瑞星卡卡电脑诊断日志 v1.30 (2008-5-20 21:50:15) 北京瑞星科技股份有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services 3wareSrv [A ] 1. c:\windows\system32\3waresrv.exe .text,.rdata,.data,.rsrc, gusvc [A ] 2. c:\program files\google\common\google updater\googleupdaterservice.exe Google gusvc .text,.rdata,.data,.rsrc, IDriverT [A ] 3. c:\program files\common files\installshield\driver\1150\intel 32\idrivert.exe Macrovision Corporation IDriverT Module .text,.rdata,.data,.rsrc, NVSvc [AM] 4. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 169.28 .text,.rdata,.data,.rsrc, ose [A ] 5. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, UMWdf [AM] 6. c:\windows\system32\wdfmgr.exe Microsoft Corporation Windows User Mode Driver Manager .text,.data,.rsrc, + 内核驱动 + HKLM\System\CurrentControlSet\Services 6460t [A ] 7. c:\windows\system32\drivers\6460t.sys .text,.data,INIT,.reloc, aaatimeo [A ] 8. c:\windows\system32\drivers\aaatimeo.sys Microsoft Corporation SRB Timout Control Driver .text,.rdata,.data,INIT,.rsrc,.reloc, AFAMgt [A ] 9. c:\windows\system32\drivers\afamgt.sys Adaptec, Inc. Dell Management Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ahcix86 [A ] 10. c:\windows\system32\drivers\ahcix86.sys ATI Technologies Inc. ATI Technology AHCI Compatible Controller Driver for Windows family .text,.rdata,.data,INIT,.rsrc,.reloc, amdbusdr [A ] 11. c:\windows\system32\drivers\amdbusdr.sys AMD AMD IDE Bus Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, amdeide [A ] 12. c:\windows\system32\drivers\amdeide.sys AMD AMD IDE Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, AmdK8 [A ] 13. c:\windows\system32\drivers\amdk8.sys Advanced Micro Devices AMD Processor Driver .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc, AmdLLD [A ] 14. c:\windows\system32\drivers\amdlld.sys AMD, Inc. AMD Low Level Device Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ASH1205 [A ] 15. c:\windows\system32\drivers\ash1205.sys Silicon Image, Inc. Serial ATA miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, ata1200a [A ] 16. c:\windows\system32\drivers\ata1200a.sys Adaptec, Inc. ATA1200A Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, atiide [A ] 17. c:\windows\system32\drivers\atiide.sys ATI Technologies Inc. ATI PCI BUS MASTER IDE Controller Driver .text,.rdata,.data,INIT,.rsrc,.reloc, bb-run [A ] 18. c:\windows\system32\drivers\bb-run.sys Promise Technology, Inc. Promise Disk Accelerator .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, CapFilt [A ] 19. c:\windows\system32\drivers\capfilt.sys ensurebit CapFilt .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, cercsr6 [A ] 20. c:\windows\system32\drivers\cercsr6.sys Adaptec, Inc. DELL CERC SATA1.5/6ch Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, Cpq32fs2 [A ] 21. c:\windows\system32\drivers\cpq32fs2.sys Hewlett-Packard Company Hewlett-Packard 32-Bit SCSI-2 Controllers SCSI Miniport Driver - pnp .text,.rdata,.data,INIT,.rsrc,.reloc, d347bus [A ] 22. c:\windows\system32\drivers\d347bus.sys d347prt [A ] 23. c:\windows\system32\drivers\d347prt.sys dontgo [A ] 24. c:\windows\system32\drivers\dontgo.sys Promise Technology, Inc. Promise Removable Disk Control .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, ENTECH [A ] 25. c:\windows\system32\drivers\entech.sys EnTech Taiwan PowerStrip support NT kernel-mode driver .text,.data,.CRT,PAGE,INIT,.rsrc,.reloc, fttxr52P [A ] 26. c:\windows\system32\drivers\fttxr52p.sys Promise Technology, Inc. Promise FastTRAK TX4200/TX4300 Driver for Windows family .text,.rdata,.data,INIT,.rsrc,.reloc, HDAudBus [A ] 27. c:\windows\system32\drivers\hdaudbus.sys Windows (R) Server 2003 DDK provider High Definition Audio Bus Driver v1.0a .