瑞星卡卡安全论坛

斑竹，前期系统升级瑞星过程中电脑出现蓝屏问题 ，有时会出现没有瑞星监控小伞图标，手动打开后几分钟又自动收伞（红色），按照斑竹相应帖子采取了对应措施：
1。使用“解决蓝屏问题.bat”并升级了瑞星到最新版本。
2。使用了“木马群处理程序.bat”后升级了瑞星到最新版本。
3。Adobe Flash Player漏洞补丁也打了。
4。正下载微软最新的Service Pack 补丁包 Service Pack 3。

蓝屏问题不再出现，但仍有见小伞打不开问题。

系统日志扫描如附件所示。

请斑竹帮我瞅瞅是否还有什么隐藏问题没有消除，谢谢！

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

附件: SREngLOG.log

天月版主  又有木马群更新了  貌似 有新变种了 
这个太壮观了

你有不指点我？？？？

由于文件太多 又没有版模  等版主来再解决
直接给你指出问题
文件和注册表：
    <{398C9B84-4EF7-47B5-9862-DE29543B3C42}><>  [N/A]
    <{7C8D1401-A58D-A81C-CD24-A5915C4517C7}><C:\WINDOWS\system32\mnmhgsrv.dll>  [File is missing]
    <{55694105-5108-9405-3695-954187462155}><C:\WINDOWS\system32\mpwdeapi.dll>  [File is missing]
    <{528DF602-9541-A985-210A-984A698C6F25}><C:\WINDOWS\system32\ptjhehlp.dll>  []
    <{4C648541-1025-9650-9057-6541258720C4}><C:\WINDOWS\system32\mndhddwd.dll>  [File is missing]
    <{33512378-9874-5641-1025-985420368733}><C:\WINDOWS\system32\oswxcttb.dll>  [File is missing]
    <{AA59145F-315D-BC23-AC1F-145DF81A34AA}><C:\WINDOWS\system32\zyzxjime.dll>  [File is missing]
    <{5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5}><C:\WINDOWS\system32\oohxdbyt.dll>  [File is missing]
    <{33496778-0658-40bc-8352-a8f884ca282b}><C:\WINDOWS\system32\MMKAFNFW1095.dll>  [File is missing]
    <{18093456-9012-4568-9076-908765467181}><C:\WINDOWS\system32\tisqatyu.dll>  [File is missing]
    <{2D698451-2015-6358-9871-2015987452D2}><C:\WINDOWS\system32\apzhbtde.dll>  []
    <{22596546-2036-9451-6058-658402589722}><C:\WINDOWS\system32\opshbbty.dll>  [File is missing]
    <{EA5D4B0E-B8CE-4761-8C7E-5D26369F0EC6}><C:\WINDOWS\system32\fsrgeb.dll>  [File is missing]
    <{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}><C:\WINDOWS\system32\jggtsr.dll>  [File is missing]
    <{14698742-2059-3025-9058-954023874141}><C:\WINDOWS\system32\jkhxaklo.dll>  [File is missing]
    <{35671234-7890-ABCD-CDEF-567801237653}><C:\WINDOWS\system32\yxcschlp.dll>  []
    <{4A069845-2036-6084-9054-6087502480A4}><>  [N/A]
    <{81954FAC-1023-154F-895A-1458258AD818}><>  [N/A]
    <{83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38}><C:\WINDOWS\system32\yxfhcjpg.dll>  [File is missing]
    <{25FD6584-698F-BCD2-602C-698745210352}><C:\WINDOWS\system32\rijxbkin.dll>  []
    <{13FD5987-65D2-C58D-D87E-987451F12531}><>  [N/A]
    <{37AC9076-C898-B098-D098-A18319080973}><C:\WINDOWS\system32\nhmxcjkl.dll>  [File is missing]
    <{4A698102-5904-AFD0-20DF-CD1A65829CA4}><C:\WINDOWS\system32\zycbdime.dll>  [File is missing]
    <{4F4F0064-71E0-4f0d-0017-708476C7815F}><C:\WINDOWS\system32\midimaptl.dll>  [File is missing]
    <{C5E87A05-F463-4841-B19E-DD3EC3862368}><>  [N/A]
    <{EE12D60D-AD9A-4095-B839-3BE6862679FD}><>  [N/A]
    <{A45B2C37-01D0-4D3E-BE5E-CC119B17BE9E}><>  [N/A]
    <{43512378-9874-5641-1025-985420368734}><C:\WINDOWS\system32\oswxdttb.dll>  [File is missing]
    <{d6763cab-b46e-4f7f-8347-6f098a83a164}><C:\WINDOWS\system32\MMKAFNFW1097.dll>  [File is missing]
    <{5A069845-2036-6084-9054-6087502480A5}><C:\WINDOWS\system32\ozfyebyt.dll>  [File is missing]
    <{8AD0F1B1-990D-4F52-A33D-2837E43CEF58}><C:\Program Files\Internet Explorer\PLUGINS\DosSys08.Sys>  [File is missing]
    <{4F4F0064-71E0-4f0d-0025-708476C7815F}><C:\WINDOWS\system32\midimapfs2.dll>  [File is missing]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Science and Technology Corporation Limited]
