恶意软件\垃圾流氓通用反删除批处理文件

技术  /  管理员 发布于 7年前   196

使用方法:

1关闭浏览器
2执行un3721.bat
3再执行un3721.reg
4重启电脑,基本上的垃圾都删除了
5如果还有少量,重启电脑进安全模式操作,或看.bat文件里的帮助注释,
un3721.bat
复制代码 代码如下:
rem 砍掉一切流氓,让我们静待互联网的春天 ~_~
rem 各取所需,根据自己要求修改(有的人还觉得某个流氓好就留着*_*)
rem 如果跳出选择框,选择全部卸载
rem 有些**需要在安全模式下才能卸载,有些不好卸载请看里面的帮助
rem 现在的流氓越来越超级,已经超过批处理的能力极限,只有借助一些别的软件,推荐使用http://ccollomb.free.fr/unlocker一起删除超级**

rem 砍掉3721 kao 把好多的电脑弄惨了
if exist C:\PROGRA~1\3721\Assist\asbar.dll rundll32.exe C:\PROGRA~1\3721\Assist\asbar.dll,RunSettings -uninstall
if exist %windir%\downlo~1\CnsMin.dll rundll32.exe %windir%\downlo~1\CnsMin.dll,RunSettings -uninstall
if exist %windir%\downlo~1\CnsMin.dll rundll32.exe %windir%\downlo~1\CnsMin.dll,ControlPanel
regsvr32 /u /s %windir%\downlo~1\CnsMin.dll

regsvr32 /u /s C:\PROGRA~1\3721\Assist\asbar.dll
regsvr32 /u /s C:\PROGRA~1\3721\helper.dll
regsvr32 /u /s C:\PROGRA~1\YiSou\yisou.dll

rem 砍掉yahoo猪手,把好多的电脑弄惨
regsvr32 /u /s C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll
regsvr32 /u /s C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yphtb.dll
regsvr32 /u /s C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yangling.dll
regsvr32 /u /s C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\YDRAGS~1.DLL
rem 新版的 猪手 根本不能选择卸载,***
if exist C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll rundll32 C:\PROGRA~1\Yahoo!\ASSIST~1\Assist\yasbar.dll,UnInstall

rem 彩信通 又一个超级的**产生了
rem 想办法删除 %windir%\system32\drivers\Albus.SYS 这个万恶不赦的文件,才能彻底清理这个门户
rem 推荐使用 DOS 启动电脑,找到C盘 这个万恶不赦的文件 删除
rem 或者使用 http://ccollomb.free.fr/unlocker 删除,删除后可能造成系统不稳定,重启电脑执行2个批处理,再重启
regsvr32 /u /s C:\PROGRA~1\MMSASS~1\MMSASS~1.DLL
if exist C:\PROGRA~1\MMSASS~1\mmsass~1.dll rundll32.exe C:\PROGRA~1\MMSASS~1\mmsass~1.dll,Uninstall
if exist %windir%\System32\stdup.dll rundll32.exe %windir%\System32\stdup.dll,Uninstall
regsvr32 /u /s %windir%\system32\stdup.dll
regsvr32 /u /s %windir%\system32\STDSVER.DLL
regsvr32 /u /s %windir%\system\stdup.dll
regsvr32 /u /s %windir%\system\STDSVER.DLL
del %windir%\system32\drivers\Albus.SYS /q /f
del %windir%\system32\Albus.DAT /q /f
del %windir%\system32\almms.dat /q /f
del %windir%\system32\alsmt.exe /q /f
del C:\PROGRA~1\MMSASS~1\MMSASS~1.DLL /q /f
rem internet explorer helper
regsvr32 /u /s %windir%\fonts\msshapi.dll

rem 划词 huaci 又是一个走上不归路的超级**
rem 这个**需要重启电脑,再次执行两个批处理文件操作才能被删除
C:\PROGRA~1\HuaCi\huaci\mUin.exe
C:\PROGRA~1\wsearch\mUnInstall.exe
%windir%\system32\msibm\Uninstall.exe
%windir%\system\msibm\Uninstall.exe
del %windir%\system32\drivers\abhcop.sys /q /f
del %windir%\system32\DRIVERS\hcalway.sys /q /f

