恶意软件垃圾流氓通用反删除批处理文件

rem 砍掉一切流氓,让我们静待互联网的春天 ~_~
rem 各取所需,根据自己要求修改(有的人还觉得某个流氓好就留着*_*)
rem 如果跳出选择框,选择全部卸载
rem 有些**需要在安全模式下才能卸载,有些不好卸载请看里面的帮助
rem 现在的流氓越来越超级,已经超过批处理的能力极限,只有借助一些别的软件,推荐使用http://ccollomb.free.fr/unlocker一起删除超级**

rem 砍掉3721 kao 把好多的电脑弄惨了
if exist c:\progra~1\3721\assist\asbar.dll rundll32.exe c:\progra~1\3721\assist\asbar.dll,runsettings -uninstall
if exist %windir%\downlo~1\cnsmin.dll rundll32.exe %windir%\downlo~1\cnsmin.dll,runsettings -uninstall
if exist %windir%\downlo~1\cnsmin.dll rundll32.exe %windir%\downlo~1\cnsmin.dll,controlpanel
regsvr32 /u /s %windir%\downlo~1\cnsmin.dll

regsvr32 /u /s c:\progra~1\3721\assist\asbar.dll
regsvr32 /u /s c:\progra~1\3721\helper.dll
regsvr32 /u /s c:\progra~1\yisou\yisou.dll

rem 砍掉yahoo猪手,把好多的电脑弄惨
regsvr32 /u /s c:\progra~1\yahoo!\assist~1\assist\yasbar.dll
regsvr32 /u /s c:\progra~1\yahoo!\assist~1\assist\yphtb.dll
regsvr32 /u /s c:\progra~1\yahoo!\assist~1\assist\yangling.dll
regsvr32 /u /s c:\progra~1\yahoo!\assist~1\assist\ydrags~1.dll
rem 新版的 猪手 根本不能选择卸载,***
if exist c:\progra~1\yahoo!\assist~1\assist\yasbar.dll rundll32 c:\progra~1\yahoo!\assist~1\assist\yasbar.dll,uninstall

rem 彩信通 又一个超级的**产生了
rem 想办法删除 %windir%\system32\drivers\albus.sys 这个万恶不赦的文件,才能彻底清理这个门户
rem 推荐使用 dos 启动电脑,找到c盘 这个万恶不赦的文件 删除
rem 或者使用 http://ccollomb.free.fr/unlocker 删除,删除后可能造成系统不稳定,重启电脑执行2个批处理,再重启
regsvr32 /u /s c:\progra~1\mmsass~1\mmsass~1.dll
if exist c:\progra~1\mmsass~1\mmsass~1.dll rundll32.exe c:\progra~1\mmsass~1\mmsass~1.dll,uninstall
if exist %windir%\system32\stdup.dll rundll32.exe %windir%\system32\stdup.dll,uninstall
regsvr32 /u /s %windir%\system32\stdup.dll
regsvr32 /u /s %windir%\system32\stdsver.dll
regsvr32 /u /s %windir%\system\stdup.dll
regsvr32 /u /s %windir%\system\stdsver.dll
del %windir%\system32\drivers\albus.sys /q /f
del %windir%\system32\albus.dat /q /f
del %windir%\system32\almms.dat /q /f
del %windir%\system32\alsmt.exe /q /f
del c:\progra~1\mmsass~1\mmsass~1.dll /q /f
rem internet explorer helper
regsvr32 /u /s %windir%\fonts\msshapi.dll

rem 划词 huaci 又是一个走上不归路的超级**
rem 这个**需要重启电脑,再次执行两个批处理文件操作才能被删除
c:\progra~1\huaci\huaci\muin.exe
c:\progra~1\wsearch\muninstall.exe
%windir%\system32\msibm\uninstall.exe
%windir%\system\msibm\uninstall.exe
del %windir%\system32\drivers\abhcop.sys /q /f
del %windir%\system32\drivers\hcalway.sys /q /f

rem baidu这个**,**越来越超级,baid* 也不例外
;rem需要安全模式,或者想办法删除 %windir%\system32\drivers\bdguard.sys 这个文件才能卸载这个**
if exist c:\progra~1\baidu\bar\baidubar.dll rundll32.exe c:\progra~1\baidu\bar\baidubar.dll,uninstall
regsvr32 /u /s %windir%\downlo~1\bdsrhook.dll
regsvr32 /u /s %windir%\downlo~1\bdhelper.dll
regsvr32 /u /s %windir%\downlo~1\bdplugin.dll
regsvr32 /u /s c:\progra~1\baidu\bar\baidubar.dll
regsvr32 /u /s "c:\program files\common files\baidu\disk search\dsie.dll"
if exist %windir%\downlo~1\bdhelper.dll rundll32.exe %windir%\downlo~1\bdhelper.dll,dllremove
del %windir%\system32\drivers\bdguard.sys /q /f
del %windir%\system32\bdguard.dat /q /f
del %windir%\system32\bdguards.dat /q /f
del c:\progra~1\baidu\bar\baidubar.dll

rem windirected 傲迅 wmpdrm.dll
rem 这个**卸载需在安全模式下进行,或终止explorer.exe,taskmgr.exe,输入法等进程只留基本进程,在cmd窗口中执行批处理可卸载
%windir%\system32\spoolsv\spoolsv.exe -uninst
regsvr32 /u /s %windir%\system32\wmpdrm.dll
del %windir%\system32\spoolsv\spoolsv.exe /q /f
rem 为了98
%windir%\system\spoolsv\spoolsv.exe -uninst
regsvr32 /u /s %windir%\system\wmpdrm.dll
del %windir%\system\spoolsv\spoolsv.exe /q /f

rem 删除qq搜索 这个 **
regsvr32 /u /s c:\progra~1\tencent\addrplus\iehelp.dll
regsvr32 /u /s c:\progra~1\tencent\addrplus\iehelp1.dll
regsvr32 /u /s c:\progra~1\tencent\addrplus\scrax.dll
regsvr32 /u /s c:\progra~1\tencent\addrplus\tctrl.dll
c:\progra~1\tencent\adplus\stup.exe c:\progra~1\tencent\adplus\ssaddr1.dll uninstall
c:\progra~1\tencent\adplus\stup.exe c:\progra~1\tencent\adplus\ssaddr.dll uninstall

rem 删除 dudu 搜索条 这个 **
regsvr32 /u /s c:\progra~1\dudu\dddclient\dddiemon.dll
regsvr32 /u /s c:\progra~1\dudu\dddclient\dddmext.dll

rem 删除accoona 这个 **
regsvr32 /u /s c:\progra~1\accoona\atoolbarcn.dll
regsvr32 /u /s c:\progra~1\accoona\atoolbar.dll
regsvr32 /u /s c:\progra~1\accoona\asearchassist.dll

rem 删除xbar
regsvr32 /u /s c:\progra~1\xbar\xbarhelper.dll

regsvr32 /u /s %windir%\system32\xunleibho_v8.dll
rem 为了98
regsvr32 /u /s %windir%\system\xunleibho_v8.dll

rem schedule sscli.dll
regsvr32 /u /s %windir%\system32\sscli.dll

rem 删除 henbang 很棒   **
regsvr32 /u /s c:\progra~1\pcast\hbcast.dll
regsvr32 /u /s c:\progra~1\hbclient\hapast.dll
regsvr32 /s /u c:\progra~1\yehoo\hbyehoo.dll
regsvr32 /s /u c:\progra~1\yehoo\tbyehoo.dll
regsvr32 /s /u %windir%\downlo~1\hthelper.dll

rem 库站 多多qq表情 9991.com51.com 超级**
regsvr32 /u /s c:\progra~1\coolwebsite\quicklink.dll
"c:\program files\common files\update\update.exe" -kill1
c:\progra~1\coolwebsite\uninst.exe
rem 最好安全模式操作,或者需要终止一个rundll32.exe %windir%\system32\wbem\irjit.dll 的进程
del %windir%\system32\wbem\irjit.dll /q /f

rem cfsbho.dll
regsvr32 /u /s %windir%\system32\msibm\cfsbho.dll
rem 为了98
regsvr32 /u /s %windir%\system\msibm\cfsbho.dll

rem 划词搜索 deskadtop\deskipn.dll
regsvr32 /u /s c:\progra~1\deskad~1\deskipn.dll
c:\progra~1\deskad~1\deskun.exe

rem 删除桌面传媒 ie-bar 这个**
msiexec.exe /i{fe41a479-e056-40a5-982c-d149b5d6712d}
regsvr32 /u /s "c:\program files\desktop media\cast\dmbar.dll"
regsvr32 /u /s "c:\program files\common files\ie-bar\dmbar.dll"
"c:\program files\common files\ie-bar\uninstall.exe"
regsvr32 /u /s %windir%\downlo~1\lund.dll
regsvr32 /u /s "c:\program files\ie-bar\cast\dmbar.dll"
rem 这个**可能不能被删除,请先到进程管理里删除viptray.exe这个进程
regsvr32 /u /s %windir%\system32\iehelper.dll
regsvr32 /u /s %windir%\system32\windefendor.dll
rem 这个名字会不停的变化 **
regsvr32 /u /s %windir%\system\cb7o2470.dll
rem 为了98
regsvr32 /u /s %windir%\system\iehelper.dll
regsvr32 /u /s %windir%\system\windefendor.dll

msiexec.exe /i{3d554c17-ed16-448a-b3ce-6fbc51ffb705}

rem 中搜寻址 这个 **
regsvr32 /u /s "c:\program files\searchnet\snhpr.dll"
"c:\program files\searchnet\uninstall.exe"

rem 百狗**
c:\progra~1\baigoo\mtsrv.exe -unregserver
regsvr32 /u /s c:\progra~1\baigoo\bgook.dll
regsvr32 /u /s c:\progra~1\baigoo\bgooex.dll
regsvr32 /u /s c:\progra~1\baigoo\bgoohk.dll
regsvr32 /u /s c:\progra~1\baigoo\bgoobho.dll
c:\progra~1\baigoo\uninst.exe

rem 搜狗
c:\progra~1\p4p\uninstall.exe

regsvr32 /u /s "c:\program files\scantoolbar\scanbar.dll"
c:\progra~1\scantoolbar\uninst.exe

