瑞星卡卡安全论坛

我的电脑中了病毒Trojan.DL.Agent.kif
                Trojan.DL.Agent.jgo
                Trojan.DL.Agent.jgp
                Trojan.DL.Agent.jmz
                Trojan.DL.Agent.jvk
                Trojan.DL.Agent.jny
用瑞星杀不掉,杀完还说需要手动清除或删除.需要解压后杀毒.该怎么处理啊?请教高手帮帮我啊.

日志如下：
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><ctfmon.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Synchronization Manager><mobsync.exe /logon>  [(Verified)Microsoft Corporation]
    <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd>  [N/A]
    <CM-SmWizard><C:\WINNT\System\SmWizard.exe>  [(Verified)C-Media Electronics Inc.]
    <SiS Tray><C:\WINNT\system32\sistray.EXE>  [Silicon Integrated Systems Corporation]
    <SiS KHooker><C:\WINNT\system32\khooker.exe>  [N/A]
    <StatusClient><C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto>  [Hewlett-Packard]
    <TomcatStartup><C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe>  [Hewlett-Packard]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <SunJavaUpdateSched><C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe>  [Sun Microsystems, Inc.]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINNT\system32\sstext3d.scr>  [(Verified)Microsoft Corporation]

==================================
启动文件夹
N/A

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Pml Driver HPZ12 / Pml Driver HPZ12]
  <C:\WINNT\system32\HPZipm12.exe><HP>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

==================================
驱动程序
[Rising TDI Base Driver / BaseTDI]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[Cdr4_2K / Cdr4_2K]
  <C:\WINNT\SYSTEM32\DRIVERS\Cdr4_2K.SYS><Roxio>
[Cdralw2k / Cdralw2k]
  <C:\WINNT\SYSTEM32\DRIVERS\Cdralw2k.SYS><Roxio>
[C-Media WDM Audio Interface / cmuda]
  <system32\drivers\cmuda.sys><C-Media Inc>
[dmboot / dmboot]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload]
  <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[ExpScaner / ExpScaner]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[HOOKAPI / HOOKAPI]
  <\??\C:\PROGRAM FILES\RISING\RAV\HOOKAPI.SYS><瑞星软件有限公司>
[HookCont / HookCont]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[IEEE-1284.4 Driver HPZid412 / HPZid412]
  <system32\DRIVERS\HPZid412.sys><HP>
[Print Class Driver for IEEE-1284.4 HPZipr12 / HPZipr12]
  <system32\DRIVERS\HPZipr12.sys><HP>
[USB to IEEE-1284.4 Translation Driver HPZius12 / HPZius12]
  <system32\DRIVERS\HPZius12.sys><HP>
[kmsinput / kmsinput]
  <\??\C:\WINNT\system32\drivers\kmsinput.sys><N/A>
[MEMSCAN / MEMSCAN]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[npkcrypt / npkcrypt]
  <\??\E:\Program Files\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[pnpshark / pnpshark]
  <\SystemRoot\system32\DRIVERS\pnpshark.sys><>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RSPPSYS / RSPPSYS]
  <\??\C:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising>
[Realtek RTL8139/810x Family Fast Etnernet NIC NT Driver / rtl8139]
  <system32\DRIVERS\R8139n5.SYS><Realtek Semiconductor Corporation>
[SiS315 / SiS315]
  <system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation>
[SiS AGP Filter / SISAGP]
  <\SystemRoot\system32\DRIVERS\SISAGPx.sys><Silicon Integrated Systems Corporation>
[st3shark / st3shark]
  <\SystemRoot\system32\DRIVERS\st3shark.sys><>

