Logfile of Kaka v2. 0. 2. 6 Scan Module v1. 0. 3. 9
Scan saved at 13:11:32, on 2007-01-11
Platform: Microsoft Windows 2000 Professional Service Pack 4 (Build 2195)


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINNT\system32\blank.htm
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [myZt1] C:\DOCUME~1\th\LOCALS~1\Temp\Zt1\SVCH0ST.EXE
O4 - HKCU\..\Run: [svc] C:\WINNT\svchost.exe
O4 - HKCU\..\Run: [myZt2] C:\DOCUME~1\th\LOCALS~1\Temp\Zt2\SVCH0ST.EXE
O4 - HKCU\..\Run: [myMh2] C:\DOCUME~1\th\LOCALS~1\Temp\mh2\iexpl0re.EXE
O4 - HKCU\..\Run: [Syzmy3] C:\WINNT\system32\Sy3\exp1orer.exe
O4 - HKCU\..\Run: [ravshelll] C:\Progra~1\Eset\eexplore.exe
O4 - HKCU\..\Run: [SyrxMy] C:\WINNT\system32\iexp1ore.exe
O4 - HKCU\..\Run: [SywlMy] C:\WINNT\system32\lexplore.exe
O4 - HKCU\..\Run: [SymhMy] C:\WINNT\system32\iexpl0re.exe
O4 - HKCU\..\Run: [SyztMy] C:\WINNT\system32\expiorer.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program Files\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KANMain] "C:\KavNet\KANMain.exe"
O4 - HKLM\..\Run: [KANScanLeak] "C:\KavNet\KANSA.EXE" -s
O4 - HKLM\..\Run: [load32] C:\WINNT\system32\swchost.exe
O4 - HKLM\..\Run: [NvClipRsv] C:\WINNT\svchost.exe
O4 - HKLM\..\Run: [r] C:\WINNT\down\rundll32.exe
O4 - HKLM\..\Run: [xy] C:\WINNT\Download\svhost32.exe
O4 - HKLM\..\Run: [wl] C:\WINNT\Download\svhost32.exe
O4 - HKLM\..\Run: [ms] C:\Program Files\Microsoft\svhost32.exe
O4 - HKLM\..\Run: [rzt] C:\WINNT\Intel\rundll32.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Symantec Fax Starter Edition Port.lnk = C:\Program Files\Microsoft Office\Office\2052\OLFSNT40.EXE
O8 - Extra context menu item: 使用Web迅雷下载 - C:\Program Files\Thunder Network\WebThunder\GetUrl.htm
O8 - Extra context menu item: 使用Web迅雷下载全部链接 - C:\Program Files\Thunder Network\WebThunder\GetAllUrl.htm
O14 - IERESET.INF: START_PAGE_URL=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome