Archive for 2009年6月15日


打开记事本,把以下内容保存为*.INF文件。

[Version]
Signature="$Chicago$"
Provider=tea

[DefaultInstall]
AddReg=UnhookRegKey

[UnhookRegKey]
HKLM, SoftwareCLASSESbatfileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSEScomfileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESexefileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESpiffileshellopencommand,,,"""%1"" %*"
HKLM, SoftwareCLASSESregfileshellopencommand,,,"regedit.exe ""%1"""
HKLM, SoftwareCLASSESscrfileshellopencommand,,,"""%1"" %*"
HKCU, SoftwareMicrosoftWindowsCurrentVersionPoliciesSystem,DisableRegistryTools,0x00000020,0

CyberSitter

执行此程序时,它会创建下列文件:

%UserProfile%Local SettingsTempmia2F.tmp
%SystemDrive%Documents and SettingsAll UsersApplication Data{279D011A-4D3D-434E-B2C0-DA58256F33D2}instance.dat
%SystemDrive%Documents and SettingsAll UsersApplication Data{279D011A-4D3D-434E-B2C0-DA58256F33D2}mia.dll
%SystemDrive%Documents and SettingsAll UsersApplication Data{279D011A-4D3D-434E-B2C0-DA58256F33D2}setup2k.dat
%SystemDrive%Documents and SettingsAll UsersApplication Data{279D011A-4D3D-434E-B2C0-DA58256F33D2}setup2k.exe
%SystemDrive%Documents and SettingsAll UsersApplication Data{279D011A-4D3D-434E-B2C0-DA58256F33D2}setup2k.msi
%SystemDrive%Documents and SettingsAll UsersApplication Data{279D011A-4D3D-434E-B2C0-DA58256F33D2}setup2k.par
%SystemDrive%Documents and SettingsAll UsersApplication Data{279D011A-4D3D-434E-B2C0-DA58256F33D2}setup2k.res
%Windir%Installere50db6.msi
%System%adwfil.dll
%System%auctfil.dll
%System%bnrfil.dll
%System%bsnlst.dll
%System%chtfil.dll
%System%csnews.dll
%System%cultfil.dll
%System%entfil.dll
%System%finfil.dll
%System%fmfil.dll
%System%fshrfil.dll
%System%gblfil.dll
%System%gdwfil.dll
%System%gnfil.dll
%System%hatfil.dll
%System%iawfil.dll
%System%igefil.dll
%System%imgfil.dll
%System%jbfil.dll
%System%lastupdate.dll
%System%lgwfil.dll
%System%logs20071114.log
%System%logsCComDbgLog.txt
%System%logsCComErrDbgLog.txt
%System%logsCComPrtcdLog.txt
%System%logsCYBWDDbgLog.txt
%System%logsnet20071114.log
%System%logsWVCSCRLog.txt
%System%lspcs.dll
%System%macfil.dll
%System%movfil.dll
%System%mp3fil.dll
%System%MSLSPC.exe
%System%nfil.dll
%System%nvgamfil.dll
%System%perfil.dll
%System%picsfil.dll
%System%pkmon.dll
%System%popfil.dll
%System%psyfil.dll
%System%pxyfil.dll
%System%SNet.dll
%System%snetbonly.dll
%System%snetfil.dll
%System%spmfil.dll
%System%sporfil.dll
%System%srchfrgn.dll
%System%srchin.dll
%System%srchout.dll
%System%swfil.dll
%System%tafil.dll
%System%tapfil.dll
%System%vgamfil.dll
%System%viofil.dll
%System%wfileu.drv
%System%wrestfil.dll
%System%wzfil.dll
%Windir%CComSvc.exe
%Windir%csfilts.cab
%Windir%CSV10.chm
%Windir%Cyb10.exe
%Windir%cybread.htm
%Windir%cylsplog.txt
%Windir%liccyval.dat
%Windir%NISDocs1.jpg
%Windir%NISDocs2.jpg
%Windir%NISDocs3.jpg
%Windir%NISDocs4.jpg
%Windir%NISDocs5.jpg
%Windir%NISDocscyb150.gif
%Windir%NISDocsMainBanner.png
%Windir%NISDocsNISHelp.htm
%Windir%NISDocs_vti_cnf1.jpg
%Windir%NISDocs_vti_cnf2.jpg
%Windir%NISDocs_vti_cnf3.jpg
%Windir%NISDocs_vti_cnf4.jpg
%Windir%NISDocs_vti_cnf5.jpg
%Windir%NISDocs_vti_cnfMainBanner.png
%Windir%WVCSCR.exe
%Windir%WVCSDG.exe
%Windir%WVCSUH.exe
%Windir%WVCSWD.exe

