瑞星卡卡安全论坛

不能完成全盘杀毒，过程中老是出现Buffer overrun detected!
程序版本：22.00.01.50 病毒库版本22.19.06.11
不能完成全盘杀毒，过程中老是出现
Buffer overrun detected!
Program:C:\Program Files\Rising\Rav\RavMonD.exe
郁闷
卸载重装也不行

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; GTB6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.5.21022; .NET CLR 3.0.04506.648)

修复或重新安装软件，一定不要保留配置文件

不保留配置文件，删除目录重新安装软件 ,也不行，我从2007原装光盘安装，升级到最新版就不行
郁闷，RISING快点解决，给出最根本的原因！！

Buffer overrun detected!
缓冲溢出，与防火墙有关。

是在启动瑞星全盘杀毒之后出现的:kaka2:
Program:C:\Program Files\Rising\Rav\RavMonD.exe:kaka9:
谢谢SINOER和天使的回答，虽然问题依旧！

建议按以下步骤操作，如还有问题请继续跟帖反馈：
将系统里的杀毒软件完全卸载，卸载时不保留配置文件，手动将瑞星安装目录下的文件删除，将C:\Documents and Settings\All Users\Application Data\Rising\Ris（或rav）下的文件手动删除，网站下载新的安装程序，重新安装再升级最新版后，再进行全盘杀毒。
http://shop.rising.com.cn/download/index.htm

还是不能全盘杀毒,:kaka4:
按操作步骤如下：
将系统里的杀毒软件和防火墙完全卸载，卸载时均不保留配置文件，但均不勾选删除瑞星安装目录，卸载卡卡，重启，手动将瑞星安装目录下的文件删除，将C:\Documents and Settings\All Users\Application Data\Rising下的文件手动删除，分别搜索RAV、RFW、Ris和AntiSpyware字段，删除找到的与瑞星有关的目录，网站下载新的安装程序，依次重新安装RAV、RFW和卡卡再升级最新版后，再进行全盘杀毒。结果：还是不能全盘杀毒!!
报Buffer overrun detected!时杀软停留在后缀名为dbx文件处（比如Outlook的收件箱）的机会比较多，严重郁闷中:kaka7:
瑞星软件安装前应做严格的前提条件检查并给出对应建议（象SQL软件一样），防止出现安装软件已提示成功了却不能用的情况！！:kaka10: :kaka10:

补充：开机杀毒能顺利完成:kaka6:

以前都能全盘杀毒的，现在开机杀毒设为系统盘才能实现系统盘杀毒，真是佩服2010了，每次跨年度升级都是很麻烦的事,瑞星还是找不到解决之道，老用户的钱出的不值,后续服务差,非常差，我都出了两次钱了，郁闷！！！

瑞星卡卡电脑诊断日志 v1.30 (2009-11-6 7:48:31)  北京瑞星信息技术有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      aaBootstrap
        [A ] 1. c:\program files\archestra\framework\bin\aabootstrap.exe
          Invensys Systems, Inc.
          Bootstrap Module
          .text,.rdata,.data,.rsrc,.reloc,


      aaGR
        [A ] 2. c:\program files\archestra\framework\bin\aagr.exe
          Invensys Systems, Inc.
          Galaxy Repository service to process requests to the ArchestA configuration subsystem
          .text,.rdata,.data,.rsrc,.reloc,


      aaLogger
        [A ] 3. c:\program files\common files\archestra\aalogger.exe
          Invensys Systems, Inc.
          aaLogger Module
          .text,.rdata,.data,.rsrc,


      almservice
        [AM] 4. c:\program files\common files\siemens\sws\almsrv\almsrvx.exe
          SIEMENS AG
          Automation License Manager Service
          .text,.rdata,.data,.rsrc,


      aspnet_state
        [A ] 5. c:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe
          Microsoft Corporation
          Microsoft ASP.NET State Server
          .text,.data,.rsrc,


      Ati HotKey Poller
        [A ] 6. c:\windows\system32\ati2evxx.exe
          ATI Technologies Inc.
          ATI External Event Utility EXE Module
          .text,.rdata,.data,.rsrc,


      Autodesk Licensing Service
        [AM] 7. c:\program files\common files\autodesk shared\service\adskscsrv.exe
          Autodesk
          System Level Service Utility
          .text,.rdata,.data,.rsrc,


      btwdins
        [AM] 8. c:\program files\thinkpad\bluetooth software\bin\btwdins.exe
          Broadcom Corporation.
          Bluetooth Support Server
          .text,.rdata,.data,.rsrc,


      CCAgent
        [A ] 9. c:\program files\common files\siemens\ace\bin\ccagent.exe
          SIEMENS AG
          CCAgent Service
          .text,.rdata,.data,.rsrc,


      CCEClient
        [A ] 10. c:\program files\common files\siemens\ace\bin\cceclient.exe
          SIEMENS AG
          CCEClient
          .text,.rdata,.data,.rsrc,


      CCEServer
        [A ] 11. c:\program files\common files\siemens\ace\bin\cceserver.exe
          SIEMENS AG
          CCEServer
          .text,.rdata,.data,.rsrc,


      CCPerfMon
        [A ] 12. c:\program files\common files\siemens\bin\ccperfmon.exe
          SIEMENS AG
          Performance Monitor for STOBS
          .text,.rdata,.data,.rsrc,


      clr_optimization_v2.0.50727_32
        [A ] 13. c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe
          Microsoft Corporation
          .NET Runtime Optimization Service
          .text,.data,.rsrc,


      EvtEng
        [AM] 14. c:\program files\intel\wifi\bin\evteng.exe
          Intel(R) Corporation
          Intel(R) PROSet/Wireless Event Log Service
          .text,.rdata,.data,.idata,.didat,.rsrc,


      FontCache3.0.0.0
        [A ] 15. c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe
          Microsoft Corporation
          Windows Presentation Foundation Font Cache Service
          .text,.rsrc,.reloc,


      FS Service Control
        [A ] 16. c:\program files\common files\archestra\ntservapp.exe
          Wonderware Corporation
          NTServApp Application
          .text,.rdata,.data,.rsrc,.reloc,


      gusvc
        [A ] 17. c:\program files\google\common\google updater\googleupdaterservice.exe
          Google
          gusvc
          .text,.rdata,.data,.rsrc,


      IBMPMSVC
        [AM] 18. c:\windows\system32\ibmpmsvc.exe
          Lenovo
          ThinkPad Power Management Service
          .text,.data,.rsrc,

IDriverT
        [A ] 19. c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe
          Macrovision Corporation
          IDriverT Module
          .text,.rdata,.data,.rsrc,


      idsvc
        [A ] 20. c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe
          Microsoft Corporation
          Windows CardSpace
          .text,.rdata,.data,.rsrc,


      IPSSVC
        [AM] 21. c:\windows\system32\ipssvc.exe
          Lenovo Group Limited
          IPS Core Service
          .text,.rdata,.data,.rsrc,


      kaccore
        [A ] 22. c:\program files\kingsoft\kac\service\kaccore.exe
          Kingsoft Corporation
          Kingsoft Basic Service Module
          .text,.orpc,.rdata,.data,.rsrc,


      MsDtsServer
        [A ] 23. c:\program files\microsoft sql server\90\dts\binn\msdtssrvr.exe
          Microsoft Corporation
         
          .text,.rsrc,.reloc,


      msftesql$WINCC
        [A ] 24. c:\program files\microsoft sql server\mssql.1\mssql\binn\msftesql.exe
          Microsoft Corporation
          PKM executable
          .text,.data,.rsrc,


      MSSQL$WINCC
        [A ] 25. c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe
          Microsoft Corporation
          SQL Server Windows NT
          .text,.data,.sdbid,.rsrc,


      MSSQLServerADHelper
        [A ] 26. c:\program files\microsoft sql server\90\shared\sqladhlp90.exe
          Microsoft Corporation
          Microsoft SQL Server Active Directory Helper Service
          .text,.data,.rsrc,


      msvsmon80
        [A ] 27. c:\program files\microsoft visual studio 8\common7\ide\remote debugger\x86\msvsmon.exe
          Microsoft Corporation
          Visual Studio Remote Debugging Monitor
          .text,.orpc,.data,.rsrc,


      NetTcpPortSharing
        [A ] 28. c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe
          Microsoft Corporation
          SMSvcHost.exe
          .text,.rsrc,.reloc,
          文件名和"svchost.exe"类似


      New_AlarmLogger
        [A ] 29. c:\program files\wonderware\intouch\wwalmlogger.exe
          Invensys Systems, Inc.
          Alarm Logger
          .text,.rdata,.data,.rsrc,.reloc,


      OpcEnum
        [A ] 30. c:\windows\system32\opcenum.exe
          OPC Foundation
          OPC Server Enumerator 1.10
          .text,.rdata,.data,.rsrc,


      ose
        [A ] 31. c:\program files\common files\microsoft shared\source engine\ose.exe
          Microsoft Corporation
          Office Source Engine
          .text,.data,.rsrc,


      Pml Driver HPZ12
        [A ] 32. c:\windows\system32\hpzipm12.dll
          Hewlett-Packard
          PmlDrv Module
          .text,.data,.rsrc,.reloc,


      RedundancyControl
        [AM] 33. c:\program files\common files\siemens\ace\bin\redundancycontrol.exe
          SIEMENS AG
          WinCC RedundancyControl Module
          .text,.rdata,.data,.rsrc,


      RedundancyState
        [A ] 34. c:\program files\common files\siemens\ace\bin\redundancystate.exe
          SIEMENS AG
          WinCC RedundancyState Module
          .text,.rdata,.data,.rsrc,


      RegSrvc
        [AM] 35. c:\program files\common files\intel\wirelesscommon\regsrvc.exe
          Intel(R) Corporation
          Intel(R) PROSet/Wireless Registry Service
          .text,.rdata,.data,.rsrc,


      RsRavMon
        [AM] 36. c:\program files\rising\rav\ravmond.exe
          Beijing Rising Information Technology Co., Ltd.
          ravmond
          .text,.rdata,.data,.rsrc,


      RsRFWMon
        [AM] 37. c:\program files\rising\rfw\ravmond.exe
          Beijing Rising Information Technology Co., Ltd.
          ravmond
          .text,.rdata,.data,.rsrc,


      S24EventMonitor
        [AM] 38. c:\program files\intel\wifi\bin\s24evmon.exe
          Intel(R) Corporation
          Intel(R) Wireless Management Service
          .text,.rdata,.data,.rsrc,


      s7asysvx
        [A ] 39. c:\program files\siemens\step7\s7bin\s7asysvx.exe
          SIEMENS AG
          S7 Global Services
          .text,.rdata,.data,.rsrc,


      s7oiehsx
        [A ] 40. c:\program files\common files\siemens\s7iepg\s7oiehsx.exe
          SIEMENS AG
          HelpService / W2k/XP
          .text,.rdata,.data,.idata,.rsrc,.reloc,


      S7TraceServiceX
        [A ] 41. c:\program files\common files\siemens\automation\traceengine\bin\s7traceservicex.exe
          SIEMENS AG
          S7TraceServiceX Module
          .text,.rdata,.data,.rsrc,


      S7_IOServer
        [A ] 42. c:\program files\factorysuite\ioserver\s7\s7.exe
          Wonderware Corporation
          I/O Server for Siemens SIMATIC NET S7
          .text,.rdata,.data,.rsrc,.reloc,


      SCSMonitor
        [A ] 43. c:\program files\common files\siemens\ace\bin\scsmx.exe
          SIEMENS AG
          SCSMonitorX
          .text,.rdata,.data,.rsrc,


      ServiceLayer
        [A ] 44. c:\program files\pc connectivity solution\servicelayer.exe
          Nokia.
          ServiceLayer Module
          .text,.rdata,.data,.rsrc,


      sim9sync
        [A ] 45. c:\program files\siemens\simatic.net\simnetcom\sim9sync.exe
          Siemens AG
          SIMATIC NET Synchronization Service
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Configuration Server
        [A ] 46. c:\program files\siemens\simatic.net\opc2\bincfg\scorecfg.exe
          Siemens AG
          Simatic Net Configuration Server
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Configuration Service
        [A ] 47. c:\program files\siemens\simatic.net\opc2\bincfg\sservcfg.exe
          Siemens AG
          SIMATIC NET Configuration Service
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server DP
        [A ] 48. c:\program files\siemens\simatic.net\opc2\bindp\scoredp.exe
          Siemens AG
          SIMATIC NET Core Server DP
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server DP2
        [A ] 49. c:\program files\siemens\simatic.net\opc2\bindp2\scoredp2.exe
          Siemens AG
          SIMATIC NET Core Server DP2
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server FDL
        [A ] 50. c:\program files\siemens\simatic.net\opc2\binfdl\scorefdl.exe
          Siemens AG
          SIMATIC NET Core Server FDL
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server FMS
        [A ] 51. c:\program files\siemens\simatic.net\opc2\binfms\scorefms.exe
          Siemens AG
          SIMATIC NET Core Server FMS
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server PD
        [A ] 52. c:\program files\siemens\simatic.net\opc2\binpd\scorepd.exe
          Siemens AG
          SIMATIC NET Core Server PD
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server PROFINET CbA
        [A ] 53. c:\program files\siemens\simatic.net\opc2\binpn\scorepn.exe
          Siemens AG
          SIMATIC NET Core Server PROFINET CbA
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server PROFINET IO
        [A ] 54. c:\program files\siemens\simatic.net\opc2\binpnio\scorepnio.exe
          Siemens AG
          SIMATIC NET Core Server PROFINET IO
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server S7
        [A ] 55. c:\program files\siemens\simatic.net\opc2\bins7\scores7.exe
          Siemens AG
          SIMATIC NET Core Server S7
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server SNMP
        [A ] 56. c:\program files\siemens\simatic.net\opc2\binsnmp\scoresnmp.exe
          Siemens AG
          SIMATIC NET Core Server SNMP
          .text,.rdata,.data,.rsrc,


      SIMATIC NET Core Server SR
        [A ] 57. c:\program files\siemens\simatic.net\opc2\binsr\scoresr.exe
          Siemens AG
          SIMATIC NET Core Server SR
          .text,.rdata,.data,.rsrc,


      SIMATIC NET P&P Manager
        [A ] 58. c:\program files\siemens\simatic.net\simnetcom\simnetpnpman.exe
          Siemens AG
          Simatic Net Plug&Play Service
          .text,.rdata,.data,.rsrc,


      SIMATIC NET RouteManager
        [A ] 59. c:\program files\common files\siemens\s7wnrmsx\s7wnrmsx.exe
          SIEMENS AG
          SIMATIC Runtime: Route Manager
          .text,.rdata,.data,.rsrc,


      slssvc
        [A ] 60. c:\program files\common files\archestra\slssvc.exe
          Invensys Systems, Inc.
          SuiteLink Inbound Connection Service
          .text,.rdata,.data,.rsrc,


      SQLAgent$WINCC
        [A ] 61. c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlagent90.exe
          Microsoft Corporation
          SQLAGENT90 - SQL Server Agent
          .text,.data,.rsrc,


      SQLBrowser
        [A ] 62. c:\program files\microsoft sql server\90\shared\sqlbrowser.exe
          Microsoft Corporation
          SQL Browser Service EXE
          .text,.data,.sdbid,.rsrc,


