PART 2
C:\WINDOWS\system32\Narqh.dll
O2 - BHO: (no name) - {1AC7056A-5BD1-4C0F-89C6-80E601A2E463} - C:\WINDOWS\system32\Auqf.dll
O2 - BHO: (no name) - {1C4D908D-4677-4F06-93B7-BB1AE8E0C546} - C:\WINDOWS\system32\Jhiyc.dll
O2 - BHO: (no name) - {26331A48-09AC-4B04-877A-CEB3EAF6BEF3} - C:\WINDOWS\system32\Qnhc.dll
O2 - BHO: (no name) - {2B37C6C0-96BA-4E9F-9E87-4DBD0C1DB142} - C:\WINDOWS\system32\Evfwd.dll (file missing)
O2 - BHO: (no name) - {2B6D4B1A-40EC-4AAF-9F2E-F142FFC16188} - C:\WINDOWS\system32\Rrruy.dll
O2 - BHO: (no name) - {2E3F7897-295C-46EC-A5FD-9F19BE2ACB9F} - C:\WINDOWS\system32\Gdzu.dll (file missing)
O2 - BHO: (no name) - {302F6FB5-3E72-49CA-AED3-D24DE62CF507} - C:\WINDOWS\system32\Llwyv.dll
O2 - BHO: enhp32 - {33559EBD-C831-4731-952F-E2BC2CC7B42F} - C:\WINDOWS\system32\enhp32.dll
O2 - BHO: (no name) - {368AE2BF-D6A5-4964-A3F7-936C2E08B78B} - C:\WINDOWS\system32\Syklb.dll
O2 - BHO: (no name) - {393E1A9B-6B7F-4CB7-8A5E-0A060A3EC050} - C:\WINDOWS\system32\Toohnx.dll
O2 - BHO: (no name) - {39604B69-4A47-4A54-AF8D-30891A04F9E4} - C:\WINDOWS\system32\Ixya.dll
O2 - BHO: IE Browser Helper - {3CE496D1-1746-41CD-9489-3C0B93DF10E2} - C:\WINDOWS\Downlo~1\xc0c0.dll (file missing)
O2 - BHO: (no name) - {422EFC36-1874-4697-B8E9-B4CAE56279A2} - C:\WINDOWS\system32\Nfnzsy.dll
O2 - BHO: (no name) - {4268EBE6-9973-43A1-B1F7-20A3A639E28A} - C:\WINDOWS\system32\Fndu.dll
O2 - BHO: Kmedia - {42D25F15-CF07-4A72-B191-DB0792BF310C} - C:\WINDOWS\system32\Kmedia.dll
O2 - BHO: (no name) - {4583B698-6D68-464D-A7CE-B17F8AC4F679} - C:\WINDOWS\system32\Dqlpjw.dll
O2 - BHO: (no name) - {51DE635C-1DAA-4A85-AD1F-F772FF81A471} - C:\WINDOWS\system32\Taojx.dll
O2 - BHO: (no name) - {52E9FE9B-FC52-45CD-BB50-CB462598C9F0} - C:\WINDOWS\system32\Jjsb.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\QQ2005\QQIEHelper.dll
O2 - BHO: (no name) - {561A6665-79B5-456E-BA79-C6D21F6BC06C} - C:\WINDOWS\system32\Divknj.dll
O2 - BHO: (no name) - {5A1012DF-0B3E-4444-99FE-647E66F2960E} - C:\WINDOWS\system32\Ivzf.dll
O2 - BHO: (no name) - {5ED0015A-748A-4A2D-B0A1-3BB8732FDD1E} - C:\WINDOWS\system32\Uxhv.dll
O2 - BHO: (no name) - {5F28FB65-3A7F-4CF6-A71B-7B74F97FA5C2} - C:\WINDOWS\system32\Ybvwv.dll
O2 - BHO: (no name) - {5F2C8104-3C6E-4E3B-AC18-98020A003028} - C:\WINDOWS\system32\Czbwv.dll
O2 - BHO: (no name) - {620D4400-050F-4EB7-AC0E-28284A727E60} - C:\WINDOWS\system32\Xpdk.dll
O2 - BHO: (no name) - {727F1999-7A06-4D11-AA25-BD83989151C6} - C:\WINDOWS\system32\Shhd.dll
O2 - BHO: (no name) - {740D7035-9886-42EF-83F4-CF2DBDE2A25E} - C:\WINDOWS\system32\Mveq.dll (file missing)
O2 - BHO: (no name) - {76F0CAE4-3D9D-4E13-91EC-6A6A90DF3BD6} - C:\WINDOWS\system32\Esrzmm.dll
O2 - BHO: (no name) - {7C2E1B06-B7FB-487F-A2A6-727B68544700} - C:\WINDOWS\system32\Rlvatj.dll
O2 - BHO: (no name) - {7D96A826-926F-4542-9C45-EA020AA5B4AE} - C:\WINDOWS\system32\Bsbep.dll
O2 - BHO: (no name) - {7F2EE239-6EE8-4449-A6F1-8C8AFF432892} - C:\WINDOWS\system32\Wpmu.dll
