疑是3448变种病毒卷土重来..求救！！随贴已附日志！！
因日志过长。。无法一次放上来。。所以分两部分。。。中毒特征跟3448类似。。。一运行杀毒软件就自动关机。。安全模式无法进入，直接转为重启动。。。IE可以运行，百度知道可以打开。。但是卡卡社区和瑞星在线杀毒被屏闭，点击进入卡卡社区和瑞星在线杀毒直接转为cn.yahoo.com。。。卡卡助手无法安装。。一点击安装包就死机。。。
本人电脑98+XP双系统。。。但是在98系统装了卡卡助手，在未知病毒查杀那里却显示加载家族病毒特征库失败!。。所以一直无法查杀病毒。。。请坛主大大急救。。。。
PS。最近两天本人搜索各大搜索引擎。。却发现很多跟我一样的中毒者无法上卡卡社区或者瑞星相关论坛求救。。估计是该病毒继3448被卡卡阻杀以后进化变种。。针对当时有效杀除3448的各大杀毒软件论坛进行屏闭，所以很多人无法求救。。。请紧急解决。。！！！！！
PS：本人在QQ文件夹内找出3个病毒程序，名为0013.exe h1.bmp svchost.exe
以下为System Repair Engineer所导出的日志
[CODE]
2007-01-12,18:33:27
System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><D:\WINDOWS\System32\ctfmon.exe> [(Verified)Microsoft Corporation]
<msnmsgr><; "D:\Program Files\MSN Messenger\msnmsgr.exe" /background> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RfwMain><"G:\杀毒工具\瑞星2006防火墙\Rising\Rfw\rfwmain.exe" -Startup> [Beijing Rising Technology Co., Ltd.]
<NvCplDaemon><RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup> [(Verified)NVIDIA Corporation]
<kav><"G:\杀毒工具\卡巴斯基6.0\avp.exe"> [Kaspersky Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Corporation]
<Userinit><D:\WINDOWS\System32\userinit.exe,> [(Verified)Microsoft Corporation]
<UIHost><D:\Program Files\TGTSoft\StyleXP\CurrentLogon.EXE> [Microsoft Corporation]
==================================
启动文件夹
N/A
==================================
服务
[AVP / AVP][Stopped/Auto Start]
<"G:\杀毒工具\卡巴斯基6.0\avp.exe -r"><Kaspersky Lab>
[Rising Proxy Service / RfwProxySrv][Stopped/Manual Start]
<g:\杀毒工具\瑞星2006防火墙\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
<g:\杀毒工具\瑞星2006防火墙\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Distributed Link Tracking ClientXyfne2 / ServiceXyfne2][Stopped/Auto Start]
<><N/A>
[STI Simulator / STI Simulator][Stopped/Auto Start]
<><N/A>
[VMware Authorization Servicec / VMware Authorization Servicec][Stopped/Auto Start]
<><N/A>
[Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start]
<D:\WINDOWS\System32\svchost.exe -k netsvcs-->D:\WINDOWS\System32\mspmsnsv.dll><Microsoft Corporation>
==================================
驱动程序
[BaseTDI / BaseTDI][Running/Auto Start]
<\??\D:\WINDOWS\System32\drivers\basetdi.sys><Rising>
[C-Media WDM Audio Interface / cmuda][Stopped/Manual Start]
<system32\drivers\cmuda.sys><C-Media Inc>
[HookUrl / HookUrl][Running/Auto Start]
<\??\G:\杀毒工具\瑞星2006防火墙\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[kl1 / kl1][Running/Boot Start]
<\SystemRoot\System32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
<\??\D:\WINDOWS\System32\drivers\klif.sys><Kaspersky Lab>
[kmsinput / kmsinput][Stopped/Manual Start]
<\??\D:\WINDOWS\System32\drivers\kmsinput.sys><N/A>
[KNetWch / KNetWch][Running/System Start]
<\??\G:\金山新毒霸\KNetWch.SYS><金山电脑公司>
[KWatch / KWatch][Stopped/Manual Start]
<\??\D:\WINDOWS\System32\drivers\KWatch.Sys><Kingsoft Corporation>
[KWatch2 / KWatch2][Stopped/Manual Start]
<\??\D:\WINDOWS\System32\drivers\KWatch2.sys><Kingsoft Antivirus>
[mProcRs / mProcRs][Running/Auto Start]
<\??\g:\杀毒工具\瑞星2006防火墙\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[npkcrypt / npkcrypt][Running/Auto Start]
<\??\G:\QQ\npkcrypt.sys><INCA Internet Co., Ltd.>
[NPPTNT / NPPTNT][Running/System Start]
<\??\D:\WINDOWS\System32\npptNT.sys><INCA Internet Co., Ltd.>
[nv / nv][Running/Manual Start]
<System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Service for NVIDIA(R) nForce(TM) Audio Enumerator / nvax][Running/Manual Start]
<system32\drivers\nvax.sys><NVIDIA Corporation>
[NVIDIA nForce MCP Networking Adapter Driver / NVENET][Running/Manual Start]
