HijackThis_zww汉化版扫描日志
V1.99.1
保存于 16:24:11, 日期 2006-5-25
操作系统： Windows XP SP2
(WinNT 5.01.2600)
浏览器： Unable to get Internet
Explorer version!
当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\KV2006
\KVSrvXP.exe
C:\Program Files\KV2006\kvwsc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program
Files\VIA\RAID\raid_tool.exe
C:\Program Files\KV2006
\KVMonXP.kxp
C:\Program Files\Common
Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\KV2006
\FrogAgent.exe
C:\Program Files\KV2006\TrojDie.kxp
C:\Program Files\KV2006\KRegEx.exe
C:\Program Files\KV2006\UIHost.exe
C:\Program Files\Internet
Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
D:\downloads\软件\QQ群登快手
\QQQS.exe
D:\downloads\软件\QQ2006
\QQ\QQ.exe
D:\downloads\软件\QQ2006
\QQ\TIMPlatform.exe
D:\downloads\软件\QQ2006
\QQ\QQ.exe
D:\downloads\软件\QQ2006
\QQ\QQ.exe
C:\Program Files\Internet
Explorer\iexplore.exe
C:\Program Files\Internet
Explorer\IEXPLORE.EXE
C:\Program Files\Internet
Explorer\iexplore.exe
D:\downloads\软件
\Hithisiack\HijackThis1991zww.exe
O2 - BHO: ThunderIEHelper -
{0005A87D-D626-4B3A-84F9-
1D9571695F55} -
C:\WINDOWS\system32
\xunleibho_v14.dll
O2 - BHO: MyIEHelper Class -
{16A770A0-0E87-4278-B748-
2460D64A8386} - C:\Documents and
Settings\All Users\Application
Data\Microsoft\IEHelper\IEHelper2006
424_8915.dll
O2 - BHO: VnetCookie Class -
{4E83D567-4697-4F7B-B1F0-
A513B01DB89A} - c:\PROGRA~1
\chinanet\VNETTR~1.DLL (file
missing)
O2 - BHO: QQIEHelper - {54EBD53A
-9BC1-480B-966A-843A333CA162} -
D:\downloads\软件\QQ2006
\QQ\QQIEHelper.dll
O2 - BHO: BrowseHelper Class -
{80BF4637-D65B-43F3-BB60-
C5DD3D5FB7B9} - C:\Program
Files\KV2006\KvShell.dll
O2 - BHO: (no name) - {B9E914B5-
6B61-401f-A49F-9E84E547D3DD} -
C:\WINDOWS\system32\leftup.dll
O3 - IE工具栏增项: 卡卡上网安全助手
- {DB9ECD4F-FB8F-4311-B3CE-
90B976C2707C} -
C:\WINDOWS\system32\kakatool.dll
O3 - IE工具栏增项: 江民杀毒工具栏 -
{B5A34A93-D538-43A7-8371-
864CB6148D12} - C:\Program
Files\KV2006\KvShell.dll
O3 - IE工具栏增项: (no name) -
{E0E899AB-F487-11D5-8D29-
0050BA6940E3} - (no file)
O3 - IE工具栏增项: BitComet工具栏 -
{3F1ABCDB-A875-46c1-8345-
B72A4567E486} - D:\downloads\软件
\BT\BitComet\BitCometBar\BitCometB
ar0.4.dll
O4 - 启动项HKLM\\Run: [SoundMan]
SOUNDMAN.EXE
O4 - 启动项HKLM\\Run: [RaidTool]
C:\Program
Files\VIA\RAID\raid_tool.exe
O4 - 启动项HKLM\\Run: [KvMonXP]
"C:\Program Files\KV2006
\KVMonXP.kxp" /auto
O4 - 启动项HKLM\\Run: [TkBellExe]
"C:\Program Files\Common
Files\Real\Update_OB\realsched.exe"
-osboot
O4 - 启动项HKLM\\RunOnce:
[kvwsc.exe] "C:\Program
Files\KV2006\kvwsc.exe" -RegServer
O4 - HKCU\..\Run: [ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [KvXP]
"C:\Program Files\KV2006\KvXP.kxp"
/ScanBoot /ScanSys
O8 - IE右键菜单中的新增项目: &使用
迅雷下载 - C:\Program Files\Thunder
Network\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用
迅雷下载全部链接 - C:\Program
Files\Thunder
Network\Thunder\getallurl.htm
O9 - 浏览器额外的按钮: (no name) -
{DEDEB80D-FA35-45d9-9460-
4983E5A8AFE6} - D:\downloads\软件
\QQ2006\QQ\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ
炫彩工具条设置 - {DEDEB80D-FA35
-45d9-9460-4983E5A8AFE6} -
D:\downloads\软件\QQ2006
\QQ\QQIEHelper.dll
O16 - DPF: {17492023-C23A-453E-
A040-C7C580BBF700} (Windows
Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?
linkid=39204
O16 - DPF: {3D8F74EE-8692-4F8F-
B8D2-7522E732519E} (WebActivater
Control) -
http://game.qq.com/QQGame2.cab
O16 - DPF: {6E32070A-766D-4EE6-
879C-DC1FA91D2FC3}
(MUWebControl Class) -
http://update.microsoft.com/microsoftu
pdate/v6/V5Controls/en/x86/client/mu
web_site.cab?1142403563093
O16 - DPF: {A96C48EA-AA88-4BBD
-B58C-7B41146A6EAC}
(PhotoUploadCtrl Control) -
http://imgcache.qq.com/qzone/photo/Q
zoneMediaTools.cab
O17 -
HKLM\System\CCS\Services\Tcpip\..\{
ABEC7C2A-A99B-47BE-85A8-
157395202348}: NameServer =
218.76.138.66
O20 - AppInit_DLLs: APIHookDll.dll
O23 - NT 服务: Adobe LM Service -
Adobe Systems - C:\Program
Files\Common Files\Adobe Systems
Shared\Service\Adobelmsvc.exe
O23 - NT 服务: Ati HotKey Poller - ATI
Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - NT 服务: Autodesk Licensing
Service - Autodesk - C:\Program
Files\Common Files\Autodesk
Shared\Service\AdskScSrv.exe
O23 - NT 服务: InstallDriver Table
Manager (IDriverT) - Macrovision
Corporation - C:\Program
Files\Common
Files\InstallShield\Driver\1050\Intel 32
\IDriverT.exe
O23 - NT 服务: KVSrvXP - Jiangmin
Co. Ltd - C:\Program Files\KV2006
\KVSrvXP.exe
O23 - NT 服务: KVWSC - Jiangmin
Co.Ltd - C:\Program Files\KV2006
\kvwsc.exe
