各位大侠``今天突然发现C盘根目录下突然多了两个程序`一看就是病毒`但我用江民查不出这个病毒`我用删的当然不行，重启后又有了`扫描日志如下`
启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [Microsoft Corporation]
    <KvXP><"D:\工具\KV2006\KV2006\KvXP.kxp" /ScanBoot /ScanSys>  [Jiangmin Co.Ltd]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <load><>  []
    <run><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    <IMJPMIG8.1><; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32>  [Microsoft Corporation]
    <PHIME2002ASync><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC>  [Microsoft Corporation]
    <PHIME2002A><C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName>  [Microsoft Corporation]
    <SoundMan><; SOUNDMAN.EXE>  [Realtek Semiconductor Corp.]
    <TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [RealNetworks, Inc.]
    <LZCards.exe><G:\联众升级记牌器\LZCards.exe>  []
    <mmsk><; D:\工具\木马杀客\木马杀客\mmsk.exe>  []
    <Anti Spy tools><D:\工具\超级巡警\ast1.5.7\ast.exe -min>  []
    <KvMonXP><"D:\工具\KV2006\KV2006\KVMonXP.kxp" /auto>  [Jiangmin Co.Ltd]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <shell><Explorer.exe>  [Microsoft Corporation]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_DLLs><>  []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
    <WinlogonNotify: AtiExtEvent><Ati2evxx.dll>  [ATI Technologies Inc.]

==================================
启动文件夹
[InterVideo WinCinema Manager]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\InterVideo WinCinema Manager.lnk><H>

==================================
服务
[Ati HotKey Poller / Ati HotKey Poller]
  <C:\WINDOWS\system32\Ati2evxx.exe><ATI Technologies Inc.>
[ATI Smart / ATI Smart]
  <C:\WINDOWS\system32\ati2sgag.exe><>
[KVSrvXP / KVSrvXP]
  <D:\工具\KV2006\KV2006\KVSrvXP.exe /Service><Jiangmin Co. Ltd>
[KVWSC / KVWSC]
  <"D:\工具\KV2006\KV2006\kvwsc.exe"><Jiangmin Co.Ltd>

==================================
浏览器加载项
[FiltrateWebObj Class]
  {42AFACEE-2A77-41EB-9EE2-D9F8AF827F90} <D:\工具\KV2006\KV2006\KVBHO.dll, Jiangmin Co.Ltd>
[BrowseHelper Class]
  {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <D:\工具\KV2006\KV2006\KvShell.dll, Jiangmin Co.Ltd>
[启动迅雷]
  {0062C9BD-B349-40DE-91A0-755F37ACD559} <D:\工具\迅雷\Thunder.exe, Thunder Networking Technologies,LTD>
[浩方对战平台]
  {0A155D3C-68E2-4215-A47A-E800A446447A} <G:\浩方对战平台\浩方对战平台\GameClient.exe, 上海浩方在线信息技术有限公司>
[Messenger]
  {FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[江民杀毒工具栏]
  {B5A34A93-D538-43A7-8371-864CB6148D12} <D:\工具\KV2006\KV2006\KvShell.dll, Jiangmin Co.Ltd>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[Recorder Control]
