最近用IE浏览器上网，其它网站都行，就是上不了淘宝土豆校内等网站。
然后用360扫出个伪装IE木马程序，最后被成功解决掉了
可是，仍然上不去这几个网，于是换了腾讯的TT，还是不行，我该怎么办呢？

我用的是vista系统







好吧，我决定一键恢复了
用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; QQDownload 1.7; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506)

即然你会用360,就请把360的报告传上来看看吧...病毒那么多.,不看报告随便和你说是很不负责任的...

各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供 http://www.360.cn
诊断时间: 2009-01-22  00:38:06
诊断平台: Windows Vista (TM) Home Basic  Service Pack 1
IE版本: Internet Explorer V4.0.0000 Build:76001
计算机物理内存:957.88MB - 当前可用内存:154.59MB

100 - 未知 - Process: audiodg.exe [] -
100 - 未知 - Process: RsStub.exe [risstub Application] - C:\Program Files\Rising\Rav\RsStub.exe
100 - 未知 - Process: XAudio.exe [Modem Audio Service] - C:\Windows\system32\DRIVERS\xaudio.exe
100 - 未知 - Process: hpqwmiex.exe [hpqwmiex Module] - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
100 - 未知 - Process: TXPlatform.exe [Tencent Instant Messaging Platform] - C:\Program Files\Tencent\QQ\TXPlatform.exe
100 - 未知 - Process: SynTPHelper.exe [Synaptics Pointing Device Helper] - C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
100 - 未知 - Process: hphc_service.exe [HP Health Check Service] - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
100 - 未知 - Process: TudouVa.exe [飞速土豆1.12] - C:\PROGRA~1\Tudou\飞速TU~1\TudouVa.exe
R0 - 未知 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=www.6700.cn?tn=102742
O2 - 未知 - BHO: (浏览器辅助对象(BHO)) - [无效的CLSID:{06849E9B-C8D7-4D59-B87D-784B7D6BE0B3}] - {06849E9B-C8D7-4D59-B87D-784B7D6BE0B3} -
O2 - 未知 - BHO: (QQCycloneHelper Class) - [超级旋风下载组件] - {06849E9C-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll
O2 - 未知 - BHO: (浏览器辅助对象(BHO)) - [无效的CLSID:{06849E9D-C8D7-4D59-B87D-784B7D6BE0B3}] - {06849E9D-C8D7-4D59-B87D-784B7D6BE0B3} -
O2 - 未知 - BHO: (浏览器辅助对象(BHO)) - [无效的CLSID:{06849E9E-C8D7-4D59-B87D-784B7D6BE0B3}] - {06849E9E-C8D7-4D59-B87D-784B7D6BE0B3} -
O8 - 未知 - Extra context menu item: &使用超级旋风下载 - C:\Program Files\Tencent\QQDownload\geturl.htm
O8 - 未知 - Extra context menu item: &使用超级旋风下载全部链接 - C:\Program Files\Tencent\QQDownload\getAllurl.htm
O21 - 未知 - Protocol Icons: HKCR\http\shell\open\command - "C:\Program Files\Tencent\TT\bin\TTraveler.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\ftp\shell\open\command - "C:\Program Files\Tencent\TT\bin\TTraveler.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\https\shell\open\command - "C:\Program Files\Tencent\TT\bin\TTraveler.exe" "%1"
O21 - 未知 - Protocol Icons: HKCR\htmlfile\shell\open\command - "C:\Program Files\Tencent\TT\bin\TTraveler.exe" "%1"
O23 - 未知 - Service: AddFiltr [AddFiltr] - "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe" - (not running)
O23 - 未知 - Service: ccosm [Contrl Center of Storm Media] - C:\Program Files\StormII\stormliv.exe /asservice - (not running)
O23 - 未知 - Service: CLTNetCnService [Symantec Lic NetConnect Service] - "c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon - (not running)
O23 - 未知 - Service: DPS [@%systemroot%\system32\dps.dll,-501] - C:\Windows\system32\dps.dll - (error)
O23 - 未知 - Service: Eventlog [@%SystemRoot%\system32\wevtsvc.dll,-201] - C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted - (running)
O23 - 未知 - Service: HP Health Check Service [HP Health Check Service] - "C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe" - (running)
O23 - 未知 - Service: hpqwmiex [hpqwmiex] - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe - (running)
O23 - 未知 - Service: IDriverT [Provides support for the Running Object Table for InstallShield Drivers] - "C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe" - (not running)
O23 - 未知 - Service: idsvc [@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8192] - "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" - (error)
O23 - 未知 - Service: MSiSCSI [@%SystemRoot%\system32\iscsidsc.dll,-5001] - C:\Windows\system32\iscsiexe.dll - (not running)
O23 - 未知 - Service: msiserver [@%SystemRoot%\system32\msimsg.dll,-32] - C:\Windows\system32\msiexec /V - (not running)
O23 - 未知 - Service: NetTcpPortSharing [@%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8200] - "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" - (not running)
O23 - 未知 - Service: nsi [@%SystemRoot%\system32\nsisvc.dll,-201] - C:\Windows\system32\nsisvc.dll - (running)
O23 - 未知 - Service: pla [@%systemroot%\system32\pla.dll,-501] - C:\Windows\system32\pla.dll - (not running)
O23 - 未知 - Service: PolicyAgent [@%SystemRoot%\system32\polstore.dll,-5011] - C:\Windows\System32\ipsecsvc.dll - (running)
O23 - 未知 - Service: RoxMediaDB9 [Roxio RoxMediaDB9 Service] - "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe" - (not running)
O23 - 未知 - Service: RsOlHost [Offers scan services for Rising Online Anit-Virus Product] - "C:\Program Files\Rising\RavOL\RsOLHost.exe" - (not running)
O23 - 未知 - Service: RsVScanner [Rising Vista Scanner] - C:\Program Files\Rising\Rav\scannerd.exe - (not running)
O23 - 未知 - Service: SCardSvr [@%SystemRoot%\System32\SCardSvr.dll,-5] - C:\Windows\System32\SCardSvr.dll - (error)
O23 - 未知 - Service: ServiceLayer [ServiceLayer] - "C:\Program Files\PC Connectivity Solution\ServiceLayer.exe" - (not running)
O23 - 未知 - Service: SstpSvc [@%SystemRoot%\system32\sstpsvc.dll,-201] - C:\Windows\system32\sstpsvc.dll - (running)
O23 - 未知 - Service: stllssvr [stllssvr] - "C:\Program Files\Common Files\SureThing Shared\stllssvr.exe" - (not running)
O23 - 未知 - Service: WPCSvc [@%SystemRoot%\system32\wpcsvc.dll,-101] - C:\Windows\System32\wpcsvc.dll - (not running)
O23 - 未知 - Service: wuauserv [@%systemroot%\system32\wuaueng.dll,-106] - C:\Windows\system32\wuaueng.dll - (running)
O23 - 未知 - Service: XAudioService [User-mode gate for Modem Speakerphone] - C:\Windows\system32\DRIVERS\xaudio.exe - (running)

=======================================

100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\Windows\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=bas
100 - 安全 - Process: wininit.exe [Windows启动应用程序。] - C:\Windows\system32\wininit.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\Windows\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=bas
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\Windows\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\Windows\system32\lsass.exe
100 - 默认 - Process: lsm.exe [本地会话管理器服务] - C:\Windows\system32\lsm.exe
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\Windows\system32\winlogon.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k rpcss
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\System32\svchost.exe -k secsvcs
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] - C:\Program Files\Rising\Rav\CCENTER.EXE
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k netsvcs
100 - 安全 - Process: SLsvc.exe [微软软件授权服务。] - C:\Windows\system32\SLsvc.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k LocalService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k NetworkService
100 - 安全 - Process: RavMonD.exe [瑞星杀毒软件的一部分。] - C:\Program Files\Rising\Rav\RavMonD.exe
100 - 安全 - Process: rsnetsvr.exe [瑞星2009相关程序。] - C:\Program Files\Rising\Rav\rsnetsvr.exe
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\Windows\System32\spoolsv.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
100 - 安全 - Process: taskeng.exe [Windows任务计划程序引擎。] - C:\Windows\system32\taskeng.exe
100 - 安全 - Process: taskeng.exe [Windows任务计划程序引擎。] - C:\Windows\system32\taskeng.exe
100 - 安全 - Process: dwm.exe [Windows桌面窗口管理器。] - C:\Windows\system32\Dwm.exe
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\Windows\Explorer.EXE
100 - 安全 - Process: LSSrvc.exe [一款名为LightScribe(光雕技术)的刻录机，可以在光盘上光雕个性化图案。] - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
100 - 安全 - Process: RavTask.exe [瑞星出品的杀毒软件相关程序。] - C:\Program Files\Rising\Rav\RavTask.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k regsvc
100 - 安全 - Process: ScanFrm.exe [瑞星2009相关程序。] - C:\Program Files\Rising\Rav\ScanFrm.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\system32\svchost.exe -k imgsvc
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\Windows\System32\svchost.exe -k WerSvcGroup
100 - 默认 - Process: SearchIndexer.exe [微软搜索引擎相关程序。] - C:\Windows\system32\SearchIndexer.exe /Embedding
100 - 安全 - Process: WmiPrvSE.exe [wmi 提供程序 (wmi provider) 在 wmi 和操作系统、应用程序以及其他系统的组件之间充当中介.此进程为合法的系统进程。] - C:\Windows\system32\wbem\wmiprvse.exe
100 - 安全 - Process: SynTPEnh.exe [美国新思公司出版的触摸板驱动程序的一部分。] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
100 - 安全 - Process: hpwuSchd2.exe [惠普公司出品的相关产品的更新升级程序。] - C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
100 - 安全 - Process: realsched.exe [realone播放器安装时附带的升级提醒程序。] - C:\Program Files\Common Files\Real\Update_OB\realsched.exe
100 - 安全 - Process: RsTray.exe [瑞星2009相关程序。] - C:\Program Files\Rising\Rav\RsTray.exe
100 - 安全 - Process: RSTray.exe [卡卡上网助手6相关程序。] - C:\Program Files\Rising\AntiSpyware\RSTray.exe
100 - 安全 - Process: safeboxTray.exe [360安全卫士保险箱相关程序。] - C:\Program Files\360\360safebox\safeboxTray.exe
100 - 安全 - Process: QQ.exe [腾讯公司出品的qq即时通讯软件。] - C:\Program Files\Tencent\QQ\QQ.exe
100 - 安全 - Process: unsecapp.exe [windows管理规范(wmi)相关程序，管理本地和远程计算机。] - C:\Windows\system32\wbem\unsecapp.exe -Embedding
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - C:\Program Files\360\360Safe\safemon\360tray.exe
100 - 安全 - Process: ieuser.exe [Internet Explorer7用户权限代理程序。] - C:\Program Files\Internet Explorer\IEUser.exe
100 - 安全 - Process: wmpnscfg.exe [window媒体播放器相关程序。] - C:\Program Files\Windows Media Player\wmpnscfg.exe
100 - 安全 - Process: wmpnetwk.exe [window媒体播放器相关程序。] - C:\Program Files\Windows Media Player\wmpnetwk.exe
100 - 安全 - Process: TTraveler.exe [腾讯浏览器相关进程。] - C:\Program Files\Tencent\TT\bin\TTraveler.exe
100 - 安全 - Process: conime.exe [console ime ime输入法控制台软件。] - C:\Windows\system32\conime.exe
100 - 安全 - Process: knownsvr.exe [Rising AntiSpyware] - C:\Program Files\Rising\AntiSpyware\knownsvr.exe
100 - 安全 - Process: iexplore.exe [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe
100 - 安全 - Process: iexplore.exe [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe
100 - 默认 - Process: SearchProtocolHost.exe [microsoft windows Vista桌面搜索协议程序。] - C:\Windows\system32\SearchProtocolHost.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - C:\Program Files\360\360Safe\360Safe.exe
100 - 默认 - Process: SearchFilterHost.exe [ microsoft Windows Vista桌面搜索过滤器程序。] - C:\Windows\system32\SearchFilterHost.exe
100 - 安全 - Process: TTraveler.exe [腾讯浏览器相关进程。] - ?
O2 - 安全 - BHO: (IeCatch2 Class) - [网际快车IE模块。] - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - 安全 - BHO: (Windows Live Toolbar Helper) - [MSN 搜索工具栏，搜索工具栏。] - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -
O4 - 安全 - HKLM\..\Run: [SynTPEnh] [新思手写板，多用于各种笔记本触摸板驱动程序设置] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - 安全 - HKLM\..\Run: [HP Software Update] [惠普软件升级程序。] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - 安全 - HKLM\..\Run: [TkBellExe] [是Real Networks产品定时升级检测程序。] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 安全 - HKLM\..\Run: [RavTray] [瑞星公司出品的杀毒软件相关程序。] "C:\Program Files\Rising\Rav\RsTray.exe" -system
O4 - 安全 - HKLM\..\Run: [NvCplDaemon] [是NVIDIA显示卡相关动态链接库文件。] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - 安全 - HKLM\..\Run: [NvMediaCenter] [是NVidia显示卡相关文件。] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - 安全 - HKLM\..\Run: [runeip] [卡卡上网安全助手相关程序。] "C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup
O4 - 安全 - HKLM\..\Run: [360Safebox] [360安全卫士保险箱相关程序。] "C:\Program Files\360\360safebox\safeboxTray.exe" /r
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] C:\Program Files\360\360Safe\safemon\360tray.exe /start
O4 - 安全 - HKCU\..\Run: [MsnMsgr] [微软msn即时通讯工具] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - 安全 - Startup folder: [腾讯QQ.lnk] [qq：即时通讯软件] C:\Users\蔡伟鸣\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\腾讯QQ.lnk
O11 - 安全 - Options Group: Java Sun
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O23 - 安全 - Service: LightScribeService [一个来自dvd刻录机\\\"光雕\\\"软件的相关程序,通过用户许可协议安装。] - "C:\Program Files\Common Files\LightScribe\LSSrvc.exe" - (running)
O23 - 安全 - Service: RavCCenter [瑞星2009的相关服务。] - C:\Program Files\Rising\Rav\CCENTER.EXE - (not running)
O23 - 安全 - Service: RavTask [瑞星2009的相关服务。] - "C:\Program Files\Rising\Rav\RavTask.exe" RavTask - (running)
O23 - 安全 - Service: RsRavMon [是瑞星杀毒软件相关监控程序。] - C:\Program Files\Rising\Rav\RavMonD.exe - (not running)
O23 - 安全 - Service: RsScanSrv [瑞星2009的相关服务。] - C:\Program Files\Rising\Rav\ScanFrm.exe - (not running)
O23 - 安全 - Service: SNMPTRAP [微软Microsoft Windows操作系统相关程序，用于监听简单网络管理协议SNMP的消息。] - C:\Windows\System32\snmptrap.exe - (not running)
O23 - 安全 - Service: usnjsvc [Windows Live相关服务。] - "C:\Program Files\Windows Live\Messenger\usnsvc.exe" - (not running)
O23 - 安全 - Service: WLSetupSvc [Windows Live相关服务。] - "C:\Program Files\Windows Live\installer\WLSetupSvc.exe" - (not running)

