ÈðÐÇ¿¨¿¨µçÄÔÕï¶ÏÈÕÖ¾ v1.30 (2008-5-3 15:53:31)  ±±¾©ÈðÐǿƼ¼¹É·ÝÓÐÏÞ¹«Ë¾

×¢ÊÍ:	[A]±íʾ¸ÃÎļþ´æÔÚ×ÔÆô¶¯¹ØÁª;
	[M]±íʾ¸ÃÎļþÔÚÄÚ´æÖÐ;

+ ×¢²á±í×ÔÔËÐÐÏîÄ¿ 
  + ϵͳ·þÎñ
    + HKLM\System\CurrentControlSet\Services
      MDM
        [AM] 1. d:\program files\common files\microsoft shared\vs7debug\mdm.exe
          Microsoft Corporation
          Machine Debug Manager
          .text,.data,.rsrc,


      ose
        [A ] 2. d:\program files\common files\microsoft shared\source engine\ose.exe
          Microsoft Corporation
          Office Source Engine
          .text,.data,.rsrc,


      RfwProxySrv
        [AM] 3. e:\program files\rising\rising\rfw\rfwproxy.exe
          Beijing Rising Technology Co., Ltd.
          Rising Personal Proxy Service
          .text,.rdata,.data,.rsrc,


      RfwService
        [AM] 4. e:\program files\rising\rising\rfw\rfwsrv.exe
          Beijing Rising Technology Co., Ltd.
          Rising Personal FireWall Service
          .text,.rdata,.data,.rsrc,


      RsCCenter
        [AM] 5. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ccenter.exe
          Beijing Rising Technology Co., Ltd.
          CCenter
          .text,.rdata,.data,.rsrc,


      RsRavMon
        [AM] 6. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ravmond.exe
          Beijing Rising Technology Co., Ltd.
          Rising Realtime Moniter
          .text,.rdata,.data,.rsrc,


      UMWdf
        [AM] 7. d:\windows\system32\wdfmgr.exe
          Microsoft Corporation
          Windows User Mode Driver Manager
          .text,.data,.rsrc,


      usnjsvc
        [A ] 8. d:\program files\msn messenger\usnsvc.exe
          Microsoft Corporation
          Messenger Sharing USN Journal Reader Service
          .text,.data,.rsrc,


      WudfSvc
        [A ] 9. d:\windows\system32\wudfsvc.dll
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Service
          .text,.data,.rsrc,.reloc,




  + ÄÚºËÇý¶¯
    + HKLM\System\CurrentControlSet\Services
      ALCXWDM
        [A ] 10. d:\windows\system32\drivers\alcxwdm.sys
          Realtek Semiconductor Corp.
          Realtek AC'97 Audio Driver (WDM)
          .text,_LTEXT,_PTEXT,.rdata,.data,_LDATA,_PDATA,.data1,.CRT,PAGE,INIT,.rsrc,.reloc,


      BaseTDI
        [A ] 11. d:\windows\system32\drivers\basetdi.sys
          Beijing Rising Technology Co., Ltd.
          basetdi
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      cmuda
        [A ] 12. d:\windows\system32\drivers\cmuda.sys
          C-Media Inc
          C-Media Audio WDM Driver
          .text,_LTEXT,_PTEXT,.data,.data1,_LDATA,_PDATA,PAGE,INIT,.rsrc,.reloc,


      DgivEcp
        [A ] 13. d:\windows\system32\drivers\dgivecp.sys
          DeviceGuys, Inc.
          Windows NT 4.0 IEEE-1284 parallel class driver for ECP, Byte, and Nibble modes
          .text,INIT,.rdata,.data,.rsrc,.reloc,


      HOOKAPI
        [A ] 14. e:\program files\ÈðÐÇɱ¶¾\rising\rav\hookapi.sys


      HookCont
        [A ] 15. d:\windows\system32\drivers\hookcont.sys
          Beijing Rising Technology Co., Ltd
          HookCont
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookNtos
        [A ] 16. d:\windows\system32\drivers\hookntos.sys
          Beijing Rising Technology Co., Ltd
          HookNtos
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookReg
        [A ] 17. d:\windows\system32\drivers\hookreg.sys
          Beijing Rising Technology Co., Ltd
          HookReg
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookSys
        [A ] 18. d:\windows\system32\drivers\hooksys.sys
          Beijing Rising Technology Co., Ltd
          Hooksys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookUrl
        [A ] 19. e:\program files\rising\rising\rfw\hookurl.sys
          Beijing Rising Technology Co., Ltd.
          URL Filter Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      ialm
        [A ] 20. d:\windows\system32\drivers\ialmnt5.sys
          Intel Corporation
          Controller Hub for Intel Graphics Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      KAVBootC
        [A ] 21. d:\windows\system32\drivers\kavbootc.sys
          Kingsoft Corporation
          Kingsoft Boot Clean
          .text,.data,.CRT,INIT,.rsrc,.reloc,


