[Main]
Program=超 级 兔 子 IE 修 复 专 家
Version=V7.98
WindowsVersion=Windows XP
IEVersion=6.0.2900.2180
WinDir=C:\WINDOWS\
WinSystemDir=C:\WINDOWS\system32\
USERPROFILE=C:\Documents and Settings\jic
Admin=1
Detail=1
Date=2007-04-13
Time=19:40:28
Code=,
CDCode=,
Reg=0

[Soft]
1=PStar
Max=1

[IE]
1_HKey=HKEY_CURRENT_USER
1_Key=Software\Microsoft\Internet Explorer\Main
1_Name=Window Title
1_Value=
2_HKey=HKEY_CURRENT_USER
2_Key=Software\Microsoft\Internet Explorer\Main
2_Name=Local Page
2_Value=C:\WINDOWS\system32\blank.htm
3_HKey=HKEY_CURRENT_USER
3_Key=Software\Microsoft\Internet Explorer\Main
3_Name=Search Page
3_Value=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
4_HKey=HKEY_CURRENT_USER
4_Key=Software\Microsoft\Internet Explorer\Main
4_Name=Start Page
4_Value=about:blank
5_HKey=HKEY_CURRENT_USER
5_Key=Software\Microsoft\Internet Explorer\Main
5_Name=Default_page_url
5_Value=
6_HKey=HKEY_CURRENT_USER
6_Key=Software\Microsoft\Internet Explorer\Main
6_Name=First Home Page
6_Value=
7_HKey=HKEY_LOCAL_MACHINE
7_Key=Software\Microsoft\Internet Explorer\Main
7_Name=Search Page
7_Value=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
8_HKey=HKEY_LOCAL_MACHINE
8_Key=Software\Microsoft\Internet Explorer\Main
8_Name=Start Page
8_Value=http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
9_HKey=HKEY_LOCAL_MACHINE
9_Key=Software\Microsoft\Internet Explorer\Main
9_Name=Default_page_url
9_Value=about:blank
10_HKey=HKEY_LOCAL_MACHINE
10_Key=Software\Microsoft\Internet Explorer\Main
10_Name=First Home Page
10_Value=
11_HKey=HKEY_LOCAL_MACHINE
11_Key=Software\Microsoft\Internet Explorer\Main
11_Name=Search Page
11_Value=http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
12_HKey=HKEY_LOCAL_MACHINE
12_Key=Software\Microsoft\Internet Explorer\Main
12_Name=Start Page
12_Value=http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
Max=12

[IE2]
1_HKey=HKEY_CURRENT_USER
1_Key=Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
1_Name={01E04581-4EEE-11D0-BFE9-00AA005B4383}
1_FileName=%SystemRoot%\system32\browseui.dll
1_FileSize=1022976
1_FileDate=2007-1-4 21:37:55
1_FileVersion=6.0.2900.3059
1_FileCompanyName=Microsoft Corporation
2_HKey=HKEY_CURRENT_USER
2_Key=Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
2_Name={0E5CBF21-D15F-11D0-8301-00AA005B4383}
2_FileName=%SystemRoot%\system32\SHELL32.dll
2_FileSize=8311296
2_FileDate=2006-12-20 5:49:35
2_FileVersion=6.0.2900.3051
2_FileCompanyName=Microsoft Corporation
3_HKey=HKEY_CURRENT_USER
3_Key=Software\Microsoft\Internet Explorer\Toolbar\WebBrowser
3_Name={2318C2B1-4965-11D4-9B18-009027A5CD4F}
3_FileName=c:\program files\google\googletoolbar1.dll
3_FileVersion=
3_FileCompanyName=
4_HKey=HKEY_CURRENT_USER
4_Key=Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
4_Name={01E04581-4EEE-11D0-BFE9-00AA005B4383}
4_FileName=%SystemRoot%\system32\browseui.dll
4_FileSize=1022976
4_FileDate=2007-1-4 21:37:55
4_FileVersion=6.0.2900.3059
4_FileCompanyName=Microsoft Corporation
5_HKey=HKEY_CURRENT_USER
5_Key=Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser
5_Name={2318C2B1-4965-11D4-9B18-009027A5CD4F}
5_FileName=c:\program files\google\googletoolbar1.dll
5_FileVersion=
5_FileCompanyName=
6_HKey=HKEY_LOCAL_MACHINE
6_Key=SOFTWARE\Microsoft\Internet Explorer\Toolbar
6_Name={6C3797D2-3FEF-4cd4-B654-D3AE55B4128C}
6_FileName=D:\PROGRA~1\IEBand.dll
6_FileSize=208896
6_FileDate=2001-10-18 17:34:08
6_FileVersion=1.0.0.0
6_FileCompanyName=IEBand Module
7_HKey=HKEY_LOCAL_MACHINE
7_Key=SOFTWARE\Microsoft\Internet Explorer\Toolbar
7_Name={2318C2B1-4965-11d4-9B18-009027A5CD4F}
7_FileName=c:\program files\google\googletoolbar1.dll
7_FileVersion=
7_FileCompanyName=
Max=7