  {2423AB16-9F42-457B-A337-FE3B11964DB0} <D:\工具\BLUESK~1\recorder.ocx, Bluesky Studio (http://www.bluesky.cn)>
[HTML Document]
  {25336920-03F9-11CF-8FD0-00AA00686F13} <%SystemRoot%\system32\mshtml.dll, N/A>
[BlueskyVideo Control]
  {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} <D:\工具\BLUESK~1\v2.ocx, 蓝天工作室(http://www.bluesky.cn)>
[Share Control]
  {3072B1F1-0C4D-4E76-A7C6-FBAF129DBCC9} <D:\工具\BLUESK~1\share.ocx, http://www.bluesky.cn>
[FiltrateWebObj Class]
  {42AFACEE-2A77-41EB-9EE2-D9F8AF827F90} <D:\工具\KV2006\KV2006\KVBHO.dll, Jiangmin Co.Ltd>
[PP Control]
  {616DACC1-C5E6-4646-B36A-3FA4FC726BAD} <D:\工具\BLUESK~1\ppc.ocx, Bluesky Studio (http://www.bluesky.cn)>
[PP Control]
  {7005341F-8E42-47E3-987B-3DBE6288048C} <D:\工具\BLUESK~1\pp.ocx, Bluesky Studio (http://www.bluesky.cn)>
[Videohelp Control]
  {75B75D86-D88B-4BEA-BC59-BFD9D7300518} <D:\工具\BLUESK~1\VIDEOH~1.OCX, Bluesky Studio(http://www.bluesky.cn)>
[BrowseHelper Class]
  {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9} <D:\工具\KV2006\KV2006\KvShell.dll, Jiangmin Co.Ltd>
[Filetran Control]
  {88734439-46D0-42C0-A13F-7E881EE550CF} <D:\工具\BLUESK~1\filetran.ocx, Bluesky Studio(http://www.bluesky.cn)>
[Chat Control]
  {94EFE58C-E678-4808-AD65-24CE4B94C1FE} <D:\工具\BLUESK~1\chat.ocx, Bluesky Studio(http://www.bluesky.cn)>
[Blueskyvoice Control]
  {991481A7-4669-4e15-8C24-100404E1F5CB} <D:\工具\BLUESK~1\BLUESK~1.OCX, 蓝天工作室(http://www.bluesky.cn)>
[Display Control]
  {A1D97DB3-E564-4743-B2E7-6F5182CBF406} <D:\工具\BLUESK~1\display.ocx, Bluesky Studio (http://www.bluesky.cn)>
[Tracechat Control]
  {A40335C4-D3D1-4E7B-9130-039CDA5B603C} <D:\工具\BLUESK~1\TRACEC~1.OCX, bluesky studio>
[江民杀毒工具栏]
  {B5A34A93-D538-43A7-8371-864CB6148D12} <D:\工具\KV2006\KV2006\KvShell.dll, Jiangmin Co.Ltd>
[Blueskyvoice Control]
  {BA0F088C-72C1-475a-92F8-42391DEF6961} <D:\工具\BLUESK~1\BLUESK~2.OCX, 蓝天工作室(http://www.bluesky.cn)>
[Client Control]
  {C7B0C764-5D4E-433E-A854-591F28520577} <D:\工具\BLUESK~1\client.ocx, >
[Play Control]
  {CC20DDA1-9A21-4DEC-B5BE-E61E0351FCA9} <D:\工具\BLUESK~1\play.ocx, Bluesky Studio (http://www.bluesky.cn)>
[Shockwave Flash Object]
  {D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx, Adobe Systems, Inc.>
[&使用迅雷下载]
  <D:\工具\迅雷\Program\GetUrl.htm, N/A>
[&使用迅雷下载全部链接]
  <D:\工具\迅雷\Program\GetAllUrl.htm, N/A>
[上传到QQ网络硬盘]
  <G:\QQ\AddToNetDisk.htm, N/A>
[添加到QQ自定义面板]
  <G:\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
  <G:\QQ\AddEmotion.htm, N/A>
[用QQ彩信发送该图片]
  <G:\QQ\SendMMS.htm, N/A>

