**** Run Keys ****
RUN: [SoundMan] rem SOUNDMAN.EXE
RUN: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
RUN: [nwiz] nwiz.exe /install
RUN: [helper.dll] C:\WINDOWS\system32\rundll32.exe C:\PROGRA~1\3721\helper.dll,Rundll32
RUN: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
RUN: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
**** Browser Helper
Objects ****
BHO: [ThunderIEHelper Class] C:\WINDOWS\System32\xunleibho_v8.dll
BHO: [雅虎助手] C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
BHO: [DragSearch BHO] C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
BHO: [MSEvents
Object] C:\WINDOWS\System32\khffe.dll
**** IE Toolbars ****
TOOLBAR: [电台(&R)] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [雅虎助手] C:\PROGRA~1\Yahoo!\Assistant\Assist\yasbar.dll
TOOLBAR: [卡卡上网安全助手] C:\WINDOWS\System32\kakatool.dll
**** IE Extensions ****
IEExt: [浩方对战平台] C:\Program Files\浩方对战平台\GameClient.exe
IEExt: [雅虎助手] http://cn.zs.yahoo.com/?source=Cns
IEExt: [@shdoclc.dll,-866] http://cn.zs.yahoo.com/?source=Cns
**** Hosts File Entries ****
HOSTS: 127.0.0.1 localhost
HOSTS: 127.0.0.1 localhost
**** IE Settings ****
Default Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default Search: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
**** IE Context Menu (Right click) ****
IEContext: [&使用迅雷下载] C:\Program Files\Sandai Technologies Inc\Thunder\geturl.htm
IEContext: [&使用迅雷下载全部链接] C:\Program Files\Sandai Technologies Inc\Thunder\getallurl.htm
IEContext: [上传到QQ网络硬盘] C:\Program Files\Tencent\QQ\AddToNetDisk.htm
IEContext: [添加到QQ自定义面板] C:\Program Files\Tencent\QQ\AddPanel.htm
IEContext: [添加到QQ表情] C:\Program Files\Tencent\QQ\AddEmotion.htm
IEContext: [用QQ彩信发送该图片] C:\Program Files\Tencent\QQ\SendMMS.htm
**** Layered Service Providers ****
LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{21D11CF3-26C2-4759-908D-FCB5E07B8845}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{21D11CF3-26C2-4759-908D-FCB5E07B8845}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{060493A0-CDD7-485E-8B82-5DE4E3ABB411}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{060493A0-CDD7-485E-8B82-5DE4E3ABB411}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8F0E4736-7F94-49AA-A417-DFE04D8F8D14}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8F0E4736-7F94-49AA-A417-DFE04D8F8D14}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BBBD50BF-A605-47FD-A43F-E115D36E5B55}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{BBBD50BF-A605-47FD-A43F-E115D36E5B55}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2C09D867-380A-49C2-B60C-97DAE01E70C8}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{2C09D867-380A-49C2-B60C-97DAE01E70C8}] DATAGRAM 4
**** Blocked Control Panel Items ****
BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No
**** Downloaded Program Files ****
DirectAnimation Java Classes [
file://C:\WINDOWS\Java\classes\dajava.cab]
Microsoft XML Parser for Java [
file://C:\WINDOWS\Java\classes\xmldso.cab]
{3334504D-9980-0010-8000-00AA00389B71} [http://download.microsoft.com/download/0/C/8/0C8EDFAB-30BC-4792-898E-2DABE27B2C4D/mp43dmo.CAB]
{33564D57-9980-0010-8000-00AA00389B71} [http://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab]
{5334504D-9980-0010-8000-00AA00389B71} [http://download.microsoft.com/download/0/8/D/08D91A3B-CFF6-45DE-95DF-64415075E344/mpg4sdmo.cab]
{C8BD9ACB-F7EC-48E6-BB2F-DAADC6789E9A} [http://zs.kingsoft.com/duba/OCX/KAVClean.CAB]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab]
{E787FD25-8D7C-4693-AE67-9406BC6E22DF} [https://www.tenpay.com/download/qqedit.cab]
**** Custom IE Search Items ****
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm