HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ assistse AssistSetting yahoo c:\program files\3721\assistse.exe
+ CnsMin 3721 北京三七二一科技有限公司 c:\windows\downloaded program files\cnsmin.dll
+ ep2k_certd USB Token 2000 PKI Cert Monitor c:\program files\feitian\usbtoken2000\ep2k_certd.exe
+ hbpassport Passport Application Shanghai Henbang Technology Co., Ltd c:\program files\hbclient\hbast.exe
+ RavTask RavTimer Beijing Rising Technology Co., Ltd. d:\rising\rav\ravtask.exe
+ RfwMain Rising Personal FireWall Main Program Beijing Rising Technology Co., Ltd. c:\program files\rising\rfw\rfwmain.exe
+ SoundMan Realtek Sound Manager Realtek Semiconductor Corp. C:\WINDOWS\soundman.exe
+ TkBellExe RealNetworks Scheduler RealNetworks, Inc. c:\program files\common files\real\update_ob\realsched.exe
+ VTTimer S3 Graphics, Inc. c:\windows\system32\vttimer.exe
C:\Documents and Settings\hjj\「开始」菜单\程序\启动
+ 腾讯QQ.lnk QQ TENCENT d:\新建文件夹\qq.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
+ cnshook.dll 3721 CNS Module 北京三七二一科技有限公司 c:\windows\downloaded program files\cnshook.dll
+ Rising Execute File Exts hook Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Display Panning CPL Extension File not found: deskpan.dll
+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve, Inc. c:\windows\system32\hticons.dll
+ RISING Rising Shell Ext Module Beijing Rising Technology Co., Ltd. c:\windows\system32\ravext.dll
+ Shell Extensions for RealOne Player RealPlayer Shell Extensions RealNetworks, Inc. c:\program files\real\realplayer\rpshell.dll
+ WinRAR shell extension c:\program files\winrar\rarext.dll
+ 粉碎文件 Wiper 动态链接库 c:\program files\3721\assist\wiper.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ AntiFish Class AntiPhish Module Yahoo Inc. c:\program files\3721\assist\angling.dll
+ BandIE Class BaiduBar Module Baidu.com, Inc. c:\program files\baidu\bar\baidubar.dll
+ bho Class 万能五笔接口程序 深圳世强软件开发部 c:\program files\common files\wnwb\wnwbio.dll
+ BrowserHAP Class Hapbast Module Shanghai Henbang Technology Co., Ltd c:\program files\hbclient\hapast.dll
+ CnsHook Class 3721 CNS Module 北京三七二一科技有限公司 c:\windows\downloaded program files\cnshook.dll
+ IeCatch2 Class jccatch Module Amaze Soft c:\program files\flashget\jccatch.dll
+ QQBrowserHelper
Object Class QQIEHelper Module 深圳市腾讯计算机系统有限公司 d:\新建文件夹\qqiehelper.dll
+ T2BHO Class DownloadBHO Module HDT, Inc. c:\windows\downloaded program files\conflict.1\barhelp24.0.dll
+ 上网助手 CoolBar 3721 c:\program files\3721\assist\asbar.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ FlashGet Bar FlashGet IE Bar Amaze Soft c:\program files\flashget\fgiebar.dll
+ 上网助手 CoolBar 3721 c:\program files\3721\assist\asbar.dll
+ 天下搜索 HDTBar Module c:\windows\downloaded program files\conflict.1\iebar23.0.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ &FlashGet FlashGet Amaze Soft c:\program files\flashget\flashget.exe
+ Yahoo 1G电邮 File not found: http://cn.mail.yahoo.com/promo/rd1