它还会创建下列干净的文件:

%System%sporder.dll
%Windir%libeay32.dll
%Windir%ssleay32.dll
%UserProfile%Local SettingsApplication DataSeven ZipCodecs7zAes.dll
%UserProfile%Local SettingsApplication DataSeven ZipCodecsAes.dll
%UserProfile%Local SettingsApplication DataSeven ZipCodecsBranch.dll
%UserProfile%Local SettingsApplication DataSeven ZipCodecsCopy.dll
%UserProfile%Local SettingsApplication DataSeven ZipCodecsLZMA.dll
%UserProfile%Local SettingsApplication DataSeven ZipCodecsSwap.dll
%UserProfile%Local SettingsApplication DataSeven ZipFormats7z.dll

接下来,它会创建下列注册表子项:

HKEY_LOCAL_MACHINESOFTWAREClassesInstallerFeatures6AA39F78260CCA0479F0ED3E2658849D
HKEY_LOCAL_MACHINESOFTWAREClassesInstallerUpgradeCodes3F09E8D2EB74C174CBBD18AF2D33B13C
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUpgradeCodes3F09E8D2EB74C174CBBD18AF2D33B13C
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components081F079CE04CE047BB32ED042AC0A47
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components3613FCF69743AD4BBCA50D236A1B0C5
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components4478C9A087C2EC4D909A4B7C2940933
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components725D80BCE2551A40935D5C1315D4AAF
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components9D58C9DBA4CE934D8E55ADDDAD346CD
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD9547672AF16F04E92F0C17B5F11AB9
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components15542F6B99AA8334A9F2867FF4E08FBF
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1689A55E897077744A58B859578555A9
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components171B043DFEC666143803E62E5B4C3B26
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components174FEE1C64463C94EAD1832B1027A06F
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1A28A041708482F4CB02BEB7D000AE98
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1A57AB357DEC86648949F7830BB68127
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1A8E7B43583160040892EB78197B4A7B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1D313BFB98B0B704394517F1FB25396B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1D814839973389C42BD13E07E5D2C419
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1EB52F54927D44E41977B66CAD37CC07
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components1FFF723FCEE5895499B9F898B4D1F588
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components223DD84708FF8FF419F6640AA5EBD90E
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components2680FB05A1659AD4D9DAC797D458943B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components28141A677C4C34A4FA35AE6EB1174AEA
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components282842C38543CB84896730B2642AAA29
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components283377AABAFD2824FAC5E27A10889192
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components30C64BC2BBC12EE459DFB6A60D582A23
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components3A9E63972AB093B4BBADBEF7F88E9812
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components3E2D0415B130A3A40935B67F21A4EF48
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components40DE1330F2BD6494BAB4349D42EB972D
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components410F6055390A0044A846B66C1AF30B1B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components41F67C5DF04B74C469189AEE599DE6B5
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components45DD0B5FE1C450349AA6CA234BFD489A
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components47B407FA229AC03449F5C175A58C1C1D
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components495F1AEBFD93A5F43B0C8FA4B39A753A
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components4B9109366E2CF9B4CBCC2CFFA7615C9C
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components4F0404B3C9BABF54EBDF949AEC540F1B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components4F31A4F919C898043944C8FD9EEA0A62
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components4FCF0F2D238FE05429C8C25DF972BE9E
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components5589EFBB69EE9B84992FCB647AD221C2
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components57F122546F2532B428F01FCD17303F06
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components5A6502A2A19E040488D5948FAC973259
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components5DC065DA4288B8F499256523C1E37614
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components604B89DEA8B63E84C94103D4599E09BE
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components60EA7B75AC6473A469701F0613D46D1C
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components68C31B137714E6E4082CC1DC02B61CCD
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components6F45F97AB66DD1A479D0D65CF97D01BC
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components6F80DA3C5E0F794429C6756758D8816E
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components6FA2A9900C7A5B04A854D48B6DBF3D3E
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components72736656B8D7ACA408726315B7F144D0
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components736A1C7BBAD69604B8FA743321B6AA24
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components737C5F0B97B2CDF4780BE00F53D78B8B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components744796C1EF456DB4EA55C595CC3FAAB5
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components7F9E797FDDA2838498A9D9EA34ACD55B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components811E566C86FA4654CA6D3C23456603C9
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components813091057B0A1CB4B97BE24945FC9A95
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components81A7A22E9D1DAAC4EACBB29397A18DB4
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components821C09473033B4042A677AFCA5E4305E
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components8456083B6E7D44047900B3DEB5655818
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components857AB943D434DC44AAD87564C03FAAC6
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components86DA100BD59846C4CA4F8AD354125A07
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components8757B7373A61FC94680DFACBB100EA3E
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components88591B1D5FC187E41B9F54AA953ACED6
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components88D722F53298A944AB32D45037791529
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components88E7FC2B56A9E0A4089483BB77ECA8AD
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components8D10C7D55FC91CC44B6C7977C522F491
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components8EC7161379A7F8546959D8EE46F7A216
