瑞星卡卡电脑诊断日志 v1.30 (2008-5-1 15:43:9)  北京瑞星科技股份有限公司

注释:	[A]表示该文件存在自启动关联;
	[M]表示该文件在内存中;

+ 注册表自运行项目 
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      MDM
        [AM] 1. d:\program files\common files\microsoft shared\vs7debug\mdm.exe
          Microsoft Corporation
          Machine Debug Manager
          .text,.data,.rsrc,


      ose
        [A ] 2. d:\program files\common files\microsoft shared\source engine\ose.exe
          Microsoft Corporation
          Office Source Engine
          .text,.data,.rsrc,


      RfwProxySrv
        [AM] 3. e:\program files\rising\rising\rfw\rfwproxy.exe
          Beijing Rising Technology Co., Ltd.
          Rising Personal Proxy Service
          .text,.rdata,.data,.rsrc,


      RfwService
        [AM] 4. e:\program files\rising\rising\rfw\rfwsrv.exe
          Beijing Rising Technology Co., Ltd.
          Rising Personal FireWall Service
          .text,.rdata,.data,.rsrc,


      RsCCenter
        [AM] 5. e:\program files\rising\rav\ccenter.exe
          Beijing Rising Technology Co., Ltd.
          CCenter
          .text,.rdata,.data,.rsrc,


      RsRavMon
        [AM] 6. e:\program files\rising\rav\ravmond.exe
          Beijing Rising Technology Co., Ltd.
          Rising Realtime Moniter
          .text,.rdata,.data,.rsrc,


      UMWdf
        [AM] 7. d:\windows\system32\wdfmgr.exe
          Microsoft Corporation
          Windows User Mode Driver Manager
          .text,.data,.rsrc,


      usnjsvc
        [A ] 8. d:\program files\msn messenger\usnsvc.exe
          Microsoft Corporation
          Messenger Sharing USN Journal Reader Service
          .text,.data,.rsrc,


      WudfSvc
        [A ] 9. d:\windows\system32\wudfsvc.dll
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Service
          .text,.data,.rsrc,.reloc,




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      ALCXWDM
        [A ] 10. d:\windows\system32\drivers\alcxwdm.sys
          Realtek Semiconductor Corp.
          Realtek AC'97 Audio Driver (WDM)
          .text,_LTEXT,_PTEXT,.rdata,.data,_LDATA,_PDATA,.data1,.CRT,PAGE,INIT,.rsrc,.reloc,


      BaseTDI
        [A ] 11. d:\windows\system32\drivers\basetdi.sys
          Beijing Rising Technology Co., Ltd.
          basetdi
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      cmuda
        [A ] 12. d:\windows\system32\drivers\cmuda.sys
          C-Media Inc
          C-Media Audio WDM Driver
          .text,_LTEXT,_PTEXT,.data,.data1,_LDATA,_PDATA,PAGE,INIT,.rsrc,.reloc,


      DgivEcp
        [A ] 13. d:\windows\system32\drivers\dgivecp.sys
          DeviceGuys, Inc.
          Windows NT 4.0 IEEE-1284 parallel class driver for ECP, Byte, and Nibble modes
          .text,INIT,.rdata,.data,.rsrc,.reloc,


      HOOKAPI
        [A ] 14. e:\program files\rising\rav\hookapi.sys


      HookCont
        [A ] 15. d:\windows\system32\drivers\hookcont.sys
          Beijing Rising Technology Co., Ltd
          HookCont
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookNtos
        [A ] 16. d:\windows\system32\drivers\hookntos.sys
          Beijing Rising Technology Co., Ltd
          HookNtos
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookReg
        [A ] 17. d:\windows\system32\drivers\hookreg.sys
          Beijing Rising Technology Co., Ltd
          HookReg
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookSys
        [A ] 18. d:\windows\system32\drivers\hooksys.sys
          Beijing Rising Technology Co., Ltd
          Hooksys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookUrl
        [A ] 19. e:\program files\rising\rising\rfw\hookurl.sys
          Beijing Rising Technology Co., Ltd.
          URL Filter Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      ialm
        [A ] 20. d:\windows\system32\drivers\ialmnt5.sys
          Intel Corporation
          Controller Hub for Intel Graphics Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      kmsinput
        [A ] 21. d:\windows\system32\drivers\kmsinput.sys
          .text,.data,INIT,.reloc,