      SQLWriter
        [A ] 63. c:\program files\microsoft sql server\90\shared\sqlwriter.exe
          Microsoft Corporation
          SQL Server VSS Writer
          .text,.data,.rsrc,


      SSCService
        [A ] 64. c:\program files\common files\siemens\simaticsecuritycontrol\ssc_service_x.exe
          SIEMENS AG
          SIMATIC Security Control service?
          .text,.rdata,.data,.rsrc,


      StatMgr
        [A ] 65. c:\program files\common files\siemens\s7wnsmsx\s7wnsmsx.exe
          Siemens AG
          Management of SIMATIC PC components
          .text,.rdata,.data,.rsrc,


      SUService
        [A ] 66. c:\program files\lenovo\system update\suservice.exe
          Lenovo Group Limited
          ThinkVantage System Update Service
          .text,.rsrc,.reloc,


      TPHDEXLGSVC
        [AM] 67. c:\windows\system32\tphdexlg.exe
          Lenovo.
          ThinkVantage Active Protection System - HDD Logger Module
          .text,.data,.rsrc,


      TpKmpSVC
        [AM] 68. c:\windows\system32\tpkmpsvc.exe
          .text,.rdata,.data,


      TVT Scheduler
        [A ] 69. c:\program files\common files\lenovo\scheduler\tvtsched.exe
          Lenovo Group Limited
          ThinkVantage Scheduler
          .text,.rdata,.data,.rsrc,


      WLANKEEPER
        [AM] 70. c:\program files\intel\wifi\bin\wlkeeper.exe
          Intel(R) Corporation
          Intel(R) WLANKeeper SSO Service
          .text,.rdata,.data,.rsrc,


      WudfSvc
        [A ] 71. c:\windows\system32\wudfsvc.dll
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Service
          .text,.data,.rsrc,.reloc,


      WWLOGSVC
        [A ] 72. c:\program files\common files\archestra\wwlogsvc.exe
          Wonderware Corporation
          Wonderware Message Logger Service
          .text,.rdata,.data,.rsrc,.reloc,


      WWNetDDE
        [A ] 73. c:\program files\common files\archestra\wwnetdde.exe
          Invensys Systems, Inc.
          WWNetDDE Application
          .text,.rdata,.data,.rsrc,.reloc,


      WwRpcSvr
        [A ] 74. c:\windows\system32\wwinstsvc.exe
          Wonderware Corporation
          Wonderware User Validation Procedures
          .text,.rdata,.data,.rsrc,.reloc,

+ 内核驱动
    + HKLM\System\CurrentControlSet\Services
      ADIHdAudAddService
        [A ] 75. c:\windows\system32\drivers\adihdaud.sys
          Analog Devices, Inc.
          High Definition Audio Function Driver(Release Candidate 1)
          .text,CODE,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      AEAudioService
        [A ] 76. c:\windows\system32\drivers\aeaudio.sys
          Andrea Electronics Corporation
          Audio Noise Filtering Driver (32-bit)
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      atmeltpm
        [A ] 77. c:\windows\system32\drivers\atmeltpm.sys
          Atmel, Inc.
          Atmel TPM Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      btaudio
        [A ] 78. c:\windows\system32\drivers\btaudio.sys
          Broadcom Corporation.
          Bluetooth Audio Device
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      BTDriver
        [A ] 79. c:\windows\system32\drivers\btport.sys
          Broadcom Corporation.
          Bluetooth BTPORT Driver for Windows 2000
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      BTKRNL
        [A ] 80. c:\windows\system32\drivers\btkrnl.sys
          Broadcom Corporation.
          Bluetooth Bus Enumerator
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      BTWDNDIS
        [A ] 81. c:\windows\system32\drivers\btwdndis.sys
          Broadcom Corporation.
          Bluetooth LAN Access Server Driver
          .text,PNP,.data,INIT,.rsrc,.reloc,


      BTWUSB
        [A ] 82. c:\windows\system32\drivers\btwusb.sys
          Broadcom Corporation.
          Driver for Bluetooth USB Devices
          .text,PNP,.data,INIT,.rsrc,.reloc,


      c5511w2k
        [A ] 83. c:\windows\system32\drivers\c5511w2k.sys
          Siemens AG
          Driver for CP 5511
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      dpmconv
        [A ] 84. c:\windows\system32\drivers\dpmconv.sys
          SIEMENS AG
          DPM Kernel Mode Driver
          .text,page,.rdata,.data,.rsrc,.reloc,


      Dpmcslv
        [A ] 85. c:\windows\system32\drivers\dpmcslv.sys
          Siemens AG
          PROFIBUS DP-Slave-Driver
          .text,.data,INIT,.rsrc,.reloc,


      Dpmtrcdd
        [A ] 86. c:\windows\system32\drivers\dpmtrcdd.sys
          SIEMENS AG
          DPM Trace Driver
          .text,.data,.CRT,PAGE,INIT,.rsrc,.reloc,


      e1express
        [A ] 87. c:\windows\system32\drivers\e1e5132.sys
          Intel Corporation
          Intel(R) PRO/1000 Adapter NDIS 5.2 deserialized driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      GT680x
        [A ] 88. c:\windows\system32\drivers\gt680x.sys
           
          USB Scanner Driver
          .text,.data,INIT,.rsrc,.reloc,


      HDAudBus
        [A ] 89. c:\windows\system32\drivers\hdaudbus.sys
          Windows (R) Server 2003 DDK provider
          High Definition Audio Bus Driver v1.0a
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      HmPci
        [A ] 90. c:\windows\system32\drivers\hmpci.sys
          Microsoft Corporation
          HM 32-Bit NT
          .text,.data,INIT,.rsrc,.reloc,


      hookcont
        [A ] 91. c:\windows\system32\drivers\hookcont.sys
          Beijing Rising Information Technology Co., Ltd.
          HookCont Driver for x86
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      hooksys
        [A ] 92. c:\windows\system32\drivers\hooksys.sys
          Beijing Rising Information Technology Co., Ltd.
          Hooksys.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HSFHWAZL
        [A ] 93. c:\windows\system32\drivers\hsfhwazl.sys
          Conexant Systems, Inc.
          HSF_HWAZL WDM driver
          .text,GLOBAL_I,.rdata,.data,.CRT,GLOBAL_I,.STL,PAGE,INIT,.rsrc,.reloc,


      HSF_DPV
        [A ] 94. c:\windows\system32\drivers\hsf_dpv.sys
          Conexant Systems, Inc.
          HSF_DP driver
          .text,_PARA_DA,.rdata,.data,.STL,.CRT,PAGE,INIT,.rsrc,.reloc,


      HSXHWAZL
        [A ] 95. c:\windows\system32\drivers\hsxhwazl.sys
          Conexant Systems, Inc.
          HSF_HWAZL WDM driver
          .text,GLOBAL_I,.rdata,.data,.CRT,GLOBAL_I,.STL,PAGE,INIT,.rsrc,.reloc,


      IBMPMDRV
        [A ] 96. c:\windows\system32\drivers\ibmpmdrv.sys
          Lenovo.
          ThinkPad Power Management Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      KAVBootC
        [A ] 97. c:\windows\system32\drivers\kavbootc.sys
          Kingsoft Corporation
          Kingsoft Boot Clean
          .text,.data,.CRT,INIT,.rsrc,.reloc,


      mdmxsdk
        [A ] 98. c:\windows\system32\drivers\mdmxsdk.sys
          Conexant
          Diagnostic Interface x86 Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      NETw4x32
        [A ] 99. c:\windows\system32\drivers\netw4x32.sys
          Intel Corporation
          Intel? Wireless WiFi Link Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      NETw5x32
        [A ] 100. c:\windows\system32\drivers\netw5x32.sys
          Intel Corporation
          Intel? Wireless WiFi Link Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      nmwcd
        [A ] 101. c:\windows\system32\drivers\nmwcd.sys
          Nokia
          Nokia USB Phone Bus Driver
          .text,.rdata,.data,PAGESRP0,INIT,.rsrc,.reloc,


      nmwcdc
        [A ] 102. c:\windows\system32\drivers\nmwcdc.sys
          Nokia
          Nokia USB Phone Generic Client
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      nmwcdcj
        [A ] 103. c:\windows\system32\drivers\nmwcdcj.sys
          Nokia
          Nokia USB Phone Modem Client
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      nmwcdcm
        [A ] 104. c:\windows\system32\drivers\nmwcdcm.sys
          Nokia
          Nokia USB Phone Modem Client
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      npkcrypt
        [A ] 105. c:\windows\system32\npkcrypt.sys


      npkycryp
        [A ] 106. c:\windows\system32\npkycryp.sys


      PROCDD
        [A ] 107. c:\windows\system32\drivers\procdd.sys
          Lenovo Group Limited
          IPS Helper Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      psadd
        [A ] 108. c:\windows\system32\drivers\psadd.sys
          Lenovo (United States) Inc.
          SMBIOS Driver
          .text,.rdata,.data,PAGE,PAGELOCK,INIT,.rsrc,.reloc,


      PxHelp20
        [A ] 109. c:\windows\system32\drivers\pxhelp20.sys
          Sonic Solutions
          Px Engine Device Driver for Windows 2000/XP
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RfwBase9
        [A ] 110. c:\windows\system32\drivers\rfwbase.sys
          Beijing Rising Information Technology Co., Ltd.
          rfwbase5.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rfwtdi
        [A ] 111. c:\program files\rising\rfw\rfwtdi.sys
          Beijing Rising Information Technology Co., Ltd.
          rfwtdi.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsAntiSpyware
        [A ] 112. c:\windows\system32\drivers\rsboot.sys
          Beijing Rising Technology Co., Ltd.
          Anti-RootKit Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rsassist
        [A ] 113. c:\windows\system32\drivers\rsassist.sys
          Beijing Rising Information Technology Co., Ltd.
          RsAssist.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rsfwdrv
        [A ] 114. c:\program files\rising\rfw\rsfwdrv.sys
          Beijing Rising Information Technology Co., Ltd.
          rsfwdrv.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsNTGDI
        [A ] 115. c:\windows\system32\drivers\rsntgdi.sys
          Beijing Rising Information Technology Co., Ltd.
          RsNTGDI
          .text,.rdata,INIT,.rsrc,.reloc,


      s24trans
        [A ] 116. c:\windows\system32\drivers\s24trans.sys
          Intel Corporation
          Intel WLAN Packet Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      S7ODPX2X
        [A ] 117. c:\windows\system32\drivers\s7odpx2x.sys
          SIEMENS AG
          Knotentaufe Kernel Mode Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      s7oefs_x
        [A ] 118. c:\windows\system32\drivers\s7oefs_x.sys
          SIEMENS AG
          Enhanced File System for MPI
          .text,.rdata,INIT,.rsrc,.reloc,


      S7OPCMCX
        [A ] 119. c:\windows\system32\drivers\s7opcmcx.sys
          SIEMENS AG
          DP 12 PCMCIA Kernel Mode Driver
          .text,page,.rdata,.data,INIT,.rsrc,.reloc,


      S7osobux
        [A ] 120. c:\windows\system32\drivers\s7osobux.sys
          SIEMENS AG
          SOFTBUS  Kernel Mode WDM Driver
          .text,page,.rdata,.data,INIT,.rsrc,.reloc,


      s7otranx
        [A ] 121. c:\windows\system32\drivers\s7otranx.sys
          SIEMENS AG
          MPI-Transport Kernel Mode Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      s7snsrtx
        [A ] 122. c:\windows\system32\drivers\s7snsrtx.sys
          SIEMENS AG
          SIEMENS RT-Protocol (ether-type 0x8892)
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Secdrv
        [A ] 123. c:\windows\system32\drivers\secdrv.sys
          Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
          Macrovision SECURITY Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      seckey2
        [A ] 124. c:\windows\system32\drivers\seckey2.sys
          .share,.text,.rdata,.data,INIT,.reloc,


      Sentinel
        [A ] 125. c:\windows\system32\drivers\sentinel.sys
          SafeNet, Inc.
          Sentinel System Driver (NT Parallel driver)
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Shockprf
        [A ] 126. c:\windows\system32\drivers\apsx86.sys
          Lenovo.
          Shockproof Disk Driver
          .text,.rdata,.data,PAGE,PAGE_DAT,INIT,.rsrc,.reloc,


      Smapint
        [A ] 127. c:\windows\system32\drivers\smapint.sys
          Microsoft Corporation
          SMAPI I/O
          .text,.rdata,.data,.idata,.rsrc,.reloc,


      smihlp2
        [A ] 128. c:\program files\common files\thinkvantage fingerprint software\drivers\smihlp.sys
          UPEK Inc.
          SMI helper driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      SNTIE
        [A ] 129. c:\windows\system32\drivers\sntie.sys
          SIEMENS AG
          SOFTNET IE ISO Protocol Driver
          .text,_LTEXT,.rdata,.data,_LDATA,INIT,.rsrc,.reloc,


      SNTNLUSB
        [A ] 130. c:\windows\system32\drivers\sntnlusb.sys
          SafeNet, Inc.
          Sentinel USB Security Device Driver
          .text,_LTEXT,_LDATA,.data,INIT,.rsrc,.reloc,


      SynTP
        [A ] 131. c:\windows\system32\drivers\syntp.sys
          Synaptics, Inc.
          Synaptics Touchpad Driver
          .text,.data,INIT,.rsrc,.reloc,


      TcUsb
        [A ] 132. c:\windows\system32\drivers\tcusb.sys
          UPEK Inc.
          TouchChip USB Kernel Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TDSMAPI
        [A ] 133. c:\windows\system32\drivers\tdsmapi.sys
          .text,.rdata,.data,.reloc,


      TPDIGIMN
        [A ] 134. c:\windows\system32\drivers\apshm86.sys
          Lenovo.
          ThinkVantage Active Protection System HID Digitizer Activity Monitor Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      tpflhlp
        [A ] 135. c:\program files\lenovo\system update\session\79uj24us\tpflhlp.sys
          Lenovo Group Limited
          SMI Driver for Lenovo system
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TPHKDRV
        [A ] 136. c:\windows\system32\drivers\tphkdrv.sys
          IBM Corporation
          ThinkPad Hotkey Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TPPWRIF
        [A ] 137. c:\windows\system32\drivers\tppwrif.sys
          .text,.rdata,.data,.reloc,


      TSKSP
        [A ] 138. c:\program files\tencent\qq\qqdoctor\tsksp.sys
          Tencent
          TSKSP
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TSMAPIP
        [A ] 139. c:\windows\system32\drivers\tsmapip.sys
          .text,.rdata,.data,.reloc,


      UIUSys
        [A ] 140. c:\windows\system32\drivers\uiusys.sys


      vsnl2ada
        [A ] 141. c:\windows\system32\drivers\vsnl2ada.sys
          SIEMENS AG
          FDLAda Kernel Mode Driver
          .text,page,.data,INIT,.rsrc,.reloc,

w39n51
        [A ] 142. c:\windows\system32\drivers\w39n51.sys
          Intel? Corporation
          Intel? Wireless LAN Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      winachsf
        [A ] 143. c:\windows\system32\drivers\hsf_cnxt.sys
          Conexant Systems, Inc.
          HSF_CNXT driver
          .text,_LTEXT,.rdata,.data,_LDATA,PAGESER,INIT,.rsrc,.reloc,


