为什么病毒老杀不掉,高手来帮助下~!

3dmaxfor

我一开机随便打开个程序,mcafee就报警,说我的C:\Documents and Settings\用户名\LocalSettings\Temp\nf1[1].ex,如图,我在安全模式下查过了,没有任何发现,用ewido也没下面是我用SREng,请高手帮忙解答下,谢谢~!

启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation]
    <Skype><"C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized>  [(Verified)N/A]
    <boot-hf><; c:\windows\BOOT-hf.exe>  [N/A]
    <updateMgr><; "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1>  [N/A]
    <Xplus_spy><; "G:\新建文件夹\xvcclip.exe" /min>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <MSPY2002><C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC>  [(Verified)N/A]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [(Verified)Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [(Verified)Microsoft Corporation]
    <在 USER-B426CF8D26 上自动 EPSON ME 100><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3X1.EXE /P38 "在 USER-B426CF8D26 上自动 EPSON ME 100" /O26 "\\USER-B426CF8D26\EPSONME1" /M "ME 100">  [N/A]
    <ShStatEXE><"D:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE>  [(Verified)McAfee, Inc.]
    <McAfeeUpdaterUI><"D:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey>  [(Verified)McAfee, Inc.]
    <EPSON ME 100><; C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3X1.EXE /P12 "EPSON ME 100" /O6 "USB001" /M "ME 100">  [(Verified)SEIKO EPSON CORPORATION]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [(Verified)Microsoft Corporation]
    <kav><; "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe">  [N/A]
    <KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k>  [N/A]
    <KvMonXP><; C:\KV2004\KVMonXP.kxp /auto>  [N/A]
    <stup.exe><; C:\PROGRA~1\TENCENT\Adplus\stup.exe>  [N/A]
    <WebThunder><; G:\新建文件夹\WebThunder.exe>  [N/A]
    <在 USER-32ED36A304 上自动 EPSON ME 100><C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3X1.EXE /P38 "在 USER-32ED36A304 上自动 EPSON ME 100" /O28 "\\USER-32ED36A304\EPSONME100" /M "ME 100">  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [(Verified)Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\Userinit.exe,>  [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation]
==================================
启动文件夹
N/A
==================================
服务
[EPSON V3 Service2(03) / EPSON_PM_RPCV2_01][Running/Auto Start]
  <C:\WINDOWS\system32\E_S00RP1.EXE><SEIKO EPSON CORPORATION>
[Human Interface Device Access / HidServ][Stopped/Disabled]
  <C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[McAfee Framework Service / McAfeeFramework][Running/Auto Start]
  <"D:\Program Files\McAfee\Common Framework\FrameworkService.exe" /ServiceStart><McAfee, Inc.>
[McAfee McShield / McShield][Running/Auto Start]
  <"D:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe"><McAfee, Inc.>
[McAfee Task Manager / McTaskManager][Running/Auto Start]
  <"D:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe"><McAfee, Inc.>
[Net Objective / NetObjectiveSvc][Running/Auto Start]
  <d:\Program Files\EduIQ.com\Advanced Net Monitor for Classroom Professional\NetObjectiveSvc.exe><N/A>
[Windows User Mode Driver Framework / UMWdf][Running/Auto Start]
  <C:\WINDOWS\system32\wdfmgr.exe><Microsoft Corporation>

