瑞星卡卡安全论坛

Logfile of Kaka v2. 0. 0. 9 Scan Module v2. 0. 0. 1
Scan saved at 13:56:59, on 2006-07-01
Platform: Microsoft Windows XP Professional Service Pack 1 (Build 2600)
MSIE: Internet Explorer v6.00 SP1;Q822925; (6.00.2800.1106 (xpsp1.020828-1920))


Running processes:
[SMSS.EXE]
CommandLine =

[csrss.exe]
CommandLine = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

[winlogon.exe]
CommandLine = winlogon.exe

[services.exe]
CommandLine = C:\WINDOWS\system32\services.exe

[lsass.exe]
CommandLine = C:\WINDOWS\system32\lsass.exe

[svchost.exe]
CommandLine = C:\WINDOWS\system32\svchost -k rpcss

[svchost.exe]
CommandLine = C:\WINDOWS\System32\svchost.exe -k netsvcs

[svchost.exe]
CommandLine = C:\WINDOWS\System32\svchost.exe -k NetworkService

[svchost.exe]
CommandLine = C:\WINDOWS\System32\svchost.exe -k LocalService

[spoolsv.exe]
CommandLine = C:\WINDOWS\system32\spoolsv.exe

[CDAC11BA.EXE]
CommandLine = C:\WINDOWS\System32\drivers\CDAC11BA.EXE

[Rundll32.exe]
CommandLine = Rundll32.exe C:\WINDOWS\downlo~1\CnsMin.dll,Rundll32

[Rundll32.exe]
CommandLine = "C:\WINDOWS\system32\rundll32.exe" C:\PROGRA~1\3721\helper.dll,Rundll32

[assistse.exe]
CommandLine = "C:\PROGRA~1\3721\assistse.exe"

[SysExplr.exe]
CommandLine = "C:\Herosoft\HeroV8\SysExplr.EXE"

[ctfmon.exe]
CommandLine = "C:\WINDOWS\System32\ctfmon.exe"

[msnmsgr.exe]
CommandLine = "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

[xdict.exe]
CommandLine = "C:\Program Files\Kingsoft\XDict\XDICT.EXE" -s -nosplash

[QQ.exe]
CommandLine = "C:\Program Files\Tencent\qq\QQ.exe"

[TIMPlatform.exe]
CommandLine = "C:\Program Files\Tencent\qq\TIMPlatform.exe" -Embedding

[wuauclt.exe]
CommandLine = "C:\WINDOWS\System32\wuauclt.exe"

[conime.exe]
CommandLine = C:\WINDOWS\System32\conime.exe

[conime.exe]
CommandLine = C:\WINDOWS\System32\conime.exe

[vxgamet3.exe]
CommandLine = C:\WINDOWS\System32\vxgamet3.exe

[vxgamet4.exe]
CommandLine = C:\WINDOWS\System32\vxgamet4.exe

[vxgame2.exe]
CommandLine = C:\WINDOWS\System32\vxgame2.exe

[services.exe]
CommandLine = C:\WINDOWS\inet20026\services.exe

[socks.exe]
CommandLine = "C:\WINDOWS\inet20026\socks.exe"

[Explorer.EXE]
CommandLine = explorer.exe                                                                                                    "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"

[csrsapph.exe]
CommandLine = C:\WINDOWS\System32\csrsapph.exe

[Rundll32.exe]
CommandLine = rundll32.exe "C:\WINDOWS\System32\dcom_21.dll",run

[rsysinit.exe]
CommandLine = C:\DOCUME~1\KAIYUA~1.IMA\LOCALS~1\Temp\\rsysinit.exe

[KkScan.exe]
CommandLine = "D:\Program Files\Rising\KakaToolBar\KkScan.exe"

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://wn.265.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page=www.poco.cn
R3 - URLSearchHook: MyURLSearchHook Class - {982CB676-38F0-4D9A-BB72-D9371ABE876E} - C:\Program Files\P4P\ToolBar.dll
R3 - URLSearchHook: SgUrlSearHook Class - {BAB1AC41-6FF7-4F2E-A04E-5C592CCFEA7D} - C:\WINDOWS\System32\socul.dll
F0 - system.ini: Shell=explorer.exe                                                                                                    "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe"
F1 - win.ini: Run=C:\WINDOWS\inet20026\services.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: CPub Object - {0CA51D02-7739-43EA-8D9A-1E8AD4327B03} - C:\Program Files\P4P\sodaie.dll
O2 - BHO: HBO Class - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - C:\WINDOWS\inet20026\3.03.00.dll
O2 - BHO: QQBrowserHelperObject Class - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\qq\QQIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: 卡卡上网安全助手 - {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} - C:\WINDOWS\System32\kakatool.dll
O2 - BHO:  (file missing)
O2 - BHO: CnsHook Class - {D157330A-9EF3-49F8-9A67-4141AC41ADD4} - C:\WINDOWS\downlo~1\CnsHook.dll
O2 - BHO:  (file missing)
O2 - BHO:  (file missing)
O2 - BHO:  (file missing)

升到SP2吧！！