瑞星卡卡电脑诊断日志 v1.30 (2008-9-7 0:11:51) 北京瑞星信息技术有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services aspnet_state [A ] 1. c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe Microsoft Corporation aspnet_state.exe .text,.data,.rsrc, CFSvcs [AM] 2. c:\program files\toshiba\configfree\cfsvcs.exe TOSHIBA CORPORATION Service of ConfigFree. .text,.rdata,.data,.rsrc, DVD-RAM_Service [AM] 3. c:\windows\system32\dvdramsv.exe Matsushita Electric Industrial Co., Ltd. Service of RAMAsst for Windows XP .text,.rdata,.data,.rsrc, Peanuthull5Core [AM] 4. c:\program files\oray\peanuthull5\phcore.exe 上海贝锐 花生壳客户端5.1服务程序 .text,.rdata,.data,.rsrc, usnjsvc [A ] 5. c:\program files\msn messenger\usnsvc.exe Microsoft Corporation Messenger Sharing USN Journal Reader Service .text,.data,.rsrc, WMPNetworkSvc [A ] 6. c:\program files\windows media player\wmpnetwk.exe Microsoft Corporation Windows Media Player ネットワーク共有サービス .text,.data,.rsrc,.reloc, WudfSvc [A ] 7. c:\windows\system32\wudfsvc.dll Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Service .text,.data,.rsrc,.reloc, + 内核驱动 + HKLM\System\CurrentControlSet\Services 003a9792 [A ] 8. c:\windows\system32\drivers\003a9792.sys 0050be49 [A ] 9. c:\windows\system32\drivers\0050be49.sys AegisP [A ] 10. c:\windows\system32\drivers\aegisp.sys Meetinghouse Data Communications IEEE 802.1X Protocol Driver .text,.rdata,.data,INIT,.rsrc,.reloc, AgereSoftModem [A ] 11. c:\windows\system32\drivers\agrsm.sys Agere Systems SoftModem Device Driver .text,.data,PAGESER,INIT,.rsrc,.reloc, ALCXWDM [A ] 12. c:\windows\system32\drivers\alcxwdm.sys Realtek Semiconductor Corp. Realtek AC'97 Audio Driver (WDM) .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, ApfiltrService [A ] 13. c:\windows\system32\drivers\apfiltr.sys Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, ASFWHide [A ] 14. c:\docume~1\li\locals~1\temp\asfwhide .text,.rdata,.data,INIT,.reloc, BUFADPT [A ] 15. c:\windows\system32\bufadpt.sys BUFFALO INC. BUFFALO Wireless Network Adapter Manager .text,.rdata,.data,INIT,.rsrc,.reloc, drvmcdb [A ] 16. c:\windows\system32\drivers\drvmcdb.sys Sonic Solutions Device Driver .text,.rdata,.data,INIT,.rsrc,.reloc, EKECioCtl [A ] 17. c:\program files\toshiba\e-key\ekecioctl.sys TOAHIBA, TOSHIBA E-Key Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, gmer [A ] 18. c:\windows\system32\drivers\gmer.sys GMER GMER Driver http://www.gmer.net .text,.rdata,.data,INIT,.rsrc,.reloc, Hdv32 [A ] 19. c:\windows\system32\drivers\hdv32_c.sys HWSCtrl [A ] 20. c:\program files\toshiba\toshiba applet\hws_iodispatch.sys IO Dispatch Driver For TOSHIBA Hardware Setup .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, ialm [A ] 21. c:\windows\system32\drivers\ialmnt5.sys Intel Corporation Intel Graphics Miniport Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, KAMG54LDR [A ] 22. c:\windows\system32\drivers\athfmwdl.sys Windows (R) 2000 DDK provider ATHEROS USB Driver .text,.data,INIT,.rsrc,.reloc, Netdevio [A ] 23. c:\windows\system32\drivers\netdevio.sys TOSHIBA Corporation. Network Device Usermode I/O protocol .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, npkcrypt [A ] 24. c:\windows\system32\npkcrypt.sys npkycryp [A ] 25. c:\windows\system32\npkycryp.sys PxHelp20 [A ] 26. c:\windows\system32\drivers\pxhelp20.sys Sonic Solutions Px Engine Device Driver for Windows 2000/XP .text,.rdata,.data,INIT,.rsrc,.reloc, rockusb [A ] 27. c:\windows\system32\drivers\rockusb.sys Fuzhou Rockchip Electronics Co,Ltd. Fuzhou Rockchip USB Driver .text,.rdata,.data,.CRT,.STL,PAGE,INIT,.rsrc,.reloc, Secdrv [A ] 28. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SerTVOutCtlr [A ] 29. c:\windows\system32\drivers\epiomngr.sys COMPAL ELECTRONIC INC. IoManager Application .text,.rdata,.data,INIT,.rsrc,.reloc, SNCT511 [A ] 30. c:\windows\system32\drivers\snct511.sys PC Camera driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SPCtl [A ] 31. c:\program files\toshiba\windows utilities\spdispatch.sys TOSHIBA IO Dispatch Driver For TOSHIBA Supervisor .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SrvcEKIOMngr [A ] 32. c:\program files\toshiba\e-key\ekiomngr.sys COMPAL ELECTRONIC INC. IoManager Application .text,.rdata,.data,INIT,.rsrc,.reloc, SrvcSSIOMngr [A ] 33. c:\program files\toshiba\e-key\ssiomngr.sys COMPAL ELECTRONIC INC. IoManager Application .text,.rdata,.data,INIT,.rsrc,.reloc, StickyMesger [A ] 34. c:\program files\toshiba\accessibility\stickymesger.sys TOSHIBA FnKey Driver For TOSHIBA Accessibility .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, TCtrlIO [A ] 35. c:\windows\system32\drivers\tctrlio.sys TOSHIBA IO Driver For TOSHIBA Control .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, TPECioCtl [A ] 36. c:\program files\toshiba\touchpad\tpecioctl.sys TOAHIBA, TOSHIBA E-Key Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, TPwSav [A ] 37. c:\windows\system32\drivers\tpwsav.sys TOSHIBA IO Driver For TOSHIBA Power Saver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, U2KAMG54 [A ] 38. c:\windows\system32\drivers\ar5523.sys Atheros Communications, Inc. Driver for Atheros AR5005 Wireless USB Network Adapter .text,.data,INIT,.rsrc,.reloc, WudfPf [A ] 39. c:\windows\system32\drivers\wudfpf.sys Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Platform Driver .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc, WudfRd [A ] 40. c:\windows\system32\drivers\wudfrd.sys Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Reflector .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, yukonwxp [A ] 41. c:\windows\system32\drivers\yk51x86.sys Marvell NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller .text,.rdata,.data,INIT,.rsrc,.reloc, ywtro [A ] 42. c:\docume~1\li\locals~1\temp\_tmp.bat + 文件系统驱动 + HKLM\System\CurrentControlSet\Services drvnddm [A ] 43. c:\windows\system32\drivers\drvnddm.sys Sonic Solutions Device Driver Manager .text,.rdata,.data,.edata,INIT,.rsrc,.reloc, meiudf [A ] 44. c:\windows\system32\drivers\meiudf.sys Matsushita Electric Industrial Co.,Ltd. DVD-RAM UDF File System Driver .text,.data,INIT,.rsrc,.reloc, sscdbhk5 [A ] 45. c:\windows\system32\drivers\sscdbhk5.sys Sonic Solutions Shared Driver Component .text,.rdata,.data,INIT,.rsrc,.reloc, ssrtln [A ] 46. c:\windows\system32\drivers\ssrtln.sys Sonic Solutions Shared Driver Component .text,.rdata,.data,.edata,INIT,.rsrc,.reloc, tfsnboio [A ] 47. c:\windows\system32\dla\tfsnboio.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,INIT,.rsrc,.reloc, tfsncofs [A ] 48. c:\windows\system32\dla\tfsncofs.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,INIT,.rsrc,.reloc, tfsndrct [A ] 49. c:\windows\system32\dla\tfsndrct.