瑞星卡卡电脑诊断日志 v1.30 (2008-7-31 9:0:30)  北京瑞星信息技术有限公司

注释:	[A]表示该文件存在自启动关联;
	[M]表示该文件在内存中;

+ 注册表自运行项目 
  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      BsDeamon
        [A ] 1. c:\program files\jiangmin\antivirus\bsdeamon.sys
          Jiangmin Co., Ltd.
          BsDeamon Application
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      cmpci
        [A ] 2. c:\windows\system32\drivers\cmaudio.sys
          C-Media Inc
          C-Media Audio WDM Driver
          .text,_PTEXT,_LTEXT,.data,_PDATA,_LDATA,PAGE,INIT,.rsrc,.reloc,


      HdFw_slot
        [A ] 3. c:\windows\system32\drivers\hdfw.sys
          Jiangmin Co., Ltd.
          Jiangmin Firewall
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HDPT
        [A ] 4. c:\windows\system32\drivers\hdpt.sys
          Jiangmin Co., Ltd.
          JIANGMIN SOFTWARE FILTER
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      JmFwDDos
        [A ] 5. c:\windows\system32\drivers\jmfwddos.sys
          Jiangmin Co., Ltd.
          Jiangmin Antivirus Software
          .text,.rdata,.data,.edata,INIT,.rsrc,.reloc,


      KRegEx
        [A ] 6. c:\program files\jiangmin\antivirus\kregex.sys
          Jiangmin Co. Ltd.
          Trojan and Registry Monitor
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      KSysCall
        [A ] 7. c:\program files\jiangmin\common\ksyscall.sys
          Jiangmin Co.,  Ltd.
          SysCall Services
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      KSysMon
        [A ] 8. c:\program files\jiangmin\antivirus\ksysmon.sys
          Jiangmin Co., Ltd.
          System Monitor
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      KSysTrace
        [A ] 9. c:\program files\jiangmin\antivirus\ksystrace.sys
          Jiangmin Co., Ltd.
          File Tracer
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      KVREDIR
        [A ] 10. c:\program files\jiangmin\antivirus\kvredir.sys
          Jiangmin Co., Ltd.
          Jiangmin Redirector TDI Filter (Layered,NT5)
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      NPF
        [A ] 11. c:\windows\system32\drivers\npf.sys
          NetGroup - Politecnico di Torino
          npf
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      npkcrypt
        [A ] 12. c:\windows\system32\npkcrypt.sys


      npkycryp
        [A ] 13. c:\windows\system32\npkycryp.sys


      Secdrv
        [A ] 14. c:\windows\system32\drivers\secdrv.sys
          Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
          Macrovision SECURITY Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      SysGuard
        [A ] 15. c:\windows\system32\drivers\sysguard.sys
          Jiangmin Co., Ltd.
          System Guard
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      sysHostSvc
        [A ] 16. c:\windows\system32\drivers\guihelp.sys
          Microsoft Corporation
          Gui Helper api
          .text,.data,INIT,.rsrc,.reloc,


      TesSafe
        [A ] 17. c:\windows\system32\tessafe.sys
          TENCENT
          TesSafe NT Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TSKSP
        [A ] 18. f:\qq\qqdoctor\tsksp.sys
          Tencent
          TSKSP
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      XScanPF
        [A ] 19. d:\刷分\9.11sc\x-scan-v3.3\dat\xpf.sys




  + 文件系统驱动
    + HKLM\System\CurrentControlSet\Services
      ADProt
        [A ] 20. c:\windows\system32\drivers\adprot.sys


      evyvualx
        [A ] 21. c:\windows\system32\drivers\evyvualx.sys
          Yahoo! China Corporation
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      KVFileGuard
        [A ] 22. c:\program files\jiangmin\antivirus\kvfg.sys
          Jiangmin Co., Ltd.
          KVDP Device Driver
          .text,.rdata,.data,.CRT,.STL,PAGE,INIT,.rsrc,.reloc,




  + 系统登陆自运行
    + HKCU\Control Panel\Desktop
      Scrnsave.exe
        [A ] 23. c:\windows\system32\rainyss.scr
          .text,.rdata,.data,.rsrc,.aspack,.adata,