      KAVSafe
        [A ] 22. d:\windows\system32\drivers\kavsafe.sys
          Kingsoft Corporation
          KAVSafe Application
          .text,.data,.CRT,INIT,.rsrc,.reloc,


      kmsinput
        [A ] 23. d:\windows\system32\drivers\kmsinput.sys
          .text,.data,INIT,.reloc,


      npkcrypt
        [A ] 24. d:\windows\system32\npkcrypt.sys


      npkycryp
        [A ] 25. d:\windows\system32\npkycryp.sys


      ppmoucls
        [A ] 26. d:\windows\system32\drivers\ppmoucls.sys


      pptchpad
        [A ] 27. d:\windows\system32\drivers\pptchpd5.sys


      RfwBase
        [A ] 28. d:\windows\system32\drivers\rfwbase.sys
          Beijing Rising Technology Co., Ltd.
          net base driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rgga
        [A ] 29. d:\windows\system32\drivers\rgga.sys
          SafeNet China Ltd.
          GeniusDog driver
          .text,.data,INIT,.rsrc,.reloc,


      RsAntiSpyware
        [A ] 30. d:\windows\system32\drivers\rsboot.sys
          Beijing Rising Technology Co., Ltd.
          Anti-RootKit Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsFwDrv
        [A ] 31. e:\program files\rising\rising\rfw\rsfwdrv.sys
          Beijing Rising Technology Co., Ltd.
          Rules Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsNTGDI
        [A ] 32. d:\windows\system32\drivers\rsntgdi.sys
          Beijing Rising Technology Co., Ltd.
          RsNTGDI
          .text,.rdata,INIT,.rsrc,.reloc,


      Secdrv
        [A ] 33. d:\windows\system32\drivers\secdrv.sys
          Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
          Macrovision SECURITY Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      TesSafe
        [A ] 34. d:\windows\system32\tessafe.sys
          TENCENT
          TesSafe NT Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      WudfPf
        [A ] 35. d:\windows\system32\drivers\wudfpf.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Platform Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      WudfRd
        [A ] 36. d:\windows\system32\drivers\wudfrd.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Reflector
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      ZSMC301b
        [A ] 37. d:\windows\system32\drivers\usbvm31b.sys
          VM
          Video streaming and Capture Device Driver
          .text,.data,PAGECONS,INIT,.rsrc,.reloc,


      {6080A529-897E-4629-A488-ABA0C29B635E}
        [A ] 38. d:\windows\system32\drivers\ialmsbw.sys
          Intel Corporation
          Intel Graphics Platform (SoftBIOS) Driver for Windows 2000(R) & Windows XP(TM)
          .text,.rdata,.data,.edata,INIT,.rsrc,.reloc,


      {D31A0762-0CEB-444e-ACFF-B049A1F6FE91}
        [A ] 39. d:\windows\system32\drivers\ialmkchw.sys
          Intel Corporation
          Intel Graphics Chipset (KCH) Driver for Windows 2000(R) & Windows XP(TM)
          .text,.rdata,.data,.edata,INIT,.rsrc,.reloc,




  + ϵͳµÇ½×ÔÔËÐÐ
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      WgaLogon
        [AM] 40. d:\windows\system32\wgalogon.dll
          Microsoft Corporation
          Windows Õý°æÔöÖµ¼Æ»®Í¨Öª
          .text,.data,.rsrc,.reloc,




  + IEä¯ÀÀÆ÷¼ÓÔØÄ£¿é
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [A ] 41. d:\windows\system32\kakatool.dll
          Beijing Rising Technology Co., Ltd.
          Rising AntiSpyware Toolbar
          .text,.rdata,.data,MonitorS,.rsrc,.reloc,




