瑞星卡卡安全论坛

我是很郁闷啊,家里来亲戚就把IE给毁了
帮我看看
HijackThis_815汉化版扫描日志 V1.99.1
保存于      20:05:11, 日期 2006-2-3
操作系统：  Windows XP SP2, v.2135 (WinNT 5.01.2600)
浏览器：    Internet Explorer v6.00 SP2 (6.00.2900.2135)

当前运行的进程：         
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\KV2005\KVSrvXP.exe
D:\KV2005\kvwsc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\svchost.exe
D:\KV2005\KVMonXP_2.kxp
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
D:\KV2005\TrojDie_1.kxp
D:\KV2005\KRegEx.exe
C:\WINDOWS\system32\DllHost.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Program Files\HijackThis1991汉化版\HijackThis1991zww.exe

O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v13.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll (file missing)
O2 - BHO: Deliverer Class - {3E290290-1728-4C1E-863A-AA12526333F6} - C:\Program Files\CNet\ADDeliverer\ADDeliverer.dll
O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - C:\WINDOWS\System32\aclayer.dll (file missing)
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL (file missing)
O2 - BHO: BrowseHelper Class - {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} - D:\KV2005\KvShell_1.dll
O2 - BHO: Ad Class - {812886BE-AB50-4EAE-92CF-9AD63437E3EF} - C:\WINDOWS\SeAd\SeAd43a57b8b.dll (file missing)
O2 - BHO: HBObject Class - {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} - C:\PROGRA~1\HBClient\hbhelper.dll
O2 - BHO: IEHlprObj Class - {C5E5DB7E-46B1-47E6-8447-2E517F269925} - f:\Xplus\GETIE.dll (file missing)
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\CnsHook.dll
O3 - IE工具栏增项: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - IE工具栏增项: 江民杀毒工具栏 - {B5A34A93-D538-43A7-8371-864CB6148D12} - D:\KV2005\KvShell_1.dll
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [CnsMin] Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32
O4 - 启动项HKLM\\Run: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
O4 - 启动项HKLM\\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - 启动项HKLM\\Run: [nwiz] nwiz.exe /install
O4 - 启动项HKLM\\Run: [KvMonXP] "D:\KV2005\KVMonXP_2.kxp" /auto
O4 - 启动项HKLM\\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - 启动项HKLM\\Run: [RichMedia] C:\WINDOWS\system32\Rundll32.exe  "C:\PROGRA~1\HBClient\hbhelper.dll",WaitWindows
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载 - C:\Program Files\FlashGet\jc_link.htm
O8 - IE右键菜单中的新增项目: 使用网际快车下载全部链接 - C:\Program Files\FlashGet\jc_all.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Excel(&x) - res://D:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 解霸实时播放 - C:\HEROSOFT\Hero3000\MPURLGET.HTM
O9 - 浏览器额外的按钮: 手机短信 - {00000000-0000-0001-0001-596BAEDD1289} - http://sms.3721.com/ie/index.htm (file missing)
O9 - 浏览器额外的按钮: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - E:\浩方对战平台\GameClient.exe
O9 - 浏览器额外的按钮: 解霸 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\HEROSOFT\Hero3000\MPLAYER.EXE
O9 - 浏览器额外的“工具”菜单项: 超级解霸 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\HEROSOFT\Hero3000\MPLAYER.EXE
O9 - 浏览器额外的按钮: Yahoo 1G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.mail.yahoo.com/promo/rd1 (file missing)
O9 - 浏览器额外的按钮: 寻宝乐趣多 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://hot.3721.com/rd/shop_btn.htm (file missing)
O9 - 浏览器额外的按钮: 上网助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://assistant.3721.com/index.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing)
O9 - 浏览器额外的“工具”菜单项: 视频聊天 - {6924091F-CD97-41E1-B1D4-D9079409D413} - http://www.liantang.net (file missing)
O9 - 浏览器额外的按钮: 寻论网--中学作业解答 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing)
O9 - 浏览器额外的“工具”菜单项: 中学作业 - {6924091F-CD97-41E1-B1D4-D9079409D423} - http://www.xunlun.com (file missing)
O9 - 浏览器额外的按钮: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - 浏览器额外的“工具”菜单项: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - 浏览器额外的按钮: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - 浏览器额外的“工具”菜单项: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - 浏览器额外的按钮: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/ (file missing)
O9 - 浏览器额外的按钮: (no name) - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 修复浏览器 - {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} - http://assistant.3721.com/security1.htm?fb=Cns (file missing)
O9 - 浏览器额外的按钮: (no name) - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O9 - 浏览器额外的“工具”菜单项: 清理上网记录 - {FD00D911-7529-4084-9946-A29F1BDF4FE5} - http://assistant.3721.com/clean1.htm?fb=Cns (file missing)
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp.dll
O11 - Options group: [!CNS]  网络实名
O14 - IERESET.INF: START_PAGE_URL=about:blank
O16 - DPF: {0400AC1C-EEF0-4638-A501-31D5A0DC2002} (VTPlug3 Class) - http://61.152.96.82:1995/VTrans.cab
O16 - DPF: {2D4851FD-0BFE-11D4-9260-9AF666D52059} (GameX Class) - http://202.108.34.243/game/system/activex/gamex.cab
O16 - DPF: {48038521-20FB-11D8-BC64-00B0D07A8A19} (PortalCom Control 2.0) - http://221.208.250.138/PortalAX02.cab
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://61.152.96.82:1995/talk.cab
O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {991481A7-4669-4E15-8C24-100404E1F5CB} (Blueskyvoice Control) - http://www.bluesky.cn/download/blueskyvoice_60.cab
O16 - DPF: {ABA7CC7F-019D-47DB-A0D2-B3C2B3AC1B44} (Fc2Boot Class) - http://219.146.1.212/world/system/fc2boot.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0F7A589D-5E47-46D3-8268-A2DB22948E12}: NameServer = 219.150.32.132 219.146.0.130
O18 - 列举现有的协议: mbox - {7DEE9D05-FA0A-4416-A6F3-6537D0EAB6A6} - C:\WINDOWS\system32\mbprot.dll
O23 - NT 服务: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - NT 服务: KVSrvXP - JiangMin New Tech Ltd. - D:\KV2005\KVSrvXP.exe
O23 - NT 服务: KVWSC - Jiangmin Co.Ltd - D:\KV2005\kvwsc.exe
O23 - NT 服务: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

