不知道怎么回事注册表、DOS、组策略等等系统文件统统打不开了，在运行中输入“regedit”等总提示找不到文件，直接点也不行，创建reg文件双击还是提示找不到文件，用超级兔子也无法打开注册表编辑器，瑞星扫描无病毒，任务管理器倒是可以打开。
另外，每次系统启动后不久就会卡到完全不能动，五分钟左右之后速度又会正常。
这是怎么回事啊？

各位高手：
非常感谢您留心我这份系统诊断报告，小菜鸟十万火急等待您的帮助！
该诊断报告由360安全卫士提供 http://www.360safe.com
诊断时间: 2007-04-14  03:49:59
诊断平台: Microsoft Windows XP  Service Pack 2
IE版本: Internet Explorer V6.0.2900.2180 Build:62900.2180
计算机物理内存:1022MB - 当前可用内存:433MB

100 - 未知 - Process: matlabserver.exe [] - D:\MATLAB\webserver\bin\win32\matlabserver.exe
100 - 未知 - Process: MATLAB.exe [MATLAB] - D:\MATLAB\bin\win32\MATLAB.exe /Automation -Embedding
100 - 未知 - Process: RavTask.exe [RavTimer] -
100 - 未知 - Process: Rav.exe [Rising Antivirus Main exe] -
100 - 未知 - Process: RavMon.exe [RavMon] -
100 - 未知 - Process: RavMonD.exe [RavMond] -
100 - 未知 - Process: RsAgent.exe [RsAgent Application] - D:\必用工具\瑞星\Rising\Rav\RsAgent.exe
100 - 未知 - Process: RavStub.exe [Rising RavStub] - D:\必用工具\瑞星\RISING\RAV\RavStub.exe /RAVMOND
O4 - 未知 - HKLM\..\RunOnce: [KKDelay] [RunOnce Application] C:\Program Files\Rising\AntiSpyware\RunOnce.exe
O8 - 未知 - Extra context menu item: 上传到QQ网络硬盘 - D:\必用工具\qq\AddToNetDisk.htm
O8 - 未知 - Extra context menu item: 用比特精灵下载(&B) - D:\必用工具\bt\BitSpirit\bsurl.htm
O15 - 未知 - Trusted Zone: http:qq.com
O16 - 未知 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1009/aliedit.cab
O18 - 未知 - Protocol: KuGoo3 - {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC} - D:\必用工具\kugoo\KuGoo3\InExtend\KuGoo3DownXControl.ocx
O23 - 未知 - Service: kkdc [在域控制器上此服务启用用户使用 Kerberos 授权协议登录网络。如果此服务在域控制器上被停用，用户将无法登录网络。如果此服务被禁用，任何依赖于它的服务将无法启用] - C:\WINDOWS\lsass.exe -netsvcs - (not running)
O23 - 未知 - Service: matlabserver [MATLAB Server] - D:\MATLAB\webserver\bin\win32\matlabserver.exe - (running)
O23 - 未知 - Service: PsaSrv [IBM PSA Access Driver Control] -  - (not running)
O23 - 未知 - Service: QCONSVC [QCONSVC] - System32\QCONSVC.EXE - (running)
O23 - 未知 - Service: TpKmpSVC [IBM KCU Service] - C:\WINDOWS\system32\TpKmpSVC.exe - (running)
O23 - 未知 - Service: RsCCenter [Rising Process Communication Center] - "D:\必用工具\瑞星\Rising\Rav\CCenter.exe" - (running)
O23 - 未知 - Service: RsRavMon [Rising RealTime Monitor] - "D:\必用工具\瑞星\RISING\RAV\Ravmond.exe" - (running)

