瑞星的病毒档案里说这是个WINDOWS下的木马程序。它不是在启动的时候出现的，而是在不察觉的时候不知道通过那个程序打开了，然后瑞星的实时监控就删除掉。可是杀不干净，可以看到他生成了eraseme_后面是五位数字的一个程序。这如何是好呀？请求高手的援助！
处理结果 发现日期 扫描方式 路径 文件 病毒来源
删除成功 05-12-05 13:28 实时监控 C:\WINNT eraseme_85022.exe\本机
删除成功 05-12-07 21:29 实时监控 C:\WINNT eraseme_62084.exe\本机
删除成功 05-12-08 13:36 实时监控 C:\WINNT eraseme_85235.exe\本机
删除成功 05-12-11 12:38 实时监控 C:\WINNT eraseme_76406.exe\本机
删除成功 05-12-11 16:42 实时监控 C:\WINNT eraseme_67160.exe\本机
删除成功 05-12-12 17:57 实时监控 C:\WINNT eraseme_56036.exe\本机
删除成功 05-12-17 18:56 实时监控 C:\WINNT eraseme_85451.exe\本机
删除成功 05-12-17 18:57 实时监控 C:\WINNT eraseme_43428.exe\本机
删除成功 05-12-18 13:22 实时监控 C:\WINNT eraseme_46555.exe\本机
删除成功 05-12-18 14:04 实时监控 C:\WINNT eraseme_20333.exe\本机
删除成功 05-12-18 16:46 实时监控 C:\WINNT eraseme_24244.exe\本机
删除成功 05-12-19 12:49 实时监控 C:\WINNT eraseme_14752.exe\本机
删除成功 05-12-20 10:25 实时监控 C:\WINNT eraseme_40332.exe\本机
删除成功 05-12-20 15:41 实时监控 C:\WINNT eraseme_13725.exe\本机
删除成功 05-12-20 18:12 实时监控 C:\WINNT eraseme_74180.exe\本机
删除成功 05-12-20 18:36 实时监控 C:\WINNT eraseme_78834.exe\本机
删除成功 05-12-20 21:22 实时监控 C:\WINNT eraseme_13348.exe\本机
我按照BlackStone教我的用Autoruns保存一个日志发上来，如下：
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ NvCplDaemon NVIDIA Taskbar Utility Library NVIDIA Corporation c:\winnt\system32\nvqtwk.dll
+ nwiz NVIDIA nView Control Panel, Version 28.32 NVIDIA Corporation c:\winnt\system32\nwiz.exe
+ RavMon RavMon Rising realtime monitor Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravmon.exe
+ RavTimer RavTimer Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravtimer.exe
+ RavTray RavNet Tray Rising c:\program files\rising\rav\ravtray.exe
+ SKYNET Personal FireWall 天网防火墙个人版 广州众达天网技术有限公司 d:\program files\skynet\firewall\pfw.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Adobe.Acrobat.ContextMenu Adobe Acrobat Context Menu Adobe Systems Inc. c:\program files\adobe\acrobat 7.0\acrobat elements\contextmenu.dll
+ Desktop Explorer NVIDIA nView Control Panel, Version 28.32 NVIDIA Corporation c:\winnt\system32\nvshell.dll
+ Desktop Explorer Menu NVIDIA nView Control Panel, Version 28.32 NVIDIA Corporation c:\winnt\system32\nvshell.dll
+ Display Panning CPL Extension File not found: deskpan.dll
+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve, Inc. c:\winnt\system32\hticons.dll
+ mp3infp mp3infp DLL win32lab.com c:\winnt\system32\mp3infp.dll
+ PicaView PicaView 系统扩展 DLL ACD Systems, Ltd. d:\program files\acdsee\picaview.dll
+ PowerWord ExplorerBar PowerWord Web Dictionary Engine 金山软件股份有限公司 f:\program files\kingsoft\powerword 2003\xdictexb.dll
+ RISING Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\winnt\system32\ravext.dll
+ Shell Extensions for RealOne Player RealPlayer Shell Extensions RealNetworks, Inc. c:\program files\real\realplayer\rpshell.dll
+ WinRAR shell extension f:\program files\winrar\rarext.dll
HKLM\Software\Classes\Folder\Shellex\ColumnHandlers
+ mp3infp mp3infp DLL win32lab.com c:\winnt\system32\mp3infp.dll
+ PDF Shell Extension PDF Shell Extension Adobe Systems, Inc. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ AcroIEHlprObj Class Adobe Acrobat IE Helper Version 7.0 for ActiveX Adobe Systems Incorporated c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
+ AcroIEToolbarHelper Class Adobe IE plugin Adobe Systems Incorporated c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.dll
