[Microsoft Web 浏览器]
{8856F961-340A-11D0-A96B-00C04FD705A2} <C:\WINDOWS\system32\shdocvw.dll, Microsoft Corporation>
[IeCatch2 Class]
{A5366673-E8CA-11D3-9CD9-0090271D075B} <C:\Program Files\FlashGet\jccatch.dll, N/A>
[]
{A9930D97-9CF0-42A0-A10D-4F28836579D5} <D:\KUGOO\KuGoo3DownXControl.ocx, N/A>
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, N/A>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\JiangMin\AntiVirus\KVshell.dll, Jiangmin Co.Ltd>
[Messenger
Object]
{B69003B3-C55E-4B48-836C-BC5946FC3B28} <C:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[RDS.DataSpace]
{BD96C556-65A3-11D0-983A-00C04FC29E36} <C:\Program Files\Common Files\System\msadc\msadco.dll, Microsoft Corporation>
[AUDIO__MP3 Moniker Class]
{CD3AFA76-B84F-48F0-9393-7EDC34128127} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx, Adobe Systems, Inc.>
[卡卡上网安全助手]
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} <C:\WINDOWS\system32\KakaTool.dll, Beijing Rising Technology Co., Ltd.>
[PasswordEditCtrl Class]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司>
[Messenger Application]
{FB7199AB-79BF-11D2-8D94-0000F875C541} <C:\Program Files\Messenger\msgsc.dll, Microsoft Corporation>
[&使用迅雷下载]
<D:\迅雷\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<D:\迅雷\getallurl.htm, N/A>
[使用KuGoo3下载(&K)]
<, N/A>
[使用Web迅雷下载]
<, N/A>
[使用Web迅雷下载全部链接]
<, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ表情]
<D:\qq\AddEmotion.htm, N/A>
==================================
正在运行的进程
[PID: 468][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 540][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 564][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 608][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 620][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 764][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 824][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 916][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057)]
[PID: 988][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1028][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1240][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2527 (xpsp.040919-1030)]
[C:\WINDOWS\system32\nvcpl.dll] [NVIDIA Corporation, 6.14.10.8186]
[C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.10.8186]
[C:\Program Files\JiangMin\AntiVirus\KVshell.dll] [Jiangmin Co.Ltd, 1, 0, 7, 319]
[C:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 7, 226]
[C:\Program Files\JiangMin\AntiVirus\lang\kvxp0804.lng] [N/A, ]
[C:\WINDOWS\system32\nvshell.dll] [, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\Program Files\JiangMin\common\GUIEXT.DLL] [Jiangmin Co.Ltd, 1, 0, 6, 1201]
[C:\Program Files\JiangMin\common\lang\guiext0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[E:\a\WebThunderBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 2, 10]
[C:\WINDOWS\system32\xunleibho_v14.dll] [Thunder Networking Technologies,LTD, 4, 6, 0, 62]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
[PID: 1304][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
[PID: 1628][C:\Program Files\JiangMin\AntiVirus\KVWSC.exe] [Jiangmin Co.,Ltd, 1, 0, 7, 131]
[C:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 412]
[C:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 7, 226]
[PID: 1684][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.10.8186]
[PID: 1748][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 112][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 984][C:\WINDOWS\system32\DllHost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\Program Files\JiangMin\common\ComUI.dll] [Jiangmin Co,.Ltd, 1, 0, 7, 112]
[C:\Program Files\JiangMin\common\ComUIPS.dll] [Jiangmin Co.Ltd, 1.0.0.808]
[PID: 1572][D:\qq传美\TIMPlatform.exe] [TENCENT, 7,0,313,1681]
[D:\qq传美\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[PID: 1768][C:\WINDOWS\system32\wuauclt.exe] [Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057)]
[C:\WINDOWS\system32\wups2.dll] [Microsoft Corporation, 7.0.6000.374 (winmain(wmbla).070416-2057)]
[PID: 2504][D:\qq传美\QQ.exe] [TENCENT, 7,0,313,1681]
[D:\qq传美\CoralAssist.dll] [Coral Team, 5.0.0 build 20060829]