不过被www.58.com屏蔽的网址用ＱＱ或ＭＡＸＴＨＯＮ就没事，弄了一天都不好啊

卸载很棒小秘书/通行证
修复
O4 - 启动项HKLM\\Run: [RichMedia] C:\WINDOWS\system32\Rundll32.exe "C:\PROGRA~1\HBClient\hbhelper.dll",WaitWindows
删除C:\PROGRA~1\HBClient\hbhelper.dll
卸载 上网助手

哦 我试一下
我又用System Repair Engineer扫了一下

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows XP Professional Service Pack 2, v.2135 - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <CnsMin><Rundll32.exe C:\WINDOWS\DOWNLO~1\CnsMin.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <helper.dll><C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <nwiz><nwiz.exe /install>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <KvMonXP><"D:\KV2005\KVMonXP_2.kxp" /auto>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <NvMediaCenter><RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RichMedia><C:\WINDOWS\system32\Rundll32.exe  "C:\PROGRA~1\HBClient\hbhelper.dll",WaitWindows>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINDOWS\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  <BigDogPath><; C:\WINDOWS\VM_STI.EXE AVSTAR PC Camera AC-530>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  <YDTMain.exe><; C:\PROGRA~1\YDT\YDTMain.exe>

==================================
启动文件夹
服务
[InstallDriver Table Manager / IDriverT]
  <"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"><Macrovision Corporation>
[KVSrvXP / KVSrvXP]
  <D:\KV2005\KVSrvXP.exe -Service><JiangMin New Tech Ltd.>
[KVWSC / KVWSC]
  <"D:\KV2005\kvwsc.exe"><Jiangmin Co.Ltd>
[NVIDIA Display Driver Service / NVSvc]
  <C:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>

==================================

浏览器加载项
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v13.dll, Thunder Networking Technologies,LTD>
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <G:\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[Yahoo!Photo]
  {33BBE430-0E42-4f12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll, N/A>
[Deliverer Class]
  {3E290290-1728-4C1E-863A-AA12526333F6} <C:\Program Files\CNet\ADDeliverer\ADDeliverer.dll, N/A>
[Router Layer]
  {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} <C:\WINDOWS\System32\aclayer.dll, N/A>
[DragSearch BHO]
  {62EED7C6-9F02-42f9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL, N/A>
[BrowseHelper Class]
  {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <D:\KV2005\KvShell_1.dll, JiangMin Lmt>
[Ad Class]
  {812886BE-AB50-4EAE-92CF-9AD63437E3EF} <C:\WINDOWS\SeAd\SeAd43a57b8b.dll, N/A>
[HBObject Class]
  {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} <C:\PROGRA~1\HBClient\hbhelper.dll, Shanghai Henbang Technology Co., Ltd>
[IEHlprObj Class]
  {C5E5DB7E-46B1-47E6-8447-2E517F269925} <f:\Xplus\GETIE.dll, N/A>
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司>
[手机短信]
  {00000000-0000-0001-0001-596BAEDD1289} <http://sms.3721.com/ie/index.htm, N/A>
[浩方对战平台]
  {0A155D3C-68E2-4215-A47A-E800A446447A} <E:\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[解霸]
  {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\HEROSOFT\Hero3000\MPLAYER.EXE, N/A>
[Yahoo 1G电邮]
  {507F9113-CD77-4866-BA92-0E86DA3D0B97} <http://cn.mail.yahoo.com/promo/rd1, N/A>
[寻宝乐趣多]
  {59BC54A2-56B3-44a0-93E5-432D58746E26} <http://hot.3721.com/rd/shop_btn.htm, N/A>
[上网助手]
  {5D73EE86-05F1-49ed-B850-E423120EC338} <http://assistant.3721.com/index.htm?fb=Cns, N/A>
[视频聊天]
  {6924091F-CD97-41E1-B1D4-D9079409D413} <http://www.liantang.net, N/A>
[寻论网--中学作业解答]
  {6924091F-CD97-41E1-B1D4-D9079409D423} <http://www.xunlun.com, N/A>
[kele8]
  {84920E5F-3788-49cd-A274-E365578DF174} <http://www.kele8.com/, N/A>
[FlashGet]
  {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\flashget.exe, Amaze Soft>
[情景聊天]
  {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[]
  {ECF2E268-F28C-48d2-9AB7-8F69C11CCB71} <http://assistant.3721.com/security1.htm?fb=Cns, N/A>
[]
  {FD00D911-7529-4084-9946-A29F1BDF4FE5} <http://assistant.3721.com/clean1.htm?fb=Cns, N/A>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[江民杀毒工具栏]
  {B5A34A93-D538-43A7-8371-864CB6148D12} <D:\KV2005\KvShell_1.dll, JiangMin Lmt>
[VTPlug3 Class]
  {0400AC1C-EEF0-4638-A501-31D5A0DC2002} <C:\WINDOWS\Downloaded Program Files\VTrans3.dll, >
[Shockwave ActiveX Control]
  {166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINDOWS\system32\Macromed\Director\SwDir.dll, Macromedia, Inc.>
[GameX Class]
  {2D4851FD-0BFE-11D4-9260-9AF666D52059} <C:\WINDOWS\Downloaded Program Files\gamex.dll, 北京线线通科技开发有限公司>
[PortalCom Control 2.0]
  {48038521-20FB-11D8-BC64-00B0D07A8A19} <C:\WINDOWS\DOWNLO~1\PORTAL~1.OCX, Huawei Co. Ltd.>
[IMCv1 Control]
  {6924091F-CD97-41E1-B1D4-D9079409D413} <C:\PROGRA~1\LtUcx\1003\c0.dll, 北京莲塘软件技术有限公司 Liantang Software Tech. Inc. (http://www.lotuspond.com.cn)>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, >
[Blueskyvoice Control]
  {991481A7-4669-4E15-8C24-100404E1F5CB} <C:\WINDOWS\BLUESK~2.OCX, 蓝天工作室(http://www.bluesky.cn)>
[Fc2Boot Class]
  {ABA7CC7F-019D-47DB-A0D2-B3C2B3AC1B44} <C:\WINDOWS\Downloaded Program Files\fc2boot.dll, ±±??????í¨?????a·￠óD?T1???>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[ThunderIEHelper Class]
  {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v13.dll, Thunder Networking Technologies,LTD>
[Yahoo! Companion BHO]
  {02478D38-C3F9-4EFB-9B51-7695ECA05670} <, N/A>
[QuickTime Object]
  {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} <C:\WINDOWS\system32\QTPlugin.ocx, Apple Computer, Inc.>
[VTPlug3 Class]
  {0400AC1C-EEF0-4638-A501-31D5A0DC2002} <C:\WINDOWS\Downloaded Program Files\VTrans3.dll, >
[AcroIEHlprObj Class]
  {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <G:\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll, Adobe Systems Incorporated>
[CEnroll Class]
  {127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, Microsoft Corporation>
[Shockwave ActiveX Control]
  {166B1BCA-3F9C-11CF-8075-444553540000} <C:\WINDOWS\system32\Macromed\Director\SwDir.dll, Macromedia, Inc.>
[Windows Media Player]
  {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>

[DHTML Edit Control Safe for Scripting for IE5]
  {2D360201-FFF5-11D1-8D03-00A0C959BC0A} <C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx, Microsoft Corporation>
[GameX Class]
  {2D4851FD-0BFE-11D4-9260-9AF666D52059} <C:\WINDOWS\Downloaded Program Files\gamex.dll, 北京线线通科技开发有限公司>
[V2 Control]
  {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} <C:\WINDOWS\v2.ocx, 蓝天工作室(http://www.bluesky.cn)>
[RealPlayer RAM Download Handler]
  {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93} <C:\WINDOWS\System32\rmoc3260.dll, RealNetworks, Inc.>
[Tabular Data Control]
  {333C7BC4-460F-11D0-BC04-0080C7055A83} <C:\WINDOWS\system32\tdc.ocx, Microsoft Corporation>
[Yahoo!Photo]
  {33BBE430-0E42-4F12-B075-8D21ACB10DCB} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yphtb.dll, N/A>
[Deliverer Class]
  {3E290290-1728-4C1E-863A-AA12526333F6} <C:\Program Files\CNet\ADDeliverer\ADDeliverer.dll, N/A>
[HHCtrl Object]
  {41B23C28-488E-4E5C-ACE2-BB0BBABE99E8} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[PortalCom Control 2.0]
  {48038521-20FB-11D8-BC64-00B0D07A8A19} <C:\WINDOWS\DOWNLO~1\PORTAL~1.OCX, Huawei Co. Ltd.>
[Shell Name Space]
  {55136805-B2DE-11D1-B9F2-00A0C98BC547} <%SystemRoot%\system32\shdocvw.dll, N/A>
[FullCtrl Class]
  {59324688-BAB1-4EC0-999A-BFA50D3D4F1D} <, N/A>
[Router Layer]
  {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} <C:\WINDOWS\System32\aclayer.dll, N/A>
[DragSearch BHO]
  {62EED7C6-9F02-42F9-B634-98E2899E147B} <C:\PROGRA~1\Yahoo!\ASSIST~1\assist\YDRAGS~1.DLL, N/A>
[WUWebControl Class]
  {6414512B-B978-451D-A0D8-FCFDF33E833C} <C:\WINDOWS\system32\wuweb.dll, Microsoft Corporation>
[IMCv1 Control]
  {6924091F-CD97-41E1-B1D4-D9079409D413} <C:\PROGRA~1\LtUcx\1003\c0.dll, 北京莲塘软件技术有限公司 Liantang Software Tech. Inc. (http://www.lotuspond.com.cn)>
[Windows Media Player]
  {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VideoOcx Control]
  {6EC14D77-72E0-436D-8C04-3BEE5D75B2F1} <C:\PROGRA~1\SUPERMAN\VPCLIENT\VideoOcx.ocx, 超人科技>
[Active Desktop Mover]
  {72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, N/A>
[AxInputControl Class]
  {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, >
[ltmenu Class]
  {78C21EFD-53BA-406C-AF1A-33A38ABD3958} <C:\Program Files\LtUcx\1002\c0.dll, N/A>
[AutoLive]
  {7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2} <C:\Program Files\3721\AutoLive.dll, >
[BrowseHelper Class]
  {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <D:\KV2005\KvShell_1.dll, JiangMin Lmt>
[Ad Class]
  {812886BE-AB50-4EAE-92CF-9AD63437E3EF} <C:\WINDOWS\SeAd\SeAd43a57b8b.dll, N/A>
[Microsoft Web 浏览器]
  {8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[AxSubmitControl Class]
  {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL, >
[Blueskyvoice Control]
  {991481A7-4669-4E15-8C24-100404E1F5CB} <C:\WINDOWS\BLUESK~2.OCX, 蓝天工作室(http://www.bluesky.cn)>
[RealPlayer Stream Handler]
  {A1A41E11-91DB-4461-95CD-0C02327FD934} <C:\WINDOWS\System32\rmoc3260.dll, RealNetworks, Inc.>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\PROGRA~1\FlashGet\jccatch.dll, Amaze Soft>
[RMGetLicense Class]
  {A9FC132B-096D-460B-B7D5-1DB0FAE0C062} <C:\WINDOWS\system32\msnetobj.dll, Microsoft Corporation>
[Fc2Boot Class]
  {ABA7CC7F-019D-47DB-A0D2-B3C2B3AC1B44} <C:\WINDOWS\Downloaded Program Files\fc2boot.dll, ±±??????í¨?????a·￠óD?T1???>
[HBObject Class]
  {AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} <C:\PROGRA~1\HBClient\hbhelper.dll, Shanghai Henbang Technology Co., Ltd>
[Microsoft Scriptlet Component]
  {AE24FDAE-03C6-11D1-8B76-0080C744F389} <C:\WINDOWS\system32\mshtml.dll, Microsoft Corporation>
[SearchAssistantOC]
  {B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[江民杀毒工具栏]
  {B5A34A93-D538-43A7-8371-864CB6148D12} <D:\KV2005\KvShell_1.dll, JiangMin Lmt>
[Microsoft DirectAnimation Control]
  {B6FFC24C-7E13-11D0-9B47-00C04FC2F51D} <C:\WINDOWS\system32\danim.dll, Microsoft Corporation>
[3721]
  {B83FC273-3522-4CC6-92EC-75CC86678DA4} <C:\WINDOWS\Downloaded Program Files\CnsMin.dll, 北京三七二一科技有限公司>
[Blueskyvoice Control]
  {BA0F088C-72C1-475A-92F8-42391DEF6961} <C:\WINDOWS\BLUESK~1.OCX, 蓝天工作室(http://www.bluesky.cn)>
[IEHlprObj Class]
  {C5E5DB7E-46B1-47E6-8447-2E517F269925} <f:\Xplus\GETIE.dll, N/A>
[Adobe Acrobat Control for ActiveX]
  {CA8A9780-280D-11CF-A24D-444553540000} <G:\Adobe\ACROBA~1.0\Reader\ActiveX\pdf.ocx, Adobe Systems Incorporated>
[AUDIO__MID Moniker Class]
  {CD3AFA74-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__MP3 Moniker Class]
  {CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__WAV Moniker Class]
  {CD3AFA7B-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[AUDIO__X_MS_WMA Moniker Class]
  {CD3AFA84-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__MPEG Moniker Class]
  {CD3AFA89-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_ASF Moniker Class]
  {CD3AFA8F-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[VIDEO__X_MS_WMV Moniker Class]
  {CD3AFA94-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[IEHlprObj Class]
  {CE7C3CF0-4B15-11D1-ABED-709549C10000} <C:\WINDOWS\system32\qylhelper.dll, >
[RealPlayer G2 Control]
  {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} <C:\WINDOWS\System32\rmoc3260.dll, RealNetworks, Inc.>
[IEDown Class]
  {D0A29C6C-AA71-4423-8C4A-5998B774C448} <C:\WINDOWS\system32\GLIEDown2.dll, 联众公司>
[CnsHook Class]
  {D157330A-9EF3-49F8-9A67-4141AC41ADD4} <C:\WINDOWS\DOWNLO~1\CnsHook.dll, 北京三七二一科技有限公司>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8.ocx, Macromedia, Inc.>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FlashGet\fgiebar.dll, Amaze Soft>
[LocalLauncher Class]
  {E22BFF56-39F3-11D8-A0C7-000C6E7BB5AB} <C:\WINDOWS\system32\BROWSE~1.DLL, >
[&使用迅雷下载]
  <C:\Program Files\Thunder Network\Thunder\geturl.htm, N/A>
[&使用迅雷下载全部链接]
  <C:\Program Files\Thunder Network\Thunder\getallurl.htm, N/A>
[使用网际快车下载]
  <C:\Program Files\FlashGet\jc_link.htm, N/A>
[使用网际快车下载全部链接]
  <C:\Program Files\FlashGet\jc_all.htm, N/A>
[导出到 Microsoft Excel(&x)]
  <res://D:\MICROS~1\Office10\EXCEL.EXE/3000, N/A>
[解霸实时播放]
  <C:\HEROSOFT\Hero3000\MPURLGET.HTM, N/A>

