[C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
[PID: 400 / new][RsHide]  [N/A, ]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
[PID: 648 / new][RsHide]  [N/A, ]
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [C:\Program Files\Rising\Rav\BWList.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 10]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Rising\Rav\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RsCommX.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
[PID: 1596 / new][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
[PID: 3024 / new][C:\WINDOWS\system32\conime.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
[PID: 3172 / new][RsHide]  [N/A, ]
    [c:\program files\rising\rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [c:\program files\rising\rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [c:\program files\rising\rfw\RfwCtrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [c:\program files\rising\rfw\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [c:\program files\rising\rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]

[C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
[PID: 3184 / new][RsHide]  [N/A, ]
    [c:\program files\rising\rfw\RsGuiLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
    [c:\program files\rising\rfw\RSAPPMGR.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 2]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [c:\program files\rising\rfw\CfgDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 13]
    [c:\program files\rising\rfw\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [c:\program files\rising\rfw\RfwCtrl.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
    [c:\program files\rising\rfw\ProxyCtr.dll]  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 2]
    [c:\program files\rising\rfw\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [c:\program files\rising\rfw\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [c:\program files\rising\rfw\mPorts.dll]  [Beijing Rising Technology Co., Ltd., 4, 0, 0, 3]
[PID: 3596 / new][c:\program files\rising\rfw\ScanBD.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
    [C:\Program Files\Rising\Rav\RsCommx.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [c:\program files\rising\rfw\BDEngine.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 13]
    [c:\program files\rising\rfw\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [c:\program files\rising\rfw\BDEX.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 3]
    [c:\program files\rising\rfw\BDLib.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 1]
[PID: 3500 / new][C:\Program Files\Maxthon\maxthon.exe]  [Maxthon International Ltd., 1, 5, 9, 30]
    [C:\Program Files\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\WINDOWS\system32\odbcbcp.dll]  [Microsoft Corporation, 2000.085.1117.00 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\Program Files\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Rising\Rav\RavScrCh.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 4]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\flash.ocx]  [Macromedia, Inc., 7,0,14,0]
    [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
[PID: 2856 / new][C:\Program Files\Rising\Rav\RsLogVw.exe]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 16]
    [C:\Program Files\Rising\Rav\RsCommx.dll]  [rising, 18, 0, 0, 1]
    [C:\Program Files\Rising\Rav\rsguilib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
    [C:\Program Files\Rising\Rav\RsXML.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
    [C:\Program Files\Rising\Rav\PngDll.dll]  [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\Program Files\Rising\Rav\libload.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 19]
    [C:\Program Files\Rising\Rav\VirusLib.dll]  [Beijing Rising Technology Co., Ltd., 19, 0, 0, 15]
    [C:\WINDOWS\system32\msacm32.drv]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
    [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
[PID: 1316 / new][C:\Program Files\SuperSoft\RdfSnap\RdfSnap.exe]  [非常软件(北京)工作室, 1.02.0003]
    [C:\WINDOWS\system32\MSVBVM60.DLL]  [Microsoft Corporation, 6.00.9782]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\SuperSoft\RdfSnap\PicFormat32.ocx]  [Taproot, 1.00.0001]
    [C:\WINDOWS\system32\MSSTDFMT.DLL]  [Microsoft Corporation, 6.01.9782]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\WINWB86.IME]  [Microsoft Corporation, 4.00.950]
[PID: 3008 / new][C:\Documents and Settings\new\桌面\新建文件夹 (5)\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\WINDOWS\system32\dhdpri.dll]  [N/A, ]
    [C:\DOCUME~1\new\LOCALS~1\Temp\rsv5.tmp]  [Beijing Rising Tech. Co., Ltd., 1, 3, 0, 0]
    [C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys]  [N/A, ]
    [C:\Program Files\Rising\AntiSpyware\ieprot.dll]  [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
    [C:\WINDOWS\system32\jhapri.dll]  [N/A, ]
    [C:\WINDOWS\system32\ztmpri.dll]  [N/A, ]
    [C:\WINDOWS\system32\xyipri.dll]  [N/A, ]
    [C:\Documents and Settings\new\桌面\新建文件夹 (5)\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[D:\]
[AutoRun]
open=IO.pif
shellexecute=IO.pif
shell\\Auto\\command=IO.pif
[E:\]
[AutoRun]
open=IO.pif
shellexecute=IO.pif
shell\\Auto\\command=IO.pif
[F:\]
[AutoRun]
open=IO.pif
shellexecute=IO.pif
shell\\Auto\\command=IO.pif
[G:\]
[AutoRun]
open=IO.pif
shellexecute=IO.pif
shell\\Auto\\command=IO.pif

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 3172, C:\WINDOWS\RSHIDE]
特殊特权被允许： SeDebugPrivilege [PID = 3184, C:\WINDOWS\RSHIDE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3184, C:\WINDOWS\RSHIDE]
特殊特权被允许： SeDebugPrivilege [PID = 3596, C:\PROGRAM FILES\RISING\RFW\SCANBD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3596, C:\PROGRAM FILES\RISING\RFW\SCANBD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3500, C:\PROGRAM FILES\MAXTHON\MAXTHON.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2856, C:\PROGRAM FILES\RISING\RAV\RSLOGVW.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1316, C:\PROGRAM FILES\SUPERSOFT\RDFSNAP\RDFSNAP.EXE]

