每次开机都特别慢,按CTRL+ALT+DEL任务管理器也不跑出来。在安全模式下杀毒杀出一堆，不过反复杀还是有一个病毒。文件是Explorer.exe.病毒trojan.dl.mnless.all,这个病毒好像是在内存中的，每次都自动运行，每次杀完之后都显示清除成功，但是再杀还是有。还有瑞星显示的病毒文件的目录也很怪，看不明白，不知道那位高手能解答一下Explorer.exe>>c:\windows\kb928002.log.
正常模式下不能打开网页，在带网络连接的安全模式下可以上网

瑞星卡卡不能打开，冰刀打开出错

下载 System Repair Engineer，
http://www.kztechs.com/sreng/download.html
1 解压缩sreng2.zip
2 运行SREng.exe
3 智能扫描=》扫描=》保存报告
4 把日志中的报告完整拷贝贴上来，不要修改
日志一次发不完，请分次发上来

[CODE]

2007-06-29,14:20:36

System Repair Engineer 2.4.12.806
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
    <2s3j6kud9wrxli><; >  [N/A]
    <3rzrsjjtbm><; >  [N/A]
    <41u1470q2><; >  [N/A]
    <5dvsm0m6tv><; >  [N/A]
    <87l4rc6r><; >  [N/A]
    <d><; >  [N/A]
    <g4x7gy2sgkkmi><; >  [N/A]
    <gxfe><; >  [N/A]
    <iugzu><; >  [N/A]
    <jzt0cu1m8e8><; >  [N/A]
    <svc><; >  [N/A]
    <thqw><; >  [N/A]
    <zwqvc4ieyy8ixv8><; >  [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
    <run><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Publisher]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Publisher]
    <RavTask><"D:\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <AVPSrv><; C:\WINDOWS\AVPSrv.exe>  [N/A]
    <cmdbcs><; C:\WINDOWS\vqzifj.exe>  [N/A]
    <dasa><; >  [N/A]
    <IMSCMig><; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <intian><; >  [N/A]
    <Load><; C:\WINDOWS\uninstall\rundl132.exe>  [N/A]
    <mhsa><; >  [N/A]
    <Microsoft Autorun1><; C:\WINDOWS\system32\nwizdh.exe>  [N/A]
    <Microsoft Autorun10><; >  [N/A]
    <Microsoft Autorun12><; C:\WINDOWS\system32\nwizzhuxians.exe>  [N/A]
    <Microsoft Autorun14><; C:\WINDOWS\system32\ztinetzt.exe>  [N/A]
    <Microsoft Autorun4><; >  [N/A]
    <Microsoft Autorun5><; C:\WINDOWS\system32\mosou.exe>  [N/A]
    <Microsoft Autorun7><; C:\WINDOWS\system32\nwiztlbu.exe>  [N/A]
    <mppds><; >  [N/A]
    <MS Monitor><; >  [N/A]
    <msccrt><; C:\WINDOWS\msccrt.exe>  [N/A]
    <MsIMMs32><; C:\WINDOWS\MsIMMs32.exe>  [N/A]
    <System><; >  [N/A]
    <TIMHost><; C:\WINDOWS\TIMHost.exe>  [N/A]
    <tlsa><; >  [N/A]
    <upxdnd><; >  [N/A]
    <wdsa><; >  [N/A]
    <WinForm><; C:\WINDOWS\WinForm.exe>  [N/A]
    <wosa><; >  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <RavStub><"D:\Rising\Rav\ravstub.exe" /RUNONCE>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]

==================================
启动文件夹
N/A

==================================
服务
[5181C0A4 / 5181C0A4][Stopped/Disabled]
  <C:\WINDOWS\system32\6EC8C0F0.EXE -k><N/A>
[Provisioning Transaction Service / 919mm][Stopped/Disabled]
  <><N/A>
[AAA30D10 / AAA30D10][Stopped/Disabled]
  <C:\WINDOWS\system32\D4A5AA90.EXE -p><N/A>
[BlackHole Remote Control Services / BRC_Services][Stopped/Disabled]
  <"C:\WINDOWS\system32\brc_Server.exe" /service><N/A>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[kusn33sd / kusn33sd][Stopped/Auto Start]
  <C:\WINDOWS\system32\kusn33sd.exe -j><Microsoft Corporation>
[Win32 Debug Service / MSDebugsvc][Stopped/Auto Start]
  <C:\WINDOWS\system32\rundll32.exe msdebug.dll,input><Microsoft Corporation>
[ms dmo / msdmo][Stopped/Disabled]
  <C:\WINDOWS\system32\msdmo.exe><N/A>
[Fax 2Client / ms_2fax][Stopped/Disabled]
  <><N/A>
[Windows Connection Manager / Plug Connection][Stopped/Disabled]
  <C:\WINDOWS\system32\k11197779332.exe><N/A>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"D:\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
  <"D:\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[WinWLServiceNow / WinWLServiceNow][Stopped/Disabled]
  <><N/A>
[WinWMServiceNow / WinWMServiceNow][Stopped/Disabled]
  <><N/A>

==================================
驱动程序
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[bconusb / bconusb][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\mscache\diskman.sys><N/A>
[Bluesky / Bluesky][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\wincab.sys><N/A>
[deskadw / deskadw][Running/Boot Start]
  <\SystemRoot\system32\drivers\deskadw.sys><N/A>
[Intel(R) PRO Adapter Driver / E100B][Running/Manual Start]
  <system32\DRIVERS\e100b325.sys><Intel Corporation>
[Creative SB AudioPCI Audio Driver (WDM) / ev19x8mp][Running/Manual Start]
  <system32\drivers\ev19x8mp.sys><Creative Technology Ltd.>
[ExpScaner / ExpScaner][Running/Auto Start]
  <\??\D:\Rising\Rav\ExpScan.sys><>
[HookCont / HookCont][Running/Auto Start]
  <\??\D:\Rising\Rav\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
  <\??\D:\Rising\Rav\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
  <\??\D:\Rising\Rav\HookSys.sys><Rising>
[MEMSCAN / MEMSCAN][Running/Auto Start]
  <\??\D:\Rising\Rav\MEMSCAN.sys><瑞星软件有限公司>
[mspora / mspora][Running/Boot Start]
  <\SystemRoot\system32\drivers\mspora.sys><N/A>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
  <system32\drivers\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\npkcrypt.sys><N/A>
[npkycryp / npkycryp][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\npkycryp.sys><N/A>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
  <\??\D:\RISING\RAV\RSPPSYS.sys><Rising>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[smimini / smimini][Running/Manual Start]
  <system32\DRIVERS\smiminib.sys><Silicon Motion Inc.>

