Logfile of Kaka v2. 0. 0. 9 Scan Module v2. 0. 0. 1
Scan saved at 12:38:48, on 2006-09-13
Platform: Microsoft Windows XP Professional Service Pack 2 (Build 2600)
MSIE: Internet Explorer v6.00 SP2; (6.00.2900.2180 (xpsp_sp2_rtm.040803-2158))
Running processes:
[SMSS.EXE]
CommandLine =
[CSRSS.EXE]
CommandLine = C:\WINDOWS\system32\csrss.exe
ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
[WINLOGON.EXE]
CommandLine = winlogon.exe
[SERVICES.EXE]
CommandLine = C:\WINDOWS\system32\services.exe
[LSASS.EXE]
CommandLine = C:\WINDOWS\system32\lsass.exe
[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost -k DcomLaunch
[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost -k rpcss
[CCenter.exe]
CommandLine = "C:\Program Files\Rising\Rav\CCenter.exe"
[SVCHOST.EXE]
CommandLine = C:\WINDOWS\System32\svchost.exe -k netsvcs
[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost.exe -k NetworkService
[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost.exe -k LocalService
[RavMonD.exe]
CommandLine = "C:\Program Files\Rising\Rav\Ravmond.exe"
[SPOOLSV.EXE]
CommandLine = C:\WINDOWS\system32\spoolsv.exe
[RavStub.exe]
CommandLine = "C:\Program Files\Rising\Rav\RavStub.exe" /RAVMOND
[RUNDLL32.EXE]
CommandLine = C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\MMSASS~1\MMSSVER.DLL,Service
[PCTSPK.EXE]
CommandLine = C:\WINDOWS\system32\pctspk.exe
[RUNDLL32.EXE]
CommandLine = C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\SYSTEM32\STDSVER.DLL,Service
[SVCHOST.EXE]
CommandLine = C:\WINDOWS\system32\svchost.exe -k imgsvc
[alg.exe]
CommandLine = C:\WINDOWS\System32\alg.exe
[Explorer.EXE]
CommandLine = C:\WINDOWS\Explorer.EXE
[VM303_STI.EXE]
CommandLine = "C:\WINDOWS\VM303_STI.EXE" BigDog301
[YLive.exe]
CommandLine = "C:\PROGRA~1\Yahoo!\ASSIST~1\YLive.exe"
[yassistse.exe]
CommandLine = "C:\PROGRA~1\Yahoo!\Assistant\yassistse.exe"
[realsched.exe]
CommandLine = "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
[RavTask.exe]
CommandLine = "C:\PROGRAM FILES\RISING\RAV\RAVTASK.EXE" -SYSTEM
[ctfmon.exe]
CommandLine = "C:\WINDOWS\system32\ctfmon.exe"
[RavMon.exe]
CommandLine = "C:\Program Files\Rising\Rav\Ravmon.exe" -SYSTEM
[msmsgs.exe]
CommandLine = "C:\Program Files\Messenger\msmsgs.exe" /background
[QQ.exe]
CommandLine = "D:\原C\Program Files\Tencent\QQ\QQ.exe"
[TIMPlatform.exe]
CommandLine = "D:\原C\Program Files\Tencent\QQ\TIMPlatform.exe" -Embedding
[QQ.exe]
CommandLine = "D:\原C\Program Files\Tencent\QQ\QQ.exe"
[MDM.EXE]
CommandLine = C:\WINDOWS\System32\MDM.EXE -Embedding
[QQexternal.exe]
CommandLine = "D:\原C\Program Files\Tencent\QQ\QQexternal.exe"
[QQ.exe]
CommandLine = "D:\原C\Program Files\Tencent\QQ\QQ.exe"
[QQ.exe]
CommandLine = "D:\原C\Program Files\Tencent\QQ\QQ.exe"
[Thunder5.exe]
CommandLine = "C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe" /s /192.168.1.2md7EC
[Rav.exe]
