【求助】扫描发现5个病毒.全部清除失败!请高手们帮忙!! - 瑞星卡卡安全论坛bbs.ikaka.com

瑞星卡卡安全论坛技术交流区 反病毒/反流氓软件论坛【求助】扫描发现5个病毒.全部清除失败!请高手们帮忙!!

	瑞星“1+2”全新解决方案巡展在广州画上圆满句号		叶院长揭秘：瑞星如何运用AI技术革新网络安全		俄乌冲突加剧网络攻击风险白俄罗斯政府遭APT攻击		瑞星ESM防病毒系统助力矿业大学筑牢网络安全防线
	实力拉满瑞星第五十次通过VB100测评		携手老友，拥抱新精彩 —— 新论坛新活动，感谢你的陪伴		护航司法，瑞星助力山西省高院构建安全防线		人工智能在网络安全领域的风险和机遇

12

1 / 2 页

跳转页

【求助】扫描发现5个病毒.全部清除失败!请高手们帮忙!!

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-24 19:45 \| 显示全部短消息资料字号：小中大 1楼【求助】扫描发现5个病毒.全部清除失败!请高手们帮忙!! 今天扫描病毒.一下扫描出5个病毒.但结果全部都是清除失败! 请各位高手们救救我啊!!!!! 付上日志扫描! HijackThis_zww汉化版扫描日志 V1.99.1 保存于 19:44:04, 日期 2006-5-24 操作系统： Windows XP SP2 (WinNT 5.01.2600) 浏览器： Internet Explorer v6.00 SP2 (6.00.2900.2180) 当前运行的进程： C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RunDll32.exe C:\Program Files\Iparmor\iparmor.exe C:\Program Files\KV2005\KVMonXP.kxp C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\KV2005\KVSrvXP.exe C:\Program Files\KV2005\kvwsc.exe C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\KV2005\TrojDie.kxp C:\Program Files\KV2005\KRegEx.exe C:\WINDOWS\system32\DllHost.exe C:\Program Files\VnetClient1.6\VnetClient.exe D:\腾讯QQ\QQ.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\WINDOWS\system32\conime.exe C:\Program Files\Thunder Network\Thunder\Thunder.exe C:\Program Files\KV2005\KvXP.kxp C:\WINDOWS\system32\DllHost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe E:\HijackThis1991zww.exe O2 - BHO: ThunderIEHelper - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v14.dll O2 - BHO: IDDTInitObj Class - {15DDE989-CD45-4561-BF99-D22C0D5C2B74} - F:\PROGRA~1\sina\UC\UCddt\ddtinit.dll (file missing) O2 - BHO: (no name) - {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} - (no file) O2 - BHO: VnetCookie Class - {4E83D567-4697-4F7B-B1F0-A513B01DB89A} - c:\PROGRA~1\VNETCL~1.6\VNETTR~1.DLL O2 - BHO: BrowseHelper Class - {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} - C:\Program Files\KV2005\KvShell_1.dll O3 - IE工具栏增项: 江民杀毒工具栏 - {B5A34A93-D538-43A7-8371-864CB6148D12} - C:\Program Files\KV2005\KvShell_1.dll O3 - IE工具栏增项: 新浪点点通 - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - F:\PROGRA~1\sina\UC\UCddt\DDTONG~1.DLL O3 - IE工具栏增项: 实用搜索 - {15ADF205-4C54-4cfe-AC88-1EA0BA6D06A0} - C:\Program Files\ScanToolbar\ScanBar.dll (file missing) O4 - 启动项HKLM\\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - 启动项HKLM\\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - 启动项HKLM\\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC O4 - 启动项HKLM\\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - 启动项HKLM\\Run: [iparmor] C:\Program Files\Iparmor\iparmor.exe mini O4 - 启动项HKLM\\Run: [KvMonXP] "C:\Program Files\KV2005\KVMonXP.kxp" /auto O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O8 - IE右键菜单中的新增项目: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\geturl.htm O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\getallurl.htm O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - D:\腾讯QQ\AddToNetDisk.htm O8 - IE右键菜单中的新增项目: 使用新浪下载助手下载 - F:\PROGRA~1\sina\UC\UCddt\sinadl.htm O8 - IE右键菜单中的新增项目: 使用超级解霸播放 - C:\Program Files\Herosoft\Hero 9\MPURLGET.HTM O8 - IE右键菜单中的新增项目: 发送图片到手机(&M) - http://sms.sina.com.cn/diy/send.html?from=467 O8 - IE右键菜单中的新增项目: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - IE右键菜单中的新增项目: 收藏此页到新浪ViVi - http://vivi.sina.com.cn/collect/click.php?agent=ddt O8 - IE右键菜单中的新增项目: 新浪搜索 - http://cha.sina.com.cn/ddt.html O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - D:\腾讯QQ\AddPanel.htm O8 - IE右键菜单中的新增项目: 添加到QQ表情 - D:\腾讯QQ\AddEmotion.htm O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - D:\腾讯QQ\SendMMS.htm O8 - IE右键菜单中的新增项目: 用比特精灵下载(&B) - C:\Program Files\BitSpirit\bsurl.htm O9 - 浏览器额外的按钮: 新浪UC - {2253922F-1B26-4C74-8B57-E3AEE748DBB8} - F:\Program Files\sina\UC\UC.exe O9 - 浏览器额外的按钮: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Program Files\Herosoft\Hero 9\STHSDVD.EXE O9 - 浏览器额外的“工具”菜单项: 豪杰超级解霸9 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - C:\Program Files\Herosoft\Hero 9\STHSDVD.EXE O9 - 浏览器额外的按钮: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe O9 - 浏览器额外的“工具”菜单项: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe O9 - 浏览器额外的按钮: 新浪点点通 - {F60C7D81-8471-4D40-AAFE-56D318F34C2D} - F:\PROGRA~1\sina\UC\UCddt\DDTONG~1.DLL O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp.dll O10 - 未知的文件在 Winsock LSP: c:\windows\system32\kvwspxp.dll O16 - DPF: {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} (AxInputControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AXSafeControls.cab O16 - DPF: {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} (Qzone Media Tools) - http://qz-photo.qq.com/qzone3/QzoneMediaTools.cab O16 - DPF: {E787FD25-8D7C-4693-AE67-9406BC6E22DF} (CPasswordEditCtrl Object) - https://www.tenpay.com/download/qqedit.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{6B7DAF0A-95FC-48CC-9D58-87BD7C0CFCBA}: NameServer = 202.96.128.86 202.96.128.166 O18 - 列举现有的协议: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - AppInit_DLLs: APIHookDll.dll O23 - NT 服务: KVSrvXP - JiangMin New Tech Ltd. - C:\PROGRA~1\KV2005\KVSrvXP.exe O23 - NT 服务: KVWSC - Jiangmin Co.Ltd - C:\Program Files\KV2005\kvwsc.exe 请各位高手帮帮我啊! 2006-06-03 19:38:50
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	分享到：