==================================

正在运行的进程
[PID: 468][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
[PID: 524][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
[PID: 548][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
[PID: 592][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
[PID: 604][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 756][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
[PID: 812][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 880][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 924][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 980][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1292][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
    [C:\PROGRA~1\3721\alrex.dll]  <><1, 0, 0, 1>
    [C:\WINDOWS\DOWNLO~1\CnsHook.dll]  <北京三七二一科技有限公司><1, 0, 2, 4>
    [D:\KV2005\KvShell_1.dll]  <JiangMin Lmt><9, 0, 5, 1205>
    [D:\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [D:\KV2005\lang\Kvxp0804_1.lng]  <N/A><N/A>
    [D:\KV2005\APIImpl.dll]  <JiangMin Ltd.><9.0.0.500>
    [C:\WINDOWS\system32\nvcpl.dll]  <NVIDIA Corporation><6.14.10.8198>
    [C:\WINDOWS\system32\NVRSZHC.DLL]  <NVIDIA Corporation><6.14.10.8198>
    [C:\WINDOWS\system32\nvshell.dll]  <N/A><N/A>
    [G:\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll]  <Adobe Systems Incorporated><6.0.0.2003051500>
    [C:\Program Files\CNet\ADDeliverer\ADDeliverer.dll]  <N/A><0, 9, 9, 96>
[PID: 1432][D:\KV2005\KVSrvXP.exe]  <JiangMin New Tech Ltd.><9, 0, 5, 720>
    [D:\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [D:\KV2005\KVEnhD.dll]  <JiangMin Ltd.><9, 1, 5, 423>
    [D:\KV2005\KvSPI.dll]  <JiangMin New Tech. Ltd.><9, 0, 5, 720>
    [D:\KV2005\PProtect.dll]  <北京江民新科技术公司><1.0.121>
    [D:\KV2005\KVEnhP.dll]  <JiangMin Ltd.><9, 0, 5, 405>
    [D:\KV2005\KVEnhM.dll]  <JiangMin Ltd.><9.0.0.500>
    [D:\KV2005\KvSpiPS.dll]  <JiangMin Ltd.><9.0.0.501>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
    [D:\KV2005\KVEnhC.DLL]  <JiangMin Ltd.><9, 1, 5, 603>
    [D:\KV2005\KVEnhO.dll]  <JiangMin New Tech Ltd.><9, 0, 5, 507>
    [D:\KV2005\KVEnhS.dll]  <JiangMin New Tech Ltd.><9, 0, 5, 607>
    [D:\KV2005\KVEnhJ.dll]  <JiangMin New Tech. Ltd.><9, 1, 5, 508>
    [D:\KV2005\KVExtCab.dll]  <JiangMin New Tech. Ltd.><9, 0, 5, 621>
    [D:\KV2005\KVExtEml.dll]  <JiangMin New Tech. Ltd.><9, 0, 0, 503>
    [D:\KV2005\KVExtLZH.dll]  <N/A><N/A>
    [D:\KV2005\KvExtZip.dll]  <JiangMin Ltd.><9, 0, 5, 420>
    [D:\KV2005\KVExtZ.dll]  <Jiangmin New Tech.><9.1.0.503>
    [D:\KV2005\KVExtGz.dll]  <Jiangmin New Tech.><9, 0, 5, 420>
    [D:\KV2005\KVExtTar.dll]  <Jiangmin New Tech.><9, 0, 5, 420>
    [D:\KV2005\KvExtRar.dll]  <JiangMin Ltd.><9, 1, 0, 804>
    [D:\KV2005\KVEnhK.dll]  <JiangMin Ltd.><9, 1, 5, 507>
    [D:\KV2005\lang\PrivateCfg0804.lng]  <TODO: <Company name>><1.0.0.1>
[PID: 1444][D:\KV2005\kvwsc.exe]  <Jiangmin Co.Ltd><9, 0, 0, 502>
    [D:\KV2005\KVEnhP.dll]  <JiangMin Ltd.><9, 0, 5, 405>
[PID: 1556][C:\WINDOWS\system32\nvsvc32.exe]  <NVIDIA Corporation><6.14.10.8198>
[PID: 1672][C:\WINDOWS\system32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [C:\WINDOWS\DOWNLO~1\CnsMinIO.dll]  <北京三七二一科技有限公司><1, 0, 3, 4>
    [C:\WINDOWS\DOWNLO~1\cnsio.dll]  <北京三七二一科技有限公司><1, 0, 2, 5>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