+ Google Toolbar Helper Google IE 客户端工具栏 Google Inc. c:\program files\google\googletoolbar2.dll
+ IeCatch2 Class jccatch Module Amaze Soft f:\program files\flashget-v1.71\jccatch.dll
+ LF_BHO Class LightFrameIECOM Module c:\winnt\system32\lightframe3iecom.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ FlashGet Bar FlashGet IE Bar Amaze Soft f:\program files\flashget-v1.71\fgiebar.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ &FlashGet FlashGet Amaze Soft f:\program files\flashget-v1.71\flashget.exe
+ @shdoclc.dll,-864 c:\winnt\web\related.htm
+ 南方证券交易客户端 d:\tdxwremote_nanfang\nftradeclient.exe
HKLM\System\CurrentControlSet\Services
+ NVSvc NVIDIA Driver Helper Service, Version 28.32 NVIDIA Corporation c:\winnt\system32\nvsvc32.exe
+ pxlmdl c:\winnt\nvidcgui.exe
+ RavService 瑞星杀毒软件网络版客户端通讯代理 Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravservice.exe
+ RsCCenter CCenter Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ccenter.exe
+ RsRavMon RavMon Beijing Rising Technology Co., Ltd. c:\program files\rising\rav\ravmond.exe
HKLM\System\CurrentControlSet\Services
+ BaseTDI basetdi Rising c:\winnt\system32\drivers\basetdi.sys
+ dmio NT Disk Manager I/O Driver VERITAS Software Corp. c:\winnt\system32\drivers\dmio.sys
+ dmload NT Disk Manager Startup Driver VERITAS Software Corp. c:\winnt\system32\drivers\dmload.sys
+ ExpScaner ExpScan.sys c:\program files\rising\rav\expscan.sys
+ HookCont TDI HOOK Driver Rising tech Co. ltd c:\program files\rising\rav\hookcont.sys
+ HookReg c:\program files\rising\rav\hookreg.sys
+ HookSys 瑞星 c:\program files\rising\rav\hooksys.sys
+ kmsinput c:\winnt\system32\drivers\kmsinput.sys
+ npkcrypt nProtect KeyCrypt Driver INCA Internet Co., Ltd. d:\program files\tencent\qq\npkcrypt.sys
+ npkycryp File not found: D:\Program Files\Tencent\qq\npkycryp.sys
+ nv NVIDIA Compatible Windows 2000 Miniport Driver, Version 28.32 NVIDIA Corporation c:\winnt\system32\drivers\nv4_mini.sys
+ Ptilink Direct Parallel Link Driver Parallel Technologies, Inc. c:\winnt\system32\drivers\ptilink.sys
+ rtl8139 NDIS 5.0 driver Realtek Semiconductor Corporation c:\winnt\system32\drivers\rtl8139.sys
+ rtport Generic Port I/O Windows (R) 2000 DDK provider c:\winnt\system32\drivers\rtport.sys
+ SKNFW c:\winnt\system32\drivers\sknfw.sys
+ viaagp VIA NT AGP Filter VIA Technologies, Inc. c:\winnt\system32\drivers\viaagp1.sys
+ viaagp1 VIA NT AGP Filter VIA Technologies, Inc. c:\winnt\system32\drivers\viaagp1.sys
+ viafilter VIA USB Filter Driver VIA Technologies, Inc. c:\winnt\system32\drivers\viausb.sys
+ viaide VIA PCI IDE Bus Driver VIA Technologies, Inc. c:\winnt\system32\drivers\viaide.sys
+ VIAPFD VIA PFD driver VIA Technologies. Inc. c:\winnt\system32\drivers\viapfd.sys
+ VIAudio VIA AC'97 Enhanced Audio WDM Driver VIA Technologies, Inc. c:\winnt\system32\drivers\viaudio.sys
+ ZSMC301b Video streaming and Capture Device Driver VM c:\winnt\system32\drivers\usbvm31b.sys
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls
+ APIHookDll.dll c:\winnt\system32\apihookdll.dll
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
+ Adobe PDF Port Acrobat ? PDF Port Adobe Systems Incorporated. c:\winnt\system32\adobepdf.dll
这个病毒现在残留在我的电脑将近一个月了，希望能够得到高手们的帮助，彻底的解决它。先谢谢了！
