==================================
驱动程序
[Microsoft ACPI Driver / ACPI]
  <\SystemRoot\system32\DRIVERS\ACPI.sys><Microsoft Corporation>
[ACPIEC / ACPIEC]
  <C:\WINDOWS\SYSTEM32\DRIVERS\ACPIEC.SYS><Microsoft Corporation>
[Microsoft Kernel Acoustic Echo Canceller / aec]
  <system32\drivers\aec.sys><Microsoft Corporation>
[AFD / AFD]
  <\SystemRoot\System32\drivers\afd.sys><Microsoft Corporation>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[RAS Asynchronous Media Driver / AsyncMac]
  <system32\DRIVERS\asyncmac.sys><Microsoft Corporation>
[标准 IDE/ESDI 硬盘控制器 / atapi]
  <\SystemRoot\system32\DRIVERS\atapi.sys><Microsoft Corporation>
[ATM ARP Client Protocol / Atmarpc]
  <system32\DRIVERS\atmarpc.sys><Microsoft Corporation>
[音频存根驱动程序 / audstub]
  <system32\DRIVERS\audstub.sys><Microsoft Corporation>
[Beep / Beep]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Beep.SYS><Microsoft Corporation>
[cbidf2k / cbidf2k]
  <C:\WINDOWS\SYSTEM32\DRIVERS\cbidf2k.SYS><Microsoft Corporation>
[Cdaudio / Cdaudio]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Cdaudio.SYS><Microsoft Corporation>
[Cdfs / Cdfs]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Cdfs.SYS><Microsoft Corporation>
[CD-ROM Driver / Cdrom]
  <system32\DRIVERS\cdrom.sys><Microsoft Corporation>
[磁盘驱动器 / Disk]
  <\SystemRoot\system32\DRIVERS\disk.sys><Microsoft Corporation>
[dmboot / dmboot]
  <System32\drivers\dmboot.sys><Microsoft Corp., Veritas Software>
[Logical Disk Manager Driver / dmio]
  <\SystemRoot\System32\drivers\dmio.sys><Microsoft Corp., Veritas Software>
[dmload / dmload]
  <\SystemRoot\System32\drivers\dmload.sys><Microsoft Corp., Veritas Software.>
[Microsoft Kernel DLS Syntheiszer / DMusic]
  <system32\drivers\DMusic.sys><Microsoft Corporation>
[Microsoft Kernel DRM Audio Descrambler / drmkaud]
  <system32\drivers\drmkaud.sys><Microsoft Corporation>
[Fastfat / Fastfat]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Fastfat.SYS><Microsoft Corporation>
[Floppy Disk Controller Driver / Fdc]
  <system32\DRIVERS\fdc.sys><Microsoft Corporation>
[Fips / Fips]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Fips.SYS><Microsoft Corporation>
[Flpydisk / Flpydisk]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Flpydisk.SYS><Microsoft Corporation>
[FltMgr / FltMgr]
  <\SystemRoot\system32\DRIVERS\fltMgr.sys><Microsoft Corporation>
[FsVga / FsVga]
  <system32\DRIVERS\fsvga.sys><Microsoft Corporation>
[Volume Manager Driver / Ftdisk]
  <\SystemRoot\system32\DRIVERS\ftdisk.sys><Microsoft Corporation>
[Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms / gagp30kx]
  <\SystemRoot\system32\DRIVERS\gagp30kx.sys><Microsoft Corporation>
[Generic Packet Classifier / Gpc]
  <system32\DRIVERS\msgpc.sys><Microsoft Corporation>
[HTTP / HTTP]
  <System32\Drivers\HTTP.sys><Microsoft Corporation>
[i8042 键盘及 PS/2 鼠标端口驱动程序 / i8042prt]
  <system32\DRIVERS\i8042prt.sys><Microsoft Corporation>
[CD 烧制筛选驱动器 / Imapi]
  <system32\DRIVERS\imapi.sys><Microsoft Corporation>
[IPv6 Windows Firewall Driver / Ip6Fw]
  <system32\DRIVERS\Ip6Fw.sys><Microsoft Corporation>
[IP Traffic Filter Driver / IpFilterDriver]
  <system32\DRIVERS\ipfltdrv.sys><Microsoft Corporation>
[IP in IP Tunnel Driver / IpInIp]
  <system32\DRIVERS\ipinip.sys><Microsoft Corporation>
