MS31AA40.DLL奇怪进程忽隐忽现，没办法了找不到怎么解决求高人指点

SRENG扫面日志如下
2006-12-29,16:40:26

System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600)
- 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联
    Winsock 提供者
    Autorun.inf
    HOSTS 文件


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <NiceMs><C:\Program Files\Common Files\Microsoft Shared\MSINFO\Mymsok.exe>  [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <kis><"C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe">  [N/A]
    <MSConfig><C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
    <Nice><C:\Program Files\Common Files\Microsoft Shared\MSINFO\smss.exe>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{31AA4033-A6FF-11E0-9A84-00C04FD8DBD8}><C:\WINDOWS\system32\h1AA4033.log>  [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ImpsSensor]
    <WinlogonNotify: ImpsSensor><ImpsSensor.dll>  [China Mobile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
    <WinlogonNotify: klogon><C:\WINDOWS\system32\klogon.dll>  [Kaspersky Lab]

==================================
启动文件夹
[IceSword]
  <C:\Documents and Settings\Administrator.2620627CA30E4B6\「开始」菜单\程序\启动\IceSword.lnk --> C:\DOCUME~1\ADMINI~1.262\桌面\IceSword.exe []><N>

==================================
服务
[Adobe LM Service / Adobe LM Service][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><Adobe Systems>
[卡巴斯基互联网安全套装 6.0 / AVP][Running/Auto Start]
  <"D:\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r><Kaspersky Lab>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start]
  <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"><N/A>
[NVIDIA Display Driver Service / NVSvc][Stopped/Auto Start]
  <C:\WINDOWS\system32\nvsvc32.exe><N/A>

==================================
驱动程序
[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Running/Manual Start]
  <system32\drivers\ac97intc.sys><Intel Corporation>
[General Purpose USB Driver (adildr.sys) / ADILOADER][Stopped/Auto Start]
  <System32\Drivers\adildr.sys><Analog Deivces>
[USB ADSL LAN Adapter / adiusbae][Stopped/Manual Start]
  <system32\DRIVERS\adiusbae.sys><Analog Devices Inc.>
[kl1 / kl1][Running/Boot Start]
  <\SystemRoot\system32\drivers\kl1.sys><Kaspersky Lab>
[klif / klif][Running/System Start]
  <\??\C:\WINDOWS\system32\drivers\klif.sys><Kaspersky Lab>
[kmsinput / kmsinput][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\kmsinput.sys><N/A>
[npkcrypt / npkcrypt][Stopped/Auto Start]
  <\??\D:\Tencent\QQ\npkcrypt.sys><N/A>
[nv / nv][Running/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>

