怎么删掉stdie.dll bbs.ikaka.com

西西吖吖 - 2006-7-4 8:35:00

用江民扫描未知病毒发现了这个.不过删不掉.提示重启删除还是不行.在windows目录里的.平时会弹出一些广告.里面还找到一个about的东西.是八百搜迷你主页.平时也会弹出这个.
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
<run><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<KvMonXP><"C:\Program Files\KV2005\KVMonXP.kxp" /auto> [JiangMin Co.Ltd]
<KernelFaultCheck><%systemroot%\system32\dumprep 0 -k> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><> []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<afw5khop><; RunDll32 "C:\WINDOWS\Downlo~1\afw5khop.dll",Run> []
<ATICardInit><; VideoAti0.exe> []
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><; C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<ez2aa><; RunDll32 "C:\WINDOWS\Downlo~1\ez2aa.dll",Run> [Microsoft Corporation]
<haqekjb5><; RunDll32 "C:\WINDOWS\Downlo~1\haqekjb5.dll",Run> [Microsoft Corporation]
<jmjot5yj><; RunDll32 "C:\WINDOWS\Downlo~1\jmjot5yj.dll",Run> [Microsoft Corporation]
<KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k> []
<Lcc><; C:\Program Files\Lenovo\联想键盘驱动\LCC.exe> []
<lchf><; RunDll32 "C:\WINDOWS\Downlo~1\oycegq.dll",Run> [Microsoft Corporation]
<LHotkey><; LHotkey.exe> [Chicony]
<nhmk><; RunDll32 "C:\WINDOWS\Downlo~1\nhmk.dll",Run> [Microsoft Corporation]
<rlnuo5l><; RunDll32 "C:\WINDOWS\Downlo~1\rlnuo5l.dll",Run> [Microsoft Corporation]
<SoundMan><; SOUNDMAN.EXE> [Realtek Semiconductor Corp.]
<VTTimer><; VTTimer.exe> []

西西吖吖 - 2006-7-4 8:36:00

启动文件夹
服务
[KVSrvXP / KVSrvXP]
<C:\PROGRA~1\KV2005\KVSrvXP.exe -Service><JiangMin New Tech Ltd.>
[KVWSC / KVWSC]
<"C:\Program Files\KV2005\kvwsc.exe"><Jiangmin Co.Ltd>
浏览器加载项
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, N/A>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt>
[Alexa]
{3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[CEnroll Class]
{127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[IE Browser Helper]
{3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\xe3x.dll, N/A>
[Alexa]
{3CEFF6CD-6F08-4E4D-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[超级兔子上网精灵]
{43869BB3-22FD-4F15-9B46-238106BA2F4E} <, N/A>
[HHCtrl Object]
{52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[IHiu Class]
{67A06BB1-027B-4E94-8C3D-2DCD5E808A28} <C:\WINDOWS\system32\Services.dll, N/A>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[超级兔子上网精灵]
{7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <, N/A>
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt>
[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[PhotoUploadCtrl Control]
{A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <d:\PROGRA~1\Tencent\qq\QZONE\PHOTOU~1.OCX, tencent>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[internet explorer helper]
{F7911E65-B01C-4A58-AEC7-53085ECA70A5} <C:\WINDOWS\system32\msshapi.dll, N/A>
[上传到QQ网络硬盘]
<D:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<D:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\Program Files\Tencent\qq\SendMMS.htm, N/A>