3dmaxfor

==================================
驱动程序
[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start]
  <system32\drivers\ac97intc.sys><Intel Corporation>
[ADProt / ADProt][Stopped/System Start]
  <system32\drivers\ADProt.sys><腾讯科技（深圳）有限公司>
[AliIde / AliIde][Stopped/Boot Start]
  <\SystemRoot\System32\DRIVERS\aliide.sys><N/A>
[CmdIde / CmdIde][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\cmdide.sys><CMD Technology, Inc.>
[VIA Rhine-Family Fast Ethernet Adapter Driver Service / FETND5BV][Stopped/Manual Start]
  <system32\DRIVERS\fetnd5bv.sys><VIA Technologies, Inc.>
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Stopped/Manual Start]
  <system32\DRIVERS\fetnd5.sys><N/A>
[VIA Rhine Family Fast Ethernet Adapter Driver Service / FETNDISB][Running/Manual Start]
  <system32\DRIVERS\fetnd5b.sys><VIA Technologies, Inc.>
[HWiNFO32 Kernel Driver / HWiNFO32][Running/Auto Start]
  <\??\C:\Program Files\HWiNFO32\HWiNFO32.SYS><REALiX(tm)>
[kmsinput / kmsinput][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\kmsinput.sys><N/A>
[MegaIDE / MegaIDE][Running/Boot Start]
  <\SystemRoot\System32\DRIVERS\MegaIDE.sys><LSI Logic Corporation.>
[McAfee Inc. / mfeapfk][Running/Manual Start]
  <system32\drivers\mfeapfk.sys><McAfee, Inc.>
[McAfee Inc. / mfeavfk][Running/Manual Start]
  <system32\drivers\mfeavfk.sys><McAfee, Inc.>
[McAfee Inc. / mfebopk][Running/Manual Start]
  <system32\drivers\mfebopk.sys><McAfee, Inc.>
[McAfee Inc. / mfehidk][Running/Manual Start]
  <system32\drivers\mfehidk.sys><McAfee, Inc.>
[VSCore mferkdk / mferkdk][Running/System Start]
  <\??\D:\Program Files\McAfee\VirusScan Enterprise\mferkdk.sys><McAfee, Inc.>
[McAfee Inc. / mfetdik][Running/System Start]
  <system32\drivers\mfetdik.sys><McAfee, Inc.>
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
  <system32\DRIVERS\npf.sys><CACE Technologies>
[npkcrypt / npkcrypt][Running/Auto Start]
  <\??\C:\Program Files\QQ2005\npkcrypt.sys><INCA Internet Co., Ltd.>
[npkycryp / npkycryp][Stopped/Manual Start]
  <\??\C:\Program Files\QQ2005\npkycryp.sys><N/A>
[nrglta / nrglta][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\nrglta.sys><N/A>
[NTSIM / NTSIM][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\ntsim.sys><VIA Networking Technologies, Inc.>
[nv / nv][Stopped/Manual Start]
  <system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
  <system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[S3Psddr / S3Psddr][Stopped/Manual Start]
  <system32\DRIVERS\s3gnbm.sys><S3 Graphics, Inc.>
[S3SavageNB / S3SavageNB][Running/Manual Start]
  <system32\DRIVERS\s3gnbm.sys><S3 Graphics, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
  <system32\DRIVERS\secdrv.sys><N/A>
[Sony USB Filter Driver (SONYPVU1) / SONYPVU1][Stopped/Manual Start]
  <system32\DRIVERS\SONYPVU1.SYS><Sony Corporation>
[Sydex Diskette Driver / SydexFDD][Running/Manual Start]
  <\SystemRoot\System32\drivers\sydexfdd.sys><Windows (R) 2000 DDK provider>
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
  <system32\DRIVERS\tcpip.sys><Microsoft Corporation>
[TSP / TSP][Stopped/Manual Start]
  <\??\C:\WINDOWS\system32\drivers\klif.sys><N/A>
[ViaIde / ViaIde][Running/Boot Start]
  <\SystemRoot\system32\DRIVERS\viaide.sys><Microsoft Corporation>
[VIA AC'97 Audio Controller (WDM) / VIAudio][Running/Manual Start]
  <system32\drivers\viaudio.sys><VIA Technologies, Inc.>

==================================
浏览器加载项
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <G:\新建文件夹\WebThunderBHO_011.dll, N/A>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\QQ2005\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
  {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\system32\ssup.dll, TENCENT>
[scriptproxy]
  {7DB2D5A0-7241-4E79-B68D-6309F01C5231} <D:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll, McAfee, Inc.>
[Google Toolbar Helper]
  {AA58ED58-01DD-4d91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, N/A>
[NTIECatcher Class]
  {C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, Xi>
[微软]
  {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} <http://www.microsoft.com/china/index.htm, N/A>
[启动Web迅雷]
  {962EFB8E-2683-42d4-AC74-AAA4C759B9C6} <http://my.xunlei.com, N/A>
[@shdoclc.dll,-866]
  {c95fe080-8f5d-11d2-a20b-00aa003c157a} <, N/A>
[QQ]
  {c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\QQ2005\QQ.EXE, TENCENT>
[QQIEFloatBarCfgCmd Class]
  {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\QQ2005\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[&Google]
  {2318C2B1-4965-11d4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, N/A>
[Windows Genuine Advantage Validation Tool]
  {17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\flash.ocx, Macromedia, Inc.>
[WebThunder Browser Helper]
  {00000AAA-A363-466E-BEF5-9BB68697AA7F} <G:\新建文件夹\WebThunderBHO_011.dll, N/A>
[Adobe PDF Reader Link Helper]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[&Google]
  {2318C2B1-4965-11D4-9B18-009027A5CD4F} <c:\program files\google\googletoolbar1.dll, N/A>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[QQBrowserHelperObject Class]
  {54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\QQ2005\QQIEHelper.dll, 深圳市腾讯计算机系统有限公司>
[]
  {669751ED-D558-49AE-B01A-3B374CC7910E} <C:\WINDOWS\system32\ssup.dll, TENCENT>
[scriptproxy]
  {7DB2D5A0-7241-4E79-B68D-6309F01C5231} <D:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll, McAfee, Inc.>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[Google Toolbar Helper]
  {AA58ED58-01DD-4D91-8333-CF10577473F7} <c:\program files\google\googletoolbar1.dll, N/A>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[RDS.DataSpace]
  {BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[Tencent Safety Online Base Module]
  {C09B522F-8AED-4E21-A65C-DC1AB652BAEE} <C:\WINDOWS\system32\TSOBase\TSOBase.ocx, Tencent Corporation>
[NTIECatcher Class]
  {C56CB6B0-0D96-11D6-8C65-B2868B609932} <C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll, Xi>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\macromed\flash\flash.ocx, Macromedia, Inc.>
[CPasswordEditCtrl Object]
  {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[Google 搜索(&G)]
  <res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html, N/A>
[上传到QQ网络硬盘]
  <C:\Program Files\QQ2005\AddToNetDisk.htm, N/A>
[使用Web迅雷下载]
  <G:\新建文件夹\GetUrl.htm, N/A>
[使用Web迅雷下载全部链接]
  <G:\新建文件夹\GetAllUrl.htm, N/A>
[使用影音传送带下载]
  <C:\Program Files\Xi\NetTransport 2\NTAddLink.html, N/A>
[使用影音传送带下载全部链接]
  <C:\Program Files\Xi\NetTransport 2\NTAddList.html, N/A>
[反向链接]
  <res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html, N/A>
[导出到 Microsoft Office Excel(&X)]
  <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到AMV视频转换工具...]
  <G:\Program Files\AMVConverter\grab.html, N/A>
[添加到Media Manager工具...]
  <G:\Program Files\MediaManager\grab.html, N/A>
[添加到QQ自定义面板]
  <C:\Program Files\QQ2005\AddPanel.htm, N/A>
[添加到QQ表情]
  <C:\Program Files\QQ2005\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <C:\Program Files\QQ2005\SendMMS.htm, N/A>
[用比特精灵下载(&B)]
  <D:\下载花样\BT\BitSpirit\bsurl.htm, N/A>
[类似网页]
  <res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html, N/A>
[缓存的网页快照]
  <res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html, N/A>
[翻译英文字词(&T)]
  <res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html, N/A>