rem Baidu这个**,**越来越超级,Baid* 也不例外
;rem需要安全模式,或者想办法删除 %windir%\system32\drivers\BDGuard.SYS 这个文件才能卸载这个**
if exist C:\PROGRA~1\baidu\bar\BaiduBar.dll rundll32.exe C:\PROGRA~1\baidu\bar\BaiduBar.dll,Uninstall
regsvr32 /u /s %windir%\DOWNLO~1\BDSrHook.dll
regsvr32 /u /s %windir%\DOWNLO~1\BDHelper.dll
regsvr32 /u /s %windir%\DOWNLO~1\BDPlugin.dll
regsvr32 /u /s C:\PROGRA~1\Baidu\Bar\BaiduBar.dll
regsvr32 /u /s "C:\Program Files\Common Files\Baidu\Disk Search\dsie.dll"
if exist %windir%\DOWNLO~1\BDHelper.dll rundll32.exe %windir%\DOWNLO~1\BDHelper.dll,DllRemove
del %windir%\system32\drivers\BDGuard.SYS /q /f
del %windir%\system32\BDGuard.DAT /q /f
del %windir%\system32\BDGuardS.DAT /q /f
del C:\PROGRA~1\baidu\bar\BaiduBar.dll

rem windirected 傲迅 wmpdrm.dll
rem 这个**卸载需在安全模式下进行,或终止explorer.exe,taskmgr.exe,输入法等进程只留基本进程,在CMD窗口中执行批处理可卸载
%windir%\system32\spoolsv\spoolsv.exe -uninst
regsvr32 /u /s %windir%\system32\wmpdrm.dll
del %windir%\system32\spoolsv\spoolsv.exe /q /f
rem 为了98
%windir%\system\spoolsv\spoolsv.exe -uninst
regsvr32 /u /s %windir%\system\wmpdrm.dll
del %windir%\system\spoolsv\spoolsv.exe /q /f

rem 删除QQ搜索 这个 **
regsvr32 /u /s C:\PROGRA~1\TENCENT\AddrPlus\IEHelp.dll
regsvr32 /u /s C:\PROGRA~1\TENCENT\AddrPlus\IEHelp1.dll
regsvr32 /u /s C:\PROGRA~1\TENCENT\AddrPlus\scrax.dll
regsvr32 /u /s C:\PROGRA~1\TENCENT\AddrPlus\TCtrl.dll
C:\PROGRA~1\TENCENT\Adplus\stup.exe C:\PROGRA~1\TENCENT\Adplus\SSAddr1.dll Uninstall
C:\PROGRA~1\TENCENT\Adplus\stup.exe C:\PROGRA~1\TENCENT\Adplus\SSAddr.dll Uninstall

rem 删除 DUDU 搜索条 这个 **
regsvr32 /u /s C:\PROGRA~1\DuDu\DddClient\dddiemon.dll
regsvr32 /u /s C:\PROGRA~1\DuDu\DddClient\dddmext.dll

rem 删除Accoona 这个 **
regsvr32 /u /s C:\PROGRA~1\Accoona\AToolbarCN.dll
regsvr32 /u /s C:\PROGRA~1\Accoona\atoolbar.dll
regsvr32 /u /s C:\PROGRA~1\Accoona\ASearchAssist.dll

rem 删除xBar
regsvr32 /u /s C:\PROGRA~1\xBar\xBarHelper.dll

regsvr32 /u /s %windir%\System32\xunleibho_v8.dll
rem 为了98
regsvr32 /u /s %windir%\System\xunleibho_v8.dll

rem Schedule sscli.dll
regsvr32 /u /s %windir%\System32\sscli.dll

rem 删除 henbang 很棒   **
regsvr32 /u /s C:\PROGRA~1\pcast\hbcast.dll
regsvr32 /u /s C:\PROGRA~1\HBClient\hapast.dll
regsvr32 /s /u C:\PROGRA~1\yehoo\hbyehoo.dll
regsvr32 /s /u C:\PROGRA~1\yehoo\tbyehoo.dll
regsvr32 /s /u %windir%\DOWNLO~1\HTHelper.dll

rem 库站 多多QQ表情 9991.com51.com 超级**
regsvr32 /u /s C:\PROGRA~1\CoolWebsite\QuickLink.dll
"C:\Program Files\Common Files\update\update.exe" -kill1
C:\PROGRA~1\CoolWebsite\uninst.exe
rem 最好安全模式操作,或者需要终止一个rundll32.exe %windir%\system32\wbem\IRJIT.dll 的进程
del %windir%\system32\wbem\IRJIT.dll /q /f