==================================

API HOOK
入口点错误：RegCreateKeyExA (危险等级: 高,  被下面模块所HOOK: 0x00E91FE5)
入口点错误：RegCreateKeyExW (危险等级: 高,  被下面模块所HOOK: 0x00E920B5)
GetVersion (危险等级: 一般,  被下面模块所HOOK: )
GetVersionExW (危险等级: 一般,  被下面模块所HOOK: )
DeleteFileW (危险等级: 高,  被下面模块所HOOK: )
FindFirstFileExW (危险等级: 高,  被下面模块所HOOK: )
RVA  错误： Process32NextW (危险等级: 高,  被下面模块所HOOK: 0x00E93830)
RVA  错误： Module32FirstW (危险等级: 高,  被下面模块所HOOK: 0x00E93900)
入口点错误：TerminateProcess (危险等级: 高,  被下面模块所HOOK: 0x00E94055)
TerminateThread (危险等级: 高,  被下面模块所HOOK: )
入口点错误：CreateProcessA (危险等级: 高,  被下面模块所HOOK: 0x00E92185)
入口点错误：CreateProcessW (危险等级: 高,  被下面模块所HOOK: 0x00E92255)
FindFirstChangeNotificationW (危险等级: 高,  被下面模块所HOOK: )
GetCurrentProcess (危险等级: 一般,  被下面模块所HOOK: )
GetCurrentProcessId (危险等级: 一般,  被下面模块所HOOK: )
GetCurrentThread (危险等级: 一般,  被下面模块所HOOK: )
GetCurrentThreadId (危险等级: 一般,  被下面模块所HOOK: )
GetFileSizeEx (危险等级: 一般,  被下面模块所HOOK: )
GetFileInformationByHandle (危险等级: 一般,  被下面模块所HOOK: )
GetFileAttributesW (危险等级: 一般,  被下面模块所HOOK: )
OpenProcess (危险等级: 高,  被下面模块所HOOK: )
OpenThread (危险等级: 高,  被下面模块所HOOK: )
入口点错误：FindWindowA (危险等级: 高,  被下面模块所HOOK: 0x00E939D5)
入口点错误：FindWindowExA (危险等级: 高,  被下面模块所HOOK: 0x00E93B75)
入口点错误：FindWindowExW (危险等级: 高,  被下面模块所HOOK: 0x00E93C45)
入口点错误：FindWindowW (危险等级: 高,  被下面模块所HOOK: 0x00E93AA5)
入口点错误：SendMessageA (危险等级: 高,  被下面模块所HOOK: 0x00E93D15)
入口点错误：SendMessageW (危险等级: 高,  被下面模块所HOOK: 0x00E93DE5)

==================================
隐藏进程
N/A

==================================


[/CODE]

好了前辈我发完了，请过目

请参照置顶帖：http://forum.ikaka.com/topic.asp?board=28&artid=8346236

就像斑竹说的，你的系统中还有别的病毒，偶是新手不敢乱说以免误人！以下仅供参考：
<boot-hf><c:\windows\BOOT-hf.exe> []
<><C:\Program Files\Common Files\Services\svchost.exe> []
<{A13AF41A-21B1-131B-1BFC-D2A90DF4A2BA}><C:\WINDOWS\system32\xyipri.dll> []
<{D1351752-5628-1547-FFAB-BADC13512AFD}><C:\WINDOWS\system32\ztmpri.dll> []
<{42311A42-AC1B-158F-FD32-5674345F23A4}><C:\WINDOWS\system32\dhdpri.dll> []
<{5D83AD9C-3BFC-43F5-979D-2904DBC54A8E}><C:\Program Files\Internet Explorer\PLUGINS\WinSys64.Sys> []
<{252D2432-37A2-324F-2A54-21BF5CF2F1A2}><C:\WINDOWS\system32\jhapri.dll> []
<{7A65498A-7653-9801-1647-987114AB7F47}><C:\WINDOWS\system32\zxgpri.dll> [N/A]
Autorun.inf
[D:\]
[AutoRun]
open=IO.pif
shellexecute=IO.pif
shell\\Auto\\command=IO.pif
[E:\]
[AutoRun]
open=IO.pif
shellexecute=IO.pif
shell\\Auto\\command=IO.pif
[F:\]
[AutoRun]
open=IO.pif
shellexecute=IO.pif
shell\\Auto\\command=IO.pif
[G:\]
[AutoRun]
open=IO.pif
shellexecute=IO.pif
shell\\Auto\\command=IO.pif

总之谢谢了，能帮忙的就帮一把吧，实在是头疼死了，这次弄好了我会写进博客和日记中，让更多遇到这个情况的人不再郁闷，制造病毒的人真TM不是人，千刀万刮都不解恨.

不堪回首这个办法也不行呀,我按你的办法去做了,那些文件都是我这一边重命名,它那一边就消失了,等重新启机后,再找怎么也找不着了,而且电脑又多添了一个老新重启机的毛病,你这办法是杀病毒还是制造病毒啊,急死人了

火影忍者有高见吧,赐教一下吧