R3 - URLSearchHook: (no name) - {406F94F0-504F-4a40-8DFD-58B0666ABEBD} - (no file)
F0 - system.ini: Shell=E:\ZY\explorer.exe
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 hereisit.com
O1 - Hosts: 127.0.0.1 cnsmin.3721,net #3721网络实名
O1 - Hosts: 127.0.0.1 download.3721,com #3721网络实名
O1 - Hosts: 127.0.0.1 download.3721,net #3721网络实名
O2 - BHO: SDObmObj Class - {D4D5C535-BA95-4327-870D-A33826FDD17A} - E:\ZY\SYSTEM\OBWBKYA.DLL
O2 - BHO: CdnForIE Class - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - E:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (file missing)
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - E:\ZY\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [StillImageMonitor] E:\ZY\SYSTEM\STIMON.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: 解霸实时播放 - E:\APP\Hero3000\MPURLGET.HTM
O8 - Extra context menu item: 雅虎搜索 - res://E:\PROGRAM FILES\YAHOO!\ASSISTANT\ASSIST\YASBAR.DLL/246
O8 - Extra context menu item: 添加到QQ自定义面板 - E:\QQ2006优化\QQ2006\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - E:\QQ2006优化\QQ2006\AddEmotion.htm
O8 - Extra context menu item: 上传到QQ网络硬盘 - E:\QQ2006优化\QQ2006\AddToNetDisk.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - E:\QQ2006优化\QQ2006\SendMMS.htm
O8 - Extra context menu item: 访问通用网址 - E:\Program Files\CNNIC\Cdn\cnnic.htm
O9 - Extra Button: @shdoclc.dll,-866@2052,相关站点 - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - E:\ZY\SYSTEM\SHDOCVW.DLL
O9 - Extra 'Tools' menuitem: @shdoclc.dll,-864@2052,显示相关站点(&R) - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - E:\ZY\SYSTEM\SHDOCVW.DLL
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra Button: 碧聊 - {4B87EE01-82ED-4030-A372-B3BEF4829ED5} - http://chat.yinsha.com/ (file missing)
O9 - Extra 'Tools' menuitem: 聊天 - {4B87EE01-82ED-4030-A372-B3BEF4829ED5} - http://chat.yinsha.com/ (file missing)
O9 - Extra Button: 解霸 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - E:\APP\Hero3000\MPLAYER.EXE
O9 - Extra 'Tools' menuitem: 超级解霸 - {367E0A21-8601-4986-9C9A-153BF5ACA118} - E:\APP\Hero3000\MPLAYER.EXE
O9 - Extra Button: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - Extra 'Tools' menuitem: kele8 - {84920E5F-3788-49cd-A274-E365578DF174} - http://www.kele8.com/ (file missing)
O9 - Extra Button: 浩方对战平台 - {0A155D3C-68E2-4215-A47A-E800A446447A} - E:\PROGRAM FILES\HFGAME3\GAMECLIENT.EXE
O9 - Extra Button: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - E:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (file missing)
O9 - Extra 'Tools' menuitem: 中文上网 - {5C3853CF-C7E0-4946-B3FA-1ABDB6F48108} - E:\PROGRA~1\CNNIC\Cdn\cdnforie.dll (file missing)
O11 - Options group: [CDNCLIENT] 中文上网
O16 - DPF: DirectAnimation Java Classes -
file://E:\ZY\SYSTEM\dajava.cab
O16 - DPF: Internet Explorer Classes for Java -
file://E:\ZY\SYSTEM\iejava.cab
O16 - DPF: {2EA6D939-4445-43F1-A12B-8CB3DDA8B855} (V2 Control) - http://202.96.140.88/vchat/v27.cab
O16 - DPF: {BA0F088C-72C1-475A-92F8-42391DEF6961} (BlueskyAudio Class) - http://www.bliao.com/vchat/blueskyvoice.cab
O16 - DPF: {098A3F72-3110-4004-B954-2F9DC44934B4} (AddSHCARoot Control) - http://chat.hzcnc.com/AddSHCARootCert.cab
O16 - DPF: {9E2B3DEC-7152-4F33-9EEB-4D22B07D54B2} (iTouchNetConf Class) - http://chat.hzcnc.com/iNetConf1.cab
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://61.152.160.40:1995/talk.cab
O16 - DPF: {2354A44B-3CEB-4829-9940-545B03103538} (PowerPlr Control) - http://www.etvnet.net/plugin/PowerPlr.ocx
O16 - DPF: {9A578C98-3C2F-4630-890B-FC04196EF420} (CNNIC_IDN) - http://jump.cnnic.cn/stat/stat?sid=0008&debug=false&pid=c_admin88&url=http://client.jogo.cn/download/cnnic/cdn.cab
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 202.96.128.143
O18 - Protocol: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - E:\ZY\SYSTEM\urlmon.dll
O18 - Protocol: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - E:\ZY\SYSTEM\urlmon.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - E:\ZY\SYSTEM\urlmon.dll
O18 - Protocol: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - E:\ZY\SYSTEM\urlmon.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - E:\ZY\SYSTEM\urlmon.dll
O18 - Protocol: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - E:\ZY\SYSTEM\urlmon.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - E:\ZY\SYSTEM\urlmon.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - E:\ZY\SYSTEM\urlmon.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - E:\ZY\SYSTEM\MSHTML.DLL
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - E:\ZY\SYSTEM\MSHTML.DLL
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - E:\ZY\SYSTEM\MSHTML.DLL
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - E:\ZY\SYSTEM\MSHTML.DLL
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - E:\ZY\SYSTEM\MSHTML.DLL
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - E:\ZY\SYSTEM\MSHTML.DLL
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - E:\ZY\SYSTEM\ITSS.DLL
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - E:\ZY\SYSTEM\ITSS.DLL
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - E:\ZY\SYSTEM\INETCOMM.DLL
O18 - Protocol: msdaipp - (no CLSID) - (no file)
O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - E:\ZY\SYSTEM\MSDXM.OCX