    <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    <{9490415F-65F8-B5C5-D8BA-9405FB120549}><C:\WINDOWS\system32\yzztimsn.dll>  [File is missing]
    <{4629FF4F-ACDB-5C90-A098-FACB3456A264}><>  [N/A]
    <{67FD640A-158F-48AC-FD14-1597F14A9776}><C:\WINDOWS\system32\mndsfsrv.dll>  [File is missing]
    <{50940F85-F015-14F1-A05F-F69858AC6D05}><>  [N/A]
    <{470165F1-9F65-569F-F895-F14F58F41074}><C:\WINDOWS\system32\lofsdjbo.dll>  [File is missing]
    <{3E035987-F585-68D1-AC28-98FA58E459E3}><C:\WINDOWS\system32\apfocdet.dll>  [File is missing]
    <{6319A1F1-9410-9654-3201-345FFA349136}><C:\WINDOWS\system32\zywmfime.dll>  [File is missing]
    <{91698482-6555-3666-1222-954784129019}><>  [N/A]
    <{70AF1289-F140-A140-D012-C1458759FC07}><>  [N/A]
    <{32023698-6984-8541-9654-698745012523}><C:\WINDOWS\system32\skqncbib.dll>  [File is missing]
    <{29109876-7619-9101-7012-901938475192}><C:\WINDOWS\system32\ietzbpaq.dll>  [File is missing]
    <{2A095412-A568-B258-C587-D148E148F0A2}><C:\WINDOWS\system32\cdwsbkop.dll>  [File is missing]
    <{4F4F0064-71E0-4f0d-0012-708476C7815F}><C:\WINDOWS\system32\midimapjr.dll>  [File is missing]
    <{28766E1C-74B0-4417-8C75-F12AE309EF35}><C:\WINDOWS\system32\wzcfsw.dll>  [File is missing]
    <{18e64250-19a8-4d10-828f-30e101a22291}><C:\WINDOWS\system32\MMBAIKOK1092.dll>  [File is missing]
    <{8c3dd05d-a6a1-4cb5-a714-94be3c3b4cd0}><C:\WINDOWS\system32\MMHADPQG1091.dll>  [File is missing]
    <{d592daa6-9b5e-416d-973a-d76c53183e7e}><C:\WINDOWS\system32\MMMHXGGD1062.dll>  [File is missing]
    <{DC3D30AE-0380-4151-8934-EE98A34B0370}><C:\WINDOWS\system32\mfdesy.dll>  [File is missing]
    <{461D2AB4-29A5-45C2-9134-D52272D3DE38}><C:\WINDOWS\system32\rfdswc.dll>  [File is missing]
    <{28EB3777-3E23-4E72-8449-A992D09D24C3}><C:\WINDOWS\system32\zefdst.dll>  [File is missing]
    <{5E907A48-400E-4EA8-9792-FFAE052D59E9}><C:\WINDOWS\system32\pedadt.dll>  [File is missing]
    <{EB71E0B3-E97D-4D30-8733-E28266467617}><C:\WINDOWS\system32\wyhesm.dll>  []
    <{84143967-B645-4BFF-B873-DA1DC886E9A7}><C:\WINDOWS\system32\cedafb.dll>  [File is missing]
    <{1DB3C525-5271-46F7-887A-D4E1ADAA7632}><C:\WINDOWS\system32\hfrdzx.dll>  [File is missing]
    <{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}><C:\WINDOWS\system32\wyrsdj.dll>  [File is missing]
    <{8C41B7F7-3168-400D-A702-0E7EFE0BA304}><C:\WINDOWS\system32\sgrefg.dll>  [File is missing]
    <{F99DEFDD-200B-4410-B572-E90883D527D2}><C:\WINDOWS\system32\wrqszl.dll>  [File is missing]
    <{91954FAC-1023-154F-895A-1458258AD819}><C:\WINDOWS\system32\ypdjgbmp.dll>  []
    <{4D165A2A-4BC1-4CA8-8299-08E05AAAB5A4}><C:\WINDOWS\system32\tdggrz.dll>  [File is missing]
    <{6A041F13-A111-12A3-B0CF-F99818AA68A6}><C:\WINDOWS\system32\zxmscwin.dll>  []
<tbdxlvru><C:\WINDOWS\bxvulvdn.exe>  [File is missing]
    <fewqickd><C:\WINDOWS\fewqickd.exe>  [File is missing]
    <fmschif><C:\WINDOWS\fmschif.exe>  [File is missing]
  <virustrj><C:\WINDOWS\temp\b.bat>  []
    <midimaptl><C:\WINDOWS\system32\midimaptl.dll>  [File is missing]
    <midimapfs2><C:\WINDOWS\system32\midimapfs2.dll>  [File is missing]
    <midimapjr><C:\WINDOWS\system32\midimapjr.dll>  [File is missing]
================================================
服务：
[CPUSpeed / CPUSpeed][Running/Auto Start]