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, HpCISSm2 [A ] 28. c:\windows\system32\drivers\hpcissm2.sys Hewlett-Packard Company Smart Array SAS/SATA Controller Scsiport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, hptmv6 [A ] 29. c:\windows\system32\drivers\hptmv6.sys HighPoint Technologies, Inc. hptmv6 Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, iaStor55 [A ] 30. c:\windows\system32\drivers\iastor55.sys Intel Corporation Intel Matrix Storage Manager driver .text,.rdata,.data,INIT,.rsrc,.reloc, iaStor70 [A ] 31. c:\windows\system32\drivers\iastor70.sys Intel Corporation Intel Matrix Storage Manager driver - ia32 .text,.rdata,.data,INIT,.rsrc,.reloc, IntcAzAudAddService [A ] 32. c:\windows\system32\drivers\rtkhdaud.sys Realtek Semiconductor Corp. Realtek(r) High Definition Audio Function Driver .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, mv61xx [A ] 33. c:\windows\system32\drivers\mv61xx.sys Marvell Semiconductor, Inc. Marvell Thor and Odin Windows Driver .text,.rdata,.data,INIT,.rsrc,.reloc, mvSata [A ] 34. c:\windows\system32\drivers\mvsata.sys Marvell Semiconductors Inc. MV88SX50XX/MV88SX60X1 WINDOWS 2000/XP/2003 driver .text,.rdata,.data,INIT,.rsrc,.reloc, NVENETFD [A ] 35. c:\windows\system32\drivers\nvenetfd.sys NVIDIA Corporation NVIDIA Networking Function Driver. .text,.rdata,.data,INIT,.rsrc,.reloc, nvgts [A ] 36. c:\windows\system32\drivers\nvgts.sys NVIDIA Corporation NVIDIA? nForce(TM) Sata Performance Driver .text,.rdata,.data,INIT,.rsrc,.reloc, nvnetbus [A ] 37. c:\windows\system32\drivers\nvnetbus.sys NVIDIA Corporation NVIDIA Networking Bus Driver. .text,.rdata,.data,INIT,.rsrc,.reloc, nvrd32 [A ] 38. c:\windows\system32\drivers\nvrd32.sys NVIDIA Corporation NVIDIA? nForce(TM) RAID Driver .text,.rdata,.data,PAGE,INIT,DUMPDATA,.rsrc,.reloc, PAC207 [A ] 39. c:\windows\system32\drivers\pfc027.sys PixArt Imaging Inc. PFC027 .text,.rdata,.data,.edata,PAGECONS,INIT,.rsrc,.reloc, ql2100 [A ] 40. c:\windows\system32\drivers\ql2100.sys QLogic Corporation Miniport Driver for QLA2100 Adapter .text,.rdata,.data,INIT,.rsrc,.reloc, ql2200 [A ] 41. c:\windows\system32\drivers\ql2200.sys QLogic Corporation Miniport Driver for QLA2200 Adapter .text,.rdata,.data,INIT,.rsrc,.reloc, rr172x [A ] 42. c:\windows\system32\drivers\rr172x.sys HighPoint Technologies, Inc. rr172x Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, rr174x [A ] 43. c:\windows\system32\drivers\rr174x.sys HighPoint Technologies, Inc. rr174x Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, rr2340 [A ] 44. c:\windows\system32\drivers\rr2340.sys HighPoint Technologies, Inc. RR2340 Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, RsAntiSpyware [A ] 45. c:\windows\system32\drivers\rsboot.sys Beijing Rising Technology Co., Ltd. Anti-RootKit Driver .text,.rdata,.data,INIT,.rsrc,.reloc, rvcxf [A ] 46. c:\windows\system32\drivers\rvcxf.sys .text,.data,INIT,.reloc, Secdrv [A ] 47. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SiRemFil [A ] 48. c:\windows\system32\drivers\siremfil.sys Silicon Image, Inc. Filter driver for Silicon Image SATALink controllers. .text,.rdata,PAGE,INIT,.rsrc,.reloc, sisraidx [A ] 49. c:\windows\system32\drivers\sisraidx.sys Silicon Integrated Systems Corp. SiS RAID Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ViBus [A ] 50. c:\windows\system32\drivers\vibus.sys VIA Technologies, Inc. VIA SATA IDE Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, videX32 [A ] 51. c:\windows\system32\drivers\videx32.sys VIA Technologies, Inc. VIA Generic PCI IDE Bus Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ViPrt [A ] 52. c:\windows\system32\drivers\viprt.sys VIA Technologies, Inc. VIA SATA IDE Driver .text,.rdata,.data,INIT,.rsrc,.reloc, xfilt [A ] 53. c:\windows\system32\drivers\xfilt.sys VIA Technologies,Inc ATA/ATAPI devices hot-plug monitor .text,.rdata,.data,INIT,.rsrc,.reloc, + 系统登陆自运行 + HKCU\Control Panel\Desktop Scrnsave.exe [A ] 54. c:\windows\system32\肥皂泡泡.scr Microsoft Corporation Bubbles Screen Saver .text,.data,.rsrc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {2318C2B1-4965-11d4-9B18-009027A5CD4F} [A ] 55. c:\program files\google\googletoolbar2.dll Google Inc. Google IE 客户端工具栏 .text,.rdata,.data,shared,.rsrc,.reloc, {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} [A ] 56. c:\windows\system32\kakatool.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware Toolbar .text,.rdata,.data,MonitorS,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {01443AEC-0FD1-40fd-9C87-E93D1494C233} [AM] 57. d:\软件\迅雷\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [A ] 58. c:\program files\common files\adobe\acrobat\activex\acroiehelper.dll Adobe Systems Incorporated Adobe PDF Helper for Internet Explorer .text,.rdata,.data,.rsrc,.reloc, {192C0424-8358-4EB4-B62D-F91821BC0745} [AM] 59. c:\windows\system32\ppuxtecelf.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,.aspack,.adata, {889D2FEB-5411-4565-8998-1DD2C5261283} [AM] 60. d:\软件\迅雷\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, {8DEBD4F0-5701-4ED9-94F1-3E79B7D9EBD9} [AM] 61. c:\windows\system32\xshtfamkgxuaw.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,.aspack,.adata, {AA58ED58-01DD-4d91-8333-CF10577473F7} [A ] 55. c:\program files\google\googletoolbar2.dll Google Inc. Google IE 客户端工具栏 .text,.rdata,.data,shared,.rsrc,.reloc, {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} [AM] 62. c:\program files\google\googletoolbarnotifier\2.0.301.7164\swg.dll Google Inc. GoogleToolbarNotifier .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 63. d:\软件\迅雷\thunder.exe Thunder Networking Technologies,LTD .text,.rdata,.data,.rsrc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [A ] 64. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers {F9DB5320-233E-11D1-9F84-707F02C10627} [A ] 65. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll Adobe Systems, Inc. PDF Shell Extension .text,.orpc,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 66. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, WinRAR shell extension [A ] 67. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, Microsoft Office HTML Icon Handler [A ] 68. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 69. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, Portable Media Devices [A ] 70. c:\windows\system32\audiodev.dll Microsoft Corporation 便携媒体设备命令行解释器扩展 .text,.data,.rsrc,.reloc, Portable Media Devices Menu [A ] 70. c:\windows\system32\audiodev.dll Microsoft Corporation 便携媒体设备命令行解释器扩展 .text,.data,.rsrc,.reloc, NvCpl DesktopContext Class [A ] 71. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc, Play on my TV helper [A ] 71. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc, Desktop Explorer [A ] 72. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, Desktop Explorer Menu [A ] 72. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, nView Desktop Context Menu [A ] 72. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A} [AM] 73. c:\windows\system32\shlhook.dll Beijing Rising Technology Co., Ltd. shlhook Module .text,.rdata,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKCU\Software\Microsoft\Windows\CurrentVersion\Run swg [AM] 74. c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe Google Inc. GoogleToolbarNotifier .text,.rdata,.data,.rsrc, + HKLM\Software\Microsoft\Windows\CurrentVersion\Run Adobe Reader Speed Launcher [A ] 75. c:\program files\adobe\reader 8.0\reader\reader_sl.exe Adobe Systems Incorporated Adobe Acrobat SpeedLauncher .text,.rdata,.data,.rsrc, Thunder [A ] 63. d:\软件\迅雷\thunder.exe Thunder Networking Technologies,LTD .text,.rdata,.data,.rsrc, runeip [AM] 76. c:\program files\rising\antispyware\runiep.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware Monitor .text,.rdata,.data,.rsrc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce KKDelay [A ] 77. c:\program files\rising\antispyware\runonce.exe Beijing Rising Technology Co., Ltd. RunOnce Application .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 78. c:\windows\system32\kknative.exe Beijing Rising Technology Co., Ltd. NativeAp .text,.data,.rsrc,.reloc, + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 79. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\Print\Command [A ] 79. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 79. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\Print\Command [A ] 79. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + 程序初始化和已知动态连接库 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 其他自启动项目 + C:\Documents and Settings\All Users\「开始」菜单\程序\启动 谷歌金山词霸合作版.lnk [A ] 81. d:\软件\金山词霸\powerword lite\xdict.exe Copyright (c) Kingsoft Corporation Limited. All rights reserved. Kingsoft PowerWord .text,.rdata,.data,.rsrc, + 正在运行的进程 + 000000b4(180) ctfmon.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000000c4(196) GoogleToolbarNotifier.exe 00400000[00013000] [AM] 74. c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe Google Inc. GoogleToolbarNotifier .text,.rdata,.data,.rsrc, 10000000[0002E000] [ M] 82. c:\program files\google\googletoolbarnotifier\2.0.301.7164\gtn.dll Google Inc. GoogleToolbarNotifier .text,.rdata,.data,.rsrc,.reloc, 003E0000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 00CD0000[0000E000] [ M] 83. c:\program files\google\googletoolbarnotifier\2.0.301.7164\res_zh-cn.dll Google Inc. GoogleToolbarNotifier .rdata,.rsrc,.reloc, 00CE0000[00054000] [AM] 62. c:\program files\google\googletoolbarnotifier\2.0.301.7164\swg.dll Google Inc. GoogleToolbarNotifier .text,.rdata,.data,.rsrc,.reloc, + 0000026c(620) smss.exe + 000002a4(676) csrss.exe + 000002bc(700) winlogon.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 84. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 000002ec(748) services.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000002f8(760) lsass.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000003a0(928) svchost.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000003e0(992) svchost.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000444(1092) svchost.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 50E60000[0000C000] [ M] 85. c:\windows\system32\wups2.dll Microsoft Corporation Windows Update client proxy stub 2 .text,.orpc,.data,.rsrc,.reloc, + 0000047c(1148) explorer.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 00F70000[0003E000] [ M] 86. c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll ppstream.com vodrc .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 84. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 01D90000[00011000] [AM] 73. c:\windows\system32\shlhook.dll Beijing Rising Technology Co., Ltd. shlhook Module .text,.rdata,.data,.rsrc,.reloc, 022E0000[0002C000] [AM] 57. d:\软件\迅雷\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, 02340000[0009F000] [AM] 59. c:\windows\system32\ppuxtecelf.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,.aspack,.adata, 01A20000[00031000] [AM] 60. d:\软件\迅雷\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 23B90000[0000E000] [ M] 87. d:\软件\迅雷\components\resworker\dsbho_00.dll Thunder Networking Technologies,LTD DsBho .text,.rdata,.data,.rsrc,.reloc, 23B40000[0001E000] [ M] 88. d:\软件\迅雷\components\resworker\dataprocessor_00.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, 025C0000[0009E000] [AM] 61. c:\windows\system32\xshtfamkgxuaw.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,.aspack,.adata, 03340000[0004C000] [ M] 89. c:\program files\common files\adobe\acrobat\activex\pdfshell.chs Adobe Systems, Inc. PDF Shell Extension .rsrc,.reloc, + 00000488(1160) alg.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000498(1176) svchost.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000004f0(1264) svchost.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 0000051c(1308) conime.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000570(1392) spoolsv.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000734(1844) Ras.exe 00400000[001FF000] [ M] 90. c:\program files\rising\antispyware\ras.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 91. c:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 92. c:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 93. c:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00013000] [ M] 94. c:\program files\rising\antispyware\topsoft.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware TopSoft .text,.rdata,.data,.rsrc,.reloc, 00370000[00032000] [ M] 95. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00BE0000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 5D360000[0000A000] [ M] 96. c:\windows\system32\mfc71chs.dll Microsoft Corporation MFC Language Specific Resources .rsrc,.reloc, 01030000[0014D000] [ M] 97. c:\program files\rising\antispyware\rasgui.dll Beijing Rising Technology Co., Ltd. RasGUI .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 98. c:\program files\rising\antispyware\rsxml.dll Beijing Rising Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 02F70000[00018000] [ M] 99. c:\program files\rising\antispyware\ktrojan.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 02FA0000[0002F000] [ M] 100. c:\program files\rising\antispyware\engine.dll Beijing Rising Technology Co., Ltd. kaka engine .text,.rdata,.data,.rsrc,.reloc, 02FE0000[00040000] [ M] 101. c:\program files\rising\antispyware\rsdialog.dll Beijing Rising Technology Co., Ltd. Rsdiaglo DLL .text,.rdata,.data,.rsrc,.reloc, 03030000[00024000] [ M] 102. c:\program files\rising\antispyware\scanunv.dll Beijing Rising Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 03070000[0001F000] [ M] 103. c:\program files\rising\antispyware\secscan.dll Copyright(c) 1998-2006 Beijing Rising Technology Corporation Limited SecScan Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03150000[00015000] [ M] 104. c:\program files\rising\antispyware\secex.dll Copyright(c) 1998-2006 Beijing Rising Technology Corporation Limited SecScanE Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03730000[00012000] [ M] 105. c:\program files\rising\antispyware\zip.dll rising zip UPX0,UPX1,.rsrc, 72C80000[00008000] [ M] 84. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 04A50000[001A3000] [ M] 106. c:\windows\system32\macromed\flash\flash.ocx Macromedia, Inc. Macromedia Flash Player 7.0 r14 .text,.rdata,.data,.data1,.CRT,.rsrc,.reloc, + 00000798(1944) nvsvc32.exe 00400000[0002B000] [AM] 4. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 169.28 .text,.rdata,.data,.rsrc, 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 01360000[00060000] [ M] 107. c:\windows\system32\nvapi.dll NVIDIA Corporation NVIDIA NVAPI Library, Version 169.28 .text,.rdata,.data,.idata,.rsrc,.reloc, + 000007b8(1976) svchost.exe 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 000007cc(1996) wdfmgr.exe 01000000[0000C000] [AM] 6. c:\windows\system32\wdfmgr.exe Microsoft Corporation Windows User Mode Driver Manager .text,.data,.rsrc, 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, + 00000a78(2680) runiep.exe 00400000[00020000] [AM] 76. c:\program files\rising\antispyware\runiep.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware Monitor .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 91. c:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 92. c:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 5D360000[0000A000] [ M] 96. c:\windows\system32\mfc71chs.dll Microsoft Corporation MFC Language Specific Resources .rsrc,.reloc, + 00000cc8(3272) WINWORD.EXE 30000000[00BED000] [ M] 108. c:\program files\microsoft office\office11\winword.exe Microsoft Corporation Microsoft Office Word .text,.data,.tls,.cdata,.rsrc, 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 30C90000[00BBC000] [ M] 109. c:\program files\common files\microsoft shared\office11\mso.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc,.reloc, 39700000[0010C000] [ M] 110. c:\program files\common files\microsoft shared\office11\riched20.dll Microsoft Corporation Rich Text Edit Control, v5.0 .text,.rdata,.data,.rsrc,.reloc, 11000000[0003A000] [ M] 111. c:\program files\microsoft office\office11\addins\syminput.dll Microsoft Corporation Office Symbol Input Add-In .text,.data,.rsrc,.reloc, 73390000[00154000] [ M] 112. c:\windows\system32\msvbvm60.dll Microsoft Corporation Visual Basic Virtual Machine .text,ENGINE,.data,.rsrc,.reloc, 01EB0000[0002A000] [ M] 113. d:\软件\金山词霸\powerword lite\addins\cbofficeplugin.dll Kingsoft Co, Ltd. Kingsoft PowerWord .text,.rdata,.data,.rsrc,.reloc, 507C0000[00084000] [ M] 114. c:\program files\common files\microsoft shared\proof\mslid.dll Microsoft Corporation Microsoft Language Identification DLL .text,.data,.rsrc,.reloc, 02F50000[00033000] [ M] 115. c:\program files\common files\microsoft shared\proof\2052\msgr3sc.dll Microsoft Corporation Microsoft (R) Simplified Chinese Grammar Checker .text,.rdata,.data,.rsrc,.reloc, 03E50000[001A1000] [ M] 116. c:\program files\microsoft office\office11\gdiplus.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,Shared,.cdata,.rsrc,.reloc, 04340000[00162000] [ M] 117. c:\windows\system32\sogoupy.ime Sohu.com Inc. 搜狗拼音输入法 .text,.rdata,.data,.SogouIn,.rsrc,.reloc, 05730000[00042000] [ M] 118. c:\program files\sogouinput\plugin\sgimeword.dll test1 Module .text,.rdata,.data,.rsrc,.reloc, 36C30000[0000C000] [ M] 119. c:\program files\microsoft office\office11\msostyle.dll Microsoft Corporation Microsoft Office IME Shared property library. .text,.rdata,.data,.CRT,.cdata,.rsrc,.reloc, + 00000e08(3592) QQ.exe 00400000[001D9000] [ M] 120. d:\program files\qq\qq.exe TENCENT QQ .text,.rdata,.data,.rsrc, 10000000[002F6000] [ M] 121. d:\program files\qq\qqbaseclassindll.dll TENCENT QQBaseClassInDll DLL .text,.rdata,.data,.rsrc,.reloc, 61820000[000E1000] [ M] 122. d:\program files\qq\qqhelperdll.dll TENCENT QQHelperDll DLL .text,.rdata,.data,.rsrc,.reloc, 600A0000[00070000] [ M] 123. d:\program files\qq\basicctrldll.dll TENCENT BasicCtrlDll DLL .text,.rdata,.data,.rsrc,.reloc, 60A70000[000F2000] [ M] 124. d:\program files\qq\mfc42.