HijackThis@Qoo的扫描日志 V1.97.7
Scan saved at 4:11:29, on 2005-10-16
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\KV2005\KVMonXP.kxp
C:\WINDOWS\System32\taskmgr.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\PROGRA~1\KV2005\KVSrvXP.exe
C:\Program Files\KV2005\TrojDie.kxp
C:\Program Files\KV2005\KRegEx.exe
C:\WINDOWS\System32\DllHost.exe
C:\Program Files\Tencent\TT\TTraveler.exe
C:\Program Files\HijackThis.exe
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.789.com.cn
O1 - Hosts: 61.152.96.202 789.com.cn
O1 - Hosts: 61.152.96.202 983.com.cn
O1 - Hosts: 61.152.96.202 www.983.com.cn
O1 - Hosts: 61.152.96.202 www.tvnet.com.cn
O1 - Hosts: 61.152.96.202 www.cnbb.com.cn
O1 - Hosts: 61.152.96.202 www.zxmr.com.cn
O1 - Hosts: 61.152.96.202 www.sealonline.com.cn
O1 - Hosts: 61.152.96.202 www.buy.com.cn
O1 - Hosts: 61.152.96.202 www.114.com.cn
O1 - Hosts: 61.152.96.202 www.tvnet.com.cn
O1 - Hosts: 61.152.96.202 www.mobilesky.com.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.116.com.cn
O1 - Hosts: 61.152.96.202 www.cis.com.cn
O1 - Hosts: 61.152.96.202 www.egames.com.cn
O1 - Hosts: 61.152.96.202 www.gameking.com.cn
O1 - Hosts: 61.152.96.202 www.pconline.com.cn
O1 - Hosts: 61.152.96.202 www.tq121.com.cn
O1 - Hosts: 61.152.96.202 www.wangma.com.cn
O1 - Hosts: 61.152.96.202 www.otm.com.cn
O1 - Hosts: 61.152.96.202 www.tq121.com.cn
O1 - Hosts: 61.152.96.202 www.zhao114.com.cn
O1 - Hosts: 61.152.96.202 ad4.sina.com.cn
O1 - Hosts: 61.152.96.202 adms.zjol.com.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.pconline.com.cn
O1 - Hosts: 61.152.96.202 ah.stu.com.cn
O1 - Hosts: 61.152.96.202 amuse.nen.com.cn
O1 - Hosts: 61.152.96.202 astro.women.sohu.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 bbs.rayli.com.cn
O1 - Hosts: 61.152.96.202 biz.zjol.com.cn
O1 - Hosts: 61.152.96.202 health.jschina.com.cn
O1 - Hosts: 61.152.96.202 image.dt.com.cn
O1 - Hosts: 61.152.96.202 image2.sina.com.cn
O1 - Hosts: 61.152.96.202 images.gd.sina.com.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 video3.zjol.com.cn
O1 - Hosts: 61.152.96.202 video3.zjonline.com.cn
O1 - Hosts: 61.152.96.202 vnews.avl.com.cn
O1 - Hosts: 61.152.96.202 news.116.com.cn
O1 - Hosts: 61.152.96.202 news.zjol.com.cn
O1 - Hosts: 61.152.96.202 tracking.zjonline.com.cn
O1 - Hosts: 61.152.96.202 usa.nedstatbasic.net"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 video3.zjol.com.cn
O1 - Hosts: 61.152.96.202 video3.zjonline.com.cn
O1 - Hosts: 61.152.96.202 vnews.avl.com.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 7m.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.7m.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.57666.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 57666.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.98756.net#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.u88.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 98756.net#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.98756.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 98756.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.6743.net#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 51238.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.51238.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 699.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.699.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 323.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.323.cn#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 wo111.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.xg1314.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 xg1314.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 07007.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.07007.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.cp111.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 cp111.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 www.wo111.com#"
O1 - Hosts: "
O1 - Hosts: 61.152.96.202 cn9898.com#"
O1 - Hosts: "
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\WINDOWS\Downloaded Program Files\Ijrh.dll (file missing)
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll
O2 - BHO: (no name) - {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} - C:\Program Files\KV2005\KvShell_1.dll
O2 - BHO: AssistII - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O2 - BHO: IE - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\DOWNLO~1\CnsHook.dll
O3 - Toolbar: ????? - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: ????? - {BB936323-19FA-4521-BA29-ECA6A121BC78} - C:\Program Files\3721\Assist\asbar.dll
O3 - Toolbar: ????? - {B5A34A93-D538-43A7-8371-864CB6148D12} - C:\Program Files\KV2005\KvShell_1.dll
O4 - HKLM\..\Run: [Super Rabbit SRRestore] ; C:\PROGRA~1\SUPERR~1\MAGICSET\SRRest.exe /autosave
O4 - HKLM\..\Run: [KvMonXP] "C:\Program Files\KV2005\KVMonXP.kxp" /auto
O4 - HKLM\..\Run: [KernelFaultCheck] ; %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [IMSCMig] ; C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\RunServices: [Up Service] ; up32.pif
O4 - HKLM\..\RunServices: [Wind Security] ; mswi32.pif
O4 - HKCU\..\Run: [Up Service] up32.pif
O4 - HKCU\..\Run: [Wind Security] mswi32.pif
O4 - HKCU\..\Run: [KvXP] "C:\Program Files\KV2005\KvXP.kxp" /ScanBoot /ScanSys
O4 - HKCU\..\RunServices: [Win Security] msw32.pif
O4 - HKCU\..\RunServices: [Up Service] up32.pif
O4 - HKCU\..\RunServices: [Wind Security] mswi32.pif
O4 - Startup: NTUSER.DAT
O4 - Startup: ntuser.dat.LOG
O4 - Startup: ntuser.ini
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: QQ (HKLM)
O10 - Unknown file in Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\kvwspxp_1.dll
O11 - Options group: [!CNS]
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {3D8F74EE-8692-4F8F-B8D2-7522E732519E} (WebActivater Control) - http://game.qq.com/QQGame2.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129214931734
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash
Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan
Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/Ver2005/OL2005.cab
O16 - DPF: {F138084D-84D7-48CD-BEA8-04772457516E} (VqqSpeedDlProxy Class) - http://218.85.138.27/vqqsdl1009.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8103D756-AD0B-4AC1-8CE8-2EBA097AE8D8}: NameServer = 61.128.128.68
