[C:\Program Files\Tencent\QQ\CommercesMng.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\PersonalDesktop.dll]  <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
    [C:\Program Files\Tencent\QQ\QQUdpGetFileLib.dll]  <tencent><0, 2, 2, 3>
    [C:\Program Files\Tencent\QQ\QQAddr.dll]  <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
    [C:\Program Files\Tencent\QQ\QQSceneMng.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\QQPhoneHelper.dll]  <腾讯科技（深圳）有限公司><2, 0, 3, 30>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\Program Files\Tencent\QQ\GroupConnection.dll]  <Tencent><5, 0, 202, 170>
    [C:\Program Files\Tencent\QQ\ImageOle.dll]  <TODO: <Company name>><1.0.0.1>
    [C:\Program Files\Tencent\QQ\QQZip.dll]  <tencent><0, 3, 2, 4>
    [C:\WINDOWS\System32\PYJJ4.IME]  <加加工作组><4.0.0.21>
    [C:\Program Files\Tencent\QQ\QQMagicFace.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Tencent\QQ\ShareFiles.dll]  <N/A><N/A>
    [C:\Program Files\Tencent\QQ\videodevice.dll]  <Tencent><1.5.0.0>
    [C:\Program Files\Tencent\QQ\inplus.dll]  <Tencent><1.5.0.0>
    [C:\WINDOWS\System32\l3codeca.acm]  <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
[PID: 3420][C:\Program Files\Tencent\QQ\TIMPlatform.exe]  <tencent><0, 3, 1, 8>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\Program Files\Tencent\QQ\TIMProxy.dll]  <tencent><0, 3, 2, 4>
[PID: 3552][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\System32\AcSignIcon.dll]  <Autodesk><16.0.0.86>
    [C:\WINDOWS\System32\KakaTool.dll]  <Beijing Rising Technology Co., Ltd.><2, 0, 0, 8>
    [C:\WINDOWS\System32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>
    [C:\KAV2005\KAScript.DLL]  <Kingsoft Corporation><2006, 2, 10, 60>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
    [C:\KAV2005\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
    [C:\WINDOWS\System32\PYJJ4.IME]  <加加工作组><4.0.0.21>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.CHS]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\Program Files\PowerInfo\DreamPlayer\DreamWMFin.dll]  <PowerInfo><4, 0, 0, 0>
    [C:\WINDOWS\System32\DreamNetworks.dll]  <PowerInfo><4, 0, 0, 0>
    [C:\WINDOWS\System32\DreamPublic.dll]  <PowerInfo><4, 0, 0, 0>
    [C:\WINDOWS\System32\DreamOptions.dll]  <PowerInfo><4, 0, 0, 0>
    [C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll]  <Autodesk><16.0.0.86>
[PID: 2884][C:\Program Files\PPLive\PPLive.exe]  <><1, 0, 0, 1>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\common.dll]  <><1, 0, 0, 1>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\SYNACA~2.OCX]  <Synacast><2, 2, 33, 0>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\SYNACA~1.OCX]  <><1, 0, 0, 0>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\FWUpnp.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>
    [C:\KAV2005\KAScript.DLL]  <Kingsoft Corporation><2006, 2, 10, 60>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
    [C:\KAV2005\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\PP\kom.dll]  <Synacast Corp.><1, 1, 0, 8>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\PP\EROC.DLL]  <Synacast Corp.><1, 1, 9, 4>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\PP\TEN.DLL]  <Synacast><1, 1, 0, 8>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\PP\GAL.DLL]  <Synacast><1, 1, 0, 8>
    [C:\PROGRA~1\COMMON~1\Synacast\SynaLive\PP\MIR.DLL]  <N/A><N/A>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\Program Files\PowerInfo\DreamPlayer\DreamWMFin.dll]  <PowerInfo><4, 0, 0, 0>
    [C:\WINDOWS\System32\DreamNetworks.dll]  <PowerInfo><4, 0, 0, 0>
    [C:\WINDOWS\System32\DreamPublic.dll]  <PowerInfo><4, 0, 0, 0>
    [C:\WINDOWS\System32\DreamOptions.dll]  <PowerInfo><4, 0, 0, 0>
    [C:\WINDOWS\System32\msdmo.dll]  <N/A><N/A>
    [C:\WINDOWS\System32\ffdshow.ax]  <N/A><1.0.2.24>
    [C:\Program Files\Ringz Studio\Storm Codec\Codecs\VSFilter.dll]  <Gabest><1, 0, 0, 9>
[PID: 2684][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\System32\AcSignIcon.dll]  <Autodesk><16.0.0.86>
    [C:\WINDOWS\System32\KakaTool.dll]  <Beijing Rising Technology Co., Ltd.><2, 0, 0, 8>
    [C:\WINDOWS\System32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>
    [C:\KAV2005\KAScript.DLL]  <Kingsoft Corporation><2006, 2, 10, 60>
    [C:\KAV2005\KAEPlat.DLL]  <Kingsoft Corp.><2005, 12, 29, 56>
    [C:\KAV2005\KAEMem.DAT]  <Kingsoft><2006, 4, 12, 13>
    [C:\KAV2005\KAEUnpack.DAT]  <Kingsoft Corp.><2006, 3, 21, 17>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx]  <Macromedia, Inc.><8,0,24,0>
    [C:\WINDOWS\System32\PYJJ4.IME]  <加加工作组><4.0.0.21>
[PID: 3208][E:\game\sreng2\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\KAV2005\KASocket.dll]  <Kingsoft Corporation><2005, 2, 22, 233>
    [C:\WINDOWS\System32\w2pxdrv.dll]  <Proxy Labs><2, 0, 1, 1>