[IE3]
1_HKey=HKEY_CURRENT_USER
1_Key=Software\Microsoft\Internet Explorer\MenuExt\&使用迅雷下载
1_FileName=D:\xl\Program\geturl.htm
1_FileSize=3957
1_FileDate=2007-2-11 18:02:16
1_FileVersion=
1_FileCompanyName=
2_HKey=HKEY_CURRENT_USER
2_Key=Software\Microsoft\Internet Explorer\MenuExt\&使用迅雷下载全部链接
2_FileName=D:\xl\Program\getallurl.htm
2_FileSize=1673
2_FileDate=2007-2-10 14:41:30
2_FileVersion=
2_FileCompanyName=
3_HKey=HKEY_CURRENT_USER
3_Key=Software\Microsoft\Internet Explorer\MenuExt\上传到QQ网络硬盘
3_FileName=D:\Program Files\AddToNetDisk.htm
3_FileSize=534
3_FileDate=2006-5-23 15:35:18
3_FileVersion=
3_FileCompanyName=
4_HKey=HKEY_CURRENT_USER
4_Key=Software\Microsoft\Internet Explorer\MenuExt\添加到QQ自定义面板
4_FileName=D:\Program Files\AddPanel.htm
4_FileSize=1815
4_FileDate=2006-5-23 15:35:16
4_FileVersion=
4_FileCompanyName=
5_HKey=HKEY_CURRENT_USER
5_Key=Software\Microsoft\Internet Explorer\MenuExt\添加到QQ表情
5_FileName=D:\Program Files\AddEmotion.htm
5_FileSize=534
5_FileDate=2006-5-23 15:35:16
5_FileVersion=
5_FileCompanyName=
6_HKey=HKEY_CURRENT_USER
6_Key=Software\Microsoft\Internet Explorer\MenuExt\用QQ彩信发送该图片
6_FileName=D:\Program Files\SendMMS.htm
6_FileSize=519
6_FileDate=2006-5-23 15:35:36
6_FileVersion=
6_FileCompanyName=
7_HKey=HKEY_LOCAL_MACHINE
7_Key=SOFTWARE\Microsoft\Internet Explorer\Extensions\{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}
7_Clsid={1FBA04EE-3024-11D2-8F1F-0000F87ABD16}
7_ButtonText=启动迅雷5
7_MenuText=启动迅雷5
7_FileName=
7_FileVersion=
7_FileCompanyName=
8_HKey=HKEY_LOCAL_MACHINE
8_Key=SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157b}
8_Clsid={1FBA04EE-3024-11d2-8F1F-0000F87ABD16}
8_ButtonText=QQ
8_MenuText=腾讯QQ
8_FileName=
8_FileVersion=
8_FileCompanyName=
9_HKey=HKEY_LOCAL_MACHINE
9_Key=SOFTWARE\Microsoft\Internet Explorer\Extensions\{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6}
9_Clsid={1FBA04EE-3024-11d2-8F1F-0000F87ABD16}
9_ButtonText=
9_MenuText=QQ炫彩工具条设置
9_FileName=
9_FileVersion=
9_FileCompanyName=
10_HKey=HKEY_LOCAL_MACHINE
10_Key=SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}
10_Clsid={1FBA04EE-3024-11D2-8F1F-0000F87ABD16}
10_ButtonText=Messenger
10_MenuText=Windows Messenger
10_FileName=
10_FileVersion=
10_FileCompanyName=
11_HKey=HKEY_CURRENT_USER
11_Key=SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping
11_Clsid=
11_ButtonText=
11_MenuText=
11_FileName=
11_FileVersion=
11_FileCompanyName=
12_HKey=HKEY_LOCAL_MACHINE
12_Key=SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}
12_Download=http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
12_FileName=C:\WINDOWS\Downloaded Program Files\swflash.inf
12_FileSize=5032
12_FileDate=2006-6-22 11:41:28
12_FileVersion=
12_FileCompanyName=
13_HKey=HKEY_LOCAL_MACHINE
13_Key=SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{24BFA528-4FFA-4642-9EB4-5BE3D2305216}
13_NameServer=
13_Clsid=
13_FileName=
13_FileVersion=
13_FileCompanyName=
14_HKey=HKEY_LOCAL_MACHINE
14_Key=SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{319949BA-B4B1-485D-8B62-58A0E584DE4D}
14_NameServer=
14_Clsid=
14_FileName=
14_FileVersion=
14_FileCompanyName=
15_HKey=HKEY_LOCAL_MACHINE
15_Key=SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{57F8E563-7EDA-4FD2-9B76-4ECBF728540D}
15_NameServer=61.177.7.1 221.228.255.1
15_Clsid=
15_FileName=
15_FileVersion=
15_FileCompanyName=
16_HKey=HKEY_LOCAL_MACHINE
16_Key=SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{74B35908-16D1-454F-9C41-1B0A6360E429}
16_NameServer=
16_Clsid=
16_FileName=
16_FileVersion=
16_FileCompanyName=
17_HKey=HKEY_LOCAL_MACHINE
17_Key=SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8DDF3CC8-928E-4151-BF23-280B78A74210}
17_NameServer=
17_Clsid=
17_FileName=
17_FileVersion=
17_FileCompanyName=
18_HKey=HKEY_LOCAL_MACHINE
18_Key=SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C4B57AA2-F036-45F0-9D6B-59E9E645E5D7}
18_NameServer=
18_Clsid=
18_FileName=
18_FileVersion=
18_FileCompanyName=
Max=18

