大家帮忙看看，我给上传一个图片

是病毒吗？自己删除完还是有，自己自动生成的！而且每个可执行文件都会被复制一个可执行文件，并加.exe后缀！

下载 System Repair Engineer系统扫描工具软件，下载地址如下：
http://www.kztechs.com/sreng/download.html
扫描和上传日志的方法：
1、解压缩所下载的sreng2.zip压缩包；
2、打开已经解压缩的SRENG文件夹，双击运行其中的SREng.exe（如果不能运行，请删除已经解压的SRENG文件夹和其包含的所有文件，重新下载新的压缩包或用已下载的压缩包重新解压，解压时请将解压后的文件夹名改为111，解压后，进入111文件夹，不要运行其中的SREng.exe这个可执行文件，先将其直接改名为111.bat、111.scr、111.com或111.pif，或者改为111.exe，然后再双击运行）；
3、依次按“智能扫描”、“扫描”、“保存报告”，将日志保存到硬盘上；
4、找到并打开日志，把日志中的内容用“复制”--“粘贴”命令拷贝到帖子上，不要修改地传上来（日志很长，一个帖子搞不完，请手动将全部内容分多个回复帖子传上来）。
友情提示：
扫描日志前关闭所有手工打开的软件和窗口。
注意在没有进一步提示前，请勿用SRENG工具胡乱修复，否则系统可能变的情况更糟

========Content========
========Content========
http://www.kztechs.com/sreng/download.html 下载System Repair Engineer
1 解压缩sreng2.zip
2 运行SREng.exe
3 智能扫描=》扫描=》保存报告
4 把日志中的报告完整拷贝贴上来，不要修改（一次发不完请分次发上来）
5 扫日志的时候尽量把不必要的软件关闭 如QQ TM等

[CODE]

2007-07-06,17:33:56

System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)

Windows Server 2003 Standard Edition Service Pack 2 (Build 3790) - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件
    进程特权扫描


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Component Publisher]
    <ServUTrayIcon><C:\Program Files\Serv-U\ServUTray.exe>  [Cat Soft]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Windows Component Publisher]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Windows Component Publisher]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Windows Component Publisher]
    <CPQTEAM><cpqteam.exe>  [(Verified)Microsoft Windows Hardware Compatibility Publisher]
    <IMSCMig><C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload>  [(Verified)Microsoft Corporation]
    <SunJavaUpdateSched><"C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe">  [(Verified)"Sun Microsystems, Inc."]
    <runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup>  [Beijing Rising Technology Co., Ltd.]
    <bjcacertd_3k><C:\Program Files\Feitian\BJCA-ePass3000\bjcacertd_3k.exe>  []
    <msccrt><C:\WINDOWS\CSRSS.exe>  [N/A]
    <360Safetray><C:\Program Files\360safe\safemon\360Tray.exe /start>  [奇虎网]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <KKDelay><C:\Program Files\Rising\AntiSpyware\RunOnce.exe>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><explorer.exe>  [(Verified)Microsoft Windows Component Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><%SystemRoot%\system32\logonui.exe>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub>  [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <N/A><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <load><; C:\WINDOWS\uninstall\rundl132.exe>  [N/A]

