Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

Alex NightWatcher: Solved! (5 / 5)

Win32.Trojan.Falsesign.Ebrh also known as Adware.Softcnapp.22, virus.win32.sality.at, malicious_confidence_100% (D).

Malware Analysis of Win32.Trojan.Falsesign.Ebrh – JOYCDRHTML.EXE

Created files:

%Program Files%\joycdr\joycdrext64.exe
%Program Files%\joycdr\joycdrh64.exe
%Program Files%\joycdr\joycdrhtml.exe
%Program Files%\joycdr\joycdrpro.exe
%Program Files%\joycdr\joyhl.xml

Autostart registry keys:

HKLM\SOFTWARE\CLASSES\APPLICATIONS\GEEPLAYER.EXE\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” “%1″”
HKLM\Software\Classes\Applications\GeePlayer.exe\shell\open\: “?? ???????? ??”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.asf: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.dvr-ms: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wma: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wmp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wmv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ra: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ram: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.rm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.rmvb: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mov: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.qt: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.f4v: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.flv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.hlv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.swf: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.dat: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m1v: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m2p: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m2t: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m2ts: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m2v: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m4b: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m4p: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m4v: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mp2v: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mp4: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mpe: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mpeg: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mpeg4: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mpg: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mpv2: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pva: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ts: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ifo: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.vob: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.3g2: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.3gp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.3gp2: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.3gpp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.264: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.amv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.avi: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.bik: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.csf: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.divx: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.dpg: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.evo: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.h264: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ivm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.k3g: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mkv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mod: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mts: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.nsr: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.nsv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ogm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ogv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pmf: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pmp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pss: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.scm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.skm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tod: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tpr: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.trp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.vp6: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.vp7: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.webm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wtv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ape: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.cda: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.flac: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tta: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wav: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.aac: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ac3: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.aif: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.aiff: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.amr: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.dts: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.dtshd: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.eac3: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m1a: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m2a: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m4a: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mid: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.midi: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mka: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mp2: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mp3: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mp5: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mpa: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mpc: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ogg: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.rmi: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tak: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ass: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.idx: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.srt: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ssa: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.sub: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.asx: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.cue: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.dpl: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.kpl: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m3u: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.m3u8: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mpcpl: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pls: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.qpl: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.smpl: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wpl: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.bmp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.cur: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.cut: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.dds: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.emf: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.exr: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.faxg3: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.g3: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.gif: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.hdr: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ico: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.iff: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.j2k: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.jif: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.jng: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.jp2: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.jpc: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.jpe: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.jpeg: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.jpg: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.jxr: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.koa: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.lbm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mng: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pbm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pcd: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pct: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pcx: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pfm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pgm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pgx: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pict: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.png: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pnm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ppm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.psd: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ras: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.raw: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.sgi: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.ska: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.targa: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tbi: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tga: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tif: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.tiff: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wap: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wbm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wbmp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wdp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.webp: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.wmf: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.xbm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.xpm: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.pfv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.qsv: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.gplf: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\SupportedTypes\.mp41: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\shell\: “open”
