userinit.exe是病毒吗？大虾来帮助下 谢谢

.Ozn959 C:\WINDOWS\system32\userinit.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon 这个是SREng发现的启动项目中的东西 说可能是病毒 2006-12-15,18:23:39 System Repair Engineer 2.2.6.605 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 1 (Build 2600) - 管理权限用户 - 完整功能 以下内容被选中： 　 　 所有的启动项目（包括注册表、启动文件夹、服务等） 　 　 浏览器加载项 　 　 正在运行的进程（包括进程模块信息） 　 　 文件关联 　 　 Winsock 提供者 　 　 Autorun.inf 　 　 HOSTS 文件 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] 　 　 ＜ctfmon.exe＞＜C:\WINDOWS\System32\ctfmon.exe＞　[(Verified)Microsoft Corporation] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] 　 　 ＜load＞＜＞　[N/A]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] 　 　 ＜IMJPMIG8.1＞＜＂C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE＂ /Spoil /RemAdvDef /Migration32＞　[(Verified)Microsoft Corporation] 　 　 ＜PHIME2002ASync＞＜C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC＞　[(Verified)Microsoft Corporation] 　 　 ＜PHIME2002A＞＜C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName＞　[(Verified)Microsoft Corporation] 　 　 ＜kav＞＜＂C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe＂＞　[Kaspersky Lab] 　 　 ＜SoundMan＞＜SOUNDMAN.EXE＞　[Realtek Semiconductor Corp.] 　 　 ＜NvCplDaemon＞＜RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup＞　[(Verified)NVIDIA Corporation] 　 　 ＜nwiz＞＜nwiz.exe /install＞　[N/A] 　 　 ＜NvMediaCenter＞＜RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit＞　[(Verified)NVIDIA Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]

　 　 ＜shell＞＜Explorer.exe＞　[(Verified)Microsoft Corporation] (www.dngz.net)版权所有 　 　 ＜Userinit＞＜C:\WINDOWS\system32\userinit.exe＞　[(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] 　 　 ＜AppInit_DLLs＞＜＞　[N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 　 　 ＜UIHost＞＜logonui.exe＞　[(Verified)Microsoft Corporation] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon] 　 　 ＜WinlogonNotify: klogon＞＜C:\WINDOWS\System32\klogon.dll＞　[Kaspersky Lab] ================================== 启动文件夹 N/A ================================== 服务 [卡巴斯基反病毒6.0 / AVP] 　＜C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe -r＞＜Kaspersky Lab＞ [Human Interface Device Access / HidServ] 　＜C:\WINDOWS\System32\svchost.exe -k netsvcs--＞%SystemRoot%\System32\hidserv.dll＞＜N/A＞ [NVIDIA Display Driver Service / NVSvc] 　＜C:\WINDOWS\System32\nvsvc32.exe＞＜NVIDIA Corporation＞ ================================== 驱动程序 [Service for WDM 3D Audio Driver / ALCXSENS] 　＜system32\drivers\ALCXSENS.SYS＞＜Sensaura Ltd＞ [Service for Realtek AC97 Audio (WDM) / ALCXWDM] 　＜system32\drivers\ALCXWDM.SYS＞＜Realtek Semiconductor Corp.＞ [kl1 / kl1] 　＜\SystemRoot\System32\drivers\kl1.sys＞＜Kaspersky Lab＞ [klif / klif] 　＜\？\C:\WINDOWS\System32\drivers\klif.sys＞＜Kaspersky Lab＞ [npkcrypt / npkcrypt] 　＜\？\F:\QQ\npkcrypt.sys＞＜INCA Internet Co., Ltd.＞ [nv / nv] 　＜System32\DRIVERS\nv4_mini.sys＞＜NVIDIA Corporation＞ [Direct Parallel Link Driver / Ptilink] 　＜System32\DRIVERS\ptilink.sys＞＜Parallel Technologies, Inc.＞ [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139] 　＜System32\DRIVERS\RTL8139.SYS＞＜Realtek Semiconductor Corporation＞ 本文来自 www.dngz.net [Secdrv / Secdrv] 　＜System32\DRIVERS\secdrv.sys＞＜N/A＞ [TSP / TSP] 　＜\？\C:\WINDOWS\system32\drivers\klif.sys＞＜Kaspersky Lab＞ ================================== 浏览器加载项 [Thunder Browser Helper] 　{889D2FEB-5411-4565-8998-1DD2C5261283} ＜F:\迅雷\Thunder\ComDlls\XunLeiBHO_001.dll, Thunder Networking Technologies,LTD＞ [Web反病毒保护] 　{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} ＜C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll, Kaspersky Lab＞ [@shdoclc.dll,-866] 　{c95fe080-8f5d-11d2-a20b-00aa003c157a} ＜, N/A＞ [QQ] 　{c95fe080-8f5d-11d2-a20b-00aa003c157b} ＜F:\QQ\QQ.EXE, TENCENT＞ [电台(＆R)] 　{8E718888-423F-11D2-876E-00A0C9082467} ＜C:\WINDOWS\System32\msdxm.ocx, Microsoft Corporation＞ [Shockwave Flash Object] 　{D27CDB6E-AE6D-11CF-96B8-444553540000} ＜C:\WINDOWS\System32\macromed\flash\Flash.ocx, Macromedia, Inc.＞ [上传到QQ网络硬盘] 　＜F:\QQ\AddToNetDisk.htm, N/A＞ [使用迅雷下载] 　＜F:\迅雷\Thunder\Program\GetUrl.htm, N/A＞ [使用迅雷下载全部链接] 　＜F:\迅雷\Thunder\Program\GetAllUrl.htm, N/A＞ [添加到QQ自定义面板] 　＜F:\QQ\AddPanel.htm, N/A＞ [添加到QQ表情] 　＜F:\QQ\AddEmotion.htm, N/A＞ [用QQ彩信发送该图片] 　＜F:\QQ\SendMMS.htm, N/A＞ ================================== 正在运行的进程 [PID: 492][\SystemRoot\System32\smss.exe]　[Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 560][\？\C:\WINDOWS\system32\csrss.exe]　[Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 584][\？\C:\WINDOWS\system32\winlogon.exe]　[Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] 　 　 [C:\WINDOWS\System32\klogon.dll]　[Kaspersky Lab, 6.0.0.299] [PID: 628][C:\WINDOWS\system32\services.exe]　[Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]