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-24 20:01 \| 显示全部短消息资料字号：小中大 2楼图片能看到的啊.我试过的.显示没问题! 名字太长了打不完.而且不能复制的.所以我才截图下来的如果看不到.刷新试下.应该可以看到的!
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-24 20:29 \| 显示全部短消息资料字号：小中大 3楼没人帮忙吗? 急啊
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-24 22:03 \| 显示全部短消息资料字号：小中大 4楼图片好象真的看不到哦! 我发个新的上来!!
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-24 22:07 \| 显示全部短消息资料字号：小中大 5楼如果还看不到的话我上传到附件吧! 附件: 文件名:6738832006524220721.jpg 下载次数:323 文件类型:image/pjpeg 文件大小: 上传时间:2006-5-24 22:07:21 描述: 预览信息:EXIF信息 PixYDim : 235 Software Used : ACD Systems ???????? PixXDim : 503 Orientation : 1 DTSubsec : 640 YCbCr Positioning : 1 拍摄日期 : 2006:05:24 19:40:14
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-25 18:41 \| 显示全部短消息资料字号：小中大 6楼能看到图片了吗? 为什么现在都改用那个软件扫描了? 以前那个HijackThis不用了吗?
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-25 18:55 \| 显示全部短消息资料字号：小中大 7楼 2006-05-25,18:50:35 System Repair Engineer 2.0.12.350 (2.0 RC 1) Windows XP Professional Service Pack 2 - 管理权限用户 - 完整功能以下内容被选中：所有的启动项目（包括注册表、启动文件夹、服务等）浏览器加载项正在运行的进程（包括进程模块信息）文件关联启动项目注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <IMJPMIG8.1><"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <MSPY2002><C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <Cmaudio><RunDll32 cmicnfg.cpl,CMICtrlWnd> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <iparmor><C:\Program Files\Iparmor\iparmor.exe mini> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] <KvMonXP><"C:\Program Files\KV2005\KVMonXP.kxp" /auto> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <shell><Explorer.exe> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] <Userinit><C:\WINDOWS\system32\userinit.exe,> [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] <AppInit_DLLs><APIHookDll.dll> ================================== 启动文件夹服务 [KVSrvXP / KVSrvXP] <C:\PROGRA~1\KV2005\KVSrvXP.exe -Service><JiangMin New Tech Ltd.> [KVWSC / KVWSC] <"C:\Program Files\KV2005\kvwsc.exe"><Jiangmin Co.Ltd> [Distributed Application Client / MOBILL] <C:\WINDOWS\SYSTEM32\RUNDLL32.EXE C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL,Export 1087><N/A> ================================== 浏览器加载项 [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v14.dll, Thunder Networking Technologies,LTD> [IDDTInitObj Class] {15DDE989-CD45-4561-BF99-D22C0D5C2B74} <F:\PROGRA~1\sina\UC\UCddt\ddtinit.dll, N/A> [VnetCookie Class] {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\VNETCL~1.6\VNETTR~1.DLL, > [BrowseHelper Class] {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt> [新浪UC] {2253922F-1B26-4C74-8B57-E3AEE748DBB8} <F:\Program Files\sina\UC\UC.exe, 北京新浪信息技术有限公司> [豪杰超级解霸9] {367E0A21-8601-4986-9C9A-153BF5ACA118} <C:\Program Files\Herosoft\Hero 9\STHSDVD.EXE, herosoft> [Yahoo! Messenger] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <F:\Program Files\Yahoo!\Messenger\YahooMessenger.exe, Yahoo! Inc.> [新浪点点通] {F60C7D81-8471-4D40-AAFE-56D318F34C2D} <F:\PROGRA~1\sina\UC\UCddt\DDTONG~1.DLL, 北京新浪信息技术有限公司> [Messenger] {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation> [江民杀毒工具栏] {B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt> [新浪点点通] {F60C7D81-8471-4D40-AAFE-56D318F34C2D} <F:\PROGRA~1\sina\UC\UCddt\DDTONG~1.DLL, 北京新浪信息技术有限公司> [实用搜索] {15ADF205-4C54-4cfe-AC88-1EA0BA6D06A0} <C:\Program Files\ScanToolbar\ScanBar.dll, N/A> [AxInputControl Class] {73E4740C-08EB-4133-896B-8D0A7C9EE3CD} <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL, > [Qzone Media Tools] {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <C:\WINDOWS\system32\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.