=======================================

100 - 安全 - Process: smss.exe [进程为会话管理子系统用以初始化系统变量，ms-dos驱动名称类似lpt1以及com，调用win32壳子系统和运行在windows登陆过程。] - C:\WINDOWS\System32\smss.exe
100 - 安全 - Process: csrss.exe [客户端服务子系统，用以控制windows图形相关子系统。] - C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=base
100 - 安全 - Process: winlogon.exe [windows nt用户登陆程序。] - C:\WINDOWS\system32\winlogon.exe
100 - 安全 - Process: services.exe [用于管理windows服务系统进程。] - C:\WINDOWS\system32\services.exe
100 - 安全 - Process: lsass.exe [本地安全权限服务控制windows安全机制。] - C:\WINDOWS\system32\lsass.exe
100 - 安全 - Process: ibmpmsvc.exe [ibm笔记本电源管理相关软件。] - C:\WINDOWS\system32\ibmpmsvc.exe
100 - 安全 - Process: ati2evxx.exe [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k DcomLaunch
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost -k rpcss
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\System32\svchost.exe -k netsvcs
100 - 安全 - Process: EvtEng.exe [英特尔公司出品的相关产品。] - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
100 - 安全 - Process: S24EvMon.exe [无线网卡相关驱动程序，用于事件监控。] - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k NetworkService
100 - 安全 - Process: svchost.exe [service host process是一个标准的动态连接库主机处理服务。] - C:\WINDOWS\system32\svchost.exe -k LocalService
100 - 安全 - Process: spoolsv.exe [windows打印任务控制程序，用以打印机就绪。] - C:\WINDOWS\system32\spoolsv.exe