  <C:\WINDOWS\system32\ntd.exe><N/A>
===========================================
驱动程序：
[0ge4c / 0ge4cp][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\0ge4cp.sys><N/A>
[11dee008052a8ca5 / 11dee008052a8ca5][Stopped/Manual Start]
  <\??\C:\11dee008052a8ca5.dat><N/A>
[144a3c0866802b4a / 144a3c0866802b4a][Stopped/Manual Start]
  <\??\C:\144a3c0866802b4a.dat><N/A>
[150434bc83fd8069 / 150434bc83fd8069][Stopped/Manual Start]
  <\??\C:\150434bc83fd8069.dat><N/A>
[221c44182a74d003 / 221c44182a74d003][Stopped/Manual Start]
  <\??\C:\221c44182a74d003.dat><N/A>
[32c31e60911b2fb9 / 32c31e60911b2fb9][Stopped/Manual Start]
  <\??\C:\32c31e60911b2fb9.dat><N/A>
[34146a74fedd736f / 34146a74fedd736f][Stopped/Manual Start]
  <\??\C:\34146a74fedd736f.dat><N/A>
[3871c4e839e0e1db / 3871c4e839e0e1db][Stopped/Manual Start]
  <\??\C:\3871c4e839e0e1db.dat><N/A>
[3de3e2509f7f00d9 / 3de3e2509f7f00d9][Stopped/Manual Start]
  <\??\C:\3de3e2509f7f00d9.dat><N/A>
[41998694fb1738bf / 41998694fb1738bf][Stopped/Manual Start]
  <\??\C:\41998694fb1738bf.dat><N/A>
[4319c8c476a6c95f / 4319c8c476a6c95f][Stopped/Manual Start]
  <\??\C:\4319c8c476a6c95f.dat><N/A>
[45a31a9853233954 / 45a31a9853233954][Stopped/Manual Start]
  <\??\C:\45a31a9853233954.dat><N/A>
[4e2aca1c9a3707f3 / 4e2aca1c9a3707f3][Stopped/Manual Start]
  <\??\C:\4e2aca1c9a3707f3.dat><N/A>
[6a61f6d85ab73ab4 / 6a61f6d85ab73ab4][Stopped/Manual Start]
  <\??\C:\6a61f6d85ab73ab4.dat><N/A>
[6bfec438f5fbcf47 / 6bfec438f5fbcf47][Stopped/Manual Start]
  <\??\C:\6bfec438f5fbcf47.dat><N/A>
[6fb4687c1355615e / 6fb4687c1355615e][Stopped/Manual Start]
  <\??\C:\6fb4687c1355615e.dat><N/A>
[6ff7570c5522277e / 6ff7570c5522277e][Stopped/Manual Start]
  <\??\C:\6ff7570c5522277e.dat><N/A>
[7934c720404744f3 / 7934c720404744f3][Stopped/Manual Start]
  <\??\C:\7934c720404744f3.dat><N/A>
[8340c97c52033ec9 / 8340c97c52033ec9][Stopped/Manual Start]
  <\??\C:\8340c97c52033ec9.dat><N/A>
[9400ea181399b7df / 9400ea181399b7df][Stopped/Manual Start]
  <\??\C:\9400ea181399b7df.dat><N/A>
[a26a458825adb0c7 / a26a458825adb0c7][Stopped/Manual Start]
  <\??\C:\a26a458825adb0c7.dat><N/A>
[a74a5c8837742182 / a74a5c8837742182][Stopped/Manual Start]
  <\??\C:\a74a5c8837742182.dat><N/A>
[b9dbde5cf6b845c9 / b9dbde5cf6b845c9][Stopped/Manual Start]
  <\??\C:\b9dbde5cf6b845c9.dat><N/A>
[bf7fc0c0eb470a07 / bf7fc0c0eb470a07][Stopped/Manual Start]
  <\??\C:\bf7fc0c0eb470a07.dat><N/A>
[cac78588ab0a9b63 / cac78588ab0a9b63][Stopped/Manual Start]
  <\??\C:\cac78588ab0a9b63.dat><N/A>
[cddd41681f3788f8 / cddd41681f3788f8][Stopped/Manual Start]
  <\??\C:\cddd41681f3788f8.dat><N/A>
[CMB8100 / CMB8100][Running/Auto Start]
  <\??\C:\WINDOWS\system32\Drivers\CertClient.dat><N/A>
[CMBProtector / CMBProtector][Running/Auto Start]
  <\??\C:\WINDOWS\system32\Drivers\CMBProtector.dat><N/A>
[dcc9596421fdcbd8 / dcc9596421fdcbd8][Stopped/Manual Start]
  <\??\C:\dcc9596421fdcbd8.dat><N/A>
[ddf87a3cf1a0e21b / ddf87a3cf1a0e21b][Stopped/Manual Start]
  <\??\C:\ddf87a3cf1a0e21b.dat><N/A>
[Intel(R) PRO Network Connection Driver / E100B][Running/Manual Start]
  <system32\DRIVERS\e100b325.sys><Intel Corporation>
[e59d54a03017309e / e59d54a03017309e][Stopped/Manual Start]
  <\??\C:\e59d54a03017309e.dat><N/A>
[eaaff848eb18d4e8 / eaaff848eb18d4e8][Stopped/Manual Start]
  <\??\C:\eaaff848eb18d4e8.dat><N/A>
[ec8400e8c460626e / ec8400e8c460626e][Stopped/Manual Start]
