瑞星卡卡电脑诊断日志 v1.30 (2008-8-10 22:31:3) 北京瑞星信息技术有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services Adobe LM Service [A ] 1. c:\program files\common files\adobe systems shared\service\adobelmsvc.exe Adobe Systems System Level Service Utility .text,.rdata,.data,.rsrc, Autodesk Licensing Service [A ] 2. c:\program files\common files\autodesk shared\service\adskscsrv.exe Autodesk System Level Service Utility .text,.rdata,.data,.rsrc, BoBoTurbo [A ] 3. c:\windows\system32\boboturbo\boboturbo.exe 广州易播信息科技有限公司 BoBo P2P多媒体网络点播/广播/直播系统 加速器 .text,.rdata,.data,.rsrc, HelloNet_PPPoE_Service [AM] 4. e:\program files\hellonet\hnserv.exe 北京智慧门科技有限公司 Hellonet PPPoE Service .text,.rdata,.data,.rsrc, NVSvc [AM] 5. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 175.19 .text,.rdata,.data,.rsrc, RsCCenter [A ] 6. c:\program files\rising\rav\ccenter.exe Beijing Rising Information Technology Co., Ltd. CCenter .text,.rdata,.data,.rsrc, RsRavMon [A ] 7. c:\program files\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. Rising Realtime Moniter .text,.rdata,.data,.rsrc, TuneUp.Defrag [A ] 8. c:\windows\system32\tuneupdefragservice.exe TuneUp Software GmbH TuneUp Drive Defrag Service .text,.rdata,.data,.rsrc, VMAuthdService [A ] 9. e:\program files\vmware\vmware workstation\vmware-authd.exe VMware, Inc. VMware Authorization Service .text,.rdata,.data,.tls,.rsrc, VMnetDHCP [A ] 10. c:\windows\system32\vmnetdhcp.exe VMware, Inc. VMware VMnet DHCP service .text,.rdata,.data,.rsrc, vmount2 [A ] 11. c:\program files\common files\vmware\vmware virtual image editing\vmount2.exe VMware, Inc. virtual disk mount service .text,.rdata,.data,.tls,.rsrc, VMware NAT Service [A ] 12. c:\windows\system32\vmnat.exe VMware, Inc. VMware NAT Service .text,.rdata,.data,.rsrc, WMPNetworkSvc [A ] 13. c:\program files\windows media player\wmpnetwk.exe Microsoft Corporation Windows Media Player 网络共享服务 .text,.data,.rsrc,.reloc, WudfSvc [A ] 14. c:\windows\system32\wudfsvc.dll Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Service .text,.data,.rsrc,.reloc, + 内核驱动 + HKLM\System\CurrentControlSet\Services 3haa5ll51 [A ] 15. c:\windows\system32\drivers\3haa5ll51.sys ALCXWDM [A ] 16. c:\windows\system32\drivers\alcxwdm.sys Realtek Semiconductor Corp. Realtek AC'97 Audio Driver (WDM) .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, BKPSWBDH [A ] 17. c:\windows\system32\bkpswbdh.sys CrystalSysInfo [A ] 18. e:\program files\crystalcpu\sysinfo.sys .text,.rdata,.data,INIT,.reloc, DBKDRVR54 [A ] 19. e:\program files\cheat engine\dbk32.sys .text,.rdata,.data,INIT,.reloc, FET5X86V [A ] 20. c:\windows\system32\drivers\fetnd5bv.sys VIA Technologies, Inc. NDIS 5.0 miniport driver .text,.rdata,.data,INIT,.rsrc,.reloc, FKMQUYUY [A ] 21. c:\windows\system32\fkmquyuy.sys hcmon [A ] 22. c:\windows\system32\drivers\hcmon.sys VMware, Inc. VMware USB monitor .text,.rdata,.data,INIT,.rsrc,.reloc, HookCont [A ] 23. c:\windows\system32\drivers\hookcont.sys Beijing Rising Information Technology Co., Ltd. HookCont .text,.rdata,.data,INIT,.rsrc,.reloc, HookNtos [A ] 24. c:\windows\system32\drivers\hookntos.sys Beijing Rising Information Technology Co., Ltd. HookNtos .text,.rdata,.data,INIT,.rsrc,.reloc, HookReg [A ] 25. c:\windows\system32\drivers\hookreg.sys Beijing Rising Information Technology Co., Ltd. HookReg .text,.rdata,.data,INIT,.rsrc,.reloc, HookSys [A ] 26. c:\windows\system32\drivers\hooksys.sys Beijing Rising Information Technology Co., Ltd. Hooksys .text,.rdata,.data,INIT,.rsrc,.reloc, IlvMoneyDRIVER53 [A ] 27. e:\program files\moonlight engine\ilvmoney1196.sys .text,.rdata,.data,INIT,.reloc, KUKNQUZB [A ] 