HKLM\Software\Classes\Applications\GeePlayer.exe\: “????????”
HKLM\Software\Classes\Applications\GeePlayer.exe\NoOpenWith: “”
HKLM\Software\Classes\Applications\GeePlayer.exe\FriendlyAppName: “????????”
HKLM\Software\Classes\Applications\GeePlayerUninst.exe\NoStartPage: “”
HKLM\Software\Classes\Applications\QyClient.exe\SupportedTypes\.pfv: “”
HKLM\Software\Classes\Applications\QyClient.exe\SupportedTypes\.qsv: “”
HKLM\Software\Classes\Applications\QyUninst.exe\NoStartPage: “”
HKLM\Software\Classes\CLSID\{085CB97F-6D0B-487D-B94C-E11A736C38CE}\InprocServer32\: “%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QYPlugin.dll”
HKLM\Software\Classes\CLSID\{307B3CDB-9EE3-4137-9D18-F9AD6537ECEB}\InprocServer32\: “%Program Files%\IQIYI Video\LStyle\5.4.28.3179\Accelerator\IEHelper.dll”
HKLM\Software\Classes\CLSID\{5CD76C57-6893-478A-B776-47E7C82504BE}\InprocServer32\: “%Program Files%\IQIYI Video\GeePlayer\2.3.28.2726\GpShlExt.dll”
HKLM\Software\Classes\CLSID\{5E6A8DA1-5731-465B-B036-B9E16EF26CAC}\InprocServer32\: “%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QYPlugin.dll”
HKLM\Software\Classes\CLSID\{CF3CDEFB-31BE-43AE-B064-B9C62C883259}\Shell\Open\Command\: “%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyClient.exe web_startup_tray”
HKLM\Software\Classes\CLSID\{CF3CDEFB-31BE-43AE-B064-B9C62C883259}\InProcServer32\: “shdocvw.dll”
HKLM\Software\Classes\CLSID\{FB4F6285-4C32-49F2-950F-A5998F9CEC6C}\InprocServer32\: “%Program Files%\IQIYI Video\LStyle\5.4.28.3179\Accelerator\IEHelper.dll”
HKLM\Software\Classes\bdhd\shell\open\command\: 22 43 3A 5C 50 72 6F 67 72 61 6D 20 46 69 6C 65 73 5C 49 51 49 59 49 20 56 69 64 65 6F 5C 4C 53 74 79 6C 65 5C 51 79 43 6C 69 65 6E 74 2E 65 78 65 22 20 2D 70 70 73 74 72 65 61 6D 20 22 25 31 22 00 00 3F 3F 3F 3F 36 3F 3F 3F 3F 3F 55 3F 3F 3F 3F 3F 3F 06 3F 00 00 00 00 3F 3F 02 00 1A 00 3F 53 4D 00 00 3F 3F 3F 00 00 3F 3F 3F 3F 3F 55 3F 3F 3F 3F 3F 3F 06 3F 00 00 00 00 3F 3F 02 00 1B 00 3F 53
HKLM\Software\Classes\GeePlayer.dir\shell\open\command\: “”%Program Files%\IQIYI Video\GeePlayer\2.3.28.2726\GeePlayer.exe” -runfrom dir “%1″”
HKLM\Software\Classes\GeePlayer.dvd\shell\open\command\: “”%Program Files%\IQIYI Video\GeePlayer\2.3.28.2726\GeePlayer.exe” -runfrom DVD “%1″”
HKLM\Software\Classes\magnet2\shell\open\command\: “”%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyClient.exe” -ppstream “%1″”
HKLM\Software\Classes\pps\shell\open\command\: “”%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyClient.exe” -ppstream “%1″”
HKLM\Software\Classes\ppsrun\shell\open\command\: “”%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyClient.exe” -ppstream “%1″”
HKLM\Software\Classes\ppstream\shell\open\command\: “”%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyClient.exe” -ppstream “%1″”
HKLM\SOFTWARE\CLASSES\PPS_264\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_3G2\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_3GP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_3GP2\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_3GPP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_AAC\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_AC3\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_AIF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_AIFF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_AMR\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_AMV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_APE\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_ASF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_ASS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_ASX\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_AVI\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_BIK\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_BMP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_CDA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_CSF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_CUE\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_CUR\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_CUT\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_DAT\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_DDS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_DIVX\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_DPG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_DPL\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_DTS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_DTSHD\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_DVR-MS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_EAC3\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_EMF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_EVO\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_EXR\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_F4V\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_FAXG3\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_FLAC\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_FLV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_G3\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_GIF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_GPLF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_H264\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_HDR\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_HLV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_ICO\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_IDX\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_IFF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_IFO\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_IVM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_J2K\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_JIF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_JNG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_JP2\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_JPC\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_JPE\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_JPEG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_JPG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_JXR\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_K3G\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_KOA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_KPL\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_LBM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M1A\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M1V\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M2A\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M2P\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M2T\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M2TS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M2V\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M3U\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M3U8\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M4A\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M4B\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M4P\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_M4V\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MID\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MIDI\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MKA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MKV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MNG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MOD\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MOV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MP2\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MP2V\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MP3\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MP4\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