> [CPasswordEditCtrl Object] {E787FD25-8D7C-4693-AE67-9406BC6E22DF} <C:\WINDOWS\system32\qqedit\qqedit.dll, 腾讯科技（深圳）有限公司> [ThunderIEHelper Class] {0005A87D-D626-4B3A-84F9-1D9571695F55} <C:\WINDOWS\system32\xunleibho_v14.dll, Thunder Networking Technologies,LTD> [实用搜索] {15ADF205-4C54-4CFE-AC88-1EA0BA6D06A0} <C:\Program Files\ScanToolbar\ScanBar.dll, N/A> [IDDTInitObj Class] {15DDE989-CD45-4561-BF99-D22C0D5C2B74} <F:\PROGRA~1\sina\UC\UCddt\ddtinit.dll, N/A> [Windows Media Player] {22D6F312-B0F6-11D0-94AB-0080C74C7E95} <C:\WINDOWS\system32\wmpdxm.dll, Microsoft Corporation> [VnetCookie Class] {4E83D567-4697-4F7B-B1F0-A513B01DB89A} <c:\PROGRA~1\VNETCL~1.6\VNETTR~1.DLL, > [Windows Media Player] {6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation> [BrowseHelper Class] {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt> [Qzone Media Tools] {A96C48EA-AA88-4BBD-B58C-7B41146A6EAC} <C:\WINDOWS\system32\QZONEM~1.OCX, Tencent Technology (Shenzhen) Company Limited> [江民杀毒工具栏] {B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\KV2005\KvShell_1.dll, JiangMin Lmt> [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx, Macromedia, Inc.> [MessengerChecker Class] {DA4F543C-C8A9-4E88-9A79-548CBB46F18F} <F:\Program Files\Yahoo!\Messenger\YPagerChecker.dll, TODO: <Company name>> [Messenger Class] {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <, N/A> [新浪点点通] {F60C7D81-8471-4D40-AAFE-56D318F34C2D} <F:\PROGRA~1\sina\UC\UCddt\DDTONG~1.DLL, 北京新浪信息技术有限公司> [&使用迅雷下载] <C:\Program Files\Thunder Network\Thunder\geturl.htm, N/A> [&使用迅雷下载全部链接] <C:\Program Files\Thunder Network\Thunder\getallurl.htm, N/A> [上传到QQ网络硬盘] <D:\腾讯QQ\AddToNetDisk.htm, N/A> [使用新浪下载助手下载] <F:\PROGRA~1\sina\UC\UCddt\sinadl.htm, N/A> [使用超级解霸播放] <C:\Program Files\Herosoft\Hero 9\MPURLGET.HTM, N/A> [发送图片到手机(&M)] <http://sms.sina.com.cn/diy/send.html?from=467, N/A> [导出到 Microsoft Office Excel(&X)] <res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000, N/A> [收藏此页到新浪ViVi] <http://vivi.sina.com.cn/collect/click.php?agent=ddt, N/A> [新浪搜索] <http://cha.sina.com.cn/ddt.html, N/A> [添加到QQ自定义面板] <D:\腾讯QQ\AddPanel.htm, N/A> [添加到QQ表情] <D:\腾讯QQ\AddEmotion.htm, N/A> [用QQ彩信发送该图片] <D:\腾讯QQ\SendMMS.htm, N/A> [用比特精灵下载(&B)] <C:\Program Files\BitSpirit\bsurl.htm, N/A> ==================================
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-25 19:00 \| 显示全部短消息资料字号：小中大 8楼正在运行的进程 [PID: 424][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 504][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [PID: 536][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [PID: 580][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [PID: 592][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [PID: 748][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [PID: 804][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [PID: 876][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [c:\windows\system32\zknawi.dll] <N/A><N/A> [PID: 916][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [PID: 1052][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [PID: 1228][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [PID: 1448][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\Program Files\KV2005\KvShell_1.dll] <JiangMin Lmt><9, 0, 5, 1205> [C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><8, 0, 0, 0> [C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A> [C:\Program Files\KV2005\APIImpl.dll] <JiangMin Ltd.