==================================
启动文件夹
N/A

==================================
服务
[HP Insight Event Notifier / CIMnotify][Stopped/Disabled]
  <C:\WINDOWS\system32\CIMntfy\cimntfy.exe><Hewlett-Packard Company>
[HP Insight NIC Agent / CpqNicMgmt][Running/Auto Start]
  <C:\WINDOWS\system32\CPQNiMgt\cpqnimgt.exe><Hewlett-Packard Company>
[HP ProLiant Remote Monitor Service / CpqRcmc][Running/Auto Start]
  <C:\WINDOWS\system32\CpqRcmc.exe><Hewlett-Packard Company>
[HP Version Control Agent / cpqvcagent][Running/Auto Start]
  <C:\hp\hpsmh\data\cgi-bin\vcagent\vcagent.exe><Hewlett-Packard Company>
[HP Insight Foundation Agents / CqMgHost][Running/Auto Start]
  <C:\WINDOWS\system32\CPQMgmt\CqMgHost\cqmghost.exe><Hewlett-Packard Company>
[HP Insight Server Agents / CqMgServ][Running/Auto Start]
  <C:\WINDOWS\system32\CPQMgmt\CqMgServ\cqmgserv.exe><Hewlett-Packard Company>
[HP Insight Storage Agents / CqMgStor][Running/Auto Start]
  <C:\WINDOWS\system32\CPQMgmt\CqMgStor\cqmgstor.exe><Hewlett-Packard Company>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
  <C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe><Macrovision Corporation>
[卡巴斯基防病毒服务 / klfsblogic][Running/Auto Start]
  <"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus for File Servers 5\kavmm.exe" -run bl -n Fileserver -v 5.0.0.0><Kaspersky Lab>
[卡巴斯基网络代理 / klnagent][Running/Auto Start]
  <"C:\Program Files\Kaspersky Lab\NetworkAgent\klnagent.exe"><Kaspersky Lab>
[MarkVision Server / MvServer][Running/Auto Start]
  <C:\WINDOWS\system32\lexmvservice.exe><N/A>
[MarkVision Web Server / MvWebServer][Running/Auto Start]
  <C:\WINDOWS\system32\lexwebservice.exe><N/A>
[PostgreSQL Database Server 8.1 / pgsql-8.1][Running/Auto Start]
  <"C:\Program Files\PostgreSQL\8.1\bin\pg_ctl.exe" runservice -N "pgsql-8.1" -D "C:\Program Files\PostgreSQL\8.1\data\"><PostgreSQL Global Development Group>
[Serv-U FTP 服务器 / Serv-U][Running/Auto Start]
  <C:\Program Files\Serv-U\ServUDaemon.exe><N/A>
[HP ProLiant System Shutdown Service / sysdown][Running/Auto Start]
  <C:\WINDOWS\system32\sysdown.exe><Compaq Computer Corporation>
[HP System Management Homepage / SysMgmtHp][Running/Auto Start]
  <C:\hp\hpsmh\bin\smhstart.exe><Hewlett-Packard Company>

==================================
驱动程序
[aac / aac][Stopped/Disabled]
  <\SystemRoot\system32\drivers\aac.sys><Adaptec, Inc.>
[aaccin / aaccin][Stopped/Disabled]
  <\SystemRoot\system32\drivers\aaccin.dll><Adaptec, Inc.>
[ati2mpad / ati2mpad][Running/Manual Start]
  <system32\DRIVERS\ati2mpad.sys><ATI Technologies Inc.>
[cpqasm2 / cpqasm2][Running/Manual Start]
  <system32\DRIVERS\cpqasm2.sys><Compaq Computer Corporation>
[HP iLO Management Channel Interface Driver / CpqCiDrv][Running/Manual Start]
  <system32\DRIVERS\cpqcidrv.sys><Hewlett-Packard Company>
[CPQCISSE / CPQCISSE][Running/Manual Start]
  <system32\DRIVERS\CPQCISSE.sys><Hewlett-Packard Company>
[cpqcissm / cpqcissm][Running/Boot Start]
  <\SystemRoot\system32\drivers\cpqcissm.sys><Hewlett-Packard Company>
[HP Network Configuration Utility / CPQTeam][Stopped/Manual Start]
  <system32\DRIVERS\cpqteam.sys><Hewlett-Packard Company>
[hpdltw32 / hpdltw32][Stopped/Manual Start]
  <system32\DRIVERS\hpdltw32.sys><Hewlett Packard Company>
[IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start]
  <system32\DRIVERS\ipinip.sys><N/A>
[KLIF / KLIF][Running/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Labs>
[MegaIDE / MegaIDE][Stopped/Disabled]
  <\SystemRoot\system32\drivers\MegaIDE.sys><LSI Logic Corporation>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
  <system32\drivers\npf.sys><CACE Technologies>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[HP NC7781 Gigabit Server Adapter / q57w2k][Running/Manual Start]
  <system32\DRIVERS\q57xp32.sys><Hewlett-Packard Company>
[USB Token 32 Holder Service / R6BaseSmc][Running/Manual Start]
  <system32\DRIVERS\smccarda.sys><OEM>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.>
[USB Token 32 Device Service / Ry6_USB][Stopped/Manual Start]
  <system32\DRIVERS\Ry6USB.sys><>
[s / s][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\s.sys><N/A>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[symmpi / symmpi][Running/Boot Start]
  <\SystemRoot\system32\drivers\symmpi.sys><LSI Logic>
[HP ProLiant System Management Interface Driver / sysmgmt][Running/Manual Start]
  <system32\DRIVERS\sysmgmt.sys><Compaq Computer Corporation>

==================================

谢谢各位了！帮我看看，已上传一个附件，文本文件实在是太长了