O2 - BHO: (no name) - {84F4BF21-B880-4F2D-BFA6-B8C97D9B5D0F} - C:\WINDOWS\system32\Acbex.dll
O2 - BHO: (no name) - {8C13AC53-A1CA-4910-9DA2-DBBB4C6208F7} - C:\WINDOWS\system32\Knxlyo.dll
O2 - BHO: (no name) - {8D187EB7-86C7-4ADE-A4C5-B51289E9E879} - C:\WINDOWS\system32\Wuzmx.dll
O2 - BHO: (no name) - {913F8EFE-6844-41E9-A4E7-60BFA2EFB8C6} - C:\WINDOWS\system32\Fdadi.dll
O2 - BHO: Accoona Search Assistant - {944864A5-3916-46E2-96A9-A2E84F3F1208} - C:\Program Files\Accoona\ASearchAssist.dll
O2 - BHO: (no name) - {9DB265D1-05F8-48AC-9C35-6C330600640B} - C:\WINDOWS\system32\Oqhhw.dll
O2 - BHO: (no name) - {A042F185-DC8C-4877-8D28-B9DF503B4B0A} - C:\WINDOWS\system32\Uofnu.dll
O2 - BHO: (no name) - {A7D93CF6-A1E7-42A0-B7F8-8B79E2514C82} - C:\WINDOWS\system32\Zegq.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {AADBEA17-33F9-4A16-8999-3AC4EE665B5A} - C:\WINDOWS\system32\Klgkvl.dll
O2 - BHO: (no name) - {ABBB6215-A57F-47B7-9DE3-0F2C57A4C48B} - C:\WINDOWS\system32\Xadxc.dll
O2 - BHO: (no name) - {B015C48B-007D-4276-B60C-2644268647B0} - C:\WINDOWS\system32\Iypbh.dll
O2 - BHO: (no name) - {B137A194-DA37-495D-88DE-0D196D9658A5} - C:\WINDOWS\system32\Lvbz.dll
O2 - BHO: (no name) - {B30C9CCF-142A-4A78-8E2B-50ADD688058F} - C:\WINDOWS\system32\Qvcz.dll
O2 - BHO: (no name) - {B8D68AED-AF0B-429D-8CE7-20E7DE4179EC} - C:\WINDOWS\system32\Yolk.dll
O2 - BHO: (no name) - {BC2D75F0-D7D9-4E30-B25E-9E84AB726177} - C:\WINDOWS\system32\Azam.dll
O2 - BHO: (no name) - {C10C6A1D-6BCA-4E25-AE3C-27AF5CEB5839} - C:\WINDOWS\system32\Drfm.dll (file missing)
O2 - BHO: OusArqgw Class - {C333AC8D-07D3-4E24-2480-637B517A98CB} - (no file)
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: IEHlprObj Class - {C5E5DB7E-46B1-47E6-8447-2E517F269925} - e:\Xplus\GETIE.dll (file missing)
O2 - BHO: (no name) - {C62C7E91-460D-4302-B1A8-C7275B0A2BE3} - C:\WINDOWS\system32\Kejmi.dll
O2 - BHO: (no name) - {CE7C3CF0-4B15-11D1-ABED-709549C10000} - (no file)
O2 - BHO: (no name) - {D38CBB69-48B2-425F-AF75-EA1A04C5F3B6} - C:\WINDOWS\system32\Snpi.dll
O2 - BHO: (no name) - {D3FB54EE-B92D-4A37-8C04-9C34F6601A5A} - C:\WINDOWS\system32\Qkkiby.dll (file missing)
O2 - BHO: (no name) - {D4002B83-764E-4167-9841-C06C5BE4B7E5} - C:\WINDOWS\system32\Vawxp.dll
O2 - BHO: (no name) - {E748A3BB-322C-4807-B9C8-BB374CAFB5B2} - C:\WINDOWS\system32\Lqjtc.dll
O2 - BHO: (no name) - {EB830457-A7A7-4C7B-82D0-27A9532028BE} - C:\WINDOWS\system32\Pzftbv.dll
O2 - BHO: (no name) - {EBA0CE93-57B7-4DD2-A7A1-AB0F39497891} - C:\WINDOWS\system32\Cuftko.dll (file missing)
O2 - BHO: BHelper Class - {F2E37336-BFDB-409B-8D0E-6F013C438B20} - C:\WINDOWS\043o05e0.dll
O2 - BHO: (no name) - {F69F8E42-055F-413B-BF1C-926D857B9D1E} - C:\WINDOWS\system32\Jqvjxu.dll (file missing)
O2 - BHO: (no name) - {FB4777A3-7B05-437A-8E38-BF2BA5602C18} - C:\WINDOWS\system32\Wumht.dll
O2 - BHO: (no name) - {FF3736A8-CDFB-4F76-BE32-FBFE726748AC} - C:\WINDOWS\system32\Rvfd.dll