  <\??\C:\ec8400e8c460626e.dat><N/A>
[f69001e4fc883093 / f69001e4fc883093][Stopped/Manual Start]
  <\??\C:\f69001e4fc883093.dat><N/A>
[zctp / zctp][Stopped/Auto Start]
  <\??\C:\DOCUME~1\HELENH~1\LOCALS~1\Temp\tmp18.tmp><N/A>
===========================================
浏览器加载项
[]
  {25FD6584-698F-BCD2-602C-698745210352} <C:\WINDOWS\system32\rijxbkin.dll, N/A>
[]
  {2D698451-2015-6358-9871-2015987452D2} <C:\WINDOWS\system32\apzhbtde.dll, N/A>
[]
  {35671234-7890-ABCD-CDEF-567801237653} <C:\WINDOWS\system32\yxcschlp.dll, N/A>
[]
  {528DF602-9541-A985-210A-984A698C6F25} <C:\WINDOWS\system32\ptjhehlp.dll, N/A>
[]
  {6A041F13-A111-12A3-B0CF-F99818AA68A6} <C:\WINDOWS\system32\zxmscwin.dll, N/A>
[]
  {91954FAC-1023-154F-895A-1458258AD819} <C:\WINDOWS\system32\ypdjgbmp.dll, N/A>
[]
  {14698742-2059-3025-9058-954023874141} <C:\WINDOWS\system32\jkhxaklo.dll, N/A>
[]
  {18093456-9012-4568-9076-908765467181} <C:\WINDOWS\system32\tisqatyu.dll, N/A>
[]
  {22596546-2036-9451-6058-658402589722} <C:\WINDOWS\system32\opshbbty.dll, N/A>
[]
  {25FD6584-698F-BCD2-602C-698745210352} <C:\WINDOWS\system32\rijxbkin.dll, N/A>
[]
  {29109876-7619-9101-7012-901938475192} <C:\WINDOWS\system32\ietzbpaq.dll, N/A>
[]
  {2A095412-A568-B258-C587-D148E148F0A2} <C:\WINDOWS\system32\cdwsbkop.dll, N/A>
[]
  {32023698-6984-8541-9654-698745012523} <C:\WINDOWS\system32\skqncbib.dll, N/A>
[]
  {33512378-9874-5641-1025-985420368733} <C:\WINDOWS\system32\oswxcttb.dll, N/A>
[]
  {35671234-7890-ABCD-CDEF-567801237653} <C:\WINDOWS\system32\yxcschlp.dll, N/A>
[]
  {37AC9076-C898-B098-D098-A18319080973} <C:\WINDOWS\system32\nhmxcjkl.dll, N/A>
[]
  {3E035987-F585-68D1-AC28-98FA58E459E3} <C:\WINDOWS\system32\apfocdet.dll, N/A>
[]
  {43512378-9874-5641-1025-985420368734} <C:\WINDOWS\system32\oswxdttb.dll, N/A>
[]
  {470165F1-9F65-569F-F895-F14F58F41074} <C:\WINDOWS\system32\lofsdjbo.dll, N/A>
[]
  {4A698102-5904-AFD0-20DF-CD1A65829CA4} <C:\WINDOWS\system32\zycbdime.dll, N/A>
[]
  {4C648541-1025-9650-9057-6541258720C4} <C:\WINDOWS\system32\mndhddwd.dll, N/A>
[]
  {4FD45A54-9875-698F-E56E-65102358FDF4} <C:\WINDOWS\system32\apsgdjba.dll, N/A>
[]
  {528DF602-9541-A985-210A-984A698C6F25} <C:\WINDOWS\system32\ptjhehlp.dll, N/A>
[]
  {55694105-5108-9405-3695-954187462155} <C:\WINDOWS\system32\mpwdeapi.dll, N/A>
[]
  {5A069845-2036-6084-9054-6087502480A5} <C:\WINDOWS\system32\ozfyebyt.dll, N/A>
[]
  {5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5} <C:\WINDOWS\system32\oohxdbyt.dll, N/A>
[]
  {6319A1F1-9410-9654-3201-345FFA349136} <C:\WINDOWS\system32\zywmfime.dll, N/A>
[]
  {67FD640A-158F-48AC-FD14-1597F14A9776} <C:\WINDOWS\system32\mndsfsrv.dll, N/A>
[]
  {6A041F13-A111-12A3-B0CF-F99818AA68A6} <C:\WINDOWS\system32\zxmscwin.dll, N/A>
[]
  {7C8D1401-A58D-A81C-CD24-A5915C4517C7} <C:\WINDOWS\system32\mnmhgsrv.dll, N/A>
[]
  {83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38} <C:\WINDOWS\system32\yxfhcjpg.dll, N/A>
[]
  {8AD0F1B1-990D-4F52-A33D-2837E43CEF58} <C:\Program Files\Internet Explorer\PLUGINS\DosSys08.Sys, N/A>
[]
  {91954FAC-1023-154F-895A-1458258AD819} <C:\WINDOWS\system32\ypdjgbmp.dll, N/A>
[]
  {9490415F-65F8-B5C5-D8BA-9405FB120549} <C:\WINDOWS\system32\yzztimsn.dll, N/A>
[]
  {AA59145F-315D-BC23-AC1F-145DF81A34AA} <C:\WINDOWS\system32\zyzxjime.dll, N/A>
========================================

