瑞星卡卡电脑诊断日志 v1.30 (2008-8-25 15:19:59)  北京瑞星信息技术有限公司

注释:	[A]表示该文件存在自启动关联;
	[M]表示该文件在内存中;

+ 注册表自运行项目 
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      aspnet_state
        [A ] 1. c:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe


      BITS
        [AM] 2. c:\windows\system32\misp.dll


      CertSvc
        [AM] 3. c:\windows\system32\state\smss.exe


      clr_optimization_v2.0.50727_32
        [A ] 4. c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe


      Media Center Receiver Service
        [A ] 5. c:\windows\system32\beal.exe


      Microsoftsvncy
        [A ] 6. c:\windows\aimesa


      MSSQLServerADHelper
        [A ] 7. c:\program files\microsoft sql server\80\tools\binn\sqladhlp.exe


      NVSvc
        [AM] 8. c:\windows\system32\nvsvc32.exe


      RemoteDesktop
        [AM] 9. c:\windows\downloaded program files\


      RfwProxySrv
        [AM] 10. d:\program files\rising\rfw\rfwproxy.exe


      RfwService
        [AM] 11. d:\program files\rising\rfw\rfwsrv.exe


      RsCCenter
        [AM] 12. d:\program files\rising\rav\ccenter.exe


      RsRavMon
        [AM] 13. d:\program files\rising\rav\ravmond.exe


      TongBackupSrv
        [A ] 14. c:\windows\system32\tongbackupsrv.exe


      UFNet
        [AM] 15. c:\windows\system32\servernt.exe


      UpdotServer
        [AM] 16. c:\windows\system32\winupdot.exe


      wbengins
        [A ] 17. c:\windows\system32\odsvc.exe


      webServer
        [AM] 18. c:\documents and settings\all users\webserver.exe


      windows_0
        [AM] 19. c:\windows\system32\tcpsrv1.exe




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      ALCXWDM
        [A ] 20. c:\windows\system32\drivers\alcxwdm.sys


      AmdK8
        [A ] 21. c:\windows\system32\drivers\amdk8.sys


      AmdLLD
        [A ] 22. c:\windows\system32\drivers\amdlld.sys


      HookCont
        [A ] 23. c:\windows\system32\drivers\hookcont.sys


      HookNtos
        [A ] 24. c:\windows\system32\drivers\hookntos.sys


      HookReg
        [A ] 25. c:\windows\system32\drivers\hookreg.sys


      HookSys
        [A ] 26. c:\windows\system32\drivers\hooksys.sys


      HookUrl
        [A ] 27. d:\program files\rising\rfw\hookurl.sys


      nvatabus
        [A ] 28. c:\windows\system32\drivers\nvatabus.sys


      nvgts
        [A ] 29. c:\windows\system32\drivers\nvgts.sys


      RfwBase
        [A ] 30. c:\windows\system32\drivers\rfwbase.sys


      RsFwDrv
        [A ] 31. d:\program files\rising\rfw\rsfwdrv.sys


      RsNTGDI
        [A ] 32. c:\windows\system32\drivers\rsntgdi.sys


      RTL8023xp
        [A ] 33. c:\windows\system32\drivers\rtnicxp.sys


      Secdrv
        [A ] 34. c:\windows\system32\drivers\secdrv.sys


      sense4v2
        [A ] 35. c:\windows\system32\drivers\sense4v2.sys


      Sentinel
        [A ] 36. c:\windows\system32\drivers\sentinel.sys


      Tcpip
        [A ] 37. c:\windows\system32\drivers\tcpip.sys




  + 系统登陆自运行
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      WgaLogon
        [AM] 38. c:\windows\system32\wgalogon.dll




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {00000000-12C9-4305-82F9-43058F20E8D2}
        [AM] 39. d:\program files\tencent\qqdownload\qqiehelper02.dll


      {6A49F431-2A2E-41a5-9080-0F41D1A3AEC2}
        [AM] 40. c:\program files\iefxz\iefxz.dll


      {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
        [AM] 41. c:\windows\system32\urlfilter.dll



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 42. c:\windows\network diagnostic\xpnetdiag.exe


      Exec
        [A ] 43. c:\program files\messenger\msmsgs.exe




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      application/octet-stream
        [AM] 44. c:\windows\system32\mscoree.dll


      application/x-complus
        [AM] 44. c:\windows\system32\mscoree.dll


      application/x-msdownload
        [AM] 44. c:\windows\system32\mscoree.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 45. c:\windows\system32\hticons.dll


      NvCpl DesktopContext Class
        [AM] 46. c:\windows\system32\nvcpl.dll


      Play on my TV helper
        [AM] 46. c:\windows\system32\nvcpl.dll


      WinRAR shell extension
        [AM] 47. c:\program files\winrar\rarext.dll


      ShellLink for Application References
        [A ] 48. c:\windows\system32\dfshim.dll


      Shell Icon Handler for Application References
        [A ] 48. c:\windows\system32\dfshim.dll


      RISING
        [AM] 49. c:\windows\system32\ravext.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 49. c:\windows\system32\ravext.dll




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      SoundMan
        [AM] 50. c:\windows\soundman.exe


      amd_dc_opt
        [A ] 51. c:\program files\amd\dual-core optimizer\amd_dc_opt.exe


      RavTask
        [AM] 52. d:\program files\rising\rav\ravtask.exe


      RfwMain
        [AM] 53. d:\program files\rising\rfw\rfwmain.exe


      mynewpad
        [AM] 54. d:\program files\手写系统\mynewpad.exe




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 55. c:\windows\system32\bsmain.exe

        [A ] 56. c:\windows\system32\kknative.exe




  + 程序初始化和已知动态连接库
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      AppInit_DLLs
        [AM] 57. c:\windows\system32\kmon.dll





+ 正在运行的进程
  + 000000e8(232) Explorer.EXE
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    10000000[0001C000]
      [AM] 49. c:\windows\system32\ravext.dll


    023E0000[00845000]
      [AM] 46. c:\windows\system32\nvcpl.dll


    72C80000[00008000]
      [ M] 61. c:\windows\system32\msacm32.drv


    02C70000[00060000]
      [ M] 62. c:\windows\system32\nvapi.dll


    71800000[0007C000]
      [ M] 63. c:\windows\system32\shdoclc.dll


    03FD0000[0002E000]
      [AM] 47. c:\program files\winrar\rarext.dll


    23700000[00028000]
      [ M] 64. d:\program files\rising\rav\rscommon.dll



  + 00000118(280) RfwMain.exe
    00400000[00092000]
      [AM] 53. d:\program files\rising\rfw\rfwmain.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    26600000[000A8000]
      [ M] 68. d:\program files\rising\rfw\rsguilib.dll


    10000000[0001F000]
      [ M] 69. d:\program files\rising\rfw\proccom.dll


    00A60000[00024000]
      [ M] 70. d:\program files\rising\rfw\rscommx2.dll


    00BA0000[0000E000]
      [ M] 71. d:\program files\rising\rfw\rsappmgr.dll


    00BC0000[00030000]
      [ M] 72. d:\program files\rising\rfw\cfgdll.dll


    23700000[00028000]
      [ M] 73. d:\program files\rising\rfw\rscommon.dll


    00E10000[00014000]
      [ M] 74. d:\program files\rising\rfw\rfwctrl.dll


    23800000[00022000]
      [ M] 75. d:\program files\rising\rfw\rsxml.dll


    23900000[00040000]
      [ M] 76. d:\program files\rising\rfw\pngdll.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    01300000[0000F000]
      [ M] 77. d:\program files\rising\rfw\rfwrule.dll



  + 0000017c(380) svchost.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    10000000[00015000]
      [AM] 2. c:\windows\system32\misp.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 000001d4(468) smss.exe
    00400000[00076000]
      [AM] 3. c:\windows\system32\state\smss.exe


    73390000[00153000]
      [ M] 78. c:\windows\system32\msvbvm60.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    66630000[0001C000]
      [ M] 79. c:\windows\system32\vb6chs.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    10000000[0000C000]
      [ M] 80. c:\windows\system32\ntsvc.ocx


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 00000250(592) smss.exe

  + 000002a0(672) csrss.exe
    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 000002b8(696) winlogon.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    73D50000[00003000]
      [AM] 38. c:\windows\system32\wgalogon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    72C80000[00008000]
      [ M] 61. c:\windows\system32\msacm32.drv



  + 000002e4(740) services.exe
    46040000[0000F000]
      [ M] 81. c:\windows\apppatch\acadproc.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 000002f0(752) lsass.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 00000384(900) svchost.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 000003e0(992) svchost.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 00000424(1060) services.exe
    00400000[00008000]
      [ M] 82. c:\windows\system32\state\services.exe