><9.0.0.500> [C:\WINDOWS\system32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62> [C:\Program Files\WinRAR\rarext.dll] <N/A><N/A> [PID: 1580][C:\WINDOWS\system32\RunDll32.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system\cmicnfg.cpl] <C-Media Corporation><1, 0, 0, 14> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [PID: 1588][C:\Program Files\Iparmor\iparmor.exe] <N/A><N/A> [C:\Program Files\Iparmor\getportlistxp.dll] <><1, 0, 0, 1> [C:\Program Files\Iparmor\socketinit.dll] <N/A><N/A> [C:\Program Files\Iparmor\hookhookdll.dll] <N/A><N/A> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\Program Files\KV2005\KVMonXP.kxp] <JiangMin Co.Ltd><9, 2, 0, 60118> [C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><8, 0, 0, 0> [C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A> [C:\Program Files\KV2005\GUIExt.dll] <JiangMin Ltd.><9.0.0.501> [C:\Program Files\KV2005\lang\GUIExt0804.lng] <JiangMin Ltd.><7, 1, 0, 200> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\Program Files\KV2005\KVEnhP_1.dll] <JiangMin Ltd.><9, 0, 5, 405> [C:\Program Files\KV2005\KvSpiPS.dll] <JiangMin Ltd.><9.0.0.501> [C:\Program Files\KV2005\KvOffice.dll] <JiangMin New Tech.><9.0.0.1213> [C:\Program Files\KV2005\lang\KVOffice0804.lng] <N/A><N/A> [C:\Program Files\KV2005\VirusUpload.dll] <N/A><2, 0, 0, 0> [C:\Program Files\KV2005\PProtect.dll] <北京江民新科技术公司><1.0.121> [C:\Program Files\KV2005\ComUIPS.dll] <N/A><9. 5. 5. 20> [PID: 1628][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [PID: 1932][C:\PROGRA~1\KV2005\KVSrvXP.exe] <JiangMin New Tech Ltd.><9, 0, 5, 720> [C:\PROGRA~1\KV2005\UpdateX.dll] <JiangMin Ltd.><8, 0, 0, 0> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\Program Files\KV2005\KVEnhD.dll] <JiangMin Ltd.><9, 1, 5, 423> [C:\Program Files\KV2005\KvSPI.dll] <JiangMin New Tech. Ltd.><9, 0, 5, 720> [C:\PROGRA~1\KV2005\PProtect.dll] <北京江民新科技术公司><1.0.121> [C:\Program Files\KV2005\KVEnhP_1.dll] <JiangMin Ltd.><9, 0, 5, 405> [C:\Program Files\KV2005\KVEnhM.dll] <JiangMin Ltd.><9.0.0.500> [C:\Program Files\KV2005\KvSpiPS.dll] <JiangMin Ltd.><9.0.0.501> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [C:\Program Files\KV2005\KVEnhC.DLL] <JiangMin Ltd.><9, 1, 5, 603> [C:\Program Files\KV2005\KVEnhO.dll] <JiangMin New Tech Ltd.><9, 0, 5, 507> [C:\Program Files\KV2005\KVEnhS.dll] <JiangMin New Tech Ltd.><9, 0, 5, 607> [C:\Program Files\KV2005\KVEnhJ.dll] <JiangMin New Tech. Ltd.><9, 1, 5, 508> [C:\Program Files\KV2005\KVExtTar.dll] <Jiangmin New Tech.><9, 0, 5, 420> [C:\Program Files\KV2005\KVExtLZH.dll] <N/A><N/A> [C:\Program Files\KV2005\KVExtGz.dll] <Jiangmin New Tech.><9, 0, 5, 420> [C:\Program Files\KV2005\KvExtZip.dll] <JiangMin Ltd.><9, 0, 5, 420> [C:\Program Files\KV2005\KvExtRar.dll] <JiangMin Ltd.><9, 1, 0, 804> [C:\Program Files\KV2005\KVExtEml.dll] <JiangMin New Tech. Ltd.><9, 0, 0, 503> [C:\Program Files\KV2005\KVExtCab.dll] <JiangMin New Tech. Ltd.><9, 0, 5, 621> [C:\Program Files\KV2005\KVExtZ.dll] <Jiangmin New Tech.><9.1.0.503> [C:\Program Files\KV2005\KVEnhK.dll] <JiangMin Ltd.><9, 1, 5, 507> [PID: 1964][C:\Program Files\KV2005\kvwsc.exe] <Jiangmin Co.Ltd><9, 0, 0, 502> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\Program Files\KV2005\KVEnhP_1.dll] <JiangMin Ltd.><9, 0, 5, 405> [PID: 2000][C:\WINDOWS\SYSTEM32\RUNDLL32.