%windir%\system32\unsocul.exe
rem 为了98
%windir%\system\unsocul.exe

rem 点点通
if exist %windir%\downlo~1\ddtinit.dll rundll32.exe %windir%\downlo~1\ddtinit.dll,uninstall

rem radiate advertising
%windir%\system32\msipcsv.exe -uninstall -all
rem 为了98
%windir%\system\msipcsv.exe -uninstall -all

rem roomsetupcd ads
if exist %windir%\system32\cd_clint.dll rundll32 %windir%\system32\cd_clint.dll,servicerundll u_281
rem 为了98
if exist %windir%\system\cd_clint.dll rundll32 %windir%\system\cd_clint.dll,servicerundll u_281

rem 一个什么五笔
regsvr32 /u /s c:\progra~1\common~1\wnwb\wnwbio.dll

rem wmicsmgr.dll
regsvr32 /u /s %windir%\system32\wmicsmgr.dll
regsvr32 /u /s %windir%\system\wmicsmgr.dll

rem 一个广告navihelper.dll
regsvr32 /u /s %windir%\system32\navihelper.dll
regsvr32 /u /s %windir%\system\navihelper.dll
del %windir%\system32\host.dat /q /f

rem 好像是一个木马
regsvr32 /u /s %windir%\system32\radminl.dll
rem 为了98
regsvr32 /u /s %windir%\system\radminl.dll

rem 跳跳塘
rem 这个**可能不能被删除,请先到进程管理里终止webacc.exe这个进程
%windir%\system32\wbauninstall.exe
regsvr32 /u /s %windir%\system32\webacc.dll
regsvr32 /u /s %windir%\downlo~1\c8s.dll
rem 为了98
%windir%\system\wbauninstall.exe
regsvr32 /u /s %windir%\system\webacc.dll

rem 好像什么便民
regsvr32 /u /s c:\progra~1\xm\tbu3\xm.dll

rem 易趣购物
del %windir%\ebaylink.ico /q /f

rem msdc32.dll 一个木马  需要安全模式才能清除
del c:\progra~1\common~1\system\msdc32.dll /q /f
del %windir%\ .exe /q /f /as /ar /ah

rem yok拦截助手
regsvr32 /u /s c:\progra~1\yok.com\blockadr\yokhad.dll
regsvr32 /u /s c:\progra~1\yok.com\supers~1\yok_supersearch.dll
regsvr32 /u /s %windir%\system32\navsmall.dll
regsvr32 /u /s %windir%\system\navsmall.dll
c:\progra~1\yok.com\blockadr\uninst.exe

rem 不知是什么流氓
regsvr32 /u /s %windir%\downlo~1\vevnli.dll

rem chajianhelper
regsvr32 /u /s %windir%\system32\sysrea~1.dll
regsvr32 /u /s %windir%\system\sysrea~1.dll

rem 不知是什么流氓
regsvr32 /u /s %windir%\system32\helperservice.dll
regsvr32 /u /s %windir%\system\helperservice.dll

regsvr32 /u /s %windir%\system32\mshlp.dll
regsvr32 /u /s %windir%\system\mshlp.dll

rem mywebsearch 这个**,这个**产生的目录根本不定
if exist rundll32 c:\progra~1\mywebs~1\bar\2.bin\mwsbar.dll rundll32 c:\progra~1\mywebs~1\bar\2.bin\mwsbar.dll,o

rem 开心运程速递 
regsvr32 /u /s %windir%\system32\obwbkya.dll
rem 为了98
regsvr32 /u /s %windir%\system\obwbkya.dll

regsvr32 /u /s %windir%\system32\shwasobj.dll
rem 为了98
regsvr32 /u /s %windir%\system\shwasobj.dll
c:\progra~1\sdastro\uninst.exe

rem 这个文件名会不停的变化
regsvr32 /u /s c:\docume~1\alluse~1\applic~1\microsoft\iehelper\iehelper200631_8913.dll

rem luobooshow
regsvr32 /u /s %windir%\system32\winsc.dll
regsvr32 /u /s %windir%\system\winsc.dll

rem caishow
regsvr32 /u /s "c:\program files\caishow tech\caishow\browerhelper.dll"
regsvr32 /u /s %windir%\system32\wuwebex.dll
regsvr32 /u /s %windir%\system\wuwebex.dll

rem 酷桌面
regsvr32 /u /s %windir%\system32\coolbho.dll
regsvr32 /u /s %windir%\system\coolbho.dll

rem 青娱
regsvr32 /u /s %windir%\system\qylwmp~1.ocx
regsvr32 /u /s %windir%\system\qylrmp~1.ocx
regsvr32 /u /s %windir%\system\contextmenu.dll
regsvr32 /u /s c:\progra~1\qyule\\qyulep~1.ocx
regsvr32 /u /s c:\progra~1\qyule\\dvfilter.ax
c:\progra~1\qyule\unins000.exe

rem nb46.com  smflash.ocx 好像需要安全模式
regsvr32 /u /s "c:\program files\nb46.com\nb46toolbar.dll"
regsvr32 /u /s %windir%\system32\smflash.ocx
regsvr32 /u /s %windir%\system\smflash.ocx

rem kuaiso toolsbar
regsvr32 /u /s "c:\program files\micrsoft searchbar\searchbar.dll"

rem bbmao
regsvr32 /u /s "c:\program files\bbmao toolbar\bbmao_tb_v1_0.dll"


rem 删除cdn 这个 **
regsvr32 /u /s c:\progra~1\cnnic\cdn\wmhlpr.dll
regsvr32 /u /s c:\progra~1\cnnic\cdn\iesrch.dll
regsvr32 /u /s c:\progra~1\cnnic\cdn\cdniehlp.dll
regsvr32 /u /s c:\progra~1\cnnic\cdn\cdniehlp.dll
regsvr32 /u /s c:\progra~1\cnnic\cdn\cdnforie.dll
regsvr32 /u /s %windir%\system32\cdnns.dll
regsvr32 /u /s %windir%\system32\jklpif.dll
rem 为了98
regsvr32 /u /s %windir%\system\cdnns.dll
regsvr32 /u /s %windir%\system\jklpif.dll
rem cnnic的反安装这里可能不好完全卸载,请单独到控制面板里"添加/删除"里卸载,或找到c:\progra~1\cnnic\cdn\cdnunins.exe单独执行
c:\progra~1\cnnic\cdn\cdnunins.exe

regedit4

;rem 砍掉一切流氓,让我们静待互联网的春天 ~_~
;rem 各取所需,根据自己要求修改(有的人还觉得某个流氓好就留着*_*)
;rem 如果跳出选择框,选择全部卸载
;rem 有些**需要在安全模式下才能卸载,有些不好卸载请看里面的帮助
;rem 现在的流氓越来越超级,已经超过批处理的能力极限,只有借助一些别的软件,推荐使用http://ccollomb.free.fr/unlocker一起删除超级**

