C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Rising\Rav\CCenter.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\Rising\Rav\Ravmond.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Rising\Rav\RavStub.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Rundll32.exe
D:\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\soundman.exe
D:\Program Files\Rising\Rav\RavTask.exe
D:\Program Files\Rising\Rav\Ravmon.exe
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
E:\qq\QQ.exe
E:\qq\TIMPlatform.exe
C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe
D:\2222222\HijackThis.exe
R3 - URLSearchHook: VeryCD Search Class - {88351CEF-BAC0-4A9B-8380-31A173E2926F} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
O2 - BHO: (no name) - {06438ABE-6C87-48BA-A8E7-C210270D8FFE} - C:\WINDOWS\System32\Axxsy.dll (file missing)
O2 - BHO: 搜搜地址栏搜索 - {0C7C23EF-A848-485B-873C-0ED954731014} - C:\Program Files\TENCENT\Adplus\SSAddr.dll
O2 - BHO: (no name) - {0F49D848-57CA-4618-8027-3C39B675254A} - C:\WINDOWS\System32\Viyid.dll
O2 - BHO: (no name) - {123021CD-F851-4555-B7E6-29D8C4A4AAA1} - C:\WINDOWS\System32\Cqoig.dll
O2 - BHO: (no name) - {170EC5FD-100E-47C0-A9C8-BDC21DF844F9} - C:\WINDOWS\System32\Idzsv.dll (file missing)
O2 - BHO: (no name) - {1EC71437-2591-4FD5-9CE8-C6882AB2B1D1} - C:\WINDOWS\System32\Yfsggd.dll (file missing)
O2 - BHO: (no name) - {26703B74-1AC7-407A-B13F-9BF91FE2457F} - C:\WINDOWS\System32\Kkfit.dll (file missing)
O2 - BHO: i&Bar搜索引擎 - {2E7D3330-EB94-4518-B0FE-E05379A5C1DA} - C:\PROGRA~1\iBar\10002\iBar.dll (file missing)
O2 - BHO: (no name) - {378E9F29-3DFC-4C28-BEA3-7F655CE53CC0} - C:\WINDOWS\System32\Viocf.dll (file missing)
O2 - BHO: (no name) - {498CD117-392A-4812-BB45-2AD4F592EAE2} - C:\WINDOWS\System32\Hvlge.dll
O2 - BHO: (no name) - {4FC518A4-224C-4298-A0EA-AF031D639429} - C:\WINDOWS\System32\Jjgcb.dll (file missing)
O2 - BHO: (no name) - {5476782E-F107-4BFA-A333-F953D8246A9B} - C:\WINDOWS\System32\Ixrjrt.dll (file missing)
O2 - BHO: (no name) - {5678148B-8E2C-49F8-AABF-9E7DE21F85DA} - C:\WINDOWS\System32\Ngqd.dll (file missing)
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (file missing)
O2 - BHO: (no name) - {6224EE88-E859-403B-A38E-0F40E709F44D} - C:\WINDOWS\System32\Xexs.dll
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - (no file)
O2 - BHO: (no name) - {6A2BE2BF-0113-4ABB-8466-FD6302E47C97} - C:\WINDOWS\System32\Szaet.dll (file missing)
O2 - BHO: (no name) - {6B58B3E2-8A81-4450-8E5F-E392B0AD407F} - C:\WINDOWS\System32\Wfazdu.dll (file missing)
O2 - BHO: EyeOnIE Class - {6E28339B-7A2A-47B6-AEB2-46BA53782379} - D:\Program Files\IS\BhoPlugin.dll (file missing)
O2 - BHO: (no name) - {72A78010-1FFE-4303-992C-EB22C84A3D43} - C:\WINDOWS\System32\Wgdvq.dll
O2 - BHO: VeryCD超级搜索 - {75FE2B5A-D3A4-4EFA-AC11-ADC9C9459688} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
O2 - BHO: BandIE Class - {77FEF28E-EB96-44FF-B511-3185DEA48697} - C:\PROGRA~1\baidu\bar\baidubar.dll
O2 - BHO: (no name) - {866A1FC1-AC3C-40C4-A9FB-ECDC0304B657} - C:\WINDOWS\System32\Tmwseh.dll
O2 - BHO: ThunderBHO - {889D2FEB-5411-4565-8998-1DD2C5261283} - C:\Program Files\Thunder Network\Thunder\ComDlls\XunLeiBHO_001.dll