==================================

浏览器加载项
[超级兔子上网精灵]
  {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <E:\PROGRA~1\超级兔子\MAGICSET\haokanbar.dll, Xiang Feng Technology>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\Program Files\QQ\QQ.EXE, TENCENT>
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[超级兔子上网精灵]
  {43869BB3-22FD-4F15-9B46-238106BA2F4E} <E:\PROGRA~1\超级兔子\MAGICSET\haokanbar.dll, Xiang Feng Technology>
[MMCPlayer Class]
  {05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINNT\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.>
[XDownload Class]
  {165D83D3-359C-4783-9BF0-6FA6DC42A3F1} <C:\WINNT\Downloaded Program Files\SSDownload.dll, 北京世纪超星>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINNT\system32\aliedit\AliEdit.dll, www.alipay.com>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINNT\system32\INPUTC~1.DLL, >
[Java Plug-in]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[File  Uploader ]
  {B4FE8160-76DB-48C4-9803-68ED6278CA2C} <C:\WINNT\DOWNLO~1\UPLOAD~1.DLL, 洲信信息技术有限公司>
[Java Plug-in]
  {CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[Java Plug-in]
  {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[Java Plug-in 1.5.0_06]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[VqqSpeedDlProxy Class]
  {F138084D-84D7-48CD-BEA8-04772457516E} <C:\WINNT\vqqsdl.dll, Tencent>
[上传到QQ网络硬盘]
  <E:\Program Files\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <E:\Program Files\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\Program Files\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <E:\Program Files\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 160][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 184][\??\C:\WINNT\system32\csrss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 180][\??\C:\WINNT\system32\winlogon.exe]  [Microsoft Corporation, 5.00.2195.6970]
[PID: 232][C:\WINNT\system32\services.exe]  [Microsoft Corporation, 5.00.2195.6700]
    [C:\WINNT\system32\dmserver.dll]  [VERITAS Software Corp., 2195.6605.297.3]
[PID: 244][C:\WINNT\system32\lsass.exe]  [Microsoft Corporation, 5.00.2195.6902]
[PID: 412][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 440][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 500][C:\WINNT\system32\spoolsv.exe]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\HPBMMON.DLL]  [Hewlett-Packard, 10.00.16]
    [C:\WINNT\system32\hppamon0.dll]  [HP, 5, 0, 5, 0]
    [C:\WINNT\system32\hpdomon.dll]  [Hewlett-Packard, 03.42.00]
    [C:\WINNT\system32\HPBHealr.dll]  [N/A, N/A]
    [C:\WINNT\system32\hpzlnt04.dll]  [HP, 2,80,0,0]
    [C:\WINNT\system32\spool\PRTPROCS\W32X86\IMFPrint.DLL]  [Zenographics, Inc., 5, 54, 330, 0]
    [C:\WINNT\system32\Imf32.dll]  [Zenographics, Inc., 5, 60, 1204, 0]
    [C:\WINNT\system32\ZTAG32.dll]  [Zenographics, Inc., 5, 60, 1210, 0]
    [C:\WINNT\system32\ZSPOOL.dll]  [Zenographics, Inc., 5, 51, 709, 0]
    [C:\WINNT\system32\spool\PRTPROCS\W32X86\vprproc.dll]  [Windows (R) 2000 DDK provider, 5.00.2195.1620]
[PID: 532][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 568][C:\WINNT\system32\regsvc.exe]  [Microsoft Corporation, 5.00.2195.6701]
[PID: 596][C:\WINNT\system32\MSTask.exe]  [Microsoft Corporation, 4.71.2195.6920]
[PID: 688][C:\WINNT\system32\stisvc.exe]  [Microsoft Corporation, 5.00.2195.6656]
[PID: 752][C:\WINNT\System32\WBEM\WinMgmt.exe]  [Microsoft Corporation, 1.50.1085.0100]
[PID: 792][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 824][C:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1056][C:\WINNT\Explorer.EXE]  [Microsoft Corporation, 5.00.3700.6690]
[PID: 1140][C:\WINNT\system32\RunDll32.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system\cmicnfg.cpl]  [C-Media Corporation, 1, 0, 40, 20]
    [C:\WINNT\System32\udaprop.dll]  [C-Media Corporation, 1.0.2.2]
[PID: 1184][C:\WINNT\system32\sistray.EXE]  [Silicon Integrated Systems Corporation, 0.0.0.2081]
[PID: 1204][C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe]  [Hewlett-Packard, 00.00.13]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\hpptui0.dll]  [Hewlett-Packard, 01.00.35]
[PID: 608][C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe]  [Sun Microsystems, Inc., 5.0.60.5]
[PID: 1256][C:\WINNT\system32\ctfmon.exe]  [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[PID: 1332][C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\hotspot\jvm.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\hpi.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\verify.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\java.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\zip.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\net.dll]  [N/A, N/A]
    [C:\WINNT\system32\d4channel.dll]  [Hewlett-Packard, 02.07.00]
[PID: 1084][C:\Program Files\Rising\Rav\RsAgent.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 12]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
[PID: 1452][C:\WINNT\msagent\AgentSvr.exe]  [Microsoft Corporation, 2.00.0.3422]
[PID: 1024][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2800.1106]
    [E:\PROGRA~1\超级兔子\MAGICSET\haokanbar.dll]  [Xiang Feng Technology, 2, 2, 0, 1612]
    [C:\WINNT\system32\Macromed\Flash\Flash8b.ocx]  [Macromedia, Inc., 8,0,24,0]
[PID: 1392][E:\Program Files\SREng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================