      WudfPf
        [A ] 144. c:\windows\system32\drivers\wudfpf.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Platform Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      WudfRd
        [A ] 145. c:\windows\system32\drivers\wudfrd.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Reflector
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      ZSMC302
        [A ] 146. c:\windows\system32\drivers\usbvm31b.sys
          VM
          Video streaming and Capture Device Driver
          .text,.data,PAGECONS,INIT,.rsrc,.reloc,




  + 文件系统驱动
    + HKLM\System\CurrentControlSet\Services
      exFat
        [A ] 147. c:\windows\system32\drivers\exfat.sys
          Microsoft Corporation
          Microsoft Extended FAT File System
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      KVFileGuard
        [A ] 148. f:\kvusb\antivirus\kvfg.sys




  + 系统登陆自运行
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
      GinaDLL
        [AM] 149. c:\windows\system32\iwpdgina.dll
          Intel(R) Corporation
          Intel(R) PROSet/Wireless IWPDGINA Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      AtiExtEvent
        [AM] 150. c:\windows\system32\ati2evxx.dll
          ATI Technologies Inc.
          ATI External Event Utility DLL Module
          .text,.rdata,.data,.rsrc,.reloc,


      psfus
        [AM] 151. c:\windows\system32\psqlpwd.dll
          UPEK Inc.
          Logon stub
          .text,.rdata,.data,.rsrc,.reloc,


      tpfnf2
        [A ] 152. c:\program files\lenovo\hotkey\notifyf2.dll
          .text,.rdata,.data,.reloc,


      tphotkey
        [AM] 153. c:\program files\lenovo\hotkey\tphklock.dll
          .text,.rdata,.data,.reloc,




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {47833539-D0C5-4125-9FA8-0819E2EAAC93}
        [AM] 154. c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.dll
          Adobe Systems Incorporated
          Adobe IE plugin
          .text,.rdata,.data,.rsrc,.reloc,


      {2318C2B1-4965-11d4-9B18-009027A5CD4F}
        [AM] 155. c:\program files\google\google toolbar\googletoolbar_32.dll
          Google Inc.
          Google Toolbar
          .text,.rdata,.data,.rsrc,.reloc,


      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [AM] 156. c:\windows\system32\kakatool.dll
          Beijing Rising Information Technology Co., Ltd.
          ToolBar
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {01443AEC-0FD1-40fd-9C87-E93D1494C233}
        [AM] 157. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll
          深圳市迅雷网络技术有限公司
          TDAtOnce
          .text,.rdata,.data,sharedda,.rsrc,.reloc,


      {889D2FEB-5411-4565-8998-1DD2C5261283}
        [AM] 158. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
          深圳市迅雷网络技术有限公司
          XunLeiBHO
          .text,.rdata,.data,.rsrc,.reloc,


      {9030D464-4C02-4ABF-8ECC-5164760863C6}
        [AM] 159. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
          Microsoft Corporation
          WindowsLiveLogin.dll
          .text,.data,.rsrc,.reloc,


      {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
        [AM] 160. c:\windows\system32\urlfilter.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising AntiSpyware UrlFilter Module
          .text,.rdata,.data,.rsrc,.reloc,


      {AA58ED58-01DD-4d91-8333-CF10577473F7}
        [AM] 155. c:\program files\google\google toolbar\googletoolbar_32.dll
          Google Inc.
          Google Toolbar
          .text,.rdata,.data,.rsrc,.reloc,


      {AE7CD045-E861-484f-8273-0445EE161910}
        [AM] 154. c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.dll
          Adobe Systems Incorporated
          Adobe IE plugin
          .text,.rdata,.data,.rsrc,.reloc,


      {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
        [AM] 161. c:\program files\google\googletoolbarnotifier\5.3.4501.1418\swg.dll
          Google Inc.
          GoogleToolbarNotifier
          .text,.rdata,.data,.rsrc,.reloc,


      {C84D72FE-E17D-4195-BB24-76C02E2E7C4E}
        [AM] 162. c:\program files\google\google toolbar\component\fastsearch_b7c5ac242193bb3e.dll
          Google Inc.
          Fast Search
          .text,.rdata,.data,.rsrc,.reloc,


      {D13424D4-2159-46EC-A46D-17BD39FDC3ED}
        [AM] 157. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll
          深圳市迅雷网络技术有限公司
          TDAtOnce
          .text,.rdata,.data,sharedda,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Script
        [A ] 163. c:\program files\thinkpad\bluetooth software\btsendto_ie.htm


      Exec
        [A ] 164. c:\program files\messenger\msmsgs.exe
          Microsoft Corporation
          Windows Messenger
          .text,.data,.rsrc,



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars
      {182EC0BE-5110-49C8-A062-BEB1D02A220B}
        [AM] 154. c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.dll
          Adobe Systems Incorporated
          Adobe IE plugin
          .text,.rdata,.data,.rsrc,.reloc,



    + HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars
      {182EC0BE-5110-49C8-A062-BEB1D02A220B}
        [AM] 154. c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.dll
          Adobe Systems Incorporated
          Adobe IE plugin
          .text,.rdata,.data,.rsrc,.reloc,




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      application/octet-stream
        [A ] 165. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      application/x-complus
        [A ] 165. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      application/x-msdownload
        [A ] 165. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      text/xml
        [AM] 166. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
          Microsoft Corporation
          Microsoft Office XML MIME Filter
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      livecall
        [A ] 167. c:\program files\windows live\messenger\msgrapp.14.0.8089.0726.dll
          Microsoft Corporation
          Windows Live Messenger Protocol Handler Module
          .text,.data,.rsrc,.reloc,


      ms-help
        [A ] 168. c:\program files\common files\microsoft shared\help\hxds.dll
          Microsoft Corporation
          Microsoft? Help Data Services Module
          .text,.data,.rsrc,.reloc,


      msnim
        [A ] 167. c:\program files\windows live\messenger\msgrapp.14.0.8089.0726.dll
          Microsoft Corporation
          Windows Live Messenger Protocol Handler Module
          .text,.data,.rsrc,.reloc,


      mso-offdap
        [A ] 169. c:\program files\common files\microsoft shared\web components\10\owc10.dll
          Microsoft Corporation
          Microsoft Office XP Web Components
          .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc,


      mso-offdap11
        [A ] 170. c:\program files\common files\microsoft shared\web components\11\owc11.dll
          Microsoft Corporation
          Microsoft Office Web Components 2003
          .text,.data,.rtext,Shared,.cdata,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {F9DB5320-233E-11D1-9F84-707F02C10627}
        [AM] 171. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
          Adobe Systems, Inc.
          PDF Shell Extension
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      Microsoft.XPS.Shell.Metadata.1
        [A ] 172. c:\windows\system32\xpsshhdr.dll
          Microsoft Corporation
          Package Document Shell Extension Handler
          .text,.data,.rsrc,.reloc,


      Microsoft.XPS.Shell.Thumbnail.1
        [A ] 172. c:\windows\system32\xpsshhdr.dll
          Microsoft Corporation
          Package Document Shell Extension Handler
          .text,.data,.rsrc,.reloc,


      Web Folders
        [A ] 173. c:\program files\common files\microsoft shared\web folders\msonsext.dll
          Microsoft Corporation
          Microsoft Web Folders
          .text,.data,.rsrc,.reloc,


      Microsoft Office Outlook Desktop Icon Handler
        [A ] 174. c:\program files\microsoft office\office11\mlshext.dll
          Microsoft Corporation
          Microsoft Shell Extension Library
          .text,.data,.rsrc,.reloc,


      Microsoft Office HTML Icon Handler
        [AM] 175. c:\program files\microsoft office\office11\msohev.dll
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,.reloc,


      Microsoft Office Outlook Custom Icon Handler
        [A ] 176. c:\program files\microsoft office\office11\olkfstub.dll
          Microsoft Corporation
          Outlook Shell Hook for Start/Find
          .text,.data,.rsrc,.reloc,


      RISING
        [AM] 177. c:\windows\system32\ravext.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 177. c:\windows\system32\ravext.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,




  + 用户登陆自运行项目
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
      Userinit
        [AM] 178. c:\windows\system32\almxpmgr.exe
          SIEMENS AG
          Extended Program Manager
          .text,.rdata,.data,.rsrc,



    + HKCU\Software\Microsoft\Windows\CurrentVersion\Run
      swg
        [AM] 179. c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe
          Google Inc.
          GoogleToolbarNotifier
          .text,.rdata,.data,.rsrc,


      rulestarter2
        [A ] 180. c:\windows\system32\rulestarter.exe
          UPX0,UPX1,.rsrc,


      rulestarter
        [A ] 181. c:\windows\system32\rtrsca.exe
          RvST
          RTRsca
          0,1,2,3,4,5,6,7,8,9,10,



    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      TpShocks
        [AM] 182. c:\windows\system32\tpshocks.exe
          Lenovo.
          ThinkVantage Active Protection System
          .text,.rdata,.data,.rsrc,


      TPHOTKEY
        [AM] 183. c:\program files\lenovo\hotkey\tposdsvc.exe
          Lenovo Group Limited
          On screen display message handler
          .text,.rdata,.data,.rsrc,


      TP4EX
        [A ] 184. c:\windows\system32\tp4ex.exe
          Lenovo Group Limited
          TrackPoint Accessibility Features
          .text,.rdata,.data,.rsrc,


      SynTPLpr
        [AM] 185. c:\program files\synaptics\syntp\syntplpr.exe
          Synaptics, Inc.
          TouchPad Driver Helper Application
          .text,.rdata,.data,.rsrc,


      SynTPEnh
        [AM] 186. c:\program files\synaptics\syntp\syntpenh.exe
          Synaptics, Inc.
          Synaptics TouchPad Enhancements
          .text,.rdata,.data,.rsrc,


      LPManager
        [AM] 187. c:\program files\thinkvantage\prdctr\lpmgr.exe
          Lenovo Group Limited
          ThinkVantage Productivity Center Manager
          .text,.rdata,.data,.rsrc,


      IntelZeroConfig
        [AM] 188. c:\program files\intel\wifi\bin\zcfgsvc.exe
          Intel(R) Corporation
          Intel(R) PROSet/Wireless Zero Config Service
          .text,.rdata,.data,.rsrc,


      IntelWireless
        [AM] 189. c:\program files\common files\intel\wirelesscommon\ifrmewrk.exe
          Intel(R) Corporation
          Intel(R) PROSet/Wireless Framework
          .text,.rdata,.data,.rsrc,


      IMSCMig
        [A ] 190. c:\program files\common files\microsoft shared\ime\imsc40a\imscmig.exe
          Microsoft Corporation
          微软拼音输入法安装工具
          .text,.data,.rsrc,


      EZEJMNAP
        [AM] 191. c:\program files\thinkpad\utilities\ezejmnap.exe
          Lenovo Group Limited
          ThinkPad EasyEject Support Application
          .text,.rdata,.data,.rsrc,


      RavTray
        [AM] 192. c:\program files\rising\rav\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising tray framework
          .text,.rdata,.data,.rsrc,


      RFWTray
        [AM] 193. c:\program files\rising\rfw\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising tray framework
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 194. c:\program files\rising\antispyware\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          RSTray
          .text,.rdata,.data,.rsrc,




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 195. c:\windows\system32\bsmain.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising Antivirus 2010
          .text,.rdata,.data,.rsrc,.reloc,




  + 映像劫持
    + HKCR\.exe
      exefile\启用/禁用数字签名图标\Command
        [A ] 196. c:\windows\system32\acsignopt.exe
          Autodesk, Inc.
          AutoCAD component
          .text,.rdata,.data,.rsrc,



    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 197. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 197. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 197. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 197. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.mp3
      Xmp.mp3\open\Command
        [A ] 198. c:\program files\thunder network\xmp\xmp.exe
          Thunder Networking Technologies,LTD
          迅雷看看播放器
          .text,.rdata,.data,.rsrc,

+ 打印机监控
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      Adobe PDF Port
        [AM] 199. c:\windows\system32\adobepdf.dll
          Adobe Systems Incorporated.
          Acrobat ? PDF Port
          .text,.data,.CRT,.rsrc,.reloc,


      Bluetooth 打印机端口
        [AM] 200. c:\windows\system32\bthcrp.dll
          Broadcom Corporation.
          bthcrp DLL
          .text,.rdata,.data,.rsrc,.reloc,


      CPCA Language Monitor2
        [AM] 201. c:\windows\system32\aucplmnt.dll
          CANON INC.
          CANON CP Language Monitor
          .text,.rdata,.data,.rsrc,.reloc,


      HP Master Monitor
        [AM] 202. c:\windows\system32\hpbmmon.dll
          Hewlett-Packard
          Win32 Master Monitor
          .text,.rdata,.data,.rsrc,.reloc,


      HP Standard TCP/IP Port
        [AM] 203. c:\windows\system32\hptcpmon.dll
          Hewlett Packard
          Standard TCP/IP Port Monitor DLL
          .text,.rdata,.data,.rsrc,.reloc,


      Microsoft Document Imaging Writer Monitor
        [AM] 204. c:\windows\system32\mdimon.dll
          Microsoft Corporation
          Microsoft? Document Imaging
          .text,.data,.rsrc,.reloc,


      PRTmate
        [AM] 205. c:\windows\system32\prtmate.dll
          .text,.data,.edata,.rsrc,.reloc,




  + 安全验证
    + HKLM\SYSTEM\CurrentControlSet\Control\Lsa
      Notification Packages
        [AM] 151. c:\windows\system32\psqlpwd.dll
          UPEK Inc.
          Logon stub
          .text,.rdata,.data,.rsrc,.reloc,





+ 正在运行的进程
  + 000000ac(172) SynTPLpr.exe
    00400000[0001B000]
      [AM] 185. c:\program files\synaptics\syntp\syntplpr.exe
        Synaptics, Inc.
        TouchPad Driver Helper Application
        .text,.rdata,.data,.rsrc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 000000c8(200) SynTPEnh.exe
    00400000[00098000]
      [AM] 186. c:\program files\synaptics\syntp\syntpenh.exe
        Synaptics, Inc.
        Synaptics TouchPad Enhancements
        .text,.rdata,.data,.rsrc,


    10000000[00012000]
      [ M] 207. c:\windows\system32\syncom.dll
        Synaptics, Inc.
        SynCOM
        .text,.rdata,.data,.CRT,.rsrc,.reloc,


    63010000[00018000]
      [ M] 208. c:\windows\system32\syntpapi.dll
        Synaptics, Inc.
        SynTPAPI
        .text,.rdata,.data,.rsrc,.reloc,


    013F0000[00024000]
      [AM] 177. c:\windows\system32\ravext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    01460000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 000000cc(204) TPONSCR.exe
    00400000[00015000]
      [ M] 209. c:\program files\lenovo\hotkey\tponscr.exe
        Lenovo Group Limited
        On screen display drawer
        .text,.rdata,.data,.rsrc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 000000e8(232) rundll32.exe
    10000000[00033000]
      [ M] 210. c:\program files\thinkpad\utilities\pwrmgrtr.dll
        Lenovo Group Limited
        ThinkPad Power Manager Background Monitor and Tray Battery Gauge
        .text,.rdata,.data,.pm_shar,.rsrc,.reloc,


    00A60000[00007000]
      [ M] 211. c:\program files\thinkpad\utilities\sc\pwrmgrrt.dll
        .text,.rdata,.data,.rsrc,.reloc,


    00A70000[00012000]
      [ M] 212. c:\program files\thinkpad\utilities\pwrmgrif.dll
        .text,.rdata,.data,.sh_data,.reloc,


