不用那么复杂，直接用你的扫日志的东东进行以下几项：
1修复、
R3 - URLSearchHook: 5615 - {DFCB34B6-902D-426E-AE2B-1B294AE19F4F} - C:\WINDOWS\system32\4bb8ntos.dll (file missing)
O2 - BHO: (file missing)
O2 - BHO: (file missing)
O2 - BHO: C:\WINDOWS\system32\4bb8ntos.dll (file missing)
O2 - BHO: C:\WINDOWS\system32\4ef2cfsb.dll (file missing)
O3 - Toolbar: 5615 - {DFCB34B6-902D-426E-AE2B-1B294AE19F4F} - C:\WINDOWS\system32\4bb8ntos.dll (file missing)
2删除服务
O23 - Service: fisopin (fisopin) - - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Help and Support (helpsvc) - - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - "C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"
O23 - Service: NetMeeting Remote Desktop Sharing (mnmsrvc) - - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Navoct (Navoct) - - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: Std psvt Service (psvt) - - C:\WINDOWS\system32\rundll32.exe c:\progra~1\hnnl\uxxv.dll,service -s
O23 - Service: yenccb (yenccb) - - C:\WINDOWS\system32\svchost.exe -k netsvcs
3、重启，按路径干掉那些尸体文件。注意这个C:\WINDOWS\system32\svchost.exe不能干掉哦，呵呵
