我用瑞星2009无法杀　trojan.psw.win32.gameol　这个毒　请高手相助　谢谢

用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; TencentTraveler ; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) ; Maxthon; .NET CLR 1.1.4322)

看置顶帖
威胁：
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{522C436F-60EE-4C10-A6ED-64BD273E4402}><>  [N/A]
    <{44973E4D-978C-4A2C-99C1-3010911FDF42}><>  [N/A]
    <{4BB35990-4850-4CFB-8B42-8CD36A1CB57F}><>  [N/A]
    <{A6DC3AF1-9F0E-4C4E-9865-0AB717638600}><>  [N/A]
    <{234510D6-04BC-4611-822F-07384BDBAFB6}><>  [N/A]
    <{FA6B0156-A4E5-4B7A-BF51-A7DBBD9D6A3F}><>  [N/A]
    <{12F31092-F865-478E-91FC-3C19D1D0F058}><>  [N/A]
    <{6B381B46-DDD6-4B67-ADFA-29273157F28F}><>  [N/A]
    <{59AE744B-F5E7-472F-9A76-000EF652F65B}><>  [N/A]
    <{A316780F-7A70-4520-B79F-80195BB8A81E}><>  [N/A]
    <{EE73A364-7813-4714-A79F-A022AFB5AB5D}><>  [N/A]
    <{9C401D02-910E-4ED3-BBDB-8440164AC627}><>  [N/A]
    <{3A7EC556-E11C-4BF2-B827-2359DDE2C174}><>  [N/A]
    <{642BD5C5-55D4-49BC-99BE-A4A803881A2A}><C:\WINDOWS\system32\mkibdlcl.dll>  [File is missing]
    <{01D938CF-3E96-41E8-8257-07A2D36B6FA0}><C:\WINDOWS\system32\ghdpjocf.dll>  [File is missing]
    <{CAC938B0-AE8E-4003-9F52-A8B3BB7D8878}><C:\WINDOWS\system32\cacpjobg.dll>  [File is missing]
    <{CC091661-B0B9-49BC-AFD6-AFA831458DDA}><C:\WINDOWS\system32\ccgphmmh.dll>  [File is missing]
    <{F4250813-B517-4D03-9104-8590591E1FE4}><C:\WINDOWS\system32\fkilgohj.dll>  [File is missing]
    <{5DA93C52-C52A-45B5-86AB-493C1108E257}><C:\WINDOWS\system32\ldapjcli.dll>  [File is missing]
    <{28010D91-FA01-4D08-9F87-B5D1682D8CD2}><C:\WINDOWS\system32\ioghgdph.dll>  [File is missing]
    <{676378E4-5C6A-4F25-B149-9D7D775AF22F}><C:\WINDOWS\system32\mnmjnoek.dll>  [File is missing]
    <{AD19D419-B6CA-4715-B6B7-02A40B6AFAC4}><C:\WINDOWS\system32\adhpdkhp.dll>  [File is missing]
    <{5CB67B68-6CE5-47F2-9CAB-D38EF30A52BD}><C:\WINDOWS\system32\lcbmnbmo.dll>  [File is missing]
    <{6F04577B-CA2D-49C3-B47B-EA1CDBE41B5B}><C:\WINDOWS\system32\mfgklnnb.dll>  [File is missing]
    <{3F4CAFE8-465E-41BA-8844-27AD666A4E32}><C:\WINDOWS\system32\jfkcafeo.dll>  [File is missing]
    <{AAC33F76-A2EC-48A0-A580-45913B95C2A8}><C:\WINDOWS\system32\aacjjfnm.dll>  [File is missing]
    <{9BC781D1-6935-4C18-B160-985250567621}><C:\WINDOWS\system32\pbcnohdh.dll>  [File is missing]
    <{369CB96C-CB33-4BBB-A726-67C72E258539}><C:\WINDOWS\system32\jmpcbpmc.dll>  [File is missing]
