\Scjv.dll (file missing)
R3 - URLSearchHook: (no name) - {F02062C3-B719-411E-8D03-E096597F4342} - C:\WINDOWS\System32\Sniq.dll (file missing)
R3 - URLSearchHook: (no name) - {005FFF2C-E421-4356-B422-D180F58957A7} - C:\WINDOWS\System32\Xzdi.dll (file missing)
R3 - URLSearchHook: (no name) - {AE0D3AD5-ED0C-42AD-B961-8C27CA3A3CAF} - C:\WINDOWS\System32\Cnelmf.dll (file missing)
R3 - URLSearchHook: (no name) - {BC3A9936-91B3-409A-A6B5-779F8E2AE30B} - C:\WINDOWS\System32\Uaestv.dll (file missing)
R3 - URLSearchHook: (no name) - {214F8AF6-FD1B-4FB2-ABE9-7FDCFF2ED292} - C:\WINDOWS\System32\Dkrffi.dll (file missing)
R3 - URLSearchHook: (no name) - {E7942332-1154-4248-8D1B-F9FB08A33CCB} - C:\WINDOWS\System32\Ksfyiw.dll (file missing)
R3 - URLSearchHook: (no name) - {81AB04F9-9F5E-4B83-9B6F-E2120F1099D4} - C:\WINDOWS\System32\Hhfys.dll (file missing)
R3 - URLSearchHook: (no name) - {A01418D9-4E06-40F5-B96C-7E0539E43D49} - C:\WINDOWS\System32\Qcqnkc.dll (file missing)
R3 - URLSearchHook: (no name) - {A9067954-5699-4284-AF69-0BF27301612B} - C:\WINDOWS\System32\Wtrafs.dll (file missing)
R3 - URLSearchHook: (no name) - {F577BA92-8F28-459A-AE38-4A94E7A1A563} - C:\WINDOWS\System32\Qjhwd.dll (file missing)
R3 - URLSearchHook: (no name) - {75873D3B-0326-44D2-8E44-4BF30A6F6F30} - C:\WINDOWS\System32\Ywsav.dll (file missing)
O2 - BHO: (no name) - _{0005A87D-D626-4B3A-84F9-1D9571695F55} - (no file)
O2 - BHO: (no name) - _{1272F701-349D-4DB3-BBCD-10CBDCD049FE} - (no file)
O2 - BHO: YDragSearch - _{62EED7C6-9F02-42f9-B634-98E2899E147B} - (no file)
O2 - BHO: (no name) - {005FFF2C-E421-4356-B422-D180F58957A7} - C:\WINDOWS\System32\Xzdi.dll (file missing)
O2 - BHO: KOSIE HelperInternet Explorer Web Content Guard  - {1B2F92A1-CDAF-4511-9382-91E3F5CE0880} - C:\PROGRA~1\KOS\KOSIEBar.dll
O2 - BHO: (no name) - {214F8AF6-FD1B-4FB2-ABE9-7FDCFF2ED292} - C:\WINDOWS\System32\Dkrffi.dll (file missing)
O2 - BHO: (no name) - {27AFB67D-B5EE-4A39-9A5F-3951FFE4D74B} - C:\WINDOWS\System32\Lofpk.dll (file missing)
O2 - BHO: IE Address Browser Helper - {2A0176FE-008B-4706-90F5-BBA532A49731} - C:\Program Files\SearchNet\SNHpr.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
O2 - BHO: HrmQtgas Class - {39786EF2-DFD4-EF88-F449-56026C8EB446} - (no file)