[Link]
1_HKey=HKEY_CLASSES_ROOT
1_Key=.exe
1_Name=
1_Value=exefile
1_HKeyLink=HKEY_CLASSES_ROOT
1_KeyLink=exefile\shell\open\command
1_NameLink=
1_ValueLink="%1" %*
2_HKey=HKEY_CLASSES_ROOT
2_Key=.com
2_Name=
2_Value=comfile
2_HKeyLink=HKEY_CLASSES_ROOT
2_KeyLink=comfile\shell\open\command
2_NameLink=
2_ValueLink="%1" %*
3_HKey=HKEY_CLASSES_ROOT
3_Key=.lnk
3_Name=
3_Value=lnkfile
3_HKeyLink=HKEY_CLASSES_ROOT
3_KeyLink=lnkfile\CLSID
3_NameLink=
3_ValueLink={00021401-0000-0000-C000-000000000046}
4_HKey=HKEY_CLASSES_ROOT
4_Key=.txt
4_Name=
4_Value=txtfile
4_HKeyLink=HKEY_CLASSES_ROOT
4_KeyLink=txtfile\shell\open\command
4_NameLink=
4_ValueLink=%SystemRoot%\system32\NOTEPAD.EXE %1
4_FileSizeLink=66560
4_FileDateLink=2004-8-24 18:10:00
4_FileVersionLink=5.1.2600.2180
4_FileCompanyNameLink=Microsoft Corporation
5_HKey=HKEY_CLASSES_ROOT
5_Key=.htm
5_Name=
5_Value=htmlfile
5_HKeyLink=HKEY_CLASSES_ROOT
5_KeyLink=htmlfile\shell\open\command
5_NameLink=
5_ValueLink="C:\Program Files\Internet Explorer\iexplore.exe" -nohome
5_FileSizeLink=93184
5_FileDateLink=2004-8-24
5_FileVersionLink=6.0.2900.2180
5_FileCompanyNameLink=Microsoft Corporation
6_HKey=HKEY_CLASSES_ROOT
6_Key=.html
6_Name=
6_Value=htmlfile
6_HKeyLink=HKEY_CLASSES_ROOT
6_KeyLink=htmlfile\shell\open\command
6_NameLink=
6_ValueLink="C:\Program Files\Internet Explorer\iexplore.exe" -nohome
6_FileSizeLink=93184
6_FileDateLink=2004-8-24
6_FileVersionLink=6.0.2900.2180
6_FileCompanyNameLink=Microsoft Corporation
7_HKey=HKEY_CLASSES_ROOT
7_Key=.url
7_Name=
7_Value=InternetShortcut
7_HKeyLink=HKEY_CLASSES_ROOT
7_KeyLink=InternetShortcut\shell\open\command
7_NameLink=
7_ValueLink=rundll32.exe shdocvw.dll,OpenURL %l
8_HKey=HKEY_CLASSES_ROOT
8_Key=PROTOCOLS\Filter\text/html
8_Name=CLSID
8_Value=
9_HKey=HKEY_CLASSES_ROOT
9_Key=PROTOCOLS\Filter\text/plain
9_Name=CLSID
9_Value=
10_HKey=HKEY_LOCAL_MACHINE
10_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
10_Name=
10_Value=http://
11_HKey=HKEY_LOCAL_MACHINE
11_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes
11_Name=www
11_Value=http://
Max=11

[Notify]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui
1_FileName=igfxdev.dll
1_FileSize=131072
1_FileDate=2005-4-5 14:18:22
1_FileVersion=3.0.0.4299
1_FileCompanyName=Intel Corporation
Max=1

[Shdoclc]
1_FileSize=498176
1_FileDate=2004-8-24 18:10:00
1_FileVersion=6.0.2900.2180
1_FileCompanyName=Microsoft Corporation
Max=1

[AppInit_DLLs]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
1_Name=AppInit_DLLs
1_Value=
2_HKey=HKEY_LOCAL_MACHINE
2_Key=SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
2_Name=Userinit
2_Value=C:\WINDOWS\system32\userinit.exe,
2_FileSize=23552
2_FileDate=2004-8-24 18:10:00
3_HKey=HKEY_LOCAL_MACHINE
3_Key=SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
3_Name=Shell
3_Value=Explorer.exe
4_HKey=HKEY_LOCAL_MACHINE
4_Key=SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
4_Name=System
3_Value=
Max=4

[WinSock2NameSpace]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
1_Name=DisplayString
1_Value=Tcpip
1_Enabled=1
1_LibraryPath=%SystemRoot%\System32\mswsock.dll
1_FileSize=240640
1_FileDate=2004-8-24 18:10:00
1_FileVersion=5.1.2600.2180
1_FileCompanyName=Microsoft Corporation
2_HKey=HKEY_LOCAL_MACHINE
2_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2_Name=DisplayString
2_Value=NTDS
2_Enabled=1
2_LibraryPath=%SystemRoot%\System32\winrnr.dll
2_FileSize=16896
2_FileDate=2004-8-24 18:10:00
2_FileVersion=5.1.2600.2180
2_FileCompanyName=Microsoft Corporation
3_HKey=HKEY_LOCAL_MACHINE
3_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
3_Name=DisplayString
3_Value=网络位置知晓 (NLA) 名称空间
3_Enabled=1
3_LibraryPath=%SystemRoot%\System32\mswsock.dll
3_FileSize=240640
3_FileDate=2004-8-24 18:10:00
3_FileVersion=5.1.2600.2180
3_FileCompanyName=Microsoft Corporation
Max=3