  + ×ÊÔ´¹ÜÀíÆ÷¼ÓÔØÄ£¿é
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [A ] 42. d:\program files\common files\microsoft shared\office11\msoxmlmf.dll
          Microsoft Corporation
          Microsoft Office XML MIME Filter
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      livecall
        [A ] 43. d:\program files\msn messenger\msgrapp.8.1.0178.00.dll
          Microsoft Corporation
          MSN Messenger Protocol Handler
          .text,.data,.rsrc,.reloc,


      ms-itss
        [A ] 44. d:\program files\common files\microsoft shared\information retrieval\msitss.dll
          Microsoft Corporation
          Microsoft? InfoTech Storage System Library
          .text,.data,.rsrc,.reloc,


      msnim
        [A ] 43. d:\program files\msn messenger\msgrapp.8.1.0178.00.dll
          Microsoft Corporation
          MSN Messenger Protocol Handler
          .text,.data,.rsrc,.reloc,


      mso-offdap
        [A ] 45. d:\program files\common files\microsoft shared\web components\10\owc10.dll
          Microsoft Corporation
          Microsoft Office XP Web Components
          .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc,


      mso-offdap11
        [A ] 46. d:\program files\common files\microsoft shared\web components\11\owc11.dll
          Microsoft Corporation
          Microsoft Office Web Components 2003
          .text,.data,.rtext,Shared,.cdata,.rsrc,.reloc,


      skype4com
        [A ] 47. d:\windows\system32\skype4com.dll
          Skype Technologies
          Skype for COM API
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {DDB066B3-8D19-11d2-8763-006052014B08}
        [AM] 48. d:\windows\system32\mp3infp.dll
          win32lab.com
          mp3infp DLL
          .text,.rdata,.data,.rsrc,.reloc,.aspack,.adata,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      RISING
        [AM] 49. d:\windows\system32\ravext.dll
          Beijing Rising Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 49. d:\windows\system32\ravext.dll
          Beijing Rising Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,




  + Óû§µÇ½×ÔÔËÐÐÏîÄ¿
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      IgfxTray
        [A ] 50. d:\windows\system32\igfxtray.exe
          Intel Corporation
          igfxTray Module
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 51. e:\program files\ÈðÐÇɱ¶¾\runiep.exe
          Beijing Rising Technology Co., Ltd.
          Rising AntiSpyware Monitor
          .text,.rdata,.data,.rsrc,


      RfwMain
        [AM] 52. e:\program files\rising\rising\rfw\rfwmain.exe
          Beijing Rising Technology Co., Ltd.
          Rising Personal FireWall Main Program
          .text,.rdata,.data,.rsrc,


      RavTask
        [AM] 53. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ravtask.exe
          Beijing Rising Technology Co., Ltd.
          RavTimer
          .text,.rdata,.data,.rsrc,




  + ¿ª»úÖ´ÐÐ
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 54. d:\windows\system32\bsmain.exe
          Beijing Rising Technology Co., Ltd.
          Rising Antivirus 2008
          .text,.rdata,.data,.rsrc,.reloc,




  + Ó³Ïñ½Ù³Ö
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 55. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 55. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 55. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 55. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.mp3
      Winamp.File\Enqueue\Command
        [A ] 56. d:\program files\winamp\winamp.exe
          Nullsoft
          Winamp
          .text,.rdata,.data,.rsrc,


      Winamp.File\ListBookmark\Command
        [A ] 56. d:\program files\winamp\winamp.exe
          Nullsoft
          Winamp
          .text,.rdata,.data,.rsrc,


      Winamp.File\open\Command
        [A ] 56. d:\program files\winamp\winamp.exe
          Nullsoft
          Winamp
          .text,.rdata,.data,.rsrc,


      Winamp.File\Play\Command
        [A ] 56. d:\program files\winamp\winamp.exe
          Nullsoft
          Winamp
          .text,.rdata,.data,.rsrc,




  + ³ÌÐò³õʼ»¯ºÍÒÑÖª¶¯Ì¬Á¬½Ó¿â
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      AppInit_DLLs
        [AM] 57. d:\windows\system32\ieprot.dll
          Beijing Rising Technology Co., Ltd.
          IE Protector
          .text,.rdata,.data,.rsrc,.reloc,




  + ´òÓ¡»ú¼à¿Ø
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      Microsoft Document Imaging Writer Monitor
        [AM] 58. d:\windows\system32\mdimon.dll
          Microsoft Corporation
          Microsoft? Document Imaging
          .text,.data,.rsrc,.reloc,





+ ÕýÔÚÔËÐеĽø³Ì
  + 000000d8(216) ctfmon.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,



  + 00000130(304) MDM.EXE
    00400000[0004D000]
      [AM] 1. d:\program files\common files\microsoft shared\vs7debug\mdm.exe
        Microsoft Corporation
        Machine Debug Manager
        .text,.data,.rsrc,


