用Ｕ盘后，有Ｎ个shitmaker的进程，

[CODE]

2007-05-19,14:45:21

System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
    <iDuba Personal FireWall><C:\KAV6\KAVPFW.EXE>  [Kingsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <KAVRun><C:\KAV6\KAVRun.EXE>  [kingsoft]
    <Kulansyn><C:\KAV6\Kulansyn.EXE>  [Kingsoft Corp.]
    <KpopMon><C:\KAV6\KpopMon.EXE>  []
    <iDuba Personal FireWall><C:\KAV6\KAVPFW.EXE>  [Kingsoft Corporation]
    <assistse><"C:\PROGRA~1\3721\assistse.exe">  [yahoo]
    <ACU><"C:\Program Files\TP-LINK\TL-WN310G & TL-WN350G\TWCU.exe" -nogui>  [TP-LINK TECHNOLOGIES CO., LTD.]
    <FolderRaper><G:\老有几.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><C:\WINDOWS\system32\Userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <GinaDLL><athgina.dll>  [Atheros]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\KAV6\KASCRSCN.SCR>  []

==================================
启动文件夹
N/A

==================================
服务
[TP-LINK配置服务程序 / ACS][Running/Auto Start]
  <C:\WINDOWS\system32\acs.exe><N/A>
[Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start]
  <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Kingsoft AntiVirus Service / KAVSvc][Running/Auto Start]
  <C:\KAV6\KAVSvc.EXE><kingsoft Antivirus>

==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[AliIde / AliIde][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\aliide.sys><N/A>
[ati2mtag / ati2mtag][Running/Manual Start]
  <system32\DRIVERS\ati2mtag.sys><ATI Technologies Inc.>
[蓝牙音频设备 / btaudio][Stopped/Manual Start]
  <system32\drivers\btaudio.sys><N/A>
[蓝牙虚拟通信驱动程序 / BTDriver][Stopped/Manual Start]
  <system32\DRIVERS\btport.sys><N/A>
[蓝牙总线枚举器 / BTKRNL][Stopped/Manual Start]
  <system32\DRIVERS\btkrnl.sys><N/A>
[蓝牙局域网接入服务器 / BTWDNDIS][Stopped/Manual Start]
  <system32\DRIVERS\btwdndis.sys><N/A>
[CmdIde / CmdIde][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[HSFHWATI / HSFHWATI][Running/Manual Start]
  <system32\DRIVERS\HSFHWATI.sys><Conexant Systems, Inc.>
[HSF_DP / HSF_DP][Running/Manual Start]
  <system32\DRIVERS\HSF_DP.sys><Conexant Systems, Inc.>
[KNetWch / KNetWch][Running/System Start]
  <\??\C:\KAV6\KNetWch.SYS><金山电脑公司>
[KWatch / KWatch][Running/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\KWatch.Sys><Kingsoft Corporation>
[KWatch2 / KWatch2][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\KWatch2.sys><Kingsoft Antivirus>
[AEGIS Protocol (IEEE 802.1x) v2.3.1.9 / MDC8021X][Running/Auto Start]
  <system32\DRIVERS\mdc8021x.sys><Meetinghouse Data Communications>
[mdmxsdk / mdmxsdk][Running/Auto Start]
  <system32\DRIVERS\mdmxsdk.sys><Conexant>
[MegaIDE / MegaIDE][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.>
[NSC Infrared Device Driver / NSCIRDA][Running/Manual Start]
  <system32\DRIVERS\nscirda.sys><National Semiconductor Corporation>
[nv / nv][Stopped/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver / RTL8023xp][Running/Manual Start]
  <system32\DRIVERS\Rtlnicxp.sys><Realtek Semiconductor Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[tifm21 / tifm21][Running/Manual Start]
  <system32\drivers\tifm21.sys><Texas Instruments>
[ViaIde / ViaIde][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[TP-LINK 54M Wireless Adapter Driver for Windows XP / W8335XP][Stopped/Manual Start]
  <system32\DRIVERS\MRV8335XP.sys><Marvell Semiconductor, Inc>
[winachsf / winachsf][Running/Manual Start]
  <system32\DRIVERS\HSF_CNXT.sys><Conexant Systems, Inc.>

==================================
浏览器加载项
[上网助手]
  {1B0E7716-898E-48cc-9690-4E338E8DE1D3} <C:\PROGRA~1\3721\Assist\assist.dll, >
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[上网助手]
  {1B0E7716-898E-48cc-9690-4E338E8DE1D3} <C:\PROGRA~1\3721\Assist\assist.dll, >
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[上网助手]
  {1B0E7716-898E-48CC-9690-4E338E8DE1D3} <C:\PROGRA~1\3721\Assist\assist.dll, >
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[AutoLive]
  {7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2} <C:\PROGRA~1\3721\autolive.dll, >
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[金山毒霸]
  {A9BE2902-C447-420A-BB7F-A5DE921E6138} <C:\KAV6\KAIEPlus.DLL, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\Flash.ocx, Macromedia, Inc.>
[]
  {E1FC9760-7B95-49CD-80B9-8C9E41017B93} <C:\KAV6\KAVEXT.DLL, Kingsoft Corp.>
[使用网际快车下载]
  <C:\Program Files\绿色软件\网际快车(FlashGet) v1.65 美化特别版\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\绿色软件\网际快车(FlashGet) v1.65 美化特别版\jc_all.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>

