O2 - BHO: (no name) - {10F6D51D-AA1F-48DD-92DC-77B9F6341A63} - C:\WINDOWS\system32\Gyeivn.dll
O2 - BHO: (no name) - {124B1D2D-BBF6-4A53-BDF0-4481116E29EA} - C:\WINDOWS\system32\Xcdgf.dll
O2 - BHO: MyIEHelper Class - {16A770A0-0E87-4278-B748-2460D64A8386} - C:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper\IEHelper_8222.dll (file missing)
O2 - BHO: (no name) - {17F6FFB6-4D8E-440D-B443-4FEE31EAB594} - C:\WINDOWS\system32\Zwqs.dll
O2 - BHO: QuickBtn - {1A199C20-DE2B-4838-AE3F-B5257ECE2B7E} - C:\Program Files\CoolWebsite\QuickLink.dll (file missing)
O2 - BHO: (no name) - {1F08FCEB-0E37-4024-B270-2C148C51C304} - C:\WINDOWS\system32\Aictth.dll
O2 - BHO: (no name) - {1F30D3DB-3759-4F27-BDAD-B304C8DBF1EE} - C:\WINDOWS\system32\Qxot.dll
O2 - BHO: (no name) - {2311DDB4-34A3-417C-AEF3-4A51AFA16FF1} - C:\WINDOWS\system32\Kkuer.dll (file missing)
O2 - BHO: (no name) - {28FA33F6-1E5D-4DE5-A458-23B9AE46D047} - C:\WINDOWS\system32\Nszj.dll (file missing)
O2 - BHO: IE Address Browser Helper - {2A0176FE-008B-4706-90F5-BBA532A49731} - C:\Program Files\SearchNet\SNHpr.dll
O2 - BHO: (no name) - {39DD92D0-82CB-4FF7-97B5-FB361251AF23} - C:\WINDOWS\system32\Ifppi.dll (file missing)
O2 - BHO: IE Browser Helper - {3CE496D1-1746-41CD-9489-3C0B93DF10E2} - C:\WINDOWS\Downlo~1\lzdqf9.dll
O2 - BHO: (no name) - {3F17803D-FF1A-4F21-8F1E-CD82C7F1EE63} - C:\WINDOWS\system32\Qeoqsi.dll (file missing)
O2 - BHO: (no name) - {4D811C8D-D15A-4935-9D69-8A86D41E3ABC} - C:\WINDOWS\system32\Jdeja.dll
O2 - BHO: (no name) - {5127CC43-082A-4F55-8D72-7D73A9DEB346} - C:\WINDOWS\system32\Mzwp.dll (file missing)
O2 - BHO: (no name) - {515885AB-946E-4EF0-B517-0D0FD77628E5} - C:\WINDOWS\system32\Teljo.dll
O2 - BHO: (no name) - {521EED80-2740-4E53-9389-ABD24A5CB20F} - C:\WINDOWS\system32\Jfvu.dll
O2 - BHO: QQIEHelper - {54EBD53A-9BC1-480B-966A-843A333CA162} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O2 - BHO: (no name) - {669751ED-D558-49AE-B01A-3B374CC7910E} - C:\WINDOWS\system32\ssup.dll
O2 - BHO: (no name) - {6A2B9997-9883-47CF-B733-76BDCD7A9451} - C:\WINDOWS\system32\Zguraw.dll (file missing)
O2 - BHO: bg - {7BDAF75A-0D6F-4F50-AFE9-333D08DF4005} - C:\PROGRA~1\baigoo\baigoobh.dll
O2 - BHO: (no name) - {7DD8FB95-1E95-49F0-B584-354BCF389506} - C:\WINDOWS\system32\Ndmkw.dll
O2 - BHO: (no name) - {8F7DDC39-CD33-45C2-A9C5-8661A03C7C07} - C:\WINDOWS\system32\Etah.dll (file missing)
O2 - BHO: (no name) - {9688445F-532A-4EF2-91CE-5121AF786635} - C:\WINDOWS\system32\Gdpx.dll
O2 - BHO: (no name) - {96D3DCE9-14EC-437A-B942-6B0EA593BFF8} - C:\WINDOWS\system32\Ovimjr.dll (file missing)
O2 - BHO: (no name) - {A31E04E8-5BED-404E-A5F2-646BA9F6C5E5} - C:\WINDOWS\system32\Wfti.dll (file missing)
O2 - BHO: (no name) - {AA9A6BD6-DC4A-4A77-80E1-4F801797D9B1} - C:\WINDOWS\system32\Pplv.dll (file missing)
O2 - BHO: (no name) - {B17E68E0-9A68-4796-9C23-9DE466AA0005} - C:\WINDOWS\system32\Ftey.dll
O2 - BHO: (no name) - {B251A104-DFCE-40F7-B579-7AE08E905F28} - C:\WINDOWS\system32\Lidiag.dll (file missing)
O2 - BHO: (no name) - {B4C1334E-0E99-4C09-A538-3096CEE31FF2} - C:\WINDOWS\system32\Bvijl.dll
O2 - BHO: (no name) - {B61B1672-A9EC-4E06-BD9C-8DFA4347823E} - C:\WINDOWS\system32\Krdldg.dll
O2 - BHO: (no name) - {C1FF5732-5565-4ABB-A5DB-4DB43BCD44DA} - C:\WINDOWS\system32\Jnxs.dll (file missing)
O2 - BHO: (no name) - {D0792280-65B7-4E55-A1B7-EF10D970019C} - C:\WINDOWS\system32\Vzgs.dll
O2 - BHO: (no name) - {DB303E7C-48A1-47F0-A857-6BD8631188F3} - C:\WINDOWS\system32\Wiyn.dll
O2 - BHO: (no name) - {DD16FE88-7D52-465C-AB0E-B34371A19238} - C:\WINDOWS\system32\Vduck.dll