100 - 安全 - Process: scardsvr.exe [对插入在计算机智能卡阅读器中的智能卡进行管理和访问控制。] - C:\WINDOWS\System32\SCardSvr.exe
100 - 安全 - Process: rrpcsb.exe [ibm笔记本电脑相关程序。] - C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe
100 - 安全 - Process: MDM.EXE [debug除错管理用于调试应用程序和microsoft office中的microsoft script editor脚本编辑器。] - C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
100 - 安全 - Process: QCONSVC.EXE [ibm笔记本电脑相关程序。] - C:\WINDOWS\System32\QCONSVC.EXE
100 - 安全 - Process: RegSrvc.exe [intel公司出品的安置在网卡驱动程序(intel proset)旁，用以通信服务。] - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
100 - 安全 - Process: SNDSrvc.exe [symantec pop3扫描网络驱动程序。] - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
100 - 安全 - Process: SMAgent.exe [一个声卡相关软件。] - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
100 - 安全 - Process: TPHDEXLG.exe [ibm公司出品的硬盘自动保护(active protection system)软件。] - C:\WINDOWS\System32\TPHDEXLG.EXE
100 - 安全 - Process: TpKmpSvc.exe [ibm thinkpad笔记本相关程序。] - C:\WINDOWS\system32\TpKmpSVC.exe
100 - 安全 - Process: wdfmgr.exe [windows media player播放器相关程序。] - C:\WINDOWS\system32\wdfmgr.exe
100 - 安全 - Process: alg.exe [这是一个应用层网关服务用于网络共享。] - C:\WINDOWS\System32\alg.exe
100 - 安全 - Process: TpShocks.exe [ibm笔记本电脑相关驱动程序。] - C:\WINDOWS\system32\TpShocks.exe
100 - 安全 - Process: SMax4PNP.exe [声卡相关软件。] - C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
100 - 安全 - Process: SafeSignCertReg.exe [一款数字证书驱动程序。] - C:\WINDOWS\system32\SafeSignCertReg.exe
100 - 安全 - Process: 360tray.exe [360安全卫士实时保护模块] - D:\必用工具\奇虎安全卫士\360safe\safemon\360Tray.exe
100 - 安全 - Process: runiep.exe [卡卡上网安全助手IE防漏墙相关程序。] - C:\Program Files\Rising\AntiSpyware\runiep.exe
100 - 安全 - Process: ctfmon.exe [office xp输入法图标。] - C:\WINDOWS\system32\ctfmon.exe
100 - 安全 - Process: CCenter.exe [瑞星杀毒软件控制台相关程序。] -
100 - 安全 - Process: agentsvr.exe [是一个ActiveX插件，用于多媒体程序。] - C:\WINDOWS\msagent\AgentSvr.exe -Embedding
100 - 安全 - Process: explorer.exe [windows program manager或者windows explorer用于控制windows图形shell，包括开始菜单、任务栏，桌面和文件管理。] - C:\WINDOWS\explorer.exe
100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\IEXPLORE.EXE
100 - 安全 - Process: IEXPLORE.EXE [microsoft internet explorer浏览器用于浏览网页。] - C:\Program Files\Internet Explorer\iexplore.exe
100 - 安全 - Process: wuauclt.exe [windows操作系统后台程序，用于系统升级。] - C:\WINDOWS\system32\wuauclt.exe
100 - 安全 - Process: 360Safe.exe [360安全卫士] - D:\必用工具\奇虎安全卫士\360safe\360Safe.exe
R1 - 安全 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=about:blank
R1 - 安全 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=about:blank
O4 - 安全 - HKLM\..\Run: [IMJPMIG8.1] [微软Microsoft输入法编辑器程序。] ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 安全 - HKLM\..\Run: [PHIME2002ASync] [输入法软件相关程序。] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 安全 - HKLM\..\Run: [PHIME2002A] [输入法软件相关程序。] ; C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 安全 - HKLM\..\Run: [TpShocks] [ibm笔记本电脑相关驱动程序。] TpShocks.exe
O4 - 安全 - HKLM\..\Run: [TPHOTKEY] [ibm thinkpad笔记本应用程序。] ; C:\PROGRA~1\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - 安全 - HKLM\..\Run: [SynTPLpr] [新思手写板，多用于各种笔记本触摸板驱动程序设置] ; C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - 安全 - HKLM\..\Run: [SynTPEnh] [新思手写板，多用于各种笔记本触摸板驱动程序设置] ; C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - 安全 - HKLM\..\Run: [SoundMAXPnP] [analog device公司声卡驱动程序。] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - 安全 - HKLM\..\Run: [SoundMAX] [analog device公司声卡驱动程序。] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - 安全 - HKLM\..\Run: [ATIPTA] [ati显卡驱动的系统托盘图标，可调节显卡属性] ; C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - 安全 - HKLM\..\Run: [QCWLICON] [ibm thinkpad笔记本应用程序。] ; C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE
O4 - 安全 - HKLM\..\Run: [IMEKRMIG6.1] [一种输入法] ; C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - 安全 - HKLM\..\Run: [MSPY2002] [是微软Microsoft翻译工具的一部分。] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - 安全 - HKLM\..\Run: [IMSCMig] [微软拼音输入法安装工具。  ] ; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - 安全 - HKLM\..\Run: [CertificateRegistration] [一款数字证书驱动程序。] SafeSignCertReg.exe
O4 - 安全 - HKLM\..\Run: [IMJPMIG8.2] [微软microsoft输入法编辑器程序。] ; msime82.exe
O4 - 安全 - HKLM\..\Run: [360Safetray] [360safe实时保护功能模块。] D:\必用工具\奇虎安全卫士\360safe\safemon\360Tray.exe /start
O4 - 安全 - HKLM\..\Run: [runeip] [卡卡上网安全助手相关程序。] C:\Program Files\Rising\AntiSpyware\runiep.exe
O4 - 安全 - HKLM\..\Run: [RavTask] [瑞星杀毒软件的任务计划程序。] "D:\必用工具\瑞星\Rising\Rav\RavTask.exe" -system
O4 - 安全 - HKLM\..\RunOnce: [360Safe] [360安全卫士] Rundll32.exe D:\必用工具\奇虎安~1\360safe\AntiAdwa.dll,KillAdware
O4 - 安全 - HKCU\..\Run: [ctfmon.exe] [office xp输入法图标。] C:\WINDOWS\system32\ctfmon.exe
O4 - 安全 - HKCU\..\Run: [MSMSGS] [是MSN Messenger网络聊天工具的主程序] ; "C:\Program Files\Messenger\msmsgs.exe" /background
O16 - 安全 - DPF: {0CA54D3F-CEAE-48AF-9A2B-31909CB9515D} (招商银行个人版) - https://www.sz1.cmbchina.com/download/CMBEdit.cab
O16 - 安全 - DPF: {62B938C4-4190-4F37-8CF0-A92B0A91CC77} (农业银行云网) - https://mybank.icbc.com.cn/icbc/NetSign.dll
O16 - 安全 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (中国工商银行个人银行) - https://mybank.icbc.com.cn/icbc/perbank/AXSafeControls.cab
O16 - 安全 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Flash播放器) - http://fpdownload.macromedia.com/get/flashplayer/current/swflash.cab
O16 - 安全 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (瑞星免费在线查毒插件) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2007/OL2006.cab
O16 - 安全 - DPF: {EF6205C1-3F17-4829-BCB5-1336ED89E356} (江民在线查毒) - http://online.jiangmin.com/KvDown.cab
O18 - 安全 - Protocol: OFFICE 相关 - {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
O18 - 安全 - Protocol: OFFICE 相关 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O23 - 安全 - Service: Ati HotKey Poller [ati显卡相关后台程序。] - C:\WINDOWS\system32\Ati2evxx.exe - (running)
O23 - 安全 - Service: EvtEng [EvtEng相关模块，用于支持Intel无线网络连接硬件。] - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe - (running)
O23 - 安全 - Service: IBM Rapid Restore Ultra Service [IBM的备份和恢复软件IBM Rapid Restore Ultra相关服务。] - "C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe" - (running)
O23 - 安全 - Service: IBMPMSVC [IBM笔记本电脑电源管理相关程序。 ] - C:\WINDOWS\system32\ibmpmsvc.exe - (running)
O23 - 安全 - Service: RegSrvc [Intel网络通讯软件相关程序。 ] - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe - (running)
O23 - 安全 - Service: S24EventMonitor [无线网卡配置和诊断程序。] - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe - (running)
O23 - 安全 - Service: SNDSrvc [诺顿防毒软件相关程序。] - "C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe" - (running)
O23 - 安全 - Service: SoundMAX Agent Service (default) [是Analog SoundMAX声卡产品相关程序。] - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe - (running)
O23 - 安全 - Service: TPHDEXLGSVC [ibm笔记本电脑的主动保护系统相关程序。] - System32\TPHDEXLG.EXE - (running)