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components90FB0312151946E41B602CC96B73DC31
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components92C033CC3ABE81048A81D9DE20F797EE
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components948107602AE82534383E6A538D16E3FD
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components97DDB45BC01688942B10554716D8C9A9
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components9812F23060882A04683BFEE836B5E585
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components99FD3C6172EBCFA4897F15B53CE5A4DB
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components9B6F8E3079D5C5A4A8A1CF6C8A59DB1A
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Components9EA5AE20FA564324098A41324B8E24B0
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA0F6EBC0771C3A84898E221BC04DE435
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA132E085BBE6DD84D8F4D3E0D395A94A
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA183043091D0BE946B7E7653C2017552
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA31CDBC4A466417439E5C0D59E0B5FF6
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA500E26EC3083544790F11E1F679592B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA70D6F49CABFE0F49890A79CE0FB93D5
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA81021FEC765C494180CBCD21791B9E9
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsA91C3F29B2E099B4A802F3BCAE020CCF
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsAF94E9771E677E64993723430EBA01AF
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB12AFBFEAABAAD64FAB426189ABC3475
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB3E26A0A363B63A4C9255DDBC960AB36
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB40068B4C02EBD7478024FC7A68DF688
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB40630B935CFA644889491CE07920BDD
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB514AF09ECC37A14A9AE42853A89B42D
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB69134597CF169D4CB410C94A00A707F
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB97A4EF2A6D5E0B40BFD69BC45A561C1
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsB9ECD8DE417214040826130289AAE597
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBB6A602F034A8214C8DC1575D81C8FCF
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBD9ADD48E0B66614BAA0BA984F01F626
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBE79141655E9F9D458A7CCDCB22D6E34
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBF7524327867F33469C8A26D57C76259
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsBF921A68FF19CDF418EDB946062F5D0C
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsC047E8A44A8C82948B04E4DC036EF469
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsC0B08CE3716FABC42967F83036EDC9A7
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsC31E587A3D955F345BFDE573F5A70608
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsC3253FB7D3C86CB45A3DB7A0D0ED4883
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsC3E1FD0D5CA2C654CA1B781FC80207F9
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsC514220A025C1124C9A76B1AACC1CE4B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsC85C4862EE5DAB14088F15D02C041C8B
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsCDE1BC4072B1EDD4EB12674B5E45C5BB
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsCFBFD146E562FE04FAB9B68445053276
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD6C7EA6ECF0B24F4DB5FCAC56C5FA4B8
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD7F3BA66D5FDE19429C46032CFCDE4FA
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD8AB4E8D4E3E05944BC5AC9B9247BE71
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsD9237B594FE0DE04DA38A32FCB2AB4D5
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsDB26DA243D0C88F46852B321ACDA19D8
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsDBC314177A6710F4EBD0CBAAAC58D30C
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsDBD1CCD68EECCD74393BB27AA3B0E67C
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsDD64F04C9ECA6ED47907792A949EC2DA
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsDEC0A0CF2C725EF44930020732AF8201
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsDF8D85AAC98C84E4F93BAC74FC0279DA
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsE4A3D467CF9FBE042B30B7D108E559FD
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsE63111EDB103B75448038927F72A98C0
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsE853E9EDB4CF7294BA40BF16CFB9A41E
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsEAB9F09672C90704599514E6E38D2B3A
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsEB7224C0D55C0044EA3D55EC57C7F463
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsEC6C7D9835BE97E4D9A45E8C8EAB5B3D
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsEE66F50B0DE45BE45B7CE4AA988C0A67
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsF2E3C5434E77B1648924AE207F57B92A
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsF55FEA90E74ABFB47B1064981FC09B20
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsF7533BA8798E31D479EDC464AEFDBCB5
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsF76DAC0D8A99D064587D18679D0AAD5E
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsF829437B91ED7E84A9F44A57CDBB9465
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsFE27C0736C6A73D499A7D37D24B26502
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsFF9D0ECBBC78FAA40BD61D555E1BD1A8
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18ComponentsFFAEB7703627E1D4093BBB4082894029
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerUserDataS-1-5-18Products6AA39F78260CCA0479F0ED3E2658849D
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{87F93AA6-C062-40AC-970F-DEE3628548D9}
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersnet
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersNet98
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersNetSet
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries00000000014
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries00000000015
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries00000000016
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries00000000017
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries00000000018
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWinSock2ParametersProtocol_Catalog9Catalog_Entries00000000019
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumRootLEGACY_CCOMSVC
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumRootLEGACY_WVCSWDSVC
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesCCOMSVC
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWVCSWDSVC
HKEY_LOCAL_MACHINESOFTWAREClassesInstallerProducts6AA39F78260CCA0479F0ED3E2658849D

