Trojan.PSW.CabalOnLine.r  Trojan.Spy.Agent.cxt  怎么清除？

瑞星19.16.60 也不能彻底删除，一开机又有。
病毒名称    处理结果    扫描方式    路径    文件
Trojan.VBS.Lin.l    清除成功    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6EA623IR    conn[1].htm
Trojan.VBS.Lin.l    跳过脚本    网页/脚本监控    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp    275651533912.tmp
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6EA623IR    wm0328[1].exe>>fsg2.0
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\WINDOWS\system32    kdjs5.exe>>fsg2.0
Trojan.PSW.CabalOnLine.r    删除成功    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6EA623IR    zt0329b[1].exe
Trojan.PSW.CabalOnLine.r    删除成功    文件监控    C:\WINDOWS\system32    kdjs8.exe
Trojan.Spy.Agent.cxt    重新启动计算机后删除文件    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\IH7DX5VB    wmsj0328[1].exe>>fsg2.0
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\WINDOWS\system32    kdjs9.exe>>fsg2.0
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6EA623IR    wm0328[1].exe>>fsg2.0
Trojan.PSW.CabalOnLine.r    删除成功    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6EA623IR    zt0329b[1].exe
Trojan.Spy.Agent.cxt    重新启动计算机后删除文件    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8XXM4ZD6    wmsj0328[1].exe>>fsg2.0
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\WINDOWS\system32    kdjs9.exe>>fsg2.0
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8XXM4ZD6    wm0328[1].exe>>fsg2.0
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\WINDOWS\system32    kdjs5.exe>>fsg2.0
Trojan.Spy.Agent.cxt    重新启动计算机后删除文件    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8XXM4ZD6    wm0328[1].exe>>fsg2.0
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\WINDOWS\system32    kdjs5.exe>>fsg2.0
Trojan.PSW.CabalOnLine.r    删除成功    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\11UVP4B5    zt0329b[1].exe
Trojan.Spy.Agent.cxt    重新启动计算机后删除文件    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6EA623IR    wmsj0328[1].exe>>fsg2.0
Trojan.Spy.Agent.cxt    删除成功    文件监控    C:\WINDOWS\system32    kdjs9.exe>>fsg2.0
Trojan.PSW.CabalOnLine.r    删除成功    文件监控    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8XXM4ZD6    zt0329b[1].exe

Logfile of HijackThis v1.99.1
Scan saved at 14:25:17, on 2007-4-1
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\VM303_STI.EXE
C:\WINDOWS\system32\ctfmon.exe
F:\Green Soft\Virtual Drive Managersetup\Virtual Drive Manager.exe
C:\WINDOWS\system32\SVCH0ST.EXE
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\yqr.exe
C:\Program Files\racer-henan-cnc\racer.exe
C:\WINDOWS\system32\conime.exe
C:\WINDOWS\system32\conime.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Common Files\Sogou PXP\p2psvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\Connection Wizard\isignup.dll
C:\Program Files\racer-henan-cnc\RacerKp.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
F:\Green Soft\Tuotu-beta1014\Tuotu.exe
F:\426101200522225654\HijackThis.exe