==================================
正在运行的进程
[PID: 536][\SystemRoot\System32\smss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 608][\??\C:\WINDOWS\system32\csrss.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 632][\??\C:\WINDOWS\system32\winlogon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 676][C:\WINDOWS\system32\services.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 688][C:\WINDOWS\system32\lsass.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 836][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 916][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1016][C:\WINDOWS\System32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1084][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1192][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1480][C:\WINDOWS\system32\spoolsv.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    [C:\WINDOWS\system32\EBPMON2.DLL]  [SEIKO EPSON CORPORATION, 2, 16, 0, 0]
    [C:\WINDOWS\system32\EBPMON24.DLL]  [SEIKO EPSON CORPORATION, 5, 3, 0, 0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DU15AE.DLL]  [SEIKO EPSON Corporation, 0.3.0.1]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DMAI13.DLL]  [SEIKO EPSON Corporation, 0. 3. 0. 5]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DU18VE.DLL]  [SEIKO EPSON Corporation, 0. 3. 0, 117]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DMAI16.DLL]  [SEIKO EPSON Corporation, 0. 3. 3. 17]
[PID: 1720][C:\WINDOWS\system32\E_S00RP1.EXE]  [SEIKO EPSON CORPORATION, 2.03]
[PID: 1772][D:\Program Files\McAfee\Common Framework\FrameworkService.exe]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\nailog.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\naXML71.dll]  [N/A, N/A]
    [D:\Program Files\McAfee\Common Framework\NaiSign.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\epoPGPSDK.dll]  [PGP Corporation, 3.5.3]
    [D:\Program Files\McAfee\Common Framework\naCmnLib71.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\applib.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\Logging.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\InternetManager.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\naInet.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\UserSpace.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\Management.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\cmalib.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\naPolicyManager.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\ScriptSubSys.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\UpdateSubSys.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\Scheduler.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\TCSubSys.dll]  [McAfee, Inc., 3.6.0.453]
[PID: 1832][D:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mytilus.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mytilus2.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\RES0402\McShield.dll]  [McAfee, Inc., VSCORE.13.3.1.100]
    [D:\Program Files\McAfee\VirusScan Enterprise\FTL.Dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\naiann.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\VsEvntUI.dll]  [N/A, N/A]
    [D:\Program Files\McAfee\VirusScan Enterprise\NAEvent.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\shutil.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\wmain.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\Common Framework\GenEvtInf.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\VirusScan Enterprise\scriptsv.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mfebopa.dll]  [McAfee, Inc., SYSCORE.13.3.0.116.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mfehida.dll]  [McAfee, Inc., SYSCORE.13.3.0.116.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mfeapfa.dll]  [McAfee, Inc., SYSCORE.13.3.0.116.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mfeavfa.dll]  [McAfee, Inc., SYSCORE.13.3.0.116.x86]
    [C:\Program Files\Common Files\McAfee\Engine\mcscan32.dll]  [McAfee, Inc., 5.1.00]
[PID: 1864][D:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mytilus2.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mytilus.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\shutil.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\wmain.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\condl.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\RES0402\McShield.dll]  [McAfee, Inc., VSCORE.13.3.1.100]
    [D:\Program Files\McAfee\VirusScan Enterprise\MIDUtil.Dll]  [McAfee, Inc., 8.5.0.148]
[PID: 1916][d:\Program Files\EduIQ.com\Advanced Net Monitor for Classroom Professional\NetObjectiveSvc.exe]  [N/A, N/A]
[PID: 1976][D:\Program Files\McAfee\Common Framework\naPrdMgr.exe]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\NaiSign.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\epoPGPSDK.dll]  [PGP Corporation, 3.5.3]
    [D:\Program Files\McAfee\Common Framework\naXML71.dll]  [N/A, N/A]
    [D:\Program Files\McAfee\Common Framework\nailog.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\naCmnLib71.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\applib.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\VirusScan Enterprise\VsPlugin.dll]  [McAfee, Inc., 8.5.0.781]
[PID: 220][C:\WINDOWS\system32\svchost.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 260][C:\WINDOWS\system32\wdfmgr.exe]  [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 1156][C:\WINDOWS\System32\alg.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1312][D:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\ftcfg.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\mytilus2.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\mytilus.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
    [D:\Program Files\McAfee\VirusScan Enterprise\wmain.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\shutil.dll]  [McAfee, Inc., 8.5.0.781]
    [D:\Program Files\McAfee\VirusScan Enterprise\RES0402\McShield.dll]  [McAfee, Inc., VSCORE.13.3.1.100]
    [D:\Program Files\McAfee\VirusScan Enterprise\Graphics.dll]  [McAfee, Inc., 8.5.0.781]
[PID: 1000][D:\Program Files\McAfee\Common Framework\UdaterUI.exe]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\nailog.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\naCmnLib71.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\naXML71.dll]  [N/A, N/A]
    [D:\Program Files\McAfee\Common Framework\NaiSign.DLL]  [N/A, N/A]
    [C:\WINDOWS\system32\epoPGPSDK.dll]  [PGP Corporation, 3.5.3]
    [D:\Program Files\McAfee\Common Framework\applib.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\cmalib.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\0409\UpdRes.dll]  [McAfee, Inc., 3.6.0.453]

