Logfile of Kaka v2. 0. 2. 6 Scan Module v1. 0. 3. 6
Scan saved at 14:20:04, on 2006-12-21
Platform: Microsoft Windows XP Professional Service Pack 2 (Build 2600)
MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158))


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\system32\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.baidu.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=%SystemRoot%\system32\blank.htm
R3 - URLSearchHook: H? - {4E29656F-BDB9-4316-AC01-6C67D37E8087} - C:\WINDOWS\system32\Fccb.dll (file missing)
R3 - URLSearchHook: H? - {060A847A-A594-496F-9B32-4B2740E76DD1} - C:\WINDOWS\system32\Banrzq.dll (file missing)
R3 - URLSearchHook: H? - {0F3B4F7D-579E-4AAB-A524-79317F231AA5} - C:\WINDOWS\system32\Npic.dll (file missing)
R3 - URLSearchHook: H? - {FD073F95-2B87-488A-AF3F-E64B852569F1} - C:\WINDOWS\system32\Lsletu.dll (file missing)
R3 - URLSearchHook: H? - {170E00CA-36F3-44E8-8CAE-9B44F9B5508B} - C:\WINDOWS\system32\Tamyeo.dll (file missing)
R3 - URLSearchHook: H? - {372D4D89-D3A2-4FBB-BCAB-774971096656} - C:\WINDOWS\system32\Awfa.dll (file missing)
R3 - URLSearchHook: H? - {EEB55051-85B3-4ECE-85E8-CABA3327AE6D} - C:\WINDOWS\system32\Lklyf.dll (file missing)
R3 - URLSearchHook: H? - {C3242B1A-377D-494B-85A0-83CAA00F7A94} - C:\WINDOWS\system32\Xutyoi.dll (file missing)
R3 - URLSearchHook: H? - {5B26C1EC-FB52-4F1D-90EA-7275C3B5E5B0} - C:\WINDOWS\system32\Qgzurw.dll (file missing)
R3 - URLSearchHook: H? - {B6901005-F074-4C6D-A126-ACEEFDE5CAE3} - C:\WINDOWS\system32\Jmnnk.dll (file missing)
R3 - URLSearchHook: H? - {07FE3A1D-770D-4848-8E32-1323206E1D5D} - C:\WINDOWS\system32\Ewqkwn.dll (file missing)
R3 - URLSearchHook: H? - {C35C7AD8-BAB4-4D7D-8B3E-4710CBFEDD65} - C:\WINDOWS\system32\Vdszg.dll (file missing)
R3 - URLSearchHook: H? - {5EBC0FE2-CFA5-4331-80B9-D38E58B8175D} - C:\WINDOWS\system32\Foyy.dll (file missing)
R3 - URLSearchHook: H? - {2FF3DC2F-38A1-4DBF-A9E1-A93B56DBBC18} - C:\WINDOWS\system32\Hevok.dll (file missing)
R3 - URLSearchHook: H? - {FB0AED3D-F9FA-427B-B3D0-F9DDF1FD943B} - C:\WINDOWS\system32\Eqwl.dll (file missing)
R3 - URLSearchHook: H? - {6EC3C066-C329-4C08-9EC7-A6A911F14A37} - C:\WINDOWS\system32\Vsgh.dll (file missing)
R3 - URLSearchHook: H? - {45BC0A05-6DD8-40DF-8B47-3A47779AB311} - C:\WINDOWS\system32\Oawwms.dll (file missing)
R3 - URLSearchHook: H? - {9C8302FB-E036-41C5-A684-74B8319A855B} - C:\WINDOWS\system32\Haoq.dll (file missing)
R3 - URLSearchHook: H? - {F652AC71-B240-4BC5-8E7E-37F76A5F82EF} - C:\WINDOWS\system32\Sohdf.dll (file missing)
R3 - URLSearchHook: H? - {28FEF403-A2DD-4ABA-9213-B82F4734858E} - C:\WINDOWS\system32\Zynuc.dll (file missing)
R3 - URLSearchHook: H? - {0C7ADD3B-7BA6-4F85-A7E5-99A8E1A3BCED} - C:\WINDOWS\system32\Bljomg.dll (file missing)
R3 - URLSearchHook: H? - {F1681729-EB31-45DE-A9E5-D04851E1FA8F} - C:\WINDOWS\system32\Ndnc.dll (file missing)