西西吖吖 - 2006-7-4 8:37:00

正在运行的进程
[PID: 552][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 608][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 632][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 676][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 688][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 844][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 908][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1036][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1096][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1232][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1456][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620>
[PID: 1552][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\KV2005\KvShell_1.dll] <JiangMin Lmt><9, 0, 5, 1205>
[C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A>
[C:\Program Files\KV2005\APIImpl.dll] <JiangMin Ltd.><9.0.0.500>
[C:\WINDOWS\stdie.dll] <><1, 0, 0, 2>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\KV2005\KVMonXP.kxp] <JiangMin Co.Ltd><9, 2, 0, 60118>
[C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A>
[C:\Program Files\KV2005\GUIExt.dll] <JiangMin Ltd.><9.0.0.501>
[C:\Program Files\KV2005\lang\GUIExt0804.lng] <JiangMin Ltd.><7, 1, 0, 200>
[C:\Program Files\KV2005\KVEnhP.dll] <JiangMin Ltd.><9, 0, 5, 405>
[C:\Program Files\KV2005\KvSpiPS.dll] <JiangMin Ltd.><9.0.0.501>
[C:\Program Files\KV2005\KvOffice.dll] <JiangMin New Tech.><9.0.0.1213>
[C:\Program Files\KV2005\lang\KVOffice0804.lng] <N/A><N/A>
[C:\Program Files\KV2005\VirusUpload.dll] <N/A><2, 0, 0, 0>
[C:\Program Files\KV2005\PProtect.dll] <北京江民新科技术公司><1.0.121>
[PID: 1004][C:\PROGRA~1\KV2005\KVSrvXP.exe] <JiangMin New Tech Ltd.><9, 0, 5, 720>
[C:\PROGRA~1\KV2005\UpdateX.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\KVEnhD.dll] <JiangMin Ltd.><9, 1, 5, 423>
[C:\Program Files\KV2005\KvSPI.dll] <JiangMin New Tech. Ltd.><9, 0, 5, 720>
[C:\PROGRA~1\KV2005\PProtect.dll] <北京江民新科技术公司><1.0.121>
[C:\Program Files\KV2005\KVEnhP.dll] <JiangMin Ltd.><9, 0, 5, 405>
[C:\Program Files\KV2005\KVEnhM.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\KvSpiPS.dll] <JiangMin Ltd.><9.0.0.501>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[C:\Program Files\KV2005\KVEnhC.DLL] <JiangMin Ltd.><9, 1, 5, 603>
[C:\Program Files\KV2005\KVEnhO.dll] <JiangMin New Tech Ltd.><9, 0, 5, 507>
[C:\Program Files\KV2005\KVEnhS.dll] <JiangMin New Tech Ltd.><9, 0, 5, 607>
[C:\Program Files\KV2005\KVEnhJ.dll] <JiangMin New Tech. Ltd.><9, 1, 5, 508>
[C:\Program Files\KV2005\KVExtLZH.dll] <N/A><N/A>
[C:\Program Files\KV2005\KVExtCab.dll] <JiangMin New Tech. Ltd.><9, 0, 5, 621>
[C:\Program Files\KV2005\KVExtEml.dll] <JiangMin New Tech. Ltd.><9, 0, 0, 503>
[C:\Program Files\KV2005\KvExtRar.dll] <JiangMin Ltd.><9, 1, 0, 804>
[C:\Program Files\KV2005\KvExtZip.dll] <JiangMin Ltd.><9, 0, 5, 420>
[C:\Program Files\KV2005\KVExtZ.dll] <Jiangmin New Tech.><9.1.0.503>
[C:\Program Files\KV2005\KVExtGz.dll] <Jiangmin New Tech.><9, 0, 5, 420>
[C:\Program Files\KV2005\KVExtTar.dll] <Jiangmin New Tech.><9, 0, 5, 420>
[C:\Program Files\KV2005\KVEnhK.dll] <JiangMin Ltd.><9, 1, 5, 507>
[C:\Program Files\KV2005\lang\PrivateCfg0804.lng] <TODO: <Company name>><1.0.0.1>
[PID: 1020][C:\Program Files\KV2005\kvwsc.exe] <Jiangmin Co.Ltd><9, 0, 0, 502>
[C:\Program Files\KV2005\KVEnhP.dll] <JiangMin Ltd.><9, 0, 5, 405>
[PID: 152][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 420][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\KV2005\KvShell_1.dll] <JiangMin Lmt><9, 0, 5, 1205>
[C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A>
[C:\Program Files\KV2005\APIImpl.dll] <JiangMin Ltd.><9.0.0.500>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[PID: 1892][C:\DOCUME~1\lenovo\LOCALS~1\Temp\Rar$EX00.063\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