    73390000[00153000]
      [ M] 78. c:\windows\system32\msvbvm60.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    66630000[0001C000]
      [ M] 79. c:\windows\system32\vb6chs.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 00000448(1096) wuauclt.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    50E60000[0000C000]
      [ M] 83. c:\windows\system32\wups2.dll



  + 00000458(1112) CCenter.exe
    00400000[0002A000]
      [AM] 12. d:\program files\rising\rav\ccenter.exe


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 00000468(1128) svchost.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    50E60000[0000C000]
      [ M] 83. c:\windows\system32\wups2.dll



  + 00000490(1168) sqlservr.exe
    00400000[0072D000]
      [ M] 84. c:\program files\microsoft sql server\mssql\binn\sqlservr.exe


    41060000[00006000]
      [ M] 85. c:\program files\microsoft sql server\mssql\binn\opends60.dll


    41070000[0000D000]
      [ M] 86. c:\program files\microsoft sql server\mssql\binn\ums.dll


    42AE0000[00090000]
      [ M] 87. c:\program files\microsoft sql server\mssql\binn\sqlsort.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    41080000[00007000]
      [ M] 88. c:\program files\microsoft sql server\mssql\binn\resources\2052\sqlevn70.rll


    42CF0000[00015000]
      [ M] 89. c:\program files\microsoft sql server\mssql\binn\ssnetlib.dll


    410D0000[00006000]
      [ M] 90. c:\program files\microsoft sql server\mssql\binn\ssnmpn70.dll


    42CD0000[00007000]
      [ M] 91. c:\program files\microsoft sql server\mssql\binn\ssmslpcn.dll


    4DDE0000[00081000]
      [ M] 92. c:\program files\common files\system\ole db\sqloledb.dll


    42F00000[00006000]
      [ M] 93. c:\program files\microsoft sql server\mssql\binn\xpsqlbot.dll


    419A0000[00010000]
      [ M] 94. c:\program files\microsoft sql server\mssql\binn\odsole70.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    10000000[0001C000]
      [AM] 49. c:\windows\system32\ravext.dll


    410F0000[00047000]
      [ M] 95. c:\program files\microsoft sql server\mssql\binn\xpstar.dll


    42AC0000[00007000]
      [ M] 96. c:\program files\microsoft sql server\mssql\binn\sqlresld.dll


    42C40000[00017000]
      [ M] 97. c:\program files\microsoft sql server\mssql\binn\sqlsvc.dll


    4B4F0000[00006000]
      [ M] 98. c:\windows\system32\odbcbcp.dll


    41140000[0000C000]
      [ M] 99. c:\program files\microsoft sql server\mssql\binn\w95scm.dll


    43970000[00006000]
      [ M] 100. c:\program files\microsoft sql server\mssql\binn\resources\2052\sqlsvc.rll


    439E0000[00009000]
      [ M] 101. c:\program files\microsoft sql server\mssql\binn\resources\2052\xpstar.rll



  + 000004bc(1212) svchost.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 000004e0(1248) IEXPLORE.EXE
    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    72C80000[00008000]
      [ M] 61. c:\windows\system32\msacm32.drv



  + 00000514(1300) rfwsrv.exe
    00400000[00037000]
      [AM] 11. d:\program files\rising\rfw\rfwsrv.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    10000000[0001F000]
      [ M] 69. d:\program files\rising\rfw\proccom.dll


    007C0000[00024000]
      [ M] 70. d:\program files\rising\rfw\rscommx2.dll


    00810000[0000E000]
      [ M] 71. d:\program files\rising\rfw\rsappmgr.dll


    00830000[00030000]
      [ M] 72. d:\program files\rising\rfw\cfgdll.dll


    00B50000[0000F000]
      [ M] 77. d:\program files\rising\rfw\rfwrule.dll


    00B60000[0000C000]
      [ M] 102. d:\program files\rising\rfw\rfwlog.dll


    00B70000[00018000]
      [ M] 103. d:\program files\rising\rfw\rfwdrv.dll


    00B90000[0000E000]
      [ M] 104. d:\program files\rising\rfw\ijt_ctrl.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    00BC0000[00016000]
      [ M] 105. d:\program files\rising\rfw\unvdet.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    00C10000[0001B000]
      [ M] 106. d:\program files\rising\rfw\mports.dll



  + 0000051c(1308) ravmond.exe
    00400000[00069000]
      [AM] 13. d:\program files\rising\rav\ravmond.exe