R3 - URLSearchHook: H? - {688BC742-D70A-4F31-8D4F-DFABC8A75810} - C:\WINDOWS\system32\Cidcv.dll (file missing)
R3 - URLSearchHook: H? - {C5601DD7-CA8A-4C04-BF6B-3D7E4DFE78F2} - C:\WINDOWS\system32\Rkoy.dll (file missing)
R3 - URLSearchHook: H? - {46EDABC6-9052-4321-BBC6-F12F0437DD59} - C:\WINDOWS\system32\Ghsk.dll (file missing)
R3 - URLSearchHook: H? - {0602FA05-282F-4890-B671-3CE7C3939358} - C:\WINDOWS\system32\Elmawk.dll (file missing)
R3 - URLSearchHook: H? - {3CE5CB39-ED8E-4F9C-BE7D-DEB8DE5919F6} - C:\WINDOWS\system32\Xkpgql.dll (file missing)
R3 - URLSearchHook: H? - {4B850B89-7F26-4BB4-9604-E191E83AEBBF} - C:\WINDOWS\system32\Boubtt.dll (file missing)
R3 - URLSearchHook: H? - {76015EE0-89E8-41E9-87A2-CB03A52BCA70} - C:\WINDOWS\system32\Kcyqjk.dll (file missing)
R3 - URLSearchHook: H? - {A53B88C1-247A-4D87-85A4-789BB7E4F18D} - C:\WINDOWS\system32\Kicvqe.dll (file missing)
R3 - URLSearchHook: H? - {DF051701-A07E-4CB4-BE98-E2E258480131} - C:\WINDOWS\system32\Kxqzcv.dll (file missing)
R3 - URLSearchHook: H? - {30FE71C5-2219-49D1-94C4-E92A736E5AB8} - C:\WINDOWS\system32\Zqta.dll (file missing)
R3 - URLSearchHook: H? - {294C5AA9-06FB-4823-9DD7-0ABA1B7CB1A6} - C:\WINDOWS\system32\Fdpfhc.dll (file missing)
R3 - URLSearchHook: H? - {FA401F16-4B6C-4A2F-B1D3-2CC4647C9E04} - C:\WINDOWS\system32\Cuuyy.dll (file missing)
R3 - URLSearchHook: H? - {DEA3B1CF-14EC-46F9-8714-258D1A7B3D6F} - C:\WINDOWS\system32\Lfwdm.dll (file missing)
R3 - URLSearchHook: H? - {1CF310C8-09F8-403E-8DE4-05009F7EBE48} - C:\WINDOWS\system32\Ztgss.dll (file missing)
R3 - URLSearchHook: H? - {E07A7F76-8B35-4533-AA50-C298F412A9BF} - C:\WINDOWS\system32\Vnsxx.dll (file missing)
R3 - URLSearchHook: H? - {24935790-2D32-482E-91FF-338B461B7BD1} - C:\WINDOWS\system32\Smnbv.dll (file missing)
R3 - URLSearchHook: H? - {BABF7094-EBC2-4525-8F7E-E3E49B6A061E} - C:\WINDOWS\system32\Ygjdq.dll (file missing)
R3 - URLSearchHook: H? - {8A4069A6-A83F-4463-B3BB-6E60CDB178B8} - C:\WINDOWS\system32\Eywura.dll (file missing)
R3 - URLSearchHook: H? - {72636AA0-D934-47DD-B549-7E163188199D} - C:\WINDOWS\system32\Djta.dll (file missing)
R3 - URLSearchHook: H? - {18F929E5-3D19-4DBD-8BDD-2BF0348F6141} - C:\WINDOWS\system32\Mvxh.dll (file missing)
R3 - URLSearchHook: H? - {D797340C-E5E8-469D-B274-EC9677FF52EB} - C:\WINDOWS\system32\Fsuk.dll (file missing)
R3 - URLSearchHook: H? - {3625C4F6-2B78-4D67-92C8-8804097C5811} - C:\WINDOWS\system32\Obxclz.dll (file missing)
R3 - URLSearchHook: H? - {F916A7B3-0EEA-4AF7-962F-AFF7A4271C8E} - C:\WINDOWS\system32\Jouiss.dll (file missing)
R3 - URLSearchHook: H? - {ADA32F95-E120-479C-921F-4BBDD8242FF7} - C:\WINDOWS\system32\Eqis.dll (file missing)
R3 - URLSearchHook: H? - {55962D5D-E176-4EB9-8FB9-A5B6B3FA00C2} - C:\WINDOWS\system32\Pyhnfi.dll (file missing)
R3 - URLSearchHook: H? - {087367B9-6225-4A72-9D08-7F6C8A636687} - C:\WINDOWS\system32\Hgexuy.dll (file missing)
R3 - URLSearchHook: H? - {98E10BD0-2454-43F7-B918-20AFD42BC081} - C:\WINDOWS\system32\Kaww.dll (file missing)
R3 - URLSearchHook: H? - {2219C744-48F2-4FDF-9F4D-51210CC94B6A} - C:\WINDOWS\system32\Pfthfi.dll (file missing)
R3 - URLSearchHook: H? - {ECAAAEFA-D31D-4066-B595-654CA2A854A0} - C:\WINDOWS\system32\Njri.dll (file missing)
R3 - URLSearchHook: H? - {D46D001A-3788-420D-B9A0-CA51848D8877} - C:\WINDOWS\system32\Byuqoq.dll (file missing)
R3 - URLSearchHook: H? - {7AA19A71-7A49-4E47-890C-02446837CA43} - C:\WINDOWS\system32\Nvmuw.dll (file missing)
R3 - URLSearchHook: H? - {6D62DE3D-CDE3-4384-BA5C-5E473E7DCCB1} - C:\WINDOWS\system32\Eulrj.dll (file missing)
R3 - URLSearchHook: H? - {52097902-26F3-4162-B942-4045A76864F0} - C:\WINDOWS\system32\Ssuxl.dll (file missing)
R3 - URLSearchHook: H? - {4A7DCD7B-C444-4D0F-BF20-039B6E3A6973} - C:\WINDOWS\system32\Fujh.dll (file missing)
R3 - URLSearchHook: H? - {6280A77F-C1E3-4A99-9F9C-906820294881} - C:\WINDOWS\system32\Fskam.dll (file missing)
R3 - URLSearchHook: H? - {D969F7F9-4409-4B9E-B5AE-F137C540F07E} - C:\WINDOWS\system32\Gcxuzi.dll (file missing)
R3 - URLSearchHook: H? - {3432984B-E25A-41E4-A44D-96AB981E69E3} - C:\WINDOWS\system32\Skrxj.dll (file missing)
R3 - URLSearchHook: H? - {44C27F12-094A-485E-B3E0-63D74B1B5325} - C:\WINDOWS\system32\Xmes.dll (file missing)
R3 - URLSearchHook: H? - {A2BF32BB-B1D1-4A0B-B25F-2472E325CDFB} - C:\WINDOWS\system32\Pjvpcl.dll (file missing)
R3 - URLSearchHook: H? - {4DC9F80C-A0D1-4ACF-99F7-958C6423A192} - C:\WINDOWS\system32\Faeb.dll (file missing)
R3 - URLSearchHook: H? - {0A62EEC6-222C-4576-88EF-13A2E49C1627} - C:\WINDOWS\system32\Zvjo.dll (file missing)
R3 - URLSearchHook: H? - {5C608A8D-F264-4D30-9942-466126F85A89} - C:\WINDOWS\system32\Tuncho.dll (file missing)
R3 - URLSearchHook: H? - {E808E103-F823-4C13-A64B-537408E4E963} - C:\WINDOWS\system32\Vugen.dll (file missing)
R3 - URLSearchHook: H? - {52C1CB4A-3A81-4DD4-B036-A7D5F4F517C3} - C:\WINDOWS\system32\Aiyqln.dll (file missing)
R3 - URLSearchHook: H? - {E9BC2DEB-D5A9-47E5-83A0-8EDA60963BC0} - C:\WINDOWS\system32\Jrxgb.dll (file missing)
R3 - URLSearchHook: H? - {6D89B001-922C-4263-9BDB-9DE887903E51} - C:\WINDOWS\system32\Lbvuod.dll (file missing)
O1 - Hosts: 127.0.0.1      localhost

O3 - Toolbar: 卡卡上网安全助手 - {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} - C:\WINDOWS\system32\KakaTool.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RavTask] "D:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [RfwMain] "F:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [WangWang] "F:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
O4 - HKLM\..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM\..\Run: [Alitalk] D:\移动贸~1\贸易通\AliTalk.EXE
