急!
症状:一打开QQ,MSN,淘宝旺旺等聊天工具中某人的聊天对话框,只要对话框不关闭,就会定时(30分钟/次)向对方发送:<元旦到了,祝元旦快乐 www.sms8341.com/yuandan>的消息,请问是什么原因,杀毒杀不出.拔除网线后没有症状,不知如何下手找根源.请大虾们赐教!
谢谢!

肯定是中毒了，一打开那个网址，就立刻有病毒反应了。杀毒吧！！！

最新的瑞星,AVG,都杀过了,都杀不出,他还是老是跳.
不知道有什么其他的方法没有.
大家帮帮忙,小弟先谢啦,就当是怪病,大家一起来讨论讨论.

扫日志贴上来才能讨论
要不怎么讨论啊

问个菜鸟的问题,打日志,用什么软件比较好?

我很晕.貌似是尾巴.顺便扫日志用这个


请下载SREng2（最新版） ，使用“智能扫描”，按下“扫描”按钮进行扫描，
扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告
日志文件内容复制-粘贴上来,,日志一次粘不完，分次粘完，请不要修改。

下载地址
http://www.kztechs.com/sreng/sreng2.zip

谢谢，我等会去下载个，现有点事要晚上回来，到时候，我把日志贴出来．

日志做好了,由于内容比较长,为了各位阅读方便,我做了个TXT文件.在我的FTP上.
地址:ftp://user:user@liyuanmusic.vicp.net
谢谢各位!

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <MsnMsgr><"C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background>  [(Verified)Microsoft Corporation]
    <PhMain><C:\Program Files\PeanutHull3\PhMain.exe>  [广东网域]
    <ServUTrayIcon><C:\Program Files\RhinoSoft.com\Serv-U\ServUTray.exe>  [Rhino Software, Inc. +1(262) 560-9627]
    <MSMSGS><"C:\Program Files\Messenger\msmsgs.exe" /background>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <nwiz><nwiz.exe /install>  [N/A]
    <WinFoxV2><C:\WINDOWS\system32\WF2K.EXE Initial>  [N/A]
    <EM_EXEC><C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE>  [Logitech Inc.                    ]
    <IntelliType><"C:\Program Files\Microsoft Hardware\Keyboard\type32.exe">  [Microsoft Corporation]
    <BigDogPath><C:\WINDOWS\VM_STI.EXE USB PC Camera 301P>  [N/A]
    <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k>  [N/A]
    <WangWang><C:\Program Files\淘宝网\淘宝旺旺\WangWang.exe>  [淘宝（中国）软件有限公司]
    <RfwMain><"C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <!AVG Anti-Spyware><"C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized>  [Anti-Malware Development a.s.]
    <runeip><C:\Program Files\Rising\AntiSpyware\runiep.exe>  [Beijing Rising Technology Co., Ltd.]
    <SSMCrack><C:\Documents and Settings\user\桌面\SSM破解工具\SSMCrack.exe /h>  [N/A]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><EXPLORER.EXE>  [(Verified)Microsoft Corporation]
    <Userinit><userinit.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><"\Program Files\Logonui\Royale.exe">  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
    <{57B86673-276A-48B2-BAE7-C6DBB3020EB8}><C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll>  [Anti-Malware Development a.s.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\System Safety Monitor]
    <WinlogonNotify: System Safety Monitor><SSMWinlogonEx.dll>  [(Verified)System Safety Limited]

启动文件夹
[TweakYC]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\TweakYC.lnk --> C:\PROGRA~1\VIDEOM~1\COMPRO~1\TweakYC.exe [Compro Technology, Inc.]><N>
[ComproScheduler]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\ComproScheduler.lnk --> C:\PROGRA~1\COMMON~1\VIDEOM~1\COMPRO~2.EXE [Compro Technology, Inc.]><N>
[ComproRemote]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\ComproRemote.lnk --> C:\PROGRA~1\COMMON~1\VIDEOM~1\COMPRO~1.EXE [Compro Technology, Inc.]><N>
[Adobe Reader Speed Launch]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Reader Speed Launch.lnk --> C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [Adobe Systems Incorporated]><N>
[Adobe Gamma Loader]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk --> C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]><N>
[金山词霸 2005]
  <C:\Documents and Settings\user\「开始」菜单\程序\启动\金山词霸 2005.lnk --> C:\PROGRA~1\Kingsoft\POWERW~1\XDICT.EXE [Kingsoft Co, Ltd.]><N>
[Xfire]
  <C:\Documents and Settings\user\「开始」菜单\程序\启动\Xfire.lnk --> C:\PROGRA~1\Xfire\Xfire.exe [Xfire Inc.]><N>