在SRENG工具中删除下面服务项后再看如何
考虑是否其他盘文件被感染
==================================
服务
[Removable Storage / NtmsSvc][Stopped/Auto Start]
<C:\WINDOWS\system32\svchost.exe -k netsvcs-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\fclvl.cc3><N/A>
[Windows Mankgement ffr / NWCWorkstation][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->C:\Program Files\Common Files\Pkaeo.dll><N/A>
[svcohost / svcohost][Stopped/Auto Start]
<C:\WINDOWS\system32\svcohost><(File is missing)>
[jddbndwb / xcvs][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k xcvs-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\gwcfq.cc3><N/A>
[ujmbfneg / xcvs ][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k "xcvs "-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\lohst.cc3><N/A>
[hhjqgwvt / xcvs ][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k "xcvs "-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\mokse.cc3><N/A>
[usopspyy / xcvs ][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k "xcvs "-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\kohbq.cc3><N/A>
[ybtbpvcs / xcvs ][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k "xcvs "-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\hnkji.cc3><N/A>
[ihuceptr / xcvs ][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k "xcvs "-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\yxcfg.cc3><N/A>
[uncjxpwr / xcvs ][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k "xcvs "-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\bclnk.cc3><N/A>
[nbufgwvc / xcvs ][Stopped/Auto Start]
<C:\WINDOWS\System32\svchost.exe -k "xcvs "-->C:\Documents and Settings\All Users\Application Data\Storm\update\%SESSIONNAME%\vdwov.cc3><N/A>