[IP Network Address Translator / IpNat]
  <system32\DRIVERS\ipnat.sys><Microsoft Corporation>
[IPSEC driver / IPSec]
  <system32\DRIVERS\ipsec.sys><Microsoft Corporation>
[IR Enumerator Service / IRENUM]
  <system32\DRIVERS\irenum.sys><Microsoft Corporation>
[PnP ISA/EISA Bus Driver / isapnp]
  <\SystemRoot\system32\DRIVERS\isapnp.sys><Microsoft Corporation>
[Keyboard Class Driver / Kbdclass]
  <system32\DRIVERS\kbdclass.sys><Microsoft Corporation>
[kl1 / kl1]
  <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif]
  <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Microsoft Kernel Wave Audio Mixer / kmixer]
  <system32\drivers\kmixer.sys><Microsoft Corporation>
[KSecDD / KSecDD]
  <C:\WINDOWS\SYSTEM32\DRIVERS\KSecDD.SYS><Microsoft Corporation>
[mnmdd / mnmdd]
  <C:\WINDOWS\SYSTEM32\DRIVERS\mnmdd.SYS><Microsoft Corporation>
[Modem / Modem]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Modem.SYS><Microsoft Corporation>
[Mouse Class Driver / Mouclass]
  <system32\DRIVERS\mouclass.sys><Microsoft Corporation>
[MountMgr / MountMgr]
  <C:\WINDOWS\SYSTEM32\DRIVERS\MountMgr.SYS><Microsoft Corporation>
[WebDav Client Redirector / MRxDAV]
  <system32\DRIVERS\mrxdav.sys><Microsoft Corporation>
[MRxSmb / MRxSmb]
  <system32\DRIVERS\mrxsmb.sys><Microsoft Corporation>
[Msfs / Msfs]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Msfs.SYS><Microsoft Corporation>
[Microsoft Streaming Service Proxy / MSKSSRV]
  <system32\drivers\MSKSSRV.sys><Microsoft Corporation>
[Microsoft Streaming Clock Proxy / MSPCLOCK]
  <system32\drivers\MSPCLOCK.sys><Microsoft Corporation>
[Microsoft Streaming Quality Manager Proxy / MSPQM]
  <system32\drivers\MSPQM.sys><Microsoft Corporation>
[Microsoft System Management BIOS Driver / mssmbios]
  <system32\DRIVERS\mssmbios.sys><Microsoft Corporation>
[Mup / Mup]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Mup.SYS><Microsoft Corporation>
[NDIS System Driver / NDIS]
  <C:\WINDOWS\SYSTEM32\DRIVERS\NDIS.SYS><Microsoft Corporation>
[Remote Access NDIS TAPI Driver / NdisTapi]
  <system32\DRIVERS\ndistapi.sys><Microsoft Corporation>
[NDIS 用户模式 I/O 协议 / Ndisuio]
  <system32\DRIVERS\ndisuio.sys><Microsoft Corporation>
[Remote Access NDIS WAN Driver / NdisWan]
  <system32\DRIVERS\ndiswan.sys><Microsoft Corporation>
[NDIS Proxy / NDProxy]
  <C:\WINDOWS\SYSTEM32\DRIVERS\NDProxy.SYS><Microsoft Corporation>
[NetBIOS Interface / NetBIOS]
  <system32\DRIVERS\netbios.sys><Microsoft Corporation>
[NetBios over Tcpip / NetBT]
  <system32\DRIVERS\netbt.sys><Microsoft Corporation>
[Npfs / Npfs]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Npfs.SYS><Microsoft Corporation>
[npkcrypt / npkcrypt]
  <\??\D:\~~QQ ~~\qq\npkcrypt.sys><INCA Internet Co., Ltd.>
[Ntfs / Ntfs]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Ntfs.SYS><Microsoft Corporation>
[Null / Null]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Null.SYS><Microsoft Corporation>
[nv / nv]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[IPX Traffic Filter Driver / NwlnkFlt]
  <system32\DRIVERS\nwlnkflt.sys><Microsoft Corporation>
[IPX Traffic Forwarder Driver / NwlnkFwd]
  <system32\DRIVERS\nwlnkfwd.sys><Microsoft Corporation>
[Parport / Parport]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Parport.SYS><Microsoft Corporation>