病毒路径..

路径是：
c:\Documents and Settings\Administrator\Local Settings\Temp
c:\WINNT
C:\WINNT\system32

c:\Documents and Settings\Administrator\Local Settings\Temp

安全模式清空这个文件夹..

其他冒发现异常..

就是在安全模式下把这个文件里面的东西都删掉是吗？
谢谢啊！希望能成功！

郁闷啊。还是有病毒Trojan.DL.Agent.jny，
在路径：c:\WINNT
        C:\WINNT\system32
里面没有杀掉啊。
另外又发现病毒：Trojan.DL.Agent.jvk
                Trojan.DL.Agent.jgo
                Trojan.DL.Agent.jgp
                Trojan.DL.Agent.jmz
                Trojan.DL.Agent.jny
在路径：C:\Recycled

日志如下：
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><ctfmon.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <Synchronization Manager><mobsync.exe /logon>  [(Verified)Microsoft Corporation]
    <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd>  [N/A]
    <CM-SmWizard><C:\WINNT\System\SmWizard.exe>  [(Verified)C-Media Electronics Inc.]
    <SiS Tray><C:\WINNT\system32\sistray.EXE>  [Silicon Integrated Systems Corporation]
    <SiS KHooker><C:\WINNT\system32\khooker.exe>  [N/A]
    <StatusClient><C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto>  [Hewlett-Packard]
    <TomcatStartup><C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe>  [Hewlett-Packard]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <SunJavaUpdateSched><C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe>  [Sun Microsystems, Inc.]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINNT\system32\sstext3d.scr>  [(Verified)Microsoft Corporation]

==================================
启动文件夹
N/A

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[Pml Driver HPZ12 / Pml Driver HPZ12]
  <C:\WINNT\system32\HPZipm12.exe><HP>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>