O4 - HKLM\..\Run: [Install Alitalk] C:\WINDOWS\temp\alitalk\alitalk.exe -hideframe
O4 - HKLM\..\Run: [runeip] D:\kaka上网助手\runiep.exe
O4 - HKLM\..\RunOnce: [KKDelay] D:\kaka上网助手\RunOnce.exe
O4 - Startup: desktop.ini =
O4 - Startup: 买卖通IM.lnk = E:\mp3\IM.exe
O4 - Global Startup: desktop.ini =
O8 - Extra context menu item: &使用快车(FlashGet)下载 - D:\网快车\网快车\jc_link.htm
O8 - Extra context menu item: &使用快车(FlashGet)下载全部链接 - D:\网快车\网快车\jc_all.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - D:\qq\AddToNetDisk.htm
O8 - Extra context menu item: 导出到 Microsoft Office Excel(&X) - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: 添加到QQ自定义面板 - D:\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - D:\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - D:\qq\SendMMS.htm
O9 - Extra Button: 信息检索 - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra Button: 快车 - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\网快车\网快车\flashget.exe
O9 - Extra 'Tools' menuitem: 快车(FlashGet) - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\网快车\网快车\flashget.exe
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
O16 - DPF: {05C1004E-2596-48E5-8E26-39362985EEB9} (MMCPlayer Class) - http://p3p.sogou.com/MMCShell.cab
O16 - DPF: {488A4255-3236-44B3-8F27-FA1AECAA8844} (CEditCtrl Object) - https://img.alipay.com/download/1007/aliedit.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://aihui100.spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{31237A7D-9019-431C-9608-A06BAEC95E2A}: NameServer = 202.106.0.20 202.106.46.151
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\Mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ipp - (no CLSID) - (no file)
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\Mshtml.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\Mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
O18 - Protocol: mso-offdap11 - {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\Mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\Mshtml.dll
O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\Mshtml.dll
O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll

O23 - Service: Human Interface Device Access (HidServ) -  - C:\WINDOWS\system32\svchost.exe -k netsvcs
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Rising Proxy  Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - f:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - f:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - "D:\Program Files\Rising\Rav\CCenter.exe"
O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - "D:\Program Files\Rising\Rav\Ravmond.exe"

推荐使用360安全卫士清理一下流氓

.360下载地址:
http://www.360safe.com/
http://www.xdowns.com/soft/8/9/2006/Soft_31554.html
使用后删除360安全卫士

再去下载个卡巴6.0的杀毒软件外加防火墙！
卡巴斯基反病毒软件 6.0.0.307 简体中文个人版
http://www.onlinedown.net/soft/18353.htm
卡巴斯基反黑客[防火墙]
http://www.ttcity.net/kav/