西西吖吖 - 2006-7-4 8:38:00

HijackThis_815汉化版扫描日志 V1.99.1
保存于 8:28:58, 日期 2006-7-4
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\KV2005\KVMonXP.kxp
C:\PROGRA~1\KV2005\KVSrvXP.exe
C:\Program Files\KV2005\kvwsc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\lenovo\LOCALS~1\Temp\Rar$EX00.640\HijackThis1991zww.exe

O2 - BHO: BrowseHelper Class - {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} - C:\Program Files\KV2005\KvShell_1.dll
O3 - IE工具栏增项: 江民杀毒工具栏 - {B5A34A93-D538-43A7-8371-864CB6148D12} - C:\Program Files\KV2005\KvShell_1.dll
O3 - IE工具栏增项: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O3 - IE工具栏增项: (no name) - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - (no file)
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [KvMonXP] "C:\Program Files\KV2005\KVMonXP.kxp" /auto
O4 - 启动项HKLM\\Run: [KernelFaultCheck] ; %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [afw5khop] ; RunDll32 "C:\WINDOWS\Downlo~1\afw5khop.dll",Run
O4 - 启动项HKLM\\Run: [ATICardInit] ; VideoAti0.exe
O4 - 启动项HKLM\\Run: [ez2aa] ; RunDll32 "C:\WINDOWS\Downlo~1\ez2aa.dll",Run
O4 - 启动项HKLM\\Run: [haqekjb5] ; RunDll32 "C:\WINDOWS\Downlo~1\haqekjb5.dll",Run
O4 - 启动项HKLM\\Run: [jmjot5yj] ; RunDll32 "C:\WINDOWS\Downlo~1\jmjot5yj.dll",Run
O4 - 启动项HKLM\\Run: [Lcc] ; C:\Program Files\Lenovo\联想键盘驱动\LCC.exe
O4 - 启动项HKLM\\Run: [lchf] ; RunDll32 "C:\WINDOWS\Downlo~1\oycegq.dll",Run
O4 - 启动项HKLM\\Run: [LHotkey] ; LHotkey.exe
O4 - 启动项HKLM\\Run: [nhmk] ; RunDll32 "C:\WINDOWS\Downlo~1\nhmk.dll",Run
O4 - 启动项HKLM\\Run: [rlnuo5l] ; RunDll32 "C:\WINDOWS\Downlo~1\rlnuo5l.dll",Run
O4 - 启动项HKLM\\Run: [SoundMan] ; SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [VTTimer] ; VTTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] ; C:\WINDOWS\system32\ctfmon.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Program Files\Tencent\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Program Files\Tencent\qq\SendMMS.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE (file missing)
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{6808BDD8-32DB-40B3-8CB5-A6BB8EA17EC4}: NameServer = 218.85.157.99 202.101.112.55
O23 - NT 服务: KVSrvXP - JiangMin New Tech Ltd. - C:\PROGRA~1\KV2005\KVSrvXP.exe
O23 - NT 服务: KVWSC - Jiangmin Co.Ltd - C:\Program Files\KV2005\kvwsc.exe

黑灯黑火 - 2006-7-4 8:55:00

O4 - 启动项HKLM\\Run: [afw5khop] ; RunDll32 "C:\WINDOWS\Downlo~1\afw5khop.dll",Run
O4 - 启动项HKLM\\Run: [ez2aa] ; RunDll32 "C:\WINDOWS\Downlo~1\ez2aa.dll",Run
O4 - 启动项HKLM\\Run: [haqekjb5] ; RunDll32 "C:\WINDOWS\Downlo~1\haqekjb5.dll",Run
O4 - 启动项HKLM\\Run: [jmjot5yj] ; RunDll32 "C:\WINDOWS\Downlo~1\jmjot5yj.dll",Run
O4 - 启动项HKLM\\Run: [lchf] ; RunDll32 "C:\WINDOWS\Downlo~1\oycegq.dll",Run
O4 - 启动项HKLM\\Run: [nhmk] ; RunDll32 "C:\WINDOWS\Downlo~1\nhmk.dll",Run
O4 - 启动项HKLM\\Run: [rlnuo5l] ; RunDll32 "C:\WINDOWS\Downlo~1\rlnuo5l.dll",Run
关闭所有的IE窗口，清空临时文件
修复上面的项
删除上面出现的文件（删除前，先看看它们创建的日期，修改日期，并记下来~过会可能会有用）
另，这可能是你下载的某个软件放出来的东西~~
想想你最近都下载安装了哪些东西~~
尤其是上面这些文件 “创建日期” 那段时间下载的东西~~！

西西吖吖 - 2006-7-4 11:03:00

有下载也不是最近了`这个很早就有了`就是处理不掉就放着`今天有空来问问`

西西吖吖 - 2006-7-4 11:04:00

【回复“西西吖吖”的帖子】怎么清空临时文件#83..汗死#83

天天泡泡 - 2006-7-4 11:11:00

Internet选项，删除文件，勾选“删除所有脱机内容”

西西吖吖 - 2006-7-4 11:22:00

好了.现在stdie.dll是不见了`不过还会平常还会弹出一个八百搜的窗口`windows目录下有他的存在`看图`要直接删了还是怎么办？？
O4 - 启动项HKLM\\Run: [afw5khop] ; RunDll32 "C:\WINDOWS\Downlo~1\afw5khop.dll",Run
O4 - 启动项HKLM\\Run: [ez2aa] ; RunDll32 "C:\WINDOWS\Downlo~1\ez2aa.dll",Run
O4 - 启动项HKLM\\Run: [haqekjb5] ; RunDll32 "C:\WINDOWS\Downlo~1\haqekjb5.dll",Run
O4 - 启动项HKLM\\Run: [jmjot5yj] ; RunDll32 "C:\WINDOWS\Downlo~1\jmjot5yj.dll",Run
O4 - 启动项HKLM\\Run: [lchf] ; RunDll32 "C:\WINDOWS\Downlo~1\oycegq.dll",Run
O4 - 启动项HKLM\\Run: [nhmk] ; RunDll32 "C:\WINDOWS\Downlo~1\nhmk.dll",Run
O4 - 启动项HKLM\\Run: [rlnuo5l] ; RunDll32 "C:\WINDOWS\Downlo~1\rlnuo5l.dll",Run
关闭所有的IE窗口，清空临时文件
修复上面的项
到这为止已经完了`下面删除文件要找哪些`细心的人来下`
删除上面出现的文件（删除前，先看看它们创建的日期，修改日期，并记下来~过会可能会有用）
另，这可能是你下载的某个软件放出来的东西~~
想想你最近都下载安装了哪些东西~~
尤其是上面这些文件 “创建日期” 那段时间下载的东西~~！
这些都还没弄完

附件: 706903200674111448.JPG

西西吖吖 - 2006-7-4 12:21:00

怎么办啊求助！

我无邪 - 2006-7-4 13:37:00

烦再扫份日志粘上来。

西西吖吖 - 2006-7-4 14:40:00

HijackThis_815汉化版扫描日志 V1.99.1
保存于 14:30:29, 日期 2006-7-4
操作系统： Windows XP SP2 (WinNT 5.01.2600)
浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180)

当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\KV2005\KVMonXP.kxp
C:\PROGRA~1\KV2005\KVSrvXP.exe
C:\Program Files\KV2005\kvwsc.exe
D:\Program Files\Tencent\qq\QQ.exe
D:\Program Files\Tencent\qq\TIMPlatform.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\lenovo\LOCALS~1\Temp\Rar$EX00.391\HijackThis1991zww.exe

O2 - BHO: BrowseHelper Class - {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} - C:\Program Files\KV2005\KvShell_1.dll
O3 - IE工具栏增项: 江民杀毒工具栏 - {B5A34A93-D538-43A7-8371-864CB6148D12} - C:\Program Files\KV2005\KvShell_1.dll
O3 - IE工具栏增项: Alexa - {3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} - C:\WINDOWS\system32\SHDOCVW.DLL
O3 - IE工具栏增项: (no name) - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - (no file)
O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - 启动项HKLM\\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - 启动项HKLM\\Run: [KvMonXP] "C:\Program Files\KV2005\KVMonXP.kxp" /auto
O4 - 启动项HKLM\\Run: [KernelFaultCheck] ; %systemroot%\system32\dumprep 0 -k
O4 - 启动项HKLM\\Run: [ATICardInit] ; VideoAti0.exe
O4 - 启动项HKLM\\Run: [Lcc] ; C:\Program Files\Lenovo\联想键盘驱动\LCC.exe
O4 - 启动项HKLM\\Run: [LHotkey] ; LHotkey.exe
O4 - 启动项HKLM\\Run: [SoundMan] ; SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [VTTimer] ; VTTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] ; C:\WINDOWS\system32\ctfmon.exe
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\Program Files\Tencent\qq\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\Program Files\Tencent\qq\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\Program Files\Tencent\qq\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\Program Files\Tencent\qq\SendMMS.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE (file missing)
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE (file missing)
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{6808BDD8-32DB-40B3-8CB5-A6BB8EA17EC4}: NameServer = 218.85.157.99 202.101.112.55
O23 - NT 服务: KVSrvXP - JiangMin New Tech Ltd. - C:\PROGRA~1\KV2005\KVSrvXP.exe
O23 - NT 服务: KVWSC - Jiangmin Co.Ltd - C:\Program Files\KV2005\kvwsc.exe

好了

我无邪 - 2006-7-4 14:49:00

VideoAti0.exe
这个很难缠，你可以百度一下
请下载 System Repair Engineer，使用“智能扫描”，按下“扫描”按钮进行扫描，扫描完成后按下“保存报告”按钮保存报告日志文件（SREng.LOG），把保存的报告日志文件内容复制-粘贴上来
下载网址
http://www.kztechs.com/sreng/sreng2.zip
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
日志一次粘不完，分次粘完，请不要修改。

西西吖吖 - 2006-7-4 15:00:00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><; C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
<run><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [Microsoft Corporation]
<PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName> [Microsoft Corporation]
<KvMonXP><"C:\Program Files\KV2005\KVMonXP.kxp" /auto> [JiangMin Co.Ltd]
<KernelFaultCheck><; %systemroot%\system32\dumprep 0 -k> []
<ATICardInit><; VideoAti0.exe> []
<Lcc><; C:\Program Files\Lenovo\联想键盘驱动\LCC.exe> []
<LHotkey><; LHotkey.exe> [Chicony]
<SoundMan><; SOUNDMAN.EXE> [Realtek Semiconductor Corp.]
<VTTimer><; VTTimer.exe> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
[HKEY_CURRENT_USER\Control Panel\Desktop]
<SCRNSAVE.EXE><> []

西西吖吖 - 2006-7-4 15:01:00

[KVSrvXP / KVSrvXP]
<C:\PROGRA~1\KV2005\KVSrvXP.exe -Service><JiangMin New Tech Ltd.>
[KVWSC / KVWSC]
<"C:\Program Files\KV2005\kvwsc.exe"><Jiangmin Co.Ltd>
浏览器加载项
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <C:\Program Files\Tencent\QQ\QQ.EXE, N/A>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt>
[Alexa]
{3CEFF6CD-6F08-4e4d-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[CEnroll Class]
{127698E4-E730-4E5C-A2B1-21490A70C8A1} <C:\WINDOWS\system32\xenroll.dll, Microsoft Corporation>
[Windows Media Player]
{22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation>
[HTML Document]
{25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[IE Browser Helper]
{3CE496D1-1746-41CD-9489-3C0B93DF10E2} <C:\WINDOWS\Downlo~1\xe3x.dll, N/A>
[Alexa]
{3CEFF6CD-6F08-4E4D-BCCD-FF7415288C3B} <C:\WINDOWS\system32\SHDOCVW.DLL, Microsoft Corporation>
[超级兔子上网精灵]
{43869BB3-22FD-4F15-9B46-238106BA2F4E} <, N/A>
[HHCtrl Object]
{52A2AAAE-085D-4187-97EA-8C30DB990436} <C:\WINDOWS\system32\hhctrl.ocx, Microsoft Corporation>
[QQBrowserHelperObject Class]
{54EBD53A-9BC1-480B-966A-843A333CA162} <C:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[IHiu Class]
{67A06BB1-027B-4E94-8C3D-2DCD5E808A28} <C:\WINDOWS\system32\Services.dll, N/A>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[超级兔子上网精灵]
{7369D35A-5B70-4A5B-B789-B25FE09B4AF3} <, N/A>
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt>
[Microsoft Web 浏览器]

{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[PhotoUploadCtrl Control]
{A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <d:\PROGRA~1\Tencent\qq\QZONE\PHOTOU~1.OCX, tencent>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[internet explorer helper]
{F7911E65-B01C-4A58-AEC7-53085ECA70A5} <C:\WINDOWS\system32\msshapi.dll, N/A>
[上传到QQ网络硬盘]
<D:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<D:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<D:\Program Files\Tencent\qq\SendMMS.htm, N/A>

西西吖吖 - 2006-7-4 15:03:00

正在运行的进程
[PID: 552][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 608][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 632][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 676][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 688][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 844][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 908][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1036][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1096][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1232][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1456][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620>
[PID: 1552][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\KV2005\KvShell_1.dll] <JiangMin Lmt><9, 0, 5, 1205>
[C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A>
[C:\Program Files\KV2005\APIImpl.dll] <JiangMin Ltd.><9.0.0.500>
[C:\WINDOWS\stdie.dll] <><1, 0, 0, 2>
[C:\Program Files\WinRAR\rarext.dll] <N/A><N/A>
[C:\Program Files\KV2005\KVMonXP.kxp] <JiangMin Co.Ltd><9, 2, 0, 60118>
[C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A>
[C:\Program Files\KV2005\GUIExt.dll] <JiangMin Ltd.><9.0.0.501>
[C:\Program Files\KV2005\lang\GUIExt0804.lng] <JiangMin Ltd.><7, 1, 0, 200>
[C:\Program Files\KV2005\KVEnhP.dll] <JiangMin Ltd.><9, 0, 5, 405>
[C:\Program Files\KV2005\KvSpiPS.dll] <JiangMin Ltd.><9.0.0.501>
[C:\Program Files\KV2005\KvOffice.dll] <JiangMin New Tech.><9.0.0.1213>
[C:\Program Files\KV2005\lang\KVOffice0804.lng] <N/A><N/A>
[C:\Program Files\KV2005\VirusUpload.dll] <N/A><2, 0, 0, 0>
[C:\Program Files\KV2005\PProtect.dll] <北京江民新科技术公司><1.0.121>
[PID: 1004][C:\PROGRA~1\KV2005\KVSrvXP.exe] <JiangMin New Tech Ltd.><9, 0, 5, 720>
[C:\PROGRA~1\KV2005\UpdateX.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\KVEnhD.dll] <JiangMin Ltd.><9, 1, 5, 423>
[C:\Program Files\KV2005\KvSPI.dll] <JiangMin New Tech. Ltd.><9, 0, 5, 720>
[C:\PROGRA~1\KV2005\PProtect.dll] <北京江民新科技术公司><1.0.121>
[C:\Program Files\KV2005\KVEnhP.dll] <JiangMin Ltd.><9, 0, 5, 405>
[C:\Program Files\KV2005\KVEnhM.dll] <JiangMin Ltd.><9.0.0.500>
[C:\Program Files\KV2005\KvSpiPS.dll] <JiangMin Ltd.><9.0.0.501>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[C:\Program Files\KV2005\KVEnhC.DLL] <JiangMin Ltd.><9, 1, 5, 603>
[C:\Program Files\KV2005\KVEnhO.dll] <JiangMin New Tech Ltd.><9, 0, 5, 507>
[C:\Program Files\KV2005\KVEnhS.dll] <JiangMin New Tech Ltd.><9, 0, 5, 607>
[C:\Program Files\KV2005\KVEnhJ.dll] <JiangMin New Tech. Ltd.><9, 1, 5, 508>
[C:\Program Files\KV2005\KVExtLZH.dll] <N/A><N/A>

西西吖丫1 - 2006-7-4 15:16:00

:\Program Files\KV2005\KVExtCab.dll] <JiangMin New Tech. Ltd.><9, 0, 5, 621>
[C:\Program Files\KV2005\KVExtEml.dll] <JiangMin New Tech. Ltd.><9, 0, 0, 503>
[C:\Program Files\KV2005\KvExtRar.dll] <JiangMin Ltd.><9, 1, 0, 804>
[C:\Program Files\KV2005\KvExtZip.dll] <JiangMin Ltd.><9, 0, 5, 420>
[C:\Program Files\KV2005\KVExtZ.dll] <Jiangmin New Tech.><9.1.0.503>
[C:\Program Files\KV2005\KVExtGz.dll] <Jiangmin New Tech.><9, 0, 5, 420>
[C:\Program Files\KV2005\KVExtTar.dll] <Jiangmin New Tech.><9, 0, 5, 420>
[C:\Program Files\KV2005\KVEnhK.dll] <JiangMin Ltd.><9, 1, 5, 507>
[C:\Program Files\KV2005\lang\PrivateCfg0804.lng] <TODO: <Company name>><1.0.0.1>
[PID: 1020][C:\Program Files\KV2005\kvwsc.exe] <Jiangmin Co.Ltd><9, 0, 0, 502>
[C:\Program Files\KV2005\KVEnhP.dll] <JiangMin Ltd.><9, 0, 5, 405>
[PID: 152][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[PID: 1648][D:\Program Files\Tencent\qq\QQ.exe] <TENCENT><0, 0, 0, 0>
[D:\Program Files\Tencent\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160>
[D:\Program Files\Tencent\qq\QQAPI.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[D:\Program Files\Tencent\qq\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1>
[D:\Program Files\Tencent\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[D:\Program Files\Tencent\qq\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQMainFrame.dll] <N/A><N/A>

西西吖丫1 - 2006-7-4 15:17:00

[D:\Program Files\Tencent\qq\CQQApplication.dll] <N/A><N/A>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>
[D:\Program Files\Tencent\qq\NewSkin.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\HostingMgr.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\CameraDll.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\MailSummary.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQSpace.dll] <><1, 0, 0, 1>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\GroupLive.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQSysMsgMng.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQPlugin.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQAvatar.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\FlashAvatarDll.dll] <><1, 4, 0, 1>
[D:\Program Files\Tencent\qq\LongConnection.dll] <tencent><5, 0, 200, 160>
[D:\Program Files\Tencent\qq\QQPet.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQAllInOne.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\SCCore.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\BQQApplication.dll] <N/A><N/A>
[C:\Program Files\Tencent\QQGame\GameLogCore.Dll] <><0, 10, 106, 13>
[C:\Program Files\Tencent\QQGame\Core.dll] <é??úêDìú???????ú?μí3óD?T1???><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\NetCenter.dll] <é??úêDìú???????ú?μí3óD?T1???><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\CmdCenter.dll] <深圳市腾讯计算机系统有限公司><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\HelpDll.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQGame\ResEx.dll] <深圳市腾讯计算机系统有限公司><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\GameLogAidMgr.dll] <><1, 0, 0, 1>
[C:\Program Files\Tencent\QQGame\COMToolKit.dll] <><1, 0, 0, 3>
[C:\Program Files\Tencent\QQGame\QQGameAvatar.dll] <深圳市腾讯计算机系统有限公司 Tencent Computer System Ltd.><0, 10, 0, 0>
[C:\Program Files\Tencent\QQGame\GamePublic.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
[D:\Program Files\Tencent\qq\CommercesMng.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[D:\Program Files\Tencent\qq\QQFileTransfer.dll] <Tencent><5, 0, 202, 180>
[D:\Program Files\Tencent\qq\QQCustomFace.dll] <N/A><N/A>
[C:\WINDOWS\system32\l3codeca.acm] <Fraunhofer Institut Integrierte Schaltungen IIS><1, 9, 0, 0305>
[C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx] <Macromedia, Inc.><8,0,24,0>
[D:\Program Files\Tencent\qq\QQMagicFace.dll] <><1, 0, 0, 1>
[D:\Program Files\Tencent\qq\QQSceneMng.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\GroupConnection.dll] <Tencent><5, 0, 202, 170>
[D:\Program Files\Tencent\qq\ImageOle.dll] <TODO: <Company name>><1.0.0.1>
[D:\Program Files\Tencent\qq\QQZip.dll] <tencent><0, 3, 2, 4>
[D:\Program Files\Tencent\qq\ShareFiles.dll] <N/A><N/A>
[D:\Program Files\Tencent\qq\QQSettingCtrl.dll] <><1, 0, 0, 1>
[PID: 828][D:\Program Files\Tencent\qq\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[D:\Program Files\Tencent\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 1252][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 452][C:\Program Files\WinRAR\WinRAR.exe] <N/A><N/A>
[PID: 1620][C:\DOCUME~1\lenovo\LOCALS~1\Temp\Rar$EX00.844\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[C:\WINDOWS\system32\KvWspXp_1.dll] <JiangMin Ltd.><9, 0, 5, 324>