O2 - BHO: (no name) - {EB35C913-0F40-4FD3-855E-63ADB739DBA7} - C:\WINDOWS\system32\Cgmbgz.dll (file missing)
O2 - BHO: (no name) - {F2B6367F-0D8F-4664-977B-EDCB0B9C78CC} - C:\WINDOWS\system32\Nkbxig.dll
O2 - BHO: (no name) - {FC01D4EF-121B-4B8A-9ADD-5E298F641D70} - C:\WINDOWS\system32\Ixcdb.dll (file missing)
O2 - BHO: (no name) - {FF2518B1-1774-4C84-AE47-87B703B64E61} - C:\WINDOWS\system32\Mhaohq.dll
O3 - Toolbar: 金山快译(&K) - {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} - C:\PROGRA~1\Kingsoft\FastAIT\IEBand.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [mscfs] RUNDLL32 C:\WINDOWS\system32\msibm\cfsys.dll,cfs
O4 - HKLM\..\Run: [SearchNet_Up] "C:\Program Files\SearchNet\ServeUp.exe"
O4 - HKLM\..\Run: [RavTask] "C:\Program Files\Rising\Rav\RavTask.exe" -system
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [h27] RunDll32 "C:\WINDOWS\Downlo~1\wxz.dll",Run
O4 - HKLM\..\Run: [stup.exe] C:\PROGRA~1\TENCENT\Adplus\stup.exe
O4 - HKLM\..\Run: [Baigoo.exe] C:\PROGRA~1\baigoo\Baigoo.exe
O4 - HKLM\..\RunOnce: [RavStub] "C:\Program Files\Rising\Rav\ravstub.exe" /RUNONCE
O4 - HKLM\..\RunOnce: [C:\PROGRA~1\baigoo\plugin\bgoobar\bgoobar.dll] regsvr32 /s C:\PROGRA~1\baigoo\plugin\bgoobar\bgoobar.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [pbmini] C:\Program Files\pcast\PodcastbarMini\PodcastBarMiniStater.exe
O4 - Startup: 腾讯QQ.lnk = C:\Program Files\Tencent\QQ\QQ.exe
O4 - Startup: 播霸网络电视.lnk = C:\Program Files\pcast\PodcastbarMini\PodcastBarMiniStarter.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: 上传到QQ网络硬盘 - C:\Program Files\Tencent\QQ\AddToNetDisk.htm
O8 - Extra context menu item: 添加到QQ自定义面板 - C:\Program Files\Tencent\QQ\AddPanel.htm
O8 - Extra context menu item: 添加到QQ表情 - C:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - Extra context menu item: 用QQ彩信发送该图片 - C:\Program Files\Tencent\QQ\SendMMS.htm
O9 - Extra button: 免费精彩视频超流畅在线观看 - {022C4009-5283-4365-97BF-144054B40E2E} - http://itv.mop.com (file missing)
O9 - Extra 'Tools' menuitem: 播霸电视 - {022C4009-5283-4365-97BF-144054B40E2E} - http://itv.mop.com (file missing)
O9 - Extra button: 实用网址导航 - {1D901067-2529-4A9B-9B6B-7A1DB3A44CB5} - C:\Program Files\CoolWebsite\QuickLink.dll (file missing)
O9 - Extra button: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra 'Tools' menuitem: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - C:\Program Files\Tencent\QQ\QQ.EXE
O9 - Extra button: (no name) - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O9 - Extra 'Tools' menuitem: QQ炫彩工具条设置 - {DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} - C:\Program Files\Tencent\QQ\QQIEHelper.dll (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [TBH] 搜搜地址栏搜索
O17 - HKLM\System\CCS\Services\Tcpip\..\{9FEE26A8-29AB-4239-99A3-E8E10F3E15DF}: NameServer = 202.96.104.65
O17 - HKLM\System\CS1\Services\Tcpip\..\{9FEE26A8-29AB-4239-99A3-E8E10F3E15DF}: NameServer = 202.96.104.65
O17 - HKLM\System\CS2\Services\Tcpip\..\{9FEE26A8-29AB-4239-99A3-E8E10F3E15DF}: NameServer = 202.96.104.65
O20 - AppInit_DLLs: APIHookDll.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: DCS Loader (DCSLoader) - Unknown owner - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\OPHALDCS.EXE (file missing)
O23 - Service: Remote Log - Beijing zhongsou online software - C:\WINDOWS\system32\ServeHost.exe
O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\CCenter.exe
O23 - Service: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\Program Files\Rising\Rav\Ravmond.exe
O23 - Service: SDAgent Service (SDAgentService) - Unknown owner - C:\Program Files\Common Files\smartde\sde.exe (file missing)
