==================================
浏览器加载项
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\Program Files\JiangMin\AntiVirus\KVshell_1.dll, Jiangmin Co.Ltd>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[CaiFuCOM Class]
{C1F0024B-8278-4999-B7E6-2718426D9FE6} <C:\Program Files\财富通\caif.dll, N/A>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\JiangMin\AntiVirus\KVshell_1.dll, Jiangmin Co.Ltd>
[Windows Media Player]
{6BF52A52-394A-11D3-B153-00C04F79FAA6} <C:\WINDOWS\system32\wmp.dll, Microsoft Corporation>
[BrowseHelper Class]
{80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\Program Files\JiangMin\AntiVirus\KVshell_1.dll, Jiangmin Co.Ltd>
[江民杀毒工具栏]
{B5A34A93-D538-43A7-8371-864CB6148D12} <C:\Program Files\JiangMin\AntiVirus\KVshell_1.dll, Jiangmin Co.Ltd>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[&使用迅雷下载]
<d:\Program Files\Thunder Network\Thunder\geturl.htm, N/A>
[&使用迅雷下载全部链接]
<d:\Program Files\Thunder Network\Thunder\getAllurl.htm, N/A>
[上传到QQ网络硬盘]
<E:\Program Files\Tencent\qq\AddToNetDisk.htm, N/A>
[导出到 Microsoft Office Excel(&X)]
<res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000, N/A>
[添加到QQ自定义面板]
<E:\Program Files\Tencent\qq\AddPanel.htm, N/A>
[添加到QQ表情]
<E:\Program Files\Tencent\qq\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
<E:\Program Files\Tencent\qq\SendMMS.htm, N/A>
==================================
正在运行的进程
[PID: 544][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 628][\??\C:\WINDOWS\system32\csrss.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 652][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[c:\program files\pc connectivity solution\poswjgxj.dll] [N/A, N/A]
[PID: 696][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 708][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 860][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 928][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1028][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1076][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1136][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1516][C:\WINDOWS\system32\spoolsv.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1816][C:\Program Files\JiangMin\AntiVirus\KVWSC.exe] [Jiangmin Co.,Ltd, 1, 0, 7, 131]
[C:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 306]
[C:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 7, 226]
[PID: 1904][C:\WINDOWS\system32\wdfmgr.exe] [Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act)]
[PID: 260][C:\Program Files\JiangMin\AntiVirus\kvsrvxp.exe] [Jiangmin Co., Ltd., 10, 0, 7, 205]
[C:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 7, 226]
[C:\Program Files\JiangMin\AntiVirus\SvcSafe.dll] [Jiangmin Co., Ltd., 10, 0, 7, 129]
[C:\Program Files\JiangMin\AntiVirus\lang\SvcSafe0804.lng] [N/A, N/A]
[C:\Program Files\JiangMin\KVOL\autoUpdate.dll] [Jiangmin Co.Ltd, 1, 0, 7, 215]
[C:\Program Files\JiangMin\Kernel\Scan.dll] [Jiangmin Co., Ltd., 2.0.7.119]
[C:\Program Files\JiangMin\Kernel\EngFace.dll] [Jiangmin Co., Ltd., 2, 0, 7, 306]
[C:\Program Files\JiangMin\AntiVirus\FileGuard.dll] [Jiangmin Co., Ltd., 1, 0, 6, 803]
[C:\Program Files\JiangMin\AntiVirus\FileGuardNT.dll] [Jiangmin Co., Ltd., 10, 2, 7, 307]
[C:\Program Files\JiangMin\AntiVirus\NetGuard.dll] [Jiangmin Co., Ltd., 1, 0, 7, 130]
[C:\Program Files\JiangMin\common\KvTxd.dll] [Jiangmin Co., Ltd., 10.0.6.1106]
[C:\Program Files\JiangMin\AntiVirus\GuardPS.dll] [Jiangmin Co., Ltd., 1, 0, 6, 1110]
[C:\Program Files\JiangMin\AntiVirus\KvCkMail.dll] [Jiangmin Co., Ltd., 10, 0, 6, 915]