rem cfsbho.dll
regsvr32 /u /s %windir%\system32\msibm\cfsbho.dll
rem 为了98
regsvr32 /u /s %windir%\system\msibm\cfsbho.dll

rem 划词搜索 DeskAdTop\deskipn.dll
regsvr32 /u /s C:\PROGRA~1\DESKAD~1\deskipn.dll
C:\PROGRA~1\DESKAD~1\DeskUn.exe

rem 删除桌面传媒 IE-BAR 这个**
MsiExec.exe /I{FE41A479-E056-40A5-982C-D149B5D6712D}
regsvr32 /u /s "C:\Program Files\Desktop Media\Cast\dmbar.dll"
regsvr32 /u /s "C:\Program Files\Common Files\IE-Bar\dmbar.dll"
"C:\Program Files\Common Files\IE-Bar\uninstall.exe"
regsvr32 /u /s %windir%\DOWNLO~1\lund.dll
regsvr32 /u /s "C:\Program Files\IE-BAR\Cast\dmbar.dll"
rem 这个**可能不能被删除,请先到进程管理里删除VIPTray.exe这个进程
regsvr32 /u /s %windir%\system32\IEHelper.dll
regsvr32 /u /s %windir%\system32\WinDefendor.dll
rem 这个名字会不停的变化 **
regsvr32 /u /s %windir%\system\cb7o2470.dll
rem 为了98
regsvr32 /u /s %windir%\system\IEHelper.dll
regsvr32 /u /s %windir%\system\WinDefendor.dll

MsiExec.exe /I{3D554C17-ED16-448A-B3CE-6FBC51FFB705}

rem 中搜寻址 这个 **
regsvr32 /u /s "C:\Program Files\SearchNet\SNHpr.dll"
"C:\Program Files\SearchNet\UnInstall.exe"

rem 百狗**
C:\PROGRA~1\baigoo\mtsrv.exe -UnregServer
regsvr32 /u /s C:\PROGRA~1\baigoo\bgook.dll
regsvr32 /u /s C:\PROGRA~1\baigoo\bgooex.dll
regsvr32 /u /s C:\PROGRA~1\baigoo\BGooHK.dll
regsvr32 /u /s C:\PROGRA~1\baigoo\BGooBHO.dll
C:\PROGRA~1\baigoo\uninst.exe

rem 搜狗
C:\PROGRA~1\P4P\Uninstall.exe

regsvr32 /u /s "C:\Program Files\ScanToolbar\ScanBar.dll"
C:\PROGRA~1\ScanToolbar\uninst.exe

%windir%\system32\unsocul.exe
rem 为了98
%windir%\system\unsocul.exe

rem 点点通
if exist %windir%\DOWNLO~1\DDTINIT.DLL rundll32.exe %windir%\DOWNLO~1\DDTINIT.DLL,Uninstall

rem Radiate Advertising
%windir%\system32\MSIPCSV.EXE -uninstall -all
rem 为了98
%windir%\system\MSIPCSV.EXE -uninstall -all

rem RoomSetUPcd ads
if exist %windir%\system32\cd_clint.dll rundll32 %windir%\system32\cd_clint.dll,ServiceRunDll u_281
rem 为了98
if exist %windir%\system\cd_clint.dll rundll32 %windir%\system\cd_clint.dll,ServiceRunDll u_281

rem 一个什么五笔
regsvr32 /u /s C:\PROGRA~1\COMMON~1\Wnwb\wnwbio.dll

rem wmicsmgr.dll
regsvr32 /u /s %windir%\system32\wmicsmgr.dll
regsvr32 /u /s %windir%\system\wmicsmgr.dll

rem 一个广告Navihelper.dll
regsvr32 /u /s %windir%\system32\Navihelper.dll
regsvr32 /u /s %windir%\system\Navihelper.dll
del %windir%\system32\host.dat /q /f

rem 好像是一个木马
regsvr32 /u /s %windir%\system32\RAdminl.dll
rem 为了98
regsvr32 /u /s %windir%\system\RAdminl.dll

rem 跳跳塘
rem 这个**可能不能被删除,请先到进程管理里终止webacc.exe这个进程
%windir%\system32\wbauninstall.exe
regsvr32 /u /s %windir%\system32\webacc.dll
regsvr32 /u /s %windir%\Downlo~1\c8s.dll
rem 为了98
%windir%\system\wbauninstall.exe
regsvr32 /u /s %windir%\system\webacc.dll