    10000000[0001E000]
      [AM] 57. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    51810000[00006000]
      [ M] 62. d:\program files\common files\microsoft shared\vs7debug\2052\mdmui.dll
        Microsoft Corporation
        MDM ×ÊÔ´
        .rsrc,.reloc,



  + 000001a4(420) smss.exe

  + 000001e4(484) csrss.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000001fc(508) winlogon.exe
    01300000[0003B000]
      [AM] 40. d:\windows\system32\wgalogon.dll
        Microsoft Corporation
        Windows Õý°æÔöÖµ¼Æ»®Í¨Öª
        .text,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 63. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000210(528) wuauclt.exe
    10000000[0001E000]
      [AM] 57. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    50E60000[0000C000]
      [ M] 64. d:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,


    509E0000[00042000]
      [ M] 65. d:\windows\system32\mucltui.dll
        Microsoft Corporation
        Microsoft Update Client UI Plugin
        .text,.data,.rsrc,.reloc,



  + 00000228(552) services.exe
    47260000[0000F000]
      [ M] 66. d:\windows\apppatch\acadproc.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000234(564) lsass.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000002a8(680) svchost.exe

  + 000002c8(712) svchost.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000002f4(756) svchost.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000338(824) CCenter.exe
    00400000[00029000]
      [AM] 5. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ccenter.exe
        Beijing Rising Technology Co., Ltd.
        CCenter
        .text,.rdata,.data,.rsrc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000348(840) svchost.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    50E60000[0000C000]
      [ M] 64. d:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,



  + 00000374(884) svchost.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000388(904) runiep.exe
    00400000[00020000]
      [AM] 51. e:\program files\ÈðÐÇɱ¶¾\runiep.exe
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware Monitor
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 67. e:\program files\ÈðÐÇɱ¶¾\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 68. e:\program files\ÈðÐÇɱ¶¾\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 69. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    00ED0000[0001E000]
      [AM] 57. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001C000]
      [AM] 49. d:\windows\system32\ravext.dll
        Beijing Rising Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 000003cc(972) svchost.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000041c(1052) RavTask.exe
    00400000[00034000]
      [AM] 53. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ravtask.exe
        Beijing Rising Technology Co., Ltd.
        RavTimer
        .text,.rdata,.data,.rsrc,


    10000000[0001F000]
      [ M] 70. e:\program files\ÈðÐÇɱ¶¾\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00A30000[00024000]
      [ M] 71. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 72. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C90000[0000E000]
      [ M] 73. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    08CB0000[00030000]
      [ M] 74. e:\program files\ÈðÐÇɱ¶¾\rising\rav\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,



  + 00000468(1128) ravmond.exe
    00400000[00069000]
      [AM] 6. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ravmond.exe
        Beijing Rising Technology Co., Ltd.
        Rising Realtime Moniter
        .text,.rdata,.data,.rsrc,


    10000000[00042000]
      [ M] 75. e:\program files\ÈðÐÇɱ¶¾\rising\rav\bwlist.dll
        Beijing Rising Technology Co., Ltd.
        BWList DLL
        .text,.rdata,.data,.rsrc,.reloc,


    7C140000[00103000]
      [ M] 76. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 77. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 78. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 69. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00AE0000[0000E000]
      [ M] 73. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00B00000[00030000]
      [ M] 74. e:\program files\ÈðÐÇɱ¶¾\rising\rav\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    00DA0000[00066000]
      [ M] 79. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rslog.dll
        Beijing Rising Technology Co., Ltd.
        RsLog DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00B40000[0001F000]
      [ M] 70. e:\program files\ÈðÐÇɱ¶¾\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00E10000[00024000]
      [ M] 71. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00E90000[00075000]
      [ M] 80. e:\program files\ÈðÐÇɱ¶¾\rising\rav\monrule.dll
        Beijing Rising Technology Co., Ltd.
        MonRule 
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    00F30000[00013000]
      [ M] 81. e:\program files\ÈðÐÇɱ¶¾\rising\rav\hooksys.dll
        Beijing Rising Technology Co., Ltd
        Hooksys Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F90000[00013000]
      [ M] 82. e:\program files\ÈðÐÇɱ¶¾\rising\rav\hookreg.dll
        Beijing Rising Technology Co., Ltd
        HookReg Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00FF0000[00013000]
      [ M] 83. e:\program files\ÈðÐÇɱ¶¾\rising\rav\hookntos.dll
        Beijing Rising Technology Co., Ltd
        SysMon Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01170000[0001C000]
      [ M] 84. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rswalmon.dll
        Beijing Rising Technology Co., Ltd.
        Rising WAL Monitor DLL
        .text,.rdata,.data,.rsrc,.reloc,


