用Autoruns保存一个日志发上来
日志保存方法:选择File->Save菜单项
保存日志时注意选择Options->Hide Microsoft Entries菜单项(设置了这项后点工具栏的刷新按钮)

工具的下载、使用参考http://forum.ikaka.com/topic.asp?board=28&artid=7318038

在C:\Documents and Settings\Local Settings\Temporary Internet Files文件下
http://sobartop.baidu.com/sobar/sobar_list.html?t=1137910627
无法删除~~如何删除

用Unlocker工具删除试试
工具下载、使用参考http://forum.ikaka.com/topic.asp?board=28&artid=7471002

ProcessPIDCPUDescriptionCompany Name
System Idle Process093.94
Interruptsn/aHardware Interrupts
DPCsn/aDeferred Procedure Calls
System4
  smss.exe448Windows NT Session ManagerMicrosoft Corporation
  csrss.exe504Client Server Runtime ProcessMicrosoft Corporation
  winlogon.exe528Windows NT Logon ApplicationMicrosoft Corporation
    services.exe5761.52Services and Controller appMicrosoft Corporation
    svchost.exe768Generic Host Process for Win32 ServicesMicrosoft Corporation
    CCenter.exe840CCenterBeijing Rising Technology Co., Ltd.
    svchost.exe860Generic Host Process for Win32 ServicesMicrosoft Corporation
    svchost.exe960Generic Host Process for Win32 ServicesMicrosoft Corporation
    svchost.exe1000Generic Host Process for Win32 ServicesMicrosoft Corporation
    RavMonD.exe1044RavMondBeijing Rising Technology Co., Ltd.
      RavStub.exe2024Rising RavStubBeijing Rising Technology Co., Ltd.
    spoolsv.exe1272Spooler SubSystem AppMicrosoft Corporation
    alg.exe1400Application Layer Gateway ServiceMicrosoft Corporation
    nvsvc32.exe1452NVIDIA Driver Helper Service, Version 45.23NVIDIA Corporation
    meid.exe1488
    wdfmgr.exe1584Windows User Mode Driver ManagerMicrosoft Corporation
    svchost.exe1944Generic Host Process for Win32 ServicesMicrosoft Corporation
    lsass.exe596LSA Shell (Export Version)Microsoft Corporation
Explorer.EXE1140Windows ExplorerMicrosoft Corporation
Rundll32.exe1484Run a DLL as an AppMicrosoft Corporation
svchqst.exe1660
svchs0t.exe1548
RavTask.exe1812RavTimerBeijing Rising Technology Co., Ltd.
  RavMon.exe18561.52RavMonBeijing Rising Technology Co., Ltd.
  iexplore.exe35761.52Internet ExplorerMicrosoft Corporation
ctfmon.exe680CTF LoaderMicrosoft Corporation
WinRAR.exe2664
  procexp.exe23081.52Sysinternals Process ExplorerSysinternals
SVCHOST.EXE664
HNMainUI.exe264HelloNet Main UI
Rundll32.exe2648Run a DLL as an AppMicrosoft Corporation
Thunder.exe4012迅雷4深圳市迅雷网络技术有限公司
Issue.exe1344深圳市迅雷网络技术有限公司

Process: Procexp Pid: -2

TypeName