浏览器加载项
[腾讯QQ]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\WINDOWS\QQIEHelper.dll, N/A>
[QQCycloneHelper Class]
  {00000000-12C9-4305-82F9-43058F20E8D2} <C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll, N/A>
[MAid Class]
  {01436089-78C2-4C7C-8F39-52A5604B6461} <C:\WINDOWS\system32\mqsvc.ocx, adobe>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\WINDOWS\system32\dllcache\dhtmled.ocx, Microsoft Corporation>
[Info cache]
  {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} <C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll, N/A>
[腾讯QQ]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\WINDOWS\QQIEHelper.dll, N/A>
[IEInit Class]
  {5B02EBA1-EFDD-477D-A37F-05383165C9C0} <C:\WINDOWS\system32\drivers\usrinit.dll, N/A>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[ChinaBuy Class]
  {85FAEA13-9C62-4917-8571-B35C563A1943} <C:\WINDOWS\system32\buyunion.dll, >
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[]
  {C74CDF30-68C2-49B4-9918-EBD66B8D9FBF} <C:\WINDOWS\system32\hzsyekdgrqcac.dll, >
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\CLARK999\flash9.ocx, N/A>
[ff Class]
  {FAAAC0F6-94BE-4466-934B-7C53666A2F41} <C:\WINDOWS\system32\5321.dll, N/A>
[上传到QQ网络硬盘]
  <D:\QQDownload\AddToNetDisk.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://D:\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
  <D:\QQDownload\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\QQDownload\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\QQDownload\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 532][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 604][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 628][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\kusn433sd3.dll]  [Microsoft Corporation, ]
[PID: 672][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 684][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 828][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 896][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 952][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1308][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\KB9280O3.log]  [N/A, ]
    [C:\WINDOWS\system32\mspora.dll]  [Microsoft Corporation, 5.01.2900.2180]
    [C:\WINDOWS\system32\bvyzwn.dll]  [Microsoft Corporation, 5, 2, 2265, 3211]
    [C:\WINDOWS\system32\deskadw.dll]  [Microsoft Corporation, 5.01.2900.2180]
    [C:\WINDOWS\system32\RavExt.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
    [D:\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\WINDOWS\system32\kusn433sd3.dll]  [Microsoft Corporation, ]
[PID: 1308][C:\WINDOWS\netdde32.exe]  [N/A, ]
[PID: 1308][C:\WINDOWS\system32\netdde32.exe]  [N/A, ]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\msdmo.dll]  [, ]
    [D:\Microsoft Office\OFFICE11\msohev.dll]  [Microsoft Corporation, 11.0.5510]
[PID: 1992][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\bvyzwn.dll]  [Microsoft Corporation, 5, 2, 2265, 3211]
[PID: 2840][C:\Documents and Settings\Administrator\桌面\sreng2\SREng.EXE]  [Smallfrogs Studio, 2.4.12.806]
    [C:\WINDOWS\system32\bvyzwn.dll]  [Microsoft Corporation, 5, 2, 2265, 3211]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]

打开SREng-启动项目->注册表->删除以下启动项目
<2s3j6kud9wrxli><; > [N/A]
<3rzrsjjtbm><; > [N/A]
<41u1470q2><; > [N/A]
<5dvsm0m6tv><; > [N/A]
<87l4rc6r><; > [N/A]
<d><; > [N/A]
<g4x7gy2sgkkmi><; > [N/A]
<gxfe><; > [N/A]
<iugzu><; > [N/A]
<jzt0cu1m8e8><; > [N/A]
<svc><; > [N/A]
<thqw><; > [N/A]
<zwqvc4ieyy8ixv8><; > [N/A]
<AVPSrv><; C:\WINDOWS\AVPSrv.exe> [N/A]
<cmdbcs><; C:\WINDOWS\vqzifj.exe> [N/A]
<dasa><; > [N/A]
<intian><; > [N/A]
<Load><; C:\WINDOWS\uninstall\rundl132.exe> [N/A]
<mhsa><; > [N/A]
<Microsoft Autorun1><; C:\WINDOWS\system32\nwizdh.exe> [N/A]
<Microsoft Autorun10><; > [N/A]
<Microsoft Autorun12><; C:\WINDOWS\system32\nwizzhuxians.exe> [N/A]
<Microsoft Autorun14><; C:\WINDOWS\system32\ztinetzt.exe> [N/A]
<Microsoft Autorun4><; > [N/A]
<Microsoft Autorun5><; C:\WINDOWS\system32\mosou.exe> [N/A]
<Microsoft Autorun7><; C:\WINDOWS\system32\nwiztlbu.exe> [N/A]
<mppds><; > [N/A]
<MS Monitor><; > [N/A]
<msccrt><; C:\WINDOWS\msccrt.exe> [N/A]
<MsIMMs32><; C:\WINDOWS\MsIMMs32.exe> [N/A]
<System><; > [N/A]
<TIMHost><; C:\WINDOWS\TIMHost.exe> [N/A]
<tlsa><; > [N/A]
<upxdnd><; > [N/A]
<wdsa><; > [N/A]
<WinForm><; C:\WINDOWS\WinForm.exe> [N/A]
<wosa><; > [N/A]