以上这些全部要清楚吗？

还有很多文件  我也不一一看了 只列出了大概  又没有版模
等版主来解决吧

1.建议使用XDelBox删除以下文件：(XDelBox1.6下载)
使用说明：删除时复制所有要删除文件的路径，在待删除文件列表里点击右键选择从剪贴板导入，导入后在要删除文件上点击右键，选择立刻重启删除，电脑会重启进入DOS界面进行删除操作。运行xdelbox前最好卸载所有可移动存储介质（包括U盘，MP3，手机存储卡等）。

c:\windows\system32\ntd.exe
c:\windows\system32\apzhbtde.dll
c:\windows\system32\ptjhehlp.dll
c:\windows\system32\rijxbkin.dll
c:\windows\system32\wyhesm.dll
c:\windows\system32\ypdjgbmp.dll
c:\windows\system32\yxcschlp.dll
c:\windows\system32\zxmscwin.dll
c:\windows\temp\b.bat
c:\windows\bxvulvdn.exe
c:\windows\fewqickd.exe
c:\windows\fmschif.exe
c:\windows\system32\mnmhgsrv.dll
c:\windows\system32\mpwdeapi.dll
c:\windows\system32\mndhddwd.dll
c:\windows\system32\oswxcttb.dll
c:\windows\system32\zyzxjime.dll
c:\windows\system32\oohxdbyt.dll
c:\windows\system32\mmkafnfw1095.dll
c:\windows\system32\tisqatyu.dll
c:\windows\system32\opshbbty.dll
c:\windows\system32\fsrgeb.dll
c:\windows\system32\jggtsr.dll
c:\windows\system32\jkhxaklo.dll
c:\windows\system32\yxfhcjpg.dll
c:\windows\system32\nhmxcjkl.dll
c:\windows\system32\zycbdime.dll
c:\windows\system32\midimaptl.dll
c:\windows\system32\oswxdttb.dll
c:\windows\system32\mmkafnfw1097.dll
c:\windows\system32\ozfyebyt.dll
c:\program files\internet explorer\plugins\dossys08.sys
c:\windows\system32\midimapfs2.dll
c:\windows\system32\yzztimsn.dll
c:\windows\system32\mndsfsrv.dll
c:\windows\system32\lofsdjbo.dll
c:\windows\system32\apfocdet.dll
c:\windows\system32\zywmfime.dll
c:\windows\system32\skqncbib.dll
c:\windows\system32\ietzbpaq.dll
c:\program files\idnkw\cnups.dll
c:\windows\system32\cdwsbkop.dll
c:\windows\system32\midimapjr.dll
c:\windows\system32\wzcfsw.dll
c:\windows\system32\mmbaikok1092.dll
c:\windows\system32\mmhadpqg1091.dll
c:\windows\system32\mmmhxggd1062.dll
c:\windows\system32\mfdesy.dll
c:\windows\system32\rfdswc.dll
c:\windows\system32\zefdst.dll
c:\windows\system32\pedadt.dll
c:\windows\system32\cedafb.dll
c:\windows\system32\hfrdzx.dll
c:\windows\system32\wyrsdj.dll
c:\windows\system32\sgrefg.dll
c:\windows\system32\wrqszl.dll
c:\windows\system32\tdggrz.dll
c:\windows\system32\drivers\0ge4cp.sys
c:\11dee008052a8ca5.dat
c:\144a3c0866802b4a.dat
c:\150434bc83fd8069.dat
c:\221c44182a74d003.dat
c:\32c31e60911b2fb9.dat
c:\34146a74fedd736f.dat
c:\3871c4e839e0e1db.dat
c:\3de3e2509f7f00d9.dat
c:\41998694fb1738bf.dat
c:\4319c8c476a6c95f.dat
c:\45a31a9853233954.dat
c:\4e2aca1c9a3707f3.dat
c:\6a61f6d85ab73ab4.dat
c:\6bfec438f5fbcf47.dat
c:\6fb4687c1355615e.dat
c:\6ff7570c5522277e.dat
c:\7934c720404744f3.dat
c:\8340c97c52033ec9.dat
c:\9400ea181399b7df.dat
c:\a26a458825adb0c7.dat
c:\a74a5c8837742182.dat
c:\b9dbde5cf6b845c9.dat
c:\docume~1\helenh~1\locals~1\temp\tmp18.tmp
c:\windows\system32\drivers\hdv32_c.sys
c:\f69001e4fc883093.dat
c:\ec8400e8c460626e.dat
c:\eaaff848eb18d4e8.dat
c:\e59d54a03017309e.dat
c:\ddf87a3cf1a0e21b.dat
c:\dcc9596421fdcbd8.dat
c:\cddd41681f3788f8.dat
c:\cddd41681f3788f8.dat
c:\cac78588ab0a9b63.dat
c:\bf7fc0c0eb470a07.dat
c:\windows\system32\apsgdjba.dll