3dmaxfor

[D:\Program Files\McAfee\Common Framework\0409\AgentRes.dll]  [McAfee, Inc., 3.6.0.453]
    [D:\Program Files\McAfee\Common Framework\SecureFrameworkFactory.dll]  [McAfee, Inc., 3.6.0.453]
[PID: 412][C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I3X1.EXE]  [SEIKO EPSON CORPORATION, 3.00]
[PID: 120][C:\WINDOWS\system32\ctfmon.exe]  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 276][D:\Program Files\McAfee\Common Framework\McTray.exe]  [McAfee, Inc., 1.0.0.125]
    [D:\Program Files\McAfee\Common Framework\JrMac.dll]  [McAfee, Inc., 1.0.0.125]
[PID: 1968][C:\Program Files\Skype\Phone\Skype.exe]  [N/A, N/A]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
[PID: 2288][C:\Program Files\Skype\Phone\ContentFilter.exe]  [TOM Online Inc., 1.0.2.0]
[PID: 2676][C:\Program Files\QQ2005\QQ.exe]  [TENCENT, 0, 0, 0, 0]
    [C:\Program Files\QQ2005\QQBaseClassInDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQHelperDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\BasicCtrlDll.dll]  [Tencent, 5, 0, 200, 160]
    [C:\Program Files\QQ2005\QQAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\LoginCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\npkcntc.dll]  [INCA Internet Co., Ltd., 2006, 3, 2, 1]
    [C:\Program Files\QQ2005\npkpdb.dll]  [INCA Internet Co., Ltd., 2003, 10, 1, 1]
    [C:\Program Files\QQ2005\QQRes.dll]  [tencent, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\WizardCtrl.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQMainFrame.dll]  [N/A, N/A]
    [C:\WINDOWS\system32\macromed\flash\flash.ocx]  [Macromedia, Inc., 6,0,79,0]
    [C:\Program Files\QQ2005\CQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\NewSkin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\HostingMgr.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\CameraDll.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\MailSummary.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQSpace.dll]  [, 1, 0, 0, 1]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQGroupMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\GroupLive.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\UserDefinedHead.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQPlugin.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQConfigPlugin.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQAllInOne.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\SCCore.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QRingMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\PhoneAPI.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\DialerAllinOne.dll]  [tencent, 1, 4, 0, 0]
    [C:\Program Files\QQ2005\LongConnection.dll]  [tencent, 5, 0, 200, 160]
    [C:\Program Files\QQ2005\QQPet.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\QQAvatar.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\FlashAvatarDll.dll]  [, 1, 4, 0, 1]
    [C:\Program Files\QQ2005\QQSysMsgMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\BQQApplication.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\CommercesMng.dll]  [, 1, 0, 0, 1]
    [C:\Program Files\QQ2005\PersonalDesktop.dll]  [深圳市腾讯计算机系统公司QQ工作小组, 1, 0, 0, 2]
    [C:\Program Files\QQ2005\QQUdpGetFileLib.dll]  [tencent, 0, 2, 2, 3]
    [C:\Program Files\QQ2005\QQAddr.dll]  [深圳市腾讯计算机系统有限公司, 5, 0, 101, 200]
    [C:\Program Files\QQ2005\QQSceneMng.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQPhoneHelper.dll]  [腾讯科技（深圳）有限公司, 2, 1, 5, 50]
    [C:\Program Files\QQ2005\ShareFiles.dll]  [N/A, N/A]
    [C:\Program Files\QQ2005\QQZip.dll]  [tencent, 0, 3, 2, 4]
    [C:\Program Files\QQ2005\QQCustomFace.dll]  [N/A, N/A]
[PID: 3388][C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE]  [Microsoft Corporation, 11.0.6355]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DU15AE.DLL]  [SEIKO EPSON Corporation, 0.3.0.1]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DMAI13.DLL]  [SEIKO EPSON Corporation, 0. 3. 0. 5]