<System32\DRIVERS\NVENET.sys><NVIDIA Corporation>
[nvidesm / nvidesm][Running/Boot Start]
<\SystemRoot\system32\drivers\nvidesm.sys><NVIDIA Corporation>
[Service for NVIDIA(R) nForce(TM) Audio / nvnforce][Running/Manual Start]
<system32\drivers\nvapu.sys><NVIDIA Corporation>
[nVidia WDM TVAudio Crossbar / nvtvSND][Stopped/Auto Start]
<System32\DRIVERS\nvtvsnd.sys><N/A>
[NVIDIA nForce AGP Bus Filter / nv_agp][Running/Boot Start]
<\SystemRoot\System32\DRIVERS\nv_agp.sys><NVIDIA Corporation>
[SoC PC-Camera / PAC207][Stopped/Manual Start]
<System32\DRIVERS\pfc027.sys><>
[PNP29141 / PNP29141][Running/Boot Start]
<\SystemRoot\System32\Drivers\pnp29141.sys><Anti Driver>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[R2A / R2A][Stopped/Manual Start]
<\??\D:\WINDOWS\System32a2.sys><N/A>
[WAN 微型端口 (PPP over Ethernet 协议) / RMSPPPOE][Running/Manual Start]
<System32\DRIVERS\RMSPPPOE.SYS><Robert Schlabbach>
[RsFwDrv / RsFwDrv][Running/Auto Start]
<\??\G:\杀毒工具\瑞星2006防火墙\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[Secdrv / Secdrv][Running/Auto Start]
<System32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[StyleXPHelper / StyleXPHelper][Running/System Start]
<\??\D:\Program Files\TGTSoft\StyleXP\StyleXPHelper.exe><Windows (R) 2000 DDK provider>
[SVKP / SVKP][Stopped/Auto Start]
<\??\D:\WINDOWS\System32\SVKP.sys><N/A>
[TSP / TSP][Stopped/Manual Start]
<\??\D:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Sony Ericsson W700 Driver driver (WDM) / W700bus][Stopped/Manual Start]
<System32\DRIVERS\W700bus.sys><MCCI>
[Sony Ericsson W700 USB WMC Modem Filter / W700mdfl][Stopped/Manual Start]
<System32\DRIVERS\W700mdfl.sys><MCCI>
[Sony Ericsson W700 USB WMC Modem Driver / W700mdm][Stopped/Manual Start]
<System32\DRIVERS\W700mdm.sys><MCCI>
[Sony Ericsson W700 USB WMC Device Management Drivers (WDM) / W700mgmt][Stopped/Manual Start]
<System32\DRIVERS\W700mgmt.sys><MCCI>
[Sony Ericsson W700 USB WMC OBEX Interface / W700obex][Stopped/Manual Start]
<System32\DRIVERS\W700obex.sys><MCCI>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
<System32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[NTPort Library Driver / zntport][Stopped/Auto Start]
<\??\D:\WINDOWS\System32\zntport.sys><N/A>
[USB PC Camera 301P / ZSMC301b][Stopped/Manual Start]
<System32\Drivers\usbVM31b.sys><VM>
==================================
浏览器加载项
[浩方对战平台]
{0A155D3C-68E2-4215-A47A-E800A446447A} <E:\浩方平台\HFGameOPT\HFGameOPT\GameClient.exe, 上海浩方在线信息技术有限公司>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <G:\QQ\新版qq\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <, N/A>
[CaiFuCOM Class]
{C1F0024B-8278-4999-B7E6-2718426D9FE6} <D:\Program Files\财富通\caifu.dll, N/A>
[PGEdit Class]
{2BFAA61B-5C83-4865-8281-D8BDBF863061} <D:\WINDOWS\Downloaded Program Files\PG_ATL_Edit.dll, 银联网络支付集团有限公司>
[VnetAnprIns Class]
{74447F9C-5691-4A9A-8BE4-564092E40B03} <D:\WINDOWS\Downloaded Program Files\anprins.dll, 中国电信股份有限公司>
[Tencent Safety Online Base Module]
{C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <D:\WINDOWS\DOWNLO~1\TSOBase.ocx, Tencent Corporation>
[上传到QQ网络硬盘]
<G:\QQ\新版qq\AddToNetDisk.htm, N/A>
[使用网际快车下载]
<G:\下载工具\网际快车1.4官方正式版+完美破解注册\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
<G:\下载工具\网际快车1.4官方正式版+完美破解注册\FlashGet\jc_all.htm, N/A>
[添加到QQ自定义面板]
<G:\QQ\新版qq\AddPanel.htm, N/A>
[添加到QQ表情]
<G:\QQ\新版qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<G:\QQ\新版qq\SendMMS.htm, N/A>
==================================