;rem 砍掉3721 kao 把好多的电脑弄惨了
;rem 砍掉yahoo猪手,把好多的电脑弄惨
;rem 新版的 猪手 根本不能选择卸载,***,这里可以被卸载的
[-hkey_local_machine\software\classes\*\shellex\contextmenuhandlers\粉碎文件]
[-hkey_local_machine\software\classes\.zschk]
[-hkey_local_machine\software\classes\angling.antifish]
[-hkey_local_machine\software\classes\angling.antifish.1]
[-hkey_local_machine\software\classes\assist.easyassist]
[-hkey_local_machine\software\classes\autolive.live]
[-hkey_local_machine\software\classes\autolive.live.1]
[-hkey_local_machine\software\classes\clsid\{141a5e19-bdcb-4e27-a3d7-9e16503bc05b}]
[-hkey_local_machine\software\classes\adkiller.adkillerobj]
[-hkey_local_machine\software\classes\adkiller.adkillerobj.1]
[-hkey_local_machine\software\classes\clsid\{1b0e7716-898e-48cc-9690-4e338e8de1d3}]
[-hkey_local_machine\software\classes\clsid\{38928d50-8a48-44c2-945f-d2f23f771410}]
[-hkey_local_machine\software\classes\clsid\{7ca83cf1-3aea-42d0-a4e3-1594fc6e48b2}]
[-hkey_local_machine\software\classes\clsid\{9eb2b422-c9ee-46c4-a471-1e79c7517b1d}]
[-hkey_local_machine\software\classes\clsid\{abec6103-f6ac-43a3-834f-fb03fba339a2}]
[-hkey_local_machine\software\classes\clsid\{b83fc273-3522-4cc6-92ec-75cc86678da4}]
[-hkey_local_machine\software\classes\clsid\{bb936323-19fa-4521-ba29-eca6a121bc78}]
[-hkey_local_machine\software\classes\clsid\{d157330a-9ef3-49f8-9a67-4141ac41add4}]
[-hkey_local_machine\software\classes\cnshelper.ch]
[-hkey_local_machine\software\classes\cnsminhk.cnshook]
[-hkey_local_machine\software\classes\cnsminhk.cnshook.1]
[-hkey_local_machine\software\classes\coolbar.coolbarobj]
[-hkey_local_machine\software\classes\coolbar.coolbarobj.1]
[-hkey_local_machine\software\classes\fflash.flashobjectinterface]
[-hkey_local_machine\software\classes\fflash.flashobjectinterface.1]
[-hkey_local_machine\software\classes\interface\{172862cd-9d35-40e7-baf2-ba7ecf043b9c}]
[-hkey_local_machine\software\classes\interface\{1bb0abbe-2d95-4847-b9d8-6f90de3714c1}]
[-hkey_local_machine\software\classes\interface\{1d10645f-a553-426e-9923-c3abf846ea41}]
[-hkey_local_machine\software\classes\interface\{48e688c8-609f-4b08-944e-3c7fab99cd08}]
[-hkey_local_machine\software\classes\interface\{7436db12-1a7a-4d87-a4e0-713ec9d86050}]
[-hkey_local_machine\software\classes\interface\{924f5b3a-7a27-484a-b873-e855c9708667}]
[-hkey_local_machine\software\classes\interface\{be08f6bc-c3e6-4149-beb1-cb449e1b372e}]
[-hkey_local_machine\software\classes\interface\{c3a9f7f8-8862-496a-b8a4-25d4140b7dbc}]
[-hkey_local_machine\software\classes\interface\{d27cdb6d-ae6d-11cf-96b8-444553540000}]
[-hkey_local_machine\software\classes\typelib\{19069804-2cf0-4357-b696-ba6e9aad99ef}]
[-hkey_local_machine\software\classes\typelib\{4158db95-de71-41ff-bea1-2c3d1c679df1}]
[-hkey_local_machine\software\classes\typelib\{7354662f-caa3-448b-bc01-04f55a2dca35}]
[-hkey_local_machine\software\classes\typelib\{95a9bbca-4ec1-4a9e-91aa-1d9633c38d0e}]
[-hkey_local_machine\software\classes\typelib\{a5adeae7-a8b4-4f94-9128-bf8d8db5e927}]
[-hkey_local_machine\software\classes\typelib\{aab6bce3-1df6-4930-9b14-9ca79dc8c267}]
[-hkey_local_machine\software\classes\typelib\{d4839331-534d-4d0c-875f-d25af6a10ccc}]
[-hkey_local_machine\software\classes\typelib\{f97e75a4-0103-4f27-a752-327b600b1130}]
[-hkey_local_machine\software\classes\zsmod.axobj]
[-hkey_local_machine\software\classes\zsmod.axobj.1]
[-hkey_local_machine\software\classes\clsid\{17f1c8e8-b99b-4d85-927b-a0ee7290455a}]
[-hkey_local_machine\software\classes\clsid\{19ce93de-8334-42c6-b2ca-bfe3df5196a3}]
[-hkey_local_machine\software\classes\clsid\{1c2edd19-c2d5-4234-9339-785e5885b84d}]
[-hkey_local_machine\software\classes\clsid\{2283bb66-a15d-4ac8-ba72-9c8c9f5a1691}]
[-hkey_local_machine\software\classes\clsid\{33bbe430-0e42-4f12-b075-8d21acb10dcb}]
[-hkey_local_machine\software\classes\clsid\{38928d50-8a48-44c2-945f-d2f23f771410}]
[-hkey_local_machine\software\classes\clsid\{406f94f0-504f-4a40-8dfd-58b0666abebd}]
[-hkey_local_machine\software\classes\clsid\{4558fa8b-c683-4bd9-bb43-90e086a4c113}]
[-hkey_local_machine\software\classes\clsid\{4b57d035-8a78-4e5a-82df-fd5dee51e578}]
[-hkey_local_machine\software\classes\clsid\{4ebcaf82-5be7-4fc5-938f-9cd284587139}]
[-hkey_local_machine\software\classes\clsid\{4f2c1a0a-622e-4d23-9870-6fb6d109c170}]
[-hkey_local_machine\software\classes\clsid\{55c32fb0-b5de-432d-b143-7ca84ea3f888}]
[-hkey_local_machine\software\classes\clsid\{57421194-58fb-49ae-9b4f-fd48869b9ad4}]
[-hkey_local_machine\software\classes\clsid\{59e99add-e926-40e8-bd6f-1532124a4aaa}]
[-hkey_local_machine\software\classes\clsid\{62eed7c6-9f02-42f9-b634-98e2899e147b}]
[-hkey_local_machine\software\classes\clsid\{6940dba6-cebb-46b6-8058-cb358295bccc}]
[-hkey_local_machine\software\classes\clsid\{6a915d6b-b187-4724-b753-f338d8a157c2}]
[-hkey_local_machine\software\classes\clsid\{7992e7f8-5d81-4eaa-9e5f-6211215946e4}]
[-hkey_local_machine\software\classes\clsid\{8fc688e0-3f7d-4517-8c30-459c4211a8a1}]
[-hkey_local_machine\software\classes\clsid\{9c3c2c08-c494-4f52-ae94-85156a447d43}]
[-hkey_local_machine\software\classes\clsid\{a14600f7-e2ae-482d-9afc-99cd4544db4f}]
[-hkey_local_machine\software\classes\clsid\{ab9bf611-f86a-43c5-a467-625e22d7a309}]
[-hkey_local_machine\software\classes\clsid\{af53d70e-29df-443a-92aa-9c314af5871e}]
[-hkey_local_machine\software\classes\clsid\{b56ff3e8-b0c2-45c9-af3f-8e6c5f010b9f}]
[-hkey_local_machine\software\classes\clsid\{b83fc273-3522-4cc6-92ec-75cc86678da4}]
[-hkey_local_machine\software\classes\clsid\{c14f7681-33d8-11d3-a09b-00500402f30b}]
[-hkey_local_machine\software\classes\clsid\{c459ab59-28a5-43a3-9d22-753f4c9586e6}]
[-hkey_local_machine\software\classes\clsid\{ca1e3092-bc38-4ffc-aeae-c8e8eec70ca1}]
[-hkey_local_machine\software\classes\clsid\{cea8fc9f-3d3f-4486-b9df-adcee875ffb2}]
[-hkey_local_machine\software\classes\clsid\{d7c53e1a-7045-473c-933d-8228d1708947}]
[-hkey_local_machine\software\classes\clsid\{e3128a3a-c191-4149-8631-c632c8fc9919}]
[-hkey_local_machine\software\classes\clsid\{ef4ba0b4-a877-45b3-b0bc-ad7a3cc22811}]
[-hkey_local_machine\software\classes\clsid\{f40fed3d-f813-42f4-a1ae-8e1d60472bf0}]
[-hkey_local_machine\software\classes\clsid\{fa6da3a4-87e4-4a45-9fd6-ed26089b7104}]
[-hkey_local_machine\software\classes\clsid\{fe3ecae7-0a37-4506-8a7d-3cc9a04d2ca8}]
[-hkey_local_machine\software\classes\clsid\{ff0e5df6-2375-4499-a97f-74954384d8d2}]
[-hkey_local_machine\software\classes\cnshelper.ch]
[-hkey_local_machine\software\classes\cnshelper.ch.1]
[-hkey_local_machine\software\classes\cnshelper.ch]
[-hkey_local_machine\software\classes\interface\{02db2793-f3f8-42ab-9b03-19b25485be29}]
[-hkey_local_machine\software\classes\interface\{924f5b3a-7a27-484a-b873-e855c9708667}]
[-hkey_local_machine\software\classes\interface\{be08f6bc-c3e6-4149-beb1-cb449e1b372e}]
[-hkey_local_machine\software\classes\interface\{c43273a6-9085-41cf-8a84-3881363a7eb9}]
[-hkey_local_machine\software\classes\interface\{d27cdb6d-ae6d-11cf-96b8-444553540000}]
[-hkey_local_machine\software\classes\interface\{dd011db1-0eaf-4d05-8650-bb99208c76b0}]
[-hkey_local_machine\software\classes\interface\{df692509-d9ef-48a0-9cd0-3aa5b81f6f68}]
[-hkey_local_machine\software\classes\jpegfile\shellex\contextmenuhandlers\yahoo!photo]
[-hkey_local_machine\software\classes\toolband.bandbutton]
[-hkey_local_machine\software\classes\toolband.bandbutton.1]
[-hkey_local_machine\software\classes\toolband.bandreg]
[-hkey_local_machine\software\classes\toolband.bandreg.1]
[-hkey_local_machine\software\classes\toolband.objectbar]
[-hkey_local_machine\software\classes\toolband.objectbar.1]
[-hkey_local_machine\software\classes\typelib\{04d0fd01-c8fa-413b-ad83-519d10b93324}]
[-hkey_local_machine\software\classes\typelib\{22242729-9ee0-4060-988d-be2a9efd8cd0}]
[-hkey_local_machine\software\classes\typelib\{4158db95-de71-41ff-bea1-2c3d1c679df1}]
[-hkey_local_machine\software\classes\typelib\{51c76ab9-d876-46a8-a20d-f606eddd69ed}]
[-hkey_local_machine\software\classes\typelib\{5517390c-60d1-4ffa-bd4c-81f8278af29e}]
[-hkey_local_machine\software\classes\typelib\{58e9b715-3c97-4048-9cbe-a708e0aeb29e}]
[-hkey_local_machine\software\classes\typelib\{7cfdab57-d8cd-4465-bd15-48cffcee3df2}]
[-hkey_local_machine\software\classes\typelib\{8417d3db-4004-4259-952d-a6ec64a1800e}]
[-hkey_local_machine\software\classes\typelib\{95e822b6-6b10-4e86-9603-6cecb6135867}]
[-hkey_local_machine\software\classes\typelib\{aab6bce3-1df6-4930-9b14-9ca79dc8c267}]
[-hkey_local_machine\software\classes\typelib\{ae9a3f59-e2d2-4ee8-a279-f2b6af336b8e}]
[-hkey_local_machine\software\classes\typelib\{cf67e74a-3c62-4867-9dfa-dd2374003333}]
[-hkey_local_machine\software\classes\typelib\{e816b7f9-96ab-4d4d-8da4-b9d124959da5}]
[-hkey_local_machine\software\classes\typelib\{f8cc28b5-4042-4054-99cb-8855efd0fab7}]
[-hkey_local_machine\software\classes\yahooassistbar.asnoadobj]
[-hkey_local_machine\software\classes\yahooassistbar.asnoadobj.1]
[-hkey_local_machine\software\classes\yahooassistbar.dragsearch]
[-hkey_local_machine\software\classes\yahooassistbar.dragsearch.1]
[-hkey_local_machine\software\classes\yahooassistbar.phototb]
[-hkey_local_machine\software\classes\yahooassistbar.phototb.1]
[-hkey_local_machine\software\classes\yalive.live]
[-hkey_local_machine\software\classes\yalive.live.1]
[-hkey_local_machine\software\classes\yassist.easyassist]
[-hkey_local_machine\software\classes\yassist.easyassist.1]
[-hkey_local_machine\software\classes\yrss.expband]
[-hkey_local_machine\software\classes\yrss.expband.1]
[-hkey_local_machine\software\classes\zschkfile]

[-hkey_local_machine\software\microsoft\internet explorer\advancedoptions\!cns]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{00000000-0000-0001-0001-596baedd1289}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{507f9113-cd77-4866-ba92-0e86da3d0b97}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{59bc54a2-56b3-44a0-93e5-432d58746e26}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{5d73ee86-05f1-49ed-b850-e423120ec338}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{e5d12c4e-7b4f-11d3-b5c9-0050045c3c96}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{ecf2e268-f28c-48d2-9ab7-8f69c11ccb71}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{fd00d911-7529-4084-9946-a29f1bdf4fe5}]

[hkey_local_machine\software\microsoft\internet explorer\search]
"searchassistant"=-
"customizesearch"=-
"ocustomizesearch"=-
"osearchassistant"=-

[hkey_local_machine\software\microsoft\windows\currentversion\shell extensions\approved]
"{33bbe430-0e42-4f12-b075-8d21acb10dcb}"=-

[hkey_local_machine\software\microsoft\internet explorer\toolbar]
"{406f94f0-504f-4a40-8dfd-58b0666abebd}"=-
"{bb936323-19fa-4521-ba29-eca6a121bc78}"=-

[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{33bbe430-0e42-4f12-b075-8d21acb10dcb}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{38928d50-8a48-44c2-945f-d2f23f771410}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{62eed7c6-9f02-42f9-b634-98e2899e147b}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{bb936323-19fa-4521-ba29-eca6a121bc78}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{d157330a-9ef3-49f8-9a67-4141ac41add4}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{fe3ecae7-0a37-4506-8a7d-3cc9a04d2ca8}]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{d157330a-9ef3-49f8-9a67-4141ac41add4}"=-

[hkey_local_machine\software\microsoft\windows\currentversion\run]
"helper.dll"=-
"cnsmin"=-
"assistse"=-
"hbpassport"=-
"ylive.exe"=-
"yassistse"=-

[hkey_local_machine\software\microsoft\windows\currentversion\runonce]
"cnsassecblk"=-

[-hkey_local_machine\software\microsoft\windows\currentversion\uninstall\cnsmin]
[-hkey_local_machine\software\microsoft\windows\currentversion\uninstall\{1b0e7716-898e-48cc-9690-4e338e8de1d3}]
[-hkey_local_machine\system\currentcontrolset\enum\root\legacy_cnsminkp]
[-hkey_local_machine\system\currentcontrolset\services\cnsminkp]

[-hkey_current_user\software\microsoft\internet explorer\menuext\!搜一搜]
[-hkey_current_user\software\microsoft\internet explorer\menuext\添加到雅虎订阅(&y)]
[-hkey_current_user\software\microsoft\internet explorer\menuext\雅虎搜索]

[hkey_current_user\software\microsoft\internet explorer\main]
"cnsmenu"=-
"cnshint"=-
"cnsreset"=-
"cnsenable"=-
"cnslist"=-
"cnsautoupdate"=-

[hkey_current_user\software\microsoft\internet explorer\urlsearchhooks]
"{406f94f0-504f-4a40-8dfd-58b0666abebd}"=-
"{bb936323-19fa-4521-ba29-eca6a121bc78}"=-
[-hkey_local_machine\software\3721]
[-hkey_local_machine\software\yahoo]
[-hkey_current_user\software\3721]
[-hkey_current_user\software\microsoft\internet explorer\explorer bars\{19ce93de-8334-42c6-b2ca-bfe3df5196a3}]
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{57421194-58fb-49ae-9b4f-fd48869b9ad4}]