O2 - BHO: (no name) - {8BB09C36-C59B-40E9-A8B1-116A997E96FB} - C:\WINDOWS\System32\Fsmdq.dll (file missing)
O2 - BHO: (no name) - {8C7D1B46-EFD3-446C-84A0-6DB9A1089F8F} - C:\WINDOWS\System32\Jozev.dll
O2 - BHO: (no name) - {8D3DC64B-5734-4C8A-9644-4D5C226EB1C5} - C:\WINDOWS\System32\Srwmsx.dll (file missing)
O2 - BHO: (no name) - {949ACC6E-EA78-4F82-88BC-8A9B78D05F5C} - C:\WINDOWS\System32\Kbazdp.dll (file missing)
O2 - BHO: (no name) - {987BFE0A-87D0-4A20-ADEA-18033ECE15D5} - C:\WINDOWS\System32\Wfmajh.dll
O2 - BHO: (no name) - {A26A540D-E65A-4A06-9A2D-DD1C26AD3C16} - C:\WINDOWS\System32\Bcrr.dll (file missing)
O2 - BHO: (no name) - {A8B86BE3-6906-4663-8DFD-CF4969A7FBCC} - C:\WINDOWS\System32\Aakk.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: (no name) - {ADD7CD59-B20D-4827-BFAE-AFE8101661D8} - C:\WINDOWS\System32\Ezteay.dll (file missing)
O2 - BHO: (no name) - {AE625C42-C902-4D24-9C30-248F9C338F92} - C:\WINDOWS\System32\Pxfubc.dll (file missing)
O2 - BHO: (no name) - {AF1AB96D-DBFC-49E7-BDC7-9170FFA5767D} - C:\WINDOWS\System32\Ifjq.dll (file missing)
O2 - BHO: (no name) - {B19B8C12-1D53-4FB1-B23D-69BDDA320AD5} - C:\WINDOWS\System32\Psjdc.dll (file missing)
O2 - BHO: (no name) - {B364B635-3C38-46FE-A849-E51F66F68DD6} - C:\WINDOWS\System32\Kkkasf.dll (file missing)
O2 - BHO: (no name) - {B5103450-F655-4355-8C51-E7623E3CBF0B} - C:\WINDOWS\System32\Oxls.dll (file missing)
O2 - BHO: (no name) - {B780A7DF-7585-4C4A-8A93-3F3A4FC698A9} - C:\WINDOWS\System32\Nduauq.dll (file missing)
O2 - BHO: (no name) - {BA892533-5436-46D7-BD96-571CD1EC0438} - C:\WINDOWS\System32\Ninlcf.dll
O2 - BHO: (no name) - {BB26DD9B-6325-496E-B698-57F5A290A809} - C:\WINDOWS\System32\Ymdqw.dll (file missing)
O2 - BHO: (no name) - {BE0D5579-EAC9-4FA3-B417-9775AACDEF62} - C:\WINDOWS\System32\Scjhmm.dll (file missing)
O2 - BHO: (no name) - {CD2540D9-3258-455A-82A2-46BD0CEF49EE} - C:\WINDOWS\System32\Sivu.dll (file missing)
O2 - BHO: (no name) - {D0B9D2C8-AEB2-4E9E-B96A-17469579800B} - C:\WINDOWS\System32\Cibvek.dll (file missing)
O2 - BHO: (no name) - {D14C7F51-80D9-4E98-974A-0241B1369237} - C:\WINDOWS\System32\Ytyxw.dll
O2 - BHO: (no name) - {D81DFD71-B426-4ABE-AD16-5CAF43028F64} - C:\WINDOWS\System32\Fjhfd.dll
O2 - BHO: (no name) - {DAE2BE7B-63B4-47C0-9B03-90E072302E3D} - C:\WINDOWS\System32\Irxf.dll (file missing)
O2 - BHO: (no name) - {DCCB4877-FA27-4266-B9A6-316DD4E3FB87} - C:\WINDOWS\System32\Xudx.dll
O2 - BHO: (no name) - {DE2B5587-B275-4F2E-BDE4-8668AC2FB734} - C:\WINDOWS\System32\Qoxw.dll (file missing)
O2 - BHO: (no name) - {E013F13F-28E2-4A6D-A49D-B7EDFCF6A0DD} - C:\WINDOWS\System32\Ivddii.dll (file missing)
O2 - BHO: (no name) - {E6972B50-F527-4354-A3D0-0990EE0E116B} - C:\WINDOWS\System32\Prxmbx.dll (file missing)
O2 - BHO: (no name) - {EF410F6A-0B7F-41D8-B5EC-13E7064F9896} - C:\WINDOWS\System32\Isdah.dll
O2 - BHO: (no name) - {F0911E08-766F-4B63-84C0-0890A90E857F} - C:\WINDOWS\System32\Plsdwq.dll (file missing)
O2 - BHO: (no name) - {F2F2C770-50D0-4FBC-82EE-A81212C3DC52} - C:\WINDOWS\System32\Lubwv.dll (file missing)
O2 - BHO: WMHlprObj Class - {F5824EFB-728A-4726-A5A5-85A68B20EDC3} - C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll (file missing)
