缺少驱动和服务...而且木马太多,估计手杀没重做系统的速度快

[C:\PROGRA~1\wtby\jgrl.dll] [, 1, 0, 0, 6]
[C:\PROGRA~1\wtby\olwq.dll] [ , 1, 0, 0, 6]
[c:\PROGRA~1\iesnap\navstub.dll] [, 1, 0, 1, 1]
也删除
你这机子中毒太深了!!!

能力越大,责任越大.我再传一次,你就邦邦我吧

[CODE]

2007-04-17,14:26:55

System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
    <0m9b7><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Servere.exe>  [N/A]
    <26tkmydh><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\c0nime.exe>  [N/A]
    <7ce31jshcqgml><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iexpl0re.exe>  []
    <f190b><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\crasos.exe>  [N/A]
    <ravshell><; C:\WINDOWS\SVCH0ST.exe>  [N/A]
    <ravshelll><; C:\Progra~1\Eset\eexplore.exe>  [N/A]
    <svc><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\spolive.exe>  [N/A]
    <w0><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iexpl0re.exe>  []
    <y9><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\winlog0n.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <SunJavaUpdateSched><C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe>  [Sun Microsystems, Inc.]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>  [(Verified)Microsoft Windows Publisher]
    <YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>  [(Verified)"beijing yahoo consulting and service co., ltd."]
    <RavTask><"d:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <MSConfig><C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto>  [(Verified)Microsoft Windows Publisher]
    <BigDogPath><; C:\WINDOWS\VM_STI.EXE USB PC Camera 301P>  [N/A]
    <cmdbcs><; C:\WINDOWS\cmdbcs.exe>  []
    <DAEMON Tools><; "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033>  [(Verified)DAEMON Tools Code Signing Services]
    <fdbcs><; C:\WINDOWS\aasdf3.exe>  [N/A]
    <mppds><; C:\WINDOWS\aasdf2.exe>  [N/A]
    <nwiz><; nwiz.exe /install>  [NVIDIA Corporation]
    <nwizms><; C:\WINDOWS\system32\nwizms.exe>  []
    <runeip><; D:\Program Files\Rising\AntiSpyware\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
    <shualai><; C:\WINDOWS\shualai.exe /i>  [N/A]
    <SoundMan><; SOUNDMAN.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <StormCodec_Helper><; "d:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  []
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <upsxdnd><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\upsxdnd.exe>  [N/A]
    <upxdnd><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\TIMPLATF0RM.exe>  []
    <winform><; C:\WINDOWS\aasdf1.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]

根据你后面帖的日志,运行SRENG
在注册表里删除:
<0m9b7><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Servere.exe> [N/A]
<26tkmydh><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\c0nime.exe> [N/A]
<7ce31jshcqgml><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iexpl0re.exe> []
<f190b><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\crasos.exe> [N/A]
<ravshell><; C:\WINDOWS\SVCH0ST.exe> [N/A]
<ravshelll><; C:\Progra~1\Eset\eexplore.exe> [N/A]
<svc><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\spolive.exe> [N/A]
<w0><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\iexpl0re.exe> []
<y9><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\winlog0n.exe> [N/A]
<cmdbcs><; C:\WINDOWS\cmdbcs.exe> []
<fdbcs><; C:\WINDOWS\aasdf3.exe> [N/A]
<mppds><; C:\WINDOWS\aasdf2.exe> [N/A]
<nwizms><; C:\WINDOWS\system32\nwizms.exe> []
upsxdnd><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\upsxdnd.exe> [N/A]
<upxdnd><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\TIMPLATF0RM.exe> []
<winform><; C:\WINDOWS\aasdf1.exe> [N/A]
<shualai><; C:\WINDOWS\shualai.exe /i> [N/A]
仅仅是注册表的内容,还有YAHOO这个流氓的存在,推荐重装吧