西西吖丫1 - 2006-7-4 17:22:00

顶上去

西西吖丫1 - 2006-7-4 20:19:00

顶顶！为什么每次问的时候中间有人回答`到最后一个帮的都没！

黑灯黑火 - 2006-7-4 20:37:00

<ATICardInit><; VideoAti0.exe> []

删了这个启动项~
查找并删除这个文件（用搜索即可~）
VideoAti0.exe

打开注册表至~
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
删除
ATICardInit

西西吖丫1 - 2006-7-4 21:50:00

我试看看.注册表里找不到那个`还有就是windows里面有个八百搜的删完也会自动跟着没了吧？？

西西吖丫1 - 2006-7-4 22:04:00

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
后面找不到哦

我无邪 - 2006-7-4 22:27:00

C:\WINDOWS\stdie.dll
这个东东我远程，除SSM没用外，也没有把它杀死
双击我的电脑天网会提示桌面的进程要上网。
VideoAti0.exe
这个也是很奇怪，我也没有手动杀过。
以上两个不好对负
我建议你下载SSM
并新建两个规则禁止它们运行，请注意可疑的程序。
SSM规则操作
http://forum.ikaka.com/topic.asp?board=28&artid=8010460
随手修复
关闭所有浏览窗口以及一些不必要的程序
运行(双击)System Repair Engineer，使用“系统修复，浏览器加载项”来删除以下选项。
C:\WINDOWS\system32\Services.dll
C:\WINDOWS\system32\msshapi.dll
重启后删除
C:\WINDOWS\system32\Services.dll
C:\WINDOWS\system32\msshapi.dll
下载SSM后，设置好，禁止它们运行后，并手动删除它们。请再扫份日记粘上来。

西西吖丫1 - 2006-7-4 22:55:00

那个engineer早上没下载找不到`.还有刚才按黑灯黑火的方法弄了之后八百搜就弹出了好几次`QQ也都自动下线`那个SM都是英文的看不懂`汗
http://forum.ikaka.com/topic.asp?board=67&artid=5188931
这个里面没有eng..的东西可以下载

我无邪 - 2006-7-5 0:02:00

SSM集成了中文，但要你手动去选择
你不要说不会哦，多摸索一下吧
另，在远程中，使用SSM与IceSword异常的慢。不知大家有没有解决的方法。

西西吖丫1 - 2006-7-5 0:42:00

都是英文.我怕乱点错了把系统都搞乱了#83这个病毒厉害不#83觉得好麻烦要是不是怎么样的话我玩游戏不会记录下我输入密码等等之类的东西等我朋友来我再看看吧#83他清华读了4年回来电脑专业应该会吧

watch - 2006-9-11 0:29:00

stdie.dll杀了几天也杀不掉.帮忙呀!

瑞星卡卡安全论坛