=======================================

O40 - lsass.exe -  - C:\WINDOWS\system32\pwdmon.dll -  - fda9b01ed6a2e9eeb9792d2207e1c53d
O40 - explorer.exe - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\AntiSpyware\ieprot.dll - IE Protector - 369c1d78953b00cf8306e7028654092d
O40 - explorer.exe - Adobe Systems, Inc. - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll - PDF Shell Extension - 4b0991cd076b617a2231b19a6663c1c9
O40 - explorer.exe - Beijing Rising Technology Co., Ltd. - D:\必用工具\瑞星\Rising\Rav\RSCOMMON.DLL - Rising Common Function Dynamic Link Library - 58432e6c58f1b4c339adc1a79bf864b6
O40 - explorer.exe - Beijing Rising Technology Co., Ltd. - C:\WINDOWS\system32\RavExt.dll - Rising Shell Ext Module - fa20734a7acabcfe9d727fb343da4e8a

O40 - explorer.exe - Microsoft Corporation - C:\WINDOWS\system32\asfsipc.dll - ASFSipc Object - 5160a3d58ef8a6bd24a169508bb0a334

=======================================

O41 - AegisP - IEEE 802.1X Protocol Driver - C:\WINDOWS\system32\drivers\AegisP.sys - (running) - IEEE 802.1X Protocol Driver - Meetinghouse Data Communications - f498fd605c08404b20a48954c722ff74
O41 - ANC - IBM Access Connections - ANC - C:\WINDOWS\system32\drivers\ANC.sys - (running) - IBM Access Connections - ANC - IBM Corp. - 11ab185a7af224800bbfb5b836974a17
O41 - drvmcdb - Device Driver - C:\WINDOWS\system32\drivers\drvmcdb.sys - (running) - Device Driver - Sonic Solutions - f41619ae216b51d68dda163805eefaa9
O41 - drvnddm - Device Driver Manager - C:\WINDOWS\system32\drivers\drvnddm.sys - (running) - Device Driver Manager - Sonic Solutions - b295700e684ed1984db1d6be40354421
O41 - EGATHDRV - IBM eGatherer Kernel Module - C:\WINDOWS\system32\egathdrv.sys - (running) - IBM eGatherer Kernel Module - IBM Corporation - 2d0fc676d159525f6cd74c3302c7a61c
O41 - ibmfilter - IBM FFE and RRU filter driver - C:\WINDOWS\system32\drivers\ibmfilter.sys - (running) - IBM FFE and RRU filter driver - IBM - 67cbdd7e1d9866f83d8921829893435a
O41 - IBMTPCHK - IBMTPCHK - C:\WINDOWS\system32\drivers\IBMBLDID.SYS - (running) -  -  - 73893e9a62d869a0409df9c12a0ebefe
O41 - NAV8715 - Kernel Module Driver - C:\WINDOWS\system32\drivers\NAV32080.sys - (running) - Kernel Module Driver - Copyright (C) 3721 Corporation. - 7a380dab2c73a2a3f56d50f402b84143
O41 - npkcrypt - nProtect KeyCrypt Driver - D:\必用工具\qq\npkcrypt.sys - (running) - nProtect KeyCrypt Driver - INCA Internet Co., Ltd. - 8bcb281a2540e7aff0cd00f9878fe21f
O41 - NPPTNT2 - nProtect NPSC Kernel Mode Driver for NT - C:\WINDOWS\system32\npptNT2.sys - (running) - nProtect NPSC Kernel Mode Driver for NT - INCA Internet Co., Ltd. - 9131fe60adfab595c8da53ad6a06aa31
O41 - PMEM - Physical Memory Driver - C:\WINDOWS\system32\drivers\PMEMNT.SYS - (running) - Physical Memory Driver - Microsoft Corporation - fa292805788528c083f416e151b60ab6
O41 - prodrv06 - StarForce Protection Environment Driver - C:\WINDOWS\system32\drivers\prodrv06.sys - (running) - StarForce Protection Environment Driver - Protection Technology - f2e3c8f1eb6ba0733e0a1f6373df7957
O41 - prohlp02 - StarForce Protection Helper Driver - C:\WINDOWS\system32\drivers\prohlp02.sys - (running) - StarForce Protection Helper Driver - Protection Technology - 150307b52807d0c493c605ab913038ad
O41 - prosync1 - StarForce Protection Synchronization Driver - C:\WINDOWS\system32\drivers\prosync1.sys - (running) - StarForce Protection Synchronization Driver - Protection Technology - f3471e7971ee62420451d958da635064
O41 - PxHelp20 - Px Engine Device Driver for Windows 2000/XP - C:\WINDOWS\system32\drivers\pxhelp20.sys - (running) - Px Engine Device Driver for Windows 2000/XP - Sonic Solutions - 338a770f9ab04e5b2104d2d6e04cba2c
