O2 - BHO: (no name) - {AC8ADFEA-2303-4DE0-89E9-0667586E2C25} - C:\WINDOWS\System32\Agdrzv.dll
O2 - BHO: (no name) - {AD0BD107-6F78-40E6-A745-2BF22F86BDE7} - C:\WINDOWS\System32\Rrpcvq.dll
O2 - BHO: (no name) - {AFDC47AF-7978-4A68-A7E0-24D528B54408} - C:\WINDOWS\System32\Klebx.dll
O2 - BHO: (no name) - {B03E9643-9AE7-43E1-AEBB-828B0411BA2F} - C:\WINDOWS\System32\Qpjh.dll
O2 - BHO: (no name) - {B17F0222-0232-4773-85DA-B8A179713C4E} - C:\WINDOWS\System32\Towi.dll
O2 - BHO: DownloadBHO T2BHO - {B1D147E7-873E-4909-8127-695D9BB78728} - C:\WINDOWS\Downloaded Program Files\barhelp24.0.dll (file missing)
O2 - BHO: (no name) - {BB88149C-3800-496D-9CBB-95350BAA0340} - C:\WINDOWS\System32\Fwwdqy.dll (file missing)
O2 - BHO: (no name) - {BF8411C0-2F50-4DBE-B785-D83EC658D86A} - C:\WINDOWS\System32\Iuez.dll
O2 - BHO: (no name) - {C00BC8FB-33E3-4E2C-B122-0A907E035536} - C:\WINDOWS\System32\Svsz.dll (file missing)
O2 - BHO: (no name) - {C2753159-DC39-4CD4-8E02-6BF2B665ADFE} - C:\WINDOWS\System32\Aexxn.dll
O2 - BHO: (no name) - {C3014586-EE33-4DF9-BD0B-3A17F7CE3728} - C:\WINDOWS\System32\Pntio.dll
O2 - BHO: (no name) - {C66AC0D2-A48C-4BB6-A81C-0AE39674A157} - C:\WINDOWS\System32\Vqrps.dll
O2 - BHO: (no name) - {CD9F47F8-E3C4-4497-B445-7D72ADCB7027} - C:\WINDOWS\System32\Ogkcog.dll
O2 - BHO: (no name) - {D02CD2E2-7DAC-4F07-A517-98430DA75E59} - C:\WINDOWS\System32\Ekki.dll
O2 - BHO: (no name) - {D2A7B53B-129B-4040-A4FB-AF6E888A6584} - C:\WINDOWS\System32\Hqql.dll
O2 - BHO: (no name) - {D9ECEDE9-F613-4FA6-98E1-D0CAE9012A6B} - C:\WINDOWS\System32\Ejici.dll (file missing)
O2 - BHO: (no name) - {DD3EDA65-78A4-4B6B-877A-1584A7249D33} - C:\WINDOWS\System32\Jscay.dll
O2 - BHO: (no name) - {E2E0697D-6E46-4695-A056-A6BE8E299CDA} - C:\WINDOWS\System32\Kajku.dll
O2 - BHO: (no name) - {E89A5769-B5EA-4C43-93D0-20885BF27C5A} - C:\WINDOWS\System32\Ttltu.dll
O2 - BHO: (no name) - {EF247E40-D25E-48AF-A271-C07F14C54E9F} - C:\WINDOWS\System32\Dvqtoh.dll
O2 - BHO: (no name) - {F17C51BD-5CC8-416C-915A-82A7561B0F4D} - C:\WINDOWS\System32\Euosme.dll
O2 - BHO: (no name) - {FEF0D649-D145-48A0-B432-9D572F345EA1} - C:\WINDOWS\System32\Hmlwf.dll
O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\PROGRA~1\Kingsoft\FastAIT\IEBand.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: 上网助手 - {1B0E7716-898E-48cc-9690-4E338E8DE1D3} - C:\Program Files\3721\assist\assist.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: 雅虎助手 - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yasbar.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IMJPMIG8.1] ; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [nwiz] rem nwiz.exe /install
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HotKey] C:\WINDOWS\WASAY\HOTKEY.EXE
O4 - HKLM\..\Run: [wcmdmgr] C:\WINDOWS\wt\wcmdmgrl.exe -launch
O4 - HKLM\..\Run: [KnightIII] x?
O4 - HKLM\..\Run: [Welcome] Welcome.exe /R
O4 - HKLM\..\Run: [Super Rabbit SafeEdit] D:\Program Files\Super Rabbit\MagicSet\SRFC.EXE /Load
O4 - HKLM\..\Run: [AsShell] "C:\Program Files\3721\assist\AsShell.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AC] C:\Program Files\beelink\bverify\bverify.exe
O4 - HKLM\..\Run: [acu] RunDll32 "C:\WINDOWS\Downlo~1\acu.dll",Run
O4 - HKLM\..\Run: [Mysee Alert] "C:\Program Files\GAOV\Mysee Alert\Mysee Alert.exe" -notray
O4 - HKLM\..\Run: [RavUpfers] C:\WINDOWS\System32\agetltfeisr.exe
O4 - HKLM\..\Run: [!ewido] "C:\DOCUME~1\Owner\LOCALS~1\Temp\Rar$EX01.718\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKLM\..\Run: [Jiangmin KVFW] D:\江民防火墙\KvfwMcl.exe -silent
O4 - HKLM\..\Run: [RavTask] "D:\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [CdnCtr] x?
