请教，求助：
瑞星杀毒后查出两个Trojan.Agent.ddj病毒
C:\WINDOWS\system32
名：Frfthn.dll
名：Nkjc.dll
能否对此病毒介绍

如果你重启后，再扫不报有病毒，就算是没有问题了
你可以直接复制这个病毒名，然后粘到右边的搜索去。

我有好几十个呢～瑞星能杀干净吗？

如果重启后，你再扫不发现病毒，就算是解决了。

请问无邪老师：
这个病毒是PE病毒，瑞星升级后能杀掉。我把当时的报告上传，请帮我看看其产生的原因，谢谢。
2006-07-07,00:06:12

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <SpeedTouch USB Diagnostics><"C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon>  [THOMSON Telecom Belgium]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <YLive.exe><C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe>  [ ]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <_{6AA6D63E-8A9D-441B-85CA-3D469A53320C}><>  []
    <_{3D658E0B-A7B8-4C48-88E7-97B4A72033B6}><>  []
    <_{9DBDA92F-0CC8-4A18-80F6-F357B6285527}><>  []
    <_{748EF633-9253-47FA-AAEF-8D6B015E4625}><>  []
    <_{CFDCF021-662F-4CD2-ABE3-BA7367F7C894}><>  []
    <_{BD990397-1186-407C-BCE7-38D3A8D908CC}><>  []
    <_{883D41A8-BFAA-4EFA-B846-DB03910F33F9}><>  []
    <_{6A32AB90-3416-4C63-B91C-AA92F5BA5577}><>  []
    <_{A00BA2F0-1682-45DD-A027-D4B74F515930}><>  []
    <_{ED0062AF-18CC-48D9-8AE4-C25C940DA0AE}><>  []
    <_{BB6306C6-1092-4B8D-A1DA-C9C58C76D53D}><>  []
    <_{70349795-97B4-411E-9DEA-5C3AFFA4274B}><>  []
    <_{37CDC203-7DF0-45BD-813D-5A1537DB7D7B}><>  []
    <_{B15C3425-6CE9-4917-A152-113BE627E763}><>  []
    <_{15155A66-E3DE-4B4B-BC37-B94E98C02DC0}><>  []
    <{D157330A-9EF3-49F8-9A67-4141AC41ADD4}><>  []
    <{0451D520-880B-44BC-8DD2-B14A703CA627}><C:\WINDOWS\system32\Tflimk.dll>  []
    <{93619D04-0F17-4C17-A0A3-092B10209FDE}><C:\WINDOWS\system32\Tjcc.dll>  []
    <{18E9438A-459B-495F-AB0D-B26AB61151E2}><C:\WINDOWS\system32\Eyhbzc.dll>  []
    <{5B168125-7980-4116-A67A-C30E4596EEE5}><C:\WINDOWS\system32\Brwq.dll>  []
    <{2A6B0F63-94FD-4C35-93FC-F958BC05FB63}><C:\WINDOWS\system32\Xutqr.dll>  []
    <{4BCB155E-41E4-41B3-BCA5-F9FF86833673}><C:\WINDOWS\system32\Gfmvmr.dll>  []
    <{249B05F0-9FAE-4422-A557-5A2FE45E2568}><C:\WINDOWS\system32\Knpni.dll>  []
    <{19F75A74-5458-41FC-8307-16E47BE77E22}><C:\WINDOWS\system32\Nqzy.dll>  []
    <{1A46C82A-6ECA-4306-97AB-5FB3FBA35DE2}><C:\WINDOWS\system32\Nkexb.dll>  []
    <{3B837E16-A040-4F4A-9C2B-F6FB8574F204}><C:\WINDOWS\system32\Jcng.dll>  []
    <{25BEE8CC-0D44-477F-9D09-EA7EB32E3FAB}><C:\WINDOWS\system32\Pdcr.dll>  []
    <{8D0DADF1-B950-4F3B-9092-0AFC1A4C1FDE}><C:\WINDOWS\system32\Frfthn.dll>  []
    <{12031D8A-5BC2-4F84-B108-A2EE005D0588}><C:\WINDOWS\system32\Nkjc.dll>  []
    <_{DE703C1A-7102-4435-B0AF-87E23A5D43A7}><>  []
    <_{AB4B63F3-88CD-41F0-ACC7-16F593CB6C1A}><>  []
    <_{B661D187-2D49-4296-86E5-DF212DE54422}><>  []
    <_{BC43375C-7AA1-47BA-BDF1-DA803EDD17E3}><>  []
    <_{E96648BC-4E10-425B-9E16-C3D16FA132BB}><>  []
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
    <{DE703C1A-7102-4435-B0AF-87E23A5D43A7}><C:\WINDOWS\system32\Xmbrcp.dll>  []
    <{AB4B63F3-88CD-41F0-ACC7-16F593CB6C1A}><C:\WINDOWS\system32\Pumbtb.dll>  []
    <{B661D187-2D49-4296-86E5-DF212DE54422}><C:\WINDOWS\system32\Wvixty.dll>  []
    <{E96648BC-4E10-425B-9E16-C3D16FA132BB}><C:\WINDOWS\system32\Ocnwic.dll>  []
    <{BC43375C-7AA1-47BA-BDF1-DA803EDD17E3}><C:\WINDOWS\system32\Tbwwhb.dll>  []