==================================
浏览器加载项
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Flashget Catch Url Class]
  {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <D:\FlashGet\jccatch.dll, www.flashget.com>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <D:\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[FreeMovieObject Class]
  {82D7F56D-7BCC-4A11-ACDA-E9ED10A7B442} <C:\Program Files\77520_CN\77Decoder.dll, 77520.cn免费影院>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[gFlash Class]
  {F156768E-81EF-470C-9057-481BA8380DBA} <D:\FlashGet\getflash.dll, >
[免费精彩视频超流畅在线观看]
  {022C4009-5283-4365-97BF-144054B40E2E} <http://itv.mop.com, N/A>
[Web反病毒保护]
  {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} <D:\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll, Kaspersky Lab>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[网际飞音]
  {8E4E4123-AAC7-42CA-AF1B-68CE70B8D385} <D:\Donor\donor.exe, km169>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Tencent\QQ\QQ.EXE, TENCENT>
[快车]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <D:\FlashGet\flashget.exe, FlashGet.com>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[快车(FlashGet)]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\FlashGet\fgiebar.dll, Amaze Soft>
[Java Plug-in 1.5.0_08]
  {8AD9C840-044E-11D1-B3E9-00805F499D93} <D:\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[BoBo P2P多媒体网络点播/广播/直播系统 V2]
  {A8C3B40D-5384-44AD-ACC4-504B4D8A85F5} <C:\WINDOWS\DOWNLO~1\BOBO_A~1.OCX, 广州易播信息科技有限公司>
[Java Plug-in 1.5.0_08]
  {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} <D:\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_08]
  {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <D:\Java\jre1.5.0_08\bin\npjpi150_08.dll, Sun Microsystems, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Flashget Catch Url Class]
  {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <D:\FlashGet\jccatch.dll, www.flashget.com>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <D:\Tencent\QQ\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[CdnForIE Class]
  {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} <C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll, N/A>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[SSVHelper Class]
  {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <D:\Java\jre1.5.0_08\bin\ssv.dll, Sun Microsystems, Inc.>
[FreeMovieObject Class]
  {82D7F56D-7BCC-4A11-ACDA-E9ED10A7B442} <C:\Program Files\77520_CN\77Decoder.dll, 77520.cn免费影院>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Windows Live Sign-in Helper]
  {9030D464-4C02-4ABF-8ECC-5164760863C6} <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\system32\rmoc3260.dll, RealNetworks, Inc.>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx, Adobe Systems, Inc.>
[快车(FlashGet)]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\FlashGet\fgiebar.dll, Amaze Soft>
[gFlash Class]
  {F156768E-81EF-470C-9057-481BA8380DBA} <D:\FlashGet\getflash.dll, >
[&使用快车(FlashGet)下载]
  <D:\FlashGet\jc_link.htm, N/A>
[&使用快车(FlashGet)下载全部链接]
  <D:\FlashGet\jc_all.htm, N/A>
[上传到QQ网络硬盘]
  <D:\Tencent\QQ\AddToNetDisk.htm, N/A>
[导出当前页到超星阅览器(&A)]
  <D:\读电\ss_all.htm, N/A>
[导出选中部分到超星阅览器(&S)]
  <D:\读电\ss_select.htm, N/A>
[添加到QQ自定义面板]
  <D:\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <D:\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <D:\Tencent\QQ\SendMMS.htm, N/A>
[访问通用网址]
  <, N/A>

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{31AA4033-A6FF-11E0-9A84-00C04FD8DBD8}><C:\WINDOWS\system32\h1AA4033.log>  [N/A]