;rem 彩信通 又一个超级的**产生了
;rem 想办法删除 %windir%\system32\drivers\albus.sys 这个万恶不赦的文件,推荐用http://ccollomb.free.fr/unlocker
[-hkey_local_machine\system\controlset001\enum\root\legacy_albus]
[-hkey_local_machine\system\controlset001\services\albus]
[-hkey_local_machine\system\controlset002\services\albus]
[-hkey_local_machine\system\currentcontrolset\enum\root\legacy_albus]
[-hkey_local_machine\system\currentcontrolset\services\albus]
[-hkey_local_machine\software\classes\ad.axobj]
[-hkey_local_machine\software\classes\ad.axobj.1]
[-hkey_local_machine\software\classes\clsid\{6671a431-5c3d-463d-a7cf-5587f9b7e191}]
[-hkey_local_machine\software\classes\clsid\{6671a432-5c3d-463d-a7cf-5587f9b7e191}]
[-hkey_local_machine\software\classes\clsid\{6a512bf7-ec78-4e8d-9841-6c02e8fa9838}]
[-hkey_local_machine\software\classes\iehelper.winhelper]
[-hkey_local_machine\software\classes\iehelper.winhelper.1]
[-hkey_local_machine\software\classes\interface\{74289a79-e652-4a57-a6b9-ee64ad532a8d}]
[-hkey_local_machine\software\classes\interface\{ab45ce36-c280-4525-bcf9-1bd01d3e4b57}]
[-hkey_local_machine\software\classes\interface\{d922591d-7893-412b-b801-c3b2f31be4c9}]
[-hkey_local_machine\software\classes\mmsbho.mmsassist]
[-hkey_local_machine\software\classes\mmsbho.mmsassist.1]
[-hkey_local_machine\software\classes\mmsbho.mmsassistmenu]
[-hkey_local_machine\software\classes\mmsbho.mmsassistmenu.1]
[-hkey_local_machine\software\classes\typelib\{077525ac-c681-4139-8c3e-b582bdd375c7}]
[-hkey_local_machine\software\classes\typelib\{22f87d75-7dd1-4545-94b3-ca80c0f462c6}]
[-hkey_local_machine\software\classes\typelib\{964ddeff-b16c-4113-8ff7-8e83b53c8ed8}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{6671a433-5c3d-463d-a7cf-5587f9b7e191}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{6671a431-5c3d-463d-a7cf-5587f9b7e191}]
[-hkey_local_machine\software\mmsassist]
[-hkey_local_machine\software\stdup]
[-hkey_current_user\software\microsoft\internet explorer\menuext\>>彩信发送<<]
[hkey_local_machine\software\microsoft\windows\currentversion\runonce]
"alsmt.exe"=-

;rem internet explorer helper msshapi.dll
[-hkey_local_machine\software\classes\clsid\{02c9b9ab-6372-46c5-b356-773faf3b6b1e}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{02c9b9ab-6372-46c5-b356-773faf3b6b1e}]

;删除划词 huaci 又是一个走上不归路的超级**
[-hkey_local_machine\software\classes\clsid\{594be7b2-23b0-4fae-a2b9-0c21cc1417ce}]
[-hkey_local_machine\software\classes\interface\{4e1ace40-f681-4cc4-a7c0-ad1e6c9ad86f}]
[-hkey_local_machine\software\classes\searchm.search]
[-hkey_local_machine\software\classes\searchm.search.1]
[-hkey_local_machine\software\classes\typelib\{fd536575-73f7-42a3-9e9f-11688f1a006a}]
[-hkey_local_machine\system\controlset001\enum\root\legacy_abhcop]
[-hkey_local_machine\system\controlset001\enum\root\legacy_hcalway]
[-hkey_local_machine\system\controlset001\services\abhcop]
[-hkey_local_machine\system\controlset001\services\hcalway]
[-hkey_local_machine\system\currentcontrolset\enum\root\legacy_abhcop]
[-hkey_local_machine\system\currentcontrolset\enum\root\legacy_hcalway]
[-hkey_local_machine\system\currentcontrolset\services\abhcop]
[-hkey_local_machine\system\currentcontrolset\services\hcalway]
[-hkey_current_user\software\pig move search]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"movesearch"=-

;cdn这个**
[-hkey_local_machine\software\classes\cdn.cdnobj]
[-hkey_local_machine\software\classes\cdn.cdnobj.1]
[-hkey_local_machine\software\classes\cdnforie.iehlprobj]
[-hkey_local_machine\software\classes\cdnforie.iehlprobj.1]
[-hkey_local_machine\software\classes\clsid\{5c3853cf-c7e0-4946-b3fa-1abdb6f48108}]
[-hkey_local_machine\software\classes\clsid\{8cdcbba0-4be1-4199-8389-1b19ed41d3e8}]
[-hkey_local_machine\software\classes\clsid\{9a578c98-3c2f-4630-890b-fc04196ef420}]
[-hkey_local_machine\software\classes\clsid\{f5824efb-728a-4726-a5a5-85a68b20edc3}]
[-hkey_local_machine\software\classes\interface\{5c3853cd-c7e0-4946-b3fa-1abdb6f48108}]
[-hkey_local_machine\software\classes\interface\{951a869a-1003-4897-948f-d55e570871db}]
[-hkey_local_machine\software\classes\interface\{9c991f1e-d6fe-4b74-b6ec-763ff528fae1}]
[-hkey_local_machine\software\classes\interface\{f248ebab-d894-4682-80e3-f48aabf4b12d}]
[-hkey_local_machine\software\classes\typelib\{5c3853ce-c7e0-4946-b3fa-1abdb6f48108}]
[-hkey_local_machine\software\classes\typelib\{c24a5a5c-0874-4386-85c7-e669f90997a9}]
[-hkey_local_machine\software\classes\typelib\{df571585-070d-4eb1-8b0e-99023f934fd4}]
[-hkey_local_machine\software\classes\wmhlpr.wmevtsink]
[-hkey_local_machine\software\cnnic]
[-hkey_local_machine\software\microsoft\internet explorer\advancedoptions\cdnclient]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{5c3853cf-c7e0-4946-b3fa-1abdb6f48108}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{5c3853cf-c7e0-4946-b3fa-1abdb6f48108}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{f5824efb-728a-4726-a5a5-85a68b20edc3}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{35980f6e-a137-4e50-953d-813bb8556899}]

[-hkey_local_machine\system\currentcontrolset\services\cdnprot]
[-hkey_local_machine\system\currentcontrolset\services\cdntran]
[-hkey_current_user\software\cnnic]

[-hkey_classes_root\clsid\{eed92a43-cfce-4548-bd73-b0a405470ed5}]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"cdnctr"=-
"renewup"=-

[hkey_current_user\software\microsoft\internet explorer\extensions\cmdmapping]
"{5c3853cf-c7e0-4946-b3fa-1abdb6f48108}"=-

[hkey_current_user\software\microsoft\internet explorer\urlsearchhooks]
"{eed92a43-cfce-4548-bd73-b0a405470ed5}"=-

[-hkey_current_user\software\microsoft\internet explorer\menuext\访问通用网址]

;去除stdup.dll这个**
[-hkey_local_machine\system\currentcontrolset\services\stdservice]

;rem baidu这个** 越来越狠,baid* 也不例外
;rem需要安全模式或者想办法删除 %windir%\system32\drivers\bdguard.sys 这个文件,才能卸载
[-hkey_local_machine\software\classes\baidubar.baidu]
[-hkey_local_machine\software\classes\baidubar.baidu.1]
[-hkey_local_machine\software\classes\baidubar.tool]
[-hkey_local_machine\software\classes\baidubar.tool.1]
[-hkey_local_machine\software\classes\baidubarex.bandie]
[-hkey_local_machine\software\classes\baidubarex.bandie.1]
[-hkey_local_machine\software\classes\baidubarex.droptarget]
[-hkey_local_machine\software\classes\baidubarex.droptarget.1]
[-hkey_local_machine\software\classes\clsid\{77fef28e-eb96-44ff-b511-3185dea48697}]
[-hkey_local_machine\software\classes\clsid\{7c76c055-ed6e-4535-a70f-cd476e727f67}]
[-hkey_local_machine\software\classes\clsid\{a7f05ee4-0426-454f-8013-c41e3596e9e9}]
[-hkey_local_machine\software\classes\clsid\{b580cf65-e151-49c3-b73f-70b13fca8e86}]
[-hkey_local_machine\software\classes\clsid\{fe14f22e-be14-4f08-a80f-f27bc3a67b2d}]
[-hkey_local_machine\software\classes\interface\{464c8a26-31e9-411c-9583-5b858e631dcc}]
[-hkey_local_machine\software\classes\interface\{89fdcc4b-8d91-49b0-81a6-18bcff582735}]
[-hkey_local_machine\software\classes\interface\{96249369-d3dc-4ae6-8a3b-e7109d46e98d}]
[-hkey_local_machine\software\classes\interface\{a294f8eb-86d9-4c4a-8b3e-909253761c64}]
[-hkey_local_machine\software\classes\mimefilter.adfilter]
[-hkey_local_machine\software\classes\typelib\{6afc2761-1253-427c-9a56-385b4609be1d}]
[hkey_local_machine\software\microsoft\internet explorer\toolbar]
"{b580cf65-e151-49c3-b73f-70b13fca8e86}"=-
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{77fef28e-eb96-44ff-b511-3185dea48697}]
[-hkey_local_machine\software\baidu]
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{b580cf65-e151-49c3-b73f-70b13fca8e86}]
[-hkey_current_user\software\baidu]
[-hkey_current_user\software\microsoft\internet explorer\menuext\百度--网页搜索]
[-hkey_current_user\software\microsoft\internet explorer\menuext\百度-搜索mp3]
[-hkey_current_user\software\microsoft\internet explorer\menuext\百度-搜索图片]
[-hkey_current_user\software\microsoft\internet explorer\menuext\百度-搜索新闻]
[-hkey_current_user\software\microsoft\internet explorer\menuext\百度-搜索歌词]
[-hkey_current_user\software\microsoft\internet explorer\menuext\百度-搜索网页]
[-hkey_current_user\software\microsoft\internet explorer\menuext\百度-搜索贴吧]
[-hkey_current_user\software\microsoft\internet explorer\menuext\百度-词典搜索]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"bie"=-
[hkey_current_user\software\microsoft\windows\currentversion\run]
"baiduds"=-
[-hkey_local_machine\system\controlset001\enum\root\legacy_bdguard]
[-hkey_local_machine\system\controlset001\services\bdguard]
[-hkey_local_machine\system\controlset002\enum\root\legacy_bdguard]
[-hkey_local_machine\system\controlset002\services\bdguard]
[-hkey_local_machine\system\currentcontrolset\enum\root\legacy_bdguard]
[-hkey_local_machine\system\currentcontrolset\services\bdguard]

;删除 ssaddr.dll tencent地址搜索栏
[-hkey_local_machine\software\classes\clsid\{0c7c23ef-a848-485b-873c-0ed954731014}]
[-hkey_local_machine\software\classes\clsid\{90b1ecb2-fc3b-49ae-a6bd-f5f11bf5c4ad}]
[-hkey_local_machine\software\classes\clsid\{a57e074f-56d8-4a33-8112-aac9693aa909}]
[-hkey_local_machine\software\classes\clsid\{db8b2393-7a6c-4c76-88ce-6b1f6ff6ffe9}]
[-hkey_local_machine\software\classes\typelib\{b1a7c2cf-bf40-4597-8142-7615d74d0cc3}]
[-hkey_local_machine\software\microsoft\internet explorer\advancedoptions\tbh]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157b}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{dedeb80d-fa35-45d9-9460-4983e5a8afe6}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{0c7c23ef-a848-485b-873c-0ed954731014}]
[hkey_local_machine\software\microsoft\windows\currentversion\shell extensions\approved]
"{db8b2393-7a6c-4c76-88ce-6b1f6ff6ffe9}"=-
[-hkey_local_machine\software\microsoft\internet explorer\urlsearchhooks]
"{db8b2393-7a6c-4c76-88ce-6b1f6ff6ffe9}"=-
[hkey_current_user\software\microsoft\internet explorer\urlsearchhooks]
"{db8b2393-7a6c-4c76-88ce-6b1f6ff6ffe9}"=-

[hkey_local_machine\software\microsoft\windows\currentversion\run]
"addrplus3"=-
[-hkey_local_machine\software\tencent\tbh]
[-hkey_current_user\software\microsoft\internet explorer\menuext\上传到qq网络硬盘]
[-hkey_current_user\software\microsoft\internet explorer\menuext\添加到qq自定义面板]
[-hkey_current_user\software\microsoft\internet explorer\menuext\添加到qq表情]
[-hkey_current_user\software\microsoft\internet explorer\menuext\用qq彩信发送该图片]
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{0c7c23ef-a848-485b-873c-0ed954731014}]
;删除qqiehelper.dll
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{54ebd53a-9bc1-480b-966a-843a333ca162}]

;删除病毒 irjit.dll 库站 多多qq表情 **
[-hkey_local_machine\software\classes\clsid\{d1bb7cf4-4463-4e91-88d7-ecc3ce0a13b7}]
[-hkey_local_machine\software\classes\interface\{0083de51-eb2e-4521-a95c-735d8e563373}]
[-hkey_local_machine\software\classes\quickbutton.quickbtn]
[-hkey_local_machine\software\classes\sss1.sss2.1]
[-hkey_local_machine\software\classes\typelib\{933db9d6-9447-4efe-aba2-eaf3b309b44c}]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{1d901067-2529-4a9b-9b6b-7a1db3a44cb5}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{d1bb7cf4-4463-4e91-88d7-ecc3ce0a13b7}]

[hkey_local_machine\software\microsoft\windows\currentversion\run]
"update"=-
[-hkey_local_machine\system\controlset001\services\bness]
[-hkey_local_machine\system\controlset001\services\eventlog\application\bness]
[-hkey_local_machine\system\currentcontrolset\services\bness]
[-hkey_local_machine\system\currentcontrolset\services\eventlog\application\bness]
[-hkey_local_machine\software\lamp]
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{d1bb7cf4-4463-4e91-88d7-ecc3ce0a13b7}]
[-hkey_local_machine\system\currentcontrolset\services\universal disk manager]
[-hkey_local_machine\system\currentcontrolset\services\mobill]

;删除kugoo
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{a9930d97-9cf0-42a0-a10d-4f28836579d5}]
[-hkey_current_user\software\microsoft\internet explorer\menuext\使用kugoo3下载(&k)]

;删除网络这只蠢诸
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"pigupdate"=-

;rem 删除 henbang 很棒   **
[-hkey_local_machine\software\classes\appid\{8ab6c00e-a068-44e9-953f-1bcfeea2bb6a}]
[-hkey_local_machine\software\classes\clsid\{21dad172-d8c3-40ca-b7d3-e28ae7a5db22}]
[-hkey_local_machine\software\classes\clsid\{8ab6c00e-a068-44e9-953f-1bcfeea2bb6a}]
[-hkey_local_machine\software\classes\clsid\{be0b5843-553a-48c2-9a42-258a1d791afc}]
[-hkey_local_machine\software\classes\interface\{7c7e302e-b015-4e6e-a761-c28d78f3bc5a}]
[-hkey_local_machine\software\classes\interface\{9aed6826-a68c-4aa0-a370-de54c0d40788}]
[-hkey_local_machine\software\classes\typelib\{aac356cf-178b-4612-b1db-ee153846bf58}]
[-hkey_local_machine\software\classes\hbhelper.hbactivex]
[-hkey_local_machine\software\classes\hbhelper.hbactivex.1]
[-hkey_local_machine\software\classes\richmedia.bhoobject]
[-hkey_local_machine\software\classes\richmedia.bhoobject.1]

[-hkey_local_machine\software\classes\appid\{b6773538-228e-4d2f-9599-70dd9bbd2cb0}]
[-hkey_local_machine\software\classes\clsid\{b6773538-228e-4d2f-9599-70dd9bbd2cb0}]
[-hkey_local_machine\software\classes\interface\{bc8f8692-d345-44e0-93ff-efb1ba6aa962}]
[-hkey_local_machine\software\classes\typelib\{9660e66e-af14-4946-8249-1a640bbabfcc}]
[-hkey_local_machine\software\classes\hapspy.hapclientspy]
[-hkey_local_machine\software\classes\hapspy.hapclientspy.1]

[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{21dad172-d8c3-40ca-b7d3-e28ae7a5db22}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{be0b5843-553a-48c2-9a42-258a1d791afc}]
[-hkey_local_machine\software\richmedia]
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{21dad172-d8c3-40ca-b7d3-e28ae7a5db22}]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"hdp"=-
"hbpassport"=-
"richmedia"=-

[hkey_local_machine\software\microsoft\windows\currentversion\run]
"mscfs"=-
"iehelper"=-
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{1a199c20-de2b-4838-ae3f-b5257ece2b7e}]

;rem 搜狗
[-hkey_local_machine\software\classes\.$p4p$]
[-hkey_local_machine\software\classes\autolink.autolinkbho]
[-hkey_local_machine\software\classes\autolink.autolinkbho.1]
[-hkey_local_machine\software\classes\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{238d0f23-5dc9-45a6-9be2-666160c324dd}]
[-hkey_local_machine\software\classes\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{765035b3-5944-4a94-806b-20ee3415f26f}]
[-hkey_local_machine\software\classes\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{941a4793-a705-4312-8dfc-c11ca05f397e}]
[-hkey_local_machine\software\classes\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{e21be468-5c18-43eb-b0cc-db93a847d769}]
[-hkey_local_machine\software\classes\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{f1cda468-8a08-449f-9fb8-461c3ded0e03}]
[-hkey_local_machine\software\classes\clsid\{08b13a8e-eb71-4421-b417-4ec0995d5bfc}]
[-hkey_local_machine\software\classes\clsid\{0ca51d02-7739-43ea-8d9a-1e8ad4327b03}]
[-hkey_local_machine\software\classes\clsid\{238d0f23-5dc9-45a6-9be2-666160c324dd}]
[-hkey_local_machine\software\classes\clsid\{5aa23b9d-99c0-4a41-a25d-58e806766680}]
[-hkey_local_machine\software\classes\clsid\{765035b3-5944-4a94-806b-20ee3415f26f}]
[-hkey_local_machine\software\classes\clsid\{7fd094e7-c8b9-40bd-9f80-f20a7194d2e6}]
[-hkey_local_machine\software\classes\clsid\{81b9a3d6-d79f-403e-939b-4f2be8fd2a34}]
[-hkey_local_machine\software\classes\clsid\{8755ce6e-0bf7-4441-8751-fb728941b0b4}]
[-hkey_local_machine\software\classes\clsid\{8ab8528f-ac8b-416d-9b84-92d97729c195}]
[-hkey_local_machine\software\classes\clsid\{941a4793-a705-4312-8dfc-c11ca05f397e}]
[-hkey_local_machine\software\classes\clsid\{acbf9eb9-48c5-4226-9967-2e3247a04510}]
[-hkey_local_machine\software\classes\clsid\{bab1ac41-6ff7-4f2e-a04e-5c592ccfea7d}]
[-hkey_local_machine\software\classes\clsid\{d977d6a9-be13-496d-9be4-175dfac12628}]
[-hkey_local_machine\software\classes\clsid\{dbbb7978-af21-4ef4-9ad1-b2f4bc75696c}]
[-hkey_local_machine\software\classes\clsid\{deee7fe9-3e06-43ee-b04d-18866cd0ad9c}]
[-hkey_local_machine\software\classes\clsid\{e03667bc-5eda-4fd8-992c-ed73265afaa0}]
[-hkey_local_machine\software\classes\clsid\{e21be468-5c18-43eb-b0cc-db93a847d769}]
[-hkey_local_machine\software\classes\clsid\{f1cda468-8a08-449f-9fb8-461c3ded0e03}]
[-hkey_local_machine\software\classes\clsid\{f20a9999-11dc-4071-87a9-35191dfddaa6}]
[-hkey_local_machine\software\classes\clsid\{f4fb516e-8f16-44fd-ab1d-260c32b7cf9a}]
[-hkey_local_machine\software\classes\comploader.loader]
[-hkey_local_machine\software\classes\media type\{e436eb83-524f-11ce-9f53-0020af0ba770}\{57428ec6-c2b2-44a2-aa9c-28f0b6a5c48e}]
[-hkey_local_machine\software\classes\sgsearchhook.sgurlsearhook]
[-hkey_local_machine\software\classes\sodaiehelper.catch]
[-hkey_local_machine\software\classes\sogoutb.detector]
[-hkey_local_machine\software\classes\toolbar.bhoobj]
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{8755ce6e-0bf7-4441-8751-fb728941b0b4}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{0ca51d02-7739-43ea-8d9a-1e8ad4327b03}]
[-hkey_local_machine\software\sohu r&d]
[-hkey_local_machine\system\currentcontrolset\services\eventlog\application\p4p service]
[-hkey_local_machine\system\currentcontrolset\services\p4p service]
[-hkey_current_user\software\sohu r&d]

;
[-hkey_current_user\software\microsoft\internet explorer\menuext\使用彩信超级自写发送到手机]
[-hkey_current_user\software\microsoft\internet explorer\menuext\使用新浪下载助手下载]
[-hkey_current_user\software\microsoft\internet explorer\menuext\发送图片到手机(&m)]
[-hkey_current_user\software\microsoft\internet explorer\menuext\收藏此页到新浪vivi]
[-hkey_current_user\software\microsoft\internet explorer\menuext\新浪搜索]