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {B5A34A93-D538-43A7-8371-864CB6148D12}
        [AM] 24. c:\program files\jiangmin\antivirus\kvshell.dll
          Jiangmin Co.Ltd
          Shell Plugin
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}
        [AM] 25. f:\工具\bitcomet\tools\bitcometbho_1.2.6.26.dll
          BitComet
          BitCometBHO
          .text,.rdata,.data,.rsrc,.reloc,


      {80BF4637-D65B-43F3-BB60-C5DD3D5FB7B9}
        [AM] 24. c:\program files\jiangmin\antivirus\kvshell.dll
          Jiangmin Co.Ltd
          Shell Plugin
          .text,.rdata,.data,.rsrc,.reloc,


      {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
        [AM] 26. c:\windows\system32\urlfilter.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising AntiSpyware UrlFilter Module
          .text,.rdata,.data,.rsrc,.reloc,


      {FF354A24-B490-4D4F-8EEC-B3ACD6E681A4}
        [AM] 27. c:\program files\jiangmin\antivirus\urlguard.dll
          Jiangmin Co., Ltd.
          Url Guard Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 28. c:\program files\messenger\msmsgs.exe
          Microsoft Corporation
          Windows Messenger
          .text,.data,.rsrc,




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      cdo
        [A ] 29. c:\program files\common files\microsoft shared\web folders\pkmcdo.dll
          Microsoft Corporation
          Microsoft SharePoint Portal Server Object Model
          .text,.data,.rsrc,.reloc,


      KuGoo
        [A ] 30. c:\windows\system32\kugoo3downxcontrol.ocx
          酷狗
          酷狗音乐控件
          .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc,


      KuGoo3
        [A ] 30. c:\windows\system32\kugoo3downxcontrol.ocx
          酷狗
          酷狗音乐控件
          .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc,


      mso-offdap
        [A ] 31. c:\program files\common files\microsoft shared\web components\10\owc10.dll
          Microsoft Corporation
          Microsoft Office XP Web Components
          .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 32. c:\windows\system32\hticons.dll
          Hilgraeve, Inc.
          HyperTerminal Applet Library
          .text,.data,.rsrc,.reloc,


      Web Folders
        [A ] 33. c:\program files\common files\microsoft shared\web folders\msonsext.dll
          Microsoft Corporation
          Microsoft Web Folders
          .text,.data,.bootdat,.rsrc,.reloc,


      Microsoft Outlook Custom Icon Handler
        [A ] 34. e:\office\office10\olkfstub.dll
          Microsoft Corporation
          Outlook Shell Hook for Start/Find
          .text,.data,.rsrc,.reloc,


      Microsoft Office HTML Icon Handler
        [AM] 35. e:\office\office10\msohev.dll
          Microsoft Corporation
          Microsoft Office XP component
          .text,.data,.rsrc,.reloc,


      WinRAR shell extension
        [A ] 36. c:\program files\winrar\rarext.dll
          .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


      Kv Dangerous File Control
        [AM] 37. c:\program files\jiangmin\antivirus\kspec.dll
          Jiangmin Co., Ltd.
          KV Process Execution Control
          .text,.rdata,.data,.rsrc,.reloc,


      Kv Suspicious File Control
        [AM] 37. c:\program files\jiangmin\antivirus\kspec.dll
          Jiangmin Co., Ltd.
          KV Process Execution Control
          .text,.rdata,.data,.rsrc,.reloc,


      Kv Process Execution Control
        [AM] 37. c:\program files\jiangmin\antivirus\kspec.dll
          Jiangmin Co., Ltd.
          KV Process Execution Control
          .text,.rdata,.data,.rsrc,.reloc,




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      KVMON
        [A ] 38. c:\program files\jiangmin\antivirus\kvmonxp.kxp
          Jiangmin Co.Ltd
          KVMonXP Module
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 39. d:\软件\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          RSTray
          .text,.rdata,.data,.rsrc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
      KKDelay
        [A ] 40. d:\软件\runonce.exe
          Beijing Rising Information Technology Co., Ltd.
          RunOnce Application
          .text,.rdata,.data,.rsrc,




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 41. c:\windows\system32\kvnative.exe
          Jiangmin Co., Ltd.
          Jiangmin BootScan
          .text,PAGE,.data,.rsrc,.reloc,

        [A ] 42. c:\windows\system32\kknative.exe
          Beijing Rising Information Technology Co., Ltd.
          NativeAp
          .text,.data,.rsrc,.reloc,




  + 映像劫持
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 43. e:\office\office10\msohtmed.exe
          Microsoft Corporation
          Microsoft Office XP component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 43. e:\office\office10\msohtmed.exe
          Microsoft Corporation
          Microsoft Office XP component
          .text,.data,.rsrc,



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 43. e:\office\office10\msohtmed.exe
          Microsoft Corporation
          Microsoft Office XP component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 43. e:\office\office10\msohtmed.exe
          Microsoft Corporation
          Microsoft Office XP component
          .text,.data,.rsrc,



    + HKCR\.mp3
      KuGoo.MP3\Open\Command
        [A ] 44. d:\软件\kugou2008\kugoo.exe
          酷狗音乐
          酷狗音乐2008
          .text,.itext,.data,.bss,.idata,.tls,.rdata,.reloc,.rsrc,


      KuGoo.MP3\PlayList\Command
        [A ] 44. d:\软件\kugou2008\kugoo.exe
          酷狗音乐
          酷狗音乐2008
          .text,.itext,.data,.bss,.idata,.tls,.rdata,.reloc,.rsrc,





+ 正在运行的进程
  + 00000164(356) knownsvr.exe
    00400000[00072000]
      [ M] 45. d:\软件\knownsvr.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    10000000[0002F000]
      [ M] 46. d:\软件\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    00A70000[0002E000]
      [ M] 47. d:\软件\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00AA0000[00019000]
      [ M] 48. d:\软件\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000280(640) stormliv.exe
    00400000[00075000]
      [ M] 49. c:\program files\stormii\stormliv.exe
        北京暴风网际科技有限公司
        暴风影音媒体控制中心
        .text,.rdata,.data,.rsrc,


    75FF0000[00065000]
      [ M] 50. c:\program files\stormii\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000028c(652) smss.exe

  + 000002ec(748) csrss.exe

  + 0000030c(780) winlogon.exe
    72C80000[00008000]
      [ M] 51. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 0000033c(828) services.exe

  + 00000348(840) lsass.exe

  + 000003e0(992) svchost.exe

  + 00000420(1056) svchost.exe

  + 0000048c(1164) svchost.exe

  + 00000524(1316) svchost.exe

  + 000005f0(1520) svchost.exe

  + 0000061c(1564) Explorer.EXE
    50FD0000[0006A000]
      [AM] 37. c:\program files\jiangmin\antivirus\kspec.dll
        Jiangmin Co., Ltd.
        KV Process Execution Control
        .text,.rdata,.data,.rsrc,.reloc,


    50E00000[00029000]
      [ M] 52. c:\program files\jiangmin\common\kvtrust.dll
        Jiangmin Co., Ltd.
        Jiangmin Trusted Files Manager
        .text,.rdata,.data,.rsrc,.reloc,


    58F00000[00031000]
      [ M] 53. c:\program files\jiangmin\common\kvtools.dll
        Jiangmin Co., Ltd.
        Jiangmin KvTools
        .text,.rdata,.data,.rsrc,.reloc,


    78D80000[0001C000]
      [ M] 54. c:\windows\system32\hivebase.dll
        Jiangmin Co., Ltd.
        KV HIVE FILE BASE
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0003A000]
      [ M] 55. c:\windows\system32\kvinstall.dll
        Jiangmin Co.,Ltd
        KVInstal Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F10000[0001B000]
      [ M] 56. c:\program files\jiangmin\common\kvtrustinit.dll
        Jiangmin Co., Ltd.
        Jiangmin Trusted Files Initialize
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 51. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    15000000[000A7000]
      [AM] 24. c:\program files\jiangmin\antivirus\kvshell.dll
        Jiangmin Co.Ltd
        Shell Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    19000000[0002D000]
      [ M] 57. c:\program files\jiangmin\antivirus\lang\kvxp0804.lng
        .rsrc,.reloc,



  + 000006c0(1728) spoolsv.exe

  + 00000794(1940) rstray.exe
    00400000[00023000]
      [AM] 39. d:\软件\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        RSTray
        .text,.rdata,.data,.rsrc,