=======================================

O31 - 未知 - Other Autoruns: Kmode - \SystemRoot\System32\win32k.sys -  -  -  - 0 -
O31 - 未知 - Other Autoruns:  - C:\Windows\Explorer.exe /separate,/e -  -  -  - 0 -
O31 - 未知 - Folder Menu: {F9DB5320-233E-11D1-9F84-707F02C10627} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll - Adobe Systems, Inc. - PDF Shell Extension - 8.1.0.0 - 372736 - 2094bc9a0fc9c0e15eea5f4a9581dd14
O31 - 未知 - SEApproved: {b2c761c6-29bc-4f19-9251-e6195265baf1} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {7A979262-40CE-46ff-AEEE-7884AC3B6136} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {3e7efb4c-faf1-453d-89eb-56026875ef90} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {0DF44EAA-FF21-4412-828E-260A8728E7F1} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：ActiveDirectory Folder -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：ActiveDirectory Folder -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Sam Account Folder -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Sam Account Folder -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {E44E5D18-0652-4508-A4E2-8A090067BCB0} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {6dfd7c5c-2451-11d3-a299-00c04f8ef6af} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Explorer Query Band -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {38a98528-6cbf-4ca9-8dc0-b1e1d10f7b1b} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Contacts folder -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {4026492f-2f69-46b8-b9bf-5654fc07e423} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {fcfeecae-ee1b-4849-ae50-685dcf7717ec} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {a304259d-52b8-4526-8b1a-a1d6cecc8243} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：.cab or .zip files -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID：Windows Search Shell Service -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {d3e34b21-9d75-101a-8c3d-00aa001a1652} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {00f2886f-cd64-4fc9-8ec5-30ef6cdbe8c3} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {9D687A4C-1404-41ef-A089-883B6FBECDE6} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {37efd44d-ef8d-41b1-940d-96973a50e9e0} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {67718415-c450-4f3c-bf8a-b487642dc39b} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {d8559eb9-20c0-410e-beda-7ed416aecc2a} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {5ea4f148-308c-46d7-98a9-49041b1dd468} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {031EE060-67BC-460d-8847-E4A7C5E45A27} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {7dda204b-2097-47c9-8323-c40bb840ae44} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {7A9D77BD-5403-11d2-8785-2E0420524153} -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {7F67036B-66F1-411A-AD85-759FB9C5B0DB} - C:\Windows\System32\ShellvRTF.dll - XSS - ShellvRTF - 1.1.0.5 - 237568 - 91fa8d1db1ec243cecd4a0977c91cc6f
O31 - 未知 - SEApproved: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 128512 - a6848472777fbcfa17236deb3f518d7c
O31 - 未知 - SEApproved: {416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} - C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll - Nokia - Phone Browser - 6.83.74.9 - 577536 - 946f3ae1ee8204261a695a153a2afff0
O31 - 未知 - SEApproved: 无效的CLSID： -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID： -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID： -  -  -  -  - 0 -
O31 - 未知 - SEApproved: 无效的CLSID： -  -  -  -  - 0 -
O31 - 未知 - SEApproved: {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} - C:\Windows\system32\TudouUpload.dll - www.Tudou.com - DLL registration shell extension - 1.1.0.0 - 76800 - 4329b1e3eff4c58146099c98765db586
O31 - 未知 - SEApproved: {33BBE430-0E42-4F12-B075-8D21ACB10DCB} - C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll -  -  -  - 0 -
O31 - 未知 - Directory Menu: {B41DB860-8EE4-11D2-9906-E49FADC173CA} - C:\Program Files\WinRAR\rarext.dll -  -  -  - 128512 - a6848472777fbcfa17236deb3f518d7c
O31 - 未知 - BootExecute:  bsmain -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - sv1_0.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - channel.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - digest.dll -  -  -  - 0 -
O31 - 未知 - LSA: Security Packages - spkg.dll -  -  -  - 0 -