    10000000[00042000]
      [ M] 107. d:\program files\rising\rav\bwlist.dll


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    00A70000[0000E000]
      [ M] 108. d:\program files\rising\rav\rsappmgr.dll


    00A90000[00030000]
      [ M] 109. d:\program files\rising\rav\cfgdll.dll


    00D00000[00067000]
      [ M] 110. d:\program files\rising\rav\rslog.dll


    00D70000[0001F000]
      [ M] 111. d:\program files\rising\rav\proccom.dll


    00D90000[00024000]
      [ M] 112. d:\program files\rising\rav\rscommx2.dll


    00DE0000[00075000]
      [ M] 113. d:\program files\rising\rav\monrule.dll


    00E70000[00013000]
      [ M] 114. d:\program files\rising\rav\hooksys.dll


    00FD0000[00013000]
      [ M] 115. d:\program files\rising\rav\hookreg.dll


    01030000[00013000]
      [ M] 116. d:\program files\rising\rav\hookntos.dll


    01090000[0001D000]
      [ M] 117. d:\program files\rising\rav\rswalmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    01EF0000[00035000]
      [ M] 118. d:\program files\rising\rav\recomp.dll


    01F40000[00036000]
      [ M] 119. d:\program files\rising\rav\refs.dll


    01F90000[00023000]
      [ M] 120. d:\program files\rising\rav\ffr.dll


    01FD0000[00020000]
      [ M] 121. d:\program files\rising\rav\rsstore.dll


    02000000[00013000]
      [ M] 122. d:\program files\rising\rav\hookcont.dll


    02030000[00028000]
      [ M] 123. d:\program files\rising\rav\fakescan.dll


    02070000[00022000]
      [ M] 124. d:\program files\rising\rav\scanner.dll


    025A0000[000DC000]
      [ M] 125. d:\program files\rising\rav\extfile.dll


    02690000[00027000]
      [ M] 126. d:\program files\rising\rav\pearc.dll


    027E0000[0002F000]
      [ M] 127. d:\program files\rising\rav\viruslib.dll


    02920000[00028000]
      [ M] 128. d:\program files\rising\rav\relibldr.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    02F50000[00012000]
      [ M] 129. d:\program files\rising\rav\hookweb.dll


    04740000[00021000]
      [ M] 130. d:\program files\rising\rav\nvfile.dll


    13AB0000[0004A000]
      [ M] 131. d:\program files\rising\rav\scanexec.dll


    06030000[002DC000]
      [ M] 132. d:\program files\rising\rav\unexe.dll


    06320000[000D4000]
      [ M] 133. d:\program files\rising\rav\scanex.dll


    06880000[00036000]
      [ M] 134. d:\program files\rising\rav\scanpack.dll


    068D0000[000B7000]
      [ M] 135. d:\program files\rising\rav\revm.dll


    06AC0000[00020000]
      [ M] 136. d:\program files\rising\rav\urutils.dll


    06AF0000[00018000]
      [ M] 137. d:\program files\rising\rav\ur000.dat


    06C50000[00038000]
      [ M] 138. d:\program files\rising\rav\scriptci.dll


    06CA0000[0001D000]
      [ M] 139. d:\program files\rising\rav\ur001.dat


    05650000[000F3000]
      [ M] 140. d:\program files\rising\rav\uroutine.dll


    05E80000[00045000]
      [ M] 141. d:\program files\rising\rav\posttrt.dll


    14210000[00038000]
      [ M] 142. d:\program files\rising\rav\extmail.dll


    03210000[00023000]
      [ M] 143. d:\program files\rising\rav\scansct.dll


    07160000[00045000]
      [ M] 144. d:\program files\rising\rav\extole.dll



  + 00000548(1352) rfwProxy.exe
    00400000[00236000]
      [AM] 10. d:\program files\rising\rfw\rfwproxy.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    10000000[0001F000]
      [ M] 69. d:\program files\rising\rfw\proccom.dll


    009D0000[00024000]
      [ M] 70. d:\program files\rising\rfw\rscommx2.dll


    00A10000[0000F000]
      [ M] 77. d:\program files\rising\rfw\rfwrule.dll


    00A20000[00011000]
      [ M] 145. d:\program files\rising\rfw\urlrule.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    011C0000[00016000]
      [ M] 146. d:\program files\rising\rfw\monmid.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 000005b4(1460) nvsvc32.exe
    00400000[0002B000]
      [AM] 8. c:\windows\system32\nvsvc32.exe