    10000000[0003C000]
      [ M] 58. d:\软件\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 59. d:\软件\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 60. d:\软件\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 61. d:\软件\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C00000[00024000]
      [ M] 62. d:\软件\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    00C30000[00019000]
      [ M] 48. d:\软件\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00026000]
      [ M] 63. d:\软件\rscommon.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C60000[0002E000]
      [ M] 47. d:\软件\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 64. d:\软件\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01070000[0005C000]
      [ M] 65. d:\软件\runiep.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware tray
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007ac(1964) ctfmon.exe

  + 00000834(2100) ras.exe
    00400000[0000B000]
      [ M] 66. d:\软件\ras.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 67. d:\软件\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 61. d:\软件\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00047000]
      [ M] 68. d:\软件\kakamgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 60. d:\软件\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B40000[00019000]
      [ M] 48. d:\软件\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    00B70000[0002E000]
      [ M] 47. d:\软件\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00DE0000[00058000]
      [ M] 69. d:\软件\dbmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 59. d:\软件\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    00F40000[0002D000]
      [ M] 70. d:\软件\pweb.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    00F70000[000C0000]
      [ M] 71. d:\软件\pscan.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01030000[0002F000]
      [ M] 46. d:\软件\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01080000[00070000]
      [ M] 72. d:\软件\pset.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01110000[0002A000]
      [ M] 73. d:\软件\pdefend.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01140000[000B6000]
      [ M] 74. d:\软件\ptools.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01360000[0008C000]
      [ M] 75. d:\软件\psysinfo.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 64. d:\软件\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    030C0000[0006F000]
      [ M] 76. c:\program files\common files\microsoft shared\ink\penchs.dll
        Microsoft Corporation
        Microsoft CHS Handwriting Input UI
        .text,.rdata,.data,.rsrc,.reloc,


    02E90000[00040000]
      [AM] 27. c:\program files\jiangmin\antivirus\urlguard.dll
        Jiangmin Co., Ltd.
        Url Guard Module
        .text,.rdata,.data,.rsrc,.reloc,


    78D80000[0001C000]
      [ M] 54. c:\windows\system32\hivebase.dll
        Jiangmin Co., Ltd.
        KV HIVE FILE BASE
        .text,.rdata,.data,.rsrc,.reloc,


    3A000000[0006F000]
      [ M] 77. c:\program files\jiangmin\kernel\engface.dll
        Jiangmin Co., Ltd.
        Scan System Interface Module
        .text,.rdata,.data,.rsrc,.reloc,


    02EE0000[0003A000]
      [ M] 55. c:\windows\system32\kvinstall.dll
        Jiangmin Co.,Ltd
        KVInstal Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03310000[0002C000]
      [ M] 78. c:\program files\jiangmin\antivirus\kvaddrdb.dll
        Jiangmin Co., Ltd.
        KVAddrDb Module
        .text,.rdata,.data,.rsrc,.reloc,


    780C0000[00061000]
      [ M] 79. d:\软件\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    30000000[003AF000]
      [ M] 80. c:\windows\system32\macromed\flash\flash9f.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 9.0  r124
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 51. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000920(2336) QQ.exe
    00400000[001D9000]
      [ M] 81. f:\qq\新建文件夹\qq.exe
        TENCENT
        QQ
        .text,.rdata,.data,.rsrc,


    10000000[002F6000]
      [ M] 82. f:\qq\新建文件夹\qqbaseclassindll.dll
        TENCENT
        QQBaseClassInDll DLL
        .text,.rdata,.data,.rsrc,.reloc,


    005E0000[000E1000]
      [ M] 83. f:\qq\新建文件夹\qqhelperdll.dll
        TENCENT
        QQHelperDll DLL
        .text,.rdata,.data,.rsrc,.reloc,


    600A0000[00070000]
      [ M] 84. f:\qq\新建文件夹\basicctrldll.dll
        TENCENT
        BasicCtrlDll DLL
        .text,.rdata,.data,.rsrc,.reloc,


    60A70000[000F2000]
      [ M] 85. f:\qq\新建文件夹\mfc42.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.rdata,.data,.rsrc,.reloc,


    00380000[0000C000]
      [ M] 86. f:\qq\新建文件夹\msimg32.dll
        .text,.rdata,.data,.reloc,


    01110000[000D2000]
      [ M] 87. c:\program files\彩虹qq\caihong.dll
        .text,.rdata,.data,.share,.rsrc,.reloc,


    62580000[00005000]
      [ M] 88. f:\qq\新建文件夹\riched32.dll
        Microsoft Corporation
        Wrapper Dll for Richedit 1.0
        .text,.data,.rsrc,.reloc,


    01040000[00025000]
      [ M] 89. f:\qq\新建文件夹\riched20.dll
        Jiangmin Co., Ltd.
        IMProtec Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    62510000[00068000]
      [ M] 90. f:\qq\新建文件夹\riched20_.dll
        Microsoft Corporation
        Rich Text Edit Control, v3.1
        .text,.data,.rsrc,.reloc,


    78D80000[0001C000]
      [ M] 54. c:\windows\system32\hivebase.dll
        Jiangmin Co., Ltd.
        KV HIVE FILE BASE
        .text,.rdata,.data,.rsrc,.reloc,


    010C0000[0003A000]
      [ M] 55. c:\windows\system32\kvinstall.dll
        Jiangmin Co.,Ltd
        KVInstal Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01950000[00004000]
      [ M] 91. c:\program files\jiangmin\antivirus\lang\jmimprotect0804.lng
        Jiangmin Co., Ltd.
        IMProtec Dynamic Link Library
        .rdata,.rsrc,.reloc,


    61360000[0003A000]
      [ M] 92. f:\qq\新建文件夹\qqapi.dll
        TENCENT
        ModuleSample DLL
        .text,.rdata,.data,.rsrc,.reloc,


    023F0000[00046000]
      [ M] 93. f:\qq\新建文件夹\loginctrl.dll
        TENCENT
        NewSkin
        .text,.rdata,.data,.rsrc,.reloc,


    02440000[0009C000]
      [ M] 94. f:\qq\新建文件夹\loginctrlres.dll
        TENCENT
        LoginCtrl DLL
        .rsrc,.reloc,


    024E0000[0063C000]
      [ M] 95. f:\qq\新建文件夹\qqres.dll
        TENCENT
        QQRes
        .rsrc,.reloc,


    03020000[000D7000]
      [ M] 96. f:\qq\新建文件夹\qqmainframe.dll
        .text,.rdata,.data,.reloc,


    60450000[001A3000]
      [ M] 97. f:\qq\新建文件夹\gdiplus.dll
        Microsoft Corporation
        Microsoft GDI+
        .text,.data,Shared,.rsrc,.reloc,


    03120000[00020000]
      [ M] 98. f:\qq\新建文件夹\unreadmsgmgr.dll
        .text,.rdata,.data,.reloc,


    033D0000[00124000]
      [ M] 99. f:\qq\新建文件夹\qqplugin.dll
        .text,.rdata,.data,.reloc,


    036A0000[00174000]
      [ M] 100. f:\qq\新建文件夹\cqqapplication.dll
        .text,.rdata,.data,.reloc,


    60410000[00040000]
      [ M] 101. f:\qq\新建文件夹\flashavatardll.dll
        FlashAvatarDll DLL
        .text,.rdata,.data,.rsrc,.reloc,


    60C10000[0005F000]
      [ M] 102. f:\qq\新建文件夹\newskin.dll
        TENCENT
        NewSkin Module
        .text,.rdata,.data,.rsrc,.reloc,


    03A80000[00036000]
      [ M] 103. f:\qq\新建文件夹\mailsummary.dll
        TENCENT
        MailSummary DLL
        .text,.rdata,.data,.rsrc,.reloc,


    623A0000[00027000]
      [ M] 104. f:\qq\新建文件夹\qqspace.dll
        TENCENT
        QQSpace DLL
        .text,.rdata,.data,.rsrc,.reloc,


    62720000[00071000]
      [ M] 105. f:\qq\新建文件夹\vbscript.dll
        Microsoft Corporation
        Microsoft (r) VBScript
        .text,.rdata,.data,.rsrc,.reloc,


    73620000[00007000]
      [ M] 106. f:\qq\新建文件夹\msdmo.dll
        .text,.data,.rsrc,.reloc,


    040C0000[0001D000]
      [ M] 107. c:\program files\彩虹qq\reporter.dll
        .text,.rdata,.data,.reloc,


    61910000[00018000]
      [ M] 108. f:\qq\新建文件夹\qqknowledgesearch.dll
        TENCENT
        QQKnowledgeSearch DLL
        .text,.rdata,.data,.rsrc,.reloc,