O41 - RsAntiSpyware - RsBoot - C:\WINDOWS\system32\drivers\RsBoot.sys - (running) - RsBoot - Beijing Rising - c79cf8d2f5225a2216fe3b91ceb8b225
O41 - s24trans - Intel WLAN Packet Driver - C:\WINDOWS\system32\drivers\s24trans.sys - (running) - Intel WLAN Packet Driver - Intel Corporation - 85a26a3bb748dfd3170cdbf45b0dd7fd
O41 - sfdrv01 - StarForce Protection Environment Driver - C:\WINDOWS\system32\drivers\sfdrv01.sys - (running) - StarForce Protection Environment Driver - Protection Technology - 4c0d673281178cb496011a2e28571fc8
O41 - sfhlp01 - StarForce Protection Helper Driver - C:\WINDOWS\system32\drivers\sfhlp01.sys - (running) - StarForce Protection Helper Driver - Protection Technology - 462aee0ea0481ea8bd45cac876a4ccc4
O41 - sfhlp02 - StarForce Protection Helper Driver - C:\WINDOWS\system32\drivers\sfhlp02.sys - (running) - StarForce Protection Helper Driver - Protection Technology - 15be2b5e4dc5b8623cf167720682abc9
O41 - sfsync02 - StarForce Protection Synchronization Driver - C:\WINDOWS\system32\drivers\sfsync02.sys - (running) - StarForce Protection Synchronization Driver - Protection Technology - efebbc1d13fdb77a6af4eddfc7232edf
O41 - Smapint - SMAPI I/O - C:\WINDOWS\system32\drivers\SMAPINT.SYS - (running) - SMAPI I/O - Microsoft Corporation - 26341d0dd225d19fd50e0ee3c3c77502
O41 - sptd - sptd - C:\WINDOWS\system32\drivers\sptd.sys - (running) -  -  -
O41 - sscdbhk5 - Shared Driver Component - C:\WINDOWS\system32\drivers\sscdbhk5.sys - (running) - Shared Driver Component - Sonic Solutions - d7968049be0adbb6a57cee3960320911
O41 - ssrtln - Shared Driver Component - C:\WINDOWS\system32\drivers\ssrtln.sys - (running) - Shared Driver Component - Sonic Solutions - c3ffd65abfb6441e7606cf74f1155273
O41 - TDSMAPI - TDSMAPI - C:\WINDOWS\system32\drivers\TDSMAPI.SYS - (running) -  -  - e9512ac82fff83808549267078b38fe5
O41 - tfsnboio - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsnboio.sys - (running) - Drive Letter Access Component - Sonic Solutions - 1797f3375b4bf20e81d69ac8b11445b5
O41 - tfsncofs - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsncofs.sys - (running) - Drive Letter Access Component - Sonic Solutions - 019ba601cb71a71143aed94f2db26250
O41 - tfsndrct - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsndrct.sys - (running) - Drive Letter Access Component - Sonic Solutions - 87269d7fa6df7ef84b83bf5b0d2e031c
O41 - tfsndres - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsndres.sys - (running) - Drive Letter Access Component - Sonic Solutions - 01ccb5802e5e22188c88ebcad38bf127
O41 - tfsnifs - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsnifs.sys - (running) - Drive Letter Access Component - Sonic Solutions - 2a144ec7557efb9758d1c121688ebaf5
O41 - tfsnopio - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsnopio.sys - (running) - Drive Letter Access Component - Sonic Solutions - 1aa2c61a846efbc200703e8dc250297f
O41 - tfsnpool - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsnpool.sys - (running) - Drive Letter Access Component - Sonic Solutions - b3b0b6616cae23ab1a4a5898ca6d5552
O41 - tfsnudf - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsnudf.sys - (running) - Drive Letter Access Component - Sonic Solutions - 1614a1e396f296138d3fb1728f385e0b
O41 - tfsnudfa - Drive Letter Access Component - C:\WINDOWS\system32\dla\tfsnudfa.sys - (running) - Drive Letter Access Component - Sonic Solutions - e5d5b8dde8c221fedc88680631294155
O41 - TPInput - IBM SATA Power Management Driver - C:\WINDOWS\system32\drivers\TPInput.sys - (running) - IBM SATA Power Management Driver - IBM Corporation - f53589467c0a112bec1835c72457a8a1