它还会创建与合法 Windows 服务相关的下列注册表子项:

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWS2IFSL
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumRootLEGACY_WS2IFSL

该程序会创建下列干净的注册表子项:

HKEY_CURRENT_USERSoftwareMimarSinan
HKEY_LOCAL_MACHINESOFTWAREMimarSinan

此外,它会创建下列注册表项,以便在 Windows 启动时执行:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun"C2K" = "C:WINDOWSCyb10.exe"

接下来,它会创建下列注册表项:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerFolders"C:WINDOWSNISDocs" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstallerFolders"C:WINDOWSNISDocs_vti_cnf" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternet Settings5.0User AgentPost Platform"CSVT:1AB40005Z20000000000RKTQ40QINF" = ""
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32MSLSPC.exe" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32lspcs.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32adwfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32auctfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32bnrfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32bsnlst.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32chtfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32csnews.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32cultfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32entfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32finfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32fmfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32fshrfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32gblfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32gdwfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32gnfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32hatfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32iawfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32igefil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32imgfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32jbfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32lastupdate.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32lgwfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32macfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32movfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32mp3fil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32nfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32nvgamfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32perfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32picsfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32pkmon.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32popfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32psyfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32pxyfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32SNet.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32snetbonly.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32snetfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32spmfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32sporfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32srchfrgn.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32srchin.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32srchout.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32swfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32tafil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32tapfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32vgamfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32viofil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32wrestfil.dll" = "1"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32wzfil.dll" = "1"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings"EnableHttp1_1" = "0"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer"NoControlPanel" = "0"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesNetwork"NoNetSetup" = "0"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem"DisableRegistryTools" = "0"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem"DisableTaskMgr" = "0"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesWinOldApp"Disabled" = "0"
HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternet ExplorerRestrictions"NoBrowserOptions" = "0"
HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsSystem"DisableCMD" = "0"