    00CF0000[00007000]
      [ M] 213. c:\windows\system32\sensor.dll
        Lenovo.
        ThinkVantage Active Protection System - Shock Sensor Module
        .text,.data,.rsrc,.reloc,


    00D00000[00014000]
      [ M] 214. c:\windows\system32\oemdspif.dll
        ATI Technologies, Inc.
        ATI Driver Interface DLL
        .text,.rdata,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000140(320) LPMGR.exe
    00400000[0001C000]
      [AM] 187. c:\program files\thinkvantage\prdctr\lpmgr.exe
        Lenovo Group Limited
        ThinkVantage Productivity Center Manager
        .text,.rdata,.data,.rsrc,


    10000000[0000E000]
      [ M] 216. c:\program files\thinkvantage\prdctr\sc\lpresmgr.dll
        .text,.rdata,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 000001f4(500) IPSSVC.EXE
    00400000[0001B000]
      [AM] 21. c:\windows\system32\ipssvc.exe
        Lenovo Group Limited
        IPS Core Service
        .text,.rdata,.data,.rsrc,


    10000000[00027000]
      [ M] 217. c:\windows\system32\prochlp.dll
        Lenovo Group Limited
        IPS Helper DLL
        .text,.rdata,.data,._PROCHL,.rsrc,.reloc,


    00B00000[00032000]
      [ M] 218. c:\program files\lenovo\awaytask\awaydb.dll
        Lenovo Group Limited
        Maintenance Manager DB DLL
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000021c(540) ZCfgSvc.exe
    00400000[00152000]
      [AM] 188. c:\program files\intel\wifi\bin\zcfgsvc.exe
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Zero Config Service
        .text,.rdata,.data,.rsrc,


    10000000[0007D000]
      [ M] 219. c:\program files\intel\wifi\bin\pfqosmgr.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless QOS Profile Manager Module
        .text,.rdata,.data,.rsrc,.reloc,


    00BF0000[000A4000]
      [ M] 220. c:\program files\common files\intel\wirelesscommon\psregapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Registry API Module
        .text,.rdata,.data,.idata,.didat,.rsrc,.reloc,


    00D10000[00092000]
      [ M] 221. c:\program files\common files\intel\wirelesscommon\traceapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Trace API Module
        .text,.rdata,.data,.rsrc,.reloc,


    00E50000[0010F000]
      [ M] 222. c:\program files\common files\intel\wirelesscommon\libeay32.dll
        The OpenSSL Project, http://www.openssl.org/
        OpenSSL Shared Library
        .text,.rdata,.data,.rsrc,.reloc,


    00FB0000[0000C000]
      [ M] 223. c:\program files\intel\wifi\bin\langresources\chs\zcsvcchs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Zero Config Service
        .rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    01160000[000F6000]
      [ M] 224. c:\program files\intel\wifi\bin\murocapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Muroc API Module
        .text,.rdata,.data,Shared,.rsrc,.reloc,


    01290000[0007D000]
      [ M] 225. c:\program files\intel\wifi\bin\intstngs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Application Settings Module
        .text,.rdata,.data,.rsrc,.reloc,


    06E80000[00023000]
      [ M] 226. c:\program files\intel\wifi\bin\s24mudll.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless S24EvMon Module
        .text,.rdata,.data,.rsrc,.reloc,


    06ED0000[00177000]
      [ M] 227. c:\program files\intel\wifi\bin\pfmgrapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Profile Manager API Module
        .text,.rdata,.data,.rsrc,.reloc,


    07210000[00081000]
      [ M] 228. c:\program files\intel\wifi\bin\dbengine.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Secure DB Engine
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000022c(556) S24EvMon.exe
    00400000[000FD000]
      [AM] 38. c:\program files\intel\wifi\bin\s24evmon.exe
        Intel(R) Corporation
        Intel(R) Wireless Management Service
        .text,.rdata,.data,.rsrc,


    10000000[0007D000]
      [ M] 225. c:\program files\intel\wifi\bin\intstngs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Application Settings Module
        .text,.rdata,.data,.rsrc,.reloc,


    00390000[00032000]
      [ M] 229. c:\program files\intel\wifi\bin\iwmsprov.dll
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    00BA0000[000A4000]
      [ M] 220. c:\program files\common files\intel\wirelesscommon\psregapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Registry API Module
        .text,.rdata,.data,.idata,.didat,.rsrc,.reloc,


    00C90000[00092000]
      [ M] 221. c:\program files\common files\intel\wirelesscommon\traceapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Trace API Module
        .text,.rdata,.data,.rsrc,.reloc,


    00F60000[0010F000]
      [ M] 222. c:\program files\common files\intel\wirelesscommon\libeay32.dll
        The OpenSSL Project, http://www.openssl.org/
        OpenSSL Shared Library
        .text,.rdata,.data,.rsrc,.reloc,


    01540000[0005F000]
      [ M] 230. c:\program files\intel\wifi\bin\kmmdlplugins\supplicantplugin.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Supplicant Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    06F10000[00064000]
      [ M] 231. c:\program files\intel\wifi\bin\kmmdlplugins\wscplugin.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless WSC Plugin Module
        .text,.rdata,.data,.rsrc,.reloc,


    07C60000[0016C000]
      [ M] 232. c:\program files\intel\wifi\bin\supplicant.dll
        Devicescape Software, Inc.
        supplicant Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000278(632) RsTray.exe
    00400000[0002C000]
      [AM] 192. c:\program files\rising\rav\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising tray framework
        .text,.rdata,.data,.rsrc,


    10000000[00031000]
      [ M] 233. c:\program files\rising\rav\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising tray common service
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00023000]
      [ M] 234. c:\program files\rising\rav\rslang.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00BE0000[0002D000]
      [ M] 235. c:\program files\rising\rav\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C10000[00019000]
      [ M] 236. c:\program files\rising\rav\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    00E10000[00019000]
      [ M] 237. c:\program files\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00039000]
      [ M] 238. c:\program files\rising\rav\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    01050000[00013000]
      [ M] 239. c:\program files\rising\rav\monstate.dll
        Beijing Rising Information Technology Co., Ltd.
        MonState
        .text,.rdata,.data,.rsrc,.reloc,


    01080000[00016000]
      [ M] 240. c:\program files\rising\rav\scanevnt.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Event Handler
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[00078000]
      [ M] 241. c:\program files\rising\rav\rsguilib.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    010C0000[00017000]
      [ M] 242. c:\program files\rising\rav\rsconf.dll
        Beijing Rising Information Technology Co., Ltd.
        rsconf Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    010F0000[00022000]
      [ M] 243. c:\program files\rising\rav\rspalvd.dll
        Beijing Rising Information Technology Co., Ltd.
        rspalvd
        .text,.rdata,.data,.rsrc,.reloc,


    33000000[00026000]
      [ M] 244. c:\program files\rising\rav\ravbintl.dll
        Beijing Rising Information Technology Co., Ltd.
        ravbintl Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01140000[0007D000]
      [ M] 245. c:\program files\rising\rav\mruleui.dll
        Beijing Rising Information Technology Co., Ltd.
        mruleui
        .text,.rdata,.data,.rsrc,.reloc,


    011E0000[0007D000]
      [ M] 246. c:\program files\rising\rav\montray.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiVirus 2010
        .text,.rdata,.data,.rsrc,.reloc,


    34500000[00020000]
      [ M] 247. c:\program files\rising\rav\ravitray.dll
        Beijing Rising Information Technology Co., Ltd.
        ravitray Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01280000[00048000]
      [ M] 248. c:\program files\rising\rav\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    012E0000[00012000]
      [ M] 249. c:\program files\rising\rav\scanleak.dll
        Beijing Rising Information Technology Co., Ltd.
        scanleak
        .text,.rdata,.data,.rsrc,.reloc,


    32000000[00088000]
      [ M] 250. c:\program files\rising\rav\ravppops.dll
        Beijing Rising Information Technology Co., Ltd.
        ravppops Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01320000[0000E000]
      [ M] 251. c:\program files\rising\rav\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    01340000[00044000]
      [ M] 252. c:\program files\rising\rav\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 253. c:\program files\rising\rav\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01E80000[00080000]
      [ M] 254. c:\program files\rising\rav\scanprxy.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanPrxy Module
        .text,.rdata,.data,.rsrc,.reloc,

02690000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,



  + 000002e4(740) msdtc.exe

  + 00000300(768) iFrmewrk.exe
    00400000[00127000]
      [AM] 189. c:\program files\common files\intel\wirelesscommon\ifrmewrk.exe
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Framework
        .text,.rdata,.data,.rsrc,


    10000000[000A4000]
      [ M] 220. c:\program files\common files\intel\wirelesscommon\psregapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Registry API Module
        .text,.rdata,.data,.idata,.didat,.rsrc,.reloc,


    00530000[0010F000]
      [ M] 222. c:\program files\common files\intel\wirelesscommon\libeay32.dll
        The OpenSSL Project, http://www.openssl.org/
        OpenSSL Shared Library
        .text,.rdata,.data,.rsrc,.reloc,


    00DE0000[0000B000]
      [ M] 256. c:\program files\common files\intel\wirelesscommon\langresources\chs\frwrkchs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Framework
        .rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    013B0000[0007B000]
      [ M] 257. c:\program files\common files\intel\wirelesscommon\frameworkplugins\wiwitray.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Combined Task Tray Module
        .text,.rdata,.data,.rsrc,.reloc,


    01460000[00004000]
      [ M] 258. c:\program files\common files\intel\wirelesscommon\langresources\chs\witrchs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Combined Task Tray Module
        .rdata,.rsrc,.reloc,


    015A0000[001CB000]
      [ M] 259. c:\program files\common files\intel\wirelesscommon\frameworkplugins\connmgr.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless WiFi Module
        .text,.rdata,.data,.rsrc,.reloc,


    018A0000[00055000]
      [ M] 260. c:\program files\intel\wifi\bin\langresources\chs\intwachs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless WiFi Module
        .rsrc,.reloc,


    01910000[00092000]
      [ M] 221. c:\program files\common files\intel\wirelesscommon\traceapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Trace API Module
        .text,.rdata,.data,.rsrc,.reloc,


    07000000[000F6000]
      [ M] 224. c:\program files\intel\wifi\bin\murocapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Muroc API Module
        .text,.rdata,.data,Shared,.rsrc,.reloc,


    07120000[0007D000]
      [ M] 225. c:\program files\intel\wifi\bin\intstngs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Application Settings Module
        .text,.rdata,.data,.rsrc,.reloc,


    071C0000[00023000]
      [ M] 226. c:\program files\intel\wifi\bin\s24mudll.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless S24EvMon Module
        .text,.rdata,.data,.rsrc,.reloc,


    07490000[00177000]
      [ M] 227. c:\program files\intel\wifi\bin\pfmgrapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Profile Manager API Module
        .text,.rdata,.data,.rsrc,.reloc,


    07240000[00081000]
      [ M] 228. c:\program files\intel\wifi\bin\dbengine.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Secure DB Engine
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000398(920) svchost.exe
    10000000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,



  + 000003e8(1000) svchost.exe
    10000000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,



  + 00000434(1076) AdskScSrv.exe
    00400000[00017000]
      [AM] 7. c:\program files\common files\autodesk shared\service\adskscsrv.exe
        Autodesk
        System Level Service Utility
        .text,.rdata,.data,.rsrc,



  + 00000480(1152) btwdins.exe
    00400000[00058000]
      [AM] 8. c:\program files\thinkpad\bluetooth software\bin\btwdins.exe
        Broadcom Corporation.
        Bluetooth Support Server
        .text,.rdata,.data,.rsrc,



  + 000004b8(1208) EvtEng.exe
    00400000[000D9000]
      [AM] 14. c:\program files\intel\wifi\bin\evteng.exe
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Event Log Service
        .text,.rdata,.data,.idata,.didat,.rsrc,


    10000000[00177000]
      [ M] 227. c:\program files\intel\wifi\bin\pfmgrapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Profile Manager API Module
        .text,.rdata,.data,.rsrc,.reloc,


    004E0000[000F6000]
      [ M] 224. c:\program files\intel\wifi\bin\murocapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Muroc API Module
        .text,.rdata,.data,Shared,.rsrc,.reloc,


    005E0000[0007D000]
      [ M] 225. c:\program files\intel\wifi\bin\intstngs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Application Settings Module
        .text,.rdata,.data,.rsrc,.reloc,


    00660000[0007D000]
      [ M] 219. c:\program files\intel\wifi\bin\pfqosmgr.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless QOS Profile Manager Module
        .text,.rdata,.data,.rsrc,.reloc,


    00B90000[0010F000]
      [ M] 222. c:\program files\common files\intel\wirelesscommon\libeay32.dll
        The OpenSSL Project, http://www.openssl.org/
        OpenSSL Shared Library
        .text,.rdata,.data,.rsrc,.reloc,


    00CA0000[000A4000]
      [ M] 220. c:\program files\common files\intel\wirelesscommon\psregapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Registry API Module
        .text,.rdata,.data,.idata,.didat,.rsrc,.reloc,


    00D90000[00092000]
      [ M] 221. c:\program files\common files\intel\wirelesscommon\traceapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Trace API Module
        .text,.rdata,.data,.rsrc,.reloc,


    06A10000[00023000]
      [ M] 226. c:\program files\intel\wifi\bin\s24mudll.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless S24EvMon Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 000004c8(1224) TPFNF7SP.exe
    00400000[00011000]
      [ M] 261. c:\program files\lenovo\npdirect\tpfnf7sp.exe
        Lenovo Group Limited
        Presentation Director Fn+F7 handler
        .text,.rdata,.data,.rsrc,


    10000000[00016000]
      [ M] 262. c:\program files\lenovo\npdirect\oemdspif.dll
        LENOVO
        Presentation Director
        .text,.rdata,.data,.rsrc,.reloc,


    00A90000[00014000]
      [ M] 214. c:\windows\system32\oemdspif.dll
        ATI Technologies, Inc.
        ATI Driver Interface DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00AB0000[00038000]
      [ M] 263. c:\program files\lenovo\npdirect\tpfnf7.dll
        .text,.rdata,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 000004ec(1260) spoolsv.exe
    50400000[0000A000]
      [AM] 199. c:\windows\system32\adobepdf.dll
        Adobe Systems Incorporated.
        Acrobat ? PDF Port
        .text,.data,.CRT,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 264. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0011F000]
      [ M] 265. c:\program files\adobe\acrobat 7.0\distillr\adistres.chs
        .rsrc,.reloc,


    00F70000[0001C000]
      [AM] 200. c:\windows\system32\bthcrp.dll
        Broadcom Corporation.
        bthcrp DLL
        .text,.rdata,.data,.rsrc,.reloc,


    01010000[000FB000]
      [ M] 266. c:\windows\system32\widcommsdk.dll
        Broadcom Corporation.
        WidcommSdk DLL
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    01110000[000CB000]
      [ M] 267. c:\windows\system32\wbtapi.dll
        Broadcom Corporation.
        WBTApi DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00FB0000[00015000]
      [AM] 201. c:\windows\system32\aucplmnt.dll
        CANON INC.
        CANON CP Language Monitor
        .text,.rdata,.data,.rsrc,.reloc,


    00FE0000[0000B000]
      [AM] 202. c:\windows\system32\hpbmmon.dll
        Hewlett-Packard
        Win32 Master Monitor
        .text,.rdata,.data,.rsrc,.reloc,