O41 - TPPWRIF - TPPWRIF - C:\WINDOWS\system32\drivers\TPPWRIF.SYS - (running) -  -  - 44672de6cea9569c21c4b7a8d2560750
O41 - TSMAPIP - TSMAPIP - C:\WINDOWS\system32\drivers\TSMAPIP.SYS - (running) -  -  - f2aba3066d7921d7fcdbd66dea88be11
O41 - RSPPSYS - RSPPSYS.SYS - D:\必用工具\瑞星\Rising\Rav\rsppsys.sys - (running) - RSPPSYS.SYS - Rising - f38c10d8c21626a4878ea16717e971fa
O41 - ExpScaner - ExpScan.sys - D:\必用工具\瑞星\Rising\Rav\ExpScan.sys - (running) - ExpScan.sys -  - 5a690926c7181d5c0b2721016442c9c3
O41 - HookCont - HookCont - D:\必用工具\瑞星\Rising\Rav\HookCont.sys - (running) - HookCont - Rising - 3926cb7b005564bc77d6b40235c53817
O41 - HookSys - Hooksys - D:\必用工具\瑞星\Rising\Rav\HookSys.sys - (running) - Hooksys - Rising - 265b67f85db6226f2439e13e7c1fa8bf
O41 - HookReg - HookReg - D:\必用工具\瑞星\Rising\Rav\HOOKREG.sys - (running) -  -  - 997c395147f8e5b3f714bdd112fe8945
O41 - MEMSCAN - MemScan Driver - D:\必用工具\瑞星\Rising\Rav\MemScan.sys - (running) - MemScan Driver - 瑞星软件有限公司 - 9811b256023dd985cbc5bad790e5bb84
O41 - Basetdi - basetdi - C:\WINDOWS\system32\drivers\basetdi.sys - (running) - basetdi - Beijing Rising Technology Co., Ltd. - 0064810c1b03f2c889130b669a4ce937
O41 - 1 - 1 - C:\WINDOWS\System32\drivers\447375.sys - (not running) -  -  -
O41 - kmsinput - kmsinput - C:\WINDOWS\system32\drivers\kmsinput.sys - (not running) -  -  - f8d6ebcb50c02b42c5ffd5393229c6b6
O41 - PCANDIS5 - PCAUSA NDIS 5.0 Protocol Driver - C:\WINDOWS\system32\PCANDIS5.SYS - (not running) - PCAUSA NDIS 5.0 Protocol Driver - Printing Communications Assoc., Inc. (PCAUSA) - 2f9806b52cb3748b1e49222744b28e3c
O41 - PcdrNdisuio - PCDR NDIS User mode I/O Driver - C:\WINDOWS\system32\drivers\pcdrndisuio.sys - (not running) - PCDR NDIS User mode I/O Driver - Windows (R) 2000 DDK provider - 505cba425df3bb230f244e1c23221058
O41 - psadd - SMI Driver - C:\WINDOWS\system32\drivers\psadd.sys - (not running) - SMI Driver - IBM Corporation - 30b10051866ede0ca089082fb4dabdea
O41 - QCNDISIF - IBM Access Connections - Intermediate Protocol Driver. - C:\WINDOWS\system32\drivers\qcndisif.sys - (not running) - IBM Access Connections - Intermediate Protocol Driver. - IBM Corporation. - 8127cd3d08a48793d2c155fb4d9af8ef
O41 - sscdbus - SAMSUNG USB Composite Device Driver - C:\WINDOWS\system32\drivers\sscdbus.sys - (not running) - SAMSUNG USB Composite Device Driver - MCCI - fbc09c05b871f42cdc8acd09586228c2
O41 - sscdmdfl - SAMSUNG CDMA Modem Filter Driver - C:\WINDOWS\system32\drivers\sscdmdfl.sys - (not running) - SAMSUNG CDMA Modem Filter Driver - MCCI - d3336a764f00f03808ef29590ab4dd39
O41 - sscdmdm - SAMSUNG CDMA Modem WDM - C:\WINDOWS\system32\drivers\sscdmdm.sys - (not running) - SAMSUNG CDMA Modem WDM - MCCI - e552579d9f76721a75c35442ddc5087e
O41 - vcddev - Virtual Native Network Driver - C:\WINDOWS\system32\drivers\vcdvnic.sys - (not running) - Virtual Native Network Driver - VNN B.J. - 8043f2ad16b8b98335481c872aa2ff26
O41 - RsNTGDI - RsNTGDI - C:\WINDOWS\system32\drivers\RsNTGdi.sys - (not running) - RsNTGDI - Beijing Rising Technology Co., Ltd. - 17214e7b192cb93ff014fca1484b97ad