    04DB0000[0006C000]
      [ M] 109. f:\qq\新建文件夹\qqsettingctrl.dll
        TENCENT
        QQSettingCtrl DLL
        .text,.rdata,.data,.rsrc,.reloc,


    04E20000[00255000]
      [ M] 110. f:\qq\新建文件夹\qqallinone.dll
        TENCENT
        NewSkin
        .text,.rdata,.data,.rsrc,.reloc,


    625A0000[0002B000]
      [ M] 111. f:\qq\新建文件夹\sccore.dll
        TENCENT
        SCCore.dll
        .text,.rdata,.data,.shareds,.rsrc,.reloc,


    60130000[00034000]
      [ M] 112. f:\qq\新建文件夹\cameradll.dll
        TENCENT
        CameraDll DLL
        .text,.rdata,.data,.MYSHARE,.rsrc,.reloc,


    60C70000[00014000]
      [ M] 113. f:\qq\新建文件夹\oemapplication.dll
        TENCENT
        OEMApplication DLL
        .text,.rdata,.data,.rsrc,.reloc,


    617A0000[00071000]
      [ M] 114. f:\qq\新建文件夹\qqgroupmng.dll
        TENCENT
        QQGroupMng DLL
        .text,.rdata,.data,.rsrc,.reloc,


    61B50000[0002B000]
      [ M] 115. f:\qq\新建文件夹\qqpet.dll
        TENCENT
        QQPet DLL
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 51. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    624F0000[00016000]
      [ M] 116. f:\qq\新建文件夹\qringmng.dll
        .text,.rdata,.data,.reloc,


    02C30000[0004A000]
      [ M] 117. f:\qq\新建文件夹\qqsysmsgmng.dll
        .text,.rdata,.data,.reloc,


    62700000[00017000]
      [ M] 118. f:\qq\新建文件夹\userdefinedhead.dll
        TENCENT
        UserDefinedHead DLL
        .text,.rdata,.data,.rsrc,.reloc,


    616E0000[0000E000]
      [ M] 119. f:\qq\新建文件夹\qqconfigplugin.dll
        TENCENT
        QQConfigPlugin DLL
        .text,.rdata,.data,.rsrc,.reloc,


    72C60000[00007000]
      [ M] 120. c:\windows\system32\msadp32.acm
        Microsoft Corporation
        Microsoft ADPCM CODEC for MSACM
        .text,.data,.rsrc,.reloc,


    03620000[00055000]
      [ M] 121. f:\qq\新建文件夹\qqcustomface.dll
        .text,.rdata,.data,.reloc,


    60740000[0001A000]
      [ M] 122. f:\qq\新建文件夹\imageole.dll
        TENCENT
        TODO: <File description>
        .text,.rdata,.data,.rsrc,.reloc,


    61930000[00015000]
      [ M] 123. f:\qq\新建文件夹\qqliveqmng.dll
        TENCENT
        QQLiveQMng DLL
        .text,.rdata,.data,.rsrc,.reloc,


    60950000[000B8000]
      [ M] 124. f:\qq\新建文件夹\longconnection.dll
        TENCENT
        LongConnection
        .text,.rdata,.data,.rsrc,.reloc,


    613A0000[00040000]
      [ M] 125. f:\qq\新建文件夹\qqavatar.dll
        .text,.rdata,.data,.reloc,


    60D10000[00027000]
      [ M] 126. f:\qq\新建文件夹\phoneapi.dll
        TENCENT
        PhoneAPI DLL
        .text,.rdata,.data,.rsrc,.reloc,


    603C0000[0000D000]
      [ M] 127. f:\qq\新建文件夹\dialerallinone.dll
        tencent
        DialerAllInOne
        .text,.rdata,.data,Shared,.rsrc,.reloc,


    60710000[00025000]
      [ M] 128. f:\qq\新建文件夹\groupconnection.dll
        TENCENT
        GroupConnection DLL
        .text,.rdata,.data,.rsrc,.reloc,


    60110000[0001F000]
      [ M] 129. f:\qq\新建文件夹\bqqapplication.dll
        .text,.rdata,.data,.reloc,


    062A0000[0002C000]
      [ M] 78. c:\program files\jiangmin\antivirus\kvaddrdb.dll
        Jiangmin Co., Ltd.
        KVAddrDb Module
        .text,.rdata,.data,.rsrc,.reloc,