[PartMgr / PartMgr]
  <C:\WINDOWS\SYSTEM32\DRIVERS\PartMgr.SYS><Microsoft Corporation>
[ParVdm / ParVdm]
  <C:\WINDOWS\SYSTEM32\DRIVERS\ParVdm.SYS><Microsoft Corporation>
[PCI Bus Driver / PCI]
  <\SystemRoot\system32\DRIVERS\pci.sys><Microsoft Corporation>
[PCIIde / PCIIde]
  <\SystemRoot\system32\DRIVERS\pciide.sys><Microsoft Corporation>
[Pcmcia / Pcmcia]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Pcmcia.SYS><Microsoft Corporation>
[WAN Miniport (PPTP) / PptpMiniport]
  <system32\DRIVERS\raspptp.sys><Microsoft Corporation>
[处理器驱动程序 / Processor]
  <system32\DRIVERS\processr.sys><Microsoft Corporation>
[QoS Packet Scheduler / PSched]
  <system32\DRIVERS\psched.sys><Microsoft Corporation>
[Direct Parallel Link Driver / Ptilink]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>

[Remote Access Auto Connection Driver / RasAcd]
  <system32\DRIVERS\rasacd.sys><Microsoft Corporation>
[WAN Miniport (L2TP) / Rasl2tp]
  <system32\DRIVERS\rasl2tp.sys><Microsoft Corporation>
[远程访问 PPPOE 驱动程序 / RasPppoe]
  <system32\DRIVERS\raspppoe.sys><Microsoft Corporation>
[Direct Parallel / Raspti]
  <system32\DRIVERS\raspti.sys><Microsoft Corporation>
[Rdbss / Rdbss]
  <system32\DRIVERS\rdbss.sys><Microsoft Corporation>
[RDPCDD / RDPCDD]
  <System32\DRIVERS\RDPCDD.sys><Microsoft Corporation>
[Terminal Server Device Redirector Driver / rdpdr]
  <system32\DRIVERS\rdpdr.sys><Microsoft Corporation>
[RDPWD / RDPWD]
  <C:\WINDOWS\SYSTEM32\DRIVERS\RDPWD.SYS><Microsoft Corporation>
[Digital CD Audio Playback Filter Driver / redbook]
  <system32\DRIVERS\redbook.sys><Microsoft Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv]
  <system32\DRIVERS\secdrv.sys><N/A>
[Serenum Filter Driver / serenum]
  <system32\DRIVERS\serenum.sys><Microsoft Corporation>
[Serial port driver / Serial]
  <system32\DRIVERS\serial.sys><Microsoft Corporation>
[Sfloppy / Sfloppy]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Sfloppy.SYS><Microsoft Corporation>
[Microsoft Kernel Audio Splitter / splitter]
  <system32\drivers\splitter.sys><Microsoft Corporation>
[System Restore Filter Driver / sr]
  <\SystemRoot\system32\DRIVERS\sr.sys><Microsoft Corporation>
[Srv / Srv]
  <system32\DRIVERS\srv.sys><Microsoft Corporation>
[Software Bus Driver / swenum]
  <system32\DRIVERS\swenum.sys><Microsoft Corporation>
[Microsoft Kernel GS Wavetable Synthesizer / swmidi]
  <system32\drivers\swmidi.sys><Microsoft Corporation>
[Microsoft Kernel System Audio Device / sysaudio]
  <system32\drivers\sysaudio.sys><Microsoft Corporation>
[TCP/IP Protocol Driver / Tcpip]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[TDPIPE / TDPIPE]
  <C:\WINDOWS\SYSTEM32\DRIVERS\TDPIPE.SYS><Microsoft Corporation>
[TDTCP / TDTCP]
  <C:\WINDOWS\SYSTEM32\DRIVERS\TDTCP.SYS><Microsoft Corporation>
[Terminal Device Driver / TermDD]
  <system32\DRIVERS\termdd.sys><Microsoft Corporation>
[TSP / TSP]
  <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[Udfs / Udfs]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Udfs.SYS><Microsoft Corporation>
[Microcode Update Driver / Update]
  <system32\DRIVERS\update.sys><Microsoft Corporation>
[Microsoft USB 2.0 Enhanced Host Controller Miniport Driver / usbehci]
  <system32\DRIVERS\usbehci.sys><Microsoft Corporation>

