之前中的病毒比较严重，现在帮我看看还有没有病毒，感谢！
用SRENG32扫描了一下：
[Copy to clipboard] [ - ]CODE:
2000-12-10,20:51:04
System Repair Engineer 2.5.16.900
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能
以下内容被选中：
所有的启动项目（包括注册表、启动文件夹、服务等）
浏览器加载项
正在运行的进程（包括进程模块信息）
文件关联
Winsock 提供者
Autorun.inf
HOSTS 文件
进程特权扫描
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [(Verified)Microsoft Windows Publisher]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [(Verified)Microsoft Windows Publisher]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [(Verified)Microsoft Windows Publisher]
<NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Windows Publisher]
<nwiz><nwiz.exe /install> []
<NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [(Verified)Microsoft Windows Publisher]
<SoundMan><SOUNDMAN.EXE> [(Verified)Microsoft Windows Hardware Compatibility Publisher]
<Anti-Spy Tools><D:\Program
Files\ast\AST.exe -min> [DSW Lab]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Publisher]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [N/A]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [N/A]
==================================
启动文件夹
N/A
==================================
服务
[Human Interface Device Access / HidServ][Stopped/Disabled]
<C:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
==================================
驱动程序
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
<system32\drivers\ALCXWDM.SYS><Realtek Semiconductor Corp.>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[nvatabus / nvatabus][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\nvatabus.sys><NVIDIA Corporation>
[NVIDIA Disk Cache Filter Driver / nvcchflt][Running/Boot Start]
<\SystemRoot\system32\DRIVERS\nvcchflt.sys><NVIDIA Corporation>
[NVIDIA nForce Networking Controller Driver / NVENETFD][Running/Manual Start]
<system32\DRIVERS\NVENETFD.sys><NVIDIA Corporation>
[NVIDIA Network Bus Enumerator / nvnetbus][Running/Manual Start]
<system32\DRIVERS\nvnetbus.sys><NVIDIA Corporation>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><N/A>
==================================
浏览器加载项
[CLDown Object]
{0BECAB3A-E1F8-45E6-8332-38DD750EBA01} <D:\Tuotu\TuoTuHelper.dll, N/A>
[脱兔下载]
{D5C1CCC2-811B-4bf2-BF22-0D3B89600F5B} <D:\Tuotu\TuoTu.exe, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[CLDown Object]
{0BECAB3A-E1F8-45E6-8332-38DD750EBA01} <D:\Tuotu\TuoTuHelper.dll, N/A>
[使用脱兔下载]
<D:\Tuotu\TT_one.htm, N/A>
[使用脱兔下载全部链接]
<D:\Tuotu\TT_all.htm, N/A>
==================================
正在运行的进程
[PID: 608 / SYSTEM][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 672 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 696 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 740 / SYSTEM][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 752 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 900 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 948 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1044 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1100 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1192 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1560 / user][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.8265]
[C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.8265]
[C:\WINDOWS\system32\nvshell.dll] [, ]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[PID: 1632 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1872 / user][C:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.10.8265]
[C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.8265]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[PID: 1880 / user][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.0.39]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[PID: 1888 / user][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[PID: 1728 / user][D:\Program Files\ast\AST.exe] [DSW Lab, 1, 8, 6, 0]
[D:\Program Files\ast\dbghelp.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\ast\MFC80.DLL] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\ast\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\ast\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\ast\MFC80CHS.DLL] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\ast\common.dll] [DSW Lab, 1.4.0.7]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[D:\Program Files\ast\AutoRun.dll] [ DSW Lab, 2.2.2.1]
[D:\Program Files\ast\EngineSDK.dll] [DSW Lab, 2.2.1.23]
[D:\Program Files\ast\FileAnalyser.dll] [DSW Lab , 1.0.1.7]
[D:\Program Files\ast\KillModule.dll] [DSW Lab, 1.2.2.1]
[D:\Program Files\ast\ManagerProcess.dll] [DSW Lab, 1.3.4.1]
[D:\Program Files\ast\ManagerService.dll] [DSW Lab, 1.0.6.0]
[D:\Program Files\ast\Monitor.dll] [DSW Lab, 1.7.8.12]
[D:\Program Files\ast\PortAssociate.dll] [DSW Lab, 1.0.3.0]
[D:\Program Files\ast\SSDT.dll] [DSW Lab, 1.0.2.1]
[D:\Program Files\ast\StateViewer.dll] [DSW Lab, 1.0.0.1]
[D:\Program Files\ast\TIERepair.dll] [Secward , 1.2.2.0]
[D:\Program Files\ast\aScanCom.dll] [DSW Lab, 2.1.1.27]
[D:\Program Files\ast\msvcm80.dll] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\ast\sm.dll] [DSW Lab, 1.0.0.1]
[D:\Program Files\ast\smart.dll] [DSW Lab, 1.0.0.17]
[D:\Program Files\ast\tRubbishClear.dll] [Secward , 1.5.2.2]
[D:\Program Files\ast\tSecurityOptimize.dll] [DSW Lab, 1.1.0.6]
[D:\Program Files\ast\unarc.dll] [DSW Lab, 1.2.5]
[D:\Program Files\ast\zDiagnosticTool.dll] [Secward , 1.2.1.0]
[D:\Program Files\ast\MScaner.dll] [DSW Lab, 1.0.0.11]
[D:\Program Files\ast\SKEngine.dll] [DSW Lab, 1.6.5.10]
[PID: 1484 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8265]
[PID: 1796 / user][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[PID: 2204 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2836 / user][D:\TheWorldFull\TheWorldFull\TheWorld.exe] [Phoenix Studio, 1, 2, 3, 5]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[D:\THEWOR~1\THEWOR~1\Plugin\SysState\SysState.dll] [Phoenix Stdio, 1, 0, 0, 4]
[C:\WINDOWS\system32\macromed\flash\flash.ocx] [Macromedia, Inc., 6,0,79,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 992 / user][D:\Personal\Temp\Rar$EX03.375\arswp2\ArSwp.exe] [ArSwp.com, 2, 4, 2, 1118]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[D:\Personal\Temp\Rar$EX03.375\arswp2\plugin\ArFix.dll] [ArSwp.Com, 2, 3, 4, 0]
[PID: 3660 / NETWORK SERVICE][C:\WINDOWS\system32\wbem\wmiprvse.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2608 / SYSTEM][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3304 / user][D:\Personal\Temp\Rar$EX32.906\SREngPS.EXE] [Smallfrogs Studio, 2.5.16.900]
[D:\Program Files\ast\AST.dll] [DSW Lab, 1.0.0.5]
[D:\Personal\Temp\Rar$EX32.906\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
进程特权扫描
特殊特权被允许： SeDebugPrivilege [PID = 1728, D:\PROGRAM FILES\AST\AST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 1728, D:\PROGRAM FILES\AST\AST.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 2836, D:\THEWORLDFULL\THEWORLDFULL\THEWORLD.EXE]
特殊特权被允许： SeLoadDriverPrivilege [PID = 992, D:\PERSONAL\TEMP\RAR$EX03.375\ARSWP2\ARSWP.EXE]
==================================
API HOOK
入口点错误：CreateProcessW (危险等级: 高, 被下面模块所HOOK: D:\Program Files\ast\AST.dll)
==================================
隐藏进程
N/A
==================================