    012E0000[00014000]
      [ M] 268. c:\windows\system32\hpdomon.dll
        Hewlett-Packard
        Win32 Language Monitor for direct connect HP printers
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    67200000[00017000]
      [ M] 269. c:\windows\system32\hpbhealr.dll
        .text,.rdata,.data,.idata,.reloc,


    01790000[0002C000]
      [AM] 203. c:\windows\system32\hptcpmon.dll
        Hewlett Packard
        Standard TCP/IP Port Monitor DLL
        .text,.rdata,.data,.rsrc,.reloc,


    017C0000[0003D000]
      [ M] 270. c:\windows\system32\hptcpmui.dll
        Microsoft Corporation
        Standard TCP/IP Port Monitor UI DLL
        .text,.rdata,.data,.rsrc,.reloc,


    01800000[00025000]
      [ M] 271. c:\windows\system32\hpzjrd01.dll
        Hewlett Packard
        HP Rediscovery Library
        .text,.rdata,.data,.rsrc,.reloc,


    01850000[0001F000]
      [ M] 272. c:\windows\system32\hptcpmib.dll
        Hewlett Packard
        Standard TCP/IP Port Monitor DLL
        .text,.rdata,.data,.rsrc,.reloc,


    01960000[00008000]
      [AM] 204. c:\windows\system32\mdimon.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    01970000[00007000]
      [AM] 205. c:\windows\system32\prtmate.dll
        .text,.data,.edata,.rsrc,.reloc,


    019A0000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    01BB0000[0004B000]
      [ M] 273. c:\windows\system32\spool\prtprocs\w32x86\hpzpp4wm.dll
        Hewlett-Packard Corporation
        .text,.data,.rsrc,.reloc,


    01C10000[00008000]
      [ M] 274. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    3F420000[0001B000]
      [ M] 275. c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
        Microsoft Corporation
        Print Filter Pipeline Proxy
        .text,.orpc,.data,.rsrc,.reloc,



  + 00000520(1312) IEXPLORE.EXE
    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    01190000[00019000]
      [ M] 276. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    01490000[0002D000]
      [ M] 277. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01650000[00037000]
      [AM] 154. c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.dll
        Adobe Systems Incorporated
        Adobe IE plugin
        .text,.rdata,.data,.rsrc,.reloc,


    7C120000[00019000]
      [ M] 278. c:\windows\system32\atl71.dll
        Microsoft Corporation
        ATL Module for Windows (Unicode)
        .text,.rdata,.data,.rsrc,.reloc,


    7C3C0000[0007C000]
      [ M] 279. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 264. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    016A0000[00017000]
      [ M] 280. c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.chs
        Adobe Systems Incorporated
        Adobe IE plugin
        .rsrc,.reloc,


    017B0000[0004A000]
      [AM] 155. c:\program files\google\google toolbar\googletoolbar_32.dll
        Google Inc.
        Google Toolbar
        .text,.rdata,.data,.rsrc,.reloc,


    01900000[0039F000]
      [ M] 281. c:\program files\google\google toolbar\component\googletoolbardynamic_32_c93714e4f894e068.dll
        Google Inc.
        Google Toolbar
        .text,.rdata,.data,shared,.rsrc,.reloc,


    01E40000[00096000]
      [ M] 282. c:\program files\google\google toolbar\component\googletoolbardynamic_mui_en_3798d21b966565b3.dll
        Google Inc.
        Google Toolbar for Internet Explorer
        .rdata,.rsrc,.reloc,


    01F40000[0004B000]
      [ M] 283. c:\program files\google\google toolbar\component\googletoolbardynamic_ext_zh-cn_32_69abe4dc40c34d09.dll
        .text,.rdata,.data,.rsrc,.reloc,


    02350000[000BF000]
      [AM] 161. c:\program files\google\googletoolbarnotifier\5.3.4501.1418\swg.dll
        Google Inc.
        GoogleToolbarNotifier
        .text,.rdata,.data,.rsrc,.reloc,


    02410000[00036000]
      [ M] 284. c:\windows\system32\netprovcredman.dll
        Intel(R) Corporation
        Intel(R) Network Provider Credential Manager
        .text,.rdata,.data,.rsrc,.reloc,


    02820000[0003C000]
      [AM] 157. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll
        深圳市迅雷网络技术有限公司
        TDAtOnce
        .text,.rdata,.data,sharedda,.rsrc,.reloc,


    02860000[0001B000]
      [AM] 158. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
        深圳市迅雷网络技术有限公司
        XunLeiBHO
        .text,.rdata,.data,.rsrc,.reloc,


    222E0000[0000E000]
      [ M] 285. c:\program files\thunder network\thunder\userdata\components\resworker\dsbho_00.dll
        深圳市迅雷网络技术有限公司
        DsBho_setup
        .text,.rdata,.data,.rsrc,.reloc,


    22290000[0001E000]
      [ M] 286. c:\program files\thunder network\thunder\userdata\components\resworker\dataprocessor_00.dll
        深圳市迅雷网络技术有限公司
        DataProcessor_setup
        .text,.rdata,.data,.rsrc,.reloc,


    03250000[00018000]
      [AM] 160. c:\windows\system32\urlfilter.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlFilter Module
        .text,.rdata,.data,.rsrc,.reloc,


    03280000[00011000]
      [ M] 287. c:\program files\rising\antispyware\urlrule.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlRule  Library
        .text,.rdata,.data,.rsrc,.reloc,


    032F0000[00275000]
      [AM] 162. c:\program files\google\google toolbar\component\fastsearch_b7c5ac242193bb3e.dll
        Google Inc.
        Fast Search
        .text,.rdata,.data,.rsrc,.reloc,


    03E10000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    02530000[00018000]
      [ M] 288. c:\program files\rising\rav\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000560(1376) knownsvr.exe
    00400000[00072000]
      [ M] 289. c:\program files\rising\antispyware\knownsvr.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    10000000[00034000]
      [ M] 290. c:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,

00A70000[0002D000]
      [ M] 277. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00AA0000[00019000]
      [ M] 276. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,



  + 000005a0(1440) smss.exe

  + 000005e0(1504) csrss.exe

  + 000005fc(1532) winlogon.exe
    21000000[0004C000]
      [AM] 149. c:\windows\system32\iwpdgina.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless IWPDGINA Module
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00008000]
      [ M] 291. c:\program files\intel\wifi\bin\langresources\chs\ssognchs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless IWPDGINA Module
        .rsrc,.reloc,


    30E30000[0009A000]
      [ M] 292. c:\windows\system32\vrlogon.dll
        UPEK Inc.
        GINA replacement
        .text,.rdata,.data,.rsrc,.reloc,


    00DF0000[0001F000]
      [AM] 150. c:\windows\system32\ati2evxx.dll
        ATI Technologies Inc.
        ATI External Event Utility DLL Module
        .text,.rdata,.data,.rsrc,.reloc,


    316E0000[0001A000]
      [AM] 151. c:\windows\system32\psqlpwd.dll
        UPEK Inc.
        Logon stub
        .text,.rdata,.data,.rsrc,.reloc,


    31320000[00115000]
      [ M] 293. c:\program files\thinkvantage fingerprint software\homefus2.dll
        UPEK Inc.
        PS QL Logon Kernel
        .text,.rdata,.data,.HKT,.rsrc,.reloc,


    30000000[0004B000]
      [ M] 294. c:\program files\thinkvantage fingerprint software\infra.dll
        UPEK Inc.
        Infrastructure utility library
        .text,.rdata,.data,.rsrc,.reloc,


    30280000[0030F000]
      [ M] 295. c:\program files\thinkvantage fingerprint software\homepass.dll
        UPEK Inc.
        LocalPassport
        .text,.rdata,.data,.rsrc,.reloc,


    30680000[00263000]
      [ M] 296. c:\program files\thinkvantage fingerprint software\bio.dll
        UPEK Inc.
        Biometrics support
        .text,.rdata,.data,.rsrc,.reloc,


    31690000[0000B000]
      [ M] 297. c:\program files\thinkvantage fingerprint software\ps2css.dll
        UPEK Inc.
        PS QL to Lenovo CSS interface
        .text,.rdata,.data,.rsrc,.reloc,


    01900000[0003C000]
      [ M] 298. c:\program files\thinkvantage fingerprint software\pscssint.dll
        UPEK Inc.
        Lenovo CSS interface
        .text,.orpc,.rdata,.data,.rsrc,.reloc,


    300A0000[000C7000]
      [ M] 299. c:\program files\thinkvantage fingerprint software\remote.dll
        UPEK Inc.
        Remote object access library
        .text,.rdata,.data,.rsrc,.reloc,


    019E0000[00007000]
      [AM] 153. c:\program files\lenovo\hotkey\tphklock.dll
        .text,.rdata,.data,.reloc,


    30200000[0005A000]
      [ M] 300. c:\program files\thinkvantage fingerprint software\crypto.dll
        UPEK Inc.
        Cryptographic support
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000628(1576) services.exe

  + 00000634(1588) lsass.exe
    316E0000[0001A000]
      [AM] 151. c:\windows\system32\psqlpwd.dll
        UPEK Inc.
        Logon stub
        .text,.rdata,.data,.rsrc,.reloc,


    31320000[00115000]
      [ M] 293. c:\program files\thinkvantage fingerprint software\homefus2.dll
        UPEK Inc.
        PS QL Logon Kernel
        .text,.rdata,.data,.HKT,.rsrc,.reloc,


    30000000[0004B000]
      [ M] 294. c:\program files\thinkvantage fingerprint software\infra.dll
        UPEK Inc.
        Infrastructure utility library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,



  + 00000658(1624) TpScrex.exe
    00400000[00017000]
      [ M] 301. c:\program files\lenovo\pkgmgr\hotkey_1\tpscrex.exe
        Lenovo Group Limited
        ThinkPad UltraZoom
        .text,.rdata,.data,.rsrc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 000006c8(1736) ibmpmsvc.exe
    01000000[0000A000]
      [AM] 18. c:\windows\system32\ibmpmsvc.exe
        Lenovo
        ThinkPad Power Management Service
        .text,.data,.rsrc,



  + 000006e4(1764) svchost.exe

  + 000006f0(1776) RedundancyControl.exe
    00400000[00052000]
      [AM] 33. c:\program files\common files\siemens\ace\bin\redundancycontrol.exe
        SIEMENS AG
        WinCC RedundancyControl Module
        .text,.rdata,.data,.rsrc,


    6FA80000[00022000]
      [ M] 302. c:\program files\common files\siemens\ace\bin\ace60.dll
        SIEMENS AG
        WinCC common library for ACE
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00024000]
      [ M] 303. c:\program files\common files\siemens\ace\bin\cczlib.dll
        SIEMENS AG
        WinCC data compression library
        .text,.rdata,.data,.rsrc,.reloc,


    00370000[00021000]
      [ M] 304. c:\program files\common files\siemens\ace\bin\ccdiagnosis.dll
        SIEMENS AG
        CCDiagnosis
        .text,.rdata,.data,.rsrc,.reloc,


    003A0000[00019000]
      [ M] 305. c:\program files\common files\siemens\ace\bin\ccpingserver.dll
        SIEMENS AG
        WinCC RPC Server
        .text,.rdata,.data,.rsrc,.reloc,


    003C0000[0002D000]
      [ M] 306. c:\program files\common files\siemens\ace\bin\scsdiscoveryx.dll
        SIEMENS AG
        ACEDiscovery DLL
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000071c(1820) svchost.exe
    10000000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,



  + 00000768(1896) RavMonD.exe
    00400000[0002F000]
      [AM] 36. c:\program files\rising\rav\ravmond.exe
        Beijing Rising Information Technology Co., Ltd.
        ravmond
        .text,.rdata,.data,.rsrc,


    10000000[00032000]
      [ M] 307. c:\program files\rising\rav\combase.dll
        Beijing Rising Information Technology Co., Ltd.
        combase
        .text,.rdata,.data,.rsrc,.reloc,


    01120000[00086000]
      [ M] 308. c:\program files\rising\rav\cnt09.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt09 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01310000[00019000]
      [ M] 309. c:\program files\rising\rav\moncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        MonComm
        .text,.rdata,.data,.rsrc,.reloc,


    01340000[0001D000]
      [ M] 310. c:\program files\rising\rav\monbase.dll
        Beijing Rising Information Technology Co., Ltd.
        MonBase
        .text,.rdata,.data,.rsrc,.reloc,


    01370000[00084000]
      [ M] 311. c:\program files\rising\rav\rslog.dll
        Beijing Rising Information Technology Co., Ltd.
        rslog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01420000[00018000]
      [ M] 312. c:\program files\rising\rav\mondrv.dll
        Beijing Rising Information Technology Co., Ltd.
        mondrv
        .text,.rdata,.data,.rsrc,.reloc,


    01650000[0002E000]
      [ M] 313. c:\program files\rising\rav\defmon.dll
        Beijing Rising Information Technology Co., Ltd.
        DefMon
        .text,.rdata,.data,.rsrc,.reloc,


    01690000[00010000]
      [ M] 314. c:\program files\rising\rav\moncom08.dll
        Beijing Rising Information Technology Co., Ltd.
        MonCom08
        .text,.rdata,.data,.rsrc,.reloc,


    016B0000[0007E000]
      [ M] 315. c:\program files\rising\rav\monrule.dll
        Beijing Rising Information Technology Co., Ltd.
        MonRule
        .text,.rdata,.data,.rsrc,.reloc,


    01760000[00027000]
      [ M] 316. c:\program files\rising\rav\filemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Filemon
        .text,.rdata,.data,.rsrc,.reloc,


    017A0000[0002F000]
      [ M] 317. c:\program files\rising\rav\mailmon.dll
        Beijing Rising Information Technology Co., Ltd.
        MailMon
        .text,.rdata,.data,.rsrc,.reloc,


    017E0000[00015000]
      [ M] 318. c:\program files\rising\rav\hookweb.dll
        Beijing Rising Information Technology Co., Ltd.
        hookweb
        .text,.rdata,.data,.rsrc,.reloc,


    01820000[0008C000]
      [ M] 319. c:\program files\rising\rav\rsindent.dll
        Beijing Rising Information Technology Co., Ltd.
        rsindent
        .text,.rdata,.data,.rsrc,.reloc,


    018B0000[00019000]
      [ M] 236. c:\program files\rising\rav\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    018F0000[00017000]
      [ M] 320. c:\program files\rising\rav\taskplug.dll
        Beijing Rising Information Technology Co., Ltd.
        TaskPlug
        .text,.rdata,.data,.rsrc,.reloc,


    01920000[00012000]
      [ M] 321. c:\program files\rising\rav\scansrvp.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSrvP Module
        .text,.rdata,.data,.rsrc,.reloc,


    01D50000[0001D000]
      [ M] 322. c:\program files\rising\rav\cnt08.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt08 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01ED0000[00019000]
      [ M] 237. c:\program files\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01F00000[0000E000]
      [ M] 251. c:\program files\rising\rav\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    02340000[00044000]
      [ M] 252. c:\program files\rising\rav\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    02480000[0002D000]
      [ M] 235. c:\program files\rising\rav\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    025F0000[00020000]
      [ M] 323. c:\program files\rising\rav\hooksys.dll
        Beijing Rising Information Technology Co., Ltd.
        Hooksys.dll
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    026A0000[0001F000]
      [ M] 324. c:\program files\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    026C0000[00024000]
      [ M] 325. c:\program files\rising\rav\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    02910000[00013000]
      [ M] 326. c:\program files\rising\rav\hookcont.dll
        Beijing Rising Information Technology Co., Ltd.
        HookCont Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02A50000[0006F000]
      [ M] 327. c:\program files\rising\rav\bacore.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising MBA DLL
        .text,.rdata,.data,.rsrc,.reloc,