O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - HKLM\..\Run: [RfwMain] "D:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
O4 - HKLM\..\Run: [C-Media Speaker Configuration] ; C:\Program Files\C-Media\WIN_ME\Setup.exe /SPEAKER
O4 - HKLM\..\Run: [explorer.exe] ; rem C:\Program Files\explorer.exe
O4 - HKLM\..\Run: [KAVRUN] ; C:\KAV2002\KAVRUN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] ; RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SysExplr] ; rem ; C:\HEROSOFT\Hero3000\SYSEXPLR.EXE
O4 - HKLM\..\Run: [VirtualDrive] ; "C:\Program Files\FarStone\VirtualDrive\VDTask.exe" /AutoRestore
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Super Rabbit Start Button] D:\Program Files\Super Rabbit\MagicSet\SRSB.EXE /Load
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [MSMSGS] ; ; "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] ; rem D:\Valve\Steam\fdsh\Steam.exe -silent
O4 - HKCU\..\Run: [STYLEXP] ; ; C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &使用迅雷下载 - F:\讯雷5\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - F:\讯雷5\Program\GetAllUrl.htm
O8 - Extra context menu item: Google 搜索(&G) - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: 上传到QQ网络硬盘 - E:\qq5005\AddToNetDisk.htm
O8 - Extra context menu item: 反向链接 - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\qq5005\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\qq5005\AddEmotion.htm
O8 - Extra context menu item: 添加到雅虎订阅(&Y) - res://C:\PROGRA~1\Yahoo!\ASSIST~1\assist\yrss.dll/YRSSMENUEXT
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\qq5005\SendMMS.htm
O8 - Extra context menu item: 类似网页 - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: 缓存的网页快照 - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: 翻译英文字词(&T) - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: 雅虎搜索 - res://C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll/246
O9 - Extra button: (no name) - {2253922F-1B26-4C74-8B57-E3AEE748DBB8} - (no file)
O9 - Extra button: (no name) - {8DE0FCD4-5EB5-11D3-AD25-00002100131B} - C:\POWERW~1\IEPlugin.dll
O9 - Extra button: 词霸 - {9A687CA6-D585-4947-9ED9-BE96071F5CD9} - C:\POWERW~1\XDictExB.dll
O9 - Extra button: 金山词霸 - {C8CE29C5-7589-11D3-B81B-0080C8DC5DC8} - C:\POWERW~1\IEPlugin.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\qq5005\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\qq5005\QQ.EXE
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - E:\qq5005\QQIEHelper.dll
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - E:\qq5005\QQIEHelper.dll
O11 - Options group: [TBH] 搜搜地址栏搜索
O14 - IERESET.INF: START_PAGE_URL=http://www.thtfpc.com
O16 - DPF: {0D4FEA3A-D69E-4F40-9B95-34BE1CA07CF7} (WJQLocalDL Class) -
file://G:\Csc50cz\It\getNet\CleverWorld\Client\LocalDownLoad.dll
O16 - DPF: {E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153} (Rising Web Scan
Object) - http://download.rising.com.cn/register/pcver/autoupgradepad/pcver2006new/OL2006.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0771871D-D8A9-49DF-88A0-22EE0CDA5AF0}: NameServer = 10.254.131.253
O17 - HKLM\System\CS1\Services\Tcpip\..\{0771871D-D8A9-49DF-88A0-22EE0CDA5AF0}: NameServer = 10.254.131.253
O17 - HKLM\System\CS2\Services\Tcpip\..\{0771871D-D8A9-49DF-88A0-22EE0CDA5AF0}: NameServer = 10.254.131.253
O17 - HKLM\System\CS3\Services\Tcpip\..\{0771871D-D8A9-49DF-88A0-22EE0CDA5AF0}: NameServer = 10.254.131.253
O17 - HKLM\System\CS4\Services\Tcpip\..\{0771871D-D8A9-49DF-88A0-22EE0CDA5AF0}: NameServer = 10.254.131.253
O17 - HKLM\System\CS5\Services\Tcpip\..\{0771871D-D8A9-49DF-88A0-22EE0CDA5AF0}: NameServer = 10.254.131.253
O18 - Protocol: dic - {C21F5C32-F57A-4A0D-8E0A-B672691C52D0} - C:\POWERW~1\XDictExB.dll
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Rising Proxy Service (RfwProxySrv) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwproxy.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Co., Ltd. - d:\program files\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Rising\Rav\Ravmond.exe