C:\WINDOWS\system32\Realplayer.exe
参考：http://forum.ikaka.com/topic.asp?board=28&artid=8157088

中魔波病毒了，换系统吧！

请修复：
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O1 - Hosts: 61.188.38.64 www.gamezt.com.cn
O1 - Hosts: 61.188.38.64 http://upd.etsoft.com.cn/upd/uzt
O1 - Hosts: 61.188.38.64 www.essonarts.com
O1 - Hosts: 61.188.38.64 ert0003.e76.163ns.com
O1 - Hosts: 61.188.38.64 sky001.e11.163ns.com
O1 - Hosts: 61.188.38.64 woool.100888290cs.com
O1 - Hosts: 61.188.38.64 rxjh.100888290cs.com
O1 - Hosts: 61.188.38.64 www.yowoool.com
O1 - Hosts: 61.188.38.64 13511.com
O1 - Hosts: 61.188.38.64 www.13511.com
O1 - Hosts: 61.188.38.64 ywg.cn
O1 - Hosts: 61.188.38.64 www.hyap98.com
O1 - Hosts: 61.188.38.64 meng.nicemm.cn
O2 - BHO: Shockwave Flash Object - {14A21378-5BB1-4BC4-95D5-5D3F51527F6F} -C:\WINDOWS\SYSTEM32\mmutilse32.dll

O2 - BHO: MyIEHelper Class - {16B770A0-0E87-4278-B748-2460D64A8386} - C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper_4559.dll (file missing)
O4 - HKLM\..\Run: [wdfmgr32] C:\WINDOWS\system32\wdfmgr32
O4 - HKLM\..\Run: [intranet] C:\WINDOWS\system32\intranet.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
删除：
C:\WINDOWS\system32\intranet.exe
C:\WINDOWS\system32\wdfmgr32
C:\WINDOWS\SYSTEM32\mmutilse32.dll