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\WINDOWS\SYSTEM32\WBEM\IRJIT.DLL] <N/A><N/A> [PID: 248][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [PID: 1248][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [C:\Program Files\KV2005\TrojDie.kxp] <Jiangmin Co.Ltd><9, 0, 5, 916> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><8, 0, 0, 0> [C:\Program Files\KV2005\lang\TrojDie0804.lng] <N/A><N/A> [C:\Program Files\KV2005\GUIExt.dll] <JiangMin Ltd.><9.0.0.501> [C:\Program Files\KV2005\lang\GUIExt0804.lng] <JiangMin Ltd.><7, 1, 0, 200> [C:\Program Files\KV2005\PProtect.dll] <北京江民新科技术公司><1.0.121> [C:\Program Files\KV2005\ComUIPS.dll] <N/A><9. 5. 5. 20> [PID: 268][C:\Program Files\KV2005\KRegEx.exe] <Jiangmin><1.0.1.0413> [C:\Program Files\KV2005\KRegEx.dll] <N/A><N/A> [C:\Program Files\KV2005\KRegTrust.dll] <Jiangmin Co. Ltd.><9.0.0.825> [PID: 788][C:\WINDOWS\system32\DllHost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\KV2005\ComUI.dll] <Jiangmin Ltd.><9. 5. 5. 20> [C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><8, 0, 0, 0> [C:\Program Files\KV2005\ComUIPS.dll] <N/A><9. 5. 5. 20> [C:\Program Files\KV2005\GUIExt.dll] <JiangMin Ltd.><9.0.0.501> [C:\Program Files\KV2005\lang\GUIExt0804.lng] <JiangMin Ltd.><7, 1, 0, 200>
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-25 19:02 \| 显示全部短消息资料字号：小中大 9楼 [PID: 1500][C:\Program Files\VnetClient1.6\VnetClient.exe] <><2005, 11, 18, 1> [C:\Program Files\VnetClient1.6\Communicate.dll] <GDCN><2005, 3, 3, 1> [C:\Program Files\VnetClient1.6\DialModule.dll] <GDCN><2005, 9, 1, 1> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\PROGRA~1\VNETCL~1.6\CLIENT~1.DLL] <><2004, 2, 28, 1> [C:\PROGRA~1\VNETCL~1.6\PLUGIN~1.OCX] <><2005, 12, 20, 1> [C:\PROGRA~1\VNETCL~1.6\sign.dll] <0><2004, 12, 1, 1> [C:\PROGRA~1\VNETCL~1.6\SETUPP~1.DLL] <><1, 0, 0, 1> [C:\PROGRA~1\VNETCL~1.6\WEBPLU~1.DLL] <><2005, 8, 18, 1> [C:\Program Files\VnetClient1.6\SysPlug\gd-38706.7627012731\RFPlug.dll] <><1, 0, 0, 1> [C:\PROGRA~1\VNETCL~1.6\ADVERT~1.OCX] <><2005, 10, 13, 1> [C:\PROGRA~1\VNETCL~1.6\Gif89a.dll] <><2005, 6, 21, 1> [C:\PROGRA~1\VNETCL~1.6\VnetBs.ocx] <><2004, 11, 18, 1> [C:\PROGRA~1\VNETCL~1.6\ACCOUN~2.DLL] <><2005, 8, 11, 1> [C:\PROGRA~1\VNETCL~1.6\AccountMgr.dll] <><2005, 8, 16, 1> [C:\PROGRA~1\VNETCL~1.6\VnetSkin.ocx] <GDDC><2005, 12, 21, 1> [C:\PROGRA~1\VNETCL~1.6\DialogStyle.dll] <><1, 0, 0, 1> [C:\PROGRA~1\VNETCL~1.6\BDSearch.ocx] <gdcn><2005, 12, 22, 1> [C:\PROGRA~1\VNETCL~1.6\Timer.ocx] <><2005, 10, 9, 14> [C:\PROGRA~1\VNETCL~1.6\PLUGIN~2.OCX] <><2005, 2, 24, 1> [C:\PROGRA~1\VNETCL~1.6\NEWMES~1.DLL] <><2005, 8, 26, 1> [C:\PROGRA~1\VNETCL~1.6\PassCtrl.dll] <GDCN><2006, 1, 9, 10> [C:\WINDOWS\system32\wpcap.dll] <Politecnico di Torino><3, 0, 0, 18> [C:\WINDOWS\system32\pthreadVC.dll] <N/A><N/A> [C:\WINDOWS\system32\packet.dll] <Politecnico di Torino><3, 0, 0, 18> [C:\PROGRA~1\VNETCL~1.6\PlugPush.dll] <><2004, 12, 21, 1> [C:\PROGRA~1\VNETCL~1.6\ALLINT~1.DLL] <><2004, 11, 23, 1> [C:\PROGRA~1\VNETCL~1.6\VNETLO~1.OCX] <><2005, 4, 19, 1> [C:\PROGRA~1\VNETCL~1.6\StatNum.dll] <><2004, 11, 18, 1> [C:\PROGRA~1\VNETCL~1.6\VNETON~1.OCX] <><2005, 3, 2, 1> [C:\PROGRA~1\VNETCL~1.6\ALLFUN~1.DLL] <GDCN><2006, 1, 13, 11> [C:\PROGRA~1\VNETCL~1.6\VnetOptLog.dll] <><2005, 9, 13, 9> [C:\PROGRA~1\VNETCL~1.6\DlgSkin.ocx] <><1, 0, 0, 1> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 3560][C:\Program Files\Thunder Network\Thunder\Thunder.exe] <Thunder Networking Technologies,LTD><5.1.5.189> [C:\Program Files\Thunder Network\Thunder\UpdateDownload.