[PID: 340][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  [, 2, 0, 4, 1030]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  [ , 2, 0, 1, 1007]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Ynotifier.dll]  [, 1, 0, 0, 5]
[PID: 348][C:\WINDOWS\system32\Rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\P17.dll]  [, 1.0.1.40]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
[PID: 356][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5.1.0.38]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
[PID: 1676][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
[PID: 2192][C:\Program Files\VnetClient1.6\VnetClient.exe]  [, 2006, 10, 11, 9]
    [C:\Program Files\VnetClient1.6\Communicate.dll]  [GDCN, 2006, 2, 15, 1]
    [C:\Program Files\VnetClient1.6\DialModule.dll]  [GDCN, 2006, 7, 25, 15]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
    [C:\PROGRA~1\VNETCL~1.6\CLIENT~1.DLL]  [, 2004, 2, 28, 1]
    [C:\PROGRA~1\VNETCL~1.6\PLUGIN~1.OCX]  [, 2006, 6, 2, 14]
    [C:\PROGRA~1\VNETCL~1.6\sign.dll]  [0, 2004, 12, 1, 1]
    [C:\PROGRA~1\VNETCL~1.6\ADVERT~1.OCX]  [, 2006, 2, 20, 1]
    [C:\PROGRA~1\VNETCL~1.6\Gif89a.dll]  [, 2005, 6, 21, 1]
    [C:\PROGRA~1\VNETCL~1.6\VnetBs.ocx]  [, 2004, 11, 18, 1]
    [C:\PROGRA~1\VNETCL~1.6\VnetSkin.ocx]  [GDDC, 2006, 9, 6, 15]
    [C:\PROGRA~1\VNETCL~1.6\DialogStyle.dll]  [, 1, 0, 0, 1]
    [C:\PROGRA~1\VNETCL~1.6\BDSearch.ocx]  [gdcn, 2006, 9, 7, 14]
    [C:\PROGRA~1\VNETCL~1.6\PageFram.ocx]  [Workgroup, 2006, 9, 21, 18]
    [C:\PROGRA~1\VNETCL~1.6\AccPage.ocx]  [, 1, 0, 0, 1]
    [C:\PROGRA~1\VNETCL~1.6\AccountMgr.dll]  [, 2006, 9, 26, 9]
    [C:\PROGRA~1\VNETCL~1.6\ACCOUN~1.OCX]  [Workgroup, 2006, 9, 26, 14]
    [C:\PROGRA~1\VNETCL~1.6\NOTIFY~1.OCX]  [Workgroup, 2006, 9, 15, 16]
    [C:\PROGRA~1\VNETCL~1.6\IcosBar.ocx]  [Workgroup, 2006, 9, 25, 9]
    [C:\PROGRA~1\VNETCL~1.6\Timer.ocx]  [, 2006, 9, 8, 17]
    [C:\PROGRA~1\VNETCL~1.6\PLUGIN~2.OCX]  [, 2006, 4, 4, 1]
    [C:\PROGRA~1\VNETCL~1.6\NEWMES~1.DLL]  [, 2006, 9, 23, 16]
    [C:\PROGRA~1\VNETCL~1.6\PassCtrl.dll]  [GDCN, 2006, 3, 1, 16]
    [C:\WINDOWS\system32\wpcap.dll]  [Politecnico di Torino, 3, 0, 0, 18]
    [C:\WINDOWS\system32\pthreadVC.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\packet.dll]  [Politecnico di Torino, 3, 0, 0, 18]
    [C:\PROGRA~1\VNETCL~1.6\PlugPush.dll]  [, 2004, 12, 21, 1]
    [C:\PROGRA~1\VNETCL~1.6\ALLINT~1.DLL]  [, 2006, 10, 16, 20]
    [C:\PROGRA~1\VNETCL~1.6\VNETLO~1.OCX]  [, 2005, 10, 9, 1]
    [C:\PROGRA~1\VNETCL~1.6\StatNum.dll]  [, 2006, 3, 1, 1]
    [C:\PROGRA~1\VNETCL~1.6\VNETON~1.OCX]  [, 2005, 3, 2, 1]
    [C:\PROGRA~1\VNETCL~1.6\ALLFUN~1.DLL]  [GDCN, 2006, 10, 17, 9]
    [C:\PROGRA~1\VNETCL~1.6\VnetOptLog.dll]  [ , 2006, 9, 18, 10]
    [C:\PROGRA~1\VNETCL~1.6\Favorite.ocx]  [, 1, 0, 0, 1]
    [C:\PROGRA~1\VNETCL~1.6\VNETSE~1.OCX]  [, 2006, 9, 26, 9]
    [C:\PROGRA~1\VNETCL~1.6\DlgSkin.ocx]  [, 2006, 8, 29, 15]
    [C:\Program Files\VnetClient1.6\Base64.dll]  [N/A, N/A]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\PROGRA~1\VNETCL~1.6\WEBPLU~1.DLL]  [, 2005, 8, 18, 1]
[PID: 3784][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2864][F:\新建文件夹\007\crack130s.exe]  [ , 1.03]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
    [C:\WINDOWS\SYSTEM32\FlyControl.ocx]  [N/A, 1.00]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 3552][C:\Program Files\ACDSee\ACDSee.exe]  [ACD Systems Ltd., 3, 1, 2, 1]
    [C:\Program Files\ACDSee\InTouchClient.dll]  [ACD Systems, Ltd., 2, 0, 0, 0552]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
    [C:\Program Files\ACDSee\PlugIns\IDE_ACDStd.apl]  [ACD Systems, Ltd., 1, 3, 4, 22]
[PID: 3360][F:\新建文件夹\007\JY007.exe]  [ , 1.03]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
    [C:\WINDOWS\SYSTEM32\FlyControl.ocx]  [N/A, 1.00]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
[PID: 3308][C:\Program Files\Tencent\TT\TTraveler.exe]  [腾讯公司, 3.1.0.259]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\YAlive.dll]  [, 2, 0, 4, 1030]
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  [北京三七二一科技有限公司, 1, 0, 4, 1]
    [C:\Program Files\Tencent\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll]  [腾讯公司, 1, 1, 0, 5]
    [C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll]  [, 1, 0, 0, 3]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  [ , 2, 0, 1, 1007]
    [C:\Program Files\Tencent\TT\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx]  [Macromedia, Inc., 8,0,24,0]
[PID: 992][C:\Program Files\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  [, 2, 0, 9, 1027]
    [C:\PROGRA~1\Yahoo!\ASSIST~1\assist\ypatch.dll]  [Yahoo! China, 2, 0, 4, 1007]
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  [北京三七二一科技有限公司, 1, 5, 3, 8]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================

运行System Repair Engineer 就是你扫描日志的软件，启动项目，win32服务应用程序，勾选隐藏微软服务后删除
GrayPigeon_Hacker.com.cn / GrayPigeon_Hacker.com.cn]
<2 - 系统找不到指定的文件。
><N/A>
Human Interface Device Access / HidServ]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
删除C:\WINDOWS\System32\hidserv.dll
开始，运行，regedit展开注册表，查找
GrayPigeon_Hacker.com.cn ，hidserv.dll删除

注册表的GrayPigeon_Hacker.com.cn 删不掉啊！！！
删除文件提示无法删除所有值~~~~

哪位大侠再来帮看看啊~！

顶！！！！！！！！！！！！！

顶上去！！！！！！！！！！！！
不解决就一直顶了！

O23 - NT 服务: Windows Media (Windows Media Player) - Unknown owner - C:\WINDOWS\system32\services(这个在sreng中居然没有看见~~~奇怪了~)
和
GrayPigeon_Hacker.com.cn / GrayPigeon_Hacker.com.cn]
<2 - 系统找不到指定的文件。
><N/A>

将这两项服务的启动方式由自动改为禁用,重启后删除.