2.删除重启后使用SREng修复下面各项：

    启动项目 －－ 注册表之如下项删除：
[{6A041F13-A111-12A3-B0CF-F99818AA68A6}] 
[{91954FAC-1023-154F-895A-1458258AD819}] 
[{EB71E0B3-E97D-4D30-8733-E28266467617}] 
[{70AF1289-F140-A140-D012-C1458759FC07}] 
[{91698482-6555-3666-1222-954784129019}] 
[{50940F85-F015-14F1-A05F-F69858AC6D05}] 
[{4629FF4F-ACDB-5C90-A098-FACB3456A264}] 
[{A45B2C37-01D0-4D3E-BE5E-CC119B17BE9E}] 
[{EE12D60D-AD9A-4095-B839-3BE6862679FD}] 
[{C5E87A05-F463-4841-B19E-DD3EC3862368}] 
[{13FD5987-65D2-C58D-D87E-987451F12531}] 
[{25FD6584-698F-BCD2-602C-698745210352}] 
[{81954FAC-1023-154F-895A-1458258AD818}] 
[{4A069845-2036-6084-9054-6087502480A4}] 
[{35671234-7890-ABCD-CDEF-567801237653}] 
[{2D698451-2015-6358-9871-2015987452D2}] 
[{528DF602-9541-A985-210A-984A698C6F25}] 
[{398C9B84-4EF7-47B5-9862-DE29543B3C42}] 
[virustrj]
[tbdxlvru]
[fewqickd]
[fmschif] 
[{7C8D1401-A58D-A81C-CD24-A5915C4517C7}] 
[{55694105-5108-9405-3695-954187462155}] 
[{4C648541-1025-9650-9057-6541258720C4}] 
[{33512378-9874-5641-1025-985420368733}] 
[{AA59145F-315D-BC23-AC1F-145DF81A34AA}] 
[{5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5}] 
[{33496778-0658-40bc-8352-a8f884ca282b}] 
[{18093456-9012-4568-9076-908765467181}] 
[{22596546-2036-9451-6058-658402589722}] 
[{EA5D4B0E-B8CE-4761-8C7E-5D26369F0EC6}] 
[{CAED0F3B-DF8B-4DBF-BB20-8DFBC3199068}] 
[{14698742-2059-3025-9058-954023874141}] 
[{83BA45AF-FAAA-CDDD-BEEE-BCDE1234AB38}] 
[{37AC9076-C898-B098-D098-A18319080973}] 
[{4A698102-5904-AFD0-20DF-CD1A65829CA4}] 
[{4F4F0064-71E0-4f0d-0017-708476C7815F}] 
[{43512378-9874-5641-1025-985420368734}] 
[{d6763cab-b46e-4f7f-8347-6f098a83a164}] 
[{5A069845-2036-6084-9054-6087502480A5}] 
[{8AD0F1B1-990D-4F52-A33D-2837E43CEF58}]
[{4F4F0064-71E0-4f0d-0025-708476C7815F}] 
[{9490415F-65F8-B5C5-D8BA-9405FB120549}] 
[{67FD640A-158F-48AC-FD14-1597F14A9776}] 
[{470165F1-9F65-569F-F895-F14F58F41074}] 
[{3E035987-F585-68D1-AC28-98FA58E459E3}] 
[{6319A1F1-9410-9654-3201-345FFA349136}] 
[{32023698-6984-8541-9654-698745012523}] 
[{29109876-7619-9101-7012-901938475192}] 
[Cnups] 
[{2A095412-A568-B258-C587-D148E148F0A2}] 
