[C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [E:\Program Files\Tencent\TT\bin\PlatformWidget.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\TTMainFrame.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\TTStore.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\TTMBrowser.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\TTabMgr.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\TTSkin.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\TTHtmlApp.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\TTFilter.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\TTNetwork.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\bin\sqlite3.dll]  [N/A, ]
    [C:\WINDOWS\system32\shdoclc.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [E:\Program Files\Tencent\TT\bin\TTPluginMng.dll]  [Tencent, 4, 31, 0, 1]
    [E:\Program Files\Tencent\TT\Plugins\3TTWeather\TTWeather.dll]  [Tencent, 1.0.0.1]
    [D:\瑞星\Rising\Rav\RavScrCh.dll]  [Beijing Rising Information Technology Co., Ltd., 21.0.0.76]
    [C:\WINDOWS\system32\MSVCP71.dll]  [Microsoft Corporation, 7.10.3077.0]
    [C:\WINDOWS\system32\MSVCR71.dll]  [Microsoft Corporation, 7.10.3052.4]
    [E:\Program Files\Tencent\TT\bin\FavoriteLogical.dll]  [Tencent, 4, 31, 0, 1]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx]  [Adobe Systems, Inc., 9,0,124,0]
    [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll]  [Thunder Networking Technologies,LTD, 5, 0, 8, 96]
[PID: 2364 / Administrator][D:\My Documents\新建文件夹\SREngLdr.EXE]  [Smallfrogs Studio, 2.7.1.1261]
[PID: 2212 / Administrator][D:\My Documents\新建文件夹\SRE5adef2a7.EXE]  [Smallfrogs Studio, 2.7.1.1261]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    [D:\My Documents\新建文件夹\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  Error. [C:\WINDOWS\notepad.exe %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  Error. ["hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  Error. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 188, C:\WINDOWS\SYSTEM32\IGFXTRAY.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 204, C:\WINDOWS\SYSTEM32\HKCMD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 288, C:\WINDOWS\SYSTEM32\IGFXPERS.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 3112, C:\WINDOWS\SYSTEM32\IGFXSRVC.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2364, D:\MY DOCUMENTS\新建文件夹\SRENGLDR.EXE]

==================================
计划任务
N/A

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================

http://bbs.ikaka.com/showtopic-8655073.aspx

大哥
能不能先看22楼

解决了！

奇怪，我昨天回复的怎么没有了呀
我的病毒该怎么删除啊

重新开帖求助，详细描述一下问题。不要一上来就发日志，也不说明问题。

病毒名是：Backdoor.Win32.Koutodoor.gr
病毒分类  WINDOWS下的PE病毒
行为类型  DOS下的EXE病毒
感染文件名是：c:\windows\system32\drivers\eulww.sys
瑞 星 版 本 号 20.93.11 
我用瑞星怎么也杀不了啊，帮我一下吧！多谢啦！

下载附件内容，解压到文件夹下，运行logaction点击开始处理后，根据提示重启电脑，重启后再使用杀毒软件进行全盘杀毒。