[D:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll]  [Thunder Networking Technologies,LTD, 2, 2, 5, 70]
    [D:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll]  [Thunder Networking Technologies,LTD, 1, 4, 0, 7]
    [D:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll]  [Thunder Networking Technologies,LTD, 2, 16, 5, 61]
    [D:\Program Files\Thunder Network\Thunder\Program\MSVCIRT.dll]  [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\Thunder Network\Thunder\Components\Security\ThunderSafe.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 7, 59]
    [D:\Program Files\Thunder Network\Thunder\Program\ATL71.DLL]  [Microsoft Corporation, 7.10.3077.0]
    [D:\Program Files\Thunder Network\Thunder\Components\Security\XLSafeUI.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 7, 59]
    [D:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll]  [Thunder Networking Technologies,LTD, 1, 1, 5, 18]
    [D:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll]  [Thunder Networking Technologies,LTD, 1, 2, 1, 20]
    [D:\Program Files\Thunder Network\Thunder\Plugins\BhoAdv\bho_adv.dll]  [深圳市迅雷网络技术有限公司, 1.0.1.0]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\XLSafeHost.dll]  [深圳市迅雷网络技术有限公司, 1, 0, 7, 54]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\ThunderRAV.dll]  [N/A, ]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\rsscan.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 3]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\recomp.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 16]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\refs.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 7]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\viruslib.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 14]
    [D:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\relibldr.dll]  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 11]
    [D:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll]  [Thunder Networking Technologies,LTD, 1, 0, 4, 16]
    [D:\Program Files\Thunder Network\Thunder\Components\Tips\TipsClient.dll]  [Thunder Networking Technologies,LTD, 2, 2, 7, 92]
    [D:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll]  [XunLei, 2, 3, 0, 26]
    [D:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VideoPicture.dll]  [XunLei, 2, 3, 0, 26]
    [D:\Program Files\Thunder Network\Thunder\Components\UserExperience\UserExperience.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsXlCom.dll]  [, 1, 0, 0, 24]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll]  [Thunder Networking Technologies,LTD, 1, 0, 0, 13]
    [D:\Program Files\Thunder Network\Thunder\Components\ResWorker\MediaWorker.dll]  [Thunder Networking Technologies,LTD, 1, 2, 0, 20]
    [D:\Program Files\Thunder Network\Thunder\Components\Tips\XLIPC.DLL]  [N/A, ]
    [D:\Program Files\Thunder Network\Thunder\Components\DownloadStat\DownloadStat.dll]  [深圳市迅雷网络技术有限公司, 1, 2, 0, 4]
[PID: 496 / user][G:\軟件專用\SReng2\SREngPS.EXE]  [Smallfrogs Studio, 2.5.16.900]
    [C:\WINDOWS\system32\IMSC40A.IME]  [Microsoft Corporation, 6.0.0.2527]
    [G:\軟件專用\SReng2\Upload\3rdUpd.DLL]  [Smallfrogs Studio, 2, 1, 0, 15]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
127.0.0.1      localhost

==================================
进程特权扫描
特殊特权被允许： SeLoadDriverPrivilege [PID = 4012, C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\E_FATIAAP.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2012, D:\PROGRAM FILES\THUNDER NETWORK\THUNDER\PROGRAM\THUNDER5.EXE]

==================================
API HOOK
N/A

==================================
隐藏进程
N/A

==================================


[/CODE]

病毒名称处理结果发现日期查杀方式访问染毒文件的进程文件
Trojan.PSW.Win32.OnlineGames.zem删除成功2007-10-09 15:13:30文件监控C:\WINDOWS\SVCHOST.EXEc:\windows\system32\ysy2.exe>>upx_c
Trojan.PSW.Win32.OnlineGames.zpn删除成功2007-10-10 07:54:53文件监控C:\WINDOWS\SVCHOST.EXEC:\WINDOWS\system32\ysy1.exe
Trojan.PSW.Win32.OnlineGames.zpn删除成功2007-10-11 07:56:02文件监控C:\WINDOWS\SVCHOST.EXEC:\WINDOWS\system32\ysy1.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 08:15:09文件监控C:\WINDOWS\EXPLORER.EXED:\Program Files\Maxthon\Maxthon.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 09:22:21文件监控C:\WINDOWS\EXPLORER.EXEH:\VikingKiller.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 09:23:02文件监控C:\WINDOWS\EXPLORER.EXEF:\My Documents\VikingKiller.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 10:31:27文件监控C:\WINDOWS\EXPLORER.EXEG:\軟件專用\ttpsetup(1).exe
Worm.Win32.Agent.yyc清除成功2007-10-11 10:31:32文件监控C:\WINDOWS\EXPLORER.EXEG:\軟件專用\googletalk-setup-zh-CN.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 10:31:38文件监控C:\WINDOWS\EXPLORER.EXEG:\軟件專用\mx_2.0.4.5799cn.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 10:32:22文件监控C:\WINDOWS\EXPLORER.EXEG:\軟件專用\foxmail6.0beta4.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 10:32:22文件监控C:\WINDOWS\EXPLORER.EXEG:\軟件專用\Literary.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 10:32:28文件监控C:\WINDOWS\EXPLORER.EXEG:\軟件專用\Merlin.exe
Worm.Win32.Agent.yyc清除成功2007-10-11 13:14:09文件监控C:\WINDOWS\EXPLORER.EXEG:\軟件專用\kakasetupv3.exe
Trojan.PSW.Win32.OnlineGames.zpn删除成功2007-10-12 07:56:35文件监控C:\WINDOWS\SVCHOST.EXEC:\WINDOWS\system32\ysy1.exe
Worm.Win32.Agent.yyc清除成功2007-10-12 09:31:01文件监控C:\WINDOWS\EXPLORER.EXED:\Program Files\Kingsoft\PowerWord 2006\XDICT.EXE
Trojan.PSW.Win32.OnlineGames.zye删除成功2007-10-15 09:56:56文件监控C:\WINDOWS\SYSTEM32\NOTEPAD.EXEC:\WINDOWS\SYSTEM32\UPXDND.DLL
Trojan.PSW.Win32.OnlineGames.zyr删除成功2007-10-15 10:47:47文件监控C:\WINDOWS\EXPLORER.EXEC:\WINDOWS\system32\ysy1.exe

今天跳出來一個提示：
警告！註冊表值AppInit_DLLs被修改為非正常值（默認值是空）。請檢查你的系統中可能存在的計算機病毒。

说了,你的日志怎么只有进程?
前面的ING?

以附件形式发来。

唉,趋势还是不熟悉中国的市场规律啊，挺好的东西，知名度不高。