[C:\Program Files\JiangMin\AntiVirus\lang\KvMailRes0804.lng] [N/A, N/A]
[C:\Program Files\JiangMin\AntiVirus\KVAddrDb_1.dll] [Jiangmin Co., Ltd., 1.0.0.1]
[C:\Program Files\JiangMin\AntiVirus\KvMailDb_1.dll] [Jiangmin Co., Ltd., 10, 0, 6, 1103]
[C:\Program Files\JiangMin\AntiVirus\KsProtect.dll] [Jiangmin Co. Ltd., 1, 0, 7, 326]
[C:\Program Files\JiangMin\common\KvTools.dll] [Jiangmin Co. Ltd., 1, 0, 7, 323]
[C:\Program Files\JiangMin\common\IsysCall.dll] [Jiangmin Co., Ltd., 1, 0, 7, 326]
[C:\Program Files\JiangMin\AntiVirus\ISysMon.dll] [Jiangmin Co., Ltd., 1, 0, 7, 301]
[C:\Program Files\JiangMin\common\KregTrust.dll] [Jiangmin Co., 10, 0, 6, 812]
[C:\Program Files\JiangMin\Kernel\ScanPS.dll] [Jiangmin Co., Ltd., 1, 0, 6, 722]
[C:\Program Files\JiangMin\KVOL\UpdatePlugIn.dll] [Jiangmin Co., Ltd., 1, 0, 6, 831]
[PID: 580][C:\WINDOWS\System32\alg.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1824][D:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe] [Nokia, 6, 82, 70, 1]
[C:\Program Files\PC Connectivity Solution\ConnAPI.DLL] [Nokia., 6, 82, 72, 2]
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSCM.dll] [Nokia, 6, 82, 77, 0]
[D:\Program Files\Nokia\Nokia PC Suite 6\PCSSupportSetup.DLL] [Nokia, 6, 82, 20, 2]
[C:\Program Files\PC Connectivity Solution\ConfServer.dll] [Nokia, 6, 82, 31, 0]
[D:\Program Files\Nokia\Nokia PC Suite 6\Lang\LaunchApplication_chi-sc.NLR] [Nokia, 6, 82, 69, 2]
[PID: 240][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 516][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 924][C:\Program Files\PC Connectivity Solution\ServiceLayer.exe] [Nokia., 6, 82, 69, 3]
[C:\Program Files\PC Connectivity Solution\NclTools.dll] [Nokia, 6, 82, 26, 3]
[C:\Program Files\PC Connectivity Solution\Transports\NCLIrDAMM.dll] [Nokia Corp., 6, 82, 31, 0]
[C:\Program Files\PC Connectivity Solution\Transports\NCLRSMM.dll] [Nokia Corp., 6, 82, 39, 1]
[C:\Program Files\PC Connectivity Solution\Transports\NCLUSBMM.dll] [Nokia Corp., 6, 82, 48, 0]
[C:\Program Files\PC Connectivity Solution\Transports\NclMSBTMM.dll] [Nokia Corp., 6, 82, 47, 1]
[PID: 3608][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1984][D:\Program Files\Maxthon\Maxthon.exe] [Maxthon International Ltd., 1, 5, 9, 30]
[D:\Program Files\Maxthon\maxzlib.dll] [ , 1, 0, 0, 2]
[D:\Program Files\Maxthon\Services\RealTime\real_time.dll] [, 1, 0, 0, 1]
[C:\WINDOWS\system32\UNISPIM5.IME] [北京紫光华宇软件股份有限公司, 5.0.0.5091]
[C:\WINDOWS\system32\respri.dll] [N/A, N/A]
[C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx] [Adobe Systems, Inc., 9,0,16,0]
[PID: 3252][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3776][C:\WINDOWS\explorer.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[C:\WINDOWS\system32\HiveBase.dll] [Jiangmin Co., Ltd., 1, 0, 7, 226]
[C:\Program Files\JiangMin\common\GUIEXT_1.DLL] [Jiangmin Co.Ltd, 1, 0, 6, 1201]
[C:\Program Files\JiangMin\common\lang\guiext0804.lng] [JiangMin Ltd., 7, 1, 0, 200]
[C:\Program Files\JiangMin\AntiVirus\KVshell_1.dll] [Jiangmin Co.Ltd, 1, 0, 7, 319]
[C:\Program Files\JiangMin\AntiVirus\lang\kvxp0804_1.lng] [N/A, N/A]
[c:\program files\pc connectivity solution\poswjgxj.dll] [N/A, N/A]
[C:\WINDOWS\system32\respri.dll] [N/A, N/A]
[C:\Program Files\Common Files\Microsoft Shared\MSINFO\NewInfo.dll] [N/A, N/A]
[PID: 2436][D:\download\sreng2\SREng.EXE] [Smallfrogs Studio, 2.3.13.690]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM Error. ["hh.exe" %1]
.HLP Error. [winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
N/A
==================================
[/CODE]