[WinSock2Protocol]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001
1_Name=PackedCatalogItem
1_FileName=%SystemRoot%\system32\mswsock.dll
2_HKey=HKEY_LOCAL_MACHINE
2_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002
2_Name=PackedCatalogItem
2_FileName=%SystemRoot%\system32\mswsock.dll
3_HKey=HKEY_LOCAL_MACHINE
3_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003
3_Name=PackedCatalogItem
3_FileName=%SystemRoot%\system32\mswsock.dll
4_HKey=HKEY_LOCAL_MACHINE
4_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004
4_Name=PackedCatalogItem
4_FileName=%SystemRoot%\system32\mswsock.dll
5_HKey=HKEY_LOCAL_MACHINE
5_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005
5_Name=PackedCatalogItem
5_FileName=%SystemRoot%\system32\rsvpsp.dll
6_HKey=HKEY_LOCAL_MACHINE
6_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006
6_Name=PackedCatalogItem
6_FileName=%SystemRoot%\system32\rsvpsp.dll
7_HKey=HKEY_LOCAL_MACHINE
7_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007
7_Name=PackedCatalogItem
7_FileName=%SystemRoot%\system32\mswsock.dll
8_HKey=HKEY_LOCAL_MACHINE
8_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008
8_Name=PackedCatalogItem
8_FileName=%SystemRoot%\system32\mswsock.dll
9_HKey=HKEY_LOCAL_MACHINE
9_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009
9_Name=PackedCatalogItem
9_FileName=%SystemRoot%\system32\mswsock.dll
10_HKey=HKEY_LOCAL_MACHINE
10_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010
10_Name=PackedCatalogItem
10_FileName=%SystemRoot%\system32\mswsock.dll
11_HKey=HKEY_LOCAL_MACHINE
11_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011
11_Name=PackedCatalogItem
11_FileName=%SystemRoot%\system32\mswsock.dll
12_HKey=HKEY_LOCAL_MACHINE
12_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012
12_Name=PackedCatalogItem
12_FileName=%SystemRoot%\system32\mswsock.dll
13_HKey=HKEY_LOCAL_MACHINE
13_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013
13_Name=PackedCatalogItem
13_FileName=%SystemRoot%\system32\mswsock.dll
14_HKey=HKEY_LOCAL_MACHINE
14_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014
14_Name=PackedCatalogItem
14_FileName=%SystemRoot%\system32\mswsock.dll
15_HKey=HKEY_LOCAL_MACHINE
15_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015
15_Name=PackedCatalogItem
15_FileName=%SystemRoot%\system32\mswsock.dll
16_HKey=HKEY_LOCAL_MACHINE
16_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016
16_Name=PackedCatalogItem
16_FileName=%SystemRoot%\system32\mswsock.dll
17_HKey=HKEY_LOCAL_MACHINE
17_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017
17_Name=PackedCatalogItem
17_FileName=%SystemRoot%\system32\mswsock.dll
18_HKey=HKEY_LOCAL_MACHINE
18_Key=SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018
18_Name=PackedCatalogItem
18_FileName=%SystemRoot%\system32\mswsock.dll
Max=18

[WinSock2Winsock]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=System\CurrentControlSet\Services\Winsock2\Winsock
1_Name=PathName
1_Value=
1_Found=0
Max=1

[WOW]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SYSTEM\CurrentControlSet\Control\WOW
1_Name=cmdline
1_Value=%SystemRoot%\system32\ntvdm.exe -o
1_Filename=C:\WINDOWS\SYSTEM32\NTVDM.EXE
1_FileSize=417280
1_FileDate=2004-8-24 18:10:00
1_FileVersion=5.1.2600.2180
1_FileCompanyName=Microsoft Corporation
2_HKey=HKEY_LOCAL_MACHINE
2_Key=SYSTEM\CurrentControlSet\Control\WOW
2_Name=wowcmdline
2_Value=%SystemRoot%\system32\ntvdm.exe -a %SystemRoot%\system32\krnl386
2_Filename=C:\WINDOWS\SYSTEM32\NTVDM.EXE
2_FileSize=417280
2_FileDate=2004-8-24 18:10:00
2_FileVersion=5.1.2600.2180
2_FileCompanyName=Microsoft Corporation
Max=2

[ShellExecuteHooks]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
1_Name={AEB6717E-7E19-11d0-97EE-00C04FD91972}
1_ClsidName=URL 执行挂钩
1_FileName=C:\WINDOWS\system32\shell32.dll
1_FileSize=8311296
1_FileDate=2006-12-20 5:49:35
Max=1

[ShellServiceObjectDelayLoad]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
1_Name=PostBootReminder
1_Value={7849596a-48ea-486e-8937-a2a3009f31a9}
1_ClsidName=PostBootReminder 对象
1_FileName=%SystemRoot%\system32\SHELL32.dll
1_FileSize=8311296
1_FileDate=2006-12-20 5:49:35
1_FileVersion=6.0.2900.3051
1_FileCompanyName=Microsoft Corporation
2_HKey=HKEY_LOCAL_MACHINE
2_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
2_Name=CDBurn
2_Value={fbeb8a05-beee-4442-804e-409d6c4515e9}
2_ClsidName=烧 CD 的 ShellFolder
2_FileName=%SystemRoot%\system32\SHELL32.dll
2_FileSize=8311296
2_FileDate=2006-12-20 5:49:35
2_FileVersion=6.0.2900.3051
2_FileCompanyName=Microsoft Corporation
3_HKey=HKEY_LOCAL_MACHINE
3_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
3_Name=WebCheck
3_Value={E6FB5E20-DE35-11CF-9C87-00AA005127ED}
3_ClsidName=WebCheck
3_FileName=%SystemRoot%\system32\webcheck.dll
3_FileSize=265728
3_FileDate=2004-8-24 18:10:00
3_FileVersion=6.0.2900.2180
3_FileCompanyName=Microsoft Corporation
4_HKey=HKEY_LOCAL_MACHINE
4_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
4_Name=SysTray
4_Value={35CEC8A3-2BE6-11D2-8773-92E220524153}
4_ClsidName=SysTray
4_FileName=C:\WINDOWS\system32\stobject.dll
4_FileSize=121344
4_FileDate=2004-8-24 18:10:00
4_FileVersion=5.1.2600.2180
4_FileCompanyName=Microsoft Corporation
Max=4

