我才中了灰鸽子，不过按照网上的做法已经删掉了。可是每次开机用瑞星总是查出backdoor.Pcshare.f病毒，怎么才能杀干净?每次开机检查都有,并且每次显示清除成功,但还反反复复的,好烦人啊!

病毒路径
svchost.exe>>c:\windows\system32\ydkictgj.dll
iexplore.exe>>C:\WINDOWS\system32\Ydkictgj.dll

正在运行的进程
[PID: 692][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1448][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1472][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\WRLogonNTF.dll]  <Webroot Software, Inc.><3,0,5,1286>
[PID: 1520][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1532][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1696][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1784][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1988][C:\Program Files\Rising\Rav\CCenter.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 2004][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [c:\windows\system32\ydkictgj.d1l]  <N/A><N/A>
[PID: 268][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 456][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 504][C:\Program Files\Rising\Rav\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 29>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsLog.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 20>
    [C:\Program Files\Rising\Rav\HOOKSYS.dll]  <Rising><18, 1, 0, 9>
    [C:\Program Files\Rising\Rav\Scanner.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [C:\Program Files\Rising\Rav\libload.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\VirusLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\regmon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\HookWeb.dll]  <rising><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\MemMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\Program Files\Rising\Rav\expscan.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
    [C:\Program Files\Rising\Rav\MailMon.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
    [C:\Program Files\Rising\Rav\SpamEng.dll]  <N/A><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\engine.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 30>
    [C:\Program Files\Rising\Rav\PostTrt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\Program Files\Rising\Rav\UnExe.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\ScanExec.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\ScanEx.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [C:\Program Files\Rising\Rav\NvFile.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\Program Files\Rising\Rav\ScanMac.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 9>
    [C:\Program Files\Rising\Rav\ScanSct.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 18>
    [C:\Program Files\Rising\Rav\Unpacker.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
    [C:\Program Files\Rising\Rav\ExtOLE.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 6>
    [C:\Program Files\Rising\Rav\ScanElf.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 3>
[PID: 600][c:\program files\rising\rfw\rfwsrv.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 30>
    [c:\program files\rising\rfw\RfwRule.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 13>
    [c:\program files\rising\rfw\rfwlog.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 6>
    [c:\program files\rising\rfw\Rfwdrv.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 21>
    [c:\program files\rising\rfw\MonDrv.dll]  <rs><1, 0, 0, 4>
    [c:\program files\rising\rfw\ProcLib.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 9>
    [c:\program files\rising\rfw\mPorts.dll]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 3>
[PID: 920][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1028][C:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1400][C:\Program Files\AVC Finger-sensing Pad Driver\FspadSvr.exe]  <N/A><N/A>
[PID: 1432][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\Ydkictgj.d1l]  <N/A><N/A>
    [C:\DOCUME~1\lenovo\LOCALS~1\Temp\Ydkictgj.dl1]  <N/A><N/A>
    [C:\WINDOWS\system32\msdmo.dll]  <N/A><N/A>
[PID: 1656][C:\Program Files\lenovo\GUA\GUA.exe]  <lenovo><1.0.0.19>
[PID: 1728][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  <Adobe Systems, Inc.><7.0.0.0>
    [C:\WINDOWS\system32\igfxpph.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3.0.0.4291>
[PID: 1732][C:\Program Files\lenovo\IGRS\IGRS.exe]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\framework.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\ReliablePlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\WINDOWS\system32\WMCAPI.dll]  <Lenovo Group Limited><2, 0, 2, 19>
    [C:\WINDOWS\system32\wmcdrv.dll]  <Lenovo Group Limited><3, 1, 0, 10>
    [C:\WINDOWS\system32\wmcinst.dll]  <Lenovo Group Limited><2, 0, 1, 3>
    [C:\Program Files\lenovo\IGRS\CorePlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\SocketPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\BTComPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\SerialPortMonitor.dll]  <lenovo><1, 0, 1, 19>
    [C:\Program Files\lenovo\IGRS\ProxyPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\LoggingPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS\DebugPlugin.dll]  <Lenovo Group Limited><1.0.0.174>
[PID: 1944][C:\Program Files\lenovo\IGRS\Ext\IgrsMonitor.exe]  <Lenovo Group Limited><1, 0, 1, 13>
    [C:\WINDOWS\system32\IgrsApi.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\WINDOWS\system32\WMCAPI.dll]  <Lenovo Group Limited><2, 0, 2, 19>
    [C:\WINDOWS\system32\wmcdrv.dll]  <Lenovo Group Limited><3, 1, 0, 10>
    [C:\WINDOWS\system32\wmcinst.dll]  <Lenovo Group Limited><2, 0, 1, 3>
[PID: 320][C:\Program Files\lenovo\IGRS\Ext\router.exe]  <Lenovo Group Limited><1, 3, 0, 12>
    [C:\WINDOWS\system32\WMCAPI.DLL]  <Lenovo Group Limited><2, 0, 2, 19>
    [C:\WINDOWS\system32\wmcdrv.dll]  <Lenovo Group Limited><3, 1, 0, 10>
    [C:\WINDOWS\system32\wmcinst.dll]  <Lenovo Group Limited><2, 0, 1, 3>