==================================
正在运行的进程
[PID: 600][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 664][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 692][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\athgina.dll]  [Atheros, 3.1.3.10]
    [C:\WINDOWS\system32\athcfg11.dll]  [Atheros, 3.1.3.10]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 736][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1756][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, ]
    [C:\KAV6\KAVEXT.DLL]  [Kingsoft Corp., 2002, 5, 24, 6]
[PID: 1860][C:\WINDOWS\SOUNDMAN.EXE]  [Realtek Semiconductor Corp., 5, 1, 0, 43]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 2032][C:\KAV6\KpopMon.EXE]  [, 2004, 2, 2, 31]
    [C:\KAV6\KAVMLM.DLL]  [Kingsoft Corporation, 2003.11.12.10]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 2044][C:\KAV6\KWatchUI.EXE]  [, 2004.1.6.119]
    [C:\KAV6\kavcomm.dll]  [Kingsoft Corporation, 2003, 11, 12, 66]
    [C:\KAV6\kavdlg.dll]  [, 2004.7.20.81]
    [C:\KAV6\KAVMLM.DLL]  [Kingsoft Corporation, 2003.11.12.10]
    [C:\KAV6\RpcBrge.DLL]  [kingsoft, 2003, 11, 12, 64]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 168][C:\PROGRA~1\3721\assistse.exe]  [yahoo, 1, 0, 1, 1001]
    [C:\PROGRA~1\3721\shell\MenuInfo.dll]  [yahoo, 1, 0, 0, 2]
    [C:\PROGRA~1\3721\shell\IEAngel.dll]  [yahoo, 1, 0, 0, 3]
    [C:\PROGRA~1\3721\shell\AsMenu.dll]  [3721, 1, 0, 1, 1006]
    [C:\PROGRA~1\3721\Assist\assist.dll]  [, 2, 0, 2, 3]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 860][C:\Program Files\TP-LINK\TL-WN310G & TL-WN350G\TWCU.exe]  [TP-LINK TECHNOLOGIES CO., LTD., 3.1.3.10]
    [C:\WINDOWS\system32\athcfg11.dll]  [Atheros, 3.1.3.10]
    [C:\WINDOWS\system32\athcfg11loc.dll]  [TP-LINK, 3.1.3.5]
    [C:\Program Files\TP-LINK\TL-WN310G & TL-WN350G\oemres.dll]  [TP-LINK TECHNOLOGIES CO., LTD., 3.1.3.5]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 1952][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 928][C:\KAV6\KAVPFW.EXE]  [Kingsoft Corporation, 2004, 8, 16, 295]
    [C:\KAV6\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\KAV6\KAVMLM.DLL]  [Kingsoft Corporation, 2003.11.12.10]
    [C:\KAV6\PFWScanC.dll]  [KingSoft, 2002, 4, 12, 3]
    [C:\KAV6\KAMsgBox.dll]  [, 2002.9.27.30]
    [C:\KAV6\NetShare.dll]  [Kingsoft Antivirus, 2004, 2, 20, 67]
    [C:\KAV6\KAEPlat.DLL]  [Kingsoft Corp., 2005, 12, 29, 56]
    [C:\KAV6\KAEMem.DAT]  [Kingsoft, 2006, 4, 12, 13]
    [C:\KAV6\KAEQSCAN.DLL]  [Kingsoft Corp, 2004, 3, 26, 69]
    [C:\KAV6\KAVLogFn.dll]  [, 2003, 11, 26, 16]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 1080][C:\KAV6\MailMon.EXE]  [Kingsoft Co., Ltd, 2004, 2, 6, 245]
    [C:\KAV6\KMFilter.DLL]  [, 2004, 3, 1, 37]
    [C:\KAV6\parse822.dll]  [Quiksoft Corporation, 2, 0, 0, 9]
    [C:\KAV6\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\KAV6\KAVLogFn.dll]  [, 2003, 11, 26, 16]
    [C:\KAV6\KAVMLM.DLL]  [Kingsoft Corporation, 2003.11.12.10]
    [C:\KAV6\KAMsgBox.DLL]  [, 2002.9.27.30]
    [C:\KAV6\KAVComm.dll]  [Kingsoft Corporation, 2003, 11, 12, 66]
    [C:\KAV6\RpcBrge.DLL]  [kingsoft, 2003, 11, 12, 64]
    [C:\KAV6\KAVIPC.DLL]  [Kingsoft Corp., 2002, 3, 29, 8]
    [C:\KAV6\KAVDlg.DLL]  [, 2004.7.20.81]
    [C:\KAV6\KAECall.DLL]  [Kingsoft Corporation, 2003, 11, 14, 66]
    [C:\KAV6\KAEScan.DLL]  [Kingsoft Corp., 2003, 5, 24, 36]
    [C:\KAV6\KAEPlat.DLL]  [Kingsoft Corp., 2005, 12, 29, 56]
    [C:\KAV6\KAEMem.DAT]  [Kingsoft, 2006, 4, 12, 13]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 2208][C:\KAV6\KAVPlus.EXE]  [, 2004, 3, 3, 71]