MP41\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MP5\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MPA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MPC\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MPCPL\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MPE\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MPEG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MPEG4\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MPG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MPV2\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_MTS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_NSR\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_NSV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_OGG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_OGM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_OGV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PBM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PCD\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PCT\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PCX\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PFM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PFV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PGM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PGX\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PICT\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PLS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PMF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PMP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PNG\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PNM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PPM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PSD\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PSS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_PVA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_QPL\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_QSV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_QT\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_RA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_RAM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_RAS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_RAW\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_RM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_RMI\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_RMVB\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SCM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SGI\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SKA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SKM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SMPL\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SRT\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SSA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SUB\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_SWF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TAK\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TARGA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TBI\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TGA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TIF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TIFF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TOD\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TPR\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TRP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TS\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_TTA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_VOB\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_VP6\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_VP7\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WAP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WAV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WBM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WBMP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WDP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WEBM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WEBP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WMA\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WMF\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WMP\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WMV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WPL\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WTV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_WV\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENFILE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_XBM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\SOFTWARE\CLASSES\PPS_XPM\SHELL\OPEN\COMMAND\: “”%PROGRAM FILES%\IQIYI VIDEO\GEEPLAYER\2.3.28.2726\GEEPLAYER.EXE” -RUNFROM OPENIMAGE “%1″”
HKLM\Software\Classes\qips\shell\open\command\: “”%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyClient.exe” -ppstream “%1″”
HKLM\Software\Classes\qisu\shell\open\command\: “”%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyClient.exe” -ppstream “%1″”
HKLM\Software\Classes\qygameclient\shell\open\command\: “”%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QYAppPlugin\QyGameClient\QyGameClient.exe” -qygameclient “%1″”
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\BRBROWSERINST: “”%LOCAL APPDATA%\BAIDU\BAIDUCLIENT\2.5.200.2102\BAIDUUPDATE.EXE” ##DISPLAYTYPE=0;APPUPDATE=1;VERSIONUPDATE=1;MODULEUPDATE=0;UPDATESOURCE=6;ONLYINSTALL=1;”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\GeePlayer\DisplayName: “????????”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\GeePlayer\UninstallString: “%Program Files%\IQIYI Video\GeePlayer\2.3.28.2726\GeePlayerUninst.exe”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\joycdr_is1\DisplayName: “joycdr 1.0”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\joycdr_is1\UninstallString: “”%Program Files%\joycdr\UninsFiles\unins000.exe””
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PPStream\DisplayName: “???PPS”
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PPStream\UninstallString: “%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyUninst.exe”
HKLM\Software\QiYi\QiSu\DisplayName: “???”
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BAIDUSERVICE.EXE\IMAGEPATH: “%LOCAL APPDATA%\BAIDU\BAIDUCLIENT\3.0.200.2787\BAIDUSERVICE.EXE”
HKLM\System\CurrentControlSet\services\BaiduService.exe\DisplayName: “BaiduService.exe”
HKLM\System\CurrentControlSet\services\bbnetdriver\ImagePath: “\SystemRoot\system32\drivers\bbnetdriver.sys”
HKLM\System\CurrentControlSet\services\bbnetdriver\DisplayName: “bbnetdriver”
HKLM\System\CurrentControlSet\services\bbnetservice\ImagePath: “%SystemRoot%\system32\svchost.exe -k bbnetservice”
HKLM\System\CurrentControlSet\services\bbnetservice\DisplayName: “bbnetservice”
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BBROWSERBOOST\IMAGEPATH: “\??\%SYSDIR%\DRIVERS\BBROWSERBOOST.SYS”
HKLM\System\CurrentControlSet\services\bbrowserboost\DisplayName: “bbrowserboost”
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\BCSERVICE\IMAGEPATH: “”%COMMON APPDATA%\BAIDU\BCSERVICE\2.0.3.134\BCSERVICE.EXE” -R”
HKLM\System\CurrentControlSet\services\BCService\DisplayName: “Baidu Client Service”
HKLM\System\CurrentControlSet\services\bd0001\ImagePath: “system32\DRIVERS\bd0001.sys”
HKLM\System\CurrentControlSet\services\bd0001\DisplayName: “bd0001”
HKLM\System\CurrentControlSet\services\BDArKit\ImagePath: “system32\DRIVERS\BDArKit.sys”
HKLM\System\CurrentControlSet\services\BDArKit\DisplayName: “BDArKit”
HKLM\System\CurrentControlSet\services\BDCEnhance\ImagePath: “system32\DRIVERS\BDCEnhance.sys”
HKLM\System\CurrentControlSet\services\BDCEnhance\DisplayName: “BDCEnhance”
HKLM\System\CurrentControlSet\services\bduniptk\ImagePath: “system32\DRIVERS\bduniptk.sys”
HKLM\System\CurrentControlSet\services\bduniptk\DisplayName: “bduniptk”
HKLM\System\CurrentControlSet\services\QiyiService\ImagePath: “%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QiyiService.exe”
HKLM\System\CurrentControlSet\services\QiyiService\DisplayName: “IQIYI Video Platform Service”
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\joycdrrun: “”%Program Files%\joycdr\joycdr.exe” -run”
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\HCDNClient: “”%Program Files%\IQIYI Video\LStyle\5.4.28.3179\QyKernel.exe” -shell_start”
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\BAIDUCLIENT: “”%LOCAL APPDATA%\BAIDU\BAIDUCLIENT\3.0.200.2787\BAIDU.EXE” –AUTO-RUN”
HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\UNITYWEBPLAYER\UNINSTALLSTRING: “%LOCAL APPDATA%\UNITY\WEBPLAYER\UNINSTALL.EXE /CURRENTUSER”
HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnityWebPlayer\DisplayName: “Unity Web Player”

Detected by UnHackMe:

JOYCDRHTML.EXE
Default location: %PROGRAM FILES%\JOYCDR\JOYCDRHTML.EXE

Dropper hash(md5): 0d59abd5cbc9f5da6e4e990e35734862

Written by NightWatcher

Malware Hunter.
Google+

UnHackMe removes malware invisible for your antivirus!

UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.