情况是这样的:进程里面总删不去的32221.exe和rundll.exe,在服务里面多了个ms-2fax的东东,删不去,我用icesword、sterng2删的，可能是我学艺未精，请大家帮帮忙。。。。。。。。

[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

还有图

还有

还有

病毒名称    处理结果    发现日期    扫描方式    路径    文件    病毒来源
Adware.Win32.AdPop.a    需要解压缩后杀毒    2007-07-20 00:01    手动扫描    E:\浩方对战平台    Yayad4HaoFang070112.exe>>AdPop.exe    本机
未知病毒    删除成功    2007-07-20 12:58    定时扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\01234567    index[2].htm    本机
未知病毒    删除成功    2007-07-20 12:58    定时扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6IUPKQ4X    index[3].htm    本机
Hack.SuspiciousAni    删除成功    2007-07-20 13:02    定时扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4NN7YW9X    1[2].gif    本机
Adware.Win32.AdPop.a    需要解压缩后杀毒    2007-08-01 15:54    定时扫描    E:\HF\浩方对战平台    Yayad4HaoFang070112.exe>>AdPop.exe    本机
Trojan.Win32.Agent.pow    清除成功    2007-08-10 10:50    手动扫描    Explorer.EXE>>C:\WINDOWS\KB908024.log        本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-10 10:57    手动扫描    C:\WINDOWS\system32    8d012.exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-10 10:57    手动扫描    C:\WINDOWS\system32    8d012.exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 10:57    手动扫描    C:\WINDOWS\system32    8d012.exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 10:57    手动扫描    C:\WINDOWS\system32    d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Trojan.DL.Win32.LoadAdv.h    需要解压缩后杀毒    2007-08-10 10:57    手动扫描    C:\WINDOWS\system32    1228.exe>>$TEMP\loadadv579.exe    本机
Trojan.DL.Win32.Agent.xkl    需要解压缩后杀毒    2007-08-10 10:57    手动扫描    C:\WINDOWS\system32    1228.exe>>$TEMP\wr-1-20.exe    本机
Trojan.DL.Mnless.zq    需要解压缩后杀毒    2007-08-10 10:57    手动扫描    C:\WINDOWS\system32    1228.exe>>$TEMP\1228.exe>>$TEMP\aabb.exe    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 10:57    手动扫描    C:\WINDOWS\system32    13d012.exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 11:04    手动扫描    C:\WINDOWS    d21.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 11:04    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\QUY207ZC    13d012[1].exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Trojan.DL.Win32.LoadAdv.h    需要解压缩后杀毒    2007-08-10 11:04    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\loadadv579.exe    本机
Trojan.DL.Win32.Agent.xkl    需要解压缩后杀毒    2007-08-10 11:04    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\wr-1-20.exe    本机
Trojan.DL.Mnless.zq    需要解压缩后杀毒    2007-08-10 11:04    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\1228.exe>>$TEMP\aabb.exe    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-10 11:04    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-10 11:04    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 11:04    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 11:06    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GXA3C12B    d21[1].exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc1.exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc1.exe>>$SYSDIR\netdde32.exe>>packsy_a    本机

AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc1.exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc2.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Trojan.DL.Win32.LoadAdv.h    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc3.exe>>$TEMP\loadadv579.exe    本机
Trojan.DL.Win32.Agent.xkl    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc3.exe>>$TEMP\wr-1-20.exe    本机
Trojan.DL.Mnless.zq    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc3.exe>>$TEMP\1228.exe>>$TEMP\aabb.exe    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc4.exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-10 11:10    手动扫描    C:\Recycled    Dc5.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Dropper.Win32.Agent.nyy    删除成功    2007-08-12 14:35    手动扫描    c:\windows\system32\system\sysbacks    avps.exe>>Aspack212r    本机
Trojan.Win32.Agent.vai    删除成功    2007-08-12 14:35    手动扫描    C:\WINDOWS\system32\system\sysbacks    AntiAdwa.exe    本机
Trojan.Win32.Agent.vaj    删除成功    2007-08-12 14:35    手动扫描    C:\WINDOWS\system32\system\sysbacks    novel.exe    本机
Trojan.Win32.Agent.vam    删除成功    2007-08-12 14:35    手动扫描    C:\WINDOWS\system32    KB328489.log    本机
未知病毒    删除成功    2007-08-12 14:35    手动扫描    C:\WINDOWS\system32    KB984892.log    本机
Trojan.Win32.Agent.pow    删除成功    2007-08-12 14:40    手动扫描    C:\WINDOWS    KB908024.log    本机
Dropper.Win32.Agent.nyy    删除成功    2007-08-12 14:40    手动扫描    c:\documents and settings\localservice\local settings\temporary internet files\content.ie5\i1tumkus    5000-521ww[1].exe>>Aspack212r    本机
Dropper.Win32.Agent.nzs    删除成功    2007-08-12 14:40    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\QUY207ZC    8105[1].exe    本机
Trojan.Win32.Agent.uzx    需要解压缩后杀毒    2007-08-12 14:40    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\QUY207ZC    13d012[1].exe>>$SYSDIR\netdde32.exe    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-12 14:40    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\QUY207ZC    13d012[1].exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Dropper.Win32.Agent.nyx    删除成功    2007-08-12 14:41    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    7[1].exe    本机
Trojan.DL.Win32.LoadAdv.h    需要解压缩后杀毒    2007-08-12 14:41    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\loadadv579.exe    本机
Trojan.DL.Win32.Agent.xkl    需要解压缩后杀毒    2007-08-12 14:41    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\wr-1-20.exe    本机
Trojan.DL.Mnless.zq    需要解压缩后杀毒    2007-08-12 14:41    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\1228.exe>>$TEMP\aabb.exe    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-12 14:41    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-12 14:41    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-12 14:41    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Trojan.DL.Win32.Agent.xof    删除成功    2007-08-12 14:41    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    shenji[1].exe    本机
Adware.Win32.Agent.nvu    需要解压缩后杀毒    2007-08-12 14:41    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8SQFREFA    ad2477[1].exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Trojan.DL.Win32.Agent.xof    删除成功    2007-08-12 14:41    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8SQFREFA    6057[1].exe    本机
Trojan.DL.Win32.Delf.ytz    删除成功    2007-08-12 14:41    手动扫描    c:\documents and settings\administrator\local settings\temporary internet files\content.ie5\8sqfrefa    fc9[1].exe>>fsg2.0    本机
未知病毒    删除成功    2007-08-12 14:41    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8SQFREFA    10083[1].exe    本机

Trojan.Win32.Agent.vam    删除成功    2007-08-12 14:41    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\K7Q06G3V    10081[1].exe    本机
Worm.Win32.Agent.iov    删除成功    2007-08-12 14:45    手动扫描    C:\RECYCLER    auto.exe    本机
Worm.Win32.Agent.iov    删除成功    2007-08-12 14:45    手动扫描    D:\RECYCLER    auto.exe    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __4.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __7.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __E.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __22.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __1B.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __28.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __5.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __8.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __D.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __23.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __93.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __98.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __ED.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __F2.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __117.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __118.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __141.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __149.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __14B.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __14E.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __15B.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __166.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __16B.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __16D.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __171.tmp    本机
Trojan.Win32.Agent.vac    删除成功    2007-08-12 14:46    手动扫描    D:\Recycled    __180.tmp    本机
Trojan.Win32.Agent.uzx    需要解压缩后杀毒    2007-08-14 04:06    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\QUY207ZC    13d012[1].exe>>$SYSDIR\netdde32.exe    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-14 04:06    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\QUY207ZC    13d012[1].exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Trojan.DL.Win32.LoadAdv.h    需要解压缩后杀毒    2007-08-14 04:06    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\loadadv579.exe    本机
Trojan.DL.Win32.Agent.xkl    需要解压缩后杀毒    2007-08-14 04:06    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\wr-1-20.exe    本机
Trojan.DL.Mnless.zq    需要解压缩后杀毒    2007-08-14 04:06    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\Y2UV8O4Q    1228[1].exe>>$TEMP\1228.exe>>$TEMP\aabb.exe    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-14 04:06    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
Trojan.DL.Win32.AdLoad.ka    需要解压缩后杀毒    2007-08-14 04:06    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\netdde32.exe>>packsy_a    本机
AdWare.Win32.cpush.g    需要解压缩后杀毒    2007-08-14 04:06    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    8d012[1].exe>>$SYSDIR\d03.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Adware.Win32.Agent.nvu    需要解压缩后杀毒    2007-08-14 04:08    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\8SQFREFA    ad2477[1].exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Adware.Win32.Cpush.f    需要解压缩后杀毒    2007-08-17 05:03    手动扫描    C:\WINDOWS\Temp    28575BE7.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Adware.Win32.Cpush.f    忽略    2007-08-17 11:52    定时扫描    C:\WINDOWS\Temp    28575BE7.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Adware.Win32.Cpush.f    需要解压缩后杀毒    2007-08-17 11:59    手动扫描    C:\WINDOWS\Temp    28575BE7.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
Adware.Win32.Cpush.f    需要解压缩后杀毒    2007-08-21 11:49    定时扫描    C:\WINDOWS\Temp    28575BE7.exe>>$COMMONFILES\CPUSH\cpush.tmp    本机
未知病毒    忽略    2007-08-28 11:27    定时扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\I1TUMKUS    xxx[1].exe    本机
Trojan.IMMSG.Win32.TBMSG.jz    忽略    2007-08-28 11:27    定时扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\I1TUMKUS    105[1].exe    本机
Trojan.Win32.Agent.vfn    忽略    2007-08-28 11:27    定时扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    shenji[2].exe    本机
未知病毒    删除成功    2007-08-29 20:51    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\I1TUMKUS    xxx[1].exe    本机
Trojan.IMMSG.Win32.TBMSG.jz    删除成功    2007-08-29 20:51    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\I1TUMKUS    105[1].exe    本机
Trojan.Win32.Agent.vfn    删除成功    2007-08-29 20:51    手动扫描    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\F1N9MBCP    shenji[2].exe    本机
Trojan.DL.Win32.Agent.xpe    删除成功    2007-08-29 20:51    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Internet Files\Content.IE5\QXSBCVEL    netdde32[1].exe    本机
Trojan.Win32.Delf.rtg    删除成功    2007-08-29 20:52    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Q7G9K3KX    wxpSetup232[1].txt>>webhelp.exe    本机
Trojan.Clicker.Win32.Delf.id    删除成功    2007-08-29 20:52    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Q7G9K3KX    wxpSetup232[1].txt>>webshow.dll    本机
Trojan.Win32.VB.xgs    删除成功    2007-08-29 20:52    手动扫描    c:\documents and settings\administrator\local settings\temporary internet files\content.ie5\q7g9k3kx    sogou[1].exe>>upx_c    本机
Trojan.DL.Win32.Agent.xpe    删除成功    2007-08-29 20:52    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Z91KCVE6    netdde32[1].exe    本机
Trojan.DL.Win32.Agent.xrz    删除成功    2007-08-29 20:52    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Z91KCVE6    soft232[1].exe    本机
未知病毒    删除成功    2007-08-29 20:52    手动扫描    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\K7Q06G3V    eqi0203[1].exe    本机