    <{94763713-C24A-49C2-8342-818F3B56D1B4}><C:\WINDOWS\system32\pknmjnhj.dll>  [File is missing]
    <{3CC6EC6C-E18F-4643-8B65-FE73AC518AB4}><C:\WINDOWS\system32\jccmecmc.dll>  [File is missing]
    <{9E8F00D0-0A78-489E-934B-9899D65A37D4}><C:\WINDOWS\system32\peofggdg.dll>  [File is missing]
    <{6A8D34D7-08D7-421F-AFF6-956A0BD6F0BF}><C:\Program Files\Internet Explorer\PowerNeNt.Onz>  []
    <{1880DEAB-BE56-4452-A5BE-D3308794684D}><C:\WINDOWS\system32\hoogdeab.dll>  []
    <{F42A4718-DDA6-4821-868A-49C75C078F21}><C:\WINDOWS\system32\fkiaknho.dll>  []
    <{BAF9826D-0371-446D-8AE3-3659EDBA4FBA}><C:\WINDOWS\system32\bafpoimd.dll>  []
    <{6833C4AD-8DC7-4BB6-A13C-AD39DF8BF4AA}><C:\WINDOWS\system32\mojjckad.dll>  []
    <{9B8AC4B4-7D67-42C2-83AB-D987F7CC6A93}><C:\WINDOWS\system32\pboackbk.dll>  []
    <{E29BFBA9-0861-4E3C-ACA8-040D91380367}><C:\WINDOWS\system32\eipbfbap.dll>  []
    <{F4FC16B3-A764-403C-9DEC-6783069A2277}><C:\WINDOWS\system32\fkfchmbj.dll>  []
    <{C06B6059-419C-41BF-B877-F6CA7AED56D6}><C:\WINDOWS\system32\cgmbmglp.dll>  []
    <{CECE69EC-CCA1-41E5-9B0D-FD73FFF63D48}><C:\WINDOWS\system32\cecempec.dll>  []
    <{805100F0-F661-4C99-A511-EA2F46DC6181}><C:\WINDOWS\system32\oglhggfg.dll>  []
    <{09A01BD3-2FCF-469A-B121-F6041B9D846E}><C:\WINDOWS\system32\gpaghbdj.dll>  []
    <{01A0FCAB-C866-4176-9100-A900FEC24E3F}><C:\WINDOWS\system32\ghagfcab.dll>  []
    <{E2022544-AA6C-409F-86D8-915C90A4306B}><C:\WINDOWS\system32\eigiilkk.dll>  []
    <{16C50AEF-25F1-4343-A20C-96684AA4CA1A}><C:\WINDOWS\system32\hmclgaef.dll>  []
    <{9F49625D-9EDE-4C60-BE1E-C98EBAAD6AE7}><C:\WINDOWS\system32\pfkpmild.dll>  []
    <{6FFF8D1E-4C19-4CB0-B396-4BA9FB29F9C4}><C:\WINDOWS\system32\mfffodhe.dll>  []
    <{A9CE06BC-8D6F-49B9-BD10-ECA3C305D143}><C:\WINDOWS\system32\apcegmbc.dll>  []
    <{52D60DEF-0727-4C8B-AD5F-F5E43B2042F9}><C:\WINDOWS\system32\lidmgdef.dll>  []
    <{C5B71D88-52A9-415B-8937-321CB41228FC}><C:\WINDOWS\system32\clbnhdoo.dll>  []
    <{0D0A5FC9-5515-4185-BD94-4D1BBCD9E4F6}><C:\WINDOWS\system32\gdgalfcp.dll>  []
    <{ACD4FCEF-823B-4AD1-9580-8EE0956A5E5C}><C:\WINDOWS\system32\acdkfcef.dll>  []
    <{2ECF2430-F178-4959-9687-C388D64787C3}><C:\WINDOWS\system32\iecfikjg.dll>  []
    <{9B3BB37C-97A2-4BD8-BB1C-F2C9FF992A5D}><C:\WINDOWS\system32\pbjbbjnc.dll>  []
    <{EE046587-0D9F-4B86-91F5-8CEAEF1E2E2D}><C:\WINDOWS\system32\eegkmlon.dll>  []
    <{58A23417-B17D-44A5-89F3-6D75899DBFBF}><C:\WINDOWS\system32\loaijkhn.dll>  []
