[C:\KAV2007\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [C:\KAV2007\KASocket.dll]  [Kingsoft Corporation, 2006, 12, 21, 241]
    [C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys]  [N/A, ]
    [C:\DOCUME~1\aipu\LOCALS~1\Temp\LgSy0.dll]  [N/A, ]
    [C:\Syswm1h\Ghook.dll]  [N/A, ]
    [C:\KAV2007\KAS\KASEngine.dll]  [Kingsoft Corporation, 2007, 2, 11, 107]
    [C:\KAV2007\KAS\KASData.dll]  [Kingsoft Corporation, 2007, 2, 11, 32]
    [C:\WINNT\system32\msxml3.dll]  [Microsoft Corporation, 8.30.9926.0]
    [C:\KAV2007\KAS\Extend\KASExt.KAS]  [Kingsoft Corporation, 2007, 3, 22, 118]
[PID: 1832][C:\WINNT\system32\conime.exe]  [Microsoft Corporation, 5.00.2195.6655]
    [C:\KAV2007\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\KAV2007\KASocket.dll]  [Kingsoft Corporation, 2006, 12, 21, 241]
    [C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys]  [N/A, ]
    [C:\Syswm1h\Ghook.dll]  [N/A, ]
[PID: 348][E:\mlj\智能扫描SRENG2\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
    [C:\KAV2007\KMailOEBand.dll]  [Kingsoft Corporation, 2006, 12, 1, 139]
    [C:\WINNT\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [C:\WINNT\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\KAV2007\KASocket.dll]  [Kingsoft Corporation, 2006, 12, 21, 241]
    [C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys]  [N/A, ]
    [C:\Syswm1h\Ghook.dll]  [N/A, ]
    [C:\DOCUME~1\aipu\LOCALS~1\Temp\LgSy0.dll]  [N/A, ]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  Error. [winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
MSAFD Tcpip [TCP/IP]
    C:\WINNT\system32\ldmedia3.dll(, N/A)
MSAFD Tcpip [RAW/IP]
    C:\WINNT\system32\ldmedia3.dll(, N/A)

==================================
Autorun.inf
N/A

==================================

HOSTS 文件
127.0.0.1      localhost
127.0.0.1      ad.hbh.cn
127.0.0.1      down.4512964.com
127.0.0.1      www.ip2008.net
127.0.0.1      www.baiwanip.com
127.0.0.1      www.haoll.com
127.0.0.1      www.818c.com
127.0.0.1      www.y988.com
127.0.0.1      www.winopen.cn
127.0.0.1      www.tanip.com
127.0.0.1      www.365tc.com
127.0.0.1      code.winopen.cn
127.0.0.1      code1.winopen.cn
127.0.0.1      code2.winopen.cn
127.0.0.1      code3.winopen.cn
127.0.0.1      code4.winopen.cn
127.0.0.1      www.djk66.com
127.0.0.1      www.158soft.com
127.0.0.1      www.10359172.com
127.0.0.1      www.ietool.cn
127.0.0.1      www.456link.com
127.0.0.1      www.159.com
127.0.0.1      www.17510.com
127.0.0.1      www.at58.cn
127.0.0.1      www.nb46.com
127.0.0.1      www.qqget.cn
127.0.0.1      www.6tan.com
127.0.0.1      www.ip321.cn
127.0.0.1      www.ip369.com
127.0.0.1      www.369ip.com.cn
127.0.0.1    rhino.acme.com
127.0.0.1    www.369ip.com.cn
127.0.0.1    x.acme.com
127.0.0.1    cn.47555.cn
127.0.0.1    new3.etsoft.com.cn
127.0.0.1    new3.etsoft.com
127.0.0.1    etsoft.com
127.0.0.1    wl.etsoft.com.cn
127.0.0.1    wl.etsoft.com
127.0.0.1    down.jschina.com.cn
127.0.0.1    down.jschina.com
127.0.0.1    jschina.com
127.0.0.1    wow.etsoft.com.cn
127.0.0.1    wow.etsoft.com
127.0.0.1    new3.etsoft.com.cn
127.0.0.1    new3.etsoft.com
127.0.0.1    sw.etsoft.com.cn
127.0.0.1    mh.etsoft.com.cn
127.0.0.1    wool.etsoft.com.cn
127.0.0.1    zt.soft.com.cn
127.0.0.1    www.gaodumm.com
127.0.0.1    www.97725.com
127.0.0.1    www.ac86.cn

==================================
API HOOK
入口点错误：LoadLibraryExW (危险等级: 一般,  被下面模块所HOOK: C:\KAV2007\KASocket.dll)

==================================
隐藏进程
N/A

==================================


[/CODE]

好了,终于粘贴完了,请高手指教!

C:\DOCUME~1\aipu\LOCALS~1\Temp\iexpl0re.exe
C:\Syswm1h\svchost.exe
C:\DOCUME~1\aipu\LOCALS~1\Temp\zz.exe
C:\WINNT\mppds.exe
C:\WINNT\wsttrs.exe
C:\WINNT\winform.exe
c:\program files\tencent\qq\eucwhgvn.dll
C:\Program Files\Common Files\Microsoft Shared\MSINFO\NewInfo.rxk
C:\Program Files\Internet Explorer\PLUGINS\SystemKb.sys
c:\program files\peanuthull3\gtbplnte.dll
C:\WINNT\Server.exe
C:\WINNT\system32\svcmngr.exe
C:\WINNT\system32\Webrvet.exe
C:\WINNT\SYSTEM32\WPRINT.EXE
C:\WINNT\avp.exe
C:\WINNT\system32\2BBC37A0.EXE
c:\program files\tencent\qq\yrnlxypu.dll
c:\program files\peanuthull3\ereflsuq.dll
c:\program files\peanuthull3\gtbplnte.dll
C:\WINNT\system32\ldmedia3.dll
c:\program files\peanuthull3\ereflsuq.dll
C:\Syswm1h\Ghook.dll
C:\WINNT\system32\wups.dll
C:\WINNT\system32\winform.dll
C:\DOCUME~1\aipu\LOCALS~1\Temp\upxdnd.dll
C:\WINNT\system32\mppds.dll
C:\WINNT\system32\wups2.dll
C:\WINNT\system32\wucltui.dll
C:\WINNT\wsttrs.exe

又一个太多的。