我于9.29日中了Backdoor.Gpigeon.uql病毒，原因是点击了QQ上的一个网站，当时瑞星的监控提示该网站有Backdoor.Gpigeon.uql病毒，并已被清除。但是后来机子还是出现了该病毒的特征。如
1.杀毒时瑞星提示IE感染Backdoor.Gpigeon.uql病毒并被清除，但重启后IE又被感染。
2.打开 “我的电脑”时，机子会很慢，进程中出现一个RUNDLL32的进程，其内存占有量以10M的速度递增，直至160M.同时桌面进程也占用了100多个M.
另外，在中此病毒之前，我的机子在登陆后，桌面显示的很慢，同时只能看到桌面图片，桌面上的快捷方式和任务栏显示的很慢。后来我发现在登陆时把进程中的RUNDLL32进程关掉，桌面就立刻显示出来了。
请各位高手帮忙了～～！！万分感激～～！！！下边是我用System Repair Engineer 2.2.6.605扫描的结果：
2006-10-03,16:27:24
System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Corporation]
<MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background> [(Verified)Microsoft Corporation]
<pyjj><; D:\Program Files\jj4\jjsvr4.exe> [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RavTask><"d:\Program Files\Rising\Rav\RavTask.exe" -system> [Beijing Rising Technology Co., Ltd.]
<RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<SunJavaUpdateSched><C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe> [Sun Microsystems, Inc.]
<PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Corporation]
<IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload> [(Verified)Microsoft Corporation]
<IMJPMIG8.1><C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Corporation]
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> [N/A]
<DAEMON Tools><; "d:\Program Files\DAEMON Tools\daemon.exe" -lang 1033> [N/A]
<HF_GameClient><; d:\Program Files\浩方对战平台\gameclient.exe> [上海浩方在线信息技术有限公司]
<LogitechCameraAssistant><; C:\Program Files\Logitech\Video\CameraAssistant.exe> [Logitech Inc.]
<mmtask><; c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe> [N/A]
<nwiz><; nwiz.exe /install> [(Verified)NVIDIA Corporation]
<poco><; C:\poco\Poco2006.exe> [N/A]
<ProxyThorn><; D:\Program Files\ProxyThorn\ProxyThorn.exe> [Huazhong University of Science and Technology]
<SoundMan><; SOUNDMAN.EXE> [(Verified)Realtek Semiconductor Corp.]
<StormCodec_Helper><; "d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti> [N/A]
<sysinfo><; C:\Documents and Settings\sumomosun\桌面\shuwei\源代码\Visual C++课程设计案例精编(第二版)\第一章 系统信息程序的开发\sysinfo\Release\sysinfo.exe> [N/A]
<YOKAssiant><; Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant update> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<DTService><rundll32.exe C:\WINDOWS\system32\soundmix.dll,Load> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
<{B48F6409-4740-475B-A474-651F54CCE460}><C:\Program Files\Common Files\Microsoft Shared\MSSearch\Bin\MsInfo.Dll> [N/A]
<{08315C1A-9BA9-4B7C-A432-26885F78DF28}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\rejoi.vxd> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad]
<CDBurn><> [N/A]
<webwork><C:\WINDOWS\webwork\webwork.dll> [MSWebwork Cop.]
==================================
启动文件夹
N/A
==================================
服务
[Adobe LM Service / Adobe LM Service]
<"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[ASP.NET State Service / aspnet_state]
<C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe><Microsoft Corporation>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
<C:\WINDOWS\system32\drivers\CDAC11BA.EXE><Macrovision>
[Human Interface Device Access / HidServ]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[JMediaService / JMediaService]
<C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\MMSASS~1\MMSSVER.DLL,Service><Microsoft Corporation>
[Logitech Process Monitor / LVPrcSrv]
<c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe><Logitech Inc.>
[NVIDIA Driver Helper Service / NVSvc]
<C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Rising Proxy Service / RfwProxySrv]
<c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
<c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
<"d:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
<"d:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[StdService / StdService]
<C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\STDSVER.DLL,Service><Microsoft Corporation>
==================================
驱动程序
[Albus / Albus]
<\SystemRoot\system32\drivers\Albus.SYS><N/A>
[Service for WDM 3D Audio Driver / ALCXSENS]
<system32\drivers\ALCXSENS.SYS><Sensaura Ltd>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Rising TDI Base Driver / BaseTDI]
<System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[CdaC15BA / CdaC15BA]
<\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS><Macrovision Europe Ltd>
[DDPlay Virtual Camera / DDPlayCam]
<system32\DRIVERS\DDPlayCam.sys><Windows (R) 2000 DDK provider>
[DlPortio / DlPortio]
<\SystemRoot\system32\dlportio.sys><N/A>
[dtscsi / dtscsi]
<\SystemRoot\System32\Drivers\dtscsi.sys><N/A>
[ExpScaner / ExpScaner]
<\??\d:\Program Files\Rising\Rav\ExpScan.sys><>
[UVC Filter Service / FilterService]
<system32\DRIVERS\lvuvcflt.sys><Logitech Inc.>
[HookCont / HookCont]
<\??\d:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
<\??\d:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
<\??\d:\Program Files\Rising\Rav\HookSys.sys><Rising>
[HookUrl / HookUrl]
<\??\C:\Program Files\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[Logitech Kernel Audio Processing Filter Driver / Lvckap]
<\??\C:\WINDOWS\system32\drivers\Lvckap.sys><N/A>
[Logitech Machine Vision Engine Loader / lvmvdrv]
<\??\C:\WINDOWS\system32\drivers\lvmvdrv.sys><N/A>
[Logitech LVPrcMon Driver / LVPrcMon]
<\??\C:\WINDOWS\system32\drivers\LVPrcMon.sys><N/A>
[Logitech USB Monitor Filter / LVUSBSta]
<system32\drivers\lvusbsta.sys><Logitech Inc.>
[Logitech QuickCam Pro 5000(UVC) / LVUVC]
<system32\DRIVERS\lvuvc.sys><Logitech Inc.>
[MEMSCAN / MEMSCAN]
<\??\d:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mProcRs / mProcRs]
<\??\c:\program files\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[MxlW2k / MxlW2k]
<C:\WINDOWS\SYSTEM32\DRIVERS\MxlW2k.SYS><MusicMatch, Inc.>
[npkcrypt / npkcrypt]
<\??\D:\Program Files\Tencent\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[nv / nv]
<System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsFwDrv / RsFwDrv]
<\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[Realtek RTL8139/810X Family PCI Fast Ethernet NIC NT Driver / rtl8139]
<System32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv]
<System32\DRIVERS\secdrv.sys><N/A>
[Sentinel / Sentinel]
<\SystemRoot\System32\Drivers\SENTINEL.SYS><Rainbow Technologies, Inc.>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1]
<system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[sptd / sptd]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[SVKP / SVKP]
<\??\C:\WINDOWS\system32\SVKP.sys><AntiCracking>
[TCP/IP Protocol Driver / Tcpip]
<System32\DRIVERS\tcpip.sys><Microsoft Corporation>
[VIA AGP Filter / viaagp1]
<\SystemRoot\System32\DRIVERS\viaagp1.sys><VIA Technologies, Inc.>