O2 - BHO: CAISHOW TOOLBAR - {3AF40CB8-B3BA-4E2D-8968-4BF8DB172997} - C:\Program Files\CaiShow Tech\CaiShow\BrowerHelper.dll
O2 - BHO: IE Browser Helper - {3CE496D1-1746-41CD-9489-3C0B93DF10E2} - C:\WINDOWS\Downlo~1\x4v8.dll (file missing)
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: (no name) - {49B6BF35-634B-4C1C-9D28-8CEB1CDB97AE} - C:\WINDOWS\System32\Ybeiqg.dll (file missing)
O2 - BHO: 网络加速 - {5673A7C0-95CC-4646-BB07-3BD71234CEF9} - C:\WINDOWS\System32\MicrosoftNet.dll (file missing)
O2 - BHO: HSProgSDT - {5D15CEAC-3B27-4863-AAEA-93A4C8A6C57D} - C:\WINDOWS\System32\hssdtobm.dll
O2 - BHO: (no name) - {61274B68-22A4-49C9-9D32-821C05F60295} - C:\WINDOWS\System32\Glzitj.dll (file missing)
O2 - BHO: (no name) - {61BE1357-F312-4E9D-9235-388A53B6B5A7} - C:\WINDOWS\System32\Scjv.dll (file missing)
O2 - BHO: (no name) - {625FEE8F-BA7E-4563-B6A4-DF7EEDA6FB64} - C:\WINDOWS\System32\Sqkie.dll (file missing)
O2 - BHO: (no name) - {75873D3B-0326-44D2-8E44-4BF30A6F6F30} - C:\WINDOWS\System32\Ywsav.dll (file missing)
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - BHO: (no name) - {7BBA0B41-D44B-4B7A-A163-6CE9E5866649} - C:\WINDOWS\System32\Cutzbd.dll (file missing)
O2 - BHO: (no name) - {7C6BAB05-57DD-4D74-BAB0-1978E0F78E09} - C:\WINDOWS\System32\Upddv.dll (file missing)
O2 - BHO: (no name) - {7E539959-B73A-40D8-A86F-3B722879FACE} - C:\WINDOWS\System32\Iboh.dll (file missing)
O2 - BHO: (no name) - {81AB04F9-9F5E-4B83-9B6F-E2120F1099D4} - C:\WINDOWS\System32\Hhfys.dll (file missing)
O2 - BHO: (no name) - {A01418D9-4E06-40F5-B96C-7E0539E43D49} - C:\WINDOWS\System32\Qcqnkc.dll (file missing)
O2 - BHO: (no name) - {A2D9856F-50F8-4263-8317-17ECAB0EBA73} - C:\WINDOWS\System32\Eqinfj.dll (file missing)
O2 - BHO: (no name) - {A9067954-5699-4284-AF69-0BF27301612B} - C:\WINDOWS\System32\Wtrafs.dll (file missing)
O2 - BHO: (no name) - {AE0D3AD5-ED0C-42AD-B961-8C27CA3A3CAF} - C:\WINDOWS\System32\Cnelmf.dll (file missing)
O2 - BHO: (no name) - {B29BAAE8-492E-45E6-A023-B13988B8A4FE} - C:\WINDOWS\System32\Latv.dll (file missing)
O2 - BHO: (no name) - {BC3A9936-91B3-409A-A6B5-779F8E2AE30B} - C:\WINDOWS\System32\Uaestv.dll (file missing)
O2 - BHO: (no name) - {C27B0217-67FE-4E0F-A3DF-797064E012E8} - C:\WINDOWS\System32\Ikob.dll (file missing)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\CnsHook.dll
O2 - BHO: MEobjectSDT - {D4D5C535-BA95-4327-870D-A33826FDD17A} - C:\WINDOWS\System32\obwbkya.dll
O2 - BHO: (no name) - {E7942332-1154-4248-8D1B-F9FB08A33CCB} - C:\WINDOWS\System32\Ksfyiw.dll (file missing)
O2 - BHO: (no name) - {F02062C3-B719-411E-8D03-E096597F4342} - C:\WINDOWS\System32\Sniq.dll (file missing)
O2 - BHO: (no name) - {F577BA92-8F28-459A-AE38-4A94E7A1A563} - C:\WINDOWS\System32\Qjhwd.dll (file missing)
O2 - BHO: (no name) - {FB147576-C6AA-4D71-A979-D82FD00115CB} - C:\WINDOWS\System32\Clfuei.dll (file missing)
O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\PROGRA~1\Kingsoft\FASTAI~1\IEBand.dll
O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O3 - Toolbar: 完美网译通 - {F43BD772-ABDD-43b7-A96A-3E9E61946EC0} - C:\WINDOWS\WORLD2\TOOLBAR\hmtoolbar.dll
O3 - Toolbar: 金山毒霸安全助手 - {EF72500A-C234-46C4-BF0A-9AA6913DDF34} - C:\PROGRA~1\KOS\KOSIEBar.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - HKLM\..\Run: [YLive.exe] C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - HKLM\..\Run: [yassistse] "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
O4 - HKLM\..\Run: [Win32 USB2 Driver] rem svchosting.exe
O4 - HKLM\..\Run: [nwiz] rem nwiz.exe /install
O4 - HKLM\..\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - HKLM\..\Run: [conscorr] rem C:\WINDOWS\conscorr.exe
O4 - HKLM\..\Run: [avicap32] rem
O4 - HKLM\..\Run: [win comm] rem ; rem C:\Program Files\Win Comm\WinComm.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\qq\AddEmotion.htm
O8 - Extra context menu item: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yrss.dll/YRSSMENUEXT
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\qq\SendMMS.htm
O8 - Extra context menu item: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/246
O9 - Extra button: Yahoo 3.5G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing)
O9 - Extra button: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao (file missing)
O9 - Extra button: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\qq\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\qq\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\qq\QQIEHelper.dll
O9 - Extra button: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - Extra button: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - Extra 'Tools' menuitem: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair (file missing)
O9 - Extra button: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O9 - Extra 'Tools' menuitem: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean (file missing)
O11 - Options group: [!CNS]  中文上网
O16 - DPF: {52DF16E3-6C4F-4B22-8BAF-09263E463B48} (金山毒霸在线产品升级) - http://zs.kingsoft.com/KOSInit.cab
O16 - DPF: {53AF6E02-F18F-4228-AC13-3E79773FBE50} (CMCBooter Object) - http://download.mysee.com/plugin/booter.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7857946D-08B7-4878-82F2-B99774634E0F}: NameServer = 202.96.69.38 202.96.64.68
O18 - Protocol: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} - C:\POWERW~1\XDictExB.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - E:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - E:\Program Files\Rising\Rav\Ravmond.exe

以上，扫描日志～　多谢！

靠哦  这么多R3  O2