CommandLine = "C:\Program Files\Rising\Rav\Rav.exe"
[RsAgent.exe]
CommandLine = "C:\Program Files\Rising\Rav\RsAgent.exe"
[AgentSvr.exe]
CommandLine = C:\WINDOWS\msagent\AgentSvr.exe -Embedding
[iexplore.exe]
CommandLine = "C:\Program Files\Internet Explorer\iexplore.exe" -nohome
[notepad.exe]
CommandLine = "C:\WINDOWS\system32\NOTEPAD.EXE" D:\游戏\新建文件夹\KakaScan.log
[KkScan.exe]
CommandLine = "C:\Program Files\Rising\KakaToolBar\KkScan.exe"
R3 - Default URLSearchHook is missing
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:\WINDOWS\system32\xunleibho_v14.dll
O2 - BHO: ThunderIEHelper Class - {0428DA56-2C68-4332-9136-F1DFA8E3918B} - C:\WINDOWS\system32\Fkuenw.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHlprObj Class - {08150D38-A65E-4E13-9879-2C1DD0391991} - C:\WINDOWS\system32\Whwk.dll (file missing)
O2 - BHO: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\System32\yqfno.dll (file missing)
O2 - BHO: SearchToolbar - {2CD29FB5-0217-49B6-870D-1A4F62BA7962} - C:\WINDOWS\system32\Otyvwe.dll (file missing)
O2 - BHO: Yahoo!Photo - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
O2 - BHO: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
O2 - BHO: 雅虎助手 - {4986C25B-E93D-4432-BF29-2B3AFB83E0A0} - C:\WINDOWS\system32\Ruxwy.dll (file missing)
O2 - BHO: 雅虎助手 - {4D53612E-C906-4EC8-8446-EC913104D0AC} - C:\WINDOWS\system32\Cvaaf.dll (file missing)
O2 - BHO: 雅虎助手 - {4F8A1225-8729-42E9-98AA-34616625D50D} - C:\WINDOWS\system32\Sdrlm.dll (file missing)
O2 - BHO: DragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\ydragsearch.dll
O2 - BHO: Vision - {6671A431-5C3D-463d-A7CF-5587F9B7E191} - C:\PROGRA~1\MMSASS~1\mmsass~1.dll
O2 - BHO: stdup - {6A512BF7-EC78-4e8d-9841-6C02E8FA9838} - C:\WINDOWS\SYSTEM32\stdup.dll
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - BHO: BandIE Class - {7A8D2D15-9A52-4F87-A323-F447AE6E2B0D} - C:\WINDOWS\system32\Lobixo.dll (file missing)
O2 - BHO: BandIE Class - {7F3ED80A-33DD-4CAE-A261-52A470AE6B66} - C:\WINDOWS\system32\Xebnug.dll (file missing)
O2 - BHO: BandIE Class - {8483C33B-174A-45E8-B3C8-5B2DD311909F} - C:\WINDOWS\system32\Stljf.dll (file missing)
O2 - BHO: BandIE Class - {86E0B2E6-CF73-4084-9FED-826A7214398D} - C:\WINDOWS\system32\Zeipxs.dll (file missing)
O2 - BHO: Thunder Browser Helper - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_002.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (file missing)
O2 - BHO: Google Toolbar Helper - {B34C3573-E3B2-4534-8E5E-B0308312AFBD} - C:\WINDOWS\system32\Fkgl.dll (file missing)
O2 - BHO: DpjFzbqk Class - {D57314A0-6DF8-3603-6BE5-9F5AD80B70DF} - C:\WINDOWS\DOWNLO~1\kcslbh.dll
O2 - BHO: C:\WINDOWS\adsldpbf.dll - {EEE7178C-BBC3-4153-9DDE-CD0E9AB1B5B6} - C:\WINDOWS\adsldpbf.dll (file missing)
O2 - BHO: C:\WINDOWS\adsldpbf.dll - {FBCA0E65-EDFB-4A8A-9A21-BA2FAE1AF98A} - C:\WINDOWS\system32\Onov.dll (file missing)