    <{6AA8EDB5-1649-41E8-A5A9-2EB3A57ECD42}><C:\WINDOWS\system32\maaoedbl.dll>  []
    <{39E01BBE-554F-4C34-A82A-2B4C9E8B9E44}><C:\WINDOWS\system32\jpeghbbe.dll>  []
    <{96C06B93-75AC-4098-8314-8E67AF3DF1A0}><C:\WINDOWS\system32\pmcgmbpj.dll>  []
    <{18D4E574-8A0F-461C-9A8D-6E0C028C2ACA}><C:\WINDOWS\system32\hodkelnk.dll>  []
    <{D2439510-274B-40DC-9408-6A7576431D1B}><C:\WINDOWS\system32\dikjplhg.dll>  []
    <{5D565BE5-0B28-4D6F-A976-2BB8D7A51D13}><C:\WINDOWS\system32\ldlmlbel.dll>  []
    <{307B25CE-39EE-4D95-825B-BEED41BCB5B1}><C:\WINDOWS\system32\jgnbilce.dll>  []
    <{BD370BC6-CA4F-4C3A-8858-7D8D03090743}><C:\WINDOWS\system32\bdjngbcm.dll>  []
    <{836FC57D-46E0-4F93-9258-2709B5D0902A}><C:\WINDOWS\system32\ojmfclnd.dll>  []
    <{64DFCC52-DC91-44EF-ADA8-5AC461F5E9BD}><C:\WINDOWS\system32\mkdfccli.dll>  []
    <{71385EF4-D89C-45D0-8ECA-FFA4BD5BE6F6}><C:\WINDOWS\system32\nhjolefk.dll>  []
    <{D0E40B81-4B4A-4382-B6F8-9572F5FCF930}><C:\WINDOWS\system32\dgekgboh.dll>  []
    <{1E997DB1-B907-4974-BFC9-0077CDC08884}><C:\WINDOWS\system32\heppndbh.dll>  []
    <{7D62530B-FB3A-4DF7-B8A5-24E68F2AB94A}><C:\WINDOWS\system32\ndmiljgb.dll>  []
    <{44707FFC-E2AE-4A01-9C11-CED31D7207B9}><C:\WINDOWS\system32\kkngnffc.dll>  []
    <{B19F10E3-06EA-41B5-81B9-B615F8DF19B0}><C:\WINDOWS\system32\bhpfhgej.dll>  []
    <{8E591D01-60B3-40D2-9693-7C260EB13119}><C:\WINDOWS\system32\oelphdgh.dll>  []
    <{1DFCE096-BB77-4795-ADF5-BF0FD4D1294E}><C:\WINDOWS\system32\hdfcegpm.dll>  []
    <{A1CC8A53-B913-4BF5-B040-8BE98D876562}><C:\WINDOWS\system32\ahccoalj.dll>  []
    <{3F311B81-C47C-409A-95AB-1BDC58DC2C81}><C:\WINDOWS\system32\jfjhhboh.dll>  []
    <{CE8F48AA-2A2E-418D-98DF-4A4236A8E364}><C:\WINDOWS\system32\ceofkoaa.dll>  []
    <{446C17B7-0C28-42A2-A54F-84A368040BD9}><C:\WINDOWS\system32\kkmchnbn.dll>  []
    <{E6E65031-37C3-4899-A71E-2BB5A72E8DF6}><C:\WINDOWS\system32\ememlgjh.dll>  []
    <{CE7EBA94-2133-4D97-9B56-6511418DC8B2}><C:\WINDOWS\system32\cenebapk.dll>  []
    <{9C458CFD-886E-490C-8863-EC545DEDD466}><C:\WINDOWS\system32\pcklocfd.dll>  []
    <{CF0713DB-9A3B-4BC4-9F02-34941B32C2AD}><C:\WINDOWS\system32\cfgnhjdb.dll>  []
    <{EF59F6BE-9A97-4131-B2A9-9B0E4A00D93B}><C:\WINDOWS\system32\eflpfmbe.dll>  []
    <{9ECB65DA-5F40-4D92-A248-A0D138BF1C97}><C:\WINDOWS\system32\pecbmlda.dll>  []
    <{3EF3055F-2A8B-452F-A3A8-9713255AA338}><C:\WINDOWS\system32\jefjgllf.dll>  []
