[PID: 1580][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\wsvbs.dll] [N/A, N/A]
[C:\WINDOWS\system32\msccrt.dll] [N/A, N/A]
[C:\WINDOWS\RichDll.dll] [N/A, N/A]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\upxdnd.dll] [N/A, N/A]
[C:\WINDOWS\system32\cmdbcs.dll] [N/A, N/A]
[C:\WINDOWS\system32\nvshell.dll] [N/A, N/A]
[PID: 632][C:\WINDOWS\uninstall\rundl132.exe] [N/A, N/A]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\i8q.dll] [N/A, N/A]

[PID: 1016][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ctflsv.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\2q8goa.dll] [N/A, N/A]

<svc><C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ctflsv.exe> [Microsoft Corporation]好象也有问题

贴全日志！

我也中了。但对计算机不太懂。最好有比较简单明了的办法。
谢谢！
症状：每次开机时瑞星查出病毒为rootkit.torn.aw，来源是：c:\winnt\system32\wincab.sys
但根本找不到wincab.sys文件