rem 好像什么便民
regsvr32 /u /s C:\PROGRA~1\xm\tbu3\xm.dll

rem 易趣购物
del %windir%\ebaylink.ico /q /f

rem msdc32.dll 一个木马  需要安全模式才能清除
del C:\PROGRA~1\COMMON~1\system\msdc32.dll /q /f
del %windir%\ .exe /q /f /as /ar /ah

rem YOK拦截助手
regsvr32 /u /s C:\PROGRA~1\YOK.com\BlockAdr\yokhad.dll
regsvr32 /u /s C:\PROGRA~1\YOK.com\SUPERS~1\YOK_SuperSearch.dll
regsvr32 /u /s %windir%\system32\Navsmall.dll
regsvr32 /u /s %windir%\system\Navsmall.dll
C:\PROGRA~1\YOK.com\BlockAdr\Uninst.exe

rem 不知是什么流氓
regsvr32 /u /s %windir%\DOWNLO~1\vevnli.dll

rem ChajianHelper
regsvr32 /u /s %windir%\system32\SYSREA~1.DLL
regsvr32 /u /s %windir%\system\SYSREA~1.DLL

rem 不知是什么流氓
regsvr32 /u /s %windir%\system32\HelperService.dll
regsvr32 /u /s %windir%\system\HelperService.dll

regsvr32 /u /s %windir%\system32\mshlp.dll
regsvr32 /u /s %windir%\system\mshlp.dll

rem MyWebSearch 这个**,这个**产生的目录根本不定
if exist rundll32 C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsbar.dll rundll32 C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsbar.dll,O

rem 开心运程速递 
regsvr32 /u /s %windir%\system32\obwbkya.dll
rem 为了98
regsvr32 /u /s %windir%\system\obwbkya.dll

regsvr32 /u /s %windir%\system32\shwasobj.dll
rem 为了98
regsvr32 /u /s %windir%\system\shwasobj.dll
C:\PROGRA~1\SDAstro\Uninst.exe

rem 这个文件名会不停的变化
regsvr32 /u /s C:\Docume~1\AllUse~1\Applic~1\Microsoft\IEHelper\IEHelper200631_8913.dll

rem Luobooshow
regsvr32 /u /s %windir%\system32\WinSC.dll
regsvr32 /u /s %windir%\system\WinSC.dll

rem caishow
regsvr32 /u /s "C:\Program Files\CaiShow Tech\CaiShow\BrowerHelper.dll"
regsvr32 /u /s %windir%\system32\wuwebex.dll
regsvr32 /u /s %windir%\system\wuwebex.dll

rem 酷桌面
regsvr32 /u /s %windir%\system32\CoolBho.dll
regsvr32 /u /s %windir%\system\CoolBho.dll

rem 青娱
regsvr32 /u /s %windir%\system\QYLWMP~1.OCX
regsvr32 /u /s %windir%\system\QYLRMP~1.OCX
regsvr32 /u /s %windir%\system\contextmenu.dll
regsvr32 /u /s C:\PROGRA~1\Qyule\\QYULEP~1.OCX
regsvr32 /u /s C:\PROGRA~1\Qyule\\dvfilter.ax
C:\PROGRA~1\Qyule\unins000.exe

rem NB46.com  smflash.ocx 好像需要安全模式
regsvr32 /u /s "C:\Program Files\nb46.com\NB46Toolbar.dll"
regsvr32 /u /s %windir%\system32\smflash.ocx
regsvr32 /u /s %windir%\system\smflash.ocx

rem kuaiso toolsbar
regsvr32 /u /s "C:\Program Files\Micrsoft SearchBar\SearchBar.dll"

rem bbmao
regsvr32 /u /s "C:\Program Files\bbmao Toolbar\bbmao_tb_v1_0.dll"