    <{22EE761B-D9E7-43F1-808D-E3B8E076F5B6}><C:\WINDOWS\system32\iieenmhb.dll>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<522C436F><>  [N/A]
    <44973E4D><>  [N/A]
    <4BB35990><>  [N/A]
    <A6DC3AF1><>  [N/A]
    <234510D6><>  [N/A]
    <FA6B0156><>  [N/A]
    <12F31092><>  [N/A]
    <6B381B46><>  [N/A]
    <59AE744B><>  [N/A]
    <A316780F><>  [N/A]
    <EE73A364><>  [N/A]
    <9C401D02><>  [N/A]
    <3A7EC556><>  [N/A]
    <A6EE2E2C><>  [N/A]
    <11D218E1><>  [N/A]
    <E12F9443><>  [N/A]
    <06CA6918><>  [N/A]
    <642BD5C5><C:\WINDOWS\system32\mkibdlcl.dll>  [File is missing]
    <01D938CF><C:\WINDOWS\system32\ghdpjocf.dll>  [File is missing]
    <A7D8A012><>  [N/A]
    <1CCD0E1A><>  [N/A]
    <685A6DFB><>  [N/A]
    <CAC938B0><C:\WINDOWS\system32\cacpjobg.dll>  [File is missing]
    <CC091661><C:\WINDOWS\system32\ccgphmmh.dll>  [File is missing]
    <3FA4D2BD><>  [N/A]
    <F4250813><C:\WINDOWS\system32\fkilgohj.dll>  [File is missing]
    <8BD57E73><>  [N/A]
    <F79ED955><>  [N/A]
    <B0061206><>  [N/A]
    <158B0BA6><>  [N/A]
    <F4C894B6><>  [N/A]
    <4CA5E49A><>  [N/A]
    <252C34B4><>  [N/A]
    <55408211><>  [N/A]
    <E49FA3FC><>  [N/A]
    <761D6207><>  [N/A]
    <57072E99><>  [N/A]
    <91C30319><>  [N/A]
    <343CF99D><>  [N/A]
    <785739DB><>  [N/A]
    <4DE1B9BF><>  [N/A]
    <66ED5392><>  [N/A]
    <50CC55AA><>  [N/A]
    <1E3EE11C><>  [N/A]
    <AFDDB742><>  [N/A]
    <14D18F50><>  [N/A]
    <5DA93C52><C:\WINDOWS\system32\ldapjcli.dll>  [File is missing]
    <28010D91><C:\WINDOWS\system32\ioghgdph.dll>  [File is missing]
    <676378E4><C:\WINDOWS\system32\mnmjnoek.dll>  [File is missing]
    <AD19D419><C:\WINDOWS\system32\adhpdkhp.dll>  [File is missing]
    <5CB67B68><C:\WINDOWS\system32\lcbmnbmo.dll>  [File is missing]
    <6F04577B><C:\WINDOWS\system32\mfgklnnb.dll>  [File is missing]
    <3F4CAFE8><C:\WINDOWS\system32\jfkcafeo.dll>  [File is missing]
    <AAC33F76><C:\WINDOWS\system32\aacjjfnm.dll>  [File is missing]
    <9BC781D1><C:\WINDOWS\system32\pbcnohdh.dll>  [File is missing]
    <369CB96C><C:\WINDOWS\system32\jmpcbpmc.dll>  [File is missing]
    <94763713><C:\WINDOWS\system32\pknmjnhj.dll>  [File is missing]
    <3CC6EC6C><C:\WINDOWS\system32\jccmecmc.dll>  [File is missing]
    <9E8F00D0><C:\WINDOWS\system32\peofggdg.dll>  [File is missing]
    <1880DEAB><C:\WINDOWS\system32\hoogdeab.dll>  []
    <F42A4718><C:\WINDOWS\system32\fkiaknho.dll>  []