=======================================
360Safe.exe=3.3.0.1001
AntiAdwa.dll=3.3.0.1001
AntiEng.dll=3.3.0.1001
AntiActi.dll=2.0.0.3000
CleanHis.dll=3.0.2.1000
safelive.exe=1.0.0.2007
live.dll=1.0.0.1012

=======================================
操作历史报告：
----------清理恶评软件历史----------

2007-03-05 22:37
查杀恶意软件 - 雅虎助手&上网助手 - 危险 -
查杀恶意软件 - DMCast桌面传媒/IE-BAR - 危险 -
查杀恶意软件 - Deskipn桌面传媒 - 危险 -
查杀恶意软件 - WinStdup - 危险 -
查杀恶意软件 - 播霸/猫眼网络电视迷你版 - 危险 -

2007-03-05 22:38
查杀恶意软件 - 百度超级搜霸 - 危险 -

2007-03-10 17:57
查杀恶意软件 - lsass 木马 - 危险 - C:\WINDOWS\lsass.exe

2007-03-12 13:24
查杀恶意软件 - lsass 木马 - 危险 - C:\WINDOWS\lsass.exe

2007-03-30 09:49
查杀恶意软件 - lsass 木马 - 危险 - C:\WINDOWS\lsass.exe
查杀恶意软件 - 变身广告a - 危险 - C:\AUTORUN.INF