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.rdata,.data,.rsrc,.reloc, 00380000[00009000] [ M] 125. d:\program files\qq\msimg32.dll UPX0,UPX1,UPX2, 003D0000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 01180000[00074000] [ M] 126. d:\program files\qq\fineplus.dll ,,,.rsrc,,,.data,.adata, 01D20000[00009000] [ M] 127. d:\program files\qq\fphelper.dll UPX0,UPX1,UPX2, 62580000[00005000] [ M] 128. d:\program files\qq\riched32.dll Microsoft Corporation Wrapper Dll for Richedit 1.0 .text,.data,.rsrc,.reloc, 62510000[00068000] [ M] 129. d:\program files\qq\riched20.dll Microsoft Corporation Rich Text Edit Control, v3.1 .text,.data,.rsrc,.reloc, 61360000[0003A000] [ M] 130. d:\program files\qq\qqapi.dll TENCENT ModuleSample DLL .text,.rdata,.data,.rsrc,.reloc, 60860000[00044000] [ M] 131. d:\program files\qq\loginctrl.dll TENCENT NewSkin .text,.rdata,.data,.rsrc,.reloc, 02770000[0009B000] [ M] 132. d:\program files\qq\loginctrlres.dll TENCENT LoginCtrl DLL .rsrc,.reloc, 02810000[0063A000] [ M] 133. d:\program files\qq\qqres.dll TENCENT QQRes .rsrc,.reloc, 033C0000[000D7000] [ M] 134. d:\program files\qq\qqmainframe.dll .text,.rdata,.data,.reloc, 60450000[001A3000] [ M] 135. d:\program files\qq\gdiplus.dll Microsoft Corporation Microsoft GDI+ .text,.data,Shared,.rsrc,.reloc, 03540000[00020000] [ M] 136. d:\program files\qq\unreadmsgmgr.dll .text,.rdata,.data,.reloc, 03A50000[00124000] [ M] 137. d:\program files\qq\qqplugin.dll .text,.rdata,.data,.reloc, 03BC0000[00174000] [ M] 138. d:\program files\qq\cqqapplication.dll .text,.rdata,.data,.reloc, 60410000[00040000] [ M] 139. d:\program files\qq\flashavatardll.dll FlashAvatarDll DLL .text,.rdata,.data,.rsrc,.reloc, 60C10000[0005F000] [ M] 140. d:\program files\qq\newskin.dll TENCENT NewSkin Module .text,.rdata,.data,.rsrc,.reloc, 04620000[00036000] [ M] 141. d:\program files\qq\mailsummary.dll TENCENT MailSummary DLL .text,.rdata,.data,.rsrc,.reloc, 623A0000[00027000] [ M] 142. d:\program files\qq\qqspace.dll TENCENT QQSpace DLL .text,.rdata,.data,.rsrc,.reloc, 04820000[00031000] [ M] 143. d:\program files\qq\vbscript.dll .text,.rdata,.data,.reloc, 73460000[0006B000] [ M] 144. d:\program files\qq\encode.dll Microsoft Corporation Microsoft (r) VBScript .text,.data,.rsrc,.reloc, 61910000[00018000] [ M] 145. d:\program files\qq\qqknowledgesearch.dll TENCENT QQKnowledgeSearch DLL .text,.rdata,.data,.rsrc,.reloc, 60C70000[00014000] [ M] 146. d:\program files\qq\oemapplication.dll TENCENT OEMApplication DLL .text,.rdata,.data,.rsrc,.reloc, 617A0000[00071000] [ M] 147. d:\program files\qq\qqgroupmng.dll TENCENT QQGroupMng DLL .text,.rdata,.data,.rsrc,.reloc, 62700000[00017000] [ M] 148. d:\program files\qq\userdefinedhead.dll TENCENT UserDefinedHead DLL .text,.rdata,.data,.rsrc,.reloc, 05070000[00255000] [ M] 149. d:\program files\qq\qqallinone.dll TENCENT NewSkin .text,.rdata,.data,.rsrc,.reloc, 625A0000[0002B000] [ M] 150. d:\program files\qq\sccore.dll TENCENT SCCore.dll .text,.rdata,.data,.shareds,.rsrc,.reloc, 60130000[00034000] [ M] 151. d:\program files\qq\cameradll.dll TENCENT CameraDll DLL .text,.rdata,.data,.MYSHARE,.rsrc,.reloc, 056D0000[00055000] [ M] 152. d:\program files\qq\qqcustomface.dll .text,.rdata,.data,.reloc, 72C80000[00008000] [ M] 84. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 616E0000[0000E000] [ M] 153. d:\program files\qq\qqconfigplugin.dll TENCENT QQConfigPlugin DLL .text,.rdata,.data,.rsrc,.reloc, 613A0000[00040000] [ M] 154. d:\program files\qq\qqavatar.dll .text,.rdata,.data,.reloc, 61930000[00015000] [ M] 155. d:\program files\qq\qqliveqmng.dll TENCENT QQLiveQMng DLL .text,.rdata,.data,.rsrc,.reloc, 61950000[0000E000] [ M] 156. d:\program files\qq\qqmagicface.dll TENCENT QQMagicFace DLL .text,.rdata,.data,.rsrc,.reloc, 60740000[0001A000] [ M] 157. d:\program files\qq\imageole.dll TENCENT TODO: .text,.rdata,.data,.rsrc,.reloc, 60C90000[0000F000] [ M] 158. d:\program files\qq\personaldesktop.dll TENCENT QQ个人桌面 .text,.rdata,.data,.rsrc,.reloc, 60950000[000B8000] [ M] 159. d:\program files\qq\longconnection.dll TENCENT LongConnection .text,.rdata,.data,.rsrc,.reloc, 60D10000[00027000] [ M] 160. d:\program files\qq\phoneapi.dll TENCENT PhoneAPI DLL .text,.rdata,.data,.rsrc,.reloc, 603C0000[0000D000] [ M] 161. d:\program files\qq\dialerallinone.dll tencent DialerAllInOne .text,.rdata,.data,Shared,.rsrc,.reloc, 069E0000[00162000] [ M] 117. c:\windows\system32\sogoupy.ime Sohu.com Inc. 搜狗拼音输入法 .text,.rdata,.data,.SogouIn,.rsrc,.reloc, 07E70000[00042000] [ M] 118. c:\program files\sogouinput\plugin\sgimeword.dll test1 Module .text,.rdata,.data,.rsrc,.reloc, 07EE0000[00093000] [ M] 162. c:\program files\sogouinput\ziplib.dll .text,.rdata,.data,.rsrc,.reloc, 60110000[0001F000] [ M] 163. d:\program files\qq\bqqapplication.dll .text,.rdata,.data,.reloc, 623D0000[00048000] [ M] 164. d:\program files\qq\qqsysmsgmng.dll .text,.rdata,.data,.reloc, 60170000[0004F000] [ M] 165. d:\program files\qq\commercesmng.dll TENCENT CommercesMng DLL .text,.rdata,.data,.rsrc,.reloc, 08810000[00287000] [ M] 166. d:\program files\qq\qqaddr.dll 深圳市腾讯计算机系统有限公司 腾讯通讯录 .text,.rdata,.data,.rsrc,.reloc, 60710000[00025000] [ M] 167. d:\program files\qq\groupconnection.dll TENCENT GroupConnection DLL .text,.rdata,.data,.rsrc,.reloc, 62B30000[0002C000] [ M] 168. d:\program files\qq\vqqmodule.dll TENCENT VqqModule DLL .text,.rdata,.data,.rsrc,.reloc, 62AB0000[0007E000] [ M] 169. d:\program files\qq\vqqallinone.dll Tencent VqqAllInOne .text,.rodata,.rdata,.data,.rsrc,.reloc, 60770000[000DD000] [ M] 170. d:\program files\qq\inplus.dll Tencent InPlus .text,.rdata,.data,.data1,.rsrc,.reloc, 62690000[00012000] [ M] 171. d:\program files\qq\tencent-proto1.dll tencent tencent-proto1 .text,.rdata,.data,.rsrc,.reloc, 62660000[00024000] [ M] 172. d:\program files\qq\tencent-comlib.dll tencent tencent-comlib .text,.rdata,.data,.rsrc,.reloc, 626B0000[0000D000] [ M] 173. d:\program files\qq\tencent-proto2.dll tencent tencent-proto2 .text,.rdata,.data,.rsrc,.reloc, 05C10000[001A3000] [ M] 106. c:\windows\system32\macromed\flash\flash.ocx Macromedia, Inc. Macromedia Flash Player 7.0 r14 .text,.rdata,.data,.data1,.CRT,.rsrc,.reloc, 60090000[00008000] [ M] 174. d:\program files\qq\audioengine.dll TENCENT audioengine .text,.rdata,.data,.rsrc,.reloc, 60600000[00103000] [ M] 175. d:\program files\qq\gipsvoiceenginedll.dll Global IP Sound Global IP Sound VoiceEngine .text,.rdata,.data,.rsrc,.reloc, 62A20000[0006F000] [ M] 176. d:\program files\qq\videodevice.dll Tencent VideoDevice .text,.rodata,.rdata,.data,.rsrc,.reloc, 627A0000[00275000] [ M] 177. d:\program files\qq\vcodec.dll Tencent VCodec .text,.rodata,.rdata,.data,.data1,.rsrc,.reloc, + 00000f28(3880) TXPlatform.exe 00400000[00026000] [ M] 178. d:\program files\qq\txplatform.exe Tencent TM2008 .text,.rdata,.data,.rsrc, 10000000[00020000] [AM] 80. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc,