==================================
正在运行的进程
[PID: 560][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 632][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 656][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 700][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 712][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 896][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 996][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[c:\windows\system32\uxtuneup.dll] [TuneUp Software GmbH, 1.0.0.2]
[PID: 1252][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1292][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 1440][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148)]
[C:\WINDOWS\System32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll] [Autodesk, 16.0.0.86]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[C:\PROGRA~1\FlashGet\jccatch.dll] [FlashGet, 1, 1, 5, 0]
[C:\Program Files\KV2006\KVBHO.dll] [Jiangmin Co.Ltd, 9.0.6.0113]
[C:\Program Files\KV2006\KVAddrDb.dll] [Jiangmin Co.Ltd, 9, 0, 0, 1018]
[C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll] [Thunder Networking Technologies,LTD, 5, 0, 0, 2]
[PID: 1676][C:\WINDOWS\System32\hkcmd.exe] [Intel Corporation, 3.0.0.4299]
[C:\WINDOWS\System32\hccutils.DLL] [Intel Corporation, 3.0.0.4299]
[C:\WINDOWS\System32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4299]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[PID: 1684][C:\WINDOWS\System32\igfxpers.exe] [Intel Corporation, 3.0.0.4299]
[C:\WINDOWS\System32\igfxsrvc.dll] [Intel Corporation, 3.0.0.4299]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[C:\Program Files\KV2006\KVMonXP.kxp] [Jiangmin Co.Ltd, 9, 2, 0, 60905]
[C:\Program Files\KV2006\UpdateX.dll] [JiangMin Co.Ltd., 9, 0, 5, 831]
[C:\Program Files\KV2006\lang\Kvxp0804.lng] [N/A, ]
[C:\Program Files\KV2006\GUIExt.dll] [Jiangmin Co.Ltd, 9, 0, 5, 927]
[C:\Program Files\KV2006\lang\GUIExt0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[C:\Program Files\KV2006\EngFace.dll] [Jiangmin Co.Ltd, 9.0.0.50809]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\EngPS.dll] [Jiangmin Co.Ltd, 9, 2, 0, 50817]
[C:\Program Files\KV2006\KvMemory.dll] [Jiangmin Co. Ltd., 9, 0, 6, 0214]
[C:\Program Files\KV2006\KvOffice.dll] [JiangMin New Tech., 9.0.0.1213]
[C:\Program Files\KV2006\lang\KVOffice0804.lng] [N/A, ]
[C:\Program Files\KV2006\VirusUpload.dll] [, 2, 16, 6, 7260]
[C:\Program Files\KV2006\lang\PrivateCfg0804.lng] [TODO: <Company name>, 1.0.0.1]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[C:\Program Files\KV2006\PProtect.dll] [Jiangmin Co. Ltd., 9.0.0.921]
[PID: 1700][C:\Program Files\KVFW\KvfwMcl.exe] [Jiangmin Corp, 9, 0, 6, 410]
[C:\Program Files\KVFW\KvfwUtl.dll] [Jiangmin Corp, 9, 0, 6, 522]
[C:\Program Files\KVFW\Lang\KVFW0804.lng] [, 9, 0, 5, 1031]
[C:\Program Files\KVFW\GuiExt.dll] [Jiangmin Co.Ltd, 9, 0, 5, 927]
[C:\Program Files\KVFW\UpdateX.dll] [JiangMin Co.Ltd., 9, 2, 0, 60405]
[C:\Program Files\KVFW\lang\GUIExt0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[C:\WINDOWS\System32\AcSignIcon.dll] [Autodesk, 16.0.0.86]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[PID: 1744][C:\Program Files\Analog Devices\Core\smax4pnp.exe] [Analog Devices, Inc., 5, 2, 0, 5]
[C:\Program Files\Analog Devices\Core\SMWDMIF.dll] [Analog Devices, Inc., 5, 2, 4, 000]
[C:\WINDOWS\System32\EDCrypt.DLL] [Analog Devices Incorporated, 1.0.0.8]
[C:\WINDOWS\System32\wdmaud.drv] [Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148)]
[C:\WINDOWS\System32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[PID: 1752][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] [RealNetworks, Inc., 0.1.0.3510]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[PID: 1760][C:\Program Files\Rising\AntiSpyware\runiep.exe] [Beijing Rising Technology Co., Ltd., 1, 0, 1, 6]
[C:\Program Files\Rising\AntiSpyware\iep_ctrl.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 4]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[PID: 1776][C:\WINDOWS\System32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[C:\Program Files\KV2006\TrojDie.kxp] [Jiangmin Co.Ltd, 9.0.6.0413]
[C:\Program Files\KV2006\UpdateX.dll] [JiangMin Co.Ltd., 9, 0, 5, 831]
[C:\Program Files\KV2006\lang\TrojDie0804.lng] [Jiangmin Co.Ltd, 9.0.0.0813]
[C:\Program Files\KV2006\GUIExt.dll] [Jiangmin Co.Ltd, 9, 0, 5, 927]
[C:\Program Files\KV2006\lang\GUIExt0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[C:\Program Files\KV2006\PProtect.dll] [Jiangmin Co. Ltd., 9.0.0.921]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[C:\Program Files\KV2006\ComUIPS.dll] [Jiangmin Ltd., 9. 5. 5. 20]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2052][C:\Program Files\KV2006\KRegEx.exe] [Jiangmin Co.Ltd, 9.0.6.210]
[C:\Program Files\KV2006\KRegEx.dll] [Jiangmin Co. Ltd., 9.0.6.0119]
[C:\Program Files\KV2006\KRegTrust.dll] [Jiangmin Co. Ltd., 9.0.0.825]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[PID: 2204][C:\Program Files\KV2006\UIHost.exe] [Jiangmin Co. Ltd, 9.2.0.50822]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[C:\Program Files\KV2006\UpdateX.dll] [JiangMin Co.Ltd., 9, 0, 5, 831]
[C:\Program Files\KV2006\ComUI.dll] [Jiangmin Ltd., 9. 0. 0.509]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
[C:\Program Files\KV2006\ComUIPS.dll] [Jiangmin Ltd., 9. 5. 5. 20]
[PID: 2992][C:\Downloads\sreng2\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\Program Files\KV2006\KVHookG.dll] [Jiangmin Co.Ltd, 9.0.0.1226]
[C:\Program Files\Rising\AntiSpyware\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 10]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR Error. [AutoCADScriptFile]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
入口点错误:CreateRemoteThread (危险等级: 高, 被下面模块所HOOK: C:\Program Files\KV2006\KVHookG.dll)
==================================
隐藏进程
N/A
==================================
[/CODE]