[{4F4F0064-71E0-4f0d-0012-708476C7815F}] 
[{28766E1C-74B0-4417-8C75-F12AE309EF35}] 
[{18e64250-19a8-4d10-828f-30e101a22291}] 
[{8c3dd05d-a6a1-4cb5-a714-94be3c3b4cd0}] 
[{d592daa6-9b5e-416d-973a-d76c53183e7e}] 
[{DC3D30AE-0380-4151-8934-EE98A34B0370}] 
[{461D2AB4-29A5-45C2-9134-D52272D3DE38}] 
[{28EB3777-3E23-4E72-8449-A992D09D24C3}] 
[{5E907A48-400E-4EA8-9792-FFAE052D59E9}] 
[{84143967-B645-4BFF-B873-DA1DC886E9A7}] 
[{1DB3C525-5271-46F7-887A-D4E1ADAA7632}] 
[{1E51C0FD-EE36-434B-AD2A-FD1FF3731C38}] 
[{8C41B7F7-3168-400D-A702-0E7EFE0BA304}] 
[{F99DEFDD-200B-4410-B572-E90883D527D2}] 
[{4D165A2A-4BC1-4CA8-8299-08E05AAAB5A4}] 
[midimaptl] 
[midimapfs2] 
[midimapjr] 

    启动项目 －－ 服务 －－ Win32服务应用程序之如下项删除：
[CPUSpeed / CPUSpeed] 

    启动项目 －－ 服务－－ 驱动程序之如下项删除：
[0ge4c / 0ge4cp] 
[11dee008052a8ca5 / 11dee008052a8ca5] 
[144a3c0866802b4a / 144a3c0866802b4a] 
[150434bc83fd8069 / 150434bc83fd8069] 
[221c44182a74d003 / 221c44182a74d003] 
[32c31e60911b2fb9 / 32c31e60911b2fb9] 
[34146a74fedd736f / 34146a74fedd736f] 
[3871c4e839e0e1db / 3871c4e839e0e1db] 
[3de3e2509f7f00d9 / 3de3e2509f7f00d9] 
[41998694fb1738bf / 41998694fb1738bf] 
[4319c8c476a6c95f / 4319c8c476a6c95f] 
[45a31a9853233954 / 45a31a9853233954] 
[4e2aca1c9a3707f3 / 4e2aca1c9a3707f3] 
[6a61f6d85ab73ab4 / 6a61f6d85ab73ab4] 
[6bfec438f5fbcf47 / 6bfec438f5fbcf47] 
[6fb4687c1355615e / 6fb4687c1355615e] 
[6ff7570c5522277e / 6ff7570c5522277e] 
[7934c720404744f3 / 7934c720404744f3] 
[8340c97c52033ec9 / 8340c97c52033ec9] 
[9400ea181399b7df / 9400ea181399b7df] 
[a26a458825adb0c7 / a26a458825adb0c7] 
[a74a5c8837742182 / a74a5c8837742182] 
[b9dbde5cf6b845c9 / b9dbde5cf6b845c9] 
[zctp / zctp] 
[Hdv32 / Hdv32]
[f69001e4fc883093 / f69001e4fc883093] 
[ec8400e8c460626e / ec8400e8c460626e] 
[eaaff848eb18d4e8 / eaaff848eb18d4e8] 
[e59d54a03017309e / e59d54a03017309e] 
[ddf87a3cf1a0e21b / ddf87a3cf1a0e21b] 
[dcc9596421fdcbd8 / dcc9596421fdcbd8] 
[cddd41681f3788f8 / cddd41681f3788f8] 
[cddd41681f3788f8 / cddd41681f3788f8] 
[cac78588ab0a9b63 / cac78588ab0a9b63] 
[bf7fc0c0eb470a07 / bf7fc0c0eb470a07] 