rem 删除CDN 这个 **
regsvr32 /u /s C:\PROGRA~1\CNNIC\Cdn\wmhlpr.dll
regsvr32 /u /s C:\PROGRA~1\CNNIC\Cdn\iesrch.dll
regsvr32 /u /s C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll
regsvr32 /u /s C:\PROGRA~1\CNNIC\Cdn\cdniehlp.dll
regsvr32 /u /s C:\PROGRA~1\CNNIC\Cdn\cdnforie.dll
regsvr32 /u /s %windir%\system32\cdnns.dll
regsvr32 /u /s %windir%\System32\jklpif.dll
rem 为了98
regsvr32 /u /s %windir%\system\cdnns.dll
regsvr32 /u /s %windir%\System\jklpif.dll
rem CNNIC的反安装这里可能不好完全卸载,请单独到控制面板里"添加/删除"里卸载,或找到C:\PROGRA~1\CNNIC\Cdn\cdnunins.exe单独执行
C:\PROGRA~1\CNNIC\Cdn\cdnunins.exe


un3721.reg
复制代码 代码如下:
REGEDIT4

;rem 砍掉一切流氓,让我们静待互联网的春天 ~_~
;rem 各取所需,根据自己要求修改(有的人还觉得某个流氓好就留着*_*)
;rem 如果跳出选择框,选择全部卸载
;rem 有些**需要在安全模式下才能卸载,有些不好卸载请看里面的帮助
;rem 现在的流氓越来越超级,已经超过批处理的能力极限,只有借助一些别的软件,推荐使用http://ccollomb.free.fr/unlocker一起删除超级**

;rem 砍掉3721 kao 把好多的电脑弄惨了
;rem 砍掉yahoo猪手,把好多的电脑弄惨
;rem 新版的 猪手 根本不能选择卸载,***,这里可以被卸载的
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\粉碎文件]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.zschk]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Angling.AntiFish]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Angling.AntiFish.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Assist.EasyAssist]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AutoLive.Live]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AutoLive.Live.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{141A5E19-BDCB-4E27-A3D7-9E16503BC05B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ADKiller.ADKillerObj]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ADKiller.ADKillerObj.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B0E7716-898E-48CC-9690-4E338E8DE1D3}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{38928D50-8A48-44C2-945F-D2F23F771410}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CA83CF1-3AEA-42D0-A4E3-1594FC6E48B2}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9EB2B422-C9EE-46C4-A471-1E79C7517B1D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ABEC6103-F6AC-43A3-834F-FB03FBA339A2}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B83FC273-3522-4CC6-92EC-75CC86678DA4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BB936323-19FA-4521-BA29-ECA6A121BC78}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D157330A-9EF3-49F8-9A67-4141AC41ADD4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsHelper.CH]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsMinHK.CnsHook]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsMinHK.CnsHook.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CoolBar.CoolBarObj]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CoolBar.CoolBarObj.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FFlash.FlashObjectInterface]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FFlash.FlashObjectInterface.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{172862CD-9D35-40E7-BAF2-BA7ECF043B9C}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1BB0ABBE-2D95-4847-B9D8-6F90DE3714C1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D10645F-A553-426E-9923-C3ABF846EA41}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{48E688C8-609F-4B08-944E-3C7FAB99CD08}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7436DB12-1A7A-4D87-A4E0-713EC9D86050}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{924F5B3A-7A27-484A-B873-E855C9708667}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BE08F6BC-C3E6-4149-BEB1-CB449E1B372E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C3A9F7F8-8862-496A-B8A4-25D4140B7DBC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D27CDB6D-AE6D-11CF-96B8-444553540000}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{19069804-2CF0-4357-B696-BA6E9AAD99EF}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4158DB95-DE71-41FF-BEA1-2C3D1C679DF1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{7354662F-CAA3-448B-BC01-04F55A2DCA35}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{95A9BBCA-4EC1-4A9E-91AA-1D9633C38D0E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A5ADEAE7-A8B4-4F94-9128-BF8D8DB5E927}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{AAB6BCE3-1DF6-4930-9B14-9CA79DC8C267}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{D4839331-534D-4D0C-875F-D25AF6A10CCC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F97E75A4-0103-4F27-A752-327B600B1130}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ZsMod.AxObj]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ZsMod.AxObj.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{17F1C8E8-B99B-4D85-927B-A0EE7290455A}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19CE93DE-8334-42C6-B2CA-BFE3DF5196A3}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1C2EDD19-C2D5-4234-9339-785E5885B84D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2283BB66-A15D-4AC8-BA72-9C8C9F5A1691}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33BBE430-0E42-4F12-B075-8D21ACB10DCB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{38928D50-8A48-44C2-945F-D2F23F771410}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{406F94F0-504F-4a40-8DFD-58B0666ABEBD}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4558FA8B-C683-4BD9-BB43-90E086A4C113}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B57D035-8A78-4E5A-82DF-FD5DEE51E578}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4EBCAF82-5BE7-4FC5-938F-9CD284587139}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4F2C1A0A-622E-4D23-9870-6FB6D109C170}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{55C32FB0-B5DE-432D-B143-7CA84EA3F888}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57421194-58FB-49AE-9B4F-FD48869B9AD4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59E99ADD-E926-40e8-BD6F-1532124A4AAA}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{62EED7C6-9F02-42f9-B634-98E2899E147B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6940DBA6-CEBB-46B6-8058-CB358295BCCC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A915D6B-B187-4724-B753-F338D8A157C2}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7992E7F8-5D81-4EAA-9E5F-6211215946E4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FC688E0-3F7D-4517-8C30-459C4211A8A1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9C3C2C08-C494-4F52-AE94-85156A447D43}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A14600F7-E2AE-482D-9AFC-99CD4544DB4F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AB9BF611-F86A-43C5-A467-625E22D7A309}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AF53D70E-29DF-443A-92AA-9C314AF5871E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B56FF3E8-B0C2-45C9-AF3F-8E6C5F010B9F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B83FC273-3522-4CC6-92EC-75CC86678DA4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C14F7681-33D8-11D3-A09B-00500402F30B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C459AB59-28A5-43A3-9D22-753F4C9586E6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA1E3092-BC38-4FFC-AEAE-C8E8EEC70CA1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CEA8FC9F-3D3F-4486-B9DF-ADCEE875FFB2}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D7C53E1A-7045-473C-933D-8228D1708947}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E3128A3A-C191-4149-8631-C632C8FC9919}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF4BA0B4-A877-45B3-B0BC-AD7A3CC22811}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F40FED3D-F813-42F4-A1AE-8E1D60472BF0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FA6DA3A4-87E4-4A45-9FD6-ED26089B7104}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FF0E5DF6-2375-4499-A97F-74954384D8D2}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsHelper.CH]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsHelper.CH.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CnsHelper.CH]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{02DB2793-F3F8-42AB-9B03-19B25485BE29}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{924F5B3A-7A27-484A-B873-E855C9708667}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BE08F6BC-C3E6-4149-BEB1-CB449E1B372E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C43273A6-9085-41CF-8A84-3881363A7EB9}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D27CDB6D-AE6D-11CF-96B8-444553540000}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DD011DB1-0EAF-4D05-8650-BB99208C76B0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{DF692509-D9EF-48A0-9CD0-3AA5B81F6F68}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\jpegfile\shellex\ContextMenuHandlers\Yahoo!Photo]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolBand.BandButton]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolBand.BandButton.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolBand.BandReg]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolBand.BandReg.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolBand.ObjectBar]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ToolBand.ObjectBar.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{04D0FD01-C8FA-413B-AD83-519D10B93324}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{22242729-9EE0-4060-988D-BE2A9EFD8CD0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4158DB95-DE71-41FF-BEA1-2C3D1C679DF1}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{51C76AB9-D876-46A8-A20D-F606EDDD69ED}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5517390C-60D1-4FFA-BD4C-81F8278AF29E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{58E9B715-3C97-4048-9CBE-A708E0AEB29E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{7CFDAB57-D8CD-4465-BD15-48CFFCEE3DF2}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{8417D3DB-4004-4259-952D-A6EC64A1800E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{95E822B6-6B10-4E86-9603-6CECB6135867}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{AAB6BCE3-1DF6-4930-9B14-9CA79DC8C267}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{AE9A3F59-E2D2-4EE8-A279-F2B6AF336B8E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CF67E74A-3C62-4867-9DFA-DD2374003333}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E816B7F9-96AB-4D4D-8DA4-B9D124959DA5}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F8CC28B5-4042-4054-99CB-8855EFD0FAB7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YahooAssistBar.AsNoAdObj]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YahooAssistBar.AsNoAdObj.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YahooAssistBar.DragSearch]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YahooAssistBar.DragSearch.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YahooAssistBar.PhotoTb]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YahooAssistBar.PhotoTb.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YALive.Live]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YALive.Live.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YAssist.EasyAssist]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YAssist.EasyAssist.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YRss.ExpBand]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\YRss.ExpBand.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\zschkfile]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\!CNS]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{00000000-0000-0001-0001-596BAEDD1289}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{507F9113-CD77-4866-BA92-0E86DA3D0B97}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{59BC54A2-56B3-44a0-93E5-432D58746E26}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{5D73EE86-05F1-49ed-B850-E423120EC338}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{ECF2E268-F28C-48d2-9AB7-8F69C11CCB71}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FD00D911-7529-4084-9946-A29F1BDF4FE5}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant"=-
"CustomizeSearch"=-
"OCustomizeSearch"=-
"OSearchAssistant"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{33BBE430-0E42-4F12-B075-8D21ACB10DCB}"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{406F94F0-504F-4A40-8DFD-58B0666ABEBD}"=-
"{BB936323-19FA-4521-BA29-ECA6A121BC78}"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33BBE430-0E42-4f12-B075-8D21ACB10DCB}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{38928D50-8A48-44C2-945F-D2F23F771410}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{62EED7C6-9F02-42f9-B634-98E2899E147B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BB936323-19FA-4521-BA29-ECA6A121BC78}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D157330A-9EF3-49F8-9A67-4141AC41ADD4}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE3ECAE7-0A37-4506-8A7D-3CC9A04D2CA8}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{D157330A-9EF3-49F8-9A67-4141AC41ADD4}"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"helper.dll"=-
"CnsMin"=-
"assistse"=-
"hbpassport"=-
"YLive.exe"=-
"yassistse"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"CnsAssecblk"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CnsMin]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1B0E7716-898E-48cc-9690-4E338E8DE1D3}]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CNSMINKP]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CnsMinKP]