==================================
启动文件夹
服务
[Indexing Data / BKMARKS]
  <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A>
[NVIDIA Driver Helper Service / NVSvc]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[Rising Proxy  Service / RfwProxySrv]
  <c:\program files\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService]
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <"C:\Program Files\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <"C:\Program Files\Rising\Rav\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[RsRavMon Personal Firewall / RsRavMon Personal Firewall]
  <C:\WINDOWS\UNIWISE32.EXE><N/A>
[ServiceLayer / ServiceLayer]
  <"C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe"><Nokia.>

==================================
浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v4.dll, >
[]
  {0451D520-880B-44BC-8DD2-B14A703CA627} <C:\WINDOWS\system32\Tflimk.dll, N/A>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[MonitorURL Class]
  {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, N/A>
[]
  {12031D8A-5BC2-4F84-B108-A2EE005D0588} <C:\WINDOWS\system32\Nkjc.dll, N/A>
[]
  {18E9438A-459B-495F-AB0D-B26AB61151E2} <C:\WINDOWS\system32\Eyhbzc.dll, N/A>
[]
  {19F75A74-5458-41FC-8307-16E47BE77E22} <C:\WINDOWS\system32\Nqzy.dll, N/A>
[QuickBtn]
  {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} <, N/A>
[]
  {1A46C82A-6ECA-4306-97AB-5FB3FBA35DE2} <C:\WINDOWS\system32\Nkexb.dll, N/A>
[]
  {249B05F0-9FAE-4422-A557-5A2FE45E2568} <C:\WINDOWS\system32\Knpni.dll, N/A>
[]
  {25BEE8CC-0D44-477F-9D09-EA7EB32E3FAB} <C:\WINDOWS\system32\Pdcr.dll, N/A>
[]
  {2A6B0F63-94FD-4C35-93FC-F958BC05FB63} <C:\WINDOWS\system32\Xutqr.dll, N/A>
[Yahoo!Photo]
  {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\Program Files\Yahoo!\Assistant\Assist\yAngling.dll, Yahoo.>
[]
  {3B837E16-A040-4F4A-9C2B-F6FB8574F204} <C:\WINDOWS\system32\Jcng.dll, N/A>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll, Yahoo!>
[]
  {4BCB155E-41E4-41B3-BCA5-F9FF86833673} <C:\WINDOWS\system32\Gfmvmr.dll, N/A>
[VnetCookie Class]
  {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[]
  {5B168125-7980-4116-A67A-C30E4596EEE5} <C:\WINDOWS\system32\Brwq.dll, N/A>
[DragSearch BHO]