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,INIT,.rsrc,.reloc, tfsndres [A ] 50. c:\windows\system32\dla\tfsndres.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.edata,INIT,.rsrc,.reloc, tfsnifs [A ] 51. c:\windows\system32\dla\tfsnifs.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.edata,INIT,.rsrc,.reloc, tfsnopio [A ] 52. c:\windows\system32\dla\tfsnopio.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,INIT,.rsrc,.reloc, tfsnpool [A ] 53. c:\windows\system32\dla\tfsnpool.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.edata,INIT,.rsrc,.reloc, tfsnudf [A ] 54. c:\windows\system32\dla\tfsnudf.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,INIT,.rsrc,.reloc, tfsnudfa [A ] 55. c:\windows\system32\dla\tfsnudfa.sys Sonic Solutions Drive Letter Access Component .text,.rdata,.data,INIT,.rsrc,.reloc, + 系统登陆自运行 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify igfxcui [A ] 56. c:\windows\system32\igfxsrvc.dll Intel Corporation igfxsrvc Module .text,.rdata,.data,.rsrc,.reloc, WgaLogon [AM] 57. c:\windows\system32\wgalogon.dll Microsoft Corporation Windows Genuine Advantage Notification .text,.data,.rsrc,.reloc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {01443AEC-0FD1-40fd-9C87-E93D1494C233} [AM] 58. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [AM] 59. c:\program files\adobe\acrobat 6.0\reader\activex\acroiehelper.dll Adobe Systems Incorporated Adobe Acrobat IE Helper Version 6.0 for ActivieX .text,.rdata,.data,.rsrc,.reloc, {5CA3D70E-1895-11CF-8E15-001234567890} [AM] 60. c:\windows\system32\dla\tfswshx.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, {889D2FEB-5411-4565-8998-1DD2C5261283} [AM] 61. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [AM] 62. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 63. c:\program files\thunder network\thunder\thunder.exe Thunder Networking Technologies,LTD .text,.rdata,.data,.rsrc, Exec [A ] 64. c:\program files\浩方对战平台\gameclient.exe 上海浩方在线信息技术有限公司 浩方对战平台 .text,.rdata,.data,.rsrc, Exec [A ] 65. c:\program files\messenger\msmsgs.exe Microsoft Corporation Windows Messenger .text,.data,.rsrc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter application/octet-stream [A ] 66. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, application/x-complus [A ] 66. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, application/x-msdownload [A ] 66. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler livecall [A ] 67. c:\program files\msn messenger\msgrapp.8.1.0178.00.dll Microsoft Corporation MSN Messenger Protocol Handler .text,.data,.rsrc,.reloc, msnim [A ] 67. c:\program files\msn messenger\msgrapp.8.1.0178.00.dll Microsoft Corporation MSN Messenger Protocol Handler .text,.data,.rsrc,.reloc, skype4com [A ] 68. c:\program files\common files\skype\skype4com.dll Skype Technologies Skype for COM API .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 69. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, Fusion Cache [A ] 66. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, TouchPad Property Sheet [A ] 70. c:\windows\system32\tpprop.dll COMPAL ELECTRONIC INC. TPprop Module .text,.rdata,.data,.rsrc,.reloc, RecordNow! SendToExt [A ] 71. c:\program files\sonic\recordnow!\shlext.dll Shell Extensions .text,.rdata,.data,.rsrc,.reloc, DriveLetterAccess [AM] 60. c:\windows\system32\dla\tfswshx.