==================================
文件关联
.TXT  Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. [C:\WINDOWS\hh.exe %1]
.HLP  Error. [C:\WINDOWS\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.INF  Error. [C:\WINDOWS\NOTEPAD.EXE %1]
.VBS  Error. [wscript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

运行System Repair Engineer，使用“系统修复，文件关联，勾选“全选”点“修复”使所有扩展名都恢复正常。
双击我的电脑--工具---文件夹选项--查看--单击选取"显示隐藏文件或文件夹"清除"隐藏受保护的操作系统文件（推荐）"复选框。在提示您确定更改时，单击“是”

Windows Print Controller / Universal Disk Manager]
<C:\Program Files\Common Files\COMM\qqfaceclient.exe><COMENET TECHNOLOGY>这一项是多多表情，建议卸载
运行System Repair Engineer，点“启动项目，服务，勾选“隐藏微软服务”选中病毒服务Microsoft Update Service ，Windows Print Controller，.Net Boot Service 选择“删除所选服务”“否”最后重启。（每一个逗号隔开的就是一个病毒的服务，请逐一删除
重启

ALT+CTRL+DELETE调出任务管理器,终止所有RUNDLL32.EXE 的进程
运行System Repair Engineer，使用“启动项目，注册表”来删除以下选项。
（如果在注册表里无法识别那一下，可以选中一项后，点“编辑”这样会有很明细的路径）
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<CNETHELPER><rundll32.exe C:\PROGRA~1\COMMON~1\system\msdc32.dll,_S1>
删除
C:\Program Files\Common Files\COMM
C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL
C:\WINDOWS\System32\big5_gb2312.exe
C:\PROGRA~1\COMMON~1\system\msdc32.dll

C:\PROGRA~1\COMMON~1\system\msdc32.dll
删除
C:\WINDOWS\System32\big5_gb2312.exe
进入注册表查找删除big5_gb2312.exe 
重起删除C:\WINDOWS\System32\big5_gb2312.exe
C:\WINDOWS\System32\HOOKLFp.dll
删除

另外
C:\Program Files\Common Files\COMM\qqfaceclient.exe
QQ表情有后门程序的嫌疑 建议直接删除qqfaceclient.exe

C:\WINDOWS\System32\w2pxdrv.dll
关于这一项，有些麻烦
请到http://forum.ikaka.com/topic.asp?board=67&artid=5188931，下载，LSPFix.exe，WinsockXPFix这两个软件。
运行LSPFix.exe
删除
w2pxdrv.dll
附说明一份
LSPFix.exe这个软件主要用来辅助修复HijackThis扫描发现的O10项。
使用时，请关闭所有IE界面和文件夹界面后运行LSPFix，运行后，把要修复的那一个O10项从左边转到右边，点“Finish”即可。（不过这之前，需要在“I know what I`m doing”前面打勾。）
删除C:\WINDOWS\System32\w2pxdrv.dll
修复后，如果无法上网，请运行WinsockXPFix，让它修复一下。

娘来，这么多毛病，我一个一个弄。

C:\WINDOWS\System32\big5_gb2312.exe
C:\PROGRA~1\COMMON~1\system\msdc32.dll
这两项找不到，没有文件。

???????????各位老大的留贴我怎么找不到了？

1

请重启后，再扫份 System Repair Engineer的报告粘上来。

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <msnmsgr><"C:\Program Files\MSN Messenger\msnmsgr.exe" /background>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <pyjj><C:\Program Files\jj4\jjsvr4.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <KavPFW><"C:\KAV2005\KPFW32.EXE">
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <Super Rabbit SRRestore><C:\Program Files\Super Rabbit\MagicSet\srrest.exe /autosave>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
  <CNETHELPER><rundll32.exe C:\PROGRA~1\COMMON~1\system\msdc32.dll,_S1>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>

==================================
启动文件夹
[microsoft office]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\microsoft office.lnk><N>
[Active Messenger]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\Active Messenger.lnk><N>
[快捷方式 到 KAV32]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\快捷方式 到 KAV32.lnk><N>

==================================
服务
[pcAnywhere Host Service / awhost32]
  <C:\Program Files\Symantec\pcAnywhere\awhost32.exe><Symantec Corporation>
[C-DillaCdaC11BA / C-DillaCdaC11BA]
  <C:\WINDOWS\System32\drivers\CDAC11BA.EXE><Macrovision>
[User Authentication Manager / DpHost]
  <C:\Program Files\DigitalPersona\UareUPro\DpHost.exe><Digital Persona, Inc.>
[Kingsoft Personal Firewall Service / KPfwSvc]
  <"C:\KAV2005\KPfwSvc.EXE"><Kingsoft Corporation>
[Kingsoft Antivirus KWatch Service / KWatchSvc]
  <C:\KAV2005\KWatch.EXE><Kingsoft Corporation>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd]
  <"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"><N/A>
[ServiceLayer / ServiceLayer]
  <"C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe"><Nokia.>
[SoundMAX Agent Service / SoundMAX Agent Service (default)]
  <C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe><Analog Devices, Inc.>

==================================
浏览器加载项
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[卡卡上网安全助手]
  {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\System32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[&使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\geturl.htm, N/A>
[&使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\getAllurl.htm, N/A>