注册表扫描,中了病毒,看不懂,请教各位大侠,

ystem Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)

Windows 2000 Server Service Pack 4 (Build 2195)
- 管理权限用户 - 完整功能

以下内容被选中:
    所有的启动项目(包括注册表、启动文件夹、服务等)
    浏览器加载项
    正在运行的进程(包括进程模块信息)
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <Internat.exe><internat.exe>  [Microsoft Corporation]
    <KvXP><"C:\KV2005\KvXP.kxp" /ScanBoot /ScanSys>  [Jiangmin Co.Ltd]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <KvMonXP><>  []
    <SKYNET Personal FireWall><>  []
    <ATIPTA><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINNT\system32\USERINIT.EXE>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif]
    <WinlogonNotify: wzcnotif><wzcdlg.dll>  []
[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><(无)>  []

==================================
启动文件夹
[Microsoft Office]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Microsoft Office.lnk><N>
[WinGate Engine Monitor]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\WinGate Engine Monitor.lnk><N>

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[KVSrvXP / KVSrvXP]
  <C:\KV2005\KVSrvXP.exe -Service><JiangMin New Tech Ltd.>
[mms-up / mms-up]
  <><N/A>
[Network System / Universal Disk Manager]
  <><N/A>
[Qbik WinGate Engine / WinGateEngine]
  <D:\WinGate\WinGate.exe><Qbik Software NZ Ltd>

==================================
浏览器加载项
[BrowseHelper Class]
  {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <C:\KV2005\KvShell_2.dll, JiangMin Lmt>
[WinSC Class]
  {9ACEEE31-1440-471B-AA46-72B061FE7D61} <C:\WINNT\system32\WinSC32.dll, N/A>
[IeCatch2 Class]
  {A5366673-E8CA-11D3-9CD9-0090271D075B} <D:\FlashGet\jccatch.dll, Amaze Soft>
[DuiSo.com Search]
  {E2218499-2FD4-4EED-A94A-7F0B9C6E300E} <C:\WINNT\system32\Inte32.dll, N/A>
[BHelper Class]
  {F2E37336-BFDB-409B-8D0E-6F013C438B20} <C:\WINNT\system\078o9850.dll, N/A>
[江民杀毒工具栏]
  {B5A34A93-D538-43A7-8371-864CB6148D12} <C:\KV2005\KvShell_2.dll, JiangMin Lmt>
[FlashGet Bar]
  {E0E899AB-F487-11D5-8D29-0050BA6940E3} <D:\FlashGet\fgiebar.dll, Amaze Soft>
[系统标准按钮(&E)]
  {6B2455FD-3669-4555-8DF8-69FD5BC846F8} <C:\WINNT\system32\SystemToolbar.dll, N/A>

==================================
正在运行的进程
[PID: 148][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 176][\??\C:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 196][\??\C:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6898>
[PID: 224][C:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.6700>
    [C:\WINNT\system32\dmserver.dll]  <VERITAS Software Corp.><2195.6605.297.3>
[PID: 236][C:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6902>
[PID: 400][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
[PID: 424][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
[PID: 264][C:\WINNT\Explorer.EXE]  <Microsoft Corporation><5.00.3700.6690>
    [C:\KV2005\KvShell_2.dll]  <JiangMin Lmt><9, 0, 5, 1205>
    [C:\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [C:\KV2005\lang\Kvxp0804_1.lng]  <N/A><N/A>
    [C:\KV2005\APIImpl.dll]  <JiangMin Ltd.><9.0.0.500>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [C:\KV2005\KvXP.kxp]  <Jiangmin Co.Ltd><9, 0, 5, 1205>
    [C:\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [C:\KV2005\FrogAgentPS.dll]  <JiangMin Ltd.><9.0.0.500>
    [C:\KV2005\APIImpl.dll]  <JiangMin Ltd.><9.0.0.500>
    [C:\KV2005\PProtect.dll]  <北京江民新科技术公司><1.0.121>
    [C:\KV2005\KvXpUw.dll]  <jiangmin software><9, 0, 5, 922>
    [C:\KV2005\KVEnhO.dll]  <JiangMin New Tech Ltd.><9, 0, 5, 507>
    [C:\KV2005\lang\Kvxp0804_1.lng]  <N/A><N/A>
    [C:\KV2005\GUIExt.dll]  <JiangMin Ltd.><9.0.0.501>
    [C:\KV2005\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
    [C:\KV2005\VirusUpload.dll]  <N/A><2, 0, 0, 0>
    [C:\KV2005\KVWPSet.dll]  <N/A><9, 0, 0, 505>
    [C:\KV2005\KVEnhD.dll]  <JiangMin Ltd.><9, 1, 5, 423>
    [C:\KV2005\KVEnhC.DLL]  <JiangMin Ltd.><9, 1, 5, 603>
    [C:\KV2005\KVEnhS.dll]  <JiangMin New Tech Ltd.><9, 0, 5, 607>
    [C:\KV2005\KVEnhJ.dll]  <JiangMin New Tech. Ltd.><9, 1, 5, 508>
    [C:\KV2005\KVExtCab.dll]  <JiangMin New Tech. Ltd.><9, 0, 5, 621>
    [C:\KV2005\KVExtEml.dll]  <JiangMin New Tech. Ltd.><9, 0, 0, 503>
    [C:\KV2005\KVExtGz.dll]  <Jiangmin New Tech.><9, 0, 5, 420>
    [C:\KV2005\KVExtLZH.dll]  <N/A><N/A>
    [C:\KV2005\KvExtRar.dll]  <JiangMin Ltd.><9, 1, 0, 804>
    [C:\KV2005\KVExtTar.dll]  <Jiangmin New Tech.><9, 0, 5, 420>
    [C:\KV2005\KVExtZ.dll]  <Jiangmin New Tech.><9.1.0.503>
    [C:\KV2005\KvExtZip.dll]  <JiangMin Ltd.><9, 0, 5, 420>
    [C:\KV2005\KVEnhK.dll]  <JiangMin Ltd.><9, 1, 5, 507>
[PID: 488][C:\WINNT\system32\DllHost.exe]  <Microsoft Corporation><5.00.2195.6692>
    [C:\KV2005\FrogAgent.dll]  <JiangMin Ltd.><9.0.0.500>
    [C:\KV2005\UpdateX.dll]  <JiangMin Ltd.><8, 0, 0, 0>
    [C:\KV2005\FrogAgentPS.dll]  <JiangMin Ltd.><9.0.0.500>
[PID: 456][C:\WINNT\msagent\AgentSvr.exe]  <Microsoft Corporation><2.00.0.3422>
[PID: 624][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX79.531\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX79.531\SREng2\Plugins\SREngPluginDemo.SRE]  <Smallfrogs Studio><1, 1, 1, 0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  Error. []
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]
最后编辑2006-09-08 09:42:23.140000000