HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ BigDogPathStill Image (STI) DriverVM.c:\windows\vm_sti.exe
+ CnsMin3721北京三七二一科技有限公司c:\windows\downloaded program files\cnsmin.dll
+ IMJPMIG8.1File not found: ;
+ NvCplDaemonNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll
+ NvMediaCenterNVIDIA Media Center LibraryNVIDIA Corporationc:\windows\system32\nvmctray.dll
+ nwizNVIDIA nView Wizard, Version 56.64 NVIDIA Corporationc:\windows\system32\nwiz.exe
+ TE_QQProtectFile not found: ;
+ TkBellExeRealNetworks SchedulerRealNetworks, Inc.c:\program files\common files\real\update_ob\realsched.exe
+ yassistseFile not found: ;
+ YLive.exeFile not found: ;
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
+ PowerFile not found: C:\DOCUME~1\Wei\LOCALS~1\Temp\f3\pnxpwf.dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
+ MSMSGSFile not found: ;
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellService
ObjectDelayLoad
+ stdupFile not found: CLSID\{6A512BF7-EC78-4e8d-9841-6C02E8FA9838}\InprocServer32
+ VisionFile not found: CLSID\{6671A431-5C3D-463d-A7CF-5587F9B7E191}\InprocServer32
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
+ cnshook.dll3721 CNS Module北京三七二一科技有限公司c:\windows\downloaded program files\cnshook.dll
+ new123.sysc:\program files\internet explorer\plugins\new123.sys
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Desktop ExplorerNVIDIA Desktop Explorer, Version 56.64 NVIDIA Corporationc:\windows\system32\nvshell.dll
+ Desktop Explorer MenuNVIDIA Desktop Explorer, Version 56.64 NVIDIA Corporationc:\windows\system32\nvshell.dll
+ NvCpl DesktopContext ClassNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll
+ nView Desktop Context MenuNVIDIA Desktop Explorer, Version 56.64 NVIDIA Corporationc:\windows\system32\nvshell.dll
+ Play on my TV helperNVIDIA Display Properties ExtensionNVIDIA Corporationc:\windows\system32\nvcpl.dll
+ Shell Extensions for RealOne PlayerRealPlayer Shell ExtensionsRealNetworks, Inc.d:\program files\realplayer\rpshell.dll
+ Yahoo!PhotoFile not found: CLSID\{33BBE430-0E42-4F12-B075-8D21ACB10DCB}\InprocServer32
+ 粉碎文件Wiper 动态链接库c:\program files\yahoo!\assistant\assist\ywiper.dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ Web 文件夹c:\program files\common files\microsoft shared\web folders\msonsext.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ BandIE ClassBaiduBar ModuleBaidu.com, Inc.c:\program files\baidu\bar\baidubar.dll
+ CnsHook Class3721 CNS Module北京三七二一科技有限公司c:\windows\downloaded program files\cnshook.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar
+ baidubar.dllBaiduBar ModuleBaidu.com, Inc.c:\program files\baidu\bar\baidubar.dll
+ 雅虎助手File not found: C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions
+ QQQQTENCENTd:\program files\qq2005beta3\qq.exe
+ Yahoo 1G电邮File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yahoomail
+ 浩方对战平台浩方对战平台上海浩方在线信息技术有限公司e:\浩方对战平台\gameclient.exe
+ 清理上网记录File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=clean
+ 情景聊天File not found: http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/
+ 修复浏览器File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=repair
+ 寻宝乐趣多File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=taobao
+ 雅虎助手File not found: http://cn.zs.yahoo.com/cnsbutton.htm?source=cns&btn=yassist
HKLM\System\CurrentControlSet\Services
+ GrayPigeonServer2.03灰鸽子服务端程序。远程监控管理.c:\windows\g_server2.03.exe
+ NVSvcProvides system and desktop level support to the NVIDIA display driverNVIDIA Corporationc:\windows\system32\nvsvc32.exe
HKLM\System\CurrentControlSet\Services
+ EagleNTFile not found: C:\WINDOWS\system32\drivers\EagleNT.sys
+ kmsinputc:\windows\system32\drivers\kmsinput.sys
+ New0c:\windows\system32\new.sys
+ nvNVIDIA Compatible Windows 2000 Miniport Driver, Version 56.64 NVIDIA Corporationc:\windows\system32\drivers\nv4_mini.sys
+ oreans32c:\windows\system32\drivers\oreans32.sys
+ PtilinkDirect Parallel Link DriverParallel Technologies, Inc.c:\windows\system32\drivers\ptilink.sys
+ rtl8139Realtek RTL8139 NDIS 5.0 DriverRealtek Semiconductor Corporationc:\windows\system32\drivers\rtl8139.sys
+ SecdrvSafeDisc driverc:\windows\system32\drivers\secdrv.sys
+ VIAudioVinyl AC'97 Codec Combo WDM DriverVIA Technologies, Inc.c:\windows\system32\drivers\viaudios.sys
+ ZSMC301bVideo streaming and Capture Device DriverVMc:\windows\system32\drivers\usbvm31b.sys