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    008F0000[00060000]
      [ M] 62. c:\windows\system32\nvapi.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 000005f4(1524) 
    00400000[00108000]
      [AM] 9. c:\windows\downloaded program files\


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    72C80000[00008000]
      [ M] 61. c:\windows\system32\msacm32.drv



  + 00000658(1624) rfwstub.exe
    00400000[00017000]
      [ M] 147. d:\program files\rising\rfw\rfwstub.exe


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    23700000[00028000]
      [ M] 73. d:\program files\rising\rfw\rscommon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 00000704(1796) spoolsv.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 00000774(1908) RavStub.exe
    00400000[00021000]
      [ M] 148. d:\program files\rising\rav\ravstub.exe


    10000000[0001F000]
      [ M] 111. d:\program files\rising\rav\proccom.dll


    00620000[00024000]
      [ M] 112. d:\program files\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 64. d:\program files\rising\rav\rscommon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 00000808(2056) SOUNDMAN.EXE
    00400000[0008F000]
      [AM] 50. c:\windows\soundman.exe


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 00000820(2080) WinUpdot.exe
    00400000[00048000]
      [AM] 16. c:\windows\system32\winupdot.exe


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    10000000[00128000]
      [ M] 149. c:\windows\temp\e_4\krnln.fnr


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    00BB0000[0001E000]
      [ M] 150. c:\windows\temp\e_4\dp1.fne



  + 0000089c(2204) RavTask.exe
    00400000[00034000]
      [AM] 52. d:\program files\rising\rav\ravtask.exe


    10000000[0001F000]
      [ M] 111. d:\program files\rising\rav\proccom.dll


    00940000[00024000]
      [ M] 112. d:\program files\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 64. d:\program files\rising\rav\rscommon.dll


    00BA0000[0000E000]
      [ M] 108. d:\program files\rising\rav\rsappmgr.dll


    08BC0000[00030000]
      [ M] 109. d:\program files\rising\rav\cfgdll.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 00000938(2360) Ravmon.exe
    00400000[00067000]
      [ M] 151. d:\program files\rising\rav\ravmon.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    10000000[0001F000]
      [ M] 111. d:\program files\rising\rav\proccom.dll


    00A30000[00024000]
      [ M] 112. d:\program files\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 64. d:\program files\rising\rav\rscommon.dll


    00C80000[00035000]
      [ M] 118. d:\program files\rising\rav\recomp.dll


    00CD0000[00036000]
      [ M] 119. d:\program files\rising\rav\refs.dll


    00F30000[0002F000]
      [ M] 127. d:\program files\rising\rav\viruslib.dll


    01070000[00028000]
      [ M] 128. d:\program files\rising\rav\relibldr.dll


    010F0000[0000E000]
      [ M] 108. d:\program files\rising\rav\rsappmgr.dll


    01110000[00030000]
      [ M] 109. d:\program files\rising\rav\cfgdll.dll


    01270000[00075000]
      [ M] 113. d:\program files\rising\rav\monrule.dll


    23900000[00040000]
      [ M] 152. d:\program files\rising\rav\pngdll.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    26600000[000A8000]
      [ M] 153. d:\program files\rising\rav\rsguilib.dll


    23800000[00022000]
      [ M] 154. d:\program files\rising\rav\rsxml.dll



  + 000009bc(2492) mynewpad.exe
    00400000[0006A000]
      [AM] 54. d:\program files\手写系统\mynewpad.exe


    00380000[0000E000]
      [ M] 155. d:\program files\手写系统\padcom.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 000009e0(2528) ctfmon.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 00000ab0(2736) IEXPLORE.EXE
    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    10000000[00032000]
      [AM] 39. d:\program files\tencent\qqdownload\qqiehelper02.dll


    01790000[00991000]
      [AM] 40. c:\program files\iefxz\iefxz.dll


    02580000[00018000]
      [AM] 41. c:\windows\system32\urlfilter.dll


    025B0000[00011000]
      [ M] 156. d:\program files\rising\antispyware\urlrule.dll



  + 00000acc(2764) csrss.exe
    00400000[0001B000]
      [ M] 157. c:\windows\system32\state\csrss.exe


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll



  + 00000b50(2896) webserver.exe
    00400000[00048000]
      [AM] 18. c:\documents and settings\all users\webserver.exe


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    10000000[00128000]
      [ M] 149. c:\windows\temp\e_4\krnln.fnr


