[D:\常用绿色软件\WinRAR3.5\rarext.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\igfxpph.dll]  <Intel Corporation><3.0.0.3943>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3.0.0.3943>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3.0.0.3943>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3.0.0.3943>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3.0.0.3943>
    [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\f3\ex\mcl.dll]  <N/A><N/A>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
    [C:\WINDOWS\system32\ext\DTDL.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\ext\DTSM.dll]  <N/A><N/A>
    [D:\Downloads\ComDlls\XunLeiBHO_001.dll]  <Thunder Networking Technologies,LTD><5, 0, 0, 1>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  <Kaspersky Lab><1.0.156.342>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  <Kaspersky Lab><1.0.156.3>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  <Kaspersky Lab><5.0.0.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  <Kaspersky Lab><5.0.156.0>
    [C:\WINDOWS\system32\mfc313u.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\xunleibho_v4.dll]  <><4, 3, 2, 29>
    [D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX]  <N/A><N/A>
    [C:\Program Files\CoolWebsite\QuickLink.dll]  <Fengcent><1, 0, 0, 2>
[PID: 1612][D:\Program Files\Filseclab\xfilter\xfilter.exe]  <费尔安全实验室><3.0>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  <Kaspersky Lab><1.0.156.342>
[PID: 1652][C:\WINDOWS\system32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\PROGRA~1\HBClient\tbhelper.dll]  <Shanghai Henbang Technology Co., Ltd><1, 1, 3, 3>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
[PID: 1704][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3510>
    [C:\WINDOWS\system32\msicn\msibm.dll]  <广州傲讯信息科技有限公司><2, 0, 0, 1>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
[PID: 1720][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\msicn\msibm.dll]  <广州傲讯信息科技有限公司><2, 0, 0, 1>
[PID: 1800][C:\Program Files\Common Files\Filseclab\FilMsg.exe]  <费尔安全实验室><3, 1, 0, 927>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
[PID: 376][C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe]  <Microsoft Corporation><2000.080.0194.00>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
[PID: 832][C:\WINDOWS\system32\TongBackupSrv.exe]  <N/A><N/A>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
[PID: 1032][C:\WINDOWS\system32\ServerNT.exe]  <N/A><N/A>
    [C:\WINDOWS\system32\UMiscNT.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\SecuComm.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\UfZf5.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\system32\M80SGV.dll]  <><8, 2, 0, 0>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
[PID: 2276][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
[PID: 3264][D:\Program Files\TTPlayer\TTPlayer.exe]  <N/A><4, 6, 7, 0>
    [D:\Program Files\TTPlayer\ttpcomm.dll]  <N/A><N/A>
    [D:\Program Files\TTPlayer\ttpres.dll]  <N/A><4, 6, 7, 0>
    [D:\Program Files\BitComet\codec\RealMediaSplitter.ax]  <Gabest><1, 0, 1, 0>
    [C:\WINDOWS\system32\mpg2splt.ax]  <N/A><N/A>
    [D:\Program Files\TTPlayer\AddIn\ttp_lrcsh.dll]  <N/A><N/A>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
[PID: 2004][D:\金山词霸2005\XDICT.EXE]  <Kingsoft Co, Ltd.><8, 5, 0, 0>
    [D:\金山词霸2005\DicMngr.dll]  <Kingsoft><1, 0, 0, 0>
    [D:\金山词霸2005\doshow.dll]  <N/A><N/A>
    [D:\金山词霸2005\ITextOut.dll]  <Kingsoft><1, 1, 0, 0>
    [D:\金山词霸2005\KPic10.dll]  <N/A><N/A>
    [D:\金山词霸2005\ijl11.dll]  <Intel Corporation><1.1.2>
    [D:\金山词霸2005\NormGrab.DLL]  <Kingsoft Co, Ltd.><6, 0, 0, 0>
    [D:\金山词霸2005\toTTSEngine50.dll]  <Kingsoft Corporation><1, 0, 0, 1>
    [D:\金山词霸2005\xfile.dll]  <N/A><N/A>