2007-03-30 09:51
查杀恶意软件 - lsass 木马 - 危险 -
2007-04-01 23:29
查杀恶意软件 - services - 危险 -

2007-04-12 12:06
查杀恶意软件 - lsass 木马 - 危险 - C:\WINDOWS\lsass.exe

2007-04-12 12:33
查杀恶意软件 - lsass 木马 - 危险 -
2007-04-12 21:03
清理恶评软件 - 腾讯QQ附带的QQIEHelper插件 - HKCU\Software\Microsoft\Internet Explorer\MenuExt\用QQ彩信发送该图片
清理恶评软件 - Google工具栏 - HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}

2007-04-12 21:06
清理恶评软件 - Google工具栏 -
2007-04-12 21:16
清理恶评软件 - Google工具栏 - HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}

2007-04-12 21:18
清理恶评软件 - Google工具栏 -
2007-04-12 21:28
清理恶评软件 - Google工具栏 - HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}

2007-04-12 22:54
清理恶评软件 - Google工具栏 - HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}

2007-04-13 10:48
清理恶评软件 - Google工具栏 - HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}

2007-04-13 11:09
清理恶评软件 - Google工具栏 - HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}

2007-04-14 02:07
清理恶评软件 - 腾讯QQ附带的QQIEHelper插件 - HKCU\Software\Microsoft\Internet Explorer\MenuExt\用QQ彩信发送该图片
清理恶评软件 - 网络实名 - C:\Program Files\3721
清理恶评软件 - Google工具栏 - HKCR\CLSID\{AA58ED58-01DD-4d91-8333-CF10577473F7}


----------插件卸载操作历史----------

2007-03-05 22:39
插件管理 - 网际快车附带的工具栏 -
插件管理 - 比特精灵 - C:\Documents and Settings\All Users\「开始」菜单\程序\BitSpirit v3
插件管理 - 腾讯QQ附带的QQIEHelper插件 -
插件管理 - Web迅雷 - C:\Program Files\Thunder Network\WebThunder
2007-03-16 11:43
插件管理 - 腾讯QQ附带的QQIEHelper插件 -
2007-03-16 12:12
插件管理 - 腾讯QQ附带的QQIEHelper插件 -
2007-03-24 02:24
插件管理 - 比特精灵 -
插件管理 - 腾讯QQ附带的QQIEHelper插件 -
2007-04-12 21:28
插件管理 - 酷狗附带的插件 -
插件管理 - 比特精灵 -

----------全面诊断修复历史----------

2007-03-16 11:32
O16 - 未知 - 下载的ActiveX插件 - C:\WINDOWS\system32\ICCARD~1.DLL
O16 - 未知 - 下载的ActiveX插件 - C:\WINDOWS\system32\3DShowVM.ocx
O16 - 未知 - 下载的ActiveX插件 - C:\WINDOWS\system32\USBKey.dll
O23 - 未知 - kkdc - C:\WINDOWS\lsass.exe -netsvcs
O23 - 未知 - PsaSrv -
O23 - 未知 - QCONSVC - System32\QCONSVC.EXE
O23 - 未知 - SymSecurePort - "C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe"
O23 - 未知 - TpKmpSVC - C:\WINDOWS\system32\TpKmpSVC.exe
2007-03-16 11:32
100 - 未知 - TIMPlatform.exe - D:\必用工具\qq\TIMPlatform.exe
2007-03-16 11:33
O23 - 未知 - kkdc - C:\WINDOWS\lsass.exe -netsvcs
O23 - 未知 - PsaSrv -
O23 - 未知 - QCONSVC - System32\QCONSVC.EXE
2007-04-14 02:07
O8 - 危险 - !搜一搜(&S) - res://C:\Program Files\yisou\yisou.dll/232

=======================================

360安全卫士，彻底查杀各种流氓软件,全面保护系统安全,并赠送正版卡巴斯基V6.0
最新免费下载：http://www.360safe.com

自己解决了……OTZ