    01FA0000[0002B000]
      [ M] 85. e:\program files\ÈðÐÇɱ¶¾\rising\rav\recomp.dll
        Beijing Rising Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01FE0000[00031000]
      [ M] 86. e:\program files\ÈðÐÇɱ¶¾\rising\rav\refs.dll
        Beijing Rising Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02030000[00039000]
      [ M] 87. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ffr.dll
        Beijing Rising Technology Co., Ltd.
        ffr Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02280000[00020000]
      [ M] 88. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rsstore.dll
        Beijing Rising Technology Co., Ltd.
        RSStore
        .text,.rdata,.data,.rsrc,.reloc,


    024B0000[00013000]
      [ M] 89. e:\program files\ÈðÐÇɱ¶¾\rising\rav\hookcont.dll
        Beijing Rising Technology Co., Ltd
        HookCont Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    024E0000[00027000]
      [ M] 90. e:\program files\ÈðÐÇɱ¶¾\rising\rav\fakescan.dll
        Beijing Rising Technology Co., Ltd.
        FakeScan Module
        .text,.rdata,.data,.rsrc,.reloc,


    02520000[00022000]
      [ M] 91. e:\program files\ÈðÐÇɱ¶¾\rising\rav\scanner.dll
        Beijing Rising Technology Co., Ltd.
        RsScanner Module
        .text,.rdata,.data,.rsrc,.reloc,


    02650000[0002F000]
      [ M] 92. e:\program files\ÈðÐÇɱ¶¾\rising\rav\viruslib.dll
        Beijing Rising Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02790000[00027000]
      [ M] 93. e:\program files\ÈðÐÇɱ¶¾\rising\rav\relibldr.dll
        Beijing Rising Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    02F80000[0000D000]
      [ M] 94. e:\program files\ÈðÐÇɱ¶¾\rising\rav\hookweb.dll
        Beijing Rising Technology Co., Ltd.
        Rising HookWeb Dll
        .text,.rdata,.data,.rsrc,.reloc,


    03CE0000[000DC000]
      [ M] 95. e:\program files\ÈðÐÇɱ¶¾\rising\rav\extfile.dll
        Beijing Rising Technology Co., Ltd.
        extFile Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03DD0000[00027000]
      [ M] 96. e:\program files\ÈðÐÇɱ¶¾\rising\rav\pearc.dll
        Beijing Rising Technology Co., Ltd.
        pearchive Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03E10000[00021000]
      [ M] 97. e:\program files\ÈðÐÇɱ¶¾\rising\rav\nvfile.dll
        Beijing Rising Technology Co., Ltd.
        NVFile
        .text,.rdata,.data,.rsrc,.reloc,


    13AB0000[0004A000]
      [ M] 98. e:\program files\ÈðÐÇɱ¶¾\rising\rav\scanexec.dll
        Beijing Rising Technology Co., Ltd.
        ScanExec
        .text,.rdata,.data,.rsrc,.reloc,


    050C0000[002DC000]
      [ M] 99. e:\program files\ÈðÐÇɱ¶¾\rising\rav\unexe.dll
        Beijing Rising Technology Co., Ltd.
        UnExe
        .text,.rdata,.data,.rsrc,.reloc,


    053B0000[000AF000]
      [ M] 100. e:\program files\ÈðÐÇɱ¶¾\rising\rav\scanex.dll
        Beijing Rising Technology Co., Ltd.
        ScanEx
        .text,.rdata,.data,.rsrc,.reloc,


    058F0000[00036000]
      [ M] 101. e:\program files\ÈðÐÇɱ¶¾\rising\rav\scanpack.dll
        Beijing Rising Technology Co., Ltd.
        Unpack Engine
        .text,.rdata,.data,.rsrc,.reloc,