;中搜寻址
[-hkey_local_machine\software\classes\clsid\{2a0176fe-008b-4706-90f5-bba532a49731}]
[-hkey_local_machine\software\classes\interface\{d1afed83-9133-4660-8c8f-daf1b4a3d5a8}]
[-hkey_local_machine\software\classes\typelib\{e8d3778f-47d3-4f1f-9245-3d46856936e4}]
[-hkey_local_machine\software\classes\snhpr.csnhpr]
[-hkey_local_machine\software\classes\snhpr.csnhpr.1]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{2a0176fe-008b-4706-90f5-bba532a49731}]
[-hkey_local_machine\software\searchnet]
[-hkey_local_machine\system\controlset001\enum\root\legacy_anfad]
[-hkey_local_machine\system\controlset001\enum\root\legacy_fad]
[-hkey_local_machine\system\controlset001\enum\root\legacy_jmediaservice]
[-hkey_local_machine\system\controlset001\services\anfad]
[-hkey_local_machine\system\controlset001\services\eventlog\application\remote log]
[-hkey_local_machine\system\controlset001\services\fad]
[-hkey_local_machine\system\controlset001\services\jmediaservice]
[-hkey_local_machine\system\controlset001\services\remote log]
[-hkey_local_machine\system\currentcontrolset\enum\root\legacy_anfad]
[-hkey_local_machine\system\currentcontrolset\enum\root\legacy_fad]
[-hkey_local_machine\system\currentcontrolset\enum\root\legacy_jmediaservice]
[-hkey_local_machine\system\currentcontrolset\services\anfad]
[-hkey_local_machine\system\currentcontrolset\services\eventlog\application\remote log]
[-hkey_local_machine\system\currentcontrolset\services\fad]
[-hkey_local_machine\system\currentcontrolset\services\jmediaservice]
[-hkey_local_machine\system\currentcontrolset\services\remote log]
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{6a512bf7-ec78-4e8d-9841-6c02e8fa9838}]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"searchnet_up"=-

;rem 好像是开心运程 这个**
[-hkey_local_machine\system\currentcontrolset\services\sdagentservice]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"microsoftredirectionprogram"=-
"res"=-

;rem 易趣购物
[-hkey_local_machine\software\microsoft\internet explorer\extensions\{ee60714f-ac17-427e-861a-fd60cbdf119a}]
[hkey_current_user\software\microsoft\internet explorer\extensions\cmdmapping]
"{ee60714f-ac17-427e-861a-fd60cbdf119a}"=-

;rem msdc32.dll 一个木马  需要安全模式才能清除
[hkey_local_machine\software\microsoft\windows\currentversion\policies\explorer\run]
"ip_sec"=-

;rem 一个广告navihelper.dll
[-hkey_current_user\appid\navihelper.dll]
[-hkey_current_user\navihelper.navihelperobj]
[-hkey_current_user\navihelper.navihelperobj.1]
[-hkey_current_user\clsid\{3e422f49-1566-40d3-b43d-077ef739ac32}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{3e422f49-1566-40d3-b43d-077ef739ac32}]

[hkey_local_machine\software\microsoft\windows\currentversion\run]
"supdate2.dll"=-
[-hkey_classes_root\update2.update2]
[-hkey_classes_root\update2.update2.1]
[-hkey_classes_root\clsid\{ecf9c696-8018-41b4-8dad-cfd1c732dc61}]
[-hkey_classes_root\typelib\{752c3608-0bd6-4035-83d5-6ce383aed6b4}]
[-hkey_classes_root\interface\{c6aad6fd-08d3-47f7-a8a2-1d7ef923dad1}]

;rem 跳跳塘 这个**
;rem 这个**可能不能被删除,请先到进程管理里删除webacc.exe这个进程
[hkey_current_user\software\microsoft\windows\currentversion\run]
"webacc"=-
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"webacc"=-
"mu071c"=-

;rem baigoo 这个** bg
[-hkey_local_machine\software\baigoo]
[-hkey_local_machine\software\classes\appid\{40ef7ccc-71fe-4615-a0ca-d373f8c2ac88}]
[-hkey_local_machine\software\classes\appid\mtsrv.exe]
[-hkey_local_machine\software\classes\baigooex.update]
[-hkey_local_machine\software\classes\baigooex.update.1]
[-hkey_local_machine\software\classes\baigoopm.bhohelper]
[-hkey_local_machine\software\classes\baigoopm.bhohelper.1]
[-hkey_local_machine\software\classes\baigoopm.browserobject]
[-hkey_local_machine\software\classes\baigoopm.browserobject.1]
[-hkey_local_machine\software\classes\bgoobho.status]
[-hkey_local_machine\software\classes\bgoobho.status.1]
[-hkey_local_machine\software\classes\bgoosrv.htmlpaser]
[-hkey_local_machine\software\classes\clsid\{7905958a-18c2-4139-9957-ae6f2b754818}]
[-hkey_local_machine\software\classes\clsid\{7bdaf75a-0d6f-4f50-afe9-333d08df4005}]
[-hkey_local_machine\software\classes\clsid\{808eaf87-61b8-4eea-8b85-27480d1bdbee}]
[-hkey_local_machine\software\classes\clsid\{8816ea7a-5944-4277-b98e-2c0a46fb36e9}]
[-hkey_local_machine\software\classes\typelib\{4a8976fe-144e-4742-8e49-d6cd3b140fd1}]
[-hkey_local_machine\software\classes\typelib\{690e010b-042a-4973-87a8-485deb8bdf68}]
[-hkey_local_machine\software\classes\typelib\{9dc44a38-b772-47f8-a406-054f842ec7c5}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{7bdaf75a-0d6f-4f50-afe9-333d08df4005}]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"bgoomain.exe"=-

;rem yok拦截助手
;navsmall.dll
[-hkey_local_machine\software\classes\clsid\{1bc02872-bc5e-46be-ba76-6b0170fe6bfe}]
[-hkey_local_machine\software\classes\protocols\filter\text/html]
[-hkey_local_machine\software\classes\clsid\{972566b2-93bf-41aa-b06d-5f81db7e38e1}]
[-hkey_local_machine\software\classes\clsid\{c3e2c12d-facf-43bb-be10-b1cdd497bfc9}]
[-hkey_local_machine\software\classes\clsid\{c7fa2a99-d9af-4112-b197-436016c2f72f}]
[-hkey_local_machine\software\classes\clsid\{f869bb38-ffef-4589-b986-610b7ad0ada2}]
[-hkey_local_machine\software\classes\interface\{1a1798cc-9120-40b1-ba68-1d1415973232}]
[-hkey_local_machine\software\classes\interface\{1e69a80b-b19a-49ad-805e-98447883bed3}]
[-hkey_local_machine\software\classes\interface\{3e42acd2-b79d-4495-a6e5-9d972b19d815}]
[-hkey_local_machine\software\classes\interface\{871385f0-7e91-42d4-9b91-cd5611274531}]
[-hkey_local_machine\software\classes\typelib\{261ee951-024f-4903-b880-ada965e72885}]
[-hkey_local_machine\software\classes\typelib\{628508ec-44ab-4990-b751-a3005d28053f}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{972566b2-93bf-41aa-b06d-5f81db7e38e1}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{f869bb38-ffef-4589-b986-610b7ad0ada2}]
[-hkey_local_machine\software\classes\sms.smsobject]
[-hkey_local_machine\software\classes\sms.smsobject.1]
[-hkey_local_machine\software\classes\yokhookadr.httpfilter]
[-hkey_local_machine\software\classes\yokhookadr.httpfilter.1]
[-hkey_local_machine\software\classes\yokhookadr.yokbho]
[-hkey_local_machine\software\classes\yokhookadr.yokbho.1]
[-hkey_local_machine\software\classes\yokhookadr.yokblockadr]
[-hkey_local_machine\software\classes\yokhookadr.yokblockadr.1]
[-hkey_local_machine\software\navsmall]
[-hkey_local_machine\software\yok]
[-hkey_current_user\software\yok]
[-hkey_current_user\software\microsoft\internet explorer\toolbar]
"{1e796980-9cc5-11d1-a83f-00c04fc99d61}"=-
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{972566b2-93bf-41aa-b06d-5f81db7e38e1}]


;rem 不知是什么流氓
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{8d515f39-ebd0-0b9e-6719-2f8d8869aa61}]
[-hkey_classes_root\clsid\{8d515f39-ebd0-0b9e-6719-2f8d8869aa61}]

;rem 不知是什么流氓
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{ce7c3cf0-4b15-11d1-abed-709549c10000}]
[-hkey_classes_root\clsid\{ce7c3cf0-4b15-11d1-abed-709549c10000}]

;rem viptray.exe 千橡这个** ie-bar desktop media
[-hkey_local_machine\software\classes\appid\bhorun.dll]
[-hkey_local_machine\software\classes\appid\delayload.dll]
[-hkey_local_machine\software\classes\appid\{65ef7ad4-1340-4a36-a097-95ff17e243e1}]
[-hkey_local_machine\software\classes\appid\{84d34084-4e38-4683-a4db-ca00646fee8b}]
[-hkey_local_machine\software\classes\bhorun.bhelper]
[-hkey_local_machine\software\classes\bhorun.bhelper.1]
[-hkey_local_machine\software\classes\delayload.loadrun]
[-hkey_local_machine\software\classes\delayload.loadrun.1]
[-hkey_local_machine\software\classes\dmbar.dmbar]
[-hkey_local_machine\software\classes\dmbar.dmbar.1]
[-hkey_local_machine\software\classes\dmbho.browserhelper]
[-hkey_local_machine\software\classes\clsid\{16358834-52fc-4981-9a79-bfece7c08cd3}]
[-hkey_local_machine\software\classes\clsid\{1fca37ba-7259-4bf1-878b-a39fa83bfbbb}]
[-hkey_local_machine\software\classes\clsid\{2d99e8f4-56b7-457b-9a92-61b5d247d263}]
[-hkey_local_machine\software\classes\clsid\{5a6f2f95-3191-433b-8533-eb0b596a7bac}]
[-hkey_local_machine\software\classes\clsid\{f2e37336-bfdb-409b-8d0e-6f013c438b20}]
[-hkey_local_machine\software\classes\interface\{265379db-90f0-45db-9b10-640dcb1145fd}]
[-hkey_local_machine\software\classes\interface\{7eb718dd-e41f-446a-9c1e-757f921168a0}]
[-hkey_local_machine\software\classes\interface\{8c9377d3-d823-46a6-a8ac-b3913f9b6ca2}]
[-hkey_local_machine\software\classes\typelib\{25649a6a-637d-4416-9d03-98146330492a}]
[-hkey_local_machine\software\classes\typelib\{292d202f-e519-45f4-8d50-de8513b87ce9}]
[-hkey_local_machine\software\classes\typelib\{86645afc-0b33-4275-bfe6-fae9fcd886d1}]
[-hkey_local_machine\software\ie-bar]
[-hkey_local_machine\software\microsoft\internet explorer\explorer bars\{1fca37ba-7259-4bf1-878b-a39fa83bfbbb}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{2d99e8f4-56b7-457b-9a92-61b5d247d263}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{f2e37336-bfdb-409b-8d0e-6f013c438b20}]
[-hkey_local_machine\software\sharehelper]
[-hkey_current_user\software\sharehelper]
[-hkey_local_machine\software\sharehelper]
[-hkey_local_machine\system\currentcontrolset\services\viptray]
[-hkey_local_machine\system\currentcontrolset\services\te1net]
[-hkey_current_user\software\microsoft\internet explorer\explorer bars\{1fca37ba-7259-4bf1-878b-a39fa83bfbbb}]

[hkey_local_machine\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"delayrun"=-

;rem chajianhelper
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{0cb66ba8-5e1f-4963-93d1-e1d6b78fe9a2}]

;rem helperservice.dll
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{9e1e1371-9d8f-4421-81b9-f8d2e1773a59}]

;rem wmicsmgr.dll
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"wmicsmgr"=-
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{333872c4-92d6-4396-8542-64ab96518950}]

;smartlinkservice (slservice) - slmdmsr.exe
[-hkey_local_machine\system\currentcontrolset\services\slservice]