    02BE0000[0003B000]
      [ M] 328. c:\program files\rising\rav\recomp.dll
        Beijing Rising Information Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02C30000[00038000]
      [ M] 329. c:\program files\rising\rav\refs.dll
        Beijing Rising Information Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02E90000[00030000]
      [ M] 330. c:\program files\rising\rav\viruslib.dll
        Beijing Rising Information Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02FD0000[00029000]
      [ M] 331. c:\program files\rising\rav\relibldr.dll
        Beijing Rising Information Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03250000[0007E000]
      [ M] 332. c:\program files\rising\rav\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    03510000[00016000]
      [ M] 333. c:\program files\rising\rav\bawhite.dll
        Beijing Rising Information Technology Co., Ltd.
        bawhite Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03760000[0002B000]
      [ M] 334. c:\program files\rising\rav\rsstore.dll
        Beijing Rising Information Technology Co., Ltd.
        RSStore
        .text,.rdata,.data,.rsrc,.reloc,


    037C0000[00040000]
      [ M] 335. c:\program files\rising\rav\scanner.dll
        Beijing Rising Information Technology Co., Ltd.
        RsScanner Module
        .text,.rdata,.data,.rsrc,.reloc,


    03A00000[0001B000]
      [ M] 336. c:\program files\rising\rav\scanadd.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Addon
        .text,.rdata,.data,.rsrc,.reloc,


    036D0000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    038B0000[00028000]
      [ M] 337. c:\program files\rising\rav\rstask.dll
        Beijing Rising Information Technology Co., Ltd.
        RsTask Control
        .text,.rdata,.data,.rsrc,.reloc,

04800000[00018000]
      [ M] 338. c:\program files\rising\rav\rsstub.dll
        Beijing Rising Information Technology Co., Ltd.
        rsstub Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    04850000[0001A000]
      [ M] 339. c:\program files\rising\rav\scansrv.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSrv Module
        .text,.rdata,.data,.rsrc,.reloc,


    048D0000[0002B000]
      [ M] 340. c:\program files\rising\rav\scanpe.dll
        Beijing Rising Information Technology Co., Ltd.
        scanpe Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    04910000[00029000]
      [ M] 341. c:\program files\rising\rav\pearc.dll
        Beijing Rising Information Technology Co., Ltd.
        pearchive Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    07C20000[0001B000]
      [ M] 342. c:\program files\rising\rav\ur000.dat
        Beijing Rising Information Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    07C50000[00035000]
      [ M] 343. c:\program files\rising\rav\urutils.dll
        Beijing Rising Information Technology Co., Ltd.
        urutils Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    081C0000[00032000]
      [ M] 344. c:\program files\rising\rav\ffr.dll
        Beijing Rising Information Technology Co., Ltd.
        ffr Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    08200000[00022000]
      [ M] 345. c:\program files\rising\rav\nvfile.dll
        Beijing Rising Information Technology Co., Ltd.
        NVFile
        .text,.rdata,.data,.rsrc,.reloc,


    13AB0000[00045000]
      [ M] 346. c:\program files\rising\rav\scanexec.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanExec
        .text,.rdata,.data,.rsrc,.reloc,


    08E00000[002DD000]
      [ M] 347. c:\program files\rising\rav\unexe.dll
        Beijing Rising Information Technology Co., Ltd.
        UnExe
        .text,.rdata,.data,.rsrc,.reloc,


    090E0000[000C8000]
      [ M] 348. c:\program files\rising\rav\scanex.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanEx
        .text,.rdata,.data,.rsrc,.reloc,


    00E20000[00011000]
      [ M] 349. c:\program files\rising\rav\scantj.dll
        Beijing Rising Information Technology Co., Ltd.
        scantj Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01560000[00085000]
      [ M] 350. c:\program files\rising\rav\methodex.dll
        Beijing Rising Information Technology Co., Ltd.
        MethodEx
        .text,.rdata,.data,.rsrc,.reloc,


    0C850000[000B9000]
      [ M] 351. c:\program files\rising\rav\revm.dll
        Beijing Rising Information Technology Co., Ltd.
        REVM Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    0C6C0000[00022000]
      [ M] 352. c:\program files\rising\rav\pecompd.dll
        Beijing Rising Information Technology Co., Ltd.
        PeCompdEx
        .text,.rdata,.data,.rsrc,.reloc,


    0C700000[00039000]
      [ M] 353. c:\program files\rising\rav\heurex.dll
        Beijing Rising Information Technology Co., Ltd.
        HeurEx
        .text,.rdata,.data,.rsrc,.reloc,


    0CA30000[0001D000]
      [ M] 354. c:\program files\rising\rav\extsfx.dll
        Beijing Rising Information Technology Co., Ltd.
        scansfx Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02040000[00011000]
      [ M] 355. c:\program files\rising\rav\ur001.dat
        Beijing Rising Information Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    02070000[0003A000]
      [ M] 356. c:\program files\rising\rav\scriptci.dll
        Beijing Rising Information Technology Co., Ltd.
        scriptci Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    020C0000[0006C000]
      [ M] 357. c:\program files\rising\rav\uroutine.dll
        Beijing Rising Information Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    0D580000[00023000]
      [ M] 358. c:\program files\rising\rav\scansct.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSct Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    08C00000[00099000]
      [ M] 359. c:\program files\rising\rav\extarch.dll
        Beijing Rising Information Technology Co., Ltd.
        archive Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    0DED0000[00056000]
      [ M] 360. c:\program files\rising\rav\extcomp.dll
        Beijing Rising Information Technology Co., Ltd.
        compress Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    0FEA0000[00012000]
      [ M] 361. c:\program files\rising\rav\ur025.dat
        Beijing Rising Information Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    14210000[0003A000]
      [ M] 362. c:\program files\rising\rav\extmail.dll
        Beijing Rising Information Technology Co., Ltd.
        ExtMail
        .text,.rdata,.data,.rsrc,.reloc,


    10C60000[00045000]
      [ M] 363. c:\program files\rising\rav\extole.dll
        Beijing Rising Information Technology Co., Ltd.
        ExtOLE
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000778(1912) RavMonD.exe
    00400000[0002F000]
      [AM] 37. c:\program files\rising\rfw\ravmond.exe
        Beijing Rising Information Technology Co., Ltd.
        ravmond
        .text,.rdata,.data,.rsrc,


    10000000[00032000]
      [ M] 364. c:\program files\rising\rfw\combase.dll
        Beijing Rising Information Technology Co., Ltd.
        combase
        .text,.rdata,.data,.rsrc,.reloc,


    011D0000[00086000]
      [ M] 365. c:\program files\rising\rfw\cnt09.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt09 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01030000[0001D000]
      [ M] 366. c:\program files\rising\rfw\monbase.dll
        Beijing Rising Information Technology Co., Ltd.
        MonBase
        .text,.rdata,.data,.rsrc,.reloc,


    01060000[00019000]
      [ M] 367. c:\program files\rising\rfw\moncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        MonComm
        .text,.rdata,.data,.rsrc,.reloc,


    01270000[00082000]
      [ M] 368. c:\program files\rising\rfw\rfwlog.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwlog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01320000[0000C000]
      [ M] 369. c:\program files\rising\rfw\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        TODO: <File description>
        .text,.rdata,.data,.rsrc,.reloc,


    7C3C0000[0007C000]
      [ M] 279. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 264. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    01340000[00049000]
      [ M] 370. c:\program files\rising\rfw\rfwsrv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal FireWall Service
        .text,.rdata,.data,.rsrc,.reloc,


    01390000[00019000]
      [ M] 371. c:\program files\rising\rfw\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    013D0000[0001B000]
      [ M] 372. c:\program files\rising\rfw\mports.dll
        Beijing Rising Information Technology Co., Ltd.
        get ports list
        .text,.rdata,.data,.rsrc,.reloc,


    01400000[00011000]
      [ M] 373. c:\program files\rising\rfw\rfwdrvc.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwdrvc Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01630000[00011000]
      [ M] 374. c:\program files\rising\rfw\rfwdrv.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwdrv.dll
        .text,.rdata,.data,.rsrc,.reloc,


    01860000[0007E000]
      [ M] 375. c:\program files\rising\rfw\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    019F0000[00011000]
      [ M] 376. c:\program files\rising\rfw\rfwarp.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwarp.dll
        .text,.rdata,.data,.rsrc,.reloc,


    01A20000[0002D000]
      [ M] 377. c:\program files\rising\rfw\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01BA0000[00014000]
      [ M] 378. c:\program files\rising\rfw\urlrule.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlRule  Library
        .text,.rdata,.data,.rsrc,.reloc,


    01BD0000[0003B000]
      [ M] 379. c:\program files\rising\rfw\recomp.dll
        Beijing Rising Information Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01C20000[00038000]
      [ M] 380. c:\program files\rising\rfw\refs.dll
        Beijing Rising Information Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02180000[00030000]
      [ M] 381. c:\program files\rising\rfw\viruslib.dll
        Beijing Rising Information Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    021C0000[00029000]
      [ M] 382. c:\program files\rising\rfw\relibldr.dll
        Beijing Rising Information Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02340000[00025000]
      [ M] 383. c:\program files\rising\rfw\rfwproxy.dll
        Beijing Rising Information Technology Co., Ltd.
        tcpproxy Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02420000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    02FB0000[0008C000]
      [ M] 384. c:\program files\rising\rfw\rsindent.dll
        Beijing Rising Information Technology Co., Ltd.
        rsindent
        .text,.rdata,.data,.rsrc,.reloc,


    03050000[00017000]
      [ M] 385. c:\program files\rising\rfw\taskplug.dll
        Beijing Rising Information Technology Co., Ltd.
        TaskPlug
        .text,.rdata,.data,.rsrc,.reloc,


    03480000[0000E000]
      [ M] 386. c:\program files\rising\rfw\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    034A0000[00044000]
      [ M] 387. c:\program files\rising\rfw\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    035D0000[00019000]
      [ M] 388. c:\program files\rising\rfw\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03B60000[0001B000]
      [ M] 389. c:\program files\rising\rfw\ncomm2.dll
        Beijing Rising Information Technology Co., Ltd.
        NComm2 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    04090000[00028000]
      [ M] 390. c:\program files\rising\rfw\rstask.dll
        Beijing Rising Information Technology Co., Ltd.
        RsTask Control
        .text,.rdata,.data,.rsrc,.reloc,


    040D0000[00018000]
      [ M] 391. c:\program files\rising\rfw\rsstub.dll
        Beijing Rising Information Technology Co., Ltd.
        rsstub Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    010C0000[0000E000]
      [ M] 392. c:\program files\rising\rfw\urllib.dll
        Beijing Rising Information Technology Co., Ltd.
        Urllib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000788(1928) svchost.exe
    10000000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,



  + 000008ac(2220) EzEjMnAp.Exe
    00400000[0003E000]
      [AM] 191. c:\program files\thinkpad\utilities\ezejmnap.exe
        Lenovo Group Limited
        ThinkPad EasyEject Support Application
        .text,.rdata,.data,.rsrc,


    10000000[0000E000]
      [ M] 393. c:\program files\thinkpad\utilities\sc\ezmapres.dll
        .text,.rdata,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 00000950(2384) IEXPLORE.EXE
    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    10000000[00017000]
      [AM] 156. c:\windows\system32\kakatool.dll
        Beijing Rising Information Technology Co., Ltd.
        ToolBar
        .text,.rdata,.data,.rsrc,.reloc,


    01190000[00019000]
      [ M] 276. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    01490000[0002D000]
      [ M] 277. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01650000[00037000]
      [AM] 154. c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.dll
        Adobe Systems Incorporated
        Adobe IE plugin
        .text,.rdata,.data,.rsrc,.reloc,


    7C120000[00019000]
      [ M] 278. c:\windows\system32\atl71.dll
        Microsoft Corporation
        ATL Module for Windows (Unicode)
        .text,.rdata,.data,.rsrc,.reloc,


    7C3C0000[0007C000]
      [ M] 279. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 264. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    016A0000[00017000]
      [ M] 280. c:\program files\adobe\acrobat 7.0\acrobat\acroiefavclient.chs
        Adobe Systems Incorporated
        Adobe IE plugin
        .rsrc,.reloc,


    017B0000[0004A000]
      [AM] 155. c:\program files\google\google toolbar\googletoolbar_32.dll
        Google Inc.
        Google Toolbar
        .text,.rdata,.data,.rsrc,.reloc,


    01900000[0039F000]
      [ M] 281. c:\program files\google\google toolbar\component\googletoolbardynamic_32_c93714e4f894e068.dll
        Google Inc.
        Google Toolbar
        .text,.rdata,.data,shared,.rsrc,.reloc,


    01E40000[00096000]
      [ M] 282. c:\program files\google\google toolbar\component\googletoolbardynamic_mui_en_3798d21b966565b3.dll
        Google Inc.
        Google Toolbar for Internet Explorer
        .rdata,.rsrc,.reloc,


    01F40000[0004B000]
      [ M] 283. c:\program files\google\google toolbar\component\googletoolbardynamic_ext_zh-cn_32_69abe4dc40c34d09.dll
        .text,.rdata,.data,.rsrc,.reloc,


    02450000[000BF000]
      [AM] 161. c:\program files\google\googletoolbarnotifier\5.3.4501.1418\swg.dll
        Google Inc.
        GoogleToolbarNotifier
        .text,.rdata,.data,.rsrc,.reloc,


    02610000[00036000]
      [ M] 284. c:\windows\system32\netprovcredman.dll
        Intel(R) Corporation
        Intel(R) Network Provider Credential Manager
        .text,.rdata,.data,.rsrc,.reloc,


    02820000[0003C000]
      [AM] 157. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll
        深圳市迅雷网络技术有限公司
        TDAtOnce
        .text,.rdata,.data,sharedda,.rsrc,.reloc,


    02860000[0001B000]
      [AM] 158. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
        深圳市迅雷网络技术有限公司
        XunLeiBHO
        .text,.rdata,.data,.rsrc,.reloc,

222E0000[0000E000]
      [ M] 285. c:\program files\thunder network\thunder\userdata\components\resworker\dsbho_00.dll
        深圳市迅雷网络技术有限公司
        DsBho_setup
        .text,.rdata,.data,.rsrc,.reloc,


    22290000[0001E000]
      [ M] 286. c:\program files\thunder network\thunder\userdata\components\resworker\dataprocessor_00.dll
        深圳市迅雷网络技术有限公司
        DataProcessor_setup
        .text,.rdata,.data,.rsrc,.reloc,


    29500000[00067000]
      [AM] 159. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
        Microsoft Corporation
        WindowsLiveLogin.dll
        .text,.data,.rsrc,.reloc,


    27500000[0011A000]
      [ M] 394. c:\program files\common files\microsoft shared\windows live\msidcrl40.dll
        Microsoft Corporation
        IDCRL Dynamic Link Library
        .text,.data,.rsrc,.reloc,


    03450000[00018000]
      [AM] 160. c:\windows\system32\urlfilter.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlFilter Module
        .text,.rdata,.data,.rsrc,.reloc,