      npkcrypt
        [A ] 22. d:\windows\system32\npkcrypt.sys


      npkycryp
        [A ] 23. d:\windows\system32\npkycryp.sys


      ppmoucls
        [A ] 24. d:\windows\system32\drivers\ppmoucls.sys


      pptchpad
        [A ] 25. d:\windows\system32\drivers\pptchpd5.sys


      RfwBase
        [A ] 26. d:\windows\system32\drivers\rfwbase.sys
          Beijing Rising Technology Co., Ltd.
          net base driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rgga
        [A ] 27. d:\windows\system32\drivers\rgga.sys
          SafeNet China Ltd.
          GeniusDog driver
          .text,.data,INIT,.rsrc,.reloc,


      RsAntiSpyware
        [A ] 28. d:\windows\system32\drivers\rsboot.sys
          Beijing Rising Technology Co., Ltd.
          Anti-RootKit Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsFwDrv
        [A ] 29. e:\program files\rising\rising\rfw\rsfwdrv.sys
          Beijing Rising Technology Co., Ltd.
          Rules Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsNTGDI
        [A ] 30. d:\windows\system32\drivers\rsntgdi.sys
          Beijing Rising Technology Co., Ltd.
          RsNTGDI
          .text,.rdata,INIT,.rsrc,.reloc,


      Secdrv
        [A ] 31. d:\windows\system32\drivers\secdrv.sys
          Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
          Macrovision SECURITY Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      TesSafe
        [A ] 32. d:\windows\system32\tessafe.sys
          TENCENT
          TesSafe NT Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      WudfPf
        [A ] 33. d:\windows\system32\drivers\wudfpf.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Platform Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      WudfRd
        [A ] 34. d:\windows\system32\drivers\wudfrd.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Reflector
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      ZSMC301b
        [A ] 35. d:\windows\system32\drivers\usbvm31b.sys
          VM
          Video streaming and Capture Device Driver
          .text,.data,PAGECONS,INIT,.rsrc,.reloc,


      {6080A529-897E-4629-A488-ABA0C29B635E}
        [A ] 36. d:\windows\system32\drivers\ialmsbw.sys
          Intel Corporation
          Intel Graphics Platform (SoftBIOS) Driver for Windows 2000(R) & Windows XP(TM)
          .text,.rdata,.data,.edata,INIT,.rsrc,.reloc,


      {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}
        [A ] 37. d:\windows\system32\drivers\ialmkchw.sys
          Intel Corporation
          Intel Graphics Chipset (KCH) Driver for Windows 2000(R) & Windows XP(TM)
          .text,.rdata,.data,.edata,INIT,.rsrc,.reloc,




  + 系统登陆自运行
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      WgaLogon
        [AM] 38. d:\windows\system32\wgalogon.dll
          Microsoft Corporation
          Windows 正版增值计划通知
          .text,.data,.rsrc,.reloc,




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [A ] 39. d:\windows\system32\kakatool.dll
          Beijing Rising Technology Co., Ltd.
          Rising AntiSpyware Toolbar
          .text,.rdata,.data,MonitorS,.rsrc,.reloc,




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [A ] 40. d:\program files\common files\microsoft shared\office11\msoxmlmf.dll
          Microsoft Corporation
          Microsoft Office XML MIME Filter
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      livecall
        [A ] 41. d:\program files\msn messenger\msgrapp.8.1.0178.00.dll
          Microsoft Corporation
          MSN Messenger Protocol Handler
          .text,.data,.rsrc,.reloc,


      ms-itss
        [A ] 42. d:\program files\common files\microsoft shared\information retrieval\msitss.dll
          Microsoft Corporation
          Microsoft? InfoTech Storage System Library
          .text,.data,.rsrc,.reloc,


      msnim
        [A ] 41. d:\program files\msn messenger\msgrapp.8.1.0178.00.dll
          Microsoft Corporation
          MSN Messenger Protocol Handler
          .text,.data,.rsrc,.reloc,


