我用sreng删啦这些
<fysa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\fyso.exe> [N/A]
<jtsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jtso.exe> [N/A]
<mhsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mhso.exe> [N/A]
<qjsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\qjso.exe> [N/A]
<rxsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rxso.exe> [N/A]
<tlsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tlso.exe> [N/A]
<wdsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wdso.exe> [N/A]
<wgsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wgso.exe> [N/A]
<wlsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wlso.exe> [N/A]
<wmsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wmso.exe> [N/A]
<wosa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\woso.exe> [N/A]
<YLive.exe><; C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe> [(Verified)"beijing yahoo consulting and service co., ltd."]
<ztsa><; C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ztso.exe> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
<RavStub><"C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE> [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll> [Beijing Rising Technology Co., Ltd.]
<{01F6EB6F-AB5C-1FDD-6E5B-FB6EE3CC6CD6}><C:\Program Files\Internet Explorer\HiJack.dll> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad]
<WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll> [Microsoft Corporation]
可以的，不过用u盘没有系统托盘啦，呵呵