    03480000[00011000]
      [ M] 287. c:\program files\rising\antispyware\urlrule.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlRule  Library
        .text,.rdata,.data,.rsrc,.reloc,


    034F0000[00275000]
      [AM] 162. c:\program files\google\google toolbar\component\fastsearch_b7c5ac242193bb3e.dll
        Google Inc.
        Fast Search
        .text,.rdata,.data,.rsrc,.reloc,


    325C0000[00012000]
      [AM] 175. c:\program files\microsoft office\office11\msohev.dll
        Microsoft Corporation
        Microsoft Office 2003 component
        .text,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    05710000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    05340000[00011000]
      [ M] 395. c:\program files\lenovo\hotkey\hkvolkey.dll
        .text,.rdata,.data,.reloc,


    05390000[00018000]
      [ M] 288. c:\program files\rising\rav\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    071B0000[004A3000]
      [ M] 396. c:\windows\system32\macromed\flash\flash10c.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 10.0 r32
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    01790000[00009000]
      [ M] 397. c:\program files\adobe\acrobat 7.0\activex\pdfshell.chs
        Adobe Systems, Inc.
        PDF Shell Extension
        .rsrc,.reloc,


    51D20000[00043000]
      [ M] 398. c:\program files\common files\microsoft shared\help\msitss55.dll
        Microsoft Corporation
        Microsoft? InfoTech Storage System Library
        .text,.data,.rsrc,.reloc,


    09570000[0001C000]
      [AM] 171. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
        Adobe Systems, Inc.
        PDF Shell Extension
        .text,.rdata,.data,.rsrc,.reloc,


    3B030000[000A9000]
      [ M] 399. c:\windows\system32\imsc40a.ime
        Microsoft Corporation
        微软拼音输入法 2003
        .text,.data,.rsrc,.reloc,


    3AD70000[0005D000]
      [ M] 400. c:\program files\common files\microsoft shared\ime\shared2.0\mscand20.dll
        Microsoft Corporation
        Microsoft Candidate UI 9.0
        .text,.data,.rsrc,.reloc,



  + 0000095c(2396) RsTray.exe
    00400000[0002C000]
      [AM] 193. c:\program files\rising\rfw\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising tray framework
        .text,.rdata,.data,.rsrc,


    10000000[00031000]
      [ M] 401. c:\program files\rising\rfw\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising tray common service
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00023000]
      [ M] 402. c:\program files\rising\rfw\rslang.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00BE0000[0002D000]
      [ M] 377. c:\program files\rising\rfw\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C10000[00019000]
      [ M] 371. c:\program files\rising\rfw\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    00E10000[00019000]
      [ M] 388. c:\program files\rising\rfw\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00039000]
      [ M] 403. c:\program files\rising\rfw\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    01050000[00013000]
      [ M] 404. c:\program files\rising\rfw\monstate.dll
        Beijing Rising Information Technology Co., Ltd.
        MonState
        .text,.rdata,.data,.rsrc,.reloc,


    01080000[0000C000]
      [ M] 369. c:\program files\rising\rfw\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        TODO: <File description>
        .text,.rdata,.data,.rsrc,.reloc,


    7C3C0000[0007C000]
      [ M] 279. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 264. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    010A0000[00017000]
      [ M] 405. c:\program files\rising\rfw\rsconf.dll
        Beijing Rising Information Technology Co., Ltd.
        rsconf Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    010D0000[00022000]
      [ M] 406. c:\program files\rising\rfw\rspalvd.dll
        Beijing Rising Information Technology Co., Ltd.
        rspalvd
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[00078000]
      [ M] 407. c:\program files\rising\rfw\rsguilib.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    33000000[00026000]
      [ M] 408. c:\program files\rising\rfw\ravbintl.dll
        Beijing Rising Information Technology Co., Ltd.
        ravbintl Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01130000[0007E000]
      [ M] 375. c:\program files\rising\rfw\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    011D0000[00048000]
      [ M] 409. c:\program files\rising\rfw\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    01230000[00052000]
      [ M] 410. c:\program files\rising\rfw\rfwtray.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwtray Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    32000000[00088000]
      [ M] 411. c:\program files\rising\rfw\ravppops.dll
        Beijing Rising Information Technology Co., Ltd.
        ravppops Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01300000[0000E000]
      [ M] 386. c:\program files\rising\rfw\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    01320000[00044000]
      [ M] 387. c:\program files\rising\rfw\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 412. c:\program files\rising\rfw\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01B20000[00082000]
      [ M] 368. c:\program files\rising\rfw\rfwlog.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwlog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02E00000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000974(2420) rstray.exe
    00400000[00023000]
      [AM] 194. c:\program files\rising\antispyware\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        RSTray
        .text,.rdata,.data,.rsrc,


    10000000[00044000]
      [ M] 413. c:\program files\rising\antispyware\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 414. c:\program files\rising\antispyware\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 415. c:\program files\rising\antispyware\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 416. c:\program files\rising\antispyware\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00D00000[00024000]
      [ M] 417. c:\program files\rising\antispyware\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    00D30000[00019000]
      [ M] 276. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00026000]
      [ M] 418. c:\program files\rising\antispyware\rscommon.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00D70000[0002D000]
      [ M] 277. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 419. c:\program files\rising\antispyware\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F80000[00067000]
      [ M] 420. c:\program files\rising\antispyware\runiep.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware tray
        .text,.rdata,.data,.rsrc,.reloc,


    00FF0000[00034000]
      [ M] 290. c:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01050000[0001F000]
      [ M] 324. c:\program files\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01070000[00024000]
      [ M] 421. c:\program files\rising\antispyware\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    02540000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,



  + 000009f4(2548) RegSrvc.exe
    00400000[00076000]
      [AM] 35. c:\program files\common files\intel\wirelesscommon\regsrvc.exe
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Registry Service
        .text,.rdata,.data,.rsrc,



  + 00000a28(2600) svchost.exe

  + 00000a4c(2636) ALMXPMGR.EXE
    00400000[00019000]
      [AM] 178. c:\windows\system32\almxpmgr.exe
        SIEMENS AG
        Extended Program Manager
        .text,.rdata,.data,.rsrc,


    10000000[0001A000]
      [ M] 422. c:\windows\system32\almxgina.dll
        SIEMENS AG
        Graphical Identification and Authorization
        .text,.rdata,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 00000a80(2688) ctfmon.exe

  + 00000a90(2704) TPHDEXLG.exe
    01000000[00013000]
      [AM] 67. c:\windows\system32\tphdexlg.exe
        Lenovo.
        ThinkVantage Active Protection System - HDD Logger Module
        .text,.data,.rsrc,



  + 00000abc(2748) TpKmpSVC.exe
    00400000[0000A000]
      [AM] 68. c:\windows\system32\tpkmpsvc.exe
        .text,.rdata,.data,



  + 00000b00(2816) WLKeeper.exe
    00400000[00058000]
      [AM] 70. c:\program files\intel\wifi\bin\wlkeeper.exe
        Intel(R) Corporation
        Intel(R) WLANKeeper SSO Service
        .text,.rdata,.data,.rsrc,


    10000000[00177000]
      [ M] 227. c:\program files\intel\wifi\bin\pfmgrapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Profile Manager API Module
        .text,.rdata,.data,.rsrc,.reloc,


    00460000[000F6000]
      [ M] 224. c:\program files\intel\wifi\bin\murocapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Muroc API Module
        .text,.rdata,.data,Shared,.rsrc,.reloc,


    00C70000[0010F000]
      [ M] 222. c:\program files\common files\intel\wirelesscommon\libeay32.dll
        The OpenSSL Project, http://www.openssl.org/
        OpenSSL Shared Library
        .text,.rdata,.data,.rsrc,.reloc,


    00D80000[000A4000]
      [ M] 220. c:\program files\common files\intel\wirelesscommon\psregapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Registry API Module
        .text,.rdata,.data,.idata,.didat,.rsrc,.reloc,


    00E70000[00092000]
      [ M] 221. c:\program files\common files\intel\wirelesscommon\traceapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Trace API Module
        .text,.rdata,.data,.rsrc,.reloc,


    06830000[0007D000]
      [ M] 225. c:\program files\intel\wifi\bin\intstngs.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Application Settings Module
        .text,.rdata,.data,.rsrc,.reloc,


    068D0000[00023000]
      [ M] 226. c:\program files\intel\wifi\bin\s24mudll.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless S24EvMon Module
        .text,.rdata,.data,.rsrc,.reloc,


    06B20000[00081000]
      [ M] 228. c:\program files\intel\wifi\bin\dbengine.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Secure DB Engine
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000b2c(2860) almsrvx.exe
    00400000[000BC000]
      [AM] 4. c:\program files\common files\siemens\sws\almsrv\almsrvx.exe
        SIEMENS AG
        Automation License Manager Service
        .text,.rdata,.data,.rsrc,


    10000000[00011000]
      [ M] 423. c:\program files\common files\siemens\sws\plugins\epl\almpgiuclx.dll
        SIEMENS AG
        Automation License Manager EPL
        .text,.rdata,.data,.rsrc,.reloc,


    00890000[00022000]
      [ M] 424. c:\program files\common files\siemens\sws\plugins\scp\almpgiscp2x.dll
        SIEMENS AG
        Automation License Manager SCP2
        .text,.rdata,.data,.rsrc,.reloc,


    00B40000[0002D000]
      [ M] 425. c:\program files\common files\siemens\sws\plugins\scp\scpw32.dll
        SCPW32
        SCPW32
        .text,.rdata,.data,SHARED,.rsrc,.reloc,


    00C80000[00024000]
      [ M] 426. c:\program files\common files\siemens\sws\plugins\scp\scpbw32.dll
        SCPBW32
        SCPBW32
        .text,.rdata,.data,SHARED,.rsrc,.reloc,


    00DC0000[00028000]
      [ M] 427. c:\program files\common files\siemens\sws\plugins\scp\rslibw32.dll
        RSLIBW32
        RSLIBW32
        .text,.rdata,.data,SHARED,.rsrc,.reloc,
        入口点在最后一个节;


    00E20000[0002D000]
      [ M] 428. c:\program files\common files\siemens\sws\plugins\scp\almpgiscp3x.dll
        SIEMENS AG
        Automation License Manager SCP3
        .text,.rdata,.data,.rsrc,.reloc,


    01060000[0005A000]
      [ M] 429. c:\program files\common files\siemens\sws\plugins\scp\scpws3.dll
        SCPW32
        SCPW32
        .text,.rdata,.data,SHARED,.rsrc,.reloc,
        入口点在最后一个节;


    011C0000[0006F000]
      [ M] 430. c:\program files\common files\siemens\sws\plugins\scp\scpbws3.dll
        SCPBW32
        SCPBW32
        .text,.rdata,.data,SHARED,.rsrc,.reloc,
        入口点在最后一个节;


    01370000[0003A000]
      [ M] 431. c:\program files\common files\siemens\sws\almsrv\almpersistencemanagerx.dll
        SIEMENS AG
        Automation License Manager Persistence Manager
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000b38(2872) GoogleToolbarNotifier.exe
    00400000[00013000]
      [AM] 179. c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe
        Google Inc.
        GoogleToolbarNotifier
        .text,.rdata,.data,.rsrc,


    10000000[00027000]
      [ M] 432. c:\program files\google\googletoolbarnotifier\5.3.4501.1418\gtn.dll
        Google Inc.
        GoogleToolbarNotifier
        .text,.rdata,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,

00FB0000[000BF000]
      [AM] 161. c:\program files\google\googletoolbarnotifier\5.3.4501.1418\swg.dll
        Google Inc.
        GoogleToolbarNotifier
        .text,.rdata,.data,.rsrc,.reloc,


    016F0000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,



  + 00000b60(2912) taskmgr.exe
    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 00000b80(2944) conime.exe
    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 00000c48(3144) unsecapp.exe
    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 00000c78(3192) TPOSDSVC.exe
    00400000[00013000]
      [AM] 183. c:\program files\lenovo\hotkey\tposdsvc.exe
        Lenovo Group Limited
        On screen display message handler
        .text,.rdata,.data,.rsrc,


    10000000[00006000]
      [ M] 433. c:\program files\lenovo\hotkey\tposdsvc.dll
        .text,.rdata,.data,.reloc,


    00B50000[00011000]
      [ M] 395. c:\program files\lenovo\hotkey\hkvolkey.dll
        .text,.rdata,.data,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 00000cdc(3292) svchost.exe

  + 00000ce4(3300) wmiprvse.exe
    10000000[00032000]
      [ M] 229. c:\program files\intel\wifi\bin\iwmsprov.dll
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    00B00000[000A4000]
      [ M] 220. c:\program files\common files\intel\wirelesscommon\psregapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Registry API Module
        .text,.rdata,.data,.idata,.didat,.rsrc,.reloc,


    00BF0000[00092000]
      [ M] 221. c:\program files\common files\intel\wirelesscommon\traceapi.dll
        Intel(R) Corporation
        Intel(R) PROSet/Wireless Trace API Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000dbc(3516) Explorer.EXE
    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    01110000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    10000000[00036000]
      [ M] 284. c:\windows\system32\netprovcredman.dll
        Intel(R) Corporation
        Intel(R) Network Provider Credential Manager
        .text,.rdata,.data,.rsrc,.reloc,


    01570000[00024000]
      [AM] 177. c:\windows\system32\ravext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    029A0000[0001C000]
      [AM] 171. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
        Adobe Systems, Inc.
        PDF Shell Extension
        .text,.rdata,.data,.rsrc,.reloc,


    029C0000[00009000]
      [ M] 397. c:\program files\adobe\acrobat 7.0\activex\pdfshell.chs
        Adobe Systems, Inc.
        PDF Shell Extension
        .rsrc,.reloc,


    7C120000[00019000]
      [ M] 278. c:\windows\system32\atl71.dll
        Microsoft Corporation
        ATL Module for Windows (Unicode)
        .text,.rdata,.data,.rsrc,.reloc,


    7C3C0000[0007C000]
      [ M] 279. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 264. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    02A60000[0001B000]
      [AM] 158. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
        深圳市迅雷网络技术有限公司
        XunLeiBHO
        .text,.rdata,.data,.rsrc,.reloc,


    222E0000[0000E000]
      [ M] 285. c:\program files\thunder network\thunder\userdata\components\resworker\dsbho_00.dll
        深圳市迅雷网络技术有限公司
        DsBho_setup
        .text,.rdata,.data,.rsrc,.reloc,


    22290000[0001E000]
      [ M] 286. c:\program files\thunder network\thunder\userdata\components\resworker\dataprocessor_00.dll
        深圳市迅雷网络技术有限公司
        DataProcessor_setup
        .text,.rdata,.data,.rsrc,.reloc,


    03EC0000[00011000]
      [ M] 395. c:\program files\lenovo\hotkey\hkvolkey.dll
        .text,.rdata,.data,.reloc,


    03EE0000[0000C000]
      [ M] 434. c:\program files\common files\autodesk shared\dwf common\dwfshellextensionres.dll
        Autodesk, Inc.
        Autodesk DWF ShellExtensionRes Module
        .rdata,.rsrc,.reloc,


    04B70000[0004D000]
      [ M] 435. c:\program files\adobe\acrobat 7.0\acrobat elements\contextmenu.chs
        Adobe Systems Inc.
        Adobe Acrobat Context Menu
        .rsrc,.reloc,