      mso-offdap
        [A ] 43. d:\program files\common files\microsoft shared\web components\10\owc10.dll
          Microsoft Corporation
          Microsoft Office XP Web Components
          .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc,


      mso-offdap11
        [A ] 44. d:\program files\common files\microsoft shared\web components\11\owc11.dll
          Microsoft Corporation
          Microsoft Office Web Components 2003
          .text,.data,.rtext,Shared,.cdata,.rsrc,.reloc,


      skype4com
        [A ] 45. d:\windows\system32\skype4com.dll
          Skype Technologies
          Skype for COM API
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {DDB066B3-8D19-11d2-8763-006052014B08}
        [AM] 46. d:\windows\system32\mp3infp.dll
          win32lab.com
          mp3infp DLL
          .text,.rdata,.data,.rsrc,.reloc,.aspack,.adata,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      Web Folders
        [A ] 47. d:\program files\common files\microsoft shared\web folders\msonsext.dll
          Microsoft Corporation
          Microsoft Web Folders
          .text,.data,.rsrc,.reloc,


      Microsoft Office HTML Icon Handler
        [A ] 48. d:\program files\microsoft office\office11\msohev.dll
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,.reloc,


      Messenger Sharing Folders
        [A ] 49. d:\program files\msn messenger\fsshext.8.1.0178.00.dll
          Microsoft Corporation
          Messenger File Sharing Shell Extensions
          .text,.data,.rsrc,.reloc,


      RISING
        [AM] 50. d:\windows\system32\ravext.dll
          Beijing Rising Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,


      Portable Media Devices
        [A ] 51. d:\windows\system32\audiodev.dll
          Microsoft Corporation
          便携媒体设备命令行解释器扩展
          .text,.data,.rsrc,.reloc,


      Portable Media Devices Menu
        [A ] 51. d:\windows\system32\audiodev.dll
          Microsoft Corporation
          便携媒体设备命令行解释器扩展
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 50. d:\windows\system32\ravext.dll
          Beijing Rising Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,




  + 用户登陆自运行项目
    + HKCU\Software\Microsoft\Windows\CurrentVersion\Run
      Skype
        [A ] 52. e:\program files\电话\phone\skype.exe
          Skype Technologies S.A.
          TOM-Skype
          CODE,DATA,BSS,.idata,.tls,.rdata,.reloc,.rsrc,



    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      IgfxTray
        [A ] 53. d:\windows\system32\igfxtray.exe
          Intel Corporation
          igfxTray Module
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 54. e:\program files\瑞星杀毒\runiep.exe
          Beijing Rising Technology Co., Ltd.
          Rising AntiSpyware Monitor
          .text,.rdata,.data,.rsrc,


      RfwMain
        [AM] 55. e:\program files\rising\rising\rfw\rfwmain.exe
          Beijing Rising Technology Co., Ltd.
          Rising Personal FireWall Main Program
          .text,.rdata,.data,.rsrc,


      RavTask
        [AM] 56. e:\program files\rising\rav\ravtask.exe
          Beijing Rising Technology Co., Ltd.
          RavTimer
          .text,.rdata,.data,.rsrc,


      vbe
        [A ] 57. d:\windows\win.vbe




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 58. d:\windows\system32\bsmain.exe
          Beijing Rising Technology Co., Ltd.
          Rising Antivirus 2008
          .text,.rdata,.data,.rsrc,.reloc,




  + 映像劫持
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 59. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 59. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 59. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 59. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.mp3
      Winamp.File\Enqueue\Command
        [A ] 60. d:\program files\winamp\winamp.exe
          Nullsoft
          Winamp
          .text,.rdata,.data,.rsrc,


      Winamp.File\ListBookmark\Command
        [A ] 60. d:\program files\winamp\winamp.exe
          Nullsoft
          Winamp
          .text,.rdata,.data,.rsrc,


      Winamp.File\open\Command
        [A ] 60. d:\program files\winamp\winamp.exe
          Nullsoft
          Winamp
          .text,.rdata,.data,.rsrc,


      Winamp.File\Play\Command
        [A ] 60. d:\program files\winamp\winamp.exe
          Nullsoft
          Winamp
          .text,.rdata,.data,.rsrc,