[D:\qq传美\CoralQQ.dll] [Coral Team, 5.0.1a Build 20070620]
[D:\qq传美\kql.dll] [Coral Team, 5.0.1a build 20070620]
[D:\qq传美\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\qq传美\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.42]
[D:\qq传美\mfc42.dll] [Microsoft Corporation, 6.00.8665.0]
[D:\qq传美\ipsearcher.dll] [, 1.0.0.3]
[D:\qq传美\QQBaseClassInDll.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQHelperDll.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\BasicCtrlDll.dll] [TENCENT, 7, 0, 225, 1651]
[D:\qq传美\NoDisturbFilter.cqx] [Coral Team, 1.0]
[D:\qq传美\ConfigHotkey.cqx] [Coral Team, 1.0]
[D:\qq传美\RICHED32.DLL] [Microsoft Corporation, 5.00.2134.1]
[D:\qq传美\RICHED20.dll] [Jiangmin Co Ltd, 10, 0, 0, 831]
[D:\qq传美\riched20_.dll] [Microsoft Corporation, 5.31.23.1218]
[D:\qq传美\QQAPI.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\TIMProxy.dll] [tencent, 0, 3, 2, 4]
[D:\qq传美\AutoReconnect.cqx] [Coral Team, 1.0.0]
[D:\qq传美\LoginCtrl.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\LoginCtrlRes.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQRes.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\MailSummary.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQMainFrame.dll] [N/A, ]
[D:\qq传美\gdiplus.dll] [Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\qq传美\CQQApplication.dll] [N/A, ]
[D:\qq传美\FlashAvatarDll.dll] [, 1, 4, 0, 1]
[D:\qq传美\NewSkin.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\HostingMgr.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\CameraDll.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\CoralHotkey.cqx] [Coral Team, 1.0]
[D:\qq传美\QQKnowledgeSearch.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQAllInOne.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\SCCore.dll] [TENCENT, 1, 6, 0, 2]
[D:\qq传美\QQSpace.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\vbscript.dll] [Microsoft Corporation, 5.6.0.7426]
[C:\WINDOWS\system32\msdmo.dll] [, ]
[D:\qq传美\QQGroupMng.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\UserDefinedHead.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQPlugin.dll] [N/A, ]
[D:\qq传美\QQCustomFace.dll] [N/A, ]
[D:\qq传美\QQPet.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQConfigPlugin.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\LongConnection.dll] [TENCENT, 7,0,313,1681]
[C:\WINDOWS\system32\Macromed\Flash\Flash9c.ocx] [Adobe Systems, Inc., 9,0,45,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[D:\qq传美\QQAvatar.dll] [N/A, ]
[D:\qq传美\QQSysMsgMng.dll] [N/A, ]
[D:\qq传美\QRingMng.dll] [N/A, ]
[D:\qq传美\GroupConnection.dll] [TENCENT, 7,0,313,1681]
[C:\Program Files\JiangMin\AntiVirus\KVGuard.dll] [Jiangmin Co Ltd, 10, 0, 0, 831]
[C:\Program Files\JiangMin\AntiVirus\lang\KVGuard0804.lng] [JiangMin Ltd., 10, 0, 6, 812]
[D:\qq传美\ImageOle.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQLiveQMng.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQMagicFace.dll] [TENCENT, 7,0,313,1681]
[D:\qq传美\QQSceneMng.dll] [N/A, ]
[PID: 3976][C:\WINDOWS\explorer.exe] [Microsoft Corporation, 6.00.2900.2527 (xpsp.040919-1030)]
[C:\Program Files\JiangMin\AntiVirus\KVshell.dll] [Jiangmin Co.Ltd, 1, 0, 7, 319]
[C:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 7, 226]
[C:\Program Files\JiangMin\AntiVirus\lang\kvxp0804.lng] [N/A, ]
[C:\Program Files\JiangMin\common\GUIEXT.DLL] [Jiangmin Co.Ltd, 1, 0, 6, 1201]
[C:\Program Files\JiangMin\common\lang\guiext0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[E:\a\WebThunderBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 2, 10]
[C:\WINDOWS\system32\xunleibho_v14.dll] [Thunder Networking Technologies,LTD, 4, 6, 0, 62]
[C:\Program Files\Microsoft Office\OFFICE11\msohev.dll] [Microsoft Corporation, 11.0.5510]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 2208][F:\新建文件夹\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
==================================
文件关联
.TXT Error. [C:\WINDOWS\notepad.exe %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
N/A
==================================
隐藏进程
[1405] C:\Program Files\JiangMin\AntiVirus\KVMonXP.kxp
[1589] C:\Program Files\JiangMin\AntiVirus\kvsrvxp.exe