[SharedTaskScheduler]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
1_Name={438755C2-A8BA-11D1-B96B-00A0C90312E1}
1_Value=Browseui 预加载程序
1_FileName=%SystemRoot%\system32\browseui.dll
1_FileSize=1022976
1_FileDate=2007-1-4 21:37:55
2_HKey=HKEY_LOCAL_MACHINE
2_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
2_Name={8C7461EF-2B13-11d2-BE35-3078302C2030}
2_Value=组件类别缓存程序
2_FileName=%SystemRoot%\system32\browseui.dll
2_FileSize=1022976
2_FileDate=2007-1-4 21:37:55
Max=2

[ProtocolDefaults]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
1_Name=http
1_Value=3
2_HKey=HKEY_LOCAL_MACHINE
2_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
2_Name=https
2_Value=3
3_HKey=HKEY_LOCAL_MACHINE
3_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
3_Name=ftp
3_Value=3
4_HKey=HKEY_LOCAL_MACHINE
4_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
4_Name=file
4_Value=3
5_HKey=HKEY_LOCAL_MACHINE
5_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
5_Name=@ivt
5_Value=1
6_HKey=HKEY_LOCAL_MACHINE
6_Key=SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults
6_Name=shell
6_Value=0
Max=6

[BootExecute]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=SYSTEM\CurrentControlSet\Control\Session Manager
1_Name=BootExecute
1_Value=autocheck autochk *
Max=1

[Startup]
1_LnkFile=C:\Documents and Settings\jic\「开始」菜单\程序\启动\腾讯QQ.lnk
1_ExeFile=腾讯QQ
Max=1

[AutoRun]
1_HKey=HKEY_LOCAL_MACHINE
1_Key=Software\Microsoft\Windows\CurrentVersion\Run
1_Name=IMJPMIG8.1
1_Value="c:\windows\ime\imjp8_1\imjpmig.exe" /spoil /remadvdef /migration32
1_FileSize=208952
1_FileDate=2004-8-24 18:10:00
1_FileVersion=8.1.4202.0
1_FileCompanyName=Microsoft Corporation
2_HKey=HKEY_LOCAL_MACHINE
2_Key=Software\Microsoft\Windows\CurrentVersion\Run
2_Name=PHIME2002ASync
2_Value=c:\windows\system32\ime\tintlgnt\tintsetp.exe /sync
2_FileSize=455168
2_FileDate=2004-8-24 18:10:00
2_FileVersion=5.2.0.2801
2_FileCompanyName=Microsoft Corporation
3_HKey=HKEY_LOCAL_MACHINE
3_Key=Software\Microsoft\Windows\CurrentVersion\Run
3_Name=PHIME2002A
3_Value=c:\windows\system32\ime\tintlgnt\tintsetp.exe /imename
3_FileSize=455168
3_FileDate=2004-8-24 18:10:00
3_FileVersion=5.2.0.2801
3_FileCompanyName=Microsoft Corporation
4_HKey=HKEY_LOCAL_MACHINE
4_Key=Software\Microsoft\Windows\CurrentVersion\Run
4_Name=Thunder
4_Value="d:\xl\thunder.exe" /s
4_FileSize=36864
4_FileDate=2007-2-14 14:03:08
4_FileVersion=5.6.2.11
4_FileCompanyName=Thunder Networking Technologies,LTD
5_HKey=HKEY_LOCAL_MACHINE
5_Key=Software\Microsoft\Windows\CurrentVersion\Run
5_Name=RavTask
5_Value="d:\rising\rav\ravtask.exe" -system
5_FileSize=118784
5_FileDate=2006-12-25 13:53:40
5_FileVersion=19.0.0.7
5_FileCompanyName=Beijing Rising Technology Co., Ltd.
6_HKey=HKEY_LOCAL_MACHINE
6_Key=Software\Microsoft\Windows\CurrentVersion\Run
6_Name=IgfxTray
6_Value=c:\windows\system32\igfxtray.exe