    <BAF9826D><C:\WINDOWS\system32\bafpoimd.dll>  []
    <6833C4AD><C:\WINDOWS\system32\mojjckad.dll>  []
    <9B8AC4B4><C:\WINDOWS\system32\pboackbk.dll>  []
    <E29BFBA9><C:\WINDOWS\system32\eipbfbap.dll>  []
    <F4FC16B3><C:\WINDOWS\system32\fkfchmbj.dll>  []
    <C06B6059><C:\WINDOWS\system32\cgmbmglp.dll>  []
    <CECE69EC><C:\WINDOWS\system32\cecempec.dll>  []
    <805100F0><C:\WINDOWS\system32\oglhggfg.dll>  []
    <09A01BD3><C:\WINDOWS\system32\gpaghbdj.dll>  []
    <01A0FCAB><C:\WINDOWS\system32\ghagfcab.dll>  []
    <E2022544><C:\WINDOWS\system32\eigiilkk.dll>  []
    <16C50AEF><C:\WINDOWS\system32\hmclgaef.dll>  []
    <9F49625D><C:\WINDOWS\system32\pfkpmild.dll>  []
    <6FFF8D1E><C:\WINDOWS\system32\mfffodhe.dll>  []
    <A9CE06BC><C:\WINDOWS\system32\apcegmbc.dll>  []
    <52D60DEF><C:\WINDOWS\system32\lidmgdef.dll>  []
    <C5B71D88><C:\WINDOWS\system32\clbnhdoo.dll>  []
    <0D0A5FC9><C:\WINDOWS\system32\gdgalfcp.dll>  []
    <ACD4FCEF><C:\WINDOWS\system32\acdkfcef.dll>  []
    <2ECF2430><C:\WINDOWS\system32\iecfikjg.dll>  []
    <9B3BB37C><C:\WINDOWS\system32\pbjbbjnc.dll>  []
    <EE046587><C:\WINDOWS\system32\eegkmlon.dll>  []
    <58A23417><C:\WINDOWS\system32\loaijkhn.dll>  []
    <6AA8EDB5><C:\WINDOWS\system32\maaoedbl.dll>  []
    <39E01BBE><C:\WINDOWS\system32\jpeghbbe.dll>  []
    <96C06B93><C:\WINDOWS\system32\pmcgmbpj.dll>  []
    <18D4E574><C:\WINDOWS\system32\hodkelnk.dll>  []
    <D2439510><C:\WINDOWS\system32\dikjplhg.dll>  []
    <5D565BE5><C:\WINDOWS\system32\ldlmlbel.dll>  []
    <307B25CE><C:\WINDOWS\system32\jgnbilce.dll>  []
    <BD370BC6><C:\WINDOWS\system32\bdjngbcm.dll>  []
    <836FC57D><C:\WINDOWS\system32\ojmfclnd.dll>  []
    <64DFCC52><C:\WINDOWS\system32\mkdfccli.dll>  []
    <71385EF4><C:\WINDOWS\system32\nhjolefk.dll>  []
    <D0E40B81><C:\WINDOWS\system32\dgekgboh.dll>  []
    <1E997DB1><C:\WINDOWS\system32\heppndbh.dll>  []
    <7D62530B><C:\WINDOWS\system32\ndmiljgb.dll>  []
    <44707FFC><C:\WINDOWS\system32\kkngnffc.dll>  []
    <B19F10E3><C:\WINDOWS\system32\bhpfhgej.dll>  []
    <8E591D01><C:\WINDOWS\system32\oelphdgh.dll>  []
    <1DFCE096><C:\WINDOWS\system32\hdfcegpm.dll>  []
    <A1CC8A53><C:\WINDOWS\system32\ahccoalj.dll>  []
    <3F311B81><C:\WINDOWS\system32\jfjhhboh.dll>  []
    <CE8F48AA><C:\WINDOWS\system32\ceofkoaa.dll>  []
    <446C17B7><C:\WINDOWS\system32\kkmchnbn.dll>  []
    <E6E65031><C:\WINDOWS\system32\ememlgjh.dll>  []