28. c:\windows\system32\kuknquzb.sys npkcrypt [A ] 29. c:\windows\system32\npkcrypt.sys npkycryp [A ] 30. c:\windows\system32\npkycryp.sys oreans32 [A ] 31. c:\windows\system32\drivers\oreans32.sys .text,.rdata,.data,INIT,.reloc, Profos [A ] 32. c:\program files\common files\360safe\bitdefender threat scanner\profos.sys PspKiller [A ] 33. c:\docume~1\admini~1\locals~1\temp\sxkiller.sys RsNTGDI [A ] 34. c:\windows\system32\drivers\rsntgdi.sys Beijing Rising Information Technology Co., Ltd. RsNTGDI .text,.rdata,INIT,.rsrc,.reloc, RTL8023xp [A ] 35. c:\windows\system32\drivers\rtnicxp.sys Realtek Semiconductor Corporation Realtek 10/100/1000 NDIS 5.1 Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, Secdrv [A ] 36. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, sysHostSvc [A ] 37. c:\windows\system32\drivers\guihelp.sys Microsoft Corporation Gui Helper api .text,.data,INIT,.rsrc,.reloc, TesSafe [A ] 38. c:\windows\system32\tessafe.sys TENCENT TesSafe NT Driver .text,.rdata,.data,INIT,.rsrc,.reloc, Trufos [A ] 39. c:\program files\common files\360safe\bitdefender threat scanner\trufos.sys TSKSP [A ] 40. d:\qq\qq医生 1.6beta\tsksp.sys Tencent TSKSP .text,.rdata,.data,INIT,.rsrc,.reloc, viaagp1 [A ] 41. c:\windows\system32\drivers\viaagp1.sys VIA Technologies, Inc. VIA NT AGP Filter .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, videX32 [A ] 42. c:\windows\system32\drivers\videx32.sys VIA Technologies, Inc. VIA Generic PCI IDE Bus Driver .text,.rdata,.data,INIT,.rsrc,.reloc, VMnetAdapter [A ] 43. c:\windows\system32\drivers\vmnetadapter.sys VMware, Inc. VMware virtual network adapter driver (32-bit) .text,.rdata,.data,INIT,.rsrc,.reloc, VMnetBridge [A ] 44. c:\windows\system32\drivers\vmnetbridge.sys VMware, Inc. VMware bridge driver (32-bit) .text,.rdata,.data,INIT,.rsrc,.reloc, VMnetuserif [A ] 45. c:\windows\system32\drivers\vmnetuserif.sys VMware, Inc. VMware network application interface driver (32-bit) .text,.rdata,.data,INIT,.rsrc,.reloc, vmx86 [A ] 46. c:\windows\system32\drivers\vmx86.sys VMware, Inc. VMware kernel driver .text,.rdata,.data,INIT,.rsrc,.reloc, vstor2 [A ] 47. c:\program files\common files\vmware\vmware virtual image editing\vstor2.sys VMware, Inc. VMware Virtual Storage Volume Driver .text,.rdata,.data,INIT,.rsrc,.reloc, WudfPf [A ] 48. c:\windows\system32\drivers\wudfpf.sys Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Platform Driver .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc, WudfRd [A ] 49. c:\windows\system32\drivers\wudfrd.sys Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Reflector .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, XSCUWZCH [A ] 50. c:\windows\system32\xscuwzch.sys zenx1 [A ] 51. d:\my documents\桌面\竞技探险挂\zenx.sys .text,.rdata,.data,INIT,.reloc, + 系统登陆自运行 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify Antiwpa [AM] 52. c:\windows\system32\antiwpa.dll AntiWPA3 for X86 .text,.rsrc,.reloc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {29CF293A-1E7D-4069-9E11-E39698D0AF95} [AM] 53. c:\program files\tencent\qqtoolbar\iebar.dll TENCENT QQ工具栏 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} [A ] 54. d:\program files\styler\tb\stylertb.dll StyleFantasist StylerToolbar .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {29CF293A-1E7D-4069-9E11-E39698D0AF95} [AM] 53. c:\program files\tencent\qqtoolbar\iebar.dll TENCENT QQ工具栏 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [AM] 55. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 56. e:\program files\浩方对战平台\gameclient.exe 上海浩方在线信息技术有限公司 浩方对战平台 .text,.rdata,.data,.rsrc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter application/octet-stream [AM] 57. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, application/x-complus [AM] 57. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, application/x-msdownload [AM] 57. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler KuGoo [A ] 58. c:\windows\system32\kugoo3downxcontrol.ocx 酷狗 酷狗音乐控件 .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc, KuGoo3 [A ] 58. c:\windows\system32\kugoo3downxcontrol.ocx 酷狗 酷狗音乐控件 .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 59. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, RISING [AM] 60. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, Shell Icon Handler for Application References [AM] 61. c:\windows\system32\dfshim.dll Microsoft Corporation Application Deployment Support Library .text,.data,.rsrc,.reloc, ShellLink for Application References [AM] 61. c:\windows\system32\dfshim.dll Microsoft Corporation Application Deployment Support Library .text,.data,.rsrc,.reloc, Microsoft.XPS.Shell.Metadata.1 [A ] 62. c:\windows\system32\xpsshhdr.dll Microsoft Corporation Package Document Shell Extension Handler .text,.data,.rsrc,.reloc, Microsoft.XPS.Shell.Thumbnail.1 [A ] 62. c:\windows\system32\xpsshhdr.dll Microsoft Corporation Package Document Shell Extension Handler .text,.data,.rsrc,.reloc, Microsoft Outlook Custom Icon Handler [A ] 63. c:\program files\microsoft office\office\olkfstub.dll Microsoft Corporation Microsoft Outlook Shell Hook for Start/Find .text,.data,.rsrc,.reloc, EncryptFile [A ] 64. e:\program files\wopti\woptiencryptmodule.dll 共软网络 Wopti 文件加密右键模块 CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, NvCpl DesktopContext Class [AM] 65. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc, Play on my TV helper [AM] 65. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc, Shell Extensions for RealOne Player [A ] 66. c:\program files\real\realplayer\rpshell.dll RealNetworks, Inc. RealPlayer Shell Extensions .text,.rdata,.data,.rsrc,.reloc, WinRAR shell extension [A ] 67. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, Portable Devices [A ] 68. c:\windows\system32\wpdshext.dll Microsoft Corporation Portable Devices Shell Extension .text,.data,.rsrc,.reloc, Portable Devices Menu [A ] 68. c:\windows\system32\wpdshext.dll Microsoft Corporation Portable Devices Shell Extension .text,.data,.rsrc,.reloc, Portable Media Devices [A ] 69. c:\windows\system32\audiodev.dll Microsoft Corporation Portable Media Devices Shell Extension .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {32CD708B-60A7-4C00-9377-D73EAA495F0F} [AM] 60. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad WPDShServiceObj [AM] 70. c:\windows\system32\wpdshserviceobj.dll Microsoft Corporation Windows Portable Device Shell Service Object .text,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKLM\Software\Microsoft\Windows\CurrentVersion\Run VStart [AM] 71. e:\工具箱\编程工具\音速启动\vstart.exe 3L软件工作室(3LSoft) 音速启动 - 您的启动专家 .text,.data,.rsrc, runeip [AM] 72. e:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, 飘雨系统修复 [AM] 73. c:\windows\system32\pysystem.exe BAL Studio应用程序 .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 74. c:\windows\system32\bsmain.exe Beijing Rising Information Technology Co., Ltd. Rising Antivirus 2008 .text,.rdata,.data,.rsrc,.reloc, + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 75. c:\program files\microsoft office\office\msohtmed.exe Microsoft Corporation Microsoft Office 2000 component .text,.data,.idata,.rsrc, htmlfile\Print\Command [A ] 75. c:\program files\microsoft office\office\msohtmed.exe Microsoft Corporation Microsoft Office 2000 component .text,.data,.idata,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 75. c:\program files\microsoft office\office\msohtmed.exe Microsoft Corporation Microsoft Office 2000 component .text,.data,.idata,.rsrc, htmlfile\Print\Command [A ] 75. c:\program files\microsoft office\office\msohtmed.exe Microsoft Corporation Microsoft Office 2000 component .text,.data,.idata,.rsrc, + HKCR\.mp3 mp3file\QQMusic.1.Play\Command [A ] 76. e:\program files\tencent\qqmusic\qqmusic.exe Tencent QQ音乐2008 .text,.rdata,.data,.rsrc, mp3file\QQMusic.2.Add\Command [A ] 76. e:\program files\tencent\qqmusic\qqmusic.exe Tencent QQ音乐2008 .text,.rdata,.data,.rsrc, + 其他自启动项目 + C:\WINDOWS\Tasks 整理任务 #00.job [A ] 77. e:\program files\网络+快系统\udefrag.exe DiskTrix Ultimate defragmenter ,,,.rsrc,,.mackt,.perplex, 入口点在最后一个节; + 正在运行的进程 + 00000188(392) alg.exe + 000001c0(448) smss.exe + 00000208(520) csrss.exe + 00000220(544) winlogon.exe 05000000[00001500] [AM] 52. c:\windows\system32\antiwpa.dll AntiWPA3 for X86 .text,.rsrc,.reloc, 72C80000[00008000] [ M] 78. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 0000024c(588) services.exe 46040000[0000F000] [ M] 79. c:\windows\apppatch\acadproc.dll Microsoft Corporation Windows Compatibility DLL .text,.data,.rsrc,.reloc, + 00000258(600) lsass.exe + 00000310(784) svchost.exe + 0000033c(828) svchost.exe + 00000388(904) svchost.exe + 000003c4(964) svchost.exe + 000003f0(1008) svchost.exe + 0000042c(1068) regedit.exe + 000005bc(1468) hnserv.exe 00400000[00012000] [AM] 4. e:\program files\hellonet\hnserv.exe 北京智慧门科技有限公司 Hellonet PPPoE Service .text,.rdata,.data,.rsrc, 5FF00000[00018000] [ M] 80. e:\program files\hellonet\hnlogic.dll 北京智慧门科技有限公司 HNLogic Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 5FF80000[00042000] [ M] 81. e:\program files\hellonet\hnkernel.dll 北京智慧门科技有限公司 HelloNet logic .text,.rdata,.data,.rsrc,.reloc, 5FFD0000[0002E000] [ M] 82. e:\program files\hellonet\ncutil.dll .text,.rdata,.data,.reloc, 5FF20000[00017000] [ M] 83. e:\program files\hellonet\plugins\msg.dll Communication module .text,.rdata,.data,.rsrc,.reloc, 5FED0000[0002F000] [ M] 84. e:\program files\hellonet\stulib.dll .text,.rdata,.data,.reloc, 10000000[0000E000] [ M] 85. e:\program files\hellonet\nclog.dll .text,.rdata,.data,.reloc, + 000005c8(1480) inetinfo.exe + 000005e0(1504) nvsvc32.exe 00400000[0002C000] [AM] 5. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 175.19 .text,.rdata,.data,.rsrc, 009D0000[0006A000] [ M] 86. c:\windows\system32\nvapi.dll NVIDIA Corporation NVIDIA NVAPI Library, Version 175.19 .text,.rdata,.data,.idata,.rsrc,.reloc, + 00000a64(2660) ras.exe 00400000[0000B000] [ M] 87. e:\program files\rising\antispyware\ras.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 88. e:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 89. e:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00047000] [ M] 90. e:\program files\rising\antispyware\kakamgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 91. e:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00A50000[00019000] [ M] 92. e:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00A80000[0001F000] [ M] 93. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00AA0000[00024000] [ M] 94. c:\program files\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00BF0000[0002E000] [ M] 95. e:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00E60000[00058000] [ M] 96. e:\program files\rising\antispyware\dbmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 97. e:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00EC0000[0002D000] [ M] 98. e:\program files\rising\antispyware\pweb.