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    00BB0000[0001E000]
      [ M] 150. c:\windows\temp\e_4\dp1.fne



  + 00000b68(2920) IEXPLORE.EXE
    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    10000000[00032000]
      [AM] 39. d:\program files\tencent\qqdownload\qqiehelper02.dll


    01790000[00991000]
      [AM] 40. c:\program files\iefxz\iefxz.dll


    02580000[00018000]
      [AM] 41. c:\windows\system32\urlfilter.dll


    025B0000[00011000]
      [ M] 156. d:\program files\rising\antispyware\urlrule.dll



  + 00000bf8(3064) tcpsrv1.exe
    00400000[0004E000]
      [AM] 19. c:\windows\system32\tcpsrv1.exe


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll



  + 00000c84(3204) sqlagent.EXE
    00400000[0004F000]
      [ M] 158. c:\program files\microsoft sql server\mssql\binn\sqlagent.exe


    42AC0000[00007000]
      [ M] 96. c:\program files\microsoft sql server\mssql\binn\sqlresld.dll


    42C40000[00017000]
      [ M] 97. c:\program files\microsoft sql server\mssql\binn\sqlsvc.dll


    4B4F0000[00006000]
      [ M] 98. c:\windows\system32\odbcbcp.dll


    41140000[0000C000]
      [ M] 99. c:\program files\microsoft sql server\mssql\binn\w95scm.dll


    41E90000[00010000]
      [ M] 159. c:\program files\microsoft sql server\mssql\binn\semmap.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    43970000[00006000]
      [ M] 100. c:\program files\microsoft sql server\mssql\binn\resources\2052\sqlsvc.rll


    43320000[00008000]
      [ M] 160. c:\program files\microsoft sql server\mssql\binn\resources\2052\semmap.rll


    436A0000[0000D000]
      [ M] 161. c:\program files\microsoft sql server\mssql\binn\resources\2052\sqlagent.rll


    42200000[00007000]
      [ M] 162. c:\program files\microsoft sql server\mssql\binn\sqlagent.dll


    422F0000[0000D000]
      [ M] 163. c:\program files\microsoft sql server\mssql\binn\sqlcmdss.dll


    436C0000[00003000]
      [ M] 164. c:\program files\microsoft sql server\mssql\binn\resources\2052\sqlcmdss.rll


    42AB0000[0000E000]
      [ M] 165. c:\program files\microsoft sql server\mssql\binn\sqlrepss.dll


    43930000[00003000]
      [ M] 166. c:\program files\microsoft sql server\mssql\binn\resources\2052\sqlrepss.rll


    42290000[0000D000]
      [ M] 167. c:\program files\microsoft sql server\mssql\binn\sqlatxss.dll


    436B0000[00006000]
      [ M] 168. c:\program files\microsoft sql server\mssql\binn\resources\2052\sqlatxss.rll


    41330000[0000F000]
      [ M] 169. c:\program files\microsoft sql server\80\tools\binn\axscphst.dll


    42F60000[00007000]
      [ M] 170. c:\program files\microsoft sql server\80\tools\binn\resources\2052\axscphst.rll


    4B470000[0006C000]
      [ M] 171. c:\windows\system32\sqlsrv32.dll


    1FA30000[00016000]
      [ M] 172. c:\windows\system32\sqlsrv32.rll


    74CD0000[00007000]
      [ M] 173. c:\windows\system32\dbmslpcn.dll



  + 00000c9c(3228) ServerNT.exe
    00400000[0001A000]
      [AM] 15. c:\windows\system32\servernt.exe


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    10000000[00008000]
      [ M] 174. c:\windows\system32\umiscnt.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    006F0000[00007000]
      [ M] 175. c:\windows\system32\secucomm.dll


    00710000[0001D000]
      [ M] 176. c:\windows\system32\us80sgv.dll


    00730000[00007000]
      [ M] 177. c:\windows\system32\ufzf5.dll


    42400000[00405000]
      [ M] 178. c:\program files\microsoft sql server\80\tools\binn\sqldmo.dll


    42AC0000[00007000]
      [ M] 179. c:\program files\microsoft sql server\80\tools\binn\sqlresld.dll


    42C40000[00017000]
      [ M] 180. c:\program files\microsoft sql server\80\tools\binn\sqlsvc.dll


    4B4F0000[00006000]
      [ M] 98. c:\windows\system32\odbcbcp.dll


    41140000[0000C000]
      [ M] 181. c:\program files\microsoft sql server\80\tools\binn\w95scm.dll