它还会创建下列干净的注册表项:

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionSharedDlls"C:WINDOWSsystem32sporder.dll" = "1"
HKEY_CURRENT_USERSoftwareMimarSinanInstallAwareSeven Zip"Path" = "C:Documents and SettingsAdministratorLocal SettingsApplication DataSeven Zip"

该程序会监控计算机上的系统活动。

  《白雪公主》重新命名为《苦命的妹子啊,七个义薄云天的哥哥为你撑起小小的一片天》。
  《卖火柴的小女孩》改为《残忍啊,美丽姑娘竟然被火柴烧死的惊天血案》
  《红楼梦》改为《包办婚姻,一场家破人亡的人间惨剧》
  《泰坦尼克号》改为《冰冷的大西洋!带走我的爱人!一个富婆与穷画家的旷世畸恋》
  《牛郎织女》改为《苦命村娃高干女——一段被狠心岳母拆散的惊世恋情》
  《唐伯虎点秋香》改为《我那爱人打工妹哟,博士后为你隐姓埋名化身农民工》
  《白蛇传》改为《我那文弱的书生哥哥啊,你可知痴心妹妹已为你等候千年》
  《海的女儿》=《痴心的少女,你甘为泡沫为何番???》
  《舒克与贝塔》=《过街老鼠发奋做飞行员和坦克手,低贱角色奏出生命最强音》

传统文化版
  《诗经》:《苦命的痴情女啊,用千百篇诗歌也唤不回薄情郎》
  《论语》:《恩重如山的孔爷爷,渴望上学的孩子们不能没有你》
  《中庸》:《告诉你一个真理:人生就是一场游戏一场梦而已》
  《史记》:《一个遭受阉割的男人,你的记录成就宏伟业绩》
  《孙子兵法》:《男人无腿也无悔 用热血书写打赢的奇迹》
  《三国志》:《绝世美女大小乔:我们看到了三个男人帮的血腥恩怨》
  《二十四史》:《纵欲无度的陛下啊,你让你的多少爱人为你心碎》
  《礼记》:《避免职场性骚扰,你的防线不如这些礼节》
  《聊斋志异》:《鲜为人知的人兽恋,感天动地多少年》
  《山海经》:《美丽精灵的哭诉:我是禽兽还是人?》
  《搜神记》:《搜!搜!搜!你所不知道的社会百态录》
  《战国策》:《军事会客厅 会见战争当事人》
  《庄子》:《想要翱翔的你,别忘记逍遥背后的泪》
  《老子》:《老子不一定是孩子他爹——一位“带头大哥”的真心寄语》
  《吕氏春秋》:《我的二奶是太后:留给皇帝私生子的治国宣言》
  《水经注》:《踏遍祖国的锦绣河山后,我就成了著名作家》
  《楚辞》:《离骚的我和发骚的你,无奈这个闷骚的世界》