=======================================

O40 - Explorer.EXE -  - C:\Windows\system32\1peBhY.dll -  - c92214af507295f9f482beac1c6e6491
O40 - Explorer.EXE - Nokia - C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll - Phone Browser - 946f3ae1ee8204261a695a153a2afff0
O40 - Explorer.EXE - Nokia - C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll - PC Suite Common Modules - 5061b30a831cd8f25a9a8da155276214
O40 - Explorer.EXE - Microsoft Corporation - C:\Windows\system32\MSVCP71.dll - Microsoft? C++ Runtime Library - 561fa2abb31dfa8fab762145f81667c2
O40 - Explorer.EXE - Microsoft Corporation - C:\Windows\system32\MSVCR71.dll - Microsoft? C Runtime Library - 86f1895ae8c5e8b17d99ece768a70732
O40 - Explorer.EXE - www.Tudou.com - C:\Windows\system32\TudouUpload.dll - DLL registration shell extension - 4329b1e3eff4c58146099c98765db586

=======================================

O41 - plhdw - plhdw - C:\Windows\System32\drivers\plhdw.sys - (running) -  -  - 19dcf4b1b797f215a8fef11fe8c46648
O41 - PxHelp20 - Px Engine Device Driver for Windows 2000/XP - C:\Windows\System32\drivers\pxhelp20.sys - (running) - Px Engine Device Driver for Windows 2000/XP - Sonic Solutions - feffcfdc528764a04c8ed63d5fa6e711
O41 - sfcure01 - sfcure01 - C:\Windows\System32\drivers\sfcure01.sys - (not running) -  -  -
O41 - UIUSys - UIUSys - C:\Windows\system32\DRIVERS\UIUSYS.SYS - (not running) -  -  -

=======================================
360Safe.exe=5.0.0.1015
AntiAdwa.dll=4.2.0.1002
AntiEng.dll=4.4.0.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=4.2.0.1002
live.dll=1.0.1.1029

=======================================
操作历史报告：
----------清理恶评及系统插件历史----------

2009-01-21 19:49
清理恶评软件 - winp广告软件 -
清理恶评软件 - 伪装IE恶意木马 -
2009-01-21 20:14
清理恶评软件 - 伪装IE恶意木马 -
2009-01-21 21:19
清理恶评软件 - 伪装IE恶意木马 -
2009-01-21 21:51
清理恶评软件 - Adobe Reader附带的BHO插件 -
清理恶评软件 - 伪装IE恶意木马 -

2009-01-21 19:45
清理恶评插件 - winp广告软件 - C:\Program Files\winp
清理恶评插件 - 伪装IE恶意木马 -
2009-01-21 20:10
清理恶评插件 - 伪装IE恶意木马 -
2009-01-21 20:11
清理恶评插件 - 伪装IE恶意木马 -
2009-01-21 20:16
清理恶评插件 - 伪装IE恶意木马 -
2009-01-21 20:41
清理恶评插件 - 伪装IE恶意木马 -
2009-01-21 20:43
清理恶评插件 - 伪装IE恶意木马 -
2009-01-21 21:29
清理恶评插件 - 伪装IE恶意木马 -
2009-01-21 21:44
清理恶评插件 - 一搜工具条 -
2009-01-21 21:45
清理其它插件 - Adobe Reader附带的BHO插件 - C:\PROGRA~1\COMMON~1\Adobe\Acrobat\ActiveX\ACROIE~1.DLL
2009-01-21 21:46
清理其它插件 - Java(TM) 2 浏览器辅助插件 - C:\PROGRA~1\Java\JRE16~1.0\bin\ssv.dll

----------全面诊断修复历史----------

2009-01-21 20:23
O4 - 危险 - YLive.exe - C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe
O4 - 危险 - yassistse - C:\Program Files\Yahoo!\Assistant\yAssistSe.exe
O2 - 危险 - Yahoo!Photo - C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll
O2 - 危险 - AntiFish Class - C:\Program Files\Yahoo!\Assistant\Assist\yAngling.dll
O2 - 危险 - DragSearch BHO - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
O3 - 危险 - 雅虎助手 - C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll
R3 - 危险 - 雅虎助手 - C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll

----------修复IE浏览器操作历史----------

2009-01-21 20:49
R0 - 危险 - IE首页 - HKCU\Software\Microsoft\Internet Explorer\Main

=======================================

360安全卫士，彻底查杀各种流氓软件,全面保护系统安全
最新免费下载：http://www.360.cn/download.html

C:\Windows\system32\1peBhY.dll
C:\Windows\System32\drivers\plhdw.sys
提交到这里，或者提交给瑞星，地址如下：http://mailcenter.rising.com.cn/index.shtml

按步骤操作：先清理后扫描日志过来

关闭IE用下面的工具全选，清理系统临时文件和IE临时文件夹     
http://www.atribune.org/public-beta/ATF-Cleaner.exe

下载windows清理助手清理一遍
http://www.arswp.com/download/arswp2/arswp2.rar（升级后使用）

下载sreng：http://download.kztechs.com/files/sreng2.zip
解压sreng2.zip-->打开SREngLdr.EXE-->勾选  智能扫描、检查进程的数字签名-->扫描-->保存报告用附件上传
注意：扫描前请尽量关闭QQ、游戏、下载工具、媒体播放器等应用程序