[PID: 648][C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe]  <Webroot Software, Inc.><3,0,5,1286>
    [C:\Program Files\Webroot\Spy Sweeper\pcre.dll]  <RenatoMancuso.com><6.1.0.0>
    [C:\Program Files\Webroot\Spy Sweeper\ztvunrar3.dll]  <N/A><N/A>
[PID: 196][C:\WINDOWS\system32\hkcmd.exe]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxhk.dll]  <Intel Corporation><3.0.0.4291>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3.0.0.4291>
[PID: 1420][C:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 248][C:\Program Files\lenovo\IGRS\Ext\wmcsvc.exe]  <Lenovo Group Limited><2, 0, 2, 17>
    [C:\WINDOWS\system32\wmcdrv.dll]  <Lenovo Group Limited><3, 1, 0, 10>
    [C:\WINDOWS\system32\wmcinst.dll]  <Lenovo Group Limited><2, 0, 1, 3>
[PID: 836][C:\Program Files\lenovo\IGRS Profiles\File Profile\IgrsFile.exe]  <Lenovo Group Limited><1, 0, 0, 4>
    [C:\WINDOWS\system32\IgrsApi.dll]  <Lenovo Group Limited><1.0.0.174>
    [C:\Program Files\lenovo\IGRS Profiles\File Profile\Util.dll]  <N/A><1, 0, 1, 1>
    [C:\Program Files\lenovo\IGRS Profiles\File Profile\FrameWork.dll]  <Lenovo><1, 0, 1, 1>
    [C:\Program Files\lenovo\IGRS Profiles\File Profile\FileProfileModule.dll]  <Lenovo Group Limited><2, 0, 2, 35>
    [C:\Program Files\lenovo\IGRS Profiles\File Profile\BFileDialog.dll]  <Lenovo Group Limited><2, 0, 1, 32>
[PID: 948][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3292>
[PID: 2152][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3840][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 3380][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2428][C:\Program Files\Rising\Rav\RavMon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 30>
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 11>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 3412][C:\Program Files\Lenovo\文件备份\DiskSaver.exe]  <><3, 0, 0, 0>
    [C:\Program Files\Lenovo\文件备份\hd.dll]  <Lenovo Software Inc.><2, 0, 1, 0>
[PID: 3800][C:\Program Files\Rising\Rav\RsAgent.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 3900][C:\WINDOWS\msagent\AgentSvr.exe]  <Microsoft Corporation><2.00.0.3422>
[PID: 3712][C:\TDdownload\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\TDdownload\SREng2\Plugins\SREngPluginDemo.SRE]  <Smallfrogs Studio><1, 1, 1, 0>

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
    <MSMSGS><; "C:\Program Files\Messenger\msmsgs.exe" /background>  [Microsoft Corporation]
    <msnmsgr><; "C:\Program Files\MSN Messenger\msnmsgr.exe" /background>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
    <run><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe>  [Intel Corporation]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <RfwMain><; "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
    <SoundMan><; SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <AGRSMMSG><; AGRSMMSG.exe>  [Agere Systems]
    <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  []
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <SpySweeper><; "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray>  [Webroot Software, Inc.]
    <AddrPlus3><; C:\PROGRA~1\TENCENT\AdPlus\Runner.exe C:\PROGRA~1\TENCENT\AdPlus\QAHook1.dll Rundll32>  []
    <BigDogPath><; C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera 301x>  []
    <EnergyCut><; C:\Program Files\Lenovo\EnergyCut\EnergyCut.exe>  []
    <EnergyUtility><; C:\Program Files\Lenovo\EnergyCut\utilty.exe>  [TODO: <Company name>]
    <fscp><; C:\Program Files\AVC Finger-sensing Pad Driver\fscp.exe>  []
    <IgrsNotify><; "C:\Program Files\lenovo\IGRS\Ext\IgrsNotify.exe">  [Lenovo Group Limited]
    <IgrsSignal><; "C:\Program Files\lenovo\IGRS\Ext\IgrsSignal.exe">  [Lenovo Group Limited]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <QkOnBtn><; C:\Program Files\QBU\QkOnBtn.EXE>  [Dritek System Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igrswn]
    <WinlogonNotify: igrswn><C:\Program Files\lenovo\IGRS\Ext\igrswn.dll>  [Lenovo Group Limited]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WRNotifier]
    <WinlogonNotify: WRNotifier><WRLogonNTF.dll>  [Webroot Software, Inc.]

楼主要把日志贴完整...
你可以到安全模式里把c:\windows\system32\ydkictgj.dll删了试试

我再发一个用HijackThis_815汉化版扫描日志 V1.99.1
保存于      23:06:09, 日期 2006-8-1
操作系统：  Windows XP SP2 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Rising\Rav\Ravmond.exe
c:\program files\rising\rfw\rfwsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Rising\Rav\RavStub.exe
C:\Program Files\AVC Finger-sensing Pad Driver\FspadSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\lenovo\GUA\GUA.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\lenovo\IGRS\IGRS.exe
C:\Program Files\lenovo\IGRS\Ext\IgrsMonitor.exe
C:\Program Files\lenovo\IGRS\Ext\router.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Rising\Rav\RavTask.exe
C:\Program Files\lenovo\IGRS\Ext\wmcsvc.exe
C:\Program Files\lenovo\IGRS Profiles\File Profile\IgrsFile.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Rising\Rav\RavMon.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\迅雷\Program\Thunder5.exe
C:\TDdownload\HijackThis1991zww.exe

O3 - IE工具栏增项: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (file missing)
O4 - 启动项HKLM\\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - 启动项HKLM\\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - 启动项HKLM\\Run: [RfwMain] ; "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - 启动项HKLM\\Run: [SoundMan] ; SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [AGRSMMSG] ; AGRSMMSG.exe
O4 - 启动项HKLM\\Run: [StormCodec_Helper] "C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - 启动项HKLM\\Run: [SpySweeper] ; "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - 启动项HKLM\\Run: [AddrPlus3] ; C:\PROGRA~1\TENCENT\AdPlus\Runner.exe C:\PROGRA~1\TENCENT\AdPlus\QAHook1.dll Rundll32
O4 - 启动项HKLM\\Run: [BigDogPath] ; C:\WINDOWS\VM_STI.EXE VIMICRO USB PC Camera 301x
O4 - 启动项HKLM\\Run: [EnergyCut] ; C:\Program Files\Lenovo\EnergyCut\EnergyCut.exe
O4 - 启动项HKLM\\Run: [EnergyUtility] ; C:\Program Files\Lenovo\EnergyCut\utilty.exe
O4 - 启动项HKLM\\Run: [fscp] ; C:\Program Files\AVC Finger-sensing Pad Driver\fscp.exe
O4 - 启动项HKLM\\Run: [IgrsNotify] ; "C:\Program Files\lenovo\IGRS\Ext\IgrsNotify.exe"
O4 - 启动项HKLM\\Run: [IgrsSignal] ; "C:\Program Files\lenovo\IGRS\Ext\IgrsSignal.exe"
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [QkOnBtn] ; C:\Program Files\QBU\QkOnBtn.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] ; "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: 腾讯QQ.lnk = D:\QQ\QQ.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - D:\迅雷\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - D:\迅雷\Program\GetAllUrl.htm
O8 - IE右键菜单中的新增项目: Google 搜索(&G) - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\QQ\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\qq\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - D:\qq\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\qq\QQIEHelper.dll (file missing)
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - D:\qq\QQIEHelper.dll (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com
O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (Qzone Media Tools) - http://qz-photo.qq.com/qzone3/QzoneMediaTools.cab
O16 - DPF: {C661F36D-DF85-4EF4-83C7-E107B83D04B1} (WebActivater Control) - http://dl_dir.qq.com/3dshow/3DShowVM.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6C72EA59-0992-437B-AD16-2DF706896E4C}: NameServer = 61.139.2.69,202.98.96.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{85786736-E7E5-4EDD-9CFA-0A8F73F5CB6C}: NameServer = 218.6.200.139 61.139.2.69
O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: igrswn - C:\Program Files\lenovo\IGRS\Ext\igrswn.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - NT 服务: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - NT 服务: FspadSvc - Unknown owner - C:\Program Files\AVC Finger-sensing Pad Driver\FspadSvr.exe
O23 - NT 服务: General Updater/AutoUpdater Service (GUA) - lenovo - C:\Program Files\lenovo\GUA\GUA.exe
O23 - NT 服务: IGRS - Lenovo Group Limited - C:\Program Files\lenovo\IGRS\IGRS.exe
O23 - NT 服务: IGRSFILE - Lenovo Group Limited - C:\Program Files\lenovo\IGRS Profiles\File Profile\IgrsFile.exe
O23 - NT 服务: IgrsMonitor - Lenovo Group Limited - C:\Program Files\lenovo\IGRS\Ext\IgrsMonitor.exe
O23 - NT 服务: MicroGrid DirectRouter (MicroGrid.DirectRouter) - Lenovo Group Limited - C:\Program Files\lenovo\IGRS\Ext\router.exe
O23 - NT 服务: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwproxy.exe
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - c:\program files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - NT 服务: WMCSVC - Lenovo Group Limited - C:\Program Files\lenovo\IGRS\Ext\wmcsvc.exe