    05940000[000B4000]
      [ M] 102. e:\program files\ÈðÐÇɱ¶¾\rising\rav\revm.dll
        Beijing Rising Technology Co., Ltd.
        REVM Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    05B30000[0001F000]
      [ M] 103. e:\program files\ÈðÐÇɱ¶¾\rising\rav\urutils.dll
        urutils Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    05FA0000[00018000]
      [ M] 104. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ur000.dat
        Beijing Rising Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    044E0000[00036000]
      [ M] 105. e:\program files\ÈðÐÇɱ¶¾\rising\rav\scriptci.dll
        Beijing Rising Technology Co., Ltd.
        scriptci Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    04530000[000F3000]
      [ M] 106. e:\program files\ÈðÐÇɱ¶¾\rising\rav\uroutine.dll
        Beijing Rising Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    03020000[00022000]
      [ M] 107. e:\program files\ÈðÐÇɱ¶¾\rising\rav\scansct.dll
        Beijing Rising Technology Co., Ltd.
        ScanSct Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000478(1144) rfwsrv.exe
    00400000[00036000]
      [AM] 4. e:\program files\rising\rising\rfw\rfwsrv.exe
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Service
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 76. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 77. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 78. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 69. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    10000000[0001F000]
      [ M] 108. e:\program files\rising\rising\rfw\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00730000[00024000]
      [ M] 109. e:\program files\rising\rising\rfw\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00970000[0000E000]
      [ M] 110. e:\program files\rising\rising\rfw\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00990000[00030000]
      [ M] 111. e:\program files\rising\rising\rfw\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    00AA0000[0000F000]
      [ M] 112. e:\program files\rising\rising\rfw\rfwrule.dll
        Beijing Rising Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00AF0000[0000C000]
      [ M] 113. e:\program files\rising\rising\rfw\rfwlog.dll
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Logfile DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00B00000[00018000]
      [ M] 114. e:\program files\rising\rising\rfw\rfwdrv.dll
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Driver DLL
        .text,.rdata,.data,.rsrc,.reloc,


    731B0000[0000A000]
      [ M] 115. e:\program files\rising\rising\rfw\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.rdata,.data,.rsrc,.reloc,


    00C20000[0000E000]
      [ M] 116. e:\program files\rising\rising\rfw\ijt_ctrl.dll
        Beijing Rising Technology Co., Ltd.
        Injector Controller
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    00C50000[00016000]
      [ M] 117. e:\program files\rising\rising\rfw\unvdet.dll
        Beijing Rising Technology Co., Ltd.
        ScanUnv
        .text,.rdata,.data,.rsrc,.reloc,


    00CA0000[00013000]
      [ M] 118. e:\program files\rising\rising\rfw\mports.dll
        Beijing Rising Technology Co., Ltd.
        get ports list
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000488(1160) Ravmon.exe
    00400000[00067000]
      [ M] 119. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ravmon.exe
        Beijing Rising Technology Co., Ltd.
        Rising realtime monitor shell
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 76. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 77. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 78. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 69. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    10000000[0001F000]
      [ M] 70. e:\program files\ÈðÐÇɱ¶¾\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B20000[00024000]
      [ M] 71. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 72. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00D70000[0002B000]
      [ M] 85. e:\program files\ÈðÐÇɱ¶¾\rising\rav\recomp.dll
        Beijing Rising Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00EB0000[00031000]
      [ M] 86. e:\program files\ÈðÐÇɱ¶¾\rising\rav\refs.dll
        Beijing Rising Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F00000[0002F000]
      [ M] 92. e:\program files\ÈðÐÇɱ¶¾\rising\rav\viruslib.dll
        Beijing Rising Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01040000[00027000]
      [ M] 93. e:\program files\ÈðÐÇɱ¶¾\rising\rav\relibldr.dll
        Beijing Rising Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    010C0000[0000E000]
      [ M] 73. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    010E0000[00030000]
      [ M] 74. e:\program files\ÈðÐÇɱ¶¾\rising\rav\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    01240000[00075000]
      [ M] 80. e:\program files\ÈðÐÇɱ¶¾\rising\rav\monrule.dll
        Beijing Rising Technology Co., Ltd.
        MonRule 
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 120. e:\program files\ÈðÐÇɱ¶¾\rising\rav\pngdll.dll
        Beijing Rising Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    26600000[000B8000]
      [ M] 121. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rsguilib.dll
        Beijing Rising Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00018000]
      [ M] 122. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rsxml.dll
        Beijing Rising Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,



  + 000004b0(1200) wdfmgr.exe
    01000000[0000C000]
      [AM] 7. d:\windows\system32\wdfmgr.exe
        Microsoft Corporation
        Windows User Mode Driver Manager
        .text,.data,.rsrc,