+ 浩方对战平台 浩方对战平台 上海浩方在线信息技术有限公司 e:\浩方\浩方对战平台\gameclient.exe
+ 清理上网记录 File not found: http://assistant.3721.com/clean1.htm?fb=Cns
+ 情景聊天 File not found: http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/
+ 上网助手 File not found: http://assistant.3721.com/index.htm?fb=Cns
+ 手机短信 File not found: http://sms.3721.com/ie/index.htm
+ 腾讯QQ QQ TENCENT d:\新建文件夹\qq.exe
+ 修复浏览器 File not found: http://assistant.3721.com/security1.htm?fb=Cns
+ 寻宝乐趣多 File not found: http://hot.3721.com/rd/shop_btn.htm
HKLM\System\CurrentControlSet\Services
+ RfwService Rising Personal Firewall Service Beijing Rising Technology Co., Ltd. c:\program files\rising\rfw\rfwsrv.exe
+ RsCCenter CCenter Beijing Rising Technology Co., Ltd. d:\rising\rav\ccenter.exe
+ RsRavMon RavMond Beijing Rising Technology Co., Ltd. d:\rising\rav\ravmond.exe
HKLM\System\CurrentControlSet\Services
+ ALCXSENS Sensaura WDM 3D Audio Driver Sensaura c:\windows\system32\drivers\alcxsens.sys
+ ALCXWDM Realtek AC'97 Audio Driver (WDM) Realtek Semiconductor Corp. c:\windows\system32\drivers\alcxwdm.sys
+ BaseTDI basetdi Beijing Rising Technology Co., Ltd. c:\windows\system32\drivers\basetdi.sys
+ Cdsys File not found: C:\WINDOWS\system32\cdcd.sys
+ ExpScaner ExpScan.sys d:\rising\rav\expscan.sys
+ FETNDIS NDIS 5.0 miniport driver VIA Technologies, Inc. c:\windows\system32\drivers\fetnd5.sys
+ GPKiller GPigeon Killer Yahoo! c:\windows\system32\drivers\gpkiller.sys
+ HookCont TDI HOOK Driver Rising tech Co. ltd d:\rising\rav\hookcont.sys
+ HookReg d:\rising\rav\hookreg.sys
+ HookSys Hooksys Rising d:\rising\rav\hooksys.sys
+ iKeyEnum Rainbow iKey Enumerator Service Rainbow Technologies Inc. c:\windows\system32\drivers\ikeyenum.sys
+ iKeyIFD Rainbow iKey Virtual Reader Service Rainbow Technologies Inc. c:\windows\system32\drivers\ikeyifd.sys
+ kmsinput c:\windows\system32\drivers\kmsinput.sys
+ MEMSCAN MemScan Driver 瑞星软件有限公司 d:\rising\rav\memscan.sys
+ mProcRs Rising Personal FireWall mprocrs.sys Beijing Rising Technology Co., Ltd. c:\program files\rising\rfw\mprocrs.sys
+ New0 c:\windows\system32\new.sys
+ Ptilink Direct Parallel Link Driver Parallel Technologies, Inc. c:\windows\system32\drivers\ptilink.sys
+ R5BaseSmc USB Token Holder service Name OEM c:\windows\system32\drivers\smccard.sys
+ RnbToken Rainbow iKey Token Service Rainbow Technologies Inc. c:\windows\system32\drivers\rnbtoken.sys
+ RsFwDrv nt_fwdrv Beijing Rising Technology Co., Ltd. c:\program files\rising\rfw\rsfwdrv.sys
+ Secdrv SafeDisc driver c:\windows\system32\drivers\secdrv.sys
+ SVKP SVKP driver for NT AntiCracking c:\windows\system32\svkp.sys
+ token USB Token Service Name c:\windows\system32\drivers\eps2kt1.sys
+ viagfx VIA/S3G Miniport Driver Copyright (C) VIA/S3 Graphics Co, Ltd. c:\windows\system32\drivers\vtmini.sys
+ WINIO c:\windows\downloaded program files\conflict.1\winio.sys
+ ZSMC301b Video streaming and Capture Device Driver VM c:\windows\system32\drivers\usbvm31b.sys