  + 程序初始化和已知动态连接库
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      AppInit_DLLs
        [AM] 61. d:\windows\system32\ieprot.dll
          Beijing Rising Technology Co., Ltd.
          IE Protector
          .text,.rdata,.data,.rsrc,.reloc,




  + 打印机监控
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      Microsoft Document Imaging Writer Monitor
        [AM] 62. d:\windows\system32\mdimon.dll
          Microsoft Corporation
          Microsoft? Document Imaging
          .text,.data,.rsrc,.reloc,





+ 其他自启动项目
  + D:\Documents and Settings\Administrator\「开始」菜单\程序\启动
    QQ游戏启动加速程序.lnk
      [A ] 63. d:\program files\tencent\qqgame\accel.exe
        深圳市腾讯计算机系统有限公司
        QQ游戏
        .text,.rdata,.data,.rsrc,




+ 正在运行的进程
  + 00000100(256) RfwMain.exe
    00400000[00091000]
      [AM] 55. e:\program files\rising\rising\rfw\rfwmain.exe
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Main Program
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 64. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 65. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 66. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[000B8000]
      [ M] 67. e:\program files\rising\rising\rfw\rsguilib.dll
        Beijing Rising Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 68. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    10000000[0001F000]
      [ M] 69. e:\program files\rising\rising\rfw\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B10000[00024000]
      [ M] 70. e:\program files\rising\rising\rfw\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00C50000[0000E000]
      [ M] 71. e:\program files\rising\rising\rfw\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00C70000[00030000]
      [ M] 72. e:\program files\rising\rising\rfw\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 73. e:\program files\rising\rising\rfw\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00EC0000[00014000]
      [ M] 74. e:\program files\rising\rising\rfw\rfwctrl.dll
        Beijing Rising Technology Co., Ltd.
        RfwCtrl DLL
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00018000]
      [ M] 75. e:\program files\rising\rising\rfw\rsxml.dll
        Beijing Rising Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 76. e:\program files\rising\rising\rfw\pngdll.dll
        Beijing Rising Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    01440000[0000F000]
      [ M] 79. e:\program files\rising\rising\rfw\rfwrule.dll
        Beijing Rising Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 80. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,



  + 0000019c(412) Ravmon.exe
    00400000[00067000]
      [ M] 82. e:\program files\rising\rav\ravmon.exe
        Beijing Rising Technology Co., Ltd.
        Rising realtime monitor shell
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 64. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 65. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 66. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 68. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    10000000[0001F000]
      [ M] 83. e:\program files\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B20000[00024000]
      [ M] 84. e:\program files\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 85. e:\program files\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00D70000[0002B000]
      [ M] 86. e:\program files\rising\rav\recomp.dll
        Beijing Rising Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00EB0000[00031000]
      [ M] 87. e:\program files\rising\rav\refs.dll
        Beijing Rising Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F00000[0002F000]
      [ M] 88. e:\program files\rising\rav\viruslib.dll
        Beijing Rising Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01040000[00027000]
      [ M] 89. e:\program files\rising\rav\relibldr.dll
        Beijing Rising Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    010C0000[0000E000]
      [ M] 90. e:\program files\rising\rav\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    010E0000[00030000]
      [ M] 91. e:\program files\rising\rav\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    01240000[00075000]
      [ M] 92. e:\program files\rising\rav\monrule.dll
        Beijing Rising Technology Co., Ltd.
        MonRule 
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 93. e:\program files\rising\rav\pngdll.dll
        Beijing Rising Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    26600000[000B8000]
      [ M] 94. e:\program files\rising\rav\rsguilib.dll
        Beijing Rising Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00018000]
      [ M] 95. e:\program files\rising\rav\rsxml.dll
        Beijing Rising Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000001a4(420) smss.exe