本文来自(www.dngz.net)

[PID: 640][C:\WINDOWS\system32\lsass.exe]　[Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 816][C:\WINDOWS\system32\svchost.exe]　[Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 868][C:\WINDOWS\System32\svchost.exe]　[Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 944][C:\WINDOWS\System32\svchost.exe]　[Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 956][C:\WINDOWS\System32\svchost.exe]　[Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] [PID: 1276][C:\WINDOWS\Explorer.EXE]　[Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)] 　 　 [C:\WINDOWS\System32\nvcpl.dll]　[NVIDIA Corporation, 6.14.10.8198] 　 　 [C:\WINDOWS\System32\NVRSZHC.DLL]　[NVIDIA Corporation, 6.14.10.8198] 　 　 [C:\WINDOWS\System32\nvshell.dll]　[N/A, N/A] 　 　 [F:\迅雷\Thunder\ComDlls\XunLeiBHO_001.dll]　[Thunder Networking Technologies,LTD, 5, 0, 0, 1] 　 　 [C:\Program Files\WinRAR\rarext.dll]　[N/A, N/A] [PID: 1292][C:\WINDOWS\system32\spoolsv.exe]　[Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)] [PID: 1436][C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe]　[Kaspersky Lab, 6.0.0.299] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]　[Kaspersky Lab, 6.0.0.299] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\FSSync.dll]　[Kaspersky Lab, 6.0.5.0] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\AVPGS.PPL]　[Kaspersky Lab, 6.0.0.299] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]　[Kaspersky Lab, 6.0.0.299] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]　[Kaspersky Lab, 6.0.0.299] 本文来自(www.dngz.net)

　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\winreg.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avpgui.ppl]　[Kaspersky Lab, 6.0.0.300] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\basegui.dll]　[Kaspersky Lab, 6.0.0.300] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\thpimpl.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\qb.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\inflate.ppl]　[Kaspersky Lab, 6.0.0.16] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\report.ppl]　[Kaspersky Lab, 6.0.0.299] [PID: 1444][C:\WINDOWS\SOUNDMAN.EXE]　[Realtek Semiconductor Corp., 5.1.11] [PID: 1484][C:\WINDOWS\System32\ctfmon.exe]　[Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 1984][C:\WINDOWS\System32\nvsvc32.exe]　[NVIDIA Corporation, 6.14.10.8198] [PID: 608][C:\DOCUME~1\zkr\LOCALS~1\Temp\Rar$EX00.172\SREng\SREng.exe]　[Smallfrogs Studio, 2.2.6.605] 　 　 [C:\DOCUME~1\zkr\LOCALS~1\Temp\Rar$EX00.172\SREng\Plugins\SRECXTMG.SRE]　[Smallfrogs Studio, 1, 5, 0, 55] [PID: 292][C:\WINDOWS\regedit.exe]　[Microsoft Corporation, 5.1.2600.1106 (xpsp1.020828-1920)] [PID: 2024][C:\Program Files\Internet Explorer\IEXPLORE.EXE]　[Microsoft Corporation, 6.00.2800.1106 (xpsp1.020828-1920)] 　 　 [F:\迅雷\Thunder\ComDlls\XunLeiBHO_001.dll]　[Thunder Networking Technologies,LTD, 5, 0, 0, 1] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scr_ch_pg.dll]　[Kaspersky Lab, 1.0.6.299] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll]　[Kaspersky Lab, 6.0.0.299]

(www.dngz.net)为您排除一切电脑故障

　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\pr_remote.dll]　[Kaspersky Lab, 6.0.0.299] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll]　[Kaspersky Lab, 6.0.0.299] 　 　 [C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prkernel.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\params.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\pxstub.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\tempfile.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\nfio.ppl]　[Kaspersky Lab, 6.0.0.299] 　 　 [c:\program files\kaspersky lab\kaspersky anti-virus 6.0\fsdrvplgn.ppl]　[Kaspersky Lab, 6.0.0.299] [PID: 968][C:\WINDOWS\System32\svchost.exe]　[Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)] ================================== 文件关联 .TXT　OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE　OK. [＂%1＂ %*] .COM　OK. [＂%1＂ %*] .PIF　OK. [＂%1＂ %*] .REG　OK. [regedit.exe ＂%1＂] .BAT　OK. [＂%1＂ %*] .SCR　OK. [＂%1＂ /S] .CHM　Error. [＂hh.exe＂ %1] .HLP　Error. [winhlp32.exe %1] .INI　OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF　OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS　OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*] .JS　OK. [%SystemRoot%\System32\WScript.exe ＂%1＂ %*] .LNK　OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1　 　 　 localhost ================================== 大虾帮忙瞧瞧 有什么问题 怎么解决 谢谢

(www.dngz.net)为您排除一切电脑故障

这个是系统文件　没有的话重启后就会加载注销　进入不了系统 路径是对的

不是病毒....放心

那我进程里面怎么没有这个进程啊？

他是管理不同的启动顺序　加载完后自然就没有啦

好,帮顶一下......