O3 - IE工具栏增项: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - IE工具栏增项: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - D:\Kingsoft\FastAIT 2005\IEBand.dll
O3 - IE工具栏增项: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - IE工具栏增项: Accoona - {364B6276-C6C1-40B6-A6D7-6C48871FD707} - C:\Program Files\Accoona\atoolbar.dll
O4 - 启动项HKLM\\Run: [spoolsv] C:\WINDOWS\system32\spoolsv\spoolsv.exe -printer
O4 - 启动项HKLM\\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Xplus] "e:\Xplus\Xplus_Wait.exe" /min
O4 - HKCU\..\Run: [msnnt] C:\WINDOWS\Updated.exe
O4 - Startup: ADSL.lnk = ?
O8 - IE右键菜单中的新增项目: 上传到QQ网络硬盘 - C:\Program Files\QQ2005\AddToNetDisk.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - C:\Program Files\QQ2005\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - C:\Program Files\QQ2005\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - C:\Program Files\QQ2005\SendMMS.htm
O9 - 浏览器额外的按钮: 微软 - {6096E38F-5AC1-4391-8EC4-75DFA92FB32F} - http://www.microsoft.com/china/index.htm (file missing)
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\QQ2005\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\QQ2005\QQ.EXE
O9 - 浏览器额外的按钮: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\QQ2005\QQIEHelper.dll
O9 - 浏览器额外的“工具”菜单项: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\QQ2005\QQIEHelper.dll
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的按钮: 时尚精品，体验快感 - {6E5EECAF-8879-4a75-8A88-B44B6382A763} - http://adfarm.mediaplex.com/ad/ck/4080-22910-9640-61?cn=chaoyue;rgbutton_120x60;hp&mpro=http://www.ebay.com.cn (file missing) (HKCU)
O9 - 浏览器额外的“工具”菜单项: 易趣时尚购物 - {6E5EECAF-8879-4a75-8A88-B44B6382A763} - http://adfarm.mediaplex.com/ad/ck/4080-22910-9640-61?cn=chaoyue;rgbutton_120x60;hp&mpro=http://www.ebay.com.cn (file missing) (HKCU)
O11 - Options group: [TBH] QQ地址栏搜索插件
O16 - DPF: {2761225D-F0F2-44E8-A2C9-476FB6A3316A} (TRadio Control) - http://dl_dir.qq.com/qqtools/trsetup.exe
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader
Object) - http://www.miniclip.com/supergerball/miniclipGameLoader.dll
O16 - DPF: {2931566C-B8A6-46C5-BF4D-E6AB9251E953} (Nexon Package Manager Control) - http://file.nx.com/activex/public_new/nxpm.cab
O16 - DPF: {5EC7C511-CD0F-42E6-830C-1BD9882F3458} (PowerPlayer Control) - http://download.ppstream.com/bin/powerplayer.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://mediamax.streamload.com/Upload/XUpload.ocx
O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} - http://cache10.itv.mop.com/pCastCtl_1.0.0.87_20060601.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7CD792CD-62C1-43A1-99B3-E51672EDED93}: NameServer = 202.96.128.86,202.96.128.166
O17 - HKLM\System\CCS\Services\Tcpip\..\{F93572D7-E284-4916-A7FC-568B0267B788}: NameServer = 202.96.128.86 202.96.128.166
O21 - SSODL: DelayRun - {5A6F2F95-3191-433B-8533-EB0B596A7BAC} - C:\WINDOWS\system32\043d05e0.dll
O23 - NT 服务: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - NT 服务: User Profile Hive Cleanup (UPHClean) - Unknown owner - C:\Program Files\UPHClean\uphclean.exe