大侠们帮帮小弟吧,谢谢拉

【回复“日不懂啊”的帖子】
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <runeip><"C:\Program Files\Rising\AntiSpyware\runiep.exe" /startup>  [N/A]
    <RavTask><"D:\瑞星2007杀毒软件\Rising\Rav\RavTask.exe" -system>  [Beijing Rising Technology Co., Ltd.]
    <RfwMain><"D:\瑞星2007防火墙\Rising\Rfw\rfwmain.exe" -Startup>  [Beijing Rising Technology Co., Ltd.]
    <kpcdst><; C:\Program Files\HEDY\MediaCenter\cdsprite.exe>  [金山软件股份有限公司]
    <NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe>  [Ahead Software Gmbh]
    <SiSUSBRG><; C:\WINDOWS\SiSUSBrg.exe>  [Silicon Integrated Systems Corp.]
    <SoundMan><; SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <TVTray><; C:\PROGRA~1\HEDY\七喜电~1\TVTray.exe>  []
    <KernelFaultCheck><%systemroot%\system32\dumprep 0 -k>  [N/A]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
    <RavStub><"D:\瑞星2007杀毒软件\RISING\RAV\ravstub.exe" /RUNONCE>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Windows Publisher]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}><C:\WINDOWS\system32\shlhook.dll>  [Beijing Rising Technology Co., Ltd.]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [Beijing Rising Technology Co., Ltd.]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [Microsoft Corporation]

==================================
启动文件夹
[腾讯QQ]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\腾讯QQ.lnk --> D:\最新QQ\QQ.exe [TENCENT]><N>

==================================
服务
[Rising Proxy  Service / RfwProxySrv][Stopped/Manual Start]
  <d:\瑞星2007防火墙\rising\rfw\rfwproxy.exe><Beijing Rising Technology Co., Ltd.>
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
  <d:\瑞星2007防火墙\rising\rfw\rfwsrv.exe><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
  <"D:\瑞星2007杀毒软件\Rising\Rav\CCenter.exe"><Beijing Rising Technology Co., Ltd.>
[Rising RealTime Monitor / RsRavMon][Running/Auto Start]
  <"D:\瑞星2007杀毒软件\RISING\RAV\Ravmond.exe"><Beijing Rising Technology Co., Ltd.>
[Windows Driver Foundation - User-mode Driver Framework / WudfSvc][Stopped/Manual Start]
  <C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup-->%SystemRoot%\System32\WUDFSvc.dll><Microsoft Corporation>
[Fax 2Client / ms_2fax][Stopped/Disabled]
  <C:\WINDOWS\system32\32221.exe><N/A>