C:\Windows\System32\drivers\plhdw.sys
360安全卫士粉碎文件

对应的驱动程序
plhdw - plhdw
删除

清理助手下载
升级清理助手，全盘扫描，清理雅虎助手

。。。那个，楼上
。对应的驱动程序
plhdw - plhdw
删除。
这个怎么弄啊

我哪里知道？
早卸载360了

貌似是启动项管理里面吧

看版规
上传sreng日志去

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[Soso Address Search]
C:\PROGRAM FILES\TENCENT\SSPLUS\
C:\PROGRAM FILES\TENCENT\SSPLUS\SADDR1.DLL
C:\PROGRAM FILES\TENCENT\SSPLUS\SDATA.DAT
C:\PROGRAM FILES\TENCENT\SSPLUS\SPLUS.DLL
C:\PROGRAM FILES\TENCENT\SSPLUS\STDTBH.DAT
C:\PROGRAM FILES\TENCENT\SSPLUS\STUP.1.EXE
C:\PROGRAM FILES\TENCENT\SSPLUS\STUP.EXE
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCALLOW\TENCENT\QQTOOLBAR\BUTTONS\TBADDR.DLL
C:\WINDOWS\SYSTEM32\SCRAX.DLL
C:\WINDOWS\SYSTEM32\SSUP.DLL
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{0C7C23EF-A848-485B-873C-0ED954731014}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{669751ED-D558-49AE-B01A-3B374CC7910E}
HKEY_CURRENT_USER\SOFTWARE\TENCENT\TBH
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{90B1ECB2-FC3B-49AE-A6BD-F5F11BF5C4AD}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{669751ED-D558-49AE-B01A-3B374CC7910E}
HKEY_LOCAL_MACHINE\SOFTWARE\TENCENT\TBH

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[Soso Toolbar]
HKEY_CLASSES_ROOT\CLSID\{90B1ECB2-FC3B-49AE-A6BD-F5F11BF5C4AD}
HKEY_CLASSES_ROOT\INTERFACE\{3084BC3D-C0D6-4A28-A8A4-5857165886EE}
HKEY_CLASSES_ROOT\TCTRL.TWEB
HKEY_CLASSES_ROOT\TYPELIB\{B1A7C2CF-BF40-4597-8142-7615D74D0CC3}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{3084BC3D-C0D6-4A28-A8A4-5857165886EE}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{B1A7C2CF-BF40-4597-8142-7615D74D0CC3}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{0C7C23EF-A848-485B-873C-0ED954731014}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{A57E074F-56D8-4A33-8112-AAC9693AA909}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[BaiduSearchPartner]
HKEY_CURRENT_USER\SOFTWARE\BAIDU\IECOMPANION

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[BaiduSuperSoBa]
C:\WINDOWS\SYSTEM32\IEXP_LOG.TXT

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[3721Keyword]
HKEY_CLASSES_ROOT\INTERFACE\{BE08F6BC-C3E6-4149-BEB1-CB449E1B372E}
HKEY_CLASSES_ROOT\TYPELIB\{4158DB95-DE71-41FF-BEA1-2C3D1C679DF1}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{5D73EE86-05F1-49ED-B850-E423120EC338}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{BE08F6BC-C3E6-4149-BEB1-CB449E1B372E}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{4158DB95-DE71-41FF-BEA1-2C3D1C679DF1}

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[DIYbar]
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{28E0FA88-ABA8-4937-A247-3031F1A11165}