==================================
驱动程序
[Rising TDI Base Driver / BaseTDI]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[Cdr4_2K / Cdr4_2K]
  <C:\WINNT\SYSTEM32\DRIVERS\Cdr4_2K.SYS><Roxio>
[Cdralw2k / Cdralw2k]
  <C:\WINNT\SYSTEM32\DRIVERS\Cdralw2k.SYS><Roxio>
[C-Media WDM Audio Interface / cmuda]
  <system32\drivers\cmuda.sys><C-Media Inc>
[dmboot / dmboot]
  <System32\drivers\dmboot.sys><VERITAS Software Corp.>
[Logical Disk Manager Driver / dmio]
  <\SystemRoot\System32\drivers\dmio.sys><VERITAS Software Corp.>
[dmload / dmload]
  <\SystemRoot\System32\drivers\dmload.sys><VERITAS Software Corp.>
[ExpScaner / ExpScaner]
  <\??\C:\Program Files\Rising\Rav\ExpScan.sys><>
[HOOKAPI / HOOKAPI]
  <\??\C:\PROGRAM FILES\RISING\RAV\HOOKAPI.SYS><瑞星软件有限公司>
[HookCont / HookCont]
  <\??\C:\Program Files\Rising\Rav\HOOKCONT.sys><Rising tech Co. ltd>
[HookReg / HookReg]
  <\??\C:\Program Files\Rising\Rav\HookReg.sys><>
[HookSys / HookSys]
  <\??\C:\Program Files\Rising\Rav\HookSys.sys><Rising>
[IEEE-1284.4 Driver HPZid412 / HPZid412]
  <system32\DRIVERS\HPZid412.sys><HP>
[Print Class Driver for IEEE-1284.4 HPZipr12 / HPZipr12]
  <system32\DRIVERS\HPZipr12.sys><HP>
[USB to IEEE-1284.4 Translation Driver HPZius12 / HPZius12]
  <system32\DRIVERS\HPZius12.sys><HP>
[kmsinput / kmsinput]
  <\??\C:\WINNT\system32\drivers\kmsinput.sys><N/A>
[MEMSCAN / MEMSCAN]
  <\??\C:\Program Files\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[npkcrypt / npkcrypt]
  <\??\E:\Program Files\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[pnpshark / pnpshark]
  <\SystemRoot\system32\DRIVERS\pnpshark.sys><>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RSPPSYS / RSPPSYS]
  <\??\C:\PROGRAM FILES\RISING\RAV\RSPPSYS.sys><Rising>
[Realtek RTL8139/810x Family Fast Etnernet NIC NT Driver / rtl8139]
  <system32\DRIVERS\R8139n5.SYS><Realtek Semiconductor Corporation>
[SiS315 / SiS315]
  <system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation>
[SiS AGP Filter / SISAGP]
  <\SystemRoot\system32\DRIVERS\SISAGPx.sys><Silicon Integrated Systems Corporation>
[st3shark / st3shark]
  <\SystemRoot\system32\DRIVERS\st3shark.sys><>