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00FF0000[000C1000] [ M] 99. e:\program files\rising\antispyware\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 010C0000[0002F000] [ M] 100. e:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01110000[00070000] [ M] 101. e:\program files\rising\antispyware\pset.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 011A0000[0002A000] [ M] 102. e:\program files\rising\antispyware\pdefend.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01270000[000B6000] [ M] 103. e:\program files\rising\antispyware\ptools.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 011D0000[0008C000] [ M] 104. e:\program files\rising\antispyware\psysinfo.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01450000[0001C000] [AM] 60. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 105. e:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01CB0000[00085000] [ M] 106. e:\program files\rising\antispyware\kengine.dll Beijing Rising Information Technology Co., Ltd. KEngine .text,.rdata,.data,.rsrc,.reloc, 01D40000[00045000] [ M] 107. e:\program files\rising\antispyware\posttrt.dll Beijing Rising Information Technology Co., Ltd. PostTrt .text,.rdata,.data,.rsrc,.reloc, 01D90000[00010000] [ M] 108. e:\program files\rising\antispyware\kscanex.dll Beijing Rising Information Technology Co., Ltd. KEngine ScanEx .text,.rdata,.data,.rsrc,.reloc, 01DB0000[0002F000] [ M] 109. e:\program files\rising\antispyware\engine.dll Beijing Rising Information Technology Co., Ltd. kaka engine .text,.rdata,.data,.rsrc,.reloc, 01DF0000[00033000] [ M] 110. e:\program files\rising\antispyware\rsdialog.dll Beijing Rising Information Technology Co., Ltd. Rsdiaglo DLL .text,.rdata,.data,.rsrc,.reloc, + 00000a88(2696) knownsvr.exe 00400000[00072000] [ M] 111. e:\program files\rising\antispyware\knownsvr.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[0002F000] [ M] 100. e:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00980000[0002E000] [ M] 95. e:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 009B0000[00019000] [ M] 92. e:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, + 00000b3c(2876) Explorer.EXE 021E0000[00D0D000] [AM] 65. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc, 00C00000[0006A000] [ M] 86. c:\windows\system32\nvapi.dll NVIDIA Corporation NVIDIA NVAPI Library, Version 175.19 .text,.rdata,.data,.idata,.rsrc,.reloc, 164A0000[00023000] [AM] 70. c:\windows\system32\wpdshserviceobj.dll Microsoft Corporation Windows Portable Device Shell Service Object .text,.data,.rsrc,.reloc, 109C0000[0002C000] [ M] 112. c:\windows\system32\portabledevicetypes.dll Microsoft Corporation Windows Portable Device (Parameter) Types Component .text,.orpc,.data,.rsrc,.reloc, 10930000[00049000] [ M] 113. c:\windows\system32\portabledeviceapi.dll Microsoft Corporation Windows Portable Device API Components .text,.orpc,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 78. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 10000000[00028000] [ M] 114. c:\program files\rising\rav\ravscrch.dll Beijing Rising Information Technology Co., Ltd. RavScrCh Module .text,.rdata,.data,.rsrc,.reloc, 60510000[00019000] [AM] 61. c:\windows\system32\dfshim.dll Microsoft Corporation Application Deployment Support Library .text,.data,.rsrc,.reloc, 79000000[00046000] [AM] 57. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, 79E70000[0058F000] [ M] 115. c:\windows\microsoft.net\framework\v2.0.50727\mscorwks.dll Microsoft Corporation Microsoft .NET Runtime Common Language Runtime - WorkStation .text,.CLR_UEF,.data,.rsrc,.reloc, 641F0000[0001E000] [ M] 116. c:\windows\microsoft.net\framework\v2.0.50727\shfusion.dll Microsoft Corporation Microsoft COM Runtime Fusion Assembly Viewer .text,.data,.rsrc,.reloc, 60610000[00006000] [ M] 117. c:\windows\microsoft.net\framework\v2.0.50727\fusion.dll Microsoft Corporation Assembly manager .text,.data,.rsrc,.reloc, 60340000[00008000] [ M] 118. c:\windows\microsoft.net\framework\v2.0.50727\culture.dll Microsoft Corporation Microsoft Globalization Support .text,.data,.rsrc,.reloc, 64220000[00018000] [ M] 119. c:\windows\microsoft.net\framework\v2.0.50727\zh-chs\shfusres.dll Microsoft Corporation Microsoft COM 运行时合成程序集查看器资源 .text,.data,.rsrc,.reloc, 23700000[00028000] [ M] 120. c:\program files\rising\rav\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000b98(2968) VStart.exe 00400000[00230000] [AM] 71. e:\工具箱\编程工具\音速启动\vstart.exe 3L软件工作室(3LSoft) 音速启动 - 您的启动专家 .text,.data,.rsrc, 73390000[00153000] [ M] 121. c:\windows\system32\msvbvm60.dll Microsoft Corporation Visual Basic Virtual Machine .text,ENGINE,.data,.rsrc,.reloc, 66630000[0001C000] [ M] 122. c:\windows\system32\vb6chs.dll Microsoft Corporation Visual Basic Environment International Resources .rdata,.rsrc,.reloc, + 00000bb0(2992) RUNDLL32.EXE 10000000[00017000] [ M] 123. c:\windows\system32\nvmctray.dll NVIDIA Corporation NVIDIA Media Center Library .text,.rdata,.data,.rsrc,.reloc, 00AB0000[0006A000] [ M] 86. c:\windows\system32\nvapi.dll NVIDIA Corporation NVIDIA NVAPI Library, Version 175.19 .text,.rdata,.data,.idata,.rsrc,.reloc, + 00000bb8(3000) rstray.exe 00400000[00023000] [AM] 72. e:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, 10000000[0003C000] [ M] 124. e:\program files\rising\antispyware\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 97. e:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 91. e:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 89. e:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00AC0000[00024000] [ M] 125. e:\program files\rising\antispyware\comserv.dll Beijing Rising Information Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 00990000[00019000] [ M] 92. e:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 23700000[00026000] [ M] 126. e:\program files\rising\antispyware\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B10000[0002E000] [ M] 95. e:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 105. e:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00F70000[0005C000] [ M] 127. e:\program files\rising\antispyware\runiep.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware tray .text,.rdata,.data,.rsrc,.reloc, 00FE0000[0001F000] [ M] 93. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01000000[00024000] [ M] 94. c:\program files\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 02EF0000[0001C000] [AM] 60. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + 00000bc8(3016) pysystem.exe 00400000[00037000] [AM] 73. c:\windows\system32\pysystem.exe BAL Studio应用程序 .text,.rdata,.data,.rsrc, + 00000d78(3448) ctfmon.exe + 00000dbc(3516) TTPlayer.exe 00400000[000F9000] [ M] 128. d:\新建文件夹\ttplayer\ttplayer.exe Alen Soft 千千静听 .text,.rdata,.data,.rsrc, 60000000[00057000] [ M] 129. d:\新建文件夹\ttplayer\ttpcomm.dll .text,text,.rdata,.data,.tls,.reloc, 6FF50000[00040000] [ M] 130. d:\新建文件夹\ttplayer\ttpres.dll Alen Soft 千千静听 .rsrc,.reloc, 00CA0000[00006000] [ M] 131. d:\新建文件夹\ttplayer\msdmo.dll Microsoft Corporation DMO Runtime .text,.data,.rsrc,.reloc, 10000000[00033000] [ M] 132. e:\program files\kmplayer\kmplayer plus\codecs\sonichddemuxer.dll Sonic HD Demuxer .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 133. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 134. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 0BEF0000[00037000] [ M] 135. c:\windows\system32\mfplat.dll Microsoft Corporation Media Foundation Platform DLL .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 78. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 60150000[0000D000] [ M] 136. d:\新建文件夹\ttplayer\addin\ttp_asf.dll .text,.rdata,.data,.rsrc,.reloc, 01FA0000[0004C000] [ M] 137. d:\新建文件夹\ttplayer\addin\ttp_aac.dll .text,.rdata,.data,.rsrc,.reloc, 01FF0000[00021000] [ M] 138. d:\新建文件夹\ttplayer\addin\ttp_ac3dts.dll .text,.rdata,.data,.rsrc,.reloc, + 00000f0c(3852) IEXPLORE.EXE 10000000[000D7000] [AM] 53. c:\program files\tencent\qqtoolbar\iebar.dll TENCENT QQ工具栏 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, 025D0000[000D7000] [ M] 139. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\toolbar.dll TENCENT QQ工具栏 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, 027D0000[00018000] [ M] 140. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\tbaddr.dll TENCENT QQ工具栏—搜索 .text,.rdata,.data,.rsrc,.reloc, 02840000[00014000] [ M] 141. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\qqmail.dll TENCENT QQ工具栏－邮件 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 02870000[00033000] [ M] 142. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\shuqian.dll TENCENT QQ工具栏—书签 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 028C0000[00013000] [ M] 143. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\wenwen.dll TENCENT QQ工具栏—问问 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 02900000[00021000] [ M] 144. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\weather.dll TENCENT QQ工具栏－天气 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, 02930000[0000C000] [ M] 145. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\highlight.dll TENCENT QQ工具栏－高亮 .text,.rdata,.data,.rsrc,.reloc, 02950000[0000B000] [ M] 146. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\qqdoctor.dll TENCENT QQ工具栏－QQ医生 .text,.rdata,.data,.rsrc,.reloc, 02970000[00018000] [ M] 147. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\popupblocker.dll TENCENT QQ工具栏—广告拦截 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 029A0000[00018000] [ M] 148. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\paipai.dll TENCENT QQ工具栏—拍拍购物 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 028F0000[00009000] [ M] 149. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\qzone.dll TENCENT QQ工具栏—QQ空间 .text,.rdata,.data,.rsrc,.reloc, 029F0000[00028000] [ M] 150. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\musicbox.dll TENCENT QQ工具栏—音乐盒 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, 02A30000[0001A000] [ M] 151. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\mailnote.dll TENCENT QQ工具栏—记事本 .text,.rdata,.data,.mailnot,.webslic,.rsrc,.reloc, 02A60000[00013000] [ M] 152. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\hot.dll TENCENT QQ工具栏－活动 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 02BB0000[00018000] [AM] 55. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, 02BD0000[00011000] [ M] 153. e:\program files\rising\antispyware\urlrule.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlRule Library .text,.rdata,.data,.rsrc,.reloc, 033B0000[0000A000] [ M] 154. d:\qq\txpfproxy.dll .text,.orpc,.rdata,.data,.rsrc,.reloc, 039F0000[00028000] [ M] 114. c:\program files\rising\rav\ravscrch.dll Beijing Rising Information Technology Co., Ltd. RavScrCh Module .text,.rdata,.data,.rsrc,.reloc, 30000000[003AF000] [ M] 155. c:\windows\system32\macromed\flash\flash9f.ocx Adobe Systems, Inc. Adobe Flash Player 9.0 r124 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 78. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 083D0000[00097000] [ M] 156. c:\windows\system32\jj.ime 加加工作组 加加输入法 5.0 .text,.rdata,.data,.rsrc,.reloc, 79000000[00046000] [AM] 57. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, 63F00000[0000C000] [ M] 157. c:\windows\microsoft.net\framework\v2.0.50727\mscorie.dll Microsoft Corporation Microsoft .NET IE MIME Filter .text,.data,.rsrc,.reloc, + 00000fc8(4040) iexplore.exe 10000000[000D7000] [AM] 53. c:\program files\tencent\qqtoolbar\iebar.dll TENCENT QQ工具栏 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, 025D0000[000D7000] [ M] 139. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\toolbar.dll TENCENT QQ工具栏 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, 027D0000[00018000] [ M] 140. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\tbaddr.dll TENCENT QQ工具栏—搜索 .text,.rdata,.data,.rsrc,.reloc, 02840000[00014000] [ M] 141. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\qqmail.dll TENCENT QQ工具栏－邮件 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 02870000[00033000] [ M] 142. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\shuqian.dll TENCENT QQ工具栏—书签 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 028C0000[00013000] [ M] 143. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\wenwen.dll TENCENT QQ工具栏—问问 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 02900000[00021000] [ M] 144. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\weather.dll TENCENT QQ工具栏－天气 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, 02930000[0000C000] [ M] 145. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\highlight.dll TENCENT QQ工具栏－高亮 .text,.rdata,.data,.rsrc,.reloc, 02950000[0000B000] [ M] 146. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\qqdoctor.dll TENCENT QQ工具栏－QQ医生 .text,.rdata,.data,.rsrc,.reloc, 02970000[00018000] [ M] 147. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\popupblocker.dll TENCENT QQ工具栏—广告拦截 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 029A0000[00018000] [ M] 148. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\paipai.dll TENCENT QQ工具栏—拍拍购物 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 028F0000[00009000] [ M] 149. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\qzone.dll TENCENT QQ工具栏—QQ空间 .text,.rdata,.data,.rsrc,.reloc, 029F0000[00028000] [ M] 150. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\musicbox.dll TENCENT QQ工具栏—音乐盒 .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc, 02A30000[0001A000] [ M] 151. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\mailnote.dll TENCENT QQ工具栏—记事本 .text,.rdata,.data,.mailnot,.webslic,.rsrc,.reloc, 02A60000[00013000] [ M] 152. c:\documents and settings\administrator\application data\tencent\qqtoolbar\buttons\hot.dll TENCENT QQ工具栏－活动 .text,.rdata,.data,.toolbar,.rsrc,.reloc, 02BB0000[00018000] [AM] 55. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, 02BD0000[00011000] [ M] 153. e:\program files\rising\antispyware\urlrule.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlRule Library .text,.rdata,.data,.rsrc,.reloc, 03DA0000[00028000] [ M] 114. c:\program files\rising\rav\ravscrch.dll Beijing Rising Information Technology Co., Ltd. RavScrCh Module .text,.rdata,.data,.rsrc,.reloc, 00EA0000[00097000] [ M] 156. c:\windows\system32\jj.ime 加加工作组 加加输入法 5.0 .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 78. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 00E90000[0000A000] [ M] 154. d:\qq\txpfproxy.dll .text,.orpc,.rdata,.data,.rsrc,.reloc, 30000000[003AF000] [ M] 155. c:\windows\system32\macromed\flash\flash9f.ocx Adobe Systems, Inc. Adobe Flash Player 9.0 r124 .text,.rdata,.data,.rodata,.rsrc,.reloc,