Logfile of Kaka v2. 0. 2. 5 Scan Module v1. 0. 3. 1
Scan saved at 13:16:07, on 2006-12-11
Platform: Microsoft Windows Me
MSIE: Internet Explorer v5.50 (5.50.4134.100)
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,default_page_url=http://www.haoxg.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=http://www.haoxg.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.haoxg.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.haoxg.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,default_page_url=http://www.haoxg.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=http://www.haoxg.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar=http://www.haoxg.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page=http://www.haoxg.com
R3 - URLSearchHook: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASBAR.DLL
O1 - Hosts: 202.59.156.151 53900.com
O1 - Hosts: 202.59.156.151 www.53900.com
O1 - Hosts: 202.59.156.151 tm286.com
O1 - Hosts: 202.59.156.151 www.tm286.com
O1 - Hosts: 202.59.156.151 29u.com
O1 - Hosts: 202.59.156.151 www.29u.com
O1 - Hosts: 202.59.156.151 29uu.com
O1 - Hosts: 202.59.156.151 www.29uu.com
O1 - Hosts: 202.59.156.151 123858.com
O1 - Hosts: 202.59.156.151 www.123858.com
O1 - Hosts: 202.59.156.151 bbs.7811.cn
O1 - Hosts: 202.59.156.151 7811.cn
O1 - Hosts: 202.59.156.151 www.7811.cn
O1 - Hosts: 202.59.156.151 003002.com
O1 - Hosts: 202.59.156.151 www.003002.com
O1 - Hosts: 202.59.156.151 cpyd.com
O1 - Hosts: 202.59.156.151 www.cpyd.com
O1 - Hosts: 202.59.156.151 0678.net
O1 - Hosts: 202.59.156.151 www.0678.net
O1 - Hosts: 202.59.156.151 808555.com
O1 - Hosts: 202.59.156.151 www.808555.com
O1 - Hosts: 202.59.156.151 818555.com
O1 - Hosts: 202.59.156.151 www.818555.com
O1 - Hosts: 202.59.156.151 t5858.com
O1 - Hosts: 202.59.156.151 www.t5858.com
O1 - Hosts: 202.59.156.151 31868.com
O1 - Hosts: 202.59.156.151 www.31868.com
O1 - Hosts: 202.59.156.151 bm163.com
O1 - Hosts: 202.59.156.151 www.bm163.com
O1 - Hosts: 202.59.156.151 www128.com
O1 - Hosts: 202.59.156.151 www.www128.com
O1 - Hosts: 202.59.156.151 22855.com
O1 - Hosts: 202.59.156.151 www.22855.com
O1 - Hosts: 202.59.156.151 558123.com
O1 - Hosts: 202.59.156.151 www.558123.com
O1 - Hosts: 202.59.156.151 139567.com
O1 - Hosts: 202.59.156.151 www.139567.com
O1 - Hosts: 202.59.156.151 006007.com
O1 - Hosts: 202.59.156.151 www.006007.com
O1 - Hosts: 202.59.156.151 929999.com
O1 - Hosts: 202.59.156.151 www.929999.com
O2 - BHO: DragSearch BHO - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\YAHOO!\ASSIST~1\ASSIST\YDRAGS~1.DLL
O2 - BHO: Yahoo!Photo - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YPHTB.DLL
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\SYSTEM\XUNLEIBHO_V8.DLL
O2 - BHO: assist - {FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8} - C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASSIST.DLL
O2 - BHO: AntiFish Class - {38928D50-8A48-44C2-945F-D2F23F771410} - C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YANGLING.DLL
O2 - BHO: 卡卡上网安全助手 - {AFF6E516-CBE5-4F8A-9C2F-38A68013E766} - C:\WINDOWS\SYSTEM\KAKATOOL.DLL
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASBAR.DLL
O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\SYSTEM\KAKATOOL.DLL
O4 - HKCU\..\Run: [services] c:\windows\services.exe
O4 - HKLM\..\Run: [internat.exe] internat.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [YLive.exe] C:\PROGRA~1\YAHOO!\ASSIST~1\YLive.exe
O4 - HKLM\..\Run: [yassistse] "C:\PROGRAM FILES\YAHOO!\ASSISTANT\YASSISTSE.EXE"
O4 - HKLM\..\Run: [services] c:\windows\services.exe
O4 - HKLM\..\Run: [mhsystem] C:\WINDOWS\TEMP\MHSYSTEM.EXE
O4 - HKLM\..\RunServices: [Intnet] C:\WINDOWS\Intnet.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: 雅虎搜索 - res://C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASBAR.DLL/203
O8 - Extra context menu item: 添加到雅虎订阅(&Y) - res://C:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YRSS.DLL/YRSSMENUEXT
O9 - Extra Button: @shdoclc.dll,-866@2052,相关站点 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
O9 - Extra 'Tools' menuitem: @shdoclc.dll,-864@2052,显示相关站点(&R) - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\SYSTEM\SHDOCVW.DLL
O9 - Extra Button: 雅虎助手 - {5D73EE86-05F1-49ed-B850-E423120EC338} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist (file missing)
O9 - Extra Button: 名品折扣 - {59BC54A2-56B3-44a0-93E5-432D58746E26} - http://adtaobao.allyes.com/main/adfclick?db=adtaobao&bid=138,140,18&cid=816,8,1&sid=5042&show=ignore&url=http://www.taobao.com/vertical/mall/pro.php?allyesPara=816 (file missing)
O9 - Extra Button: Yahoo 3.5G电邮 - {507F9113-CD77-4866-BA92-0E86DA3D0B97} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail (file missing)
O9 - Extra Button: 情景聊天 - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomsg (file missing)
O9 - Extra Button: 雅虎WIDGET - {6354ABE6-05F1-49ed-B850-E423120EC338} - http://cn.widget.yahoo.com/index.htm?source=Cns (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=5.5&ar=msnhome
O16 - DPF: DirectAnimation Java Classes -
file://C:\WINDOWS\SYSTEM\dajava.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 202.96.144.47
O18 - Protocol: ndwiat - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\SYSTEM\WIASCR.DLL
O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM\urlmon.dll
O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM\urlmon.dll
O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM\urlmon.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM\urlmon.dll
O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM\urlmon.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM\urlmon.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\SYSTEM\urlmon.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM\MSHTML.DLL
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM\MSHTML.DLL
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM\MSHTML.DLL
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM\MSHTML.DLL
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM\MSHTML.DLL
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\SYSTEM\MSHTML.DLL
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\SYSTEM\ITSS.DLL
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\SYSTEM\ITSS.DLL
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O21 - SSODL: AUHook - {BCBCD383-3E06-11D3-91A9-00C04F68105C} - C:\WINDOWS\SYSTEM\AUHOOK.DLL