删除下面的服务（运行SRENG--->启动项目--->服务--->Win32服务应用程序--->选择要删除的服务--->选择删除服务--->点击设置--->出现提示里选择否，确认删除。）
[5181C0A4 / 5181C0A4][Stopped/Disabled]
<C:\WINDOWS\system32\6EC8C0F0.EXE -k><N/A>
[AAA30D10 / AAA30D10][Stopped/Disabled]
<C:\WINDOWS\system32\D4A5AA90.EXE -p><N/A>
[kusn33sd / kusn33sd][Stopped/Auto Start]
<C:\WINDOWS\system32\kusn33sd.exe -j><Microsoft Corporation>
[Win32 Debug Service / MSDebugsvc][Stopped/Auto Start]
<C:\WINDOWS\system32\rundll32.exe msdebug.dll,input><Microsoft Corporation>
[ms dmo / msdmo][Stopped/Disabled]
<C:\WINDOWS\system32\msdmo.exe><N/A>
[Windows Connection Manager / Plug Connection][Stopped/Disabled]
<C:\WINDOWS\system32\k11197779332.exe><N/A>

删除下面的驱动（运行SRENG--->启动项目--->服务--->驱动程序--->选择要删除的驱动--->选择删除服务--->点击设置--->出现提示里选择否，确认删除。）
[Bluesky / Bluesky][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\wincab.sys><N/A>
[deskadw / deskadw][Running/Boot Start]
<\SystemRoot\system32\drivers\deskadw.sys><N/A>
[mspora / mspora][Running/Boot Start]
<\SystemRoot\system32\drivers\mspora.sys><N/A>
[npkycryp / npkycryp][Stopped/Manual Start]
<\??\C:\WINDOWS\system32\npkycryp.sys><N/A>

重启删除以下文件
C:\WINDOWS\KB9280O3.log
C:\WINDOWS\netdde32.exe
C:\WINDOWS\system32\netdde32.exe
C:\WINDOWS\AVPSrv.exe
C:\WINDOWS\vqzifj.exe
C:\WINDOWS\uninstall\rundl132.exe
C:\WINDOWS\system32\nwizdh.exe
C:\WINDOWS\system32\nwizzhuxians.exe
C:\WINDOWS\system32\ztinetzt.exe
C:\WINDOWS\system32\mosou.exe
C:\WINDOWS\system32\nwiztlbu.exe
C:\WINDOWS\msccrt.exe
C:\WINDOWS\MsIMMs32.exe
C:\WINDOWS\TIMHost.exe
C:\WINDOWS\WinForm.exe
C:\WINDOWS\system32\6EC8C0F0.EXE
C:\WINDOWS\system32\D4A5AA90.EXE
C:\WINDOWS\system32\kusn33sd.exe
C:\WINDOWS\system32\msdebug.dll
C:\WINDOWS\system32\msdmo.exe
C:\WINDOWS\system32\k11197779332.exe
C:\WINDOWS\system32\wincab.sys
C:\WINDOWS\system32\drivers\deskadw.sys
C:\WINDOWS\system32\drivers\mspora.sys
C:\WINDOWS\system32\npkycryp.sys

删不掉的用冰刃删除

下载威金专杀杀毒
http://www.chenoe.com/AntiVirus  民间专杀
江民威金专杀
http://www.jiangmin.com/download/zhuansha04.htm

下载arswp(Windows清理助手)清理下
http://www.arswp.com/download/arswp/arswp.rar

重装下QQ

还有电脑时间会被改到2005年,不知道是为什么

汗．．．一卡就重复了．．！

引用:

【小乡飞花的贴子】还有电脑时间会被改到2005年,不知道是为什么 ………………

病毒所为．

我昨天已经用过金山和瑞星的威金专杀,不过是在安全模试下杀得没有杀出一个来
还有 显示所有文件和文件夹 这个选项也没有,用过网上流行的办法不过还是没有把他弄出来

引用:

【小乡飞花的贴子】我昨天已经用过金山和瑞星的威金专杀,不过是在安全模试下杀得没有杀出一个来 还有 显示所有文件和文件夹 这个选项也没有,用过网上流行的办法不过还是没有把他弄出来 ………………

照四楼操作．．还有问题再扫个日志上来．！