文学篇
  《西游记》——《浪子回头,善良的师父指引我重返西天求学之路》
  《西游记》——:我那狠心的人啊,不要红颜美眷,偏要伴三丑男上西天
  《红楼梦》——包办婚姻,一场家破人亡的人间惨剧
  《三国演义》——从贫贱到自强,三兄弟的旷世畸恋。
  《红楼梦》——豪门浪荡子啊,却为真爱遁入空门
  《聊斋》——那美轮美奂的梦中仙子呦,怎不叫人牵肠挂肚
  《封神演义》——为前妻登上神仙宝座,八旬教授不畏牛鬼蛇神
  《简爱》——贫寒女教师真情感天动地,用双手为情哥哥撑出一片天
  《呼啸山庄》——生生世世的纠缠爱恋——我和我表兄那不得不说的故事
  《飘》——浪荡女回头是岸,再回首爱人杳然
  《飘》——失去才知道珍贵,拿什么拯救我失败的婚姻
  《官场现形记》——宦海沉浮 利欲熏心——当代贪官回忆录——那些黑镜头
  《啼笑因缘》——相同的面貌 不同的命运——两个女人和一个男人间不得不说的故事
  《哈利波特》=毁容少年自强自立:我爱上这一道疤痕!
  《美女与野兽》=爱慕虚荣的悔恨,心上人娶了我妹妹
  《睡美人〉=一根纺针引发悲剧,痴情哥哥披荆斩棘唤醒妹
  〈邋遢大王〉=不修边幅放荡少年路遇巧言鼠,斗志斗勇地洞奇遇终成绅士男
  〈圣斗士〉=重回古希腊斗兽岁月,花季少年集体大逃杀
  〈机器猫〉=只愿此生不再让你哭泣,让我穿越时空来拯救你
  〈秦香莲〉=三载漫漫上访路,结发妻终将重婚丈夫拉下马
  〈皇帝的新衣〉=胖子裸逛闹市街头,无邪稚童一语捅破
  〈皇帝的新衣〉=国家元首,真空上阵挑战性感底线为哪般
  〈孟姜女哭长城》=贫贱女怒斥攀比盖楼风,为农民工丈夫讨回尊严
  《黑猫警长》=海水与火焰的煎熬,我与他纠缠了半辈子的黑白孽缘
  《大头儿子小头爸爸》=畸形两父子诠释人间真爱
  《丑小鸭》=貌丑心善受尽难言屈辱,命苦弃儿终成杰出青年
  《葫芦娃》=七幼童嗷嗷待哺,无私养父啊,贩婴恶夫妇为夺婴竟向你亮起屠刀
  《大力水手》=小小菠菜铸就了他的壮烈人生哟,小块头也有大智慧!

   《满城尽带黄金甲》 丰胸肥臀放荡继母 痴傻癫狂傻儿子 一场肉欲跟权利引发的乱伦争斗
  《墨攻》 平头肃杀的哥哥哟,无声哀怨地牢等你来拯救
  《亮剑》李云龙——《忠贞的妻哟,这隆隆炮火见证了我们刑场上的婚礼!》
  《武林外传》白展堂——《漂泊多年浪子终回头,你可知痴情老板娘为你一路守望?》
  《梁山伯与祝英台》——《芳魂化蝶——那对被“门当户对”扼杀的殉情恋人啊》
    《杨教授和翁小姐》——《就是要和“爷爷”结婚——忘年恋人用真情大爱冷对无情人世》
  《陈圆圆》——《当尼姑是我渴望的归宿!——从高官情妇到村长二奶的苦命红颜》
  《女娲造人》——《玩泥巴玩出大事业——全球最手工泥塑女皇的发迹之路》
  《上海滩》——《宝贝女儿情迷古惑仔 黑帮老爹无奈起杀心》
  《华仔与娟娟》——《我风华绝代的华仔哥哥啊,你是娟娟心中永远的纠结》
  《克林顿与希拉里》——《风流总统无颜面对拉链门,豪情夫人抑郁难平闹革命》
  《鹿鼎记》——《花心正太的心灵成长史——我和七个老婆不得不说的故事》
  《武大郎与潘金莲》——《欲乱绝情妻——烧饼郎泣血悲号终丧命》
  《陈水扁》——《忍辱负重终登高位,猥琐男翻脸无情》
  《寻秦记》——《古天乐失足时空穿梭机,郭羡妮不畏艰难永相随》
  《新神雕侠侣》——《黄晓明熟男演义,刘亦菲萝莉情深》
  《武松》——《嫂子啊,并非小叔不肯,只是不忍毁弃我多年练就的童子功》
  《武大郎》——《我很丑,可是我很温柔》
  《西门庆》——《男人有钱就变坏,乱搞男女关系富豪酒楼把命丧》
  《红花怒放!谁说中老年妇女不能掳获万千少男心?》——杨二
  《美丽钻戒,见证让大嫂哭泣的爱情故事》——柯以敏
  《豪门逆伦酿苦果——哥哥啊,妹妹只能来生再爱你》——《雷雨》
  《血泪控诉!那在每个深夜虐童到黎明的狠心老板》——《高玉宝》