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\!搜一搜]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\添加到雅虎订阅(&Y)]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\雅虎搜索]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"CNSMenu"=-
"CNSHint"=-
"CNSReset"=-
"CNSEnable"=-
"CNSList"=-
"CNSAutoUpdate"=-

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{406F94F0-504F-4a40-8DFD-58B0666ABEBD}"=-
"{BB936323-19FA-4521-BA29-ECA6A121BC78}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\3721]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Yahoo]
[-HKEY_CURRENT_USER\Software\3721]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars\{19CE93DE-8334-42C6-B2CA-BFE3DF5196A3}]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{57421194-58FB-49AE-9B4F-FD48869B9AD4}]

;rem 彩信通 又一个超级的**产生了
;rem 想办法删除 %windir%\system32\drivers\Albus.SYS 这个万恶不赦的文件,推荐用http://ccollomb.free.fr/unlocker
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ALBUS]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Albus]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Albus]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ALBUS]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Albus]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad.AxObj]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Ad.AxObj.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6671A431-5C3D-463d-A7CF-5587F9B7E191}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6671A432-5C3D-463d-A7CF-5587F9B7E191}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6A512BF7-EC78-4e8d-9841-6C02E8FA9838}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEHelper.WinHelper]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEHelper.WinHelper.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{74289A79-E652-4A57-A6B9-EE64AD532A8D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AB45CE36-C280-4525-BCF9-1BD01D3E4B57}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D922591D-7893-412B-B801-C3B2F31BE4C9}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMSBho.MMSAssist]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMSBho.MMSAssist.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMSBho.MMSAssistMenu]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMSBho.MMSAssistMenu.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{077525AC-C681-4139-8C3E-B582BDD375C7}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{22F87D75-7DD1-4545-94B3-CA80C0F462C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{964DDEFF-B16C-4113-8FF7-8E83B53C8ED8}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{6671A433-5C3D-463d-A7CF-5587F9B7E191}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6671A431-5C3D-463d-A7CF-5587F9B7E191}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\mmsassist]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Stdup]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\>>彩信发送<<]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"alsmt.exe"=-

;rem internet explorer helper msshapi.dll
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02C9B9AB-6372-46C5-B356-773FAF3B6B1E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02C9B9AB-6372-46C5-B356-773FAF3B6B1E}]

;删除划词 huaci 又是一个走上不归路的超级**
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{594BE7B2-23B0-4FAE-A2B9-0C21CC1417CE}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E1ACE40-F681-4CC4-A7C0-AD1E6C9AD86F}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchM.Search]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SearchM.Search.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{FD536575-73F7-42A3-9E9F-11688F1A006A}]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ABHCOP]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_HCALWAY]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\abhcop]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\hcalway]
[-HKEY_LOCAL_MACHINE\SYSTEM\Current