O2 - BHO: TuoTuHelper.LDown - {0BECAB3A-E1F8-45E6-8332-38DD750EBA01} - F:\Green Soft\Tuotu-beta1014\TuoTuHelper.dll
O2 - BHO: IDDTInitObj Class - {15DDE989-CD45-4561-BF99-D22C0D5C2B74} - C:\PROGRA~1\sina\UC\UCddt\ddtinit.dll
O2 - BHO: KillObj Class - {66C28884-4E5D-494B-80C9-CAA27528FD6D} - C:\PROGRA~1\sina\UC\UCddt\ddtkillw.ocx
O2 - BHO: 超级兔子上网精灵 - {7369D35A-5B70-4A5B-B789-B25FE09B4AF3} - F:\Green Soft\MagicSet_7.85\haokanbar.dll
O2 - BHO: ltmenu Class - {78C21EFD-53BA-406C-AF1A-33A38ABD3958} - C:\Program Files\LtUcx\1002\c0.dll
O3 - Toolbar: 超级兔子上网精灵 - {43869BB3-22FD-4F15-9B46-238106BA2F4E} - F:\Green Soft\MagicSet_7.85\haokanbar.dll
O3 - Toolbar: 新浪点点通 - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - C:\PROGRA~1\sina\UC\UCddt\DDTONG~1.DLL
O3 - Toolbar: 同花顺 - {39852EFE-325B-45ef-9A60-3DBECD2DDDD5} - C:\WINDOWS\system32\thsbar.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [TuoTu] F:\Green Soft\Tuotu-beta1014\Tuotu.exe /m
O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
O4 - HKLM\..\Run: [NMGameX_AutoRun] C:\WINDOWS\system32\Rundll32.exe nmgamex.dll,LiveProcess /aa
O4 - HKLM\..\Run: [cmdbcs] C:\WINDOWS\cmdbcs.exe
O4 - HKLM\..\Run: [upxdnd] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\TIMPLATF0RM.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [VirtualDriveManager] "F:\Green Soft\Virtual Drive Managersetup\Virtual Drive Manager.exe" /i
O4 - HKCU\..\Run: [System Boot Check] C:\WINDOWS\system32\sysload3.exe
O4 - HKCU\..\Run: [e5jl9b660uvl] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rundl132.exe
O4 - HKCU\..\Run: [t0hciir] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\winlog0n.exe
O4 - HKCU\..\Run: [ravshell] C:\WINDOWS\system32\SVCH0ST.EXE
O4 - HKCU\..\Run: [svc] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\yqr.exe
O4 - Global Startup: 河南网通宽带用户客户端.lnk = C:\Program Files\racer-henan-cnc\racer.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - F:\Green Soft\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 使用彩信超级自写发送到手机 - http://mms.sina.com.cn/mmsnews.html
O8 - Extra context menu item: 使用新浪下载助手下载 - C:\PROGRA~1\sina\UC\UCddt\sinadl.htm
O8 - Extra context menu item: 使用脱兔下载 - F:\Green Soft\Tuotu-beta1014\TT_one.htm
O8 - Extra context menu item: 使用脱兔下载全部链接 - F:\Green Soft\Tuotu-beta1014\TT_all.htm
O8 - Extra context menu item: 发送图片到手机(&M) - http://sms.sina.com.cn/diy/send.html?from=467
O8 - Extra context menu item: 收藏此页到新浪ViVi - http://vivi.sina.com.cn/collect/click.php?agent=ddt
O8 - Extra context menu item: 新浪搜索 - http://cha.sina.com.cn/ddt.html
O8 - Extra context menu item: 添加到QQ自定义面板 - F:\Green Soft\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - F:\Green Soft\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - F:\Green Soft\QQ\SendMMS.htm
O9 - Extra button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - C:\Program Files\浩方对战平台\GameClient.exe
O9 - Extra button: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing)
O9 - Extra 'Tools' menuitem: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing)
O9 - Extra button: 寻论网--中学作业解答 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing)
O9 - Extra 'Tools' menuitem: 中学作业 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\Green Soft\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\Green Soft\QQ\QQ.EXE
O9 - Extra button: (no name) - {D5C1CCC2-811B-4bf2-BF22-0D3B89600F5B} - F:\Green Soft\Tuotu-beta1014\TuoTu.exe
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: 新浪点点通 - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - C:\PROGRA~1\sina\UC\UCddt\DDTONG~1.DLL
O9 - Extra button: (no name) - {974AD624-EA50-4831-A6C0-3040F6665396} - C:\PROGRA~1\sina\UC\UCddt\rssband.dll (HKCU)
O9 - Extra 'Tools' menuitem: 新浪点点通阅读器 - {974AD624-EA50-4831-A6C0-3040F6665396} - C:\PROGRA~1\sina\UC\UCddt\rssband.dll (HKCU)
O9 - Extra button: 新浪点点通阅读器 - {F0646DC8-58CD-4C64-8F6B-525043914685} - C:\PROGRA~1\sina\UC\UCddt\rssband.dll (HKCU)
O16 - DPF: {05C1004E-2596-48E5-8E26-39362985EEB9} (MMCPlayer Class) - http://p3p.sogou.com/MMCShell.cab
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://www.99liao.net/talk.cab
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: P4P Service - Sohu.com Inc. - C:\Program Files\Common Files\Sogou PXP\p2psvr.exe

清空IE缓存 然后扫描sreng日志上来