    61950000[0000E000]
      [ M] 130. f:\qq\新建文件夹\qqmagicface.dll
        TENCENT
        QQMagicFace DLL
        .text,.rdata,.data,.rsrc,.reloc,


    622F0000[0002D000]
      [ M] 131. f:\qq\新建文件夹\qqscenemng.dll
        .text,.rdata,.data,.reloc,


    60170000[0004F000]
      [ M] 132. f:\qq\新建文件夹\commercesmng.dll
        TENCENT
        CommercesMng DLL
        .text,.rdata,.data,.rsrc,.reloc,


    60C90000[0000F000]
      [ M] 133. f:\qq\新建文件夹\personaldesktop.dll
        TENCENT
        QQ个人桌面
        .text,.rdata,.data,.rsrc,.reloc,


    07ED0000[00287000]
      [ M] 134. f:\qq\新建文件夹\qqaddr.dll
        深圳市腾讯计算机系统有限公司
        腾讯通讯录
        .text,.rdata,.data,.rsrc,.reloc,


    01FF0000[00040000]
      [AM] 27. c:\program files\jiangmin\antivirus\urlguard.dll
        Jiangmin Co., Ltd.
        Url Guard Module
        .text,.rdata,.data,.rsrc,.reloc,


    3A000000[0006F000]
      [ M] 77. c:\program files\jiangmin\kernel\engface.dll
        Jiangmin Co., Ltd.
        Scan System Interface Module
        .text,.rdata,.data,.rsrc,.reloc,


    05630000[00037000]
      [ M] 135. f:\qq\新建文件夹\addrsearch.dll
        腾讯科技（深圳）有限公司
        AddrSearch
        UPX0,UPX1,.rsrc,



  + 000009cc(2508) IEXPLORE.EXE
    10000000[000A1000]
      [AM] 25. f:\工具\bitcomet\tools\bitcometbho_1.2.6.26.dll
        BitComet
        BitCometBHO
        .text,.rdata,.data,.rsrc,.reloc,


    01470000[00018000]
      [AM] 26. c:\windows\system32\urlfilter.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlFilter Module
        .text,.rdata,.data,.rsrc,.reloc,


    014A0000[00011000]
      [ M] 136. d:\软件\urlrule.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlRule  Library
        .text,.rdata,.data,.rsrc,.reloc,


    014D0000[00040000]
      [AM] 27. c:\program files\jiangmin\antivirus\urlguard.dll
        Jiangmin Co., Ltd.
        Url Guard Module
        .text,.rdata,.data,.rsrc,.reloc,


    78D80000[0001C000]
      [ M] 54. c:\windows\system32\hivebase.dll
        Jiangmin Co., Ltd.
        KV HIVE FILE BASE
        .text,.rdata,.data,.rsrc,.reloc,


    3A000000[0006F000]
      [ M] 77. c:\program files\jiangmin\kernel\engface.dll
        Jiangmin Co., Ltd.
        Scan System Interface Module
        .text,.rdata,.data,.rsrc,.reloc,


    01950000[0003A000]
      [ M] 55. c:\windows\system32\kvinstall.dll
        Jiangmin Co.,Ltd
        KVInstal Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01B10000[0002C000]
      [ M] 78. c:\program files\jiangmin\antivirus\kvaddrdb.dll
        Jiangmin Co., Ltd.
        KVAddrDb Module
        .text,.rdata,.data,.rsrc,.reloc,


    032E0000[0006F000]
      [ M] 76. c:\program files\common files\microsoft shared\ink\penchs.dll
        Microsoft Corporation
        Microsoft CHS Handwriting Input UI
        .text,.rdata,.data,.rsrc,.reloc,


    32520000[00012000]
      [AM] 35. e:\office\office10\msohev.dll
        Microsoft Corporation
        Microsoft Office XP component
        .text,.data,.rsrc,.reloc,


    30000000[003AF000]
      [ M] 80. c:\windows\system32\macromed\flash\flash9f.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 9.0  r124
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 51. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000a00(2560) TXPlatform.exe
    00400000[00026000]
      [ M] 137. f:\qq\新建文件夹\txplatform.exe
        Tencent
        TM2008
        .text,.rdata,.data,.rsrc,