6_FileSize=94208
6_FileDate=2005-4-5 14:22:32
6_FileVersion=3.0.0.4299
6_FileCompanyName=Intel Corporation
7_HKey=HKEY_LOCAL_MACHINE
7_Key=Software\Microsoft\Windows\CurrentVersion\Run
7_Name=HotKeysCmds
7_Value=c:\windows\system32\hkcmd.exe
7_FileSize=77824
7_FileDate=2005-4-5 14:19:18
7_FileVersion=3.0.0.4299
7_FileCompanyName=Intel Corporation
8_HKey=HKEY_LOCAL_MACHINE
8_Key=Software\Microsoft\Windows\CurrentVersion\Run
8_Name=Persistence
8_Value=c:\windows\system32\igfxpers.exe
8_FileSize=114688
8_FileDate=2005-4-5 14:23:14
8_FileVersion=3.0.0.4299
8_FileCompanyName=Intel Corporation
9_HKey=HKEY_LOCAL_MACHINE
9_Key=Software\Microsoft\Windows\CurrentVersion\Run
9_Name=SoundMan
9_Value=soundman.exe
9_FileSize=77824
9_FileDate=2004-12-1 15:54:22
9_FileVersion=5.1.0.33
9_FileCompanyName=Realtek Semiconductor Corp.
10_HKey=HKEY_LOCAL_MACHINE
10_Key=Software\Microsoft\Windows\CurrentVersion\Run
10_Name=TkBellExe
10_Value="c:\program files\common files\real\update_ob\realsched.exe"  -osboot
10_FileSize=180269
10_FileDate=2006-9-6 13:43:01
10_FileVersion=0.1.0.3536
10_FileCompanyName=RealNetworks, Inc.
11_HKey=HKEY_LOCAL_MACHINE
11_Key=Software\Microsoft\Windows\CurrentVersion\Run
11_Name=StormCodec_Helper
11_Value="d:\program files\realplayer\storm codec\stormset.exe" /s /opti
11_FileSize=528076
11_FileDate=2006-8-12 20:33:04
11_FileVersion=
11_FileCompanyName=
12_HKey=HKEY_LOCAL_MACHINE
12_Key=Software\Microsoft\Windows\CurrentVersion\Run
12_Name=QuickTime Task
12_Value="c:\program files\quicktime\qttask.exe" -atboottime
12_FileSize=282624
12_FileDate=2006-10-25 18:58:18
12_FileVersion=7.1.3.170
12_FileCompanyName=Apple Computer, Inc.
13_HKey=HKEY_LOCAL_MACHINE
13_Key=Software\Microsoft\Windows\CurrentVersion\Run
13_Name=iTunesHelper
13_Value="d:\ituneshelper.exe"
13_FileSize=256576
13_FileDate=2006-10-30 9:36:36
13_FileVersion=7.0.2.16
13_FileCompanyName=Apple Computer, Inc.
14_HKey=HKEY_LOCAL_MACHINE
14_Key=Software\Microsoft\Windows\CurrentVersion\Run
14_Name=KernelFaultCheck
14_Value=%systemroot%\system32\dumprep 0 -k
15_HKey=HKEY_LOCAL_MACHINE
15_Key=Software\Microsoft\Windows\CurrentVersion\RunOnce
15_Name=Super Rabbit SRCK
15_Value="d:\program files\super rabbit\magicset\srck.exe" /autokill:260
15_FileSize=1052672
15_FileDate=2007-3-22 22:40:50
15_FileVersion=7.98.0.0
15_FileCompanyName=Super Rabbit Soft
16_HKey=HKEY_LOCAL_MACHINE
16_Key=Software\Microsoft\Windows NT\CurrentVersion\Windows
16_Name=load
16_Value=
17_HKey=HKEY_CURRENT_USER
17_Key=Software\Microsoft\Windows\CurrentVersion\Run
17_Name=ctfmon.exe
17_Value=c:\windows\system32\ctfmon.exe
17_FileSize=15360
17_FileDate=2004-8-24 18:10:00
17_FileVersion=5.1.2600.2180
17_FileCompanyName=Microsoft Corporation
18_HKey=HKEY_CURRENT_USER
18_Key=Software\Microsoft\Windows NT\CurrentVersion\Windows
18_Name=load
18_Value=
Max=18