    43970000[00006000]
      [ M] 182. c:\program files\microsoft sql server\80\tools\binn\resources\2052\sqlsvc.rll


    436D0000[0008F000]
      [ M] 183. c:\program files\microsoft sql server\80\tools\binn\resources\2052\sqldmo.rll


    4DDE0000[00081000]
      [ M] 92. c:\program files\common files\system\ole db\sqloledb.dll


    74CD0000[00007000]
      [ M] 173. c:\windows\system32\dbmslpcn.dll



  + 00000ce0(3296) wuauclt.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    50E60000[0000C000]
      [ M] 83. c:\windows\system32\wups2.dll


    509E0000[00042000]
      [ M] 184. c:\windows\system32\mucltui.dll



  + 00000dc4(3524) cmd.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    10000000[0001C000]
      [AM] 49. c:\windows\system32\ravext.dll



  + 00000e5c(3676) svchost.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 00001184(4484) iexplore.exe
    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    70000000[00019000]
      [ M] 59. d:\program files\rising\rfw\ijt_base.dll


    75000000[0000F000]
      [ M] 60. d:\program files\rising\rfw\olemon.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    10000000[00032000]
      [AM] 39. d:\program files\tencent\qqdownload\qqiehelper02.dll


    01900000[00991000]
      [AM] 40. c:\program files\iefxz\iefxz.dll


    026F0000[00018000]
      [AM] 41. c:\windows\system32\urlfilter.dll


    02720000[00011000]
      [ M] 156. d:\program files\rising\antispyware\urlrule.dll


    71800000[0007C000]
      [ M] 63. c:\windows\system32\shdoclc.dll


    72C80000[00008000]
      [ M] 61. c:\windows\system32\msacm32.drv


    04060000[00028000]
      [ M] 185. d:\program files\rising\rav\ravscrch.dll


    30000000[003AF000]
      [ M] 186. c:\windows\system32\macromed\flash\flash9f.ocx


    79000000[00045000]
      [AM] 44. c:\windows\system32\mscoree.dll


    63F00000[0000C000]
      [ M] 187. c:\windows\microsoft.net\framework\v2.0.50727\mscorie.dll



  + 00001750(5968) knownsvr.exe
    00400000[00072000]
      [ M] 188. d:\program files\rising\antispyware\knownsvr.exe


    10000000[0002F000]
      [ M] 189. d:\program files\rising\antispyware\ncomm.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    009A0000[0002E000]
      [ M] 190. d:\program files\rising\antispyware\comx3.dll


    009D0000[00019000]
      [ M] 191. d:\program files\rising\antispyware\syslay.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll



  + 00001874(6260) cmd.exe
    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    10000000[0001C000]
      [AM] 49. c:\windows\system32\ravext.dll



  + 00001adc(6876) QQDownload.exe
    00400000[0015B000]
      [ M] 192. d:\program files\tencent\qqdownload\qqdownload.exe


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    10000000[00203000]
      [ M] 193. d:\program files\tencent\qqdownload\xmain.dll


    02990000[0005D000]
      [ M] 194. d:\program files\tencent\qqdownload\xcore.dll


    71800000[0007C000]
      [ M] 63. c:\windows\system32\shdoclc.dll


    02280000[00028000]
      [ M] 185. d:\program files\rising\rav\ravscrch.dll


    72C80000[00008000]
      [ M] 61. c:\windows\system32\msacm32.drv


    72C60000[00007000]
      [ M] 195. c:\windows\system32\msadp32.acm


    03E10000[0001C000]
      [AM] 49. c:\windows\system32\ravext.dll



  + 00001e18(7704) Ras.exe
    00400000[0000B000]
      [ M] 196. d:\program files\rising\antispyware\ras.exe


    7C140000[00103000]
      [ M] 197. d:\program files\rising\antispyware\mfc71.dll


    7C340000[00056000]
      [ M] 198. d:\program files\rising\antispyware\msvcr71.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    10000000[00047000]
      [ M] 199. d:\program files\rising\antispyware\kakamgr.dll


    7C3A0000[0007B000]
      [ M] 200. d:\program files\rising\antispyware\msvcp71.dll


    00A50000[00019000]
      [ M] 191. d:\program files\rising\antispyware\syslay.dll


    00A80000[0001F000]
      [ M] 111. d:\program files\rising\rav\proccom.dll


    00AA0000[00024000]
      [ M] 112. d:\program files\rising\rav\rscommx2.dll


    00BF0000[0002E000]
      [ M] 190. d:\program files\rising\antispyware\comx3.dll


    00E60000[00058000]
      [ M] 201. d:\program files\rising\antispyware\dbmgr.dll


    23800000[00022000]
      [ M] 202. d:\program files\rising\antispyware\rsxml.dll


    00FC0000[0002D000]
      [ M] 203. d:\program files\rising\antispyware\pweb.dll


    01030000[000C1000]
      [ M] 204. d:\program files\rising\antispyware\pscan.dll


    01100000[0002F000]
      [ M] 189. d:\program files\rising\antispyware\ncomm.dll


    01150000[00070000]
      [ M] 205. d:\program files\rising\antispyware\pset.dll


    011E0000[0002A000]
      [ M] 206. d:\program files\rising\antispyware\pdefend.dll


    01270000[000B6000]
      [ M] 207. d:\program files\rising\antispyware\ptools.dll


    01430000[0008C000]
      [ M] 208. d:\program files\rising\antispyware\psysinfo.dll


    01240000[0001C000]
      [AM] 49. c:\windows\system32\ravext.dll


    23900000[00040000]
      [ M] 209. d:\program files\rising\antispyware\pngdll.dll


    71800000[0007C000]
      [ M] 63. c:\windows\system32\shdoclc.dll


    038D0000[00028000]
      [ M] 185. d:\program files\rising\rav\ravscrch.dll


    30000000[003AF000]
      [ M] 186. c:\windows\system32\macromed\flash\flash9f.ocx


    72C80000[00008000]
      [ M] 61. c:\windows\system32\msacm32.drv



  + 00001fbc(8124) RfwCfg.exe
    00400000[0015B000]
      [ M] 210. d:\program files\rising\rfw\rfwcfg.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    26600000[000A8000]
      [ M] 68. d:\program files\rising\rfw\rsguilib.dll


    10000000[0001F000]
      [ M] 69. d:\program files\rising\rfw\proccom.dll


    00B50000[00024000]
      [ M] 70. d:\program files\rising\rfw\rscommx2.dll


    00CA0000[0000E000]
      [ M] 71. d:\program files\rising\rfw\rsappmgr.dll


    00CC0000[00030000]
      [ M] 72. d:\program files\rising\rfw\cfgdll.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    23700000[00028000]
      [ M] 73. d:\program files\rising\rfw\rscommon.dll


    00FB0000[00014000]
      [ M] 74. d:\program files\rising\rfw\rfwctrl.dll


    00FD0000[0000B000]
      [ M] 211. d:\program files\rising\rfw\proxyctr.dll


    23800000[00022000]
      [ M] 75. d:\program files\rising\rfw\rsxml.dll


    23900000[00040000]
      [ M] 76. d:\program files\rising\rfw\pngdll.dll



  + 00001fc8(8136) RSTray.exe
    00400000[00023000]
      [ M] 212. d:\program files\rising\antispyware\rstray.exe


    60000000[00074000]
      [AM] 57. c:\windows\system32\kmon.dll


    10000000[0003C000]
      [ M] 213. d:\program files\rising\antispyware\rsmginfo.dll


    5ADC0000[00037000]
      [ M] 58. c:\windows\system32\uxtheme.dll


    23800000[00022000]
      [ M] 202. d:\program files\rising\antispyware\rsxml.dll


    7C3A0000[0007B000]
      [ M] 200. d:\program files\rising\antispyware\msvcp71.dll


    7C340000[00056000]
      [ M] 198. d:\program files\rising\antispyware\msvcr71.dll


    00B30000[00024000]
      [ M] 214. d:\program files\rising\antispyware\comserv.dll


    00B60000[00019000]
      [ M] 191. d:\program files\rising\antispyware\syslay.dll


    23700000[00026000]
      [ M] 215. d:\program files\rising\antispyware\rscommon.dll


    00BA0000[0002E000]
      [ M] 190. d:\program files\rising\antispyware\comx3.dll


    23900000[00040000]
      [ M] 209. d:\program files\rising\antispyware\pngdll.dll


    00FB0000[0005C000]
      [ M] 216. d:\program files\rising\antispyware\runiep.dll


    01020000[0001F000]
      [ M] 111. d:\program files\rising\rav\proccom.dll


    01040000[00024000]
      [ M] 112. d:\program files\rising\rav\rscommx2.dll