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[Yahoo Toolbar]
C:\PROGRAM FILES\YAHOO!\ASSISTANT\
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\IE修复专家.LNK
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\插件管理专家.LNK
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\恢复IE外观.LNK
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\清理IE地址栏.LNK
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\全面清理.LNK
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\卸载雅虎助手.LNK
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\雅虎助手.LNK
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\在线帮助.LNK
C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\雅虎助手\在线升级.LNK
C:\WINDOWS\ASSIST.DAT
HKEY_CLASSES_ROOT\ADKILLER.YASNOADCOM
HKEY_CLASSES_ROOT\ADKILLER.YASNOADCOM.1
HKEY_CLASSES_ROOT\ANGLING.ANTIFISH
HKEY_CLASSES_ROOT\ANGLING.ANTIFISH.1
HKEY_CLASSES_ROOT\APPID\YMAILP.DLL
HKEY_CLASSES_ROOT\APPID\{12216F17-C31B-42FC-BCCF-715DC258548C}
HKEY_CLASSES_ROOT\CLEARUPASSISTANT.CLASSFACTORY
HKEY_CLASSES_ROOT\CLEARUPASSISTANT.CLASSFACTORY.1
HKEY_CLASSES_ROOT\CLEARUPASSISTANT.INTERNETPROTOCOL
HKEY_CLASSES_ROOT\CLEARUPASSISTANT.INTERNETPROTOCOL.1
HKEY_CLASSES_ROOT\CLSID\{17F1C8E8-B99B-4D85-927B-A0EE7290455A}
HKEY_CLASSES_ROOT\CLSID\{19CE93DE-8334-42C6-B2CA-BFE3DF5196A3}
HKEY_CLASSES_ROOT\CLSID\{1C2EDD19-C2D5-4234-9339-785E5885B84D}
HKEY_CLASSES_ROOT\CLSID\{2283BB66-A15D-4AC8-BA72-9C8C9F5A1691}
HKEY_CLASSES_ROOT\CLSID\{33BBE430-0E42-4F12-B075-8D21ACB10DCB}
HKEY_CLASSES_ROOT\CLSID\{38928D50-8A48-44C2-945F-D2F23F771410}
HKEY_CLASSES_ROOT\CLSID\{406F94F0-504F-4A40-8DFD-58B0666ABEBD}
HKEY_CLASSES_ROOT\CLSID\{4558FA8B-C683-4BD9-BB43-90E086A4C113}
HKEY_CLASSES_ROOT\CLSID\{4B57D035-8A78-4E5A-82DF-FD5DEE51E578}
HKEY_CLASSES_ROOT\CLSID\{4EBCAF82-5BE7-4FC5-938F-9CD284587139}
HKEY_CLASSES_ROOT\CLSID\{4F2C1A0A-622E-4D23-9870-6FB6D109C170}
HKEY_CLASSES_ROOT\CLSID\{55C32FB0-B5DE-432D-B143-7CA84EA3F888}
HKEY_CLASSES_ROOT\CLSID\{57421194-58FB-49AE-9B4F-FD48869B9AD4}
HKEY_CLASSES_ROOT\CLSID\{59E99ADD-E926-40E8-BD6F-1532124A4AAA}
HKEY_CLASSES_ROOT\CLSID\{62EED7C6-9F02-42F9-B634-98E2899E147B}
HKEY_CLASSES_ROOT\CLSID\{6940DBA6-CEBB-46B6-8058-CB358295BCCC}
HKEY_CLASSES_ROOT\CLSID\{7992E7F8-5D81-4EAA-9E5F-6211215946E4}
HKEY_CLASSES_ROOT\CLSID\{8FC688E0-3F7D-4517-8C30-459C4211A8A1}
HKEY_CLASSES_ROOT\CLSID\{92AB9611-504A-4682-A9A2-696D77CE9371}
HKEY_CLASSES_ROOT\CLSID\{94AFAA49-2B59-4A8C-85EB-9ACA60020935}
HKEY_CLASSES_ROOT\CLSID\{9C3C2C08-C494-4F52-AE94-85156A447D43}
HKEY_CLASSES_ROOT\CLSID\{A14600F7-E2AE-482D-9AFC-99CD4544DB4F}
HKEY_CLASSES_ROOT\CLSID\{AB9BF611-F86A-43C5-A467-625E22D7A309}
HKEY_CLASSES_ROOT\CLSID\{AF53D70E-29DF-443A-92AA-9C314AF5871E}
HKEY_CLASSES_ROOT\CLSID\{B56FF3E8-B0C2-45C9-AF3F-8E6C5F010B9F}
HKEY_CLASSES_ROOT\CLSID\{C459AB59-28A5-43A3-9D22-753F4C9586E6}
HKEY_CLASSES_ROOT\CLSID\{CA1E3092-BC38-4FFC-AEAE-C8E8EEC70CA1}
HKEY_CLASSES_ROOT\CLSID\{CEA8FC9F-3D3F-4486-B9DF-ADCEE875FFB2}
HKEY_CLASSES_ROOT\CLSID\{D4A45C16-5E43-4769-AE49-A218036960BB}
HKEY_CLASSES_ROOT\CLSID\{E3128A3A-C191-4149-8631-C632C8FC9919}
HKEY_CLASSES_ROOT\CLSID\{EF4BA0B4-A877-45B3-B0BC-AD7A3CC22811}
HKEY_CLASSES_ROOT\CLSID\{F166BC04-3C84-44CC-A6E9-2315EC4844B9}
HKEY_CLASSES_ROOT\CLSID\{F40FED3D-F813-42F4-A1AE-8E1D60472BF0}
HKEY_CLASSES_ROOT\CLSID\{FA6DA3A4-87E4-4A45-9FD6-ED26089B7104}
HKEY_CLASSES_ROOT\CLSID\{FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8}
HKEY_CLASSES_ROOT\CLSID\{FF0E5DF6-2375-4499-A97F-74954384D8D2}
HKEY_CLASSES_ROOT\IEAUI.IEAUICOM
HKEY_CLASSES_ROOT\IEAUI.IEAUICOM.1
HKEY_CLASSES_ROOT\IESECUI.IESECUICOM
HKEY_CLASSES_ROOT\IESECUI.IESECUICOM.1
HKEY_CLASSES_ROOT\INTERFACE\{02DB2793-F3F8-42AB-9B03-19B25485BE29}
HKEY_CLASSES_ROOT\INTERFACE\{054BFE5F-2E4E-434D-900F-617A54FE6E49}
HKEY_CLASSES_ROOT\INTERFACE\{0920BDCF-0743-43F5-B0A1-F0A88A0C444E}
HKEY_CLASSES_ROOT\INTERFACE\{1E2F9886-F13E-4C4D-BCB8-77139E1965D8}
HKEY_CLASSES_ROOT\INTERFACE\{41654B61-5D3C-4988-B46D-9BD24A8B52FA}
HKEY_CLASSES_ROOT\INTERFACE\{79367D43-4A71-4F51-B52B-08389320999C}
HKEY_CLASSES_ROOT\INTERFACE\{88BE1146-DC38-4DCD-8D47-FDC712DFCF48}
HKEY_CLASSES_ROOT\INTERFACE\{924F5B3A-7A27-484A-B873-E855C9708667}
HKEY_CLASSES_ROOT\INTERFACE\{A9267C5F-A4A5-4BD3-B78B-80C497F32EDE}
HKEY_CLASSES_ROOT\INTERFACE\{B76BAB6C-0C2E-4D19-9A65-51F733456020}
HKEY_CLASSES_ROOT\INTERFACE\{CBEF989D-7C4C-4354-928C-EA81D055EE7C}
HKEY_CLASSES_ROOT\JPEGFILE\SHELLEX\CONTEXTMENUHANDLERS\YAHOO!PHOTO
HKEY_CLASSES_ROOT\TOOLBAND.BANDREG
HKEY_CLASSES_ROOT\TOOLBAND.BANDREG.1
HKEY_CLASSES_ROOT\TOOLBAND.OBJECTBAR
HKEY_CLASSES_ROOT\TOOLBAND.OBJECTBAR.1
HKEY_CLASSES_ROOT\TOTALWIPER.YASWIPERCOM
HKEY_CLASSES_ROOT\TOTALWIPER.YASWIPERCOM.1
HKEY_CLASSES_ROOT\TYPELIB\{04D0FD01-C8FA-413B-AD83-519D10B93324}
HKEY_CLASSES_ROOT\TYPELIB\{18AB154A-6084-4C2D-B12C-212E58D4751C}
HKEY_CLASSES_ROOT\TYPELIB\{22242729-9EE0-4060-988D-BE2A9EFD8CD0}
HKEY_CLASSES_ROOT\TYPELIB\{3A3116C7-9F1A-48E2-AF9C-E158FC2EF658}
HKEY_CLASSES_ROOT\TYPELIB\{51C76AB9-D876-46A8-A20D-F606EDDD69ED}
HKEY_CLASSES_ROOT\TYPELIB\{5517390C-60D1-4FFA-BD4C-81F8278AF29E}
HKEY_CLASSES_ROOT\TYPELIB\{58E9B715-3C97-4048-9CBE-A708E0AEB29E}
HKEY_CLASSES_ROOT\TYPELIB\{7CFDAB57-D8CD-4465-BD15-48CFFCEE3DF2}
HKEY_CLASSES_ROOT\TYPELIB\{8417D3DB-4004-4259-952D-A6EC64A1800E}
HKEY_CLASSES_ROOT\TYPELIB\{95E822B6-6B10-4E86-9603-6CECB6135867}
HKEY_CLASSES_ROOT\TYPELIB\{AE9A3F59-E2D2-4EE8-A279-F2B6AF336B8E}
HKEY_CLASSES_ROOT\TYPELIB\{CF67E74A-3C62-4867-9DFA-DD2374003333}
HKEY_CLASSES_ROOT\TYPELIB\{D4D707DF-F46E-46EF-BDCA-512F6345F205}
HKEY_CLASSES_ROOT\TYPELIB\{E816B7F9-96AB-4D4D-8DA4-B9D124959DA5}
HKEY_CLASSES_ROOT\TYPELIB\{F8CC28B5-4042-4054-99CB-8855EFD0FAB7}
HKEY_CLASSES_ROOT\YACONFIGCOM.YASETTING
HKEY_CLASSES_ROOT\YACONFIGCOM.YASETTING.1
HKEY_CLASSES_ROOT\YAHOOASSISTBAR.ASNOADOBJ
HKEY_CLASSES_ROOT\YAHOOASSISTBAR.ASNOADOBJ.1
HKEY_CLASSES_ROOT\YAHOOASSISTBAR.DRAGSEARCH
HKEY_CLASSES_ROOT\YAHOOASSISTBAR.DRAGSEARCH.1
HKEY_CLASSES_ROOT\YAHOOASSISTBAR.PHOTOTB
HKEY_CLASSES_ROOT\YAHOOASSISTBAR.PHOTOTB.1
HKEY_CLASSES_ROOT\YAHOOASSISTBAR.YFLASHDL
HKEY_CLASSES_ROOT\YAHOOASSISTBAR.YFLASHDL.1
HKEY_CLASSES_ROOT\YALIVE.LIVE
HKEY_CLASSES_ROOT\YALIVE.LIVE.1
HKEY_CLASSES_ROOT\YASSIST.EASYASSIST
HKEY_CLASSES_ROOT\YASSIST.EASYASSIST.1
HKEY_CLASSES_ROOT\YFFLASH.FLASHOBJECTINTERFACE
HKEY_CLASSES_ROOT\YFFLASH.FLASHOBJECTINTERFACE.1
HKEY_CLASSES_ROOT\YMAILP.YMAILBTN
HKEY_CLASSES_ROOT\YMAILP.YMAILBTN.1
HKEY_CLASSES_ROOT\YMYWEB.MYWEBBTN
HKEY_CLASSES_ROOT\YMYWEB.MYWEBBTN.1
HKEY_CLASSES_ROOT\YPAGETR.PAGETRANSLATE
HKEY_CLASSES_ROOT\YPAGETR.PAGETRANSLATE.1
HKEY_CLASSES_ROOT\YPHOTOSEASY.PHOTOSCTRL
HKEY_CLASSES_ROOT\YPHOTOSEASY.PHOTOSCTRL.1
HKEY_CLASSES_ROOT\YRSS
HKEY_CLASSES_ROOT\YRSS.EXPBAND
HKEY_CLASSES_ROOT\YRSS.EXPBAND.1
HKEY_CLASSES_ROOT\YRSS.SHOWBAR
HKEY_CLASSES_ROOT\YRSS.SHOWBAR.1
HKEY_CLASSES_ROOT\YRSS.YRSSCOM
HKEY_CLASSES_ROOT\YRSS.YRSSCOM.1
HKEY_CLASSES_ROOT\YRSS.YRSSPROTO
HKEY_CLASSES_ROOT\YRSS.YRSSPROTO.1
HKEY_CLASSES_ROOT\YSEARCH.ALERTBUTTON
HKEY_CLASSES_ROOT\YSEARCH.ALERTBUTTON.1
HKEY_CLASSES_ROOT\YSEARCH.CLOGO
HKEY_CLASSES_ROOT\YSEARCH.CLOGO.1
HKEY_CLASSES_ROOT\YSEARCH.CMAINBUTTONCOM
HKEY_CLASSES_ROOT\YSEARCH.CMAINBUTTONCOM.1
HKEY_CLASSES_ROOT\YSEARCH.HYPERLINK
HKEY_CLASSES_ROOT\YSEARCH.HYPERLINK.1
HKEY_CLASSES_ROOT\YSEARCH.MARKBUTTON
HKEY_CLASSES_ROOT\YSEARCH.MARKBUTTON.1
HKEY_CLASSES_ROOT\YSEARCH.SEARCHBOX
HKEY_CLASSES_ROOT\YSEARCH.SEARCHBOX.1
HKEY_CLASSES_ROOT\YSEARCH.SEARCHBUTTON
HKEY_CLASSES_ROOT\YSEARCH.SEARCHBUTTON.1
HKEY_CLASSES_ROOT\ZSNETPROTO.BLOCKLIST
HKEY_CLASSES_ROOT\ZSNETPROTO.BLOCKLIST.1
HKEY_CLASSES_ROOT\ZSNETPROTO.MYPROTOCOL
HKEY_CLASSES_ROOT\ZSNETPROTO.MYPROTOCOL.1
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\EXPLORER BARS\{19CE93DE-8334-42C6-B2CA-BFE3DF5196A3}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\雅虎搜索