    系统修复－－　浏览器加载项之如下项删除：
[]    <C:\WINDOWS\system32\rijxbkin.dll>
[]    <C:\WINDOWS\system32\apzhbtde.dll>
[]    <C:\WINDOWS\system32\yxcschlp.dll>
[]    <C:\WINDOWS\system32\ptjhehlp.dll>
[]    <C:\WINDOWS\system32\zxmscwin.dll>
[]    <C:\WINDOWS\system32\ypdjgbmp.dll>
[]    <C:\WINDOWS\system32\zyzxjime.dll>
[]    <C:\WINDOWS\system32\yzztimsn.dll>
[]    <C:\WINDOWS\system32\ypdjgbmp.dll>
[]    <C:\Program Files\Internet Explorer\PLUGINS\DosSys08.Sys>
[]    <C:\WINDOWS\system32\yxfhcjpg.dll>
[]    <C:\WINDOWS\system32\mnmhgsrv.dll>
[]    <C:\WINDOWS\system32\zxmscwin.dll>
[]    <C:\WINDOWS\system32\mndsfsrv.dll>
[]    <C:\WINDOWS\system32\zywmfime.dll>
[]    <C:\WINDOWS\system32\oohxdbyt.dll>
[]    <C:\WINDOWS\system32\ozfyebyt.dll>
[]    <C:\WINDOWS\system32\mpwdeapi.dll>
[]    <C:\WINDOWS\system32\ptjhehlp.dll>
[]    <C:\WINDOWS\system32\apsgdjba.dll>
[]    <C:\WINDOWS\system32\mndhddwd.dll>
[]    <C:\WINDOWS\system32\zycbdime.dll>
[]    <C:\WINDOWS\system32\lofsdjbo.dll>
[]    <C:\WINDOWS\system32\oswxdttb.dll>
[]    <C:\WINDOWS\system32\apfocdet.dll>
[]    <C:\WINDOWS\system32\nhmxcjkl.dll>
[]    <C:\WINDOWS\system32\yxcschlp.dll>
[]    <C:\WINDOWS\system32\oswxcttb.dll>
[]    <C:\WINDOWS\system32\skqncbib.dll>
[]    <C:\WINDOWS\system32\apzhbtde.dll>
[]    <C:\WINDOWS\system32\cdwsbkop.dll>
[]    <C:\WINDOWS\system32\ietzbpaq.dll>
[]    <C:\WINDOWS\system32\rijxbkin.dll>
[]    <C:\WINDOWS\system32\rijxbkin.dll>
[]    <C:\WINDOWS\system32\opshbbty.dll>
[]    <C:\WINDOWS\system32\tisqatyu.dll>
[]    <C:\WINDOWS\system32\jkhxaklo.dll>

做完下载以下软件清理一次并更新杀毒软件至最新进行全盘杀毒一次

清理系统临时文件和IE临时文件夹
http://www.atribune.org/public-beta/ATF-Cleaner.exe
用金山清理专家清理恶意软件
http://www.duba.net/zt/ksc/down.shtml
下载 windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.zip

全部做完后请一定参考这里：http://bbs.ikaka.com/showtopic-8508653.aspx

将补丁打上，如果不打该补丁造成病毒反复感染后上来求助将不予理会。

前面也按照网上类似的提示进行操作，用SREng修复一些错误，用WINDOWS清理助手清理，也发现一些错误。
之后又按照斑竹的办法重新做了一次，部分问题已经被前面的步骤清理掉。
谢谢斑竹，并传上修复后日志，请斑竹再帮忙瞅瞅是否已经基本搞定，谢谢！

附件: SREngLOG.log

日志没有发现问题

斑竹，谢谢了

今早起来又发现一新问题，：“无法启动Outlook Express。应用程序无法打开Outlook Express邮件箱。计算机内存不足或磁盘已满。请与Microsoft支持部门联系以获取更多帮助。（0x8007007E,126）”

按“确定”后，又出现“MSOE.DLL无法初始化，Outlook Express无法启动。Outlook Express可能没有正确安装。”

已经升级了XP系统SP3补丁，请帮忙看怎么解决？谢谢！

卸掉SP3就没有问题了，晕，难道SP3不能装？

貌似系统文件有损坏~
你去拷贝修复系统文件~！