==================================
正在运行的进程
[PID: 556][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 628][\??\C:\WINDOWS\system32\csrss.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 656][\??\C:\WINDOWS\system32\winlogon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\Ati2evxx.dll]  <ATI Technologies Inc.><6.14.10.4146>
[PID: 700][C:\WINDOWS\system32\services.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 712][C:\WINDOWS\system32\lsass.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 876][C:\WINDOWS\system32\Ati2evxx.exe]  <ATI Technologies Inc.><6.14.10.4146>
    [C:\WINDOWS\system32\Ati2edxx.dll]  <ATI Technologies, Inc.><6, 14, 10, 2504>
[PID: 888][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 960][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1068][C:\WINDOWS\System32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1132][C:\WINDOWS\system32\Ati2evxx.exe]  <ATI Technologies Inc.><6.14.10.4146>
    [C:\WINDOWS\system32\Ati2edxx.dll]  <ATI Technologies, Inc.><6, 14, 10, 2504>

[C:\WINDOWS\system32\ati2evxx.dll]  <ATI Technologies Inc.><6.14.10.4146>
[PID: 1184][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1216][C:\WINDOWS\system32\svchost.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1484][C:\WINDOWS\system32\spoolsv.exe]  <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[PID: 1652][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [G:\联众升级记牌器\lz.dll]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\KvShell.dll]  <Jiangmin Co.Ltd><9, 0, 5, 830>
    [D:\工具\KV2006\KV2006\UpdateX.dll]  <JiangMin Co.Ltd.><9, 0, 5, 831>
    [D:\工具\KV2006\KV2006\lang\Kvxp0804.lng]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\APIImpl.dll]  <JiangMin Ltd.><9.0.0.500>
    [D:\工具\KV2006\KV2006\GUIExt.dll]  <Jiangmin Co.Ltd><9, 0, 5, 927>
    [D:\工具\KV2006\KV2006\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
    [D:\工具\KV2006\KV2006\KVBHO.dll]  <Jiangmin Co.Ltd><9.0.6.0113>
    [D:\工具\KV2006\KV2006\KVAddrDb.dll]  <Jiangmin Co.Ltd><9, 0, 0, 1018>
    [D:\工具\KV2006\KV2006\KVHookG.dll]  <Jiangmin Co.Ltd><9.0.0.1226>
    [D:\工具\winrar\rarext.dll]  <N/A><N/A>
[PID: 1828][G:\联众升级记牌器\LZCards.exe]  <N/A><N/A>
    [G:\联众升级记牌器\lz.dll]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\KVMonXP.kxp]  <Jiangmin Co.Ltd><9, 2, 0, 60905>
    [D:\工具\KV2006\KV2006\UpdateX.dll]  <JiangMin Co.Ltd.><9, 0, 5, 831>
    [D:\工具\KV2006\KV2006\lang\Kvxp0804.lng]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\GUIExt.dll]  <Jiangmin Co.Ltd><9, 0, 5, 927>
    [D:\工具\KV2006\KV2006\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
    [D:\工具\KV2006\KV2006\EngFace.dll]  <Jiangmin Co.Ltd><9.0.0.50809>
    [D:\工具\KV2006\KV2006\EngPS.dll]  <Jiangmin Co.Ltd><9, 2, 0, 50817>
    [D:\工具\KV2006\KV2006\KvMemory.dll]  <Jiangmin Co. Ltd.><9, 0, 6, 0214>
    [D:\工具\KV2006\KV2006\KvOffice.dll]  <JiangMin New Tech.><9.0.0.1213>
    [D:\工具\KV2006\KV2006\lang\KVOffice0804.lng]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\VirusUpload.dll]  <N/A><2, 16, 6, 7260>
    [D:\工具\KV2006\KV2006\KVHookG.dll]  <Jiangmin Co.Ltd><9.0.0.1226>
    [D:\工具\KV2006\KV2006\PProtect.dll]  <Jiangmin Co. Ltd.><9.0.0.921>
[PID: 1852][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [D:\工具\KV2006\KV2006\KVHookG.dll]  <Jiangmin Co.Ltd><9.0.0.1226>
[PID: 1104][D:\工具\KV2006\KV2006\KVSrvXP.exe]  <Jiangmin Co. Ltd><9.2.0.50822>
    [D:\工具\KV2006\KV2006\UpdateX.dll]  <JiangMin Co.Ltd.><9, 0, 5, 831>
    [D:\工具\KV2006\KV2006\SvcSafe.dll]  <Jiangmin Co. Ltd><9, 2, 0, 51107>
    [D:\工具\KV2006\KV2006\lang\SvcSafe0804.lng]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\RegProt.dll]  <Jiangmin Co.Ltd><9, 0, 5, 1212>
    [D:\工具\KV2006\KV2006\Scan.dll]  <Jiangmin Co., Ltd.><1.0.6.07110>
    [D:\工具\KV2006\KV2006\FileGD.dll]  <Jiangmin Co.Ltd><9.2.0.50809>