[PID: 3072][C:\Program Files\Adobe\Photoshop 6.0\Photoshp.exe]  [Adobe Systems, Incorporated, 6.0.1]
    [C:\Program Files\Adobe\Photoshop 6.0\AGM.dll]  [Adobe Systems, Incorporated, 4.01.17]
    [C:\Program Files\Adobe\Photoshop 6.0\CoolType.dll]  [Adobe Systems, Incorporated, 4.01.17]
    [C:\Program Files\Adobe\Photoshop 6.0\BIB.dll]  [Adobe Systems, Incorporated, 1.0.12]
    [C:\Program Files\Adobe\Photoshop 6.0\ACE.dll]  [Adobe Systems, Incorporated, 1.01.10]
    [C:\Program Files\Adobe\Photoshop 6.0\Photoshop.dll]  [Adobe Systems, Incorporated, 6.0.1]
    [C:\Program Files\Adobe\Photoshop 6.0\PSViews.dll]  [Adobe Systems, Incorporated, 6.0.1]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DU15AE.DLL]  [SEIKO EPSON Corporation, 0.3.0.1]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DMAI13.DLL]  [SEIKO EPSON Corporation, 0. 3. 0. 5]
    [C:\Program Files\Adobe\Photoshop 6.0\Plug-Ins\Adobe Photoshop Only\Extensions\FastCore.8BX]  [Adobe Systems, Incorporated, 6.0.1]
    [C:\Program Files\Adobe\Photoshop 6.0\PLUGIN.dll]  [Adobe Systems, Incorporated, 6.0.1]
    [C:\Program Files\Adobe\Photoshop 6.0\Plug-Ins\Adobe Photoshop Only\Extensions\MMXCore.8BX]  [Adobe Systems, Incorporated, 6.0]
    [C:\Program Files\Adobe\Photoshop 6.0\Required\ADMPlugin.apl]  [Adobe Systems Incorporated, 2.81ps63 2001.02.06-1737h.47s]
    [C:\Program Files\Adobe\Photoshop 6.0\Plug-Ins\Parser\PDF 图像导入.8BI]  [Adobe Systems, Incorporated, 6.0]
    [C:\Program Files\Adobe\Photoshop 6.0\PDFL47.dll]  [Adobe Systems Incorporated, 4.7.000]
    [C:\Program Files\Common Files\Adobe\Web\AdobeWeb.dll]  [Adobe Systems Incorporated, 2,6,2,6]
    [C:\WINDOWS\twain_32.dll]  [Twain Working Group, 1,7,1,1]
    [C:\WINDOWS\system32\ATMLIB.dll]  [Adobe Systems, 5.1 Build 226]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DU18VE.DLL]  [SEIKO EPSON Corporation, 0. 3. 0, 117]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_DMAI16.DLL]  [SEIKO EPSON Corporation, 0. 3. 3. 17]
[PID: 3524][C:\Program Files\Common Files\Adobe\Web\AOM.exe]  [Adobe Systems, Incorporated, 2,6,2,6]
[PID: 2612][D:\下载花样\BT\BitSpirit\BitSpirit.exe]  [LANSPIRIT.NET, 3.2.2.122]
    [D:\下载花样\BT\BitSpirit\BSOPLIB.DLL]  [N/A, 1, 0, 0, 2]
    [D:\下载花样\BT\BitSpirit\plugin\tracker.dll]  [N/A, N/A]
[PID: 908][C:\WINDOWS\explorer.exe]  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    [D:\Program Files\McAfee\Common Framework\JrMac.dll]  [McAfee, Inc., 1.0.0.125]
    [C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll]  [Adobe Systems, Inc., 7.0.0.0]
    [D:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll]  [McAfee, Inc., VSCORE.13.3.1.100.x86]
[PID: 2708][C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10MT1.EXE]  [SEIKO EPSON CORPORATION, 3.07]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4E3X1.DLL]  [N/A, N/A]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S490X1.DLL]  [SEIKO EPSON CORPORATION, 3.10]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EBAPI4.DLL]  [SEIKO EPSON CORPORATION, 5, 1, 0, 0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EBPLPT4.DLL]  [SEIKO EPSON CORPORATION, 5, 2, 0, 0]
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EBPSHRE4.DLL]  [SEIKO EPSON CORPORATION, 1, 2, 0, 0]
[PID: 2248][C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\SAGENT4.EXE]  [SEIKO EPSON CORPORATION, 1, 7, 0, 0]
[PID: 3620][C:\Program Files\WinRAR\WinRAR.exe]  [N/A, N/A]
    [C:\WINDOWS\system32\msdmo.dll]  [N/A, N/A]
[PID: 3164][C:\DOCUME~1\new\LOCALS~1\Temp\Rar$EX01.782\SREng.EXE]  [Smallfrogs Studio, 2.3.13.690]

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS   OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
N/A

==================================
Autorun.inf
N/A

==================================
HOSTS 文件
N/A

==================================
API HOOK
N/A

==================================

3dmaxfor

没人知道吗?

小邪邪

Temp目录下东西没什么大碍，删掉就是了

这机器好象还装了卡巴和KV？