==================================
浏览器加载项
[Web反病毒保护]
  {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab>
[上传到QQ网络硬盘]
  <D:\~~QQ ~~\qq\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <D:\~~QQ ~~\qq\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\~~QQ ~~\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\~~QQ ~~\qq\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 484][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 544][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 568][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 6.0.0.299]
[PID: 612][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 624][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
[PID: 776][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 840][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
[PID: 900][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [c:\windows\system32\acss.dll]  [LINKMEDIA Tech, 1, 5, 0, 4]
    [c:\windows\system32\nwsapagent.dll]  [LINKMEDIA Tech, 1, 5, 0, 4]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
[PID: 968][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
[PID: 988][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
[PID: 1304][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\KB27861012.log]  [N/A, N/A]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll]  [Kaspersky Lab, 6.0.0.299]
[PID: 1344][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1556][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1852][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 1808][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
[PID: 4500][C:\WINDOWS\system32\rundll32.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\sdmAgent22.dll]  [LINKMEDIA Tech, 1, 5, 0, 7]
[PID: 9888][C:\WINDOWS\system32\wuauclt.exe]  [Microsoft Corporation, 5.8.0.2469 built by: lab01_n(wmbla)]
[PID: 35900][C:\Program Files\DrCOM\Dr.COM 宽带登录客户端\ishare_user.exe]  [N/A, N/A]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
[PID: 36204][C:\Program Files\Maxthon\Max.exe]  [Maxthon International Ltd., 1, 5, 3, 18]
    [C:\Program Files\Maxthon\maxzlib.dll]  [ , 1, 0, 0, 2]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
    [C:\Program Files\Maxthon\Services\RealTime\real_time.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.299]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.0.299]
    [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.299]
[PID: 64476][D:\日志扫描\sreng2\SREng\SREng.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\WINDOWS\system32\TcpIpDog0.dll]  [N/A, N/A]
    [D:\日志扫描\sreng2\SREng\Plugins\SRECXTMG.SRE]  [Smallfrogs Studio, 1, 5, 0, 55]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
MSAFD Tcpip [TCP/IP]
    C:\WINDOWS\system32\TcpIpDog0.dll(N/A, N/A)
MSAFD Tcpip [UDP/IP]
    C:\WINDOWS\system32\TcpIpDog0.dll(N/A, N/A)
MSAFD Tcpip [RAW/IP]
    C:\WINDOWS\system32\TcpIpDog0.dll(N/A, N/A)
RSVP UDP Service Provider
    C:\WINDOWS\system32\TcpIpDogR0.dll(N/A, N/A)
RSVP TCP Service Provider
    C:\WINDOWS\system32\TcpIpDogR0.dll(N/A, N/A)

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================

都发了 全在这了  高手门  帮看看吧  谢谢哦
对；了  我在C盘  看到个奇怪文件夹  网上查 查不出是什么唉
C:\!Submit
这个叫“!Submit”的文件夹 也是病毒生成的吗？？是被系统隐藏了的文件夹啊