浏览器加载项
[超级兔子上网精灵]
  {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <E:\PROGRA~1\超级兔子\MAGICSET\haokanbar.dll, Xiang Feng Technology>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <E:\Program Files\QQ\QQ.EXE, TENCENT>
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\system32\msdxm.ocx, Microsoft Corporation>
[超级兔子上网精灵]
  {43869BB3-22FD-4F15-9B46-238106BA2F4E} <E:\PROGRA~1\超级兔子\MAGICSET\haokanbar.dll, Xiang Feng Technology>
[MMCPlayer Class]
  {05C1004E-2596-48E5-8E26-39362985EEB9} <C:\WINNT\Downloaded Program Files\MMCShell.dll, Sohu.com Inc.>
[XDownload Class]
  {165D83D3-359C-4783-9BF0-6FA6DC42A3F1} <C:\WINNT\Downloaded Program Files\SSDownload.dll, 北京世纪超星>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINNT\system32\aliedit\AliEdit.dll, www.alipay.com>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINNT\system32\INPUTC~1.DLL, >
[Java Plug-in]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[File  Uploader ]
  {B4FE8160-76DB-48C4-9803-68ED6278CA2C} <C:\WINNT\DOWNLO~1\UPLOAD~1.DLL, 洲信信息技术有限公司>
[Java Plug-in]
  {CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[Java Plug-in]
  {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll, N/A>
[Java Plug-in 1.5.0_06]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINNT\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[VqqSpeedDlProxy Class]
  {F138084D-84D7-48CD-BEA8-04772457516E} <C:\WINNT\vqqsdl.dll, Tencent>
[上传到QQ网络硬盘]
  <E:\Program Files\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <E:\Program Files\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <E:\Program Files\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <E:\Program Files\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 160][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 184][\??\C:\WINNT\system32\csrss.exe]  [Microsoft Corporation, 5.00.2195.6601]
[PID: 180][\??\C:\WINNT\system32\winlogon.exe]  [Microsoft Corporation, 5.00.2195.6970]
[PID: 232][C:\WINNT\system32\services.exe]  [Microsoft Corporation, 5.00.2195.6700]
    [C:\WINNT\system32\dmserver.dll]  [VERITAS Software Corp., 2195.6605.297.3]
[PID: 244][C:\WINNT\system32\lsass.exe]  [Microsoft Corporation, 5.00.2195.6902]
[PID: 416][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 444][C:\Program Files\Rising\Rav\CCenter.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[PID: 504][C:\WINNT\system32\spoolsv.exe]  [Microsoft Corporation, 5.00.2195.7059]
    [C:\WINNT\system32\HPBMMON.DLL]  [Hewlett-Packard, 10.00.16]
    [C:\WINNT\system32\hppamon0.dll]  [HP, 5, 0, 5, 0]
    [C:\WINNT\system32\hpdomon.dll]  [Hewlett-Packard, 03.42.00]
    [C:\WINNT\system32\HPBHealr.dll]  [N/A, N/A]
    [C:\WINNT\system32\hpzlnt04.dll]  [HP, 2,80,0,0]
    [C:\WINNT\system32\spool\PRTPROCS\W32X86\IMFPrint.DLL]  [Zenographics, Inc., 5, 54, 330, 0]
    [C:\WINNT\system32\Imf32.dll]  [Zenographics, Inc., 5, 60, 1204, 0]
    [C:\WINNT\system32\ZTAG32.dll]  [Zenographics, Inc., 5, 60, 1210, 0]
    [C:\WINNT\system32\ZSPOOL.dll]  [Zenographics, Inc., 5, 51, 709, 0]
    [C:\WINNT\system32\spool\PRTPROCS\W32X86\vprproc.dll]  [Windows (R) 2000 DDK provider, 5.00.2195.1620]
[PID: 536][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 572][C:\WINNT\system32\regsvc.exe]  [Microsoft Corporation, 5.00.2195.6701]
[PID: 600][C:\WINNT\system32\MSTask.exe]  [Microsoft Corporation, 4.71.2195.6920]
[PID: 684][C:\WINNT\system32\stisvc.exe]  [Microsoft Corporation, 5.00.2195.6656]
[PID: 752][C:\WINNT\System32\WBEM\WinMgmt.exe]  [Microsoft Corporation, 1.50.1085.0100]
[PID: 796][C:\WINNT\system32\svchost.exe]  [Microsoft Corporation, 5.00.2134.1]
[PID: 824][C:\Program Files\Rising\Rav\RavStub.exe]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 1052][C:\WINNT\Explorer.EXE]  [Microsoft Corporation, 5.00.3700.6690]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\WINNT\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 21]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINNT\System\cmicnfg.cpl]  [C-Media Corporation, 1, 0, 40, 20]
[PID: 1208][C:\WINNT\system32\RunDll32.exe]  [Microsoft Corporation, 5.00.2134.1]
    [C:\WINNT\system\cmicnfg.cpl]  [C-Media Corporation, 1, 0, 40, 20]
    [C:\WINNT\System32\udaprop.dll]  [C-Media Corporation, 1.0.2.2]
[PID: 612][C:\WINNT\system32\sistray.EXE]  [Silicon Integrated Systems Corporation, 0.0.0.2081]
[PID: 1232][C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe]  [Hewlett-Packard, 00.00.13]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\hpptui0.dll]  [Hewlett-Packard, 01.00.35]
[PID: 1200][C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe]  [Sun Microsystems, Inc., 5.0.60.5]
[PID: 1276][C:\WINNT\system32\ctfmon.exe]  [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[PID: 1348][C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\hotspot\jvm.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\hpi.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\verify.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\java.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\zip.dll]  [N/A, N/A]
    [C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\net.dll]  [N/A, N/A]
    [C:\WINNT\system32\d4channel.dll]  [Hewlett-Packard, 02.07.00]
[PID: 772][E:\Program Files\QQ\TMDlls\TM.exe]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\BasicCtrlDll.dll]  [Tencent, 0, 3, 3, 9]
    [E:\Program Files\QQ\TMDlls\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [E:\Program Files\QQ\TMDlls\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\BaseUIClass.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [E:\Program Files\QQ\TMDlls\QQAPI.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [E:\Program Files\QQ\TMDlls\QQRes.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\npkcntc.dll]  [INCA Internet Co., Ltd., 2005, 9, 1, 1]
    [E:\Program Files\QQ\TMDlls\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [E:\Program Files\QQ\TMDlls\HostingMgr.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\WizardCtrl.dll]  [Tencent, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQMainFrame.dll]  [TENCENT, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\NewSkin.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\CQQApplication.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\FrameBar.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\UserRelationWeight.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\CameraDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQAllInOne.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\CommercesMng.dll]  [, 1, 0, 0, 1]
    [C:\WINNT\system32\msdmo.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\MiscCtrl.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQSpace.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQUdpGetFileLib.dll]  [tencent, 0, 2, 2, 3]
    [E:\Program Files\QQ\TMDlls\LongConnection.dll]  [tencent, 0, 3, 3, 8]
    [E:\Program Files\QQ\TMDlls\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 0, 3, 0, 43]
    [E:\Program Files\QQ\TMDlls\QQMMSender.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\ShareFiles.dll]  [N/A, N/A]