    10000000[0001E000]
      [AM] 57. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 000004cc(1228) rfwproxy.exe
    00400000[00236000]
      [AM] 3. e:\program files\rising\rising\rfw\rfwproxy.exe
        Beijing Rising Technology Co., Ltd.
        Rising Personal Proxy Service
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 76. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 77. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 69. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    731B0000[0000A000]
      [ M] 115. e:\program files\rising\rising\rfw\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001F000]
      [ M] 108. e:\program files\rising\rising\rfw\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B20000[00024000]
      [ M] 109. e:\program files\rising\rising\rfw\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00C50000[0000F000]
      [ M] 112. e:\program files\rising\rising\rfw\rfwrule.dll
        Beijing Rising Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    01180000[00016000]
      [ M] 123. e:\program files\rising\rising\rfw\monmid.dll
        Beijing Rising Technology Co., Ltd.
        URL filter dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000574(1396) rfwstub.exe
    00400000[00017000]
      [ M] 124. e:\program files\rising\rising\rfw\rfwstub.exe
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Service Rfwstub 
        .text,.rdata,.data,.rsrc,


    7C3A0000[0007B000]
      [ M] 78. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 77. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 125. e:\program files\rising\rising\rfw\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000063c(1596) RavStub.exe
    00400000[00021000]
      [ M] 126. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ravstub.exe
        Beijing Rising Technology Co., Ltd.
        Rising RavStub
        .text,.rdata,.data,.rsrc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001F000]
      [ M] 70. e:\program files\ÈðÐÇɱ¶¾\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00660000[00024000]
      [ M] 71. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 72. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 000006ac(1708) Explorer.EXE
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 63. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    10000000[00096000]
      [AM] 48. d:\windows\system32\mp3infp.dll
        win32lab.com
        mp3infp DLL
        .text,.rdata,.data,.rsrc,.reloc,.aspack,.adata,


    01FC0000[00037000]
      [ M] 127. d:\windows\system32\igfxpph.dll
        Intel Corporation
        igfxpph Module
        .text,.rdata,.data,.rsrc,.reloc,


    01CC0000[0001E000]
      [ M] 128. d:\windows\system32\hccutils.dll
        Intel Corporation
        hccutils Module
        .text,.rdata,.data,.rsrc,.reloc,


    02010000[00027000]
      [ M] 129. d:\windows\system32\igfxres.dll
        Intel Corporation
        xxxxres Module
        .text,.rdata,.data,.rsrc,.reloc,


    01BD0000[0002B000]
      [ M] 130. d:\program files\winrar\rarext.dll
        .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


    01E70000[0001C000]
      [AM] 49. d:\windows\system32\ravext.dll
        Beijing Rising Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 72. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 000006cc(1740) RfwMain.exe
    00400000[00091000]
      [AM] 52. e:\program files\rising\rising\rfw\rfwmain.exe
        Beijing Rising Technology Co., Ltd.
        Rising Personal FireWall Main Program
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 76. d:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 77. d:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 78. d:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[000B8000]
      [ M] 131. e:\program files\rising\rising\rfw\rsguilib.dll
        Beijing Rising Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 69. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    10000000[0001F000]
      [ M] 108. e:\program files\rising\rising\rfw\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B10000[00024000]
      [ M] 109. e:\program files\rising\rising\rfw\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00C50000[0000E000]
      [ M] 110. e:\program files\rising\rising\rfw\rsappmgr.dll
        Beijing Rising Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00C70000[00030000]
      [ M] 111. e:\program files\rising\rising\rfw\cfgdll.dll
        Beijing Rising Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 125. e:\program files\rising\rising\rfw\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00EC0000[00014000]
      [ M] 132. e:\program files\rising\rising\rfw\rfwctrl.dll
        Beijing Rising Technology Co., Ltd.
        RfwCtrl DLL
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00018000]
      [ M] 133. e:\program files\rising\rising\rfw\rsxml.dll
        Beijing Rising Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 134. e:\program files\rising\rising\rfw\pngdll.dll
        Beijing Rising Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    013F0000[0000F000]
      [ M] 112. e:\program files\rising\rising\rfw\rfwrule.dll
        Beijing Rising Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 63. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,



  + 00000730(1840) spoolsv.exe
    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    00B00000[00008000]
      [AM] 58. d:\windows\system32\mdimon.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    00B10000[00008000]
      [ M] 135. d:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    00C30000[00005000]
      [ M] 136. d:\windows\system32\spool\prtprocs\w32x86\vprproc.dll
        Windows (R) 2000 DDK provider
        Windows DDK Print DLL
        .text,.data,.rsrc,.reloc,