{62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[]
  {8D0DADF1-B950-4F3B-9092-0AFC1A4C1FDE} <C:\WINDOWS\system32\Frfthn.dll, N/A>
[]
  {93619D04-0F17-4C17-A0A3-092B10209FDE} <C:\WINDOWS\system32\Tjcc.dll, N/A>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[]
  {AB4B63F3-88CD-41F0-ACC7-16F593CB6C1A} <C:\WINDOWS\system32\Pumbtb.dll, N/A>
[]
  {B661D187-2D49-4296-86E5-DF212DE54422} <C:\WINDOWS\system32\Wvixty.dll, N/A>
[]
  {BC43375C-7AA1-47BA-BDF1-DA803EDD17E3} <C:\WINDOWS\system32\Tbwwhb.dll, N/A>
[]
  {DE703C1A-7102-4435-B0AF-87E23A5D43A7} <C:\WINDOWS\system32\Xmbrcp.dll, N/A>
[]
  {E96648BC-4E10-425B-9E16-C3D16FA132BB} <C:\WINDOWS\system32\Ocnwic.dll, N/A>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[雅虎助手]
  {406F94F0-504F-4a40-8DFD-58B0666ABEBD} <C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll, Yahoo!>
[金山快译(&K)]
  {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <C:\PROGRA~1\Kingsoft\FastAIT\IEBand.dll, N/A>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[KooPlayer Control]
  {39D420B3-E0EB-424C-89AA-C24F8DE7EF79} <C:\WINDOWS\DOWNLO~1\KOOPLA~1.OCX, viviMedia>
[Office Update Installation Engine]
  {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} <C:\WINDOWS\opuc.dll, Microsoft Corporation>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[Qzone Media Tools]
  {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <C:\PROGRA~1\Tencent\QQ\QZone\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, N/A>
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v4.dll, >
[]
  {0451D520-880B-44BC-8DD2-B14A703CA627} <C:\WINDOWS\system32\Tflimk.dll, N/A>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[MonitorURL Class]
  {08A312BB-5409-49FC-9347-54BB7D069AC6} <C:\PROGRA~1\DESKAD~1\deskipn.dll, N/A>
[InfosecCertInstall Class]
  {0EB487C8-E9AC-43A6-8C4C-083999B0622F} <C:\WINDOWS\system32\certInStall.dll, >
[]
  {12031D8A-5BC2-4F84-B108-A2EE005D0588} <C:\WINDOWS\system32\Nkjc.dll, N/A>
[]
  {18E9438A-459B-495F-AB0D-B26AB61151E2} <C:\WINDOWS\system32\Eyhbzc.dll, N/A>
[]
  {19F75A74-5458-41FC-8307-16E47BE77E22} <C:\WINDOWS\system32\Nqzy.dll, N/A>
[QuickBtn]
  {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} <, N/A>
[]
  {1A46C82A-6ECA-4306-97AB-5FB3FBA35DE2} <C:\WINDOWS\system32\Nkexb.dll, N/A>
[]
  {249B05F0-9FAE-4422-A557-5A2FE45E2568} <C:\WINDOWS\system32\Knpni.dll, N/A>
[]
  {25BEE8CC-0D44-477F-9D09-EA7EB32E3FAB} <C:\WINDOWS\system32\Pdcr.dll, N/A>
[]
  {2A6B0F63-94FD-4C35-93FC-F958BC05FB63} <C:\WINDOWS\system32\Xutqr.dll, N/A>

[Yahoo!Photo]
  {33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\Program Files\Yahoo!\Assistant\Assist\yphtb.dll, Yahoo! China>
[AntiFish Class]
  {38928D50-8A48-44C2-945F-D2F23F771410} <C:\Program Files\Yahoo!\Assistant\Assist\yAngling.dll, Yahoo.>
[]
  {3B837E16-A040-4F4A-9C2B-F6FB8574F204} <C:\WINDOWS\system32\Jcng.dll, N/A>
[雅虎助手]
  {406F94F0-504F-4A40-8DFD-58B0666ABEBD} <C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll, Yahoo!>
[CEditCtrl Object]
  {488A4255-3236-44B3-8F27-FA1AECAA8844} <C:\WINDOWS\system32\aliedit\AliEdit.dll, www.alipay.com>
[]
  {4BCB155E-41E4-41B3-BCA5-F9FF86833673} <C:\WINDOWS\system32\Gfmvmr.dll, N/A>
[VnetCookie Class]
  {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\chinanet\VNETTR~1.DLL, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[Yahoo!Live]
  {57421194-58FB-49AE-9B4F-FD48869B9AD4} <C:\Program Files\Yahoo!\Assistant\yaLive.dll, >
[]
  {5B168125-7980-4116-A67A-C30E4596EEE5} <C:\WINDOWS\system32\Brwq.dll, N/A>
[InfoSecNetSign Class]
  {62B938C4-4190-4F37-8CF0-A92B0A91CC77} <C:\WINDOWS\system32\NetSign.dll, Infosec Technologies Co., Ltd.>
[DragSearch BHO]
  {62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL, >
[金山快译(&K)]
  {6C3797D2-3FEF-4CD4-B654-D3AE55B4128C} <C:\PROGRA~1\Kingsoft\FastAIT\IEBand.dll, N/A>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\system32\INPUTC~1.DLL, >
[CMCLoader Object]
  {779769CA-82F1-4973-BBA7-515E6C7BFD0E} <C:\Program Files\GAOV\Mysee2\MycLive.dll, N/A>
[AutoLive]
  {7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2} <C:\Program Files\3721\Autolive.dll, >
[]
  {8D0DADF1-B950-4F3B-9092-0AFC1A4C1FDE} <C:\WINDOWS\system32\Frfthn.dll, N/A>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\system32\SUBMIT~1.DLL, >
[]
  {93619D04-0F17-4C17-A0A3-092B10209FDE} <C:\WINDOWS\system32\Tjcc.dll, N/A>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FLASHGET\jccatch.dll, Amaze Soft>
[]
  {AB4B63F3-88CD-41F0-ACC7-16F593CB6C1A} <C:\WINDOWS\system32\Pumbtb.dll, N/A>
[HBObject Class]
  {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} <C:\PROGRA~1\hbclient\HBHelper.dll, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[]
  {B661D187-2D49-4296-86E5-DF212DE54422} <C:\WINDOWS\system32\Wvixty.dll, N/A>
[3721]
  {B83FC273-3522-4CC6-92EC-75CC86678DA4} <C:\WINDOWS\Downloaded Program Files\CONFLICT.1\CnsMin.dll, 北京三七二一科技有限公司>
[]
  {BC43375C-7AA1-47BA-BDF1-DA803EDD17E3} <C:\WINDOWS\system32\Tbwwhb.dll, N/A>
[CSetLET Class]
  {C35D7AE1-0865-4A30-BF07-29FA29324155} <C:\WINDOWS\system32\GDSetLET.dll, >
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.>
[AxUSBKey Class]
  {DA215190-98B2-47DE-AE24-DA95481DFFBA} <C:\WINDOWS\system32\USBKey.dll, >
[]
  {DE703C1A-7102-4435-B0AF-87E23A5D43A7} <C:\WINDOWS\system32\Xmbrcp.dll, N/A>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[]
  {E96648BC-4E10-425B-9E16-C3D16FA132BB} <C:\WINDOWS\system32\Ocnwic.dll, N/A>
[assist]
  {FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} <C:\Program Files\Yahoo!\Assistant\Assist\yassist.dll, Yahoo!>
[雅虎搜索]
  <res://C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll/246, N/A>

==================================
正在运行的进程
[PID: 460][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 684][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 720][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 764][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 784][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 936][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 980][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1036][C:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 1052][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1120][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1184][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1196][C:\Program Files\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  <Rising><18, 1, 0, 9>
    [C:\Program Files\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [C:\Program Files\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 1>

[C:\Program Files\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\Program Files\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [C:\Program Files\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [C:\Program Files\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\Program Files\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 8>
    [C:\Program Files\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 17>
    [C:\Program Files\Rising\Rav\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\Program Files\Rising\Rav\ExtFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\Program Files\Rising\Rav\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\RsStore.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[PID: 1260][c:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 32>
    [c:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [c:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [c:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [c:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [c:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
    [c:\program files\rising\rfw\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[PID: 1440][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1476][C:\WINDOWS\System32\SCardSvr.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1612][C:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1904][C:\WINDOWS\system32\nvsvc32.exe]  <NVIDIA Corporation><6.13.10.2942>
[PID: 1964][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yaLive.dll]  <><2, 1, 5, 1045>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 0, 1006>
    [C:\WINDOWS\system32\Tflimk.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Nkjc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Eyhbzc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Nqzy.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Nkexb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Knpni.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Pdcr.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xutqr.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Jcng.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Gfmvmr.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Brwq.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Frfthn.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Tjcc.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Pumbtb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Wvixty.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Tbwwhb.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Xmbrcp.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\Ocnwic.dll]  <N/A><N/A>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ywiper.dll]  <N/A><1, 0, 1, 1014>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\PROGRA~1\3721\ske\contmenu.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx]  <><1, 0, 0, 1>
    [C:\Program Files\Yahoo!\Assistant\Assist\yasbar.dll]  <Yahoo!><2, 1, 8, 1048>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL]  <><1, 2, 7, 1006>
    [C:\PROGRA~1\Nokia\NOKIAP~1\Lang\ConnectionManager_chi-sc.nlr]  <Nokia><6, 80, 26, 0>
    [C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll]  <Nokia><6, 80, 37, 4>
    [C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll]  <Nokia><6, 80, 66, 0>
    [C:\WINDOWS\system32\ConnAPI.DLL]  <Nokia.><6, 80, 55, 5>
    [C:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr]  <Nokia><6, 80, 26, 0>
    [C:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr]  <Nokia><6, 80, 8, 0>
    [C:\WINDOWS\system32\CHENHU4.IME]  <chenhu><5.5>
    [C:\PROGRA~1\WINZIP\WZSHLSTB.DLL]  <WinZip Computing, Inc.><4.1 (32-bit)>
[PID: 1976][c:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
    [c:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [c:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [c:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 192][C:\WINDOWS\system32\wdfmgr.exe]  <Microsoft Corporation><5.2.3790.1230 built by: dnsrv(bld4act)>
[PID: 448][C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe]  <THOMSON Telecom Belgium><301.0.0.12>
[PID: 368][C:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 552][C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe]  < ><2, 0, 0, 1002>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\yaLive.dll]  <><2, 1, 5, 1045>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yalliveex.dll]  < ><2, 0, 0, 1006>
    [C:\Program Files\Yahoo!\Assistant\yNotifier.dll]  <><1, 0, 0, 5>
[PID: 644][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1076][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 2300][C:\Program Files\Rising\Rav\RsAgent.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1316][C:\WINDOWS\msagent\AgentSvr.exe]  <Microsoft Corporation><2.00.0.3422>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
[PID: 3932][C:\Program Files\Rising\Rav\RavMon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28>
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll]  <Nokia><6, 80, 37, 4>
    [C:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll]  <Nokia><6, 80, 66, 0>
    [C:\WINDOWS\system32\ConnAPI.DLL]  <Nokia.><6, 80, 55, 5>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\Program Files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_chi-sc.nlr]  <Nokia><6, 80, 26, 0>
    [C:\Program Files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr]  <Nokia><6, 80, 8, 0>
[PID: 3880][C:\Program Files\3721\ske\TrojanAssistant.exe]  <Yahoo! CN><2.1.2.1003>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>
    [C:\Program Files\3721\ske\fsk.dll]  <3721.com><2, 1, 2, 1030>
    [C:\Program Files\3721\ske\wmpns.dll]  <---><1, 1, 8, 1324>
[PID: 3876][F:\装机软件\木马\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\PROGRA~1\Yahoo!\ASSIST~1\Yhelper.dll]  <><2, 0, 1, 1018>

能否帮忙：在有问题的地方用红字标注下？