;rem 一个什么五笔
[-hkey_local_machine\software\classes\clsid\{ed8dfc5c-10ef-45ab-9dc2-0639aff5a270}]
[-hkey_local_machine\software\classes\interface\{cbc67cd5-855c-4a69-b450-a0508fda5234}]
[-hkey_local_machine\software\classes\typelib\{c0cdc83c-fea7-499f-9be7-a9ab4eaed292}]
[-hkey_local_machine\software\classes\update.bho]
[-hkey_local_machine\software\classes\update.bho.1]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{ed8dfc5c-10ef-45ab-9dc2-0639aff5a270}]

;rem mywebsearch
[-hkey_local_machine\software\classes\clsid\{00a6faf1-072e-44cf-8957-5838f569a31d}]
[-hkey_local_machine\software\classes\clsid\{07b18ea1-a523-4961-b6bb-170de4475cca}]
[-hkey_local_machine\software\classes\clsid\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70}]
[-hkey_local_machine\software\classes\clsid\{147a976f-eee1-4377-8ea7-4716e4cdd239}]
[-hkey_local_machine\software\classes\clsid\{25560540-9571-4d7b-9389-0f166788785a}]
[-hkey_local_machine\software\classes\clsid\{2eff3cf7-99c1-4c29-bc2b-68e057e22340}]
[-hkey_local_machine\software\classes\clsid\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8}]
[-hkey_local_machine\software\classes\clsid\{3e720452-b472-4954-b7aa-33069eb53906}]
[-hkey_local_machine\software\classes\clsid\{53ced2d0-5e9a-4761-9005-648404e6f7e5}]
[-hkey_local_machine\software\classes\clsid\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c}]
[-hkey_local_machine\software\classes\clsid\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9}]
[-hkey_local_machine\software\classes\clsid\{84da4fdf-a1cf-4195-8688-3e961f505983}]
[-hkey_local_machine\software\classes\clsid\{8e6f1832-9607-4440-8530-13be7c4b1d14}]
[-hkey_local_machine\software\classes\clsid\{938aa51a-996c-4884-98ce-80dd16a5c9da}]
[-hkey_local_machine\software\classes\clsid\{98d9753d-d73b-42d5-8c85-4469cda897ab}]
[-hkey_local_machine\software\classes\clsid\{9afb8248-617f-460d-9366-d71cdeda3179}]
[-hkey_local_machine\software\classes\clsid\{9ff05104-b030-46fc-94b8-81276e4e27df}]
[-hkey_local_machine\software\classes\clsid\{a9571378-68a1-443d-b082-284f960c6d17}]
[-hkey_local_machine\software\classes\clsid\{adb01e81-3c79-4272-a0f1-7b2be7a782dc}]
[-hkey_local_machine\software\classes\clsid\{b813095c-81c0-4e40-aa14-67520372b987}]
[-hkey_local_machine\software\classes\clsid\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7}]
[-hkey_local_machine\software\classes\clsid\{cff4ce82-3aa2-451f-9b77-7165605fb835}]
[-hkey_local_machine\software\classes\clsid\{d9fffb27-d62a-4d64-8cec-1ff006528805}]
[-hkey_local_machine\software\classes\funwebproducts.datacontrol]
[hkey_local_machine\software\focusinteractive]
"{07b18ea9-a523-4961-b6bb-170de4475cca}"=-
[-hkey_local_machine\software\microsoft\office\outlook\addins\mywebsearch.outlookaddin]
[-hkey_local_machine\software\microsoft\office\word\addins\mywebsearch.outlookaddin]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{00a6faf1-072e-44cf-8957-5838f569a31d}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{07b18ea1-a523-4961-b6bb-170de4475cca}]

[hkey_local_machine\software\microsoft\windows\currentversion\run]
"mywebsearch email plugin"=-
[-hkey_local_machine\software\mywebsearch]

[hkey_current_user\software\microsoft\internet explorer\urlsearchhooks]
"{00a6faf6-072e-44cf-8957-5838f569a31d}"=-

; rem 开心运程速递 meobjectsdt shwasobj.dll
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{4136c3f6-7636-49bf-a122-d4da53b1addf}]

;rem myiehelper iehelper_****.dll 这个文件名会不停的变化
[-hkey_local_machine\software\classes\clsid\{16a770a0-0e87-4278-b748-2460d64a8386}]
[-hkey_local_machine\software\classes\iehelper.myiehelper]
[-hkey_local_machine\software\classes\iehelper.myiehelper.1]
[-hkey_local_machine\software\classes\interface\{a4bc2506-c00c-4d2e-b47f-0bb4c2c74ccf}]
[-hkey_local_machine\software\classes\typelib\{2511de40-34a3-4c6a-b1b2-c5c92a2f00be}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{16a770a0-0e87-4278-b748-2460d64a8386}]

; rem windirected 傲迅 wmpdrm.dll
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"spoolsv"=-
[-hkey_local_machine\software\classes\appid\wmpdrm.dll]
[-hkey_local_machine\software\classes\clsid\{0e674588-66b7-4e19-9d0e-2053b800f69f}]
[-hkey_local_machine\software\classes\interface\{4a775183-9517-420e-9a13-d3da47bb8a84}]
[-hkey_local_machine\software\classes\typelib\{8b200623-3fc5-4493-8b49-dc2ad4830af4}]
[-hkey_local_machine\software\classes\wmpdrm.cfsbho]
[-hkey_local_machine\software\classes\wmpdrm.cfsbho.1]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{0e674588-66b7-4e19-9d0e-2053b800f69f}]

;rem activebandobject.dll
[-hkey_local_machine\software\classes\activebandobject.activebho]
[-hkey_local_machine\software\classes\activebandobject.activebho.1]
[-hkey_local_machine\software\classes\clsid\{63c55a7f-6e29-8d4f-5c76-4f850f28d13a}]
[-hkey_local_machine\software\classes\interface\{ab6ec1fc-83b0-4ef2-a128-785bafc2a2b5}]
[-hkey_local_machine\software\classes\typelib\{2f80a49b-9fa3-4fa0-a964-4689b0c1b30b}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{63c55a7f-6e29-8d4f-5c76-4f850f28d13a}]

;rem 划词搜索 deskipn.dll
[-hkey_local_machine\software\classes\clsid\{08a312bb-5409-49fc-9347-54bb7d069ac6}]
[-hkey_local_machine\software\classes\interface\{9c1ce329-606f-4c0f-8a85-9c2818878af3}]
[-hkey_local_machine\software\classes\monitorie.monitorurl]
[-hkey_local_machine\software\classes\monitorie.monitorurl.1]
[-hkey_local_machine\software\classes\typelib\{647bb013-e900-473e-bc10-99cf3ac365ad}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{08a312bb-5409-49fc-9347-54bb7d069ac6}]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"desktop"=-
[-hkey_current_user\software\deskadtop]

;winsc.dll luobooshow
[-hkey_local_machine\software\classes\appid\scintruder.dll]
[-hkey_local_machine\software\classes\appid\{35a69597-0e2a-4100-a394-c6f6fc2535b9}]
[-hkey_local_machine\software\classes\clsid\{0d8ca512-282e-4e3f-8970-f5ee879af7fc}]
[-hkey_local_machine\software\classes\clsid\{566cb5f7-d9fa-4b01-8a1a-168f706cbe41}]
[-hkey_local_machine\software\classes\clsid\{86dc8694-aacc-4ce6-b8ec-a75deeda698d}]
[-hkey_local_machine\software\classes\clsid\{9aceee30-143f-471a-aa45-72b061fe7d60}]
[-hkey_local_machine\software\classes\clsid\{c5668031-4bde-43d4-8766-8e9aac16c56e}]
[-hkey_local_machine\software\classes\clsid\{ded96f80-2b97-407c-8e09-d7233448753f}]
[-hkey_local_machine\software\classes\interface\{172754b5-06e9-49d4-b1e0-7d821e23c5e8}]
[-hkey_local_machine\software\classes\interface\{1b631ef9-ebd4-4828-abb2-1afb96e2ea4e}]
[-hkey_local_machine\software\classes\interface\{36f305a9-4451-4fdf-9274-28f21e2a2f14}]
[-hkey_local_machine\software\classes\interface\{b513a7fc-bc53-4077-abe3-5bd321af651d}]
[-hkey_local_machine\software\classes\interface\{bcc53a8c-67a7-4e8f-b971-d4668d1a7423}]
[-hkey_local_machine\software\classes\interface\{c88fd25f-8d53-4e99-aea0-18f22801ce8c}]
[-hkey_local_machine\software\classes\interface\{d1f6e94e-8ea1-4ec8-914c-138bc55ae104}]
[-hkey_local_machine\software\classes\newwebcontroller.intruder]
[-hkey_local_machine\software\classes\newwebcontroller.intruder.1]
[-hkey_local_machine\software\classes\scintruder.documenteventshandler]
[-hkey_local_machine\software\classes\scintruder.documenteventshandler.1]
[-hkey_local_machine\software\classes\scintruder.magazines]
[-hkey_local_machine\software\classes\scintruder.magazines.1]
[-hkey_local_machine\software\classes\scintruder.service]
[-hkey_local_machine\software\classes\scintruder.service.1]
[-hkey_local_machine\software\classes\scintruder.settings]
[-hkey_local_machine\software\classes\scintruder.settings.1]
[-hkey_local_machine\software\classes\scintruder.windoweventshandler]
[-hkey_local_machine\software\classes\scintruder.windoweventshandler.1]
[-hkey_local_machine\software\classes\typelib\{5cd75223-e010-4be9-9027-7a53533ea4f6}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{9aceee30-143f-471a-aa45-72b061fe7d60}]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"msservice_v1.0"=-
[hkey_current_user\software\microsoft\windows\currentversion\run]
"luobooshow"=-
[-hkey_local_machine\software\scintruder]