  + 000001ec(492) csrss.exe
    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000204(516) winlogon.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    01350000[0003B000]
      [AM] 38. d:\windows\system32\wgalogon.dll
        Microsoft Corporation
        Windows 正版增值计划通知
        .text,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 80. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000234(564) services.exe
    47260000[0000F000]
      [ M] 96. d:\windows\apppatch\acadproc.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000240(576) lsass.exe
    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000270(624) conime.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000002d4(724) svchost.exe
    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000300(768) svchost.exe
    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000344(836) CCenter.exe
    00400000[00029000]
      [AM] 5. e:\program files\rising\rav\ccenter.exe
        Beijing Rising Technology Co., Ltd.
        CCenter
        .text,.rdata,.data,.rsrc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000354(852) svchost.exe
    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    50E60000[0000C000]
      [ M] 97. d:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,



  + 00000380(896) svchost.exe
    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000003d4(980) svchost.exe
    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000468(1128) cmd.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000478(1144) ravmond.exe
    00400000[00069000]
      [AM] 6. e:\program files\rising\rav\ravmond.exe
        Beijing Rising Technology Co., Ltd.
        Rising Realtime Moniter
        .text,.rdata,.data,.rsrc,


    10000000[00042000]
      [ M] 98. e:\program files\rising\rav\bwlist.dll
        Beijing Rising Technology Co., Ltd.
        BWList DLL
        .text,.rdata,.data,.rsrc,.reloc,


    7C140000[00103000]
      [ M] 64. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 65. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 66. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 68. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00AE0000[0000E000]
      [ M] 90. e:\program files\rising\rav\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00B00000[00030000]
      [ M] 91. e:\program files\rising\rav\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    00DA0000[00066000]
      [ M] 99. e:\program files\rising\rav\rslog.dll
        Beijing Rising Technology Co., Ltd.
        RsLog DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00B40000[0001F000]
      [ M] 83. e:\program files\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00E10000[00024000]
      [ M] 84. e:\program files\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00E90000[00075000]
      [ M] 92. e:\program files\rising\rav\monrule.dll
        Beijing Rising Technology Co., Ltd.
        MonRule 
        .text,.rdata,.data,.rsrc,.reloc,


    00F20000[00013000]
      [ M] 100. e:\program files\rising\rav\hooksys.dll
        Beijing Rising Technology Co., Ltd
        Hooksys Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    00F90000[00013000]
      [ M] 101. e:\program files\rising\rav\hookreg.dll
        Beijing Rising Technology Co., Ltd
        HookReg Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00FF0000[00013000]
      [ M] 102. e:\program files\rising\rav\hookntos.dll
        Beijing Rising Technology Co., Ltd
        SysMon Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01050000[0001C000]
      [ M] 103. e:\program files\rising\rav\rswalmon.dll
        Beijing Rising Technology Co., Ltd.
        Rising WAL Monitor DLL
        .text,.rdata,.data,.rsrc,.reloc,


    01FB0000[0002B000]
      [ M] 86. e:\program files\rising\rav\recomp.dll
        Beijing Rising Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01FE0000[00031000]
      [ M] 87. e:\program files\rising\rav\refs.dll
        Beijing Rising Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02030000[00039000]
      [ M] 104. e:\program files\rising\rav\ffr.dll
        Beijing Rising Technology Co., Ltd.
        ffr Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02280000[00020000]
      [ M] 105. e:\program files\rising\rav\rsstore.dll
        Beijing Rising Technology Co., Ltd.
        RSStore
        .text,.rdata,.data,.rsrc,.reloc,


    024B0000[00013000]
      [ M] 106. e:\program files\rising\rav\hookcont.dll
        Beijing Rising Technology Co., Ltd
        HookCont Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    024E0000[00027000]
      [ M] 107. e:\program files\rising\rav\fakescan.dll
        Beijing Rising Technology Co., Ltd.
        FakeScan Module
        .text,.rdata,.data,.rsrc,.reloc,


    02520000[00022000]
      [ M] 108. e:\program files\rising\rav\scanner.dll
        Beijing Rising Technology Co., Ltd.
        RsScanner Module
        .text,.rdata,.data,.rsrc,.reloc,


    02650000[0002F000]
      [ M] 88. e:\program files\rising\rav\viruslib.dll
        Beijing Rising Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02790000[00027000]
      [ M] 89. e:\program files\rising\rav\relibldr.dll
        Beijing Rising Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    02F80000[0000D000]
      [ M] 109. e:\program files\rising\rav\hookweb.dll
        Beijing Rising Technology Co., Ltd.
        Rising HookWeb Dll
        .text,.rdata,.data,.rsrc,.reloc,


    03CE0000[00021000]
      [ M] 110. e:\program files\rising\rav\nvfile.dll
        Beijing Rising Technology Co., Ltd.
        NVFile
        .text,.rdata,.data,.rsrc,.reloc,


    03F30000[000DC000]
      [ M] 111. e:\program files\rising\rav\extfile.dll
        Beijing Rising Technology Co., Ltd.
        extFile Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    04020000[00027000]
      [ M] 112. e:\program files\rising\rav\pearc.dll
        Beijing Rising Technology Co., Ltd.
        pearchive Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    13AB0000[0004A000]
      [ M] 113. e:\program files\rising\rav\scanexec.dll
        Beijing Rising Technology Co., Ltd.
        ScanExec
        .text,.rdata,.data,.rsrc,.reloc,


    05080000[002DC000]
      [ M] 114. e:\program files\rising\rav\unexe.dll
        Beijing Rising Technology Co., Ltd.
        UnExe
        .text,.rdata,.data,.rsrc,.reloc,


    05370000[000AF000]
      [ M] 115. e:\program files\rising\rav\scanex.dll
        Beijing Rising Technology Co., Ltd.
        ScanEx
        .text,.rdata,.data,.rsrc,.reloc,


    04160000[00022000]
      [ M] 116. e:\program files\rising\rav\scansct.dll
        Beijing Rising Technology Co., Ltd.
        ScanSct Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02E40000[00036000]
      [ M] 117. e:\program files\rising\rav\scanpack.dll
        Beijing Rising Technology Co., Ltd.
        Unpack Engine
        .text,.rdata,.data,.rsrc,.reloc,


    03AF0000[000B4000]
      [ M] 118. e:\program files\rising\rav\revm.dll
        Beijing Rising Technology Co., Ltd.
        REVM Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000488(1160) rfwsrv.exe
    00400000[00036000]
      [AM] 4. e:\program files\rising\rising\rfw\rfwsrv.exe
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Service
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 64. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 65. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 66. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 68. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00840000[0001F000]
      [ M] 69. e:\program files\rising\rising\rfw\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00860000[00024000]
      [ M] 70. e:\program files\rising\rising\rfw\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00AB0000[0000E000]
      [ M] 71. e:\program files\rising\rising\rfw\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00AD0000[00030000]
      [ M] 72. e:\program files\rising\rising\rfw\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    00BE0000[0000F000]
      [ M] 79. e:\program files\rising\rising\rfw\rfwrule.dll
        Beijing Rising Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00C30000[0000C000]
      [ M] 119. e:\program files\rising\rising\rfw\rfwlog.dll
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Logfile DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00C40000[00018000]
      [ M] 120. e:\program files\rising\rising\rfw\rfwdrv.dll
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Driver DLL
        .text,.rdata,.data,.rsrc,.reloc,


    731B0000[0000A000]
      [ M] 121. e:\program files\rising\rising\rfw\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.rdata,.data,.rsrc,.reloc,


    00D60000[0000E000]
      [ M] 122. e:\program files\rising\rising\rfw\ijt_ctrl.dll
        Beijing Rising Technology Co., Ltd.
        Injector Controller
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    00D90000[00016000]
      [ M] 123. e:\program files\rising\rising\rfw\unvdet.dll
        Beijing Rising Technology Co., Ltd.
        ScanUnv
        .text,.rdata,.data,.rsrc,.reloc,


    00DE0000[00013000]
      [ M] 124. e:\program files\rising\rising\rfw\mports.dll
        Beijing Rising Technology Co., Ltd.
        get ports list
        .text,.rdata,.data,.rsrc,.reloc,



  + 000004d8(1240) rfwproxy.exe
    00400000[00236000]
      [AM] 3. e:\program files\rising\rising\rfw\rfwproxy.exe
        Beijing Rising Technology Co., Ltd.
        Rising Personal Proxy Service
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 64. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 65. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 68. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    731B0000[0000A000]
      [ M] 121. e:\program files\rising\rising\rfw\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.rdata,.data,.rsrc,.reloc,