【回复“日不懂啊”的帖子】
驱动程序
[acpidisk / acpidisk][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\acpidisk.sys><N/A>
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
  <system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
  <System32\DRIVERS\BaseTDI.SYS><Beijing Rising Technology Co., Ltd.>
[c0ufw / c0ufw9][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\c0ufw9.sys><N/A>
[713x TV Card Capture / Cap7134][Running/Manual Start]
  <system32\DRIVERS\Cap7134.sys><Philips Semiconductors>
[cnprov / cnprov][Stopped/Boot Start]
  <\SystemRoot\system32\drivers\cnprov.sys><N/A>
[ExpScaner / ExpScaner][Running/Auto Start]
  <\??\D:\瑞星2007杀毒软件\RISING\RAV\ExpScan.sys><>
[HookCont / HookCont][Running/Auto Start]
  <\??\D:\瑞星2007杀毒软件\RISING\RAV\HOOKCONT.sys><Rising>
[HookReg / HookReg][Running/Auto Start]
  <\??\D:\瑞星2007杀毒软件\RISING\RAV\HookReg.sys><>
[HookSys / HookSys][Running/Auto Start]
  <\??\D:\瑞星2007杀毒软件\RISING\RAV\HookSys.sys><Rising>
[HookUrl / HookUrl][Running/Auto Start]
  <\??\D:\瑞星2007防火墙\Rising\Rfw\HookUrl.sys><Beijing Rising Technology Co., Ltd.>
[idnaux / idnaux][Stopped/Auto Start]
  <system32\drivers\idnaux.sys><N/A>
[MEMSCAN / MEMSCAN][Running/Auto Start]
  <\??\D:\瑞星2007杀毒软件\RISING\RAV\MEMSCAN.sys><Beijing Rising Technology Co., Ltd.>
[mProcRs / mProcRs][Running/Auto Start]
  <\??\d:\瑞星2007防火墙\rising\rfw\mProcRs.sys><Beijing Rising Technology Co., Ltd.>
[mxdispdr / mxdispdr][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\mxdispdr.sys><N/A>
[npkcrypt / npkcrypt][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\npkcrypt.sys><N/A>
[npkycryp / npkycryp][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\npkycryp.sys><N/A>
[HEDY TV II WDM TVTuner / PhTVTune][Running/Manual Start]
  <system32\DRIVERS\PhTVTune.sys><Philips Semiconductors>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[RsAntiSpyware / RsAntiSpyware][Running/Boot Start]
  <\SystemRoot\system32\drivers\RsBoot.sys><Beijing Rising Technology Co., Ltd.>
[RsFwDrv / RsFwDrv][Running/Auto Start]
  <\??\D:\瑞星2007防火墙\Rising\Rfw\RsFwDrv.sys><Beijing Rising Technology Co., Ltd.>
[RsNTGDI / RsNTGDI][Running/Boot Start]
  <\SystemRoot\system32\Drivers\RsNTGdi.sys><Beijing Rising Technology Co., Ltd.>
[RSPPSYS / RSPPSYS][Running/Auto Start]
  <\??\D:\瑞星2007杀毒软件\RISING\RAV\RSPPSYS.sys><Rising>
[Realtek RTL8139/810x/8169/8110 all in one NDIS NT Driver / RTL8023][Running/Manual Start]
  <system32\DRIVERS\Rtlnic51.sys><Realtek Semiconductor Corporation>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start]
  <system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[SiS315 / SiS315][Running/Manual Start]
  <system32\DRIVERS\sisgrp.sys><Silicon Integrated Systems Corporation>
[SiS AGP Filter / SISAGP][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\SISAGPX.sys><Silicon Integrated Systems Corporation>
[SiSide / SiSide][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\siside.sys><Silicon Integrated Systems Corp.>
[sisidex / sisidex][Running/Boot Start]
  <\SystemRoot\system32\drivers\sisidex.sys><Windows (R) 2000 DDK provider>
[SiSkp / SiSkp][Running/System Start]
  <system32\DRIVERS\srvkp.sys><Silicon Integrated Systems Corporation>
[Add Performance Filter Driver / sisperf][Running/Boot Start]
  <\SystemRoot\system32\drivers\sisperf.sys><Silicon Integrated Systems Corp.>
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
  <system32\DRIVERS\WSTCODEC.SYS><Microsoft Corporation>
[Windows Driver Foundation - User-mode Driver Framework Platform Driver / WudfPf][Stopped/Manual Start]
  <system32\DRIVERS\WudfPf.sys><Microsoft Corporation>
[Windows Driver Foundation - User-mode Driver Framework Reflector / WudfRd][Stopped/Manual Start]
  <system32\DRIVERS\wudfrd.sys><Microsoft Corporation>
[xtcceqrz / xtcceqrz][Running/Auto Start]
  <\??\C:\WINDOWS\system32\drivers\xtcceqrz.sys><N/A>