    [D:\工具\KV2006\KV2006\KvSPI.dll]  <Jiangmin Co. Ltd.><1.0.6.1024>
    [D:\工具\KV2006\KV2006\lang\KVSpi0804.lng]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\ScanHost.dll]  <Jiangmin Co. Ltd><9, 2, 0, 50822>
    [D:\工具\KV2006\KV2006\KVWPSet.dll]  <Jiangmin Co.Ltd><9, 0, 0, 60220>
    [D:\工具\KV2006\KV2006\EngPS.dll]  <Jiangmin Co.Ltd><9, 2, 0, 50817>
    [D:\工具\KV2006\KV2006\KVEnhS.dll]  <Jiangmin Co., Ltd.><9, 2, 6, 02040>
    [D:\工具\KV2006\KV2006\KVEnhJ.dll]  <Jiangmin Co.Ltd><9, 1, 0, 50822>
    [D:\工具\KV2006\KV2006\KVExtCab.dll]  <JiangMin Co. Ltd><9, 2, 0, 50822>
    [D:\工具\KV2006\KV2006\KvExtZip.dll]  <JiangMin Co Ltd.><9, 2, 0, 50822>
    [D:\工具\KV2006\KV2006\KVExtZ.dll]  <Jiangmin Co. Ltd><9.2.0.503>
    [D:\工具\KV2006\KV2006\KVExtTar.dll]  <Jiangmin Co. Ltd><9, 2, 0, 50822>
    [D:\工具\KV2006\KV2006\KVExtEml.dll]  <Jiangmin Co. Ltd.><9, 2, 6, 07050>
    [D:\工具\KV2006\KV2006\lang\KVExtEml0804.lng]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\KVExtLZH.dll]  <JiangMin Co. Ltd.><9, 2, 6, 0316>
    [D:\工具\KV2006\KV2006\KvExtRar.dll]  <JiangMin Co. Ltd.><9, 2, 6, 04020>
    [D:\工具\KV2006\KV2006\KVExtGz.dll]  <Jiangmin Co. Ltd><9, 0, 6, 04200>
    [D:\工具\KV2006\KV2006\KVEnhK.dll]  <Jiangmin Co.Ltd><9, 1, 0, 51209>
    [D:\工具\KV2006\KV2006\Fix.dll]  <Jiangmin Co.Ltd><9, 2, 6, 07110>
    [D:\工具\KV2006\KV2006\KvCkMail.dll]  <N/A><9, 0, 6, 619>
    [D:\工具\KV2006\KV2006\lang\KvMailRes0804.lng]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\lang\PrivateCfg0804.lng]  <TODO: <Company name>><1.0.0.1>
[PID: 1156][D:\工具\KV2006\KV2006\kvwsc.exe]  <Jiangmin Co.Ltd><9, 0, 5, 908>
    [D:\工具\KV2006\KV2006\EngPS.dll]  <Jiangmin Co.Ltd><9, 2, 0, 50817>
    [D:\工具\KV2006\KV2006\EngFace.dll]  <Jiangmin Co.Ltd><9.0.0.50809>
    [D:\工具\KV2006\KV2006\UpdateX.dll]  <JiangMin Co.Ltd.><9, 0, 5, 831>
[PID: 300][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
    [D:\工具\KV2006\KV2006\TrojDie.kxp]  <Jiangmin Co.Ltd><9.0.6.0413>
    [G:\联众升级记牌器\lz.dll]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\UpdateX.dll]  <JiangMin Co.Ltd.><9, 0, 5, 831>
    [D:\工具\KV2006\KV2006\lang\TrojDie0804.lng]  <Jiangmin Co.Ltd><9.0.0.0813>
    [D:\工具\KV2006\KV2006\GUIExt.dll]  <Jiangmin Co.Ltd><9, 0, 5, 927>
    [D:\工具\KV2006\KV2006\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
    [D:\工具\KV2006\KV2006\PProtect.dll]  <Jiangmin Co. Ltd.><9.0.0.921>
    [D:\工具\KV2006\KV2006\KVHookG.dll]  <Jiangmin Co.Ltd><9.0.0.1226>
    [D:\工具\KV2006\KV2006\ComUIPS.dll]  <Jiangmin Ltd.><9. 5. 5. 20>
[PID: 1108][D:\工具\KV2006\KV2006\KRegEx.exe]  <Jiangmin Co.Ltd><9.0.6.210>
    [D:\工具\KV2006\KV2006\KRegEx.dll]  <Jiangmin Co. Ltd.><9.0.6.0119>
    [G:\联众升级记牌器\lz.dll]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\KRegTrust.dll]  <Jiangmin Co. Ltd.><9.0.0.825>
    [D:\工具\KV2006\KV2006\KVHookG.dll]  <Jiangmin Co.Ltd><9.0.0.1226>
[PID: 356][D:\工具\KV2006\KV2006\UIHost.exe]  <Jiangmin Co. Ltd><9.2.0.50822>
    [G:\联众升级记牌器\lz.dll]  <N/A><N/A>
    [D:\工具\KV2006\KV2006\KVHookG.dll]  <Jiangmin Co.Ltd><9.0.0.1226>
    [D:\工具\KV2006\KV2006\UpdateX.dll]  <JiangMin Co.Ltd.><9, 0, 5, 831>
    [D:\工具\KV2006\KV2006\ComUI.dll]  <Jiangmin Ltd.><9. 0. 0.509>
    [D:\工具\KV2006\KV2006\ComUIPS.dll]  <Jiangmin Ltd.><9. 5. 5. 20>
    [D:\工具\KV2006\KV2006\GUIExt.dll]  <Jiangmin Co.Ltd><9, 0, 5, 927>
    [D:\工具\KV2006\KV2006\lang\GUIExt0804.lng]  <JiangMin Ltd.><7, 1, 0, 200>
[PID: 2588][C:\WINDOWS\system32\wuauclt.exe]  <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
[PID: 3336][D:\安装文件\智能扫描\sreng2\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>
    [D:\工具\KV2006\KV2006\KVHookG.dll]  <Jiangmin Co.Ltd><9.0.0.1226>
    [G:\联众升级记牌器\lz.dll]  <N/A><N/A>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

好像是ld1 ld2双击就蓝屏`

TrojanDropper.Agent.kv
这个木马怎么杀呀``用江民说重启删除`没用`重启还有`

又下来了`再顶啊``昏昏``谁来帮我解决下``

我晕，没高手在线呐`

还有一个就是``待机的时候老自动弹出C盘``高手求求`

喂喂`有没有高手在啊```我今天就想解决咯`