    04140000[00011000]
      [ M] 436. c:\windows\system32\btncopy.dll
        Broadcom Corporation.
        BTNCopy Module
        .text,.rdata,.data,.rsrc,.reloc,


    05060000[00091000]
      [ M] 437. c:\program files\nokia\nokia pc suite 6\phonebrowser.dll
        Nokia
        Phone Browser
        .text,.rdata,.data,.rsrc,.reloc,


    05100000[000A4000]
      [ M] 438. c:\program files\nokia\nokia pc suite 6\pcscm.dll
        Nokia
        PC Suite Common Modules
        .text,.data,.rsrc,.reloc,


    04C90000[00008000]
      [ M] 439. c:\program files\nokia\nokia pc suite 6\lang\phonebrowser_chi-sc.nlr
        Nokia
        Nokia Phone Browser language resources
        .rdata,.data,.rsrc,.reloc,


    052B0000[00087000]
      [ M] 440. c:\program files\nokia\nokia pc suite 6\resource\phonebrowser_nokia.ngr
        Nokia
        Nokia Phone Browser graphics resources
        .rsrc,.reloc,


    03220000[0002C000]
      [ M] 441. c:\program files\winrar\rarext.dll
        .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


    026D0000[0000E000]
      [ M] 442. c:\program files\ultraiso\isoshell.dll
        EZB Systems, Inc.
        ISOShell
        .text,.rdata,.data,.rsrc,.reloc,


    04890000[00077000]
      [ M] 443. c:\program files\common files\siemens\ace\bin\ccshellextention.dll
        SIEMENS AG
        CCShellExtention DLL
        .text,.rdata,.data,.rsrc,.reloc,


    04160000[0002D000]
      [ M] 306. c:\program files\common files\siemens\ace\bin\scsdiscoveryx.dll
        SIEMENS AG
        ACEDiscovery DLL
        .text,.rdata,.data,.rsrc,.reloc,


    04120000[00019000]
      [ M] 305. c:\program files\common files\siemens\ace\bin\ccpingserver.dll
        SIEMENS AG
        WinCC RPC Server
        .text,.rdata,.data,.rsrc,.reloc,


    049C0000[00024000]
      [ M] 444. c:\windows\system32\kakaext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000ee4(3812) wmiprvse.exe

  + 00000f90(3984) TpShocks.exe
    00400000[0002E000]
      [AM] 182. c:\windows\system32\tpshocks.exe
        Lenovo.
        ThinkVantage Active Protection System
        .text,.rdata,.data,.rsrc,


    10000000[00017000]
      [ M] 445. c:\program files\thinkpad\tpshocks\mui\0804\tpshocks.dll
        .text,.rdata,.data,.rsrc,.reloc,


    00930000[00007000]
      [ M] 213. c:\windows\system32\sensor.dll
        Lenovo.
        ThinkVantage Active Protection System - Shock Sensor Module
        .text,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,



  + 000013fc(5116) TXPlatform.exe
    00400000[00025000]
      [ M] 446. c:\program files\tencent\qq\bin\txplatform.exe
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    32000000[0000A000]
      [ M] 447. c:\program files\tencent\qq\bin\txpfproxy.dll
        Tencent
        QQ2009
        .text,.orpc,.rdata,.data,.rsrc,.reloc,



  + 00001500(5376) ras.exe
    00400000[0000B000]
      [ M] 448. c:\program files\rising\antispyware\ras.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 449. c:\program files\rising\antispyware\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 416. c:\program files\rising\antispyware\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 450. c:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    10000000[00047000]
      [ M] 451. c:\program files\rising\antispyware\kakamgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 415. c:\program files\rising\antispyware\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F20000[00019000]
      [ M] 276. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    00F90000[0001F000]
      [ M] 324. c:\program files\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00FB0000[00024000]
      [ M] 421. c:\program files\rising\antispyware\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    01100000[0002D000]
      [ M] 277. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01270000[00058000]
      [ M] 452. c:\program files\rising\antispyware\dbmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 414. c:\program files\rising\antispyware\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    013D0000[0002E000]
      [ M] 453. c:\program files\rising\antispyware\pweb.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01440000[000C2000]
      [ M] 454. c:\program files\rising\antispyware\pscan.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01510000[00034000]
      [ M] 290. c:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01570000[00070000]
      [ M] 455. c:\program files\rising\antispyware\pset.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01600000[00027000]
      [ M] 456. c:\program files\rising\antispyware\pdefend.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01630000[000B7000]
      [ M] 457. c:\program files\rising\antispyware\ptools.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01840000[00075000]
      [ M] 458. c:\program files\rising\antispyware\psysinfo.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    018C0000[00024000]
      [AM] 177. c:\windows\system32\ravext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 419. c:\program files\rising\antispyware\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03200000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    03400000[00018000]
      [ M] 288. c:\program files\rising\rav\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    04450000[004A3000]
      [ M] 396. c:\windows\system32\macromed\flash\flash10c.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 10.0 r32
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 0000156c(5484) QQ.exe
    00400000[00023000]
      [ M] 459. c:\program files\tencent\qq\bin\qq.exe
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,


    30000000[00211000]
      [ M] 460. c:\program files\tencent\qq\bin\common.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    31800000[0008E000]
      [ M] 461. c:\program files\tencent\qq\bin\kernelutil.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    30800000[002AA000]
      [ M] 462. c:\program files\tencent\qq\bin\gf.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0000B000]
      [ M] 463. c:\program files\tencent\qq\bin\xgraphic32.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    61210000[001E9000]
      [ M] 464. c:\program files\tencent\qq\bin\apputil.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63000000[00014000]
      [ M] 206. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    61C00000[0021A000]
      [ M] 465. c:\program files\tencent\qq\bin\mainframe.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,

02F60000[004A3000]
      [ M] 396. c:\windows\system32\macromed\flash\flash10c.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 10.0 r32
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 215. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    60B30000[00061000]
      [ M] 466. c:\program files\tencent\qq\bin\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    31000000[0036B000]
      [ M] 467. c:\program files\tencent\qq\bin\im.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    32000000[0000A000]
      [ M] 447. c:\program files\tencent\qq\bin\txpfproxy.dll
        Tencent
        QQ2009
        .text,.orpc,.rdata,.data,.rsrc,.reloc,


    04E00000[0008B000]
      [ M] 468. c:\program files\common files\tencent\txsso\bin\ssoplatform.dll
        Tencent
        Tencent SSO Platform DLL
        .text,.rdata,.data,.rsrc,.reloc,


    04E90000[0016A000]
      [ M] 469. c:\program files\common files\tencent\txsso\bin\ssocommon.dll
        Tencent
        Tencent SSO Common DLL
        .text,.rdata,.data,.rsrc,.reloc,


    61FE0000[00040000]
      [ M] 470. c:\program files\tencent\qq\bin\tasktray.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    61F20000[0003E000]
      [ M] 471. c:\program files\tencent\qq\bin\skinmgr.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    05420000[00022000]
      [ M] 255. c:\program files\tencent\qq\qqdoctor\tsfilter.dll
        TENCENT
        TSFilter
        .text,.rdata,.data,.shared,.rsrc,.reloc,


    61030000[00075000]
      [ M] 472. c:\program files\tencent\qq\bin\appctrl.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    39700000[000EB000]
      [ M] 473. c:\program files\tencent\qq\bin\riched20.dll
        Microsoft Corporation
        Rich Text Edit Control, v5.0
        .text,.rdata,.data,.rsrc,.reloc,


    05F50000[00057000]
      [ M] 474. c:\program files\tencent\qq\plugin\com.tencent.qqshow\bin\flashavatardll.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    31400000[0004D000]
      [ M] 475. c:\program files\tencent\qq\bin\kernelmisc.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    05FB0000[00189000]
      [ M] 476. c:\program files\tencent\qq\bin\appmisc.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    61500000[0014C000]
      [ M] 477. c:\program files\tencent\qq\bin\chatframe.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    61700000[000B3000]
      [ M] 478. c:\program files\tencent\qq\bin\configcenter.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    61A00000[00085000]
      [ M] 479. c:\program files\tencent\qq\bin\customface.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    31C00000[000E7000]
      [ M] 480. c:\program files\tencent\qq\bin\longcnn.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    61900000[000CB000]
      [ M] 481. c:\program files\tencent\qq\bin\contactinfoframe.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    65000000[000E3000]
      [ M] 482. c:\program files\tencent\qq\bin\msgmgr.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    61F00000[0001A000]
      [ M] 483. c:\program files\tencent\qq\bin\qinterlive.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    65100000[00088000]
      [ M] 484. c:\program files\tencent\qq\bin\systemmsg.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62E00000[000FC000]
      [ M] 485. c:\program files\tencent\qq\plugin\com.tencent.paipai\bin\paipai.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62100000[00139000]
      [ M] 486. c:\program files\tencent\qq\plugin\com.tencent.audiovideo\bin\audiovideo.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62A00000[00049000]
      [ M] 487. c:\program files\tencent\qq\plugin\com.tencent.mmog\bin\mmog.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    64100000[00055000]
      [ M] 488. c:\program files\tencent\qq\plugin\com.tencent.soso\bin\soso.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63D00000[000A9000]
      [ M] 489. c:\program files\tencent\qq\plugin\com.tencent.qzone\bin\qzone.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    64700000[00031000]
      [ M] 490. c:\program files\tencent\qq\plugin\com.tencent.weather\bin\weather.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    64000000[00018000]
      [ M] 491. c:\program files\tencent\qq\plugin\com.tencent.sobar\bin\sobar.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62F00000[00048000]
      [ M] 492. c:\program files\tencent\qq\plugin\com.tencent.paipaigift\bin\paipaigift.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63500000[00019000]
      [ M] 493. c:\program files\tencent\qq\plugin\com.tencent.qqlive\bin\qqlive.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63600000[00053000]
      [ M] 494. c:\program files\tencent\qq\plugin\com.tencent.qqmusic\bin\qqmusic.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    64300000[0001B000]
      [ M] 495. c:\program files\tencent\qq\plugin\com.tencent.taotao\bin\taotao.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    07450000[000FD000]
      [ M] 496. c:\program files\tencent\qq\bin\groupapp.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63F00000[0003C000]
      [ M] 497. c:\program files\tencent\qq\plugin\com.tencent.snsapp\bin\snsapp.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    09130000[0003B000]
      [ M] 498. c:\program files\tencent\qq\plugin\com.tencent.paycenter\bin\paycenter.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63100000[00022000]
      [ M] 499. c:\program files\tencent\qq\plugin\com.tencent.qbar\bin\qbar.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63B00000[00027000]
      [ M] 500. c:\program files\tencent\qq\plugin\com.tencent.qqvipmisc\bin\qqvipmisc.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    64800000[0003C000]
      [ M] 501. c:\program files\tencent\qq\plugin\com.tencent.wenwen\bin\wenwen.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62B00000[00016000]
      [ M] 502. c:\program files\tencent\qq\plugin\com.tencent.netbar\bin\netbar.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    64A00000[0007E000]
      [ M] 503. c:\program files\tencent\qq\plugin\com.tencent.wireless\bin\wireless.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63900000[000BD000]
      [ M] 504. c:\program files\tencent\qq\plugin\com.tencent.qqshow\bin\qqshow.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    64600000[00020000]
      [ M] 505. c:\program files\tencent\qq\plugin\com.tencent.vas\bin\vas.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    0A050000[00093000]
      [ M] 506. c:\program files\tencent\qq\bin\informationbox.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62300000[00035000]
      [ M] 507. c:\program files\tencent\qq\plugin\com.tencent.crm\bin\crm.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63300000[0006A000]
      [ M] 508. c:\program files\tencent\qq\plugin\com.tencent.qqgame\bin\qqgame.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63700000[00037000]
      [ M] 509. c:\program files\tencent\qq\plugin\com.tencent.qqpet\bin\qqpet.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62700000[00031000]
      [ M] 510. c:\program files\tencent\qq\plugin\com.tencent.mail\bin\mail.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63A00000[0001D000]
      [ M] 511. c:\program files\tencent\qq\plugin\com.tencent.qqvip\bin\qqvip.dll
        Tencent
        QQ2009
        .text,.rdata,.data,TipsStyl,.rsrc,.reloc,


    62500000[0003A000]
      [ M] 512. c:\program files\tencent\qq\plugin\com.tencent.gamelife\bin\gamelife.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    63800000[0003C000]
      [ M] 513. c:\program files\tencent\qq\plugin\com.tencent.qqring\bin\qqring.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62400000[000C4000]
      [ M] 514. c:\program files\tencent\qq\plugin\com.tencent.filetransfer\bin\filetransfer.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    62900000[0005A000]
      [ M] 515. c:\program files\tencent\qq\plugin\com.tencent.memo\bin\memo.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    0A550000[00066000]
      [ M] 516. c:\program files\tencent\qq\plugin\com.tencent.advertisement\bin\advertisement.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    64400000[0001D000]
      [ M] 517. c:\program files\tencent\qq\plugin\com.tencent.today\bin\today.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    0A610000[00024000]
      [AM] 177. c:\windows\system32\ravext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    63C00000[0002B000]
      [ M] 518. c:\program files\tencent\qq\plugin\com.tencent.qqwebsite\bin\qqwebsite.dll
        Tencent
        QQ2009
        .text,.rdata,.data,.rsrc,.reloc,


    0BCF0000[00018000]
      [ M] 288. c:\program files\rising\rav\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    0BD10000[0007C000]
      [ M] 279. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 264. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    04B10000[00039000]
      [ M] 519. c:\program files\tencent\qq\bin\addrsearch.dll
        Tencent
        AddrSearch
        UPX0,UPX1,.rsrc,


    07360000[0000B000]
      [AM] 166. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
        Microsoft Corporation
        Microsoft Office XML MIME Filter
        .text,.data,.rsrc,.reloc,


    0E780000[0005F000]
      [ M] 520. c:\program files\tencent\qq\bin\vqqsdl.dll
        Tencent
        VqqSpeedDl Module
        .text,.rdata,.data,.rsrc,.reloc,

那位高手帮助看看，谢谢了，谢谢版主的建议！！

此问题已反馈

还是不能全盘杀毒，没办法，先用免费的360杀毒了，看瑞星啥时能在不让我重装系统的情况下解决问题，:kaka9:

:kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5: :kaka5:

lz系统里是否有360的软件，建议暂时卸载后再重新尝试。

太专业了　　看不懂　　哈哈，
安全模式下试试全盘吧，说不准软件有冲突

安装Rising杀毒的时候，360还没装
安装Rising后不能杀毒，没办法才装的360，谢谢networkedition

:default70: 卸载360，重新从网站下载RAV，还是不灵，扫描到第一个“收件箱.dbx”文件后崩溃，RISING的效率太低下:default70: 。。。。。。。。

如果软件有冲突的话， RISING安装前就应该检测出来，还不是在这儿折腾用户，谢谢---花没开好！！！

我看最主要的是RISING的杀毒软件软件版本太多，人员分散，以至于内部测试不够，编写核心软件代码的核心团队人员不足！！！！！

建议 白天让工程师远程查看情况
远程地址
http://helpyou.rising.com.cn/Web1800/Service/EndUserLogin.aspx?ServiceId=8003778&GroupID=5222&un=G20091025164759562&pw=w3PYB2JTmUjIQOheqW$FrEeAqs60JZmw1GP$e0A8PpqCFNBQ