HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
+ 1File not found: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ CmaudioCmiCnfg DLLC-Media Corporationc:\windows\system\cmicnfg.cpl
+ InCDFile not found: ;
+ MoveSearchFile not found: ;
+ NeroFilterCheckNeroCheckAhead Software Gmbhc:\windows\system32\nerocheck.exe
+ PCTVOICEFile not found: ;
+ RavMonFile not found: ;
+ RavTimerRavTimerBeijing Rising Technology Co., Ltd.c:\program files\rising\rav\ravtimer.exe
+ RfwMainFile not found: ;
+ TkBellExeRealNetworks SchedulerRealNetworks, Inc.c:\program files\common files\real\update_ob\realsched.exe
+ Torjan ProgramFile not found: ;
+ VirtualDriveFile not found: ;
+ 迅雷4File not found: C:\Program Files\Thunder Network\Thunder\MediaIssue\TDUpdate.exe
C:\Documents and Settings\All Users\「开始」菜单\程序\启动
+ EPSON Status Monitor 3 Environment Check(2).lnkStatusMonitor3 Environment CheckSEIKO EPSON CORPORATIONc:\windows\system32\spool\drivers\w32x86\3\e_srcv02.exe
+ Watch.lnkWatch DogCommon Groupc:\windows\twain_32\a24u16k\watch.exe
C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
+ PowerReg Scheduler.exePRegScheduler MFC Applicationc:\documents and settings\administrator\「开始」菜单\程序\启动\powerreg scheduler.exe
HKLM\System\CurrentControlSet\Services
+ C-DillaSrvC-Dilla RTS ServiceC-Dilla Ltdc:\windows\system32\drivers\cdantsrv.exe
+ EpsonBidirectionalAgenteEBAPI Status AgentSEIKO EPSON CORPORATIONc:\program files\common files\epson\ebapi\eebagent.exe
+ EpsonBidirectionalServicec:\program files\common files\epson\ebapi\eebsvc.exe
+ InCDsrvHelper service for the InCD filesystem driverAhead Software AGc:\program files\ahead\incd\incdsrv.exe
+ P4P ServiceSogou P4P ServiceSohu.com Inc.c:\program files\p4p\p2psvr.exe
+ RfwServiceRising Personal Firewall ServiceBeijing Rising Technology Corporation Limitedc:\program files\rising\rfw\rfwsrv.exe
+ RsCCenterCCenterrisingc:\program files\rising\rav\ccenter.exe
+ RsRavMonRavMonBeijing Rising Technology Co., Ltd.c:\program files\rising\rav\ravmond.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ RISINGRising Shell Ext ModuleBeijing Rising Technology Co., Ltd.c:\windows\system32\ravext.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ AcroIEHlprObj ClassAdobe Acrobat IE Helper Version 6.0 for ActivieXAdobe Systems Incorporatedc:\program files\adobe\acrobat 6.0\reader\activex\acroiehelper.dll
+ AntiFish ClassAntiPhish ModuleYahoo Inc.c:\program files\3721\assist\angling.dll
+ BandIE ClassBaiduBar ModuleBaidu.com, Inc.c:\program files\baidu\bar\baidubar.dll
+ CPub
ObjectIE MonitorSohu.com Inc.c:\program files\p4p\sodaie.dll
+ InsIIIc:\windows\system32\webpst2.dll
+ QQBrowserHelper
Object ClassQQIEHelper Module深圳市腾讯计算机系统有限公司c:\program files\tencent\qq\qqiehelper.dll
+ ThunderIEHelper Classxunleibho Modulec:\windows\system32\xunleibho_v5.dll
+ 上网助手CoolBar3721c:\program files\3721\assist\asbar.dll
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks
+ toolbar.dll捜狗直通车Sohu.com Inc.c:\program files\p4p\toolbar.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ toolbar.dll捜狗直通车Sohu.com Inc.c:\program files\p4p\toolbar.dll
+ 上网助手CoolBar3721c:\program files\3721\assist\asbar.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ SoQFile not found: http://www.soq.com
+ Yahoo 1G电邮File not found: http://cn.mail.yahoo.com/promo/rd1
+ 清理上网记录File not found: http://assistant.3721.com/clean1.htm?fb=Cns
+ 情景聊天File not found: http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/
+ 上网助手File not found: http://assistant.3721.com/index.htm?fb=Cns
+ 手机短信File not found: http://sms.3721.com/ie/index.htm
+ 腾讯QQQQTENCENTc:\program files\tencent\qq\qq.exe
+ 修复浏览器File not found: http://assistant.3721.com/security1.htm?fb=Cns
+ 寻宝乐趣多File not found: http://hot.3721.com/rd/shop_btn.htm
+ 易趣购物File not found: http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-219?cn=song;icon;hp&mpro=http://www.ebay.com.cn
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls
+ C:\WINDOWS\system32\SoDAHK.DLLSODA Libraryc:\windows\system32\sodahk.dll
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
+ EPSON V3 2KMonitor361EPSON Bidirectional MonitorSEIKO EPSON CORPORATIONc:\windows\system32\e_sl2361.dll