你也在写啊.晕.刚才我写完发表时.出错发不了.刷新时看到版主已经回复了.就没再发.呵呵想不到还一个在后面写.

提醒楼上各位注意楼主SRENG日志中的下列内容（这是解决问题的关键）：
[PID: 624 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ]
[PID: 648 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\zinforms.dll] [N/A, ]
[C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ]
[PID: 692 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\zinforms.dll] [N/A, ]
[C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ]
[PID: 704 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\zinforms.dll] [N/A, ]
[C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ]
[PID: 860 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\zinforms.dll] [N/A, ]
[C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ]
[PID: 924 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\zinforms.dll] [N/A, ]
[C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ]

引用:

【baohe的贴子】提醒楼上各位注意楼主SRENG日志中的下列内容（这是解决问题的关键）： [PID: 624 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 648 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 692 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 704 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 860 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 924 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] ………………

C:\WINDOWS\system32\zinforms.dll
C:\WINDOWS\system32\D80F5307.DLL
猜测版主的意思是：这两个文件已经入侵了所有系统核心进程，必须重命名后才能解决。

引用:

【超级游戏迷的贴子】 引用: 【baohe的贴子】提醒楼上各位注意楼主SRENG日志中的下列内容（这是解决问题的关键）： [PID: 624 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 648 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 692 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 704 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 860 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] [PID: 924 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\zinforms.dll] [N/A, ] [C:\WINDOWS\system32\D80F5307.DLL] [Microsoft Corporation, ] ……………… C:\WINDOWS\system32\zinforms.dll C:\WINDOWS\system32\D80F5307.DLL 猜测版主的意思是：这两个文件已经入侵了所有系统核心进程，必须重命名后才能解决。 ………………

重新命名也好，强制删除/用工具禁止其加载运行也罢，手段不止一个。但前提是：必须清理干净所有被病毒“污染”的进程，才能有效删除病毒文件。