    00C20000[0001F000]
      [ M] 69. e:\program files\rising\rising\rfw\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C40000[00024000]
      [ M] 70. e:\program files\rising\rising\rfw\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00D90000[0000F000]
      [ M] 79. e:\program files\rising\rising\rfw\rfwrule.dll
        Beijing Rising Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    01290000[00016000]
      [ M] 125. e:\program files\rising\rising\rfw\monmid.dll
        Beijing Rising Technology Co., Ltd.
        URL filter dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000584(1412) rfwstub.exe
    00400000[00017000]
      [ M] 126. e:\program files\rising\rising\rfw\rfwstub.exe
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Service Rfwstub 
        .text,.rdata,.data,.rsrc,


    7C3A0000[0007B000]
      [ M] 66. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 65. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 73. e:\program files\rising\rising\rfw\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000658(1624) RavStub.exe
    00400000[00021000]
      [ M] 127. e:\program files\rising\rav\ravstub.exe
        Beijing Rising Technology Co., Ltd.
        Rising RavStub
        .text,.rdata,.data,.rsrc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001F000]
      [ M] 83. e:\program files\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00660000[00024000]
      [ M] 84. e:\program files\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 85. e:\program files\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 000006b8(1720) spoolsv.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    00B50000[00008000]
      [AM] 62. d:\windows\system32\mdimon.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    00B60000[00008000]
      [ M] 128. d:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    00EB0000[00005000]
      [ M] 129. d:\windows\system32\spool\prtprocs\w32x86\vprproc.dll
        Windows (R) 2000 DDK provider
        Windows DDK Print DLL
        .text,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000778(1912) Explorer.EXE
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 80. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    018C0000[0001C000]
      [AM] 50. d:\windows\system32\ravext.dll
        Beijing Rising Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    02CA0000[00096000]
      [AM] 46. d:\windows\system32\mp3infp.dll
        win32lab.com
        mp3infp DLL
        .text,.rdata,.data,.rsrc,.reloc,.aspack,.adata,


    02D40000[00037000]
      [ M] 130. d:\windows\system32\igfxpph.dll
        Intel Corporation
        igfxpph Module
        .text,.rdata,.data,.rsrc,.reloc,


    02D80000[0001E000]
      [ M] 131. d:\windows\system32\hccutils.dll
        Intel Corporation
        hccutils Module
        .text,.rdata,.data,.rsrc,.reloc,


    02DB0000[00027000]
      [ M] 132. d:\windows\system32\igfxres.dll
        Intel Corporation
        xxxxres Module
        .text,.rdata,.data,.rsrc,.reloc,


    02E00000[0002B000]
      [ M] 133. d:\program files\winrar\rarext.dll
        .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


    23700000[00028000]
      [ M] 85. e:\program files\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    047D0000[0007C000]
      [ M] 134. d:\windows\system32\igfxress.dll
        Intel Corporation
        xxxxres Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000798(1944) ctfmon.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007e0(2016) runiep.exe
    00400000[00020000]
      [AM] 54. e:\program files\瑞星杀毒\runiep.exe
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware Monitor
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 135. e:\program files\瑞星杀毒\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 136. e:\program files\瑞星杀毒\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 68. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    00BD0000[0001C000]
      [AM] 50. d:\windows\system32\ravext.dll
        Beijing Rising Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007f8(2040) RavTask.exe
    00400000[00034000]
      [AM] 56. e:\program files\rising\rav\ravtask.exe
        Beijing Rising Technology Co., Ltd.
        RavTimer
        .text,.rdata,.data,.rsrc,


    10000000[0001F000]
      [ M] 83. e:\program files\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00A30000[00024000]
      [ M] 84. e:\program files\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 85. e:\program files\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C90000[0000E000]
      [ M] 90. e:\program files\rising\rav\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    08CB0000[00030000]
      [ M] 91. e:\program files\rising\rav\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000008a4(2212) cmd.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000938(2360) Ras.exe
    00400000[001FF000]
      [ M] 137. e:\program files\瑞星杀毒\ras.exe
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 135. e:\program files\瑞星杀毒\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 136. e:\program files\瑞星杀毒\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 138. e:\program files\瑞星杀毒\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00013000]
      [ M] 139. e:\program files\瑞星杀毒\topsoft.dll
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware TopSoft
        .text,.rdata,.data,.rsrc,.reloc,


