Logfile of HijackThis v1.99.1
Scan saved at 7:20:33, on 2006-8-3
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\KV2006\KVSrvXP.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
D:\KV2006\KVMonXP.kxp
D:\江民防火墙\KvfwMcl.exe
C:\WINDOWS\system32\ctfmon.exe
D:\KV2006\TrojDie.kxp
D:\KV2006\KRegEx.exe
D:\KV2006\UIHost.exe
E:\QQ\QQ.exe
E:\QQ\TIMPlatform.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\conime.exe
e:\Thunder\Program\Thunder5.exe
C:\Documents and Settings\hu\桌面\HijackThis.exe
O1 - Hosts: 219.153.18.212 www.917ww.com
O1 - Hosts: 219.153.18.212 www.8qwsf.com
O4 - HKLM\..\Run: [KvMonXP] "D:\KV2006\KVMonXP.kxp" /auto
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Jiangmin KVFW] D:\江民防火墙\KvfwMcl.exe -silent
O4 - HKCU\..\Run: [KvXP] "D:\KV2006\KvXP.kxp" /ScanBoot /ScanSys
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &使用迅雷下载 - e:\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - e:\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - E:\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\QQ\SendMMS.htm
O16 - DPF: {2354A44B-3CEB-4829-9940-545B03103538} (PowerPlr Control) - http://vnet.wuhan.net.cn/plugin/PowerPlr.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{51BB06F2-873F-4CE4-8B73-1DBDF061FB5B}: NameServer = 61.136.241.34 202.103.44.150
O17 - HKLM\System\CS1\Services\Tcpip\..\{51BB06F2-873F-4CE4-8B73-1DBDF061FB5B}: NameServer = 61.136.241.34 202.103.0.117
O17 - HKLM\System\CS2\Services\Tcpip\..\{51BB06F2-873F-4CE4-8B73-1DBDF061FB5B}: NameServer = 61.136.241.34 202.103.44.150
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: KVSrvXP - Jiangmin Co. Ltd - D:\KV2006\KVSrvXP.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