    [C:\WINDOWS\DOWNLO~1\CnsMinEx.dll]  <国风因特软件(北京)有限公司><1, 0, 2, 4>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1732][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [D:\KV2005\KVMonXP_2.kxp]  <JiangMin Co.Ltd><9, 0, 5, 1205>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [D:\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [D:\KV2005\lang\Kvxp0804_1.lng]  <N/A><N/A>
    [D:\KV2005\GUIExt.dll]  <JiangMin Ltd.><9.0.0.501>
    [D:\KV2005\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
    [D:\KV2005\KVEnhP.dll]  <JiangMin Ltd.><9, 0, 5, 405>
    [D:\KV2005\KvSpiPS.dll]  <JiangMin Ltd.><9.0.0.501>
    [D:\KV2005\KvOffice.dll]  <JiangMin New Tech.><9.0.0.1213>
    [D:\KV2005\lang\KVOffice0804.lng]  <N/A><N/A>
    [D:\KV2005\VirusUpload.dll]  <N/A><2, 0, 0, 0>
    [D:\KV2005\lang\PrivateCfg0804.lng]  <TODO: <Company name>><1.0.0.1>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
    [D:\KV2005\PProtect.dll]  <北京江民新科技术公司><1.0.121>
[PID: 400][C:\WINDOWS\system32\Rundll32.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\PROGRA~1\HBClient\hbhelper.dll]  <Shanghai Henbang Technology Co., Ltd><1, 1, 3, 0>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
[PID: 408][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
[PID: 460][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>
    [D:\KV2005\TrojDie_1.kxp]  <Jiangmin Co.Ltd><9, 0, 5, 916>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [D:\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [D:\KV2005\lang\TrojDie0804.lng]  <N/A><N/A>
    [D:\KV2005\GUIExt.dll]  <JiangMin Ltd.><9.0.0.501>
    [D:\KV2005\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
    [D:\KV2005\PProtect.dll]  <北京江民新科技术公司><1.0.121>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
    [D:\KV2005\ComUIPS.dll]  <N/A><9. 5. 5. 20>
    [D:\KV2005\KVWPSet.dll]  <N/A><9, 0, 0, 505>
[PID: 1024][D:\KV2005\KRegEx.exe]  <Jiangmin><1.0.1.0413>
    [D:\KV2005\KRegEx.dll]  <N/A><N/A>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [D:\KV2005\KRegTrust.dll]  <Jiangmin Co.><1, 0, 0, 1>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
[PID: 1620][C:\WINDOWS\system32\DllHost.exe]  <Microsoft Corporation><5.1.2600.2135 (xpsp.040518-1812)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
    [D:\KV2005\ComUI.dll]  <Jiangmin Ltd.><9. 5. 5. 20>
    [D:\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [D:\KV2005\ComUIPS.dll]  <N/A><9. 5. 5. 20>
    [D:\KV2005\GUIExt.dll]  <JiangMin Ltd.><9.0.0.501>
    [D:\KV2005\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
[PID: 2540][C:\WINDOWS\system32\wuauclt.exe]  <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
[PID: 3700][D:\sreng2\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\WINDOWS\DOWNLO~1\CnsMin.dll]  <北京三七二一科技有限公司><1, 5, 2, 6>
    [C:\WINDOWS\HHelp.dll]  <N/A><N/A>
    [C:\WINDOWS\system32\KvWspXp.dll]  <JiangMin Ltd.><9, 0, 5, 324>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  Error. [超级解霸3000]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者
MSAFD Tcpip [TCP/IP]
    C:\WINDOWS\system32\KvWspXp.dll(JiangMin Ltd., KVWspXP)
MSAFD Tcpip [UDP/IP]
    C:\WINDOWS\system32\KvWspXp.dll(JiangMin Ltd., KVWspXP)
MSAFD Tcpip [RAW/IP]
    C:\WINDOWS\system32\KvWspXp.dll(JiangMin Ltd., KVWspXP)

==================================

修复
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<RichMedia><C:\WINDOWS\system32\Rundll32.exe "C:\PROGRA~1\HBClient\hbhelper.dll",WaitWindows>
[Deliverer Class]
{3E290290-1728-4C1E-863A-AA12526333F6} <C:\Program Files\CNet\ADDeliverer\ADDeliverer.dll, N/A>
[Router Layer]
{5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} <C:\WINDOWS\System32\aclayer.dll, N/A>
[Ad Class]
{812886BE-AB50-4EAE-92CF-9AD63437E3EF} <C:\WINDOWS\SeAd\SeAd43a57b8b.dll, N/A>
[HBObject Class]
{AE22AFE5-1EF4-4D25-9E23-D2825FB17DA1} <C:\PROGRA~1\HBClient\hbhelper.dll, Shanghai Henbang Technology Co., Ltd>
[IMCv1 Control]
{6924091F-CD97-41E1-B1D4-D9079409D413} <C:\PROGRA~1\LtUcx\1003\c0.dll, 北京莲塘软件技术有限公司 Liantang Software Tech. Inc. (http://www.lotuspond.com.cn)>

删除
C:\PROGRA~1\HBClient\整个目录
C:\WINDOWS\System32\aclayer.dll
C:\WINDOWS\SeAd\整个目录
C:\PROGRA~1\LtUcx\整个目录

卸载CNet

不好使,哎,还是重做系统吧

引用:

【望月之犀的贴子】不好使,哎,还是重做系统吧 ...........................

建议下载并使用ewido：

http://www.ewido.net/en/download/



图1、下载ewido
安装时，请注意以下几点问题：
1、安装时，为了方便您阅读相关细则，请注意调整安装时的语言选项（德语和英语）；



图2、语言选项
2、当安装进行到Additional Options时，请按图3所示的要求操作。



图3、安装进行到Additional Options的注意事项
安装完毕后，开始进行扫描工作：
1、打开ewido，点击主界面上的“更新”按钮，进行更新工作；
2、更新完毕后，点击主界面上的“扫描器”按钮，然后点击“Scan Settings”，按照图4所示的要求操作，设定完成后，按“确定”；



图4、Scan Settings
3、开始扫描。



图5、进行扫描
4、当ewido发现威胁存在时会发出警报，请选择处理方式，然后按“确定”；
5、ewido会根据用户的选择处理这些威胁，当清理失败时（一般该文件在临时文件夹中），ewido会询问您是否删除整个文件夹，请选择“否”；
6、以上工作全部完成后，请保存日志并贴上来。

鱼死网破,卡卡的彻底修复

现在暂时看来是安静了