C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll
O9 - Extra button: WellGet - {35980F6E-A258-4E50-953D-813BB8556899} - D:\Program Files\WellGet\WellGet.exe
O9 - Extra button: (no name) - {676ab8e0-f5a6-11d3-86a5-0088cc224026} - D:\Herosoft\Application\TransIE.dll
O9 - Extra 'Tools' menuitem: 译星帮助 - {676ab8e0-f5a6-11d3-86a5-0088cc224026} - D:\Herosoft\Application\TransIE.dll
O9 - Extra button: 英文 - {C2EDD5E0-EB64-11d3-B4D2-0088CC231035} - D:\Herosoft\Application\TransIE.dll
O9 - Extra 'Tools' menuitem: 英文 - {C2EDD5E0-EB64-11d3-B4D2-0088CC231035} - D:\Herosoft\Application\TransIE.dll
O9 - Extra button: 易趣购物 - {DE60714F-AC19-427e-861A-FD60ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O9 - Extra 'Tools' menuitem: 易趣购物 - {DE60714F-AC19-427e-861A-FD60ABDF119A} - http://click2.ad4all.net/url2/urlmanage/url.asp?id=1 (file missing)
O11 - Options group: [CDNCLIENT] 中文上网
O16 - DPF: {448A5F6B-8C03-4B54-A338-F00237C508AD} (WEBChatRoomOCX Control) - http://www.51uc.com/cab/WEBChatRoom_1_39.cab
O16 - DPF: {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2} (AxSubmitControl Class) - https://mybank.icbc.com.cn/icbc/perbank/AxSafeControls.cab
O16 - DPF: {9A578C98-3C2F-4630-890B-FC04196EF420} (CNNIC_IDN) - http://client.jogo.cn/download/cnnic/cdn.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3432E768-8EE0-4B4C-BAE7-4850552DE5AA}: NameServer = 61.128.99.133 218.30.19.40
O20 - Winlogon Notify: dimsntfy - C:\WINDOWS\SYSTEM32\dimsntfy.dll
O23 - Service: Gray_Pigeon_Server (GrayPigeonServer) - Unknown owner - C:\WINDOWS\G_Server.exe
O23 - Service: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - d:\瑞星杀毒\rising\rfw\rfwsrv.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - D:\瑞星杀毒\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\瑞星杀毒\RAV\Ravmond.exe