  + 00000850(2128) alg.exe
    10000000[0001E000]
      [AM] 57. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000958(2392) Ras.exe
    00400000[001FF000]
      [ M] 137. e:\program files\ÈðÐÇɱ¶¾\ras.exe
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 67. e:\program files\ÈðÐÇɱ¶¾\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 68. e:\program files\ÈðÐÇɱ¶¾\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 138. e:\program files\ÈðÐÇɱ¶¾\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00013000]
      [ M] 139. e:\program files\ÈðÐÇɱ¶¾\topsoft.dll
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware TopSoft
        .text,.rdata,.data,.rsrc,.reloc,


    00370000[00032000]
      [ M] 140. e:\program files\ÈðÐÇɱ¶¾\ncomm.dll
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    5D360000[0000A000]
      [ M] 69. d:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00D10000[0001F000]
      [ M] 70. e:\program files\ÈðÐÇɱ¶¾\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00EE0000[00024000]
      [ M] 71. e:\program files\ÈðÐÇɱ¶¾\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    01020000[0014D000]
      [ M] 141. e:\program files\ÈðÐÇɱ¶¾\rasgui.dll
        Beijing Rising Technology Co., Ltd.
        RasGUI
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 142. e:\program files\ÈðÐÇɱ¶¾\rsxml.dll
        Beijing Rising Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    02C40000[00018000]
      [ M] 143. e:\program files\ÈðÐÇɱ¶¾\ktrojan.dll
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    02C70000[0002F000]
      [ M] 144. e:\program files\ÈðÐÇɱ¶¾\engine.dll
        Beijing Rising Technology Co., Ltd.
        kaka engine
        .text,.rdata,.data,.rsrc,.reloc,


    02CB0000[00040000]
      [ M] 145. e:\program files\ÈðÐÇɱ¶¾\rsdialog.dll
        Beijing Rising Technology Co., Ltd.
        Rsdiaglo DLL
        .text,.rdata,.data,.rsrc,.reloc,


    02D00000[00024000]
      [ M] 146. e:\program files\ÈðÐÇɱ¶¾\scanunv.dll
        Beijing Rising Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    02D40000[0001F000]
      [ M] 147. e:\program files\ÈðÐÇɱ¶¾\secscan.dll
        Copyright(c) 1998-2006 Beijing  Rising  Technology  Corporation  Limited
        SecScan Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02E20000[00015000]
      [ M] 148. e:\program files\ÈðÐÇɱ¶¾\secex.dll
        Copyright(c) 1998-2006 Beijing  Rising  Technology  Corporation  Limited
        SecScanE Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03500000[00012000]
      [ M] 149. e:\program files\ÈðÐÇɱ¶¾\zip.dll
        rising
        zip
        UPX0,UPX1,.rsrc,


    02B80000[00028000]
      [ M] 150. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ravscrch.dll
        Beijing Rising Technology Co., Ltd.
        RavScrCh Module
        .text,.rdata,.data,.rsrc,.reloc,


    30000000[003AE000]
      [ M] 151. d:\windows\system32\macromed\flash\flash9e.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 9.0  r115
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 63. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    03380000[0001C000]
      [AM] 49. d:\windows\system32\ravext.dll
        Beijing Rising Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 000009d8(2520) iexplore.exe
    10000000[0001E000]
      [AM] 57. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,


    325C0000[00012000]
      [ M] 152. d:\program files\microsoft office\office11\msohev.dll
        Microsoft Corporation
        Microsoft Office 2003 component
        .text,.data,.rsrc,.reloc,


    01DC0000[00028000]
      [ M] 150. e:\program files\ÈðÐÇɱ¶¾\rising\rav\ravscrch.dll
        Beijing Rising Technology Co., Ltd.
        RavScrCh Module
        .text,.rdata,.data,.rsrc,.reloc,


    30000000[003AE000]
      [ M] 151. d:\windows\system32\macromed\flash\flash9e.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 9.0  r115
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 63. d:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000d78(3448) taskmgr.exe
    10000000[0001E000]
      [AM] 57. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    73100000[00032000]
      [ M] 61. d:\windows\system32\winwb86.ime
        Microsoft Corporation
        ÍõÂëÎå±ÊÐÍÊäÈë·¨ 86 °æ
        .text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,



  + 00000e70(3696) wuauclt.exe
    10000000[0001E000]
      [AM] 57. d:\windows\system32\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00014000]
      [ M] 59. e:\program files\rising\rising\rfw\ijt_base.dll
        Beijing Rising Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[0000F000]
      [ M] 60. e:\program files\rising\rising\rfw\olemon.dll
        Beijing Rising Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    50E60000[0000C000]
      [ M] 64. d:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,