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{33BBE430-0E42-4F12-B075-8D21ACB10DCB}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{38928D50-8A48-44C2-945F-D2F23F771410}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{406F94F0-504F-4A40-8DFD-58B0666ABEBD}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{62EED7C6-9F02-42F9-B634-98E2899E147B}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{F166BC04-3C84-44CC-A6E9-2315EC4844B9}
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8}
HKEY_CURRENT_USER\SOFTWARE\YAHOO\ASSISTANT
HKEY_CURRENT_USER\SOFTWARE\YAHOO\ASSISTANT\ASSIST
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\ANGLING.ANTIFISH
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\ANGLING.ANTIFISH.1
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\APPID\{12216F17-C31B-42FC-BCCF-715DC258548C}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{17F1C8E8-B99B-4D85-927B-A0EE7290455A}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{19CE93DE-8334-42C6-B2CA-BFE3DF5196A3}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{1C2EDD19-C2D5-4234-9339-785E5885B84D}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{2283BB66-A15D-4AC8-BA72-9C8C9F5A1691}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{33BBE430-0E42-4F12-B075-8D21ACB10DCB}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{38928D50-8A48-44C2-945F-D2F23F771410}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{406F94F0-504F-4A40-8DFD-58B0666ABEBD}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{4558FA8B-C683-4BD9-BB43-90E086A4C113}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{4B57D035-8A78-4E5A-82DF-FD5DEE51E578}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{4EBCAF82-5BE7-4FC5-938F-9CD284587139}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{4F2C1A0A-622E-4D23-9870-6FB6D109C170}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{55C32FB0-B5DE-432D-B143-7CA84EA3F888}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{57421194-58FB-49AE-9B4F-FD48869B9AD4}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{59E99ADD-E926-40E8-BD6F-1532124A4AAA}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{62EED7C6-9F02-42F9-B634-98E2899E147B}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{6940DBA6-CEBB-46B6-8058-CB358295BCCC}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{7992E7F8-5D81-4EAA-9E5F-6211215946E4}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{8FC688E0-3F7D-4517-8C30-459C4211A8A1}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{92AB9611-504A-4682-A9A2-696D77CE9371}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{94AFAA49-2B59-4A8C-85EB-9ACA60020935}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{9C3C2C08-C494-4F52-AE94-85156A447D43}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{A14600F7-E2AE-482D-9AFC-99CD4544DB4F}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{AB9BF611-F86A-43C5-A467-625E22D7A309}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{AF53D70E-29DF-443A-92AA-9C314AF5871E}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{B56FF3E8-B0C2-45C9-AF3F-8E6C5F010B9F}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{C459AB59-28A5-43A3-9D22-753F4C9586E6}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{CA1E3092-BC38-4FFC-AEAE-C8E8EEC70CA1}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{CEA8FC9F-3D3F-4486-B9DF-ADCEE875FFB2}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{D4A45C16-5E43-4769-AE49-A218036960BB}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{E3128A3A-C191-4149-8631-C632C8FC9919}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{EF4BA0B4-A877-45B3-B0BC-AD7A3CC22811}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{F166BC04-3C84-44CC-A6E9-2315EC4844B9}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{F40FED3D-F813-42F4-A1AE-8E1D60472BF0}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{FA6DA3A4-87E4-4A45-9FD6-ED26089B7104}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{FF0E5DF6-2375-4499-A97F-74954384D8D2}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{02DB2793-F3F8-42AB-9B03-19B25485BE29}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{054BFE5F-2E4E-434D-900F-617A54FE6E49}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{0920BDCF-0743-43F5-B0A1-F0A88A0C444E}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{1E2F9886-F13E-4C4D-BCB8-77139E1965D8}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{41654B61-5D3C-4988-B46D-9BD24A8B52FA}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{79367D43-4A71-4F51-B52B-08389320999C}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{88BE1146-DC38-4DCD-8D47-FDC712DFCF48}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{924F5B3A-7A27-484A-B873-E855C9708667}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{A9267C5F-A4A5-4BD3-B78B-80C497F32EDE}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{B76BAB6C-0C2E-4D19-9A65-51F733456020}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\INTERFACE\{CBEF989D-7C4C-4354-928C-EA81D055EE7C}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{04D0FD01-C8FA-413B-AD83-519D10B93324}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{18AB154A-6084-4C2D-B12C-212E58D4751C}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{22242729-9EE0-4060-988D-BE2A9EFD8CD0}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{3A3116C7-9F1A-48E2-AF9C-E158FC2EF658}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{51C76AB9-D876-46A8-A20D-F606EDDD69ED}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{5517390C-60D1-4FFA-BD4C-81F8278AF29E}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{58E9B715-3C97-4048-9CBE-A708E0AEB29E}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{7CFDAB57-D8CD-4465-BD15-48CFFCEE3DF2}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{8417D3DB-4004-4259-952D-A6EC64A1800E}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{95E822B6-6B10-4E86-9603-6CECB6135867}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{AE9A3F59-E2D2-4EE8-A279-F2B6AF336B8E}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{CF67E74A-3C62-4867-9DFA-DD2374003333}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{D4D707DF-F46E-46EF-BDCA-512F6345F205}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{E816B7F9-96AB-4D4D-8DA4-B9D124959DA5}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\TYPELIB\{F8CC28B5-4042-4054-99CB-8855EFD0FAB7}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YAHOOASSISTBAR.ASNOADOBJ
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YAHOOASSISTBAR.ASNOADOBJ.1
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YAHOOASSISTBAR.DRAGSEARCH
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YAHOOASSISTBAR.DRAGSEARCH.1
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YAHOOASSISTBAR.PHOTOTB
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YAHOOASSISTBAR.PHOTOTB.1
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YALIVE.LIVE
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YALIVE.LIVE.1
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YASSIST.EASYASSIST
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\YASSIST.EASYASSIST.1
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{19A43AD6-9ACE-4ABB-BAE0-B9577655F49D}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\SHELL EXTENSIONS\APPROVED\{33BBE430-0E42-4F12-B075-8D21ACB10DCB}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8}
HKEY_LOCAL_MACHINE\SOFTWARE\YAHOO\ASSISTANT
HKEY_LOCAL_MACHINE\SOFTWARE\YAHOO\ASSISTANT\ASSIST
HKEY_LOCAL_MACHINE\SOFTWARE\YAHOO\ASSISTANT\YALIVE
HKEY_LOCAL_MACHINE\SOFTWARE\YAHOO\ASSISTANT\YSHELLSYSTRAY