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2> [C:\Program Files\Thunder Network\Thunder\download_interface.dll] <Thunder Networking Technologies,LTD><1, 0, 2, 74> [C:\Program Files\Thunder Network\Thunder\log4cplus.dll] <><1, 0, 2, 1> [C:\Program Files\Thunder Network\Thunder\stlport_vc646.dll] <STLport Consulting, Inc.><4.6.2003.1031> [C:\Program Files\Thunder Network\Thunder\msgmanage.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 15> [C:\Program Files\Thunder Network\Thunder\historyinfo_manage.dll] <Thunder Networking Technologies,LTD><5, 2, 0, 148> [C:\Program Files\Thunder Network\Thunder\iEmbed.dll] <Thunder Networking Technologies,LTD><1, 1, 0, 22> [C:\Program Files\Thunder Network\Thunder\RegisterDll.dll] <Thunder Networking Technologies,LTD><1, 2, 0, 7> [C:\Program Files\Thunder Network\Thunder\FloatBar.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 2> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [C:\Program Files\Thunder Network\Thunder\iTargetAd.dll] <Thunder Networking Technologies,LTD><1, 0, 0, 59> [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 2344][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\KV2005\KvShell_1.dll] <JiangMin Lmt><9, 0, 5, 1205> [C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><8, 0, 0, 0> [C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A> [C:\Program Files\KV2005\APIImpl.dll] <JiangMin Ltd.><9.0.0.500> [C:\Program Files\KV2005\GUIExt.dll] <JiangMin Ltd.><9.0.0.501> [C:\Program Files\KV2005\lang\GUIExt0804.lng] <JiangMin Ltd.><7, 1, 0, 200> [C:\WINDOWS\system32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62> [c:\PROGRA~1\VNETCL~1.6\VNETTR~1.DLL] <><2005, 4, 6, 1> [c:\PROGRA~1\VNETCL~1.6\Communicate.dll] <GDCN><2005, 3, 3, 1> [C:\PROGRA~1\VNETCL~1.6\CLIENT~1.DLL] <><2004, 2, 28, 1> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 2524][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)> [C:\Program Files\KV2005\KvShell_1.dll] <JiangMin Lmt><9, 0, 5, 1205> [C:\Program Files\KV2005\UpdateX.dll] <JiangMin Ltd.><8, 0, 0, 0> [C:\Program Files\KV2005\lang\Kvxp0804_1.lng] <N/A><N/A> [C:\Program Files\KV2005\APIImpl.dll] <JiangMin Ltd.><9.0.0.500> [C:\Program Files\KV2005\GUIExt.dll] <JiangMin Ltd.><9.0.0.501> [C:\Program Files\KV2005\lang\GUIExt0804.lng] <JiangMin Ltd.><7, 1, 0, 200> [C:\WINDOWS\system32\xunleibho_v14.dll] <Thunder Networking Technologies,LTD><4, 6, 0, 62> [c:\PROGRA~1\VNETCL~1.6\VNETTR~1.DLL] <><2005, 4, 6, 1> [c:\PROGRA~1\VNETCL~1.6\Communicate.dll] <GDCN><2005, 3, 3, 1> [C:\PROGRA~1\VNETCL~1.6\CLIENT~1.DLL] <><2004, 2, 28, 1> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> [C:\WINDOWS\system32\Macromed\Flash\Flash8a.ocx] <Macromedia, Inc.><8,0,24,0> [PID: 2536][E:\SREng.exe] <Smallfrogs Studio><2.0.12.350> [C:\Program Files\Iparmor\SocketArmor.dll] <N/A><N/A> [C:\WINDOWS\system32\KvWspXp.dll] <JiangMin Ltd.><9, 0, 5, 324> ==================================
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:	发表于： 2006-05-25 19:03 \| 显示全部短消息资料字号：小中大 10楼文件关联 .TXT Error. [NOTEPAD.EXE %1] .EXE OK. ["%1" %] .COM OK. ["%1" %] .PIF OK. ["%1" %] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 MSAFD Tcpip [TCP/IP] C:\WINDOWS\system32\KvWspXp.dll(JiangMin Ltd., KVWspXP) MSAFD Tcpip [UDP/IP] C:\WINDOWS\system32\KvWspXp.dll(JiangMin Ltd., KVWspXP) MSAFD Tcpip [RAW/IP] C:\WINDOWS\system32\KvWspXp.dll(JiangMin Ltd., KVWspXP) ================================== 发完了............好多!
我知道你是啊初生襁褓狮帖子:141 注册: 2006-03-27 来自:

<<上一主题|下一主题>>

12

1 / 2 页

跳转页

页面顶部

Powered by Discuz!NT