[PID: 392][E:\Program Files\QQ\TIMPlatform.exe]  [tencent, 0, 3, 1, 8]
    [E:\Program Files\QQ\TMDlls\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
[PID: 1428][E:\Program Files\QQ\TMDlls\TM.exe]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\BasicCtrlDll.dll]  [Tencent, 0, 3, 3, 9]
    [E:\Program Files\QQ\TMDlls\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [E:\Program Files\QQ\TMDlls\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\BaseUIClass.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [E:\Program Files\QQ\TMDlls\QQAPI.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [E:\Program Files\QQ\TMDlls\QQRes.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\npkcntc.dll]  [INCA Internet Co., Ltd., 2005, 9, 1, 1]
    [E:\Program Files\QQ\TMDlls\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [E:\Program Files\QQ\TMDlls\HostingMgr.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\WizardCtrl.dll]  [Tencent, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQMainFrame.dll]  [TENCENT, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\NewSkin.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\CQQApplication.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\FrameBar.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\UserRelationWeight.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\CameraDll.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQAllInOne.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\CommercesMng.dll]  [, 1, 0, 0, 1]
    [C:\WINNT\system32\msdmo.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\MiscCtrl.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\LongConnection.dll]  [tencent, 0, 3, 3, 8]
    [E:\Program Files\QQ\TMDlls\ShareFiles.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\QQSpace.dll]  [, 1, 0, 0, 1]
    [E:\Program Files\QQ\TMDlls\QQUdpGetFileLib.dll]  [tencent, 0, 2, 2, 3]
    [E:\Program Files\QQ\TMDlls\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 0, 3, 0, 43]
    [E:\Program Files\QQ\TMDlls\QQMMSender.dll]  [N/A, N/A]
    [E:\Program Files\QQ\TMDlls\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
[PID: 1188][C:\Program Files\Internet Explorer\iexplore.exe]  [Microsoft Corporation, 6.00.2800.1106]
    [E:\PROGRA~1\超级兔子\MAGICSET\haokanbar.dll]  [Xiang Feng Technology, 2, 2, 0, 1612]
    [C:\WINNT\system32\Macromed\Flash\Flash8b.ocx]  [Macromedia, Inc., 8,0,24,0]
[PID: 304][E:\Program Files\SREng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================

郁闷啊。还是有病毒Trojan.DL.Agent.jny，
在路径：c:\WINNT
C:\WINNT\system32
里面没有杀掉啊。
另外又发现病毒：Trojan.DL.Agent.jvk
Trojan.DL.Agent.jgo
Trojan.DL.Agent.jgp
Trojan.DL.Agent.jmz
Trojan.DL.Agent.jny
在路径：C:\Recycled
  简单办法..杀毒时...当瑞星暴毒时.在所暴病毒..点鼠标右键..查找目标...直接删除他..OK搞定了

直接到文件下面把文件删除？可以吗？
这样不会造成系统不能运行吧？？？

怎么没有高手帮我指点一下哦。烦恼的病毒