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[QQ Toolbar]
C:\PROGRAM FILES\TENCENT\QQTOOLBAR\
HKEY_CLASSES_ROOT\CLSID\{29CF293A-1E7D-4069-9E11-E39698D0AF95}
HKEY_CLASSES_ROOT\CLSID\{FB46BBEE-B3D5-46BF-94F4-A6C1A17F0A28}
HKEY_CLASSES_ROOT\SOSOIEBAR.IEBAROBJ
HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{29CF293A-1E7D-4069-9E11-E39698D0AF95}
HKEY_CURRENT_USER\SOFTWARE\TENCENT\QQTOOLBAR
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{29CF293A-1E7D-4069-9E11-E39698D0AF95}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\CLSID\{FB46BBEE-B3D5-46BF-94F4-A6C1A17F0A28}
HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\SOSOIEBAR.IEBAROBJ
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\QQTOOLBAR
HKEY_LOCAL_MACHINE\SOFTWARE\TENCENT\QQTOOLBAR

[2.8.2.8.1115 - 2.8.60.9.0122]
2009-01-23 22:00
[Unknown Trojan Horse/Virus]
HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET002\SERVICES\SFCURE01
HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET003\SERVICES\SFCURE01
HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET004\SERVICES\SFCURE01
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\SFCURE01
那个我弄了半个小时，还是穿不来恶