谢谢帮忙看下
HijackThis_zww汉化版扫描日志 V1.99.1
保存于      5:14:54, 日期 2006-12-1
操作系统：  Windows XP SP1 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP1 (6.00.2800.1106)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Tencent\TT\TTraveler.exe
F:\HijackThis1991汉化版\HijackThis1991zww.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\Jccatch.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder\ComDlls\XunLeiBHO_006.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - IE工具栏增项: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - IE工具栏增项: 快车(FlashGet) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\Program Files\FlashGet\fgiebar.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O8 - IE右键菜单中的新增项目: &使用快车(FlashGet)下载 - C:\PROGRA~1\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: &使用快车(FlashGet)下载全部链接 - C:\PROGRA~1\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder\Program\GetUrl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder\Program\GetAllUrl.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm
O8 - IE右键菜单中的新增项目: 豪杰超级解霸V8实时播放 - C:\Herosoft\HeroV8\MPURLGET.HTM
O9 - 浏览器额外的按钮: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:\Program Files\Thunder\Thunder.exe
O9 - 浏览器额外的“工具”菜单项: 启动迅雷5 - {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} - C:\Program Files\Thunder\Thunder.exe
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - F:\浩方对战平台\GameClient.exe
O9 - 浏览器额外的按钮: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE
O9 - 浏览器额外的“工具”菜单项: 豪杰超级解霸V8 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Herosoft\HeroV8\STHSDVD.EXE
O9 - 浏览器额外的按钮: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的“工具”菜单项: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - 浏览器额外的按钮: 快车 - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O9 - 浏览器额外的“工具”菜单项: 快车(FlashGet) - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FLASHGET\flashget.exe
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{440DC310-7942-4F5E-AE73-0ACCBD45858E}: NameServer = 202.106.0.20 202.106.46.151
O17 - HKLM\System\CS1\Services\Tcpip\..\{440DC310-7942-4F5E-AE73-0ACCBD45858E}: NameServer = 202.106.0.20 202.106.46.151
O18 - 列举现有的协议: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - C:\PROGRA~1\KuGoo2\InExtend\KUGOO3~1.OCX
O23 - NT 服务: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

SREng.exe 改为 SREng.com

2006-12-01,05:28:01

System Repair Engineer 2.2.6.605
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 1 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\System32\ctfmon.exe>  [(Verified)Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup>  [(Verified)NVIDIA Corporation]
    <nwiz><nwiz.exe /install>  [(Verified)NVIDIA Corporation]
    <WinampAgent><C:\Program Files\Winamp\winampa.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{71701867-1867-170E-6717-86770867170E}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dll>  [N/A]

==================================
启动文件夹
N/A

==================================
服务
[Human Interface Device Access / HidServ]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NVIDIA Driver Helper Service / NVSvc]
  <C:\WINDOWS\System32\nvsvc32.exe><NVIDIA Corporation>

==================================
驱动程序
[aeaudio / aeaudio]
  <system32\drivers\aeaudio.sys><Andrea Electronics Corporation>
[Aspi32 / Aspi32]
  <C:\WINDOWS\SYSTEM32\DRIVERS\Aspi32.SYS><Adaptec>
[Intel(R) PRO Adapter Driver / E100B]
  <System32\DRIVERS\e100b325.sys><Intel Corporation>
[IntelC51 / IntelC51]
  <System32\DRIVERS\IntelC51.sys><Intel Corporation>
[IntelC52 / IntelC52]
  <System32\DRIVERS\IntelC52.sys><Intel Corporation>
[IntelC53 / IntelC53]
  <System32\DRIVERS\IntelC53.sys><Intel Corporation>
[nv / nv]
  <System32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[nv4 / nv4]
  <System32\DRIVERS\nv4.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink]
  <System32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20]
  <\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Secdrv / Secdrv]
  <System32\DRIVERS\secdrv.sys><N/A>
[SFI Service / sf]
  <system32\drivers\sf.sys><Sonic Focus, Inc>
[smwdm / smwdm]
  <system32\drivers\smwdm.sys><Analog Devices, Inc.>

==================================
浏览器加载项
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx, >
[IeCatch5 Class]
  {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <C:\Program Files\FlashGet\Jccatch.dll, FlashGet>
[Thunder Browser Helper]
  {889D2FEB-5411-4565-8998-1DD2C5261283} <C:\Program Files\Thunder\ComDlls\XunLeiBHO_006.dll, Thunder Networking Technologies,LTD>
[gFlash Class]
  {F156768E-81EF-470C-9057-481BA8380DBA} <C:\Program Files\FlashGet\getflash.dll, >
[启动迅雷5]
  {09BA8F6D-CB54-424B-839C-C2A6C8E6B436} <C:\Program Files\Thunder\Thunder.exe, Thunder Networking Technologies,LTD>
[浩方对战平台]
  {0A155D3C-68E2-4215-A47A-E800A446447A} <F:\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[豪杰超级解霸V8]
  {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Herosoft\HeroV8\STHSDVD.EXE, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[快车]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, FlashGet.com>
[电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation>
[快车(FlashGet)]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\Program Files\FlashGet\fgiebar.dll, Amaze Soft>
[Rising Web Scan Object]
  {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} <C:\WINDOWS\Downloaded Program Files\OL2005.dll, Beijing Rising Technology Co., Ltd.>
[&使用快车(FlashGet)下载]
  <C:\PROGRA~1\FlashGet\jc_link.htm, N/A>
[&使用快车(FlashGet)下载全部链接]
  <C:\PROGRA~1\FlashGet\jc_all.htm, N/A>
[&使用迅雷下载]
  <C:\Program Files\Thunder\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <C:\Program Files\Thunder\Program\GetAllUrl.htm, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
  <C:\Program Files\BitSpirit\bsurl.htm, N/A>
[豪杰超级解霸V8实时播放]
  <C:\Herosoft\HeroV8\MPURLGET.HTM, N/A>