[Process]
1_FileName=C:\WINDOWS\SYSTEM32\SMSS.EXE
1_FileSize=50688
1_FileDate=2004-8-24 18:10:00
1_FileVersion=5.1.2600.2180
1_FileCompanyName=Microsoft Corporation
2_FileName=C:\WINDOWS\SYSTEM32\WINLOGON.EXE
2_FileSize=487424
2_FileDate=2004-8-24 18:10:00
2_FileVersion=5.1.2600.2180
2_FileCompanyName=Microsoft Corporation
3_FileName=C:\WINDOWS\SYSTEM32\SERVICES.EXE
3_FileSize=108032
3_FileDate=2004-8-24 18:10:00
3_FileVersion=5.1.2600.2180
3_FileCompanyName=Microsoft Corporation
4_FileName=C:\WINDOWS\SYSTEM32\LSASS.EXE
4_FileSize=13312
4_FileDate=2004-8-24 18:10:00
4_FileVersion=5.1.2600.2180
4_FileCompanyName=Microsoft Corporation
5_FileName=C:\WINDOWS\SYSTEM32\SVCHOST.EXE
5_FileSize=14336
5_FileDate=2004-8-24 18:10:00
5_FileVersion=5.1.2600.2180
5_FileCompanyName=Microsoft Corporation
6_FileName=D:\RISING\RAV\CCENTER.EXE
6_FileSize=110592
6_FileDate=2006-12-16 14:55:56
6_FileVersion=18.0.0.3
6_FileCompanyName=Beijing Rising Technology Co., Ltd.
7_FileName=C:\WINDOWS\SYSTEM32\SVCHOST.EXE
7_FileSize=14336
7_FileDate=2004-8-24 18:10:00
7_FileVersion=5.1.2600.2180
7_FileCompanyName=Microsoft Corporation
8_FileName=D:\RISING\RAV\RAVMOND.EXE
8_FileSize=278528
8_FileDate=2007-3-28 20:54:56
8_FileVersion=19.0.0.49
8_FileCompanyName=Beijing Rising Technology Co., Ltd.
9_FileName=C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
9_FileSize=57856
9_FileDate=2005-6-11 7:53:32
9_FileVersion=5.1.2600.2696
9_FileCompanyName=Microsoft Corporation
10_FileName=C:\WINDOWS\EXPLORER.EXE
10_FileSize=976896
10_FileDate=2004-8-24 18:10:00
10_FileVersion=6.0.2900.2180
10_FileCompanyName=Microsoft Corporation
11_FileName=D:\RISING\RAV\RAVTASK.EXE
11_FileSize=118784
11_FileDate=2006-12-25 13:53:40
11_FileVersion=19.0.0.7
11_FileCompanyName=Beijing Rising Technology Co., Ltd.
12_FileName=D:\RISING\RAV\RAVMON.EXE
12_FileSize=622592
12_FileDate=2007-2-8 9:25:28
12_FileVersion=19.0.0.45
12_FileCompanyName=Beijing Rising Technology Co., Ltd.
13_FileName=C:\WINDOWS\SYSTEM32\IGFXTRAY.EXE
13_FileSize=94208
13_FileDate=2005-4-5 14:22:32
13_FileVersion=3.0.0.4299
13_FileCompanyName=Intel Corporation
14_FileName=C:\WINDOWS\SYSTEM32\HKCMD.EXE
14_FileSize=77824
14_FileDate=2005-4-5 14:19:18
14_FileVersion=3.0.0.4299
14_FileCompanyName=Intel Corporation
15_FileName=C:\WINDOWS\SYSTEM32\IGFXPERS.EXE
15_FileSize=114688
15_FileDate=2005-4-5 14:23:14
15_FileVersion=3.0.0.4299
15_FileCompanyName=Intel Corporation
16_FileName=C:\WINDOWS\VSNPSTD3.EXE
16_FileSize=
16_FileVersion=
16_FileCompanyName=
17_FileName=C:\WINDOWS\SOUNDMAN.EXE
17_FileSize=77824
17_FileDate=2004-12-1 15:54:22
17_FileVersion=5.1.0.33
17_FileCompanyName=Realtek Semiconductor Corp.
18_FileName=C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
18_FileSize=180269
18_FileDate=2006-9-6 13:43:01
18_FileVersion=0.1.0.3536
18_FileCompanyName=RealNetworks, Inc.
19_FileName=D:\XL\PROGRAM\THUNDER5.EXE
19_FileSize=1585152
19_FileDate=2007-2-14 17:51:38
19_FileVersion=5.6.0.280
19_FileCompanyName=Thunder Networking Technologies,LTD
20_FileName=D:\ITUNESHELPER.EXE
20_FileSize=256576
20_FileDate=2006-10-30 9:36:36
20_FileVersion=7.0.2.16
20_FileCompanyName=Apple Computer, Inc.
21_FileName=C:\WINDOWS\SYSTEM32\CTFMON.EXE
21_FileSize=15360
21_FileDate=2004-8-24 18:10:00
21_FileVersion=5.1.2600.2180
21_FileCompanyName=Microsoft Corporation
22_FileName=D:\PROGRAM FILES\QQ.EXE
22_FileSize=1363968
22_FileDate=2006-5-23 15:35:24
22_FileVersion=0.0.0.0
22_FileCompanyName=TENCENT
23_FileName=C:\PROGRAM FILES\IPOD\BIN\IPODSERVICE.EXE
23_FileSize=492608
23_FileDate=2006-10-30 9:36:32
23_FileVersion=7.0.2.16
23_FileCompanyName=Apple Computer, Inc.
24_FileName=D:\PROGRAM FILES\TIMPLATFORM.EXE
24_FileSize=69632
24_FileDate=2006-5-23 15:35:40
24_FileVersion=0.3.1.8
24_FileCompanyName=tencent
25_FileName=C:\WINDOWS\SYSTEM32\WUAUCLT.EXE
25_FileSize=124184
25_FileDate=2005-5-26 4:16:36
25_FileVersion=5.8.0.2469
25_FileCompanyName=Microsoft Corporation
26_FileName=C:\WINDOWS\SYSTEM32\SVCHOST.EXE
26_FileSize=14336
26_FileDate=2004-8-24 18:10:00
26_FileVersion=5.1.2600.2180
26_FileCompanyName=Microsoft Corporation
27_FileName=C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
27_FileSize=93184
27_FileDate=2004-8-24
27_FileVersion=6.0.2900.2180
27_FileCompanyName=Microsoft Corporation
28_FileName=D:\PROGRAM FILES\SUPER RABBIT\MAGICSET\SRIEH.EXE
28_FileSize=794112
28_FileDate=2007-3-22 22:41:42
28_FileVersion=7.98.0.0
28_FileCompanyName=Super Rabbit Soft
29_FileName=[SYSTEM PROCESS]
30_FileName=C:\WINDOWS\system32\CSRSS.EXE
30_FileSize=6144
30_FileDate=2004-8-24 18:10:00
30_FileVersion=5.1.2600.2180
30_FileCompanyName=Microsoft Corporation
31_FileName=C:\WINDOWS\system32\WDFMGR.EXE
31_FileSize=38912
31_FileDate=2004-8-10 22:05:14
31_FileVersion=5.2.3790.1230
31_FileCompanyName=Microsoft Corporation
32_FileName=C:\WINDOWS\system32\ALG.EXE
32_FileSize=44544
32_FileDate=2004-8-24 18:10:00
32_FileVersion=5.1.2600.2180
32_FileCompanyName=Microsoft Corporation
Max=32