    <CE7EBA94><C:\WINDOWS\system32\cenebapk.dll>  []
    <9C458CFD><C:\WINDOWS\system32\pcklocfd.dll>  []
    <CF0713DB><C:\WINDOWS\system32\cfgnhjdb.dll>  []
    <EF59F6BE><C:\WINDOWS\system32\eflpfmbe.dll>  []
    <9ECB65DA><C:\WINDOWS\system32\pecbmlda.dll>  []
    <3EF3055F><C:\WINDOWS\system32\jefjgllf.dll>  []
    <22EE761B><C:\WINDOWS\system32\iieenmhb.dll>  []

服务
[MSSQLSERVER / MSSQLSERVER][Stopped/Auto Start]
  <><(File is missing)>
[MSSQLServerADHelper / MSSQLServerADHelper][Stopped/Manual Start]
  <><(File is missing)>
[MSSQLServerOLAPService / MSSQLServerOLAPService][Stopped/Auto Start]
  <><(File is missing)>


可疑驱动
[Apsm / Apsm][Stopped/Manual Start]
  <\??\G:\迅雷下的\串口调~1.33\ACCESS~1\Apsm.sys><N/A>
[KRegEx / KRegEx][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\KRegEx.sys><N/A>
[KvMemon / KvMemon][Stopped/Manual Start]
  <\??\d:\PROGRA~1\KV2006\KvMemon.sys><N/A>
[MEMSCAN / MEMSCAN][Stopped/Auto Start]
  <\??\D:\PROGRAM FILES\RISING\RAV\MEMSCAN.sys><N/A>
[mProcRs / mProcRs][Stopped/Auto Start]
  <\??\d:\program files\rising\rfw\mProcRs.sys><N/A>
[msiffei / msiffei][Stopped/Manual Start]
  <System32\Drivers\msiffei.sys><N/A>
[npkcrypt / npkcrypt][Stopped/Auto Start]
  <\??\D:\Program Files\Tencent\QQ\npkcrypt.sys><N/A>
[npkycryp / npkycryp][Stopped/Manual Start]
  <\??\D:\Program Files\Tencent\QQ\npkycryp.sys><N/A>
威胁
[Safe Mon 360 / SafeMon0][Running/System Start]
  <\??\C:\WINDOWS\system32\7C56EE26.dat><N/A>

正在运行的威胁
[C:\Program Files\Internet Explorer\PowerNeNt.Onz]  [N/A, ]（下载器）
    [C:\WINDOWS\system32\amhlgjap.dll]  [N/A, ]
    [C:\WINDOWS\system32\khlafoih.dll]  [N/A, ]
    [C:\WINDOWS\system32\jogedhgd.dll]  [N/A, ]
    [C:\WINDOWS\system32\haflolbe.dll]  [N/A, ]
    [C:\WINDOWS\system32\gffdkbmh.dll]  [N/A, ]
    [C:\WINDOWS\system32\omkjnpnh.dll]  [N/A, ]
    [C:\WINDOWS\system32\hffinnpf.dll]  [N/A, ]
    [C:\WINDOWS\system32\ebkdakjm.dll]  [N/A, ]
    [C:\WINDOWS\system32\adbahini.dll]  [N/A, ]
    [C:\WINDOWS\system32\iohhnigf.dll]  [N/A, ]
    [C:\WINDOWS\system32\bbkodidf.dll]  [N/A, ]
    [C:\WINDOWS\system32\ilkeniom.dll]  [N/A, ]
    [C:\WINDOWS\TEMP\WowInitcode.dat]  [N/A, ]
[C:\DOCUME~1\coffee\LOCALS~1\Temp\所有]（QQPASS)

手动看置顶帖就行了
自动的话试试把以下工具放到C：、Windows、SYSTEM32下
http://devbuilds.kaspersky-labs.com/devbuilds/AVPTool/setup_7.0.0.290_29.01.2009_14-00.exe

请看置顶的猫叔写的杀usp10.dll的帖子
http://bbs.ikaka.com/showtopic-8592261.aspx

因为userinit.exe被替换，所以usp10.dll伪造了微软签名．