;rem caishow
[-hkey_local_machine\software\caishow]
[-hkey_local_machine\software\classes\appid\browerhelpermfc.dll]
[-hkey_local_machine\software\classes\appid\download.dll]
[-hkey_local_machine\software\classes\appid\mmsfactory.dll]
[-hkey_local_machine\software\classes\appid\mmssend.dll]
[-hkey_local_machine\software\classes\appid\ssoaddionalindical.dll]
[-hkey_local_machine\software\classes\appid\{18e8c855-ff2e-4beb-b9d2-e7b25af92a48}]
[-hkey_local_machine\software\classes\appid\{22a36e6e-07cb-4851-aa84-5fc1ca73a1de}]
[-hkey_local_machine\software\classes\appid\{37bc804e-e26b-4d09-836f-ac15fc0c253e}]
[-hkey_local_machine\software\classes\appid\{88abd365-12ae-44e7-8450-da5c3653325b}]
[-hkey_local_machine\software\classes\appid\{f375f726-23d3-4179-9ca2-54fe6e490879}]
[-hkey_local_machine\software\classes\appid\{fbb4d7ba-ccd3-457d-beff-f3b1757bd6b1}]
[-hkey_local_machine\software\classes\browerhelpermfc.caishowbh]
[-hkey_local_machine\software\classes\browerhelpermfc.caishowbh.1]
[-hkey_local_machine\software\classes\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{3c78b8e2-6c4d-11d1-ade2-0000f8754b99}]
[-hkey_local_machine\software\classes\clsid\{0e6e0b51-0300-4ae2-b6c4-f4efe33a33b2}]
[-hkey_local_machine\software\classes\clsid\{32f64094-a155-4554-8753-e5e267a8c002}]
[-hkey_local_machine\software\classes\clsid\{3af40cb8-b3ba-4e2d-8968-4bf8db172997}]
[-hkey_local_machine\software\classes\clsid\{3c78b8e2-6c4d-11d1-ade2-0000f8754b99}]
[-hkey_local_machine\software\classes\clsid\{5673a7c0-95cc-4646-bb07-3bd71234cef9}]
[-hkey_local_machine\software\classes\clsid\{6abb6c58-feb7-43ae-946a-af05d074f493}]
[-hkey_local_machine\software\classes\clsid\{dd6c4862-4bf9-48ce-bd27-9838e30d3dd5}]
[-hkey_local_machine\software\classes\download.download]
[-hkey_local_machine\software\classes\download.download.1]
[-hkey_local_machine\software\classes\interface\{315420b2-e5c8-4e7b-b812-6676ba4f30ce}]
[-hkey_local_machine\software\classes\interface\{6ca6de10-8705-4e1b-9117-bcfa5bece14b}]
[-hkey_local_machine\software\classes\interface\{ce98ad53-16f1-48d3-9208-1203aa19f77e}]
[-hkey_local_machine\software\classes\interface\{d32d8a55-a21a-4237-b8bb-5a5ebee6746d}]
[-hkey_local_machine\software\classes\interface\{dbd14208-5f2f-40b8-8d97-6de44c1d2e3d}]
[-hkey_local_machine\software\classes\interface\{f6ce85c8-99e7-49f5-a1a2-03ffc4ff09a5}]
[-hkey_local_machine\software\classes\mmsfactory.send]
[-hkey_local_machine\software\classes\mmsfactory.send.1]
[-hkey_local_machine\software\classes\mmssend.send]
[-hkey_local_machine\software\classes\mmssend.send.1]
[-hkey_local_machine\software\classes\my.netaccelerate]
[-hkey_local_machine\software\classes\ssoaddionalindical.identify]
[-hkey_local_machine\software\classes\ssoaddionalindical.identify.1]
[-hkey_local_machine\software\classes\typelib\{1f805a43-0e95-4245-8eaf-9271d520722a}]
[-hkey_local_machine\software\classes\typelib\{73d53d7b-66df-419b-9b44-cf3f42adf5c9}]
[-hkey_local_machine\software\classes\typelib\{864f198d-6568-4686-b4f5-4a970b85e58b}]
[-hkey_local_machine\software\classes\typelib\{89a99589-82b0-4983-a882-e8d8db3da5c7}]
[-hkey_local_machine\software\classes\typelib\{cebe027d-5423-41b8-af51-9f1c22557cc6}]
[-hkey_local_machine\software\classes\typelib\{d0581d47-e3cb-402d-b8a6-5f8561b2a36c}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{3af40cb8-b3ba-4e2d-8968-4bf8db172997}]
[-hkey_current_user\software\microsoft\internet explorer\menuext\用炫彩图铃发送该图片]
[hkey_current_user\software\microsoft\windows\currentversion\run]
"caishowmanage"=-

;rem 酷桌面 letscool.exe coolbho.dll 
[-hkey_local_machine\software\letscool]
[-hkey_local_machine\software\microsoft\windows\currentversion\app paths\letscool.exe]
[hkey_current_user\software\microsoft\windows\currentversion\run]
"letscool"=-
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"letscool"=-
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{f0c15012-7dbd-4068-95a2-0a82db03ac35}]

;rem schedule sscli.dll
[-hkey_local_machine\software\classes\at.helper]
[-hkey_local_machine\software\classes\at.helper.1]
[-hkey_local_machine\software\classes\clsid\{8b316da1-9950-4926-b9ea-1aec124afa45}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{8b316da1-9950-4926-b9ea-1aec124afa45}]

;rem 青娱
[-hkey_local_machine\software\classes\*\shellex\contextmenuhandlers\qylupload]
[-hkey_local_machine\software\classes\clsid\{083863f1-70de-11d0-bd40-00a0c911ce86}\instance\{eb86a239-96d9-4f34-bccd-e1e13d09577b}]
[-hkey_local_machine\software\classes\clsid\{2236fab7-7bdd-4187-831b-c7d809ca2e24}]
[-hkey_local_machine\software\classes\clsid\{53ae3f49-4985-4245-9afe-2d3a14dcf7cd}]
[-hkey_local_machine\software\classes\clsid\{81b5c8fe-07bd-4020-b299-79c0be1a3946}]
[-hkey_local_machine\software\classes\clsid\{e70fe57a-19aa-4a4c-b39a-408d49d73851}]
[-hkey_local_machine\software\classes\clsid\{eb86a239-96d9-4f34-bccd-e1e13d09577b}]
[-hkey_local_machine\software\classes\clsid\{ec987c58-81a2-4d2c-993d-d0e1945d7e7c}]
[-hkey_local_machine\software\classes\clsid\{f349a88e-33cf-46e7-8091-6ef28491168d}]
[-hkey_local_machine\software\classes\contextmenu.upload]
[-hkey_local_machine\software\classes\contextmenu.upload.1]
[-hkey_local_machine\software\classes\interface\{0775f38b-6cf8-40b1-9a9d-43e6bff4660d}]
[-hkey_local_machine\software\classes\interface\{60f02175-7f65-4f3b-ac6b-cb842b921ecd}]
[-hkey_local_machine\software\classes\interface\{82044df3-e304-4034-b16d-2d5a83979744}]
[-hkey_local_machine\software\classes\interface\{a188d411-8ed2-487e-9d25-2eaca8330956}]
[-hkey_local_machine\software\classes\interface\{a32c5a11-aa68-4d61-8217-0953f704d3ca}]
[-hkey_local_machine\software\classes\interface\{bdd8a4e1-b6ee-4c4e-b6da-0a1e627477dd}]
[-hkey_local_machine\software\classes\interface\{e9dc930a-4ac3-4eed-98ab-e2097edbace9}]
[-hkey_local_machine\software\classes\qyule.rmplayer]
[-hkey_local_machine\software\classes\qyule.wmplayer.9]
[-hkey_local_machine\software\classes\qyuleplayer.qyuleplayerctrl.1]
[-hkey_local_machine\software\classes\typelib\{72db4bf2-6c70-4297-857c-4b2d9e1f452c}]
[-hkey_local_machine\software\classes\typelib\{8f3b47e6-31ba-4089-8c23-683526e67984}]
[-hkey_local_machine\software\classes\typelib\{905aa0ba-a402-4f56-9e39-3817edd89786}]
[-hkey_local_machine\software\classes\typelib\{9ad54178-e7ae-4528-a79d-48d7e79202ee}]
[hkey_local_machine\software\microsoft\windows\currentversion\run]
"clientqyule"=-
[hkey_current_user\software\microsoft\windows\currentversion\run]
"clientqyule"=-
[-hkey_current_user\software\qyule]
[-hkey_current_user\software\smartclient]

;kuaiso toolsbar
[-hkey_local_machine\software\classes\clsid\{6d53adb7-6ad5-4a59-bfe4-7b57d2f4aa89}]
[-hkey_local_machine\software\classes\clsid\{b07d1f6b-6b8c-4904-8ee8-5e5a2b4624b3}]
[-hkey_local_machine\software\classes\typelib\{d57df8cf-66b7-412c-a7d1-64b5f5f7fe27}]
[-hkey_local_machine\software\classes\toolband.xbtp03129]
[-hkey_local_machine\software\classes\toolband.xbtp03129.1]
[-hkey_local_machine\software\classes\xbtb03129.ietoolbar]
[-hkey_local_machine\software\classes\xbtb03129.ietoolbar.1]
[-hkey_local_machine\software\classes\xbtb03129.xbtb03129]
[-hkey_local_machine\software\classes\xbtb03129.xbtb03129.1]
[hkey_local_machine\software\microsoft\internet explorer\toolbar]
"{6d53adb7-6ad5-4a59-bfe4-7b57d2f4aa89}"=-
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{b07d1f6b-6b8c-4904-8ee8-5e5a2b4624b3}]
[hkey_current_user\software\microsoft\internet explorer\toolbar\webbrowser]
"{6d53adb7-6ad5-4a59-bfe4-7b57d2f4aa89}"=-
[hkey_current_user\software\microsoft\internet explorer\urlsearchhooks]
"{6d53adb7-6ad5-4a59-bfe4-7b57d2f4aa89}"=-
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{6d53adb7-6ad5-4a59-bfe4-7b57d2f4aa89}]
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{b07d1f6b-6b8c-4904-8ee8-5e5a2b4624b3}]
[-hkey_current_user\software\xbtb03129]

;rem bbmao
[-hkey_local_machine\software\classes\clsid\{6ae02e1c-8859-4f57-9097-5a55a56a4caf}]
[-hkey_local_machine\software\classes\clsid\{72ba415a-ae03-4279-acab-39a3df73fd4e}]
[-hkey_local_machine\software\classes\typelib\{68a7c985-87d6-4635-b498-3290613c718e}]
[-hkey_local_machine\software\classes\toolband.xbtp05676]
[-hkey_local_machine\software\classes\toolband.xbtp05676.1]
[-hkey_local_machine\software\classes\xbtb05676.ietoolbar]
[-hkey_local_machine\software\classes\xbtb05676.ietoolbar.1]
[-hkey_local_machine\software\classes\xbtb05676.xbtb05676]
[-hkey_local_machine\software\classes\xbtb05676.xbtb05676.1]
[hkey_local_machine\software\microsoft\internet explorer\toolbar]
"{6ae02e1c-8859-4f57-9097-5a55a56a4caf}"=-
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{72ba415a-ae03-4279-acab-39a3df73fd4e}]
[hkey_local_machine\software\microsoft\windows\currentversion\internet settings\user agent\post platform]
"bbmao toolbar"=-
[hkey_current_user\software\microsoft\internet explorer\toolbar\webbrowser]
"{6ae02e1c-8859-4f57-9097-5a55a56a4caf}"=-
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{6ae02e1c-8859-4f57-9097-5a55a56a4caf}]
[-hkey_current_user\software\microsoft\windows\currentversion\ext\stats\{72ba415a-ae03-4279-acab-39a3df73fd4e}]
[-hkey_current_user\software\bbmao]
[-hkey_current_user\software\xbtb05676]

;rem nb46 smflash.ocx 好像需要安全模式
[-hkey_local_machine\software\classes\clsid\{1a50bdd0-01a6-4d58-958b-b9bc66789327}]
[-hkey_local_machine\software\classes\clsid\{56e88004-7af8-474c-bb30-76e0b7b2b003}]
[-hkey_local_machine\software\classes\interface\{a09b9056-f52e-413f-ae1d-5371dfe0d7b9}]
[-hkey_local_machine\software\classes\nb46toolbar.conb46bho]
[-hkey_local_machine\software\classes\typelib\{f3e2c17e-e43f-4ad8-9232-15f33f95e044}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{1a50bdd0-01a6-4d58-958b-b9bc66789327}]
[-hkey_local_machine\software\classes\clsid\{14a21378-5bb1-4bc4-95d5-5d3f51527f6f}]
[-hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{14a21378-5bb1-4bc4-95d5-5d3f51527f6f}]