[Hosts]
HostsFile=C:\WINDOWS\system32\Drivers\Etc\Hosts
1_Host=127.0.0.1       localhost
Max=1

[Service]
1_ServiceName=iPod Service
1_DisplayName=iPod Service
1_Description=iPod hardware management services
1_Status=已启动
1_StartType=手动
1_ServiceDll=
1_ImagePath="C:\PROGRAM FILES\IPOD\BIN\IPODSERVICE.EXE"

2_ServiceName=Irmon
2_DisplayName=Infrared Monitor
2_Description=支持安装在这台计算机上的红外设备并且检测在有效范围内的其它红外设备。
2_Status=已启动
2_StartType=自动
2_ServiceDll=C:\WINDOWS\SYSTEM32\IRMON.DLL
2_ImagePath=C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS

3_ServiceName=RsCCenter
3_DisplayName=Rising Process Communication Center
3_Description=
3_Status=已启动
3_StartType=自动
3_ServiceDll=
3_ImagePath="D:\RISING\RAV\CCENTER.EXE"

4_ServiceName=RsRavMon
4_DisplayName=Rising RealTime Monitor
4_Description=
4_Status=已启动
4_StartType=自动
4_ServiceDll=
4_ImagePath="D:\RISING\RAV\RAVMOND.EXE"

Max=4

[Driver]
1_ServiceName=acpidisk
1_DisplayName=acpidisk
1_Description=
1_ServiceDll=
1_ImagePath=C:\WINDOWS\SYSTEM32\DRIVERS\ACPIDISK.SYS
2_ServiceName=admjoy
2_DisplayName=Aureal Game Port Enumerator
2_Description=
2_ServiceDll=
2_ImagePath=SYSTEM32\DRIVERS\ADMJOY.SYS
3_ServiceName=BaseTDI
3_DisplayName=Rising TDI Base Driver
3_Description=
3_ServiceDll=
3_ImagePath=SYSTEM32\DRIVERS\BASETDI.SYS
4_ServiceName=ExpScaner
4_DisplayName=ExpScaner
4_Description=
4_ServiceDll=
4_ImagePath=D:\RISING\RAV\EXPSCAN.SYS
5_ServiceName=GMSIPCI
5_DisplayName=GMSIPCI
5_Description=
5_ServiceDll=
5_ImagePath=G:\INSTALL\GMSIPCI.SYS
6_ServiceName=HookCont
6_DisplayName=HookCont
6_Description=
6_ServiceDll=
6_ImagePath=D:\RISING\RAV\HOOKCONT.SYS
7_ServiceName=HookReg
7_DisplayName=HookReg
7_Description=
7_ServiceDll=
7_ImagePath=D:\RISING\RAV\HOOKREG.SYS
8_ServiceName=HookSys
8_DisplayName=HookSys
8_Description=
8_ServiceDll=
8_ImagePath=D:\RISING\RAV\HOOKSYS.SYS
9_ServiceName=ialm
9_DisplayName=
9_Description=
9_ServiceDll=
9_ImagePath=SYSTEM32\DRIVERS\IALMNT5.SYS
10_ServiceName=irda
10_DisplayName=IrDA Protocol
10_Description=IrDA Protocol
10_ServiceDll=
10_ImagePath=SYSTEM32\DRIVERS\IRDA.SYS
11_ServiceName=irsir
11_DisplayName=Microsoft Serial Infrared Driver
11_Description=
11_ServiceDll=
11_ImagePath=SYSTEM32\DRIVERS\IRSIR.SYS
12_ServiceName=MEMSCAN
12_DisplayName=MEMSCAN
12_Description=
12_ServiceDll=
12_ImagePath=D:\RISING\RAV\MEMSCAN.SYS
13_ServiceName=Rasirda
13_DisplayName=WAN Miniport (IrDA)
13_Description=WAN Miniport (IrDA)
13_ServiceDll=
13_ImagePath=SYSTEM32\DRIVERS\RASIRDA.SYS
14_ServiceName=RsNTGDI
14_DisplayName=RsNTGDI
14_Description=
14_ServiceDll=
14_ImagePath=SYSTEM32\DRIVERS\RSNTGDI.SYS
15_ServiceName=RSPPSYS
15_DisplayName=RSPPSYS
15_Description=
15_ServiceDll=
15_ImagePath=D:\RISING\RAV\RSPPSYS.SYS
16_ServiceName=rtl8139
16_DisplayName=Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver
16_Description=
16_ServiceDll=
16_ImagePath=SYSTEM32\DRIVERS\RTL8139.SYS
17_ServiceName=SNPSTD3
17_DisplayName=USB PC Camera (SNPSTD3)
17_Description=
17_ServiceDll=
17_ImagePath=SYSTEM32\DRIVERS\SNPSTD3.SYS
Max=17

[END]
Max=1

pstar是一款恶意软件
安全模式进入法启动电脑过程中按F8键。然后在安全模式里 进注册表(运行里输入regedit)，在注册表里查找pstar，查找出来的值项都删除掉。

安装360安全卫士,再运行扫描恶意软件

如上面方法仍然没删除,那你只有考虑从新装系统把!

wanghuaw

这是什么啊？是天书吧看不懂。

你用c_av2试了吗。效果很好的.

wangking

引用:

原帖由 7758yoyo 于 2007-4-13 08:58 PM 发表
pstar是一款恶意软件
安全模式进入法启动电脑过程中按F8键。然后在安全模式里 进注册表(运行里输入regedit)，在注册表里查找pstar，查找出来的值项都删除掉。

安装360安全卫士,再运行扫描恶意软件

如上 ...

同意这位仁兄的看法。

hjkbnm

建议格式化，一了百了，手动清楚基本上有难度