O11 - Options group: [!CNS]  网络实名
O16 - DPF: {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} (BlueskyVideo Control) - http://www.bluesky.cn/download/v2_60.cab
O16 - DPF: {56A7DC70-E102-4408-A34A-AE06FEF01586} (天下搜索) - http://iebar.t2t2.com/iebar.cab
O16 - DPF: {7253A666-8D4A-11D7-A4DC-00E04C504779} (BDC Control) - http://www.liaoliao88.com/BDC.cab
O16 - DPF: {9675ABBF-8D0B-4956-868C-934B5A7928D4} (Npv Control) - https://nprotect.lineage2.com.cn/nprotect/nprotect2004/ncsoft/npv.cab
O16 - DPF: {991481A7-4669-4E15-8C24-100404E1F5CB} (Blueskyvoice Control) - http://www.bluesky.cn/download/blueskyvoice_60.cab
O16 - DPF: {F4B47EEA-5D5D-4055-A6B5-ED59CC3C5BB3} (Upgrade Class) - http://update.qyule.com/Client.cab
O16 - DPF: {FEE1002D-90A5-4A5D-AABE-01803FFBCF7A} (pCastPanel Class) - http://pcaststatic.mop.com/dn/files/pCastCtl_1.0.0.67_20050915.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AD10C564-4D47-4E8B-986D-724686AE305B}: NameServer = 61.128.128.68 61.128.192.68
O23 - Service: NetMeeting Remote Desktop  (mnmsrvcs) - Unknown owner - C:\WINDOWS\PcShares.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - rising - C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAM FILES\RISING\RAV\Ravmond.exe

O23 - Service: NetMeeting Remote Desktop (mnmsrvcs) - Unknown owner - C:\WINDOWS\PcShares.exe

修复
重启
删除C:\WINDOWS\PcShares.exe

重新启动找不到C:\WINDOWS\PcShares.exe

我郁闷

启动到安全模式，在文件夹选项中，显示隐藏文件和取消“隐藏受保护的操作系统文件”