这个怎么删都删不掉

正在运行的进程
[PID: 324][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 396][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 436][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\uxtheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\klogon.dll]  [Kaspersky Lab, 6.0.0.299]
[PID: 480][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 492][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 644][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 720][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 780][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 908][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 948][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1196][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll]  [Windows (R) 2000 DDK provider, 5.00.2195.1620]
[PID: 1084][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\System32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2420][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\Common Files\System\MS31AA40.DLL]  [N/A, N/A]
    [C:\Program Files\31AA4033\90AA6555.DLL]  [N/A, N/A]
    [D:\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
[PID: 2468][D:\Tencent\QQ\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [D:\Tencent\CoralQQ\CoralAssist.DLL]  [Coral Team, 4.5.0 build 20060515]
    [D:\Tencent\CoralQQ\CoralQQ.DLL]  [Coral Team, 4.5.4 Build 20061001]
    [D:\Tencent\CoralQQ\ipsearcher.dll]  [N/A, 1.0.0.4]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll]  [Microsoft Corporation, 8.00.50727.163]
    [D:\Tencent\QQ\mfc42.dll]  [Microsoft Corporation, 6.00.8665.0]
    [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\msvcp80.dll]  [Microsoft Corporation, 8.00.50727.163]
    [D:\Tencent\QQ\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 370]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\Program Files\31AA4033\90AA6555.DLL]  [N/A, N/A]
    [D:\Tencent\QQ\RICHED32.DLL]  [Microsoft Corporation, 5.00.2134.1]
    [D:\Tencent\QQ\RICHED20.dll]  [Microsoft Corporation, 5.30.23.1205]
    [D:\Tencent\QQ\QQAPI.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\TIMProxy.dll]  [tencent, 0, 3, 2, 4]
    [D:\Tencent\QQ\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 6, 27, 1]
    [D:\Tencent\QQ\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [D:\Tencent\QQ\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [D:\Tencent\QQ\QQMainFrame.dll]  [N/A, N/A]
    [D:\Tencent\QQ\CQQApplication.dll]  [N/A, N/A]
    [D:\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Tencent\QQ\NewSkin.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\HostingMgr.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\CameraDll.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\MailSummary.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [D:\Tencent\QQ\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\GroupLive.dll]  [N/A, N/A]
    [D:\Tencent\QQ\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [D:\Tencent\QQ\QQPlugin.dll]  [N/A, N/A]
    [D:\Tencent\QQ\ShareFiles.dll]  [N/A, N/A]
    [D:\Tencent\QQ\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [D:\Tencent\QQ\QQAllInOne.dll]  [N/A, N/A]
    [D:\Tencent\QQ\SCCore.dll]  [TENCENT, 2, 0, 0, 1]
    [D:\Tencent\QQ\QQCustomFace.dll]  [N/A, N/A]
    [D:\Tencent\QQ\gdiplus.dll]  [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Tencent\QQ\QQPet.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx]  [Adobe Systems, Inc., 9,0,28,0]
    [D:\Tencent\QQ\QQSceneMng.dll]  [N/A, N/A]
    [D:\Tencent\QQ\QRingMng.dll]  [N/A, N/A]
    [D:\Kaspersky Lab\Kaspersky Internet Security 6.0\scr_ch_pg.dll]  [Kaspersky Lab, 1.0.6.299]
    [D:\Kaspersky Lab\Kaspersky Internet Security 6.0\klscav.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Kaspersky Lab\Kaspersky Internet Security 6.0\pr_remote.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Kaspersky Lab\Kaspersky Internet Security 6.0\prloader.dll]  [Kaspersky Lab, 6.0.0.299]
    [D:\Kaspersky Lab\Kaspersky Internet Security 6.0\prkernel.ppl]  [Kaspersky Lab, 6.0.0.304]
    [d:\kaspersky lab\kaspersky internet security 6.0\params.ppl]  [Kaspersky Lab, 6.0.0.299]
    [d:\kaspersky lab\kaspersky internet security 6.0\pxstub.ppl]  [Kaspersky Lab, 6.0.0.299]
    [d:\kaspersky lab\kaspersky internet security 6.0\tempfile.ppl]  [Kaspersky Lab, 6.0.0.299]
    [D:\Tencent\QQ\QQSysMsgMng.dll]  [N/A, N/A]
    [D:\Tencent\QQ\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\QQAvatar.dll]  [N/A, N/A]
    [D:\Tencent\QQ\GroupConnection.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Tencent\QQ\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [D:\Tencent\QQ\VPortal.dll]  [, 1, 0, 0, 4]
    [D:\Tencent\QQ\BQQApplication.dll]  [N/A, N/A]
    [D:\Tencent\QQ\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 240]
    [C:\WINDOWS\system32\h1AA4033.log]  [N/A, N/A]
    [D:\Tencent\QQ\CommercesMng.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [D:\Tencent\QQ\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 2, 23]
    [D:\Tencent\QQ\ImageOle.dll]  [TODO: <Company name>, 1.0.0.1]
    [d:\kaspersky lab\kaspersky internet security 6.0\nfio.ppl]  [Kaspersky Lab, 6.0.0.299]
    [d:\kaspersky lab\kaspersky internet security 6.0\fsdrvplgn.ppl]  [Kaspersky Lab, 6.0.0.299]
    [D:\Tencent\QQ\QQFileTransfer.dll]  [Tencent, 0, 3, 3, 5]
    [D:\Tencent\QQ\QQMagicFace.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\OEMApplication.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\qqgroupdisk.dll]  [Tencent, 2, 1, 101, 40]
    [D:\Tencent\QQ\QQSettingCtrl.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\VqqModule.dll]  [, 1, 0, 0, 1]
    [D:\Tencent\QQ\VqqAllInOne.dll]  [Tencent, 1, 6, 0, 0]
    [D:\Tencent\QQ\InPlus.dll]  [Tencent, 1, 6, 0, 0]
    [D:\Tencent\QQ\tencent-proto1.dll]  [tencent, 1, 6, 0, 0]
    [D:\Tencent\QQ\tencent-comlib.dll]  [tencent, 1, 6, 0, 0]
    [D:\Tencent\QQ\tencent-proto2.dll]  [tencent, 1, 6, 0, 0]
[PID: 1756][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3676][C:\DOCUME~1\ADMINI~1.262\LOCALS~1\Temp\Rar$EX00.031\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]
    [C:\Program Files\31AA4033\90AA6555.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\UxTheme.dll]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll]  [Kaspersky Lab, 6.0.0.299]
    [C:\WINDOWS\system32\h1AA4033.log]  [N/A, N/A]
    [C:\DOCUME~1\ADMINI~1.262\LOCALS~1\Temp\Rar$EX00.031\Plugins\SRECXTMG.SRE]  [Smallfrogs Studio, 1, 5, 0, 55]