    [C:\KAV6\MFC42.DLL]  [Microsoft Corporation, 6.00.8665.0]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 124][G:\explorer.exe]  [FuckJapanese, 1.00]
    [C:\WINDOWS\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9690]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 356][C:\Program Files\EXPLORER.EXE]  [, 文件夹]
    [C:\WINDOWS\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9690]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 1744][c:\Explorer.exe]  [FuckJapanese, 1.00]
    [C:\WINDOWS\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9690]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 1460][d:\Explorer.exe]  [FuckJapanese, 1.00]
    [C:\WINDOWS\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9690]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 516][e:\Explorer.exe]  [FuckJapanese, 1.00]
    [C:\WINDOWS\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9690]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 492][f:\Explorer.exe]  [FuckJapanese, 1.00]
    [C:\WINDOWS\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9690]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 1972][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
    [C:\PROGRA~1\3721\Assist\assist.dll]  [, 2, 0, 2, 3]
    [C:\PROGRA~1\3721\assist\repair.dll]  [北京三七二一科技有限公司, 1, 0, 4, 1001]
    [C:\PROGRA~1\3721\assist\asfsks.dll]  [3721.com, 2, 1, 1, 87]
    [C:\PROGRA~1\3721\assist\optimum.dll]  [N/A, ]
    [C:\PROGRA~1\3721\assist\adfilter.dll]  [ , 1, 0, 1, 0]
    [C:\PROGRA~1\3721\assist\XPStyle.dll]  [N/A, ]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\macromed\flash\Flash.ocx]  [Macromedia, Inc., 7,0,19,0]
    [C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL]  [Microsoft Corporation, 11.0.5510]
[PID: 1848][C:\WINDOWS\system32\macromed\flash\GetFlash.exe]  [Macromedia, Inc., 7,0,19,0]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
[PID: 2052][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]
    [C:\PROGRA~1\3721\Assist\assist.dll]  [, 2, 0, 2, 3]
    [C:\PROGRA~1\3721\assist\repair.dll]  [北京三七二一科技有限公司, 1, 0, 4, 1001]
    [C:\PROGRA~1\3721\assist\asfsks.dll]  [3721.com, 2, 1, 1, 87]
    [C:\PROGRA~1\3721\assist\optimum.dll]  [N/A, ]
    [C:\PROGRA~1\3721\assist\adfilter.dll]  [ , 1, 0, 1, 0]
    [C:\PROGRA~1\3721\assist\XPStyle.dll]  [N/A, ]
    [C:\Program Files\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\macromed\flash\Flash.ocx]  [Macromedia, Inc., 7,0,19,0]
[PID: 3576][C:\Documents and Settings\Administrator\桌面\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
    [C:\KAV6\KMailFun.dll]  [Kingsoft Co., Ltd, 2005, 4, 28, 227]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[C:\]
[autorun]
autorun=Explorer.exe /DoTricks
shell=test
shell\test=Auto...
shell\test\Command=Explorer.exe
[D:\]
[autorun]
autorun=Explorer.exe /DoTricks
shell=test
shell\test=Auto...
shell\test\Command=Explorer.exe
[E:\]
[autorun]
autorun=Explorer.exe /DoTricks
shell=test
shell\test=Auto...
shell\test\Command=Explorer.exe
[F:\]
[autorun]
autorun=Explorer.exe /DoTricks
shell=test
shell\test=Auto...
shell\test\Command=Explorer.exe
[G:\]
[autorun]
autorun=Explorer.exe /DoTricks
shell=test
shell\test=Auto...
shell\test\Command=Explorer.exe

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]

删除以下启动项
<FolderRaper><G:\老有几.exe> []
删除以下服务
[TP-LINK配置服务程序 / ACS][Running/Auto Start]
<C:\WINDOWS\system32\acs.exe><N/A>
有autorun病毒，
有3721插件

我是新手，到底怎么弄啊？

在补充一下，所有的盘右击都多出了auto,搜索，DOS快速通道三个选项，运行和任务管理器都说以被管理员停用，