Trojan.Ourxin病毒我感染了怎么杀了啊!我怎么杀就是杀不掉!请问手动如何除掉,这病毒的威胁力大吗?请帮助啊!我现在IE打开很慢才能动,真倒门

病毒是SKYCN.COM里的一个软件叫局域网超级工具里带的,你只要下了,点开后就自动下载各种病毒.很厉害!IE就变成僵尸了,
Logfile of Kaka v2. 0. 0. 8 Scan Module v2. 0. 0. 1
Scan saved at 14:51:39, on 2006-03-25
Platform: Advanced Server  (Build 3790)
MSIE: Internet Explorer v6.00  (6.00.3790.0 (srv03_rtm.030324-2048))


Running processes:
[smss.exe]
CommandLine =

[csrss.exe]
CommandLine = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

[winlogon.exe]
CommandLine = winlogon.exe

[services.exe]
CommandLine = C:\WINDOWS\system32\services.exe

[lsass.exe]
CommandLine = C:\WINDOWS\system32\lsass.exe

[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost -k rpcss

[svchost.exe]
CommandLine = C:\WINDOWS\System32\svchost.exe -k termsvcs

[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost.exe -k NetworkService

[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost.exe -k LocalService

[svchost.exe]
CommandLine = C:\WINDOWS\System32\svchost.exe -k netsvcs

[spoolsv.exe]
CommandLine = C:\WINDOWS\system32\spoolsv.exe

[msdtc.exe]
CommandLine = C:\WINDOWS\system32\msdtc.exe

[DefWatch.exe]
CommandLine = C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe

[svchost.exe]
CommandLine = C:\WINDOWS\System32\svchost.exe -k WinErr

[rmserver.exe]
CommandLine = "C:\Program Files\Real\Helix Server\Bin\rmserver.exe"

[explorer.exe]
CommandLine = C:\WINDOWS\Explorer.EXE

[ICDreamCheckService.exe]
CommandLine = "C:\Program Files\ICDreamServer\ICDreamCheckService.exe"

[ICDreamDCService.exe]
CommandLine = "C:\Program Files\ICDreamServer\ICDreamDCService.exe"

[ICDreamServer.exe]
CommandLine = "C:\Program Files\ICDreamServer\ICDreamServer.exe"

[VPTray.exe]
CommandLine = "C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe"

[rundll32.exe]
CommandLine = "C:\WINDOWS\system32\Rundll32.exe" C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32

[conime.exe]
CommandLine = C:\WINDOWS\system32\conime.exe

[inetinfo.exe]
CommandLine = C:\WINDOWS\system32\inetsrv\inetinfo.exe

[Rtvscan.exe]
CommandLine = C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe

[ServeHost.exe]
CommandLine = C:\WINDOWS\system32\ServeHost.exe

[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost.exe -k regsvc

[rundll32.exe]
CommandLine = C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\System32\STDSVER.DLL,Service

[dfssvc.exe]
CommandLine = C:\WINDOWS\system32\Dfssvc.exe

[SearchNet.exe]
CommandLine = "C:\Program Files\SearchNet\SearchNet.exe"

[svchost.exe]
CommandLine = C:\WINDOWS\System32\svchost.exe -k iissvcs

[wmiprvse.exe]
CommandLine = C:\WINDOWS\system32\wbem\wmiprvse.exe -Embedding

[w3wp.exe]
CommandLine = c:\windows\system32\inetsrv\w3wp.exe -a \\.\pipe\iisipme23734f0-f53f-4ce9-8252-d5c0a15adc07 -t 20 -ap "DefaultAppPool"

[rundll32.exe]
CommandLine =  C:\WINDOWS\SYSTEM32\stdup.dll,Entry

[ctfmon.exe]
CommandLine = ctfmon.exe

[regsvr32.exe]
CommandLine = "C:\WINDOWS\system32\regsvr32.exe" /s /u "C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll"

[regsvr32.exe]
CommandLine = "C:\WINDOWS\system32\regsvr32.exe" /s /u "C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll"

[VPC32.exe]
CommandLine = "C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\VPC32.EXE"

[TTraveler.exe]
CommandLine = "C:\Program Files\Tencent\TT\TTraveler.exe" http://jump.qq.com/clienturl_simp_6/login?clientuin=452615482&clientkey=565CB35E47EC8929F7B9364426A6919D7DA259706ED0859755D598B51BF5766E&p=1&c=0

[taskmgr.exe]
CommandLine = taskmgr.exe

[KkScan.exe]
CommandLine = "C:\Program Files\Rising\KakaToolBar\KkScan.exe"

O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: Zhongsou Browser Helper - {2A0176FE-008B-4706-90F5-BBA532A49731} - C:\Program Files\SearchNet\SNHpr.dll
O2 - BHO:  (file missing)
O2 - BHO: std software - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\kakatool.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [delsharec$] net share c$ /del
O4 - HKLM\..\Run: [delshared$] net share d$ /del
O4 - HKLM\..\Run: [delsharee$] net share e$ /del
O4 - HKLM\..\Run: [delsharef$] net share f$ /del
O4 - HKLM\..\Run: [delshareg$] net share g$ /del
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PigUpdate] C:\DOCUME~1\wangba\LOCALS~1\Temp\downp.exe
O4 - HKLM\..\Run: [SearchNet_Up] "C:\Program Files\SearchNet\ServeUp.exe"
O4 - HKLM\..\Run: [CnsMin] Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - Startup: desktop.ini =
O4 - Global Startup: desktop.ini =
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra Button: @shdoclc.dll,-866 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: @shdoclc.dll,-864 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\system32\shdocvw.dll
O11 - Options group: [!CNS]  上网助手-地址栏搜索
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
O16 - DPF: {87CCFDB0-C4BE-4BC2-A78C-9EAA7CF96667} (pcastup Class) - http://ps.itv.mop.com/dn/files/vodupdate_1.0.0.8_20051009.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E0817A14-6368-41A5-9965-FE0E13E8D1DB}: NameServer = 218.56.57.59,219.146.0.130
O18 - Filter : application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\mscoree.dll
O18 - Filter : application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\mscoree.dll
O18 - Filter : application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\system32\mscoree.dll
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll
O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\system32\msdxm.ocx
O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll
O20 - Winlogon Notify: NavLogon
O23 - Service: DefWatch (DefWatch) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
O23 - Service: Helix Server (Helix Server) - RealNetworks, Inc. - C:\Program Files\Real\Helix Server\Bin\rmserver.exe
O23 - Service: Human Interface Device Access (HidServ) -  - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: 网吧院线监控服务 (ICDreamCheckService) -  - C:\Program Files\ICDreamServer\ICDreamCheckService.exe
O23 - Service: 网吧院线更新服务 (ICDreamDCService) -  - C:\Program Files\ICDreamServer\ICDreamDCService.exe
O23 - Service: 网吧院线统计服务 (ICDreamServer) -  - C:\Program Files\ICDreamServer\ICDreamServer.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Log (Remote Log) - 北京中搜在线软件有限公司 - C:\WINDOWS\system32\servehost.exe
O23 - Service: StdService (StdService) -  - C:\WINDOWS\system32\rundll32.exe c:\windows\system32\stdsver.dll,service