O2 - BHO: (no name) - {FA526197-9897-40E6-9AC4-FEFD720F72F9} - C:\WINDOWS\System32\Kokj.dll (file missing)
O2 - BHO: (no name) - {FD9A92E7-1ACA-4C63-94C3-69BFE719FEE5} - C:\WINDOWS\System32\Tgddy.dll (file missing)
O3 - Toolbar: BitCometBar - {3F1ABCDB-A875-46c1-8345-B72A4567E486} - E:\BitComet\BitCometBar\BitCometBar0.3.dll
O3 - Toolbar: 百度超级搜霸 - {B580CF65-E151-49C3-B73F-70B13FCA8E86} - C:\PROGRA~1\baidu\bar\baidubar.dll
O3 - Toolbar: VeryCD超级搜索 - {F869BB38-FFEF-4589-B986-610B7AD0ADA2} - C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: i&Bar搜索引擎 - {2E7D3330-EB94-4518-B0FE-E05379A5C1DA} - C:\PROGRA~1\iBar\10002\iBar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMan] soundman.exe
O4 - HKLM\..\Run: [Thunder] "C:\Program Files\Thunder Network\Thunder\ThunderShell.exe" /s
O4 - HKLM\..\Run: [Kaspersky Anti-Virus 2006] C:\Program Files\Kaspersky Lab\AVP6\avp.exe
O4 - HKLM\..\Run: [YOKAssiant] Rundll32.exe C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll,YOKAssiant
O4 - HKLM\..\Run: [RavTask] "D:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [BIE] Rundll32 C:\WINDOWS\DOWNLO~1\BDPlugin.dll,Rundll32
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE FAMETECH USB PC CAMERA
O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [update8] c:\program Files\Internet explorer\lib\aupdate.exe
O4 - Startup: 快捷方式 到 STW1.lnk = ?
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: &使用迅雷下载 - C:\Program Files\Thunder Network\Thunder\Program\GetUrl.htm
O8 - Extra context menu item: &使用迅雷下载全部链接 - C:\Program Files\Thunder Network\Thunder\Program\GetAllUrl.htm
O8 - Extra context menu item: Google 搜索(&G) - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: VeryCD超级搜索 - C:\PROGRA~1\YOK.com\SUPERS~1\yoksch.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - E:\qq\AddToNetDisk.htm
O8 - Extra context menu item: 使用IS下载 - D:\Program Files\IS\IS.htm
O8 - Extra context menu item: 反向链接 - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\qq\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\qq\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\qq\SendMMS.htm
O8 - Extra context menu item: 类似网页 - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: 缓存的网页快照 - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: 翻译英文字词(&T) - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O9 - Extra button: Script Checker - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\AVP6\scieplugin.dll
O9 - Extra button: 常用网址 - {36B39F01-7B48-44AD-A165-5849CD8EF562} - C:\WINDOWS\System32\SHDOCVW.DLL
O9 - Extra button: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (file missing)
O9 - Extra 'Tools' menuitem: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\qq\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - E:\qq\QQ.EXE
O10 - Broken Internet access because of LSP provider 'c:\windows\system32\cdnns.dll' missing
O11 - Options group: [TBH] 搜搜地址栏搜索
O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) - http://static.zangocash.com/cab/Seekmo/ie/bridge-c15.cab
O23 - Service: ewido security suite control - ewido networks - D:\security suite\ewidoctrl.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\Program Files\Rising\Rav\Ravmond.exe