==================================
正在运行的进程
[PID: 608][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 672][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 696][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 748][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 760][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 924][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1048][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1152][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1168][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1412][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[PID: 1704][C:\WINDOWS\Explorer.EXE]  [Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx]  [, 1, 0, 0, 1]
    [C:\Program Files\Thunder\ComDlls\XunLeiBHO_006.dll]  [Thunder Networking Technologies,LTD, 5, 0, 0, 3]
    [C:\Herosoft\HeroV8\VCvtShell.dll]  [herosoft, 1, 0, 0, 1]
    [C:\Program Files\WinRAR\rarext.dll]  [N/A, N/A]
[PID: 356][C:\WINDOWS\System32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dll]  [N/A, N/A]
    [C:\Herosoft\HeroV8\VCvtShell.dll]  [herosoft, 1, 0, 0, 1]
[PID: 452][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)]
[PID: 500][C:\WINDOWS\System32\nvsvc32.exe]  [NVIDIA Corporation, 6.14.10.4403]
[PID: 588][C:\WINDOWS\System32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: DNSRV(bld4act)]
[PID: 420][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 940][C:\Program Files\Winamp\winamp.exe]  [Nullsoft, 5,3,2,1003]
    [C:\Program Files\Winamp\NSCRT.dll]  [Nullsoft, Inc., 7.10.0000]
    [C:\Herosoft\HeroV8\VCvtShell.dll]  [herosoft, 1, 0, 0, 1]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\System\jnetlib.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\aacPlusDecoder.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\tagz.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\playlist.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\xml.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\watcher.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\jpeg.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\png.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\filereader.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\System\db.w5s]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_mp3.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_wm.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_midi.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_mod.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_vorbis.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_mp4.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_flac.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_cdda.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_wave.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\libsndfile.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_nsv.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_dshow.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\in_linein.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\out_wave.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\out_disk.dll]  [Nullsoft, 5,3,2,1003]
    [C:\Program Files\Winamp\Plugins\out_ds.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\gen_ml.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_dash.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_nowplaying.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_bookmarks.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_history.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_local.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\nde.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_playlists.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_disc.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\primosdk.dll]  [Sonic Solutions, 3.2.40.500]
    [C:\WINDOWS\System32\PX.dll]  [Sonic Solutions, 3.2.40.500]
    [C:\WINDOWS\System32\PXDRV.DLL]  [Sonic Solutions, 1.01.93B]
    [C:\WINDOWS\System32\PXMAS.DLL]  [Sonic Solutions, 3.2.40.500]
    [C:\WINDOWS\System32\PXSFS.DLL]  [Sonic Solutions, 3.2.40.500]
    [C:\WINDOWS\System32\PXAFS.DLL]  [Sonic Solutions, 3.2.40.500]
    [C:\WINDOWS\System32\PxWave.dll]  [Sonic Solutions, 3.2.40.500]
    [C:\Program Files\Winamp\Plugins\ml_transcode.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_rg.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_wire.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_online.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_xpdxs.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\ml_pmp.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\pmp_ipod.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\pmp_njb.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\pmp_p4s.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\pmp_usb.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\gen_ff.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\gen_hotkeys.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\gen_jumpex.dll]  [N/A, N/A]
    [C:\Program Files\Winamp\Plugins\gen_tray.dll]  [N/A, N/A]
[PID: 596][C:\Program Files\Tencent\TT\TTraveler.exe]  [腾讯公司, 3.1.0.261]
    [C:\Herosoft\HeroV8\VCvtShell.dll]  [herosoft, 1, 0, 0, 1]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dll]  [N/A, N/A]
    [C:\Program Files\Tencent\TT\Plugins\TWeather\TWeather.dll]  [, 1, 0, 0, 3]
    [C:\Program Files\Tencent\TT\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 4]
    [C:\WINDOWS\System32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [C:\WINDOWS\System32\JPWB.IME]  [长江软件工作室, 4.00.950]
    [C:\WINDOWS\System32\UNISPIM5.IME]  [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[PID: 1900][F:\SREng\SREng.com.exe]  [Smallfrogs Studio, 2.2.6.605]
    [C:\Herosoft\HeroV8\VCvtShell.dll]  [herosoft, 1, 0, 0, 1]
    [C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dll]  [N/A, N/A]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[D:\]
[AutoRun]
open=sxs.exe
shellexecute=sxs.exe
shell\Auto\command=sxs.exe
[E:\]
[AutoRun]
open=sxs.exe
shellexecute=sxs.exe
shell\Auto\command=sxs.exe
[F:\]
[AutoRun]
open=sxs.exe
shellexecute=sxs.exe
shell\Auto\command=sxs.exe

==================================
HOSTS 文件
N/A

==================================
帮忙看下，谢谢

<{71701867-1867-170E-6717-86770867170E}><C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dll> [N/A]

用SREng 删除此项..安全模式下删除此文件..

HKLM\SYSTEM\CurrentControlSet\Services\wscsvc
Start值由 4 改成 2

HKCR\CLSID\{71701867-1867-170E-6717-86770867170E}\InProcServer32
（默认）值删除..

删除注册表
  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\navapsvc

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\RsRavMon

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\RsCCenter

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\kavsvc

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\KVSrvXP

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\KVWSC

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\KPfwSvc

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\KWatchSvc

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\ccProxy

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\ccEvtMgr

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\ccSetMgr

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\SPBBCSvc

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\Symantec Core LC

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\NPFMntor

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\MskService

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\FireSvc

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\McShield

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\McTaskManager

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\McAfeeFramework

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\RfwService

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\SKNFW

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\SkyProcs

  注册表键： HKLM\SYSTEM\CurrentControlSet\Services\AVP

最后删除
C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dll
C:\Program Files\Common Files\Microsoft Shared\MSINFO\1867170E.dat
C:\WINDOWS\Help\wshmcepts.chm

重装QQ 和 杀软..

谢谢，辛苦了，随便早上好