文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <KavPFW><; "C:\KAV2006\KPFW32.EXE">
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <CdnCtr><C:\Program Files\CNNIC\Cdn\cdnup.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <AddrPlus3><; C:\PROGRA~1\TENCENT\AddrPlus\Runner.exe C:\PROGRA~1\TENCENT\AddrPlus\QAHook1.dll Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KavStart><; "C:\KAV2006\KAVStart.exe" -startup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Thunder><; "C:\Program Files\Thunder Network\Thunder\ThunderShell.exe" /s>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Update><; C:\Program Files\Common Files\UPDATE\Update.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINDOWS\system32\userinit.exe,>

进入注册表
删除
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<Update><; C:\Program Files\Common Files\UPDATE\Update.exe>

退出注册表
删除C:\WINDOWS\system32\dll.exe
C:\Program Files\Common FilesUPDATE
C:\Program Files\Common Files\SAND

能告诉我下下在那个东西的网只吗？
我是菜鸟啊，不晓得在哪下啊

我如果在想给你，你能看出问题的东西，得给你发哪一块？

完了你下了啊？
那我明天等你消息吧，谢谢了

楼主还有什么问题啊

我刚才把系统还原关了，在c盘就没有查到病毒，这样病毒就能够杀掉了吧！
还有就我的显示器，总是自己关闭，然后只能跋电源才能关机器！

这是否跟病毒有关系呢，还是机器本身什么问题，请指教！

正在运行的进程
[PID: 396][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 460][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 484][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 528][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 540][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 696][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 756][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 840][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 924][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1004][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1140][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 1368][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  <><2, 0, 0, 9>
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  <cnnic><2, 1, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  <><2, 1, 0, 1>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\xunleibho_v9.dll]  <Thunder Networking Technologies,LTD><4, 5, 1, 33>
[PID: 1464][C:\Program Files\CNNIC\Cdn\cdnup.exe]  <><2, 2, 0, 2>
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  <cnnic><2, 1, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  <><2, 0, 0, 9>
    [C:\Program Files\CNNIC\Cdn\cdntdns.dll]  <CNNIC><2, 2, 0, 1>
[PID: 1472][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  <cnnic><2, 1, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  <><2, 0, 0, 9>
[PID: 1564][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  <><2, 0, 0, 9>
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  <cnnic><2, 1, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  <><2, 1, 0, 1>
[PID: 1192][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 996][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  <><2, 0, 0, 9>
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  <cnnic><2, 1, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  <><2, 1, 0, 1>
    [C:\WINDOWS\system32\xunleibho_v9.dll]  <Thunder Networking Technologies,LTD><4, 5, 1, 33>
    [C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll]  <><2, 1, 0, 2>
    [C:\Program Files\Tencent\QQ\QQIEHelper.dll]  <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
    [C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll]  <><1, 0, 0, 4>
    [C:\WINDOWS\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
[PID: 1220][E:\waigua\Mir2Facility.exe]  <><1, 0, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  <><2, 0, 0, 9>
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  <cnnic><2, 1, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  <><2, 1, 0, 1>
    [C:\WINDOWS\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>
[PID: 220][E:\waigua\极限帐号管理器.exe]  <><1, 0, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  <><2, 0, 0, 9>
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  <cnnic><2, 1, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  <><2, 1, 0, 1>
[PID: 156][D:\gongju\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\Program Files\CNNIC\Cdn\cdnspie.dll]  <><2, 0, 0, 9>
    [C:\Program Files\CNNIC\Cdn\imaoe.dll]  <cnnic><2, 1, 0, 0>
    [C:\Program Files\CNNIC\Cdn\cdndet.dll]  <><2, 1, 0, 1>
    [C:\Program Files\CNNIC\Cdn\cdnglo.dll]  <><2, 1, 0, 1>
    [C:\WINDOWS\system32\cdnns.dll]  <CNNIC><2, 0, 0, 0>

这个是我今天早上扫描地，你看看呀，