各有所长，别依靠杀软，加技术群32821173

文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  Error. ["C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe" "%1"]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
[D:\]
[autorun]
icon=setup.ico
[E:\]
[autorun]
icon=setup.ico
[F:\]
[autorun]
icon=setup.ico
[G:\]
[autorun]
icon=setup.ico

==================================
HOSTS 文件
127.0.0.1      localhost
127.0.0.1      www.winopen.cn
127.0.0.1      www.tanip.com
127.0.0.1      www.365tc.com
127.0.0.1      code.winopen.cn
127.0.0.1      code1.winopen.cn
127.0.0.1      code2.winopen.cn
127.0.0.1      code3.winopen.cn
127.0.0.1      code4.winopen.cn
127.0.0.1      www.djk66.com
127.0.0.1      www.158soft.com
127.0.0.1      www.10359172.com
127.0.0.1      www.ietool.cn
127.0.0.1      www.456link.com
127.0.0.1      www.159.com
127.0.0.1      www.17510.com
127.0.0.1      www.at58.cn
127.0.0.1      www.nb46.com
127.0.0.1      www.qqget.cn
127.0.0.1      u.linkad.cn
127.0.0.1    rhino.acme.com
127.0.0.1    x.acme.com
127.0.0.1    cn.47555.cn
127.0.0.1    new3.etsoft.com.cn
127.0.0.1    new3.etsoft.com
127.0.0.1    etsoft.com
127.0.0.1    wl.etsoft.com.cn
127.0.0.1    wl.etsoft.com
127.0.0.1    down.jschina.com.cn
127.0.0.1    down.jschina.com
127.0.0.1    jschina.com
127.0.0.1    wow.etsoft.com.cn
127.0.0.1    wow.etsoft.com
127.0.0.1    new3.etsoft.com.cn
127.0.0.1    new3.etsoft.com
127.0.0.1    sw.etsoft.com.cn
127.0.0.1    mh.etsoft.com.cn
127.0.0.1    wool.etsoft.com.cn
127.0.0.1    zt.soft.com.cn
127.0.0.1    www.gaodumm.com

==================================
API HOOK
警告！System Repair Engineer 提醒
你下面的函数内容与预期值不符，他
们可能被一些恶意的软件所修改：
RVA  错误： LoadLibraryA
RVA  错误： LoadLibraryExA
RVA  错误： LoadLibraryExW
RVA  错误： LoadLibraryW

==================================

隐藏文件和文件后缀怎么改都改不了

还老出现这个错误不光WINRAR

请问楼主，扫描日志时候，是关了桌面吗？

引用:

【高歌猛进的贴子】请问楼主，扫描日志时候，是关了桌面吗？ ………………

关什么桌面？- -||

explorer.exe进程，就是说你桌面上还有没有图标？