我已经把c盘格了（快格），重装了系统，可是安装瑞星的时候发现不正常，用木马杀客一查，又发现worm.qqlove.b.3198的伪系统病毒……我该怎么办啊？？？？手头的瑞星还是05版的，直接用光盘启动杀毒肯定杀不掉。。。

老大。木马杀客你最好还是小心的用！

木马杀客有什么问题吗？我是去他们官网下的。

想请问一下各位大大，如果我在安全模式下用瑞星在线杀毒杀一遍，再完全格式化c盘，然后再重装系统，是否能解决这个问题呢？

请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改

小弟现在在安全模式下，以下是扫描报告

2006-09-16,16:52:36

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <IgfxTray><C:\WINDOWS\system32\igfxtray.exe>  [Intel Corporation]
    <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe>  [Intel Corporation]
    <INPROCOMMWireless><C:\Program Files\INPROCOMM\Wireless\Utility\WlanUtil.exe>  []
    <SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe>  [Synaptics, Inc.]
    <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [Synaptics, Inc.]
    <Q-HotkeyMgr><"C:\Program Files\BenQ\Q-HotkeyMgr\HotkeySensor.exe">  [BenQ Corp.]
    <BenQ Surround><C:\Program Files\BenQ\BenQ Surround\BenQSurround.exe /s>  [BenQ Corp.]
    <QPower><C:\Program Files\BenQ\QPower\QPower.exe /s>  [BenQ Corp.]
    <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <RemoteControl><"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe">  [Cyberlink Corp.]
    <RfwMain><C:\Program Files\Rising\Rfw\rfwmain.exe>  [Beijing Rising Technology Corporation Limited]
    <SoundMam><C:\WINDOWS\system32\SVOHOST.exe>  []
    <mmsk><D:\Program Files\木马杀客\mmsk.exe>  [木马杀客]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]

==================================
启动文件夹
服务
[Rising Personal Firewall Service / RfwService]
  <c:\program files\rising\rfw\rfwsrv.exe><Beijing Rising Technology Corporation Limited>

==================================
浏览器加载项
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\flash.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[Send To &Bluetooth]
  <C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm, N/A>

==================================
正在运行的进程
[PID: 576][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 624][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 648][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 692][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 704][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 852][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 920][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 980][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1040][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1052][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1852][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 2000][D:\Program Files\木马杀客\mmsk.exe]  <木马杀客><2,0,0,6>
    [D:\Program Files\木马杀客\krnln.fnr]  <><1, 0, 0, 1>
    [D:\Program Files\木马杀客\iext2.fne]  <><1, 0, 0, 1>
    [D:\Program Files\木马杀客\iext.fne]  <><1, 0, 0, 1>
    [D:\Program Files\木马杀客\HYExtLib.fne]  <N/A><N/A>
    [D:\Program Files\木马杀客\HtmlView.fne]  <><1, 0, 0, 1>
    [D:\Program Files\木马杀客\TrayIcon.fne]  <><1, 0, 0, 1>
    [D:\Program Files\木马杀客\iext3.fne]  <><1, 0, 0, 1>
    [D:\Program Files\木马杀客\xplib.fne]  <N/A><N/A>
    [D:\Program Files\木马杀客\mmskskin.dll]  <><2, 0, 0, 6>
    [D:\Program Files\木马杀客\SkinPPWTL.dll]  <http://www.skinplusplus.com><2, 1, 0, 0>
    [D:\Program Files\木马杀客\shell.fne]  <N/A><N/A>
    [D:\Program Files\木马杀客\EThread.fne]  <N/A><N/A>
    [D:\Program Files\木马杀客\dp1.fne]  <N/A><N/A>
    [D:\Program Files\木马杀客\eAPI.fne]  <><1, 0, 0, 1>
[PID: 116][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1008][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\Downloaded Program Files\OL2005.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 7>
    [C:\WINDOWS\Downloaded Program Files\OLUpdate.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 12>
    [C:\Program Files\Rising\RavWeb\CopyRun\Update.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 35>
[PID: 1480][C:\Program Files\Internet Explorer\iexplore.exe]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\macromed\flash\flash.ocx]  <Macromedia, Inc.><6,0,79,0>
[PID: 1032][C:\WINDOWS\system32\conime.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 572][D:\sreng2\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

以下是我用正常模式登陆后的扫描日志，求各位大大帮忙啊，在线苦等

2006-09-16,17:47:16

System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <IgfxTray><C:\WINDOWS\system32\igfxtray.exe>  [Intel Corporation]
    <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe>  [Intel Corporation]
    <INPROCOMMWireless><C:\Program Files\INPROCOMM\Wireless\Utility\WlanUtil.exe>  []
    <SynTPLpr><C:\Program Files\Synaptics\SynTP\SynTPLpr.exe>  [Synaptics, Inc.]
    <SynTPEnh><C:\Program Files\Synaptics\SynTP\SynTPEnh.exe>  [Synaptics, Inc.]
    <Q-HotkeyMgr><"C:\Program Files\BenQ\Q-HotkeyMgr\HotkeySensor.exe">  [BenQ Corp.]
    <BenQ Surround><C:\Program Files\BenQ\BenQ Surround\BenQSurround.exe /s>  [BenQ Corp.]
    <QPower><C:\Program Files\BenQ\QPower\QPower.exe /s>  [BenQ Corp.]
    <NeroFilterCheck><C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <RemoteControl><"C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe">  [Cyberlink Corp.]
    <RfwMain><C:\Program Files\Rising\Rfw\rfwmain.exe>  []
    <SoundMam><C:\WINDOWS\system32\SVOHOST.exe>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]

==================================
启动文件夹
服务

==================================
浏览器加载项
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\flash.ocx, Macromedia, Inc.>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[Send To &Bluetooth]
  <C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm, N/A>

==================================
正在运行的进程
[PID: 660][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 724][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 748][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 792][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 804][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 956][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1036][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1124][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1176][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1252][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1764][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\SynTPFcs.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>
[PID: 1796][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1940][C:\WINDOWS\system32\igfxtray.exe]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\igfxress.dll]  <Intel Corporation><3.0.0.3929>
[PID: 1948][C:\WINDOWS\system32\hkcmd.exe]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\hccutils.DLL]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\igfxdev.dll]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\igfxsrvc.dll]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\igfxhk.dll]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\igfxres.dll]  <Intel Corporation><3.0.0.3929>
    [C:\WINDOWS\system32\SynTPFcs.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>
[PID: 1956][C:\Program Files\Synaptics\SynTP\SynTPLpr.exe]  <Synaptics, Inc.><7.11.8.1 17Aug04>
    [C:\WINDOWS\system32\SynCOM.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>
    [C:\WINDOWS\system32\SynTPFcs.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>
[PID: 1968][C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]  <Synaptics, Inc.><7.11.8.1 17Aug04>
    [C:\WINDOWS\system32\SynCOM.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>
    [C:\WINDOWS\system32\SynTPAPI.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>
    [C:\WINDOWS\system32\SynTPFcs.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>
[PID: 1984][C:\Program Files\BenQ\Q-HotkeyMgr\HotkeySensor.exe]  <BenQ Corp.><1.0.5200.6>
    [C:\Program Files\BenQ\Q-HotkeyMgr\QBSetting.DLL]  <N/A><N/A>
    [C:\Program Files\BenQ\Q-HotkeyMgr\Q32HotkeySensor.dll]  <BenQ Corp.><1.2.0.2>
    [C:\Program Files\BenQ\Q-HotkeyMgr\dhpolywin.dll]  <N/A><N/A>
    [C:\Program Files\BenQ\Q-HotkeyMgr\ACPIDrvDLL.dll]  <><1, 3, 0, 2>
[PID: 1996][C:\Program Files\BenQ\BenQ Surround\BenQSurround.exe]  <BenQ Corp.><1, 0, 5200, 6>
    [C:\Program Files\BenQ\BenQ Surround\QSrsFn.dll]  <N/A><N/A>
    [C:\Program Files\BenQ\BenQ Surround\Q32MLTran.dll]  <BenQ Corp.><1.0.0.1>
    [C:\WINDOWS\system32\SynTPFcs.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>
[PID: 2008][C:\Program Files\BenQ\QPower\QPower.exe]  <BenQ Corp.><1, 0, 5200, 10>
    [C:\Program Files\BenQ\QPower\QPowerFn.dll]  <N/A><N/A>
    [C:\Program Files\BenQ\QPower\Q32MLTran.dll]  <BenQ Corp.><1.0.0.1>
    [C:\Program Files\BenQ\QPower\Q32HotkeySensor.dll]  <BenQ Corp.><1.2.0.2>
    [C:\Program Files\BenQ\QPower\Q32FancyUI.dll]  <BenQ Corp.><1.0.0.3>
[PID: 2024][C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe]  <Cyberlink Corp.><5.00.0000>
    [C:\Program Files\CyberLink\Shared Files\CLRCEngine2.dll]  <CyberLink Corp.><3.20.0000>
[PID: 2036][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1168][C:\WINDOWS\system32\wbem\wmiprvse.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1584][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1096][D:\sreng2\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\WINDOWS\system32\SynTPFcs.dll]  <Synaptics, Inc.><7.11.8.1 17Aug04>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

我晕啊，问题到底解决没啊！