    00370000[00032000]
      [ M] 140. e:\program files\瑞星杀毒\ncomm.dll
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 68. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00D10000[0001F000]
      [ M] 83. e:\program files\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00EE0000[00024000]
      [ M] 84. e:\program files\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    01020000[0014D000]
      [ M] 141. e:\program files\瑞星杀毒\rasgui.dll
        Beijing Rising Technology Co., Ltd.
        RasGUI
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 142. e:\program files\瑞星杀毒\rsxml.dll
        Beijing Rising Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    031F0000[00018000]
      [ M] 143. e:\program files\瑞星杀毒\ktrojan.dll
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    03220000[0002F000]
      [ M] 144. e:\program files\瑞星杀毒\engine.dll
        Beijing Rising Technology Co., Ltd.
        kaka engine
        .text,.rdata,.data,.rsrc,.reloc,


    03260000[00040000]
      [ M] 145. e:\program files\瑞星杀毒\rsdialog.dll
        Beijing Rising Technology Co., Ltd.
        Rsdiaglo DLL
        .text,.rdata,.data,.rsrc,.reloc,


    032B0000[00024000]
      [ M] 146. e:\program files\瑞星杀毒\scanunv.dll
        Beijing Rising Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    032F0000[0001F000]
      [ M] 147. e:\program files\瑞星杀毒\secscan.dll
        Copyright(c) 1998-2006 Beijing  Rising  Technology  Corporation  Limited
        SecScan Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    033D0000[00015000]
      [ M] 148. e:\program files\瑞星杀毒\secex.dll
        Copyright(c) 1998-2006 Beijing  Rising  Technology  Corporation  Limited
        SecScanE Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03AD0000[00012000]
      [ M] 149. e:\program files\瑞星杀毒\zip.dll
        rising
        zip
        UPX0,UPX1,.rsrc,


    04230000[00028000]
      [ M] 150. e:\program files\rising\rav\ravscrch.dll
        Beijing Rising Technology Co., Ltd.
        RavScrCh Module
        .text,.rdata,.data,.rsrc,.reloc,


    30000000[003AE000]
      [ M] 151. d:\windows\system32\macromed\flash\flash9e.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 9.0  r115
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 80. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000acc(2764) taskmgr.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,



  + 00000b2c(2860) cmd.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000cdc(3292) MDM.EXE
    00400000[0004D000]
      [AM] 1. d:\program files\common files\microsoft shared\vs7debug\mdm.exe
        Microsoft Corporation
        Machine Debug Manager
        .text,.data,.rsrc,


    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    51810000[00006000]
      [ M] 152. d:\program files\common files\microsoft shared\vs7debug\2052\mdmui.dll
        Microsoft Corporation
        MDM 资源
        .rsrc,.reloc,



  + 00000d10(3344) svchost.exe

  + 00000d50(3408) wdfmgr.exe
    01000000[0000C000]
      [AM] 7. d:\windows\system32\wdfmgr.exe
        Microsoft Corporation
        Windows User Mode Driver Manager
        .text,.data,.rsrc,


    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000de8(3560) cmd.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 77. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 78. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000edc(3804) explorer.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    23700000[00028000]
      [ M] 85. e:\program files\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    023E0000[00096000]
      [AM] 46. d:\windows\system32\mp3infp.dll
        win32lab.com
        mp3infp DLL
        .text,.rdata,.data,.rsrc,.reloc,.aspack,.adata,



  + 00000f30(3888) alg.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000fac(4012) WScript.exe
    10000000[0001E000]
      [AM] 61. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 81. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        王码五笔型输入法 86 版
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    00DE0000[00028000]
      [ M] 150. e:\program files\rising\rav\ravscrch.dll
        Beijing Rising Technology Co., Ltd.
        RavScrCh Module
        .text,.rdata,.data,.rsrc,.reloc,


    41F00000[00007000]
      [ M] 153. d:\windows\system32\asfsipc.dll
        Microsoft Corporation
        ASFSipc Object
        .text,.data,.rsrc,.reloc,