    [D:\金山词霸2005\DBCore10.dll]  <Kingsoft  Corp.><1, 0, 0, 0>
    [D:\金山词霸2005\XdictGrb.dll]  <Kingsoft Co, Ltd.><8, 5, 0, 0>
[PID: 432][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\xunleibho_v4.dll]  <><4, 3, 2, 29>
    [C:\WINDOWS\system32\wmpdrm.dll]  <N/A><2.0.0.1>
    [D:\Program Files\Tencent\QQ\QQIEHelper.dll]  <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
    [C:\PROGRA~1\MMSASS~1\Mmsass~1.dll]  <><1, 2, 0, 3>
    [C:\WINDOWS\system32\popkiller.dll]  <Alx><1, 0, 0, 0>
    [D:\Downloads\ComDlls\XunLeiBHO_001.dll]  <Thunder Networking Technologies,LTD><5, 0, 0, 1>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX]  <N/A><N/A>
    [C:\PROGRA~1\HBClient\tbhelper.dll]  <Shanghai Henbang Technology Co., Ltd><1, 1, 3, 3>
    [C:\WINDOWS\system32\microapmddt.dll]  <MACROMEDlA><1, 2, 0, 0>
    [C:\WINDOWS\system32\IEHelper.dll]  <><1, 0, 0, 1>
    [C:\Program Files\CoolWebsite\QuickLink.dll]  <Fengcent><1, 0, 0, 2>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
    [C:\WINDOWS\system32\mfc313u.dll]  <N/A><N/A>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  <Kaspersky Lab><1.0.156.342>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  <Kaspersky Lab><1.0.156.3>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  <Kaspersky Lab><5.0.0.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  <Kaspersky Lab><5.0.156.0>
[PID: 940][C:\Program Files\Internet Explorer\IEXPLORE.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\xunleibho_v4.dll]  <><4, 3, 2, 29>
    [C:\WINDOWS\system32\wmpdrm.dll]  <N/A><2.0.0.1>
    [D:\Program Files\Tencent\QQ\QQIEHelper.dll]  <深圳市腾讯计算机系统有限公司><1, 1, 0, 5>
    [C:\PROGRA~1\MMSASS~1\Mmsass~1.dll]  <><1, 2, 0, 3>
    [C:\WINDOWS\system32\popkiller.dll]  <Alx><1, 0, 0, 0>
    [D:\Downloads\ComDlls\XunLeiBHO_001.dll]  <Thunder Networking Technologies,LTD><5, 0, 0, 1>
    [C:\PROGRA~1\FLASHGET\jccatch.dll]  <Amaze Soft><1, 1, 4, 0>
    [D:\PROGRA~1\KuGoo3\KUGOO3~1.OCX]  <N/A><N/A>
    [C:\PROGRA~1\HBClient\tbhelper.dll]  <Shanghai Henbang Technology Co., Ltd><1, 1, 3, 3>
    [C:\WINDOWS\system32\microapmddt.dll]  <MACROMEDlA><1, 2, 0, 0>
    [C:\WINDOWS\system32\IEHelper.dll]  <><1, 0, 0, 1>
    [C:\Program Files\CoolWebsite\QuickLink.dll]  <Fengcent><1, 0, 0, 2>
    [C:\WINDOWS\system32\mfc313u.dll]  <N/A><N/A>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\avpscrch.dll]  <Kaspersky Lab><1.0.156.342>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\concl.dll]  <Kaspersky Lab><1.0.156.3>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\FSSync.dll]  <Kaspersky Lab><5.0.0.0>
    [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\ipc.dll]  <Kaspersky Lab><5.0.156.0>
    [C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx]  <Macromedia, Inc.><8,0,22,0>
    [C:\WINDOWS\system32\JPWB.IME]  <长江软件工作室><4.00.950>
[PID: 3580][D:\SREng日记.exe]  <Smallfrogs Studio><2.0.12.350>
    [d:\Program Files\Filseclab\xfilter\XFILTER.DLL]  <Filseclab Corporation><3, 0, 0, 3644>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
MSAFD Tcpip [TCP/IP]
    d:\Program Files\Filseclab\xfilter\XFILTER.DLL(Filseclab Corporation, Filseclab Personal Firewall)
MSAFD Tcpip [UDP/IP]
    d:\Program Files\Filseclab\xfilter\XFILTER.DLL(Filseclab Corporation, Filseclab Personal Firewall)
MSAFD Tcpip [RAW/IP]
    d:\Program Files\Filseclab\xfilter\XFILTER.DLL(Filseclab Corporation, Filseclab Personal Firewall)
RSVP UDP Service Provider
    d:\Program Files\Filseclab\xfilter\XFILTER.DLL(Filseclab Corporation, Filseclab Personal Firewall)
RSVP TCP Service Provider
    d:\Program Files\Filseclab\xfilter\XFILTER.DLL(Filseclab Corporation, Filseclab Personal Firewall)

==================================

http://forum.ikaka.com/topic.asp?board=28&artid=6979213
一楼附件...下载HijackThis...把日志帖上来..