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, Shell Extensions for RealOne Player [A ] 72. c:\program files\real\realplayer\rpshell.dll RealNetworks, Inc. RealPlayer Shell Extensions .text,.rdata,.data,.rsrc,.reloc, Web Folders [A ] 73. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.bootdat,.rsrc,.reloc, Portable Media Devices [A ] 74. c:\windows\system32\audiodev.dll Microsoft Corporation Portable Media Devices Shell Extension .text,.data,.rsrc,.reloc, Portable Devices [A ] 75. c:\windows\system32\wpdshext.dll Microsoft Corporation Portable Devices Shell Extension .text,.data,.rsrc,.reloc, Portable Devices Menu [A ] 75. c:\windows\system32\wpdshext.dll Microsoft Corporation Portable Devices Shell Extension .text,.data,.rsrc,.reloc, Microsoft Outlook Custom Icon Handler [A ] 76. c:\program files\microsoft office\office\olkfstub.dll Microsoft Corporation Microsoft Outlook Shell Hook for Start/Find .text,.data,.rsrc,.reloc, Messenger Sharing Folders [A ] 77. c:\program files\msn messenger\fsshext.8.1.0178.00.dll Microsoft Corporation Messenger File Sharing Shell Extensions .text,.data,.rsrc,.reloc, Registered ActiveX Controls [A ] 78. c:\program files\microsoft visual studio\common\msdev98\bin\ide\devxpgl.dll Microsoft Corporation Microsoft(R) Developer Studio Explorer Shell Extensions .text,.data,.rsrc,.reloc, Developer Studio Components [A ] 78. c:\program files\microsoft visual studio\common\msdev98\bin\ide\devxpgl.dll Microsoft Corporation Microsoft(R) Developer Studio Explorer Shell Extensions .text,.data,.rsrc,.reloc, RISING [A ] 79. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {32CD708B-60A7-4C00-9377-D73EAA495F0F} [A ] 79. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad WPDShServiceObj [AM] 80. c:\windows\system32\wpdshserviceobj.dll Microsoft Corporation Windows Portable Device Shell Service Object .text,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKCU\Software\Microsoft\Windows\CurrentVersion\Run pyjj [AM] 81. c:\program files\jj4\jjsvr4.exe 加加开发组 加加输入法 4.0 作者:孙百川 .text,.rdata,.data,.rsrc, + HKLM\Software\Microsoft\Windows\CurrentVersion\Run AGRSMMSG [AM] 82. c:\windows\agrsmmsg.exe Agere Systems SoftModem Messaging Applet .text,.rdata,.data,.rsrc, Apoint [AM] 83. c:\program files\apoint2k\apoint.exe Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.sdata,.rdata,.data,.rsrc, CeEKEY [AM] 84. c:\program files\toshiba\e-key\ceekey.exe COMPAL ELECTRONIC INC. TOSHIBA HotKey Utility .text,.rdata,.data,.idata,.rsrc,.reloc, TCtryIOHook [AM] 85. c:\windows\system32\tctrliohook.exe TOSHIBA TOSHIBA Control Utility Hotkey Hook .text,.rdata,.data,.rsrc, dla [AM] 86. c:\windows\system32\dla\tfswctrl.exe Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc, ZoomingHook [AM] 87. c:\windows\system32\zoominghook.exe TOSHIBA Zooming Utility Hotkey Hook .text,.rdata,.data,.rsrc, Ashampoo FireWall [AM] 88. c:\program files\ashampoo\ashampoo firewall\firewall.exe .text,.itext,.data,.bss,.idata,.tls,.rdata,.reloc,.rsrc, runeip [AM] 89. c:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, RavDown [AM] 90. c:\下载\safe\ravd12.exe Beijing Rising Information Technology Co., Ltd. ravdown Application .text,.rdata,.data,.rsrc, RavTask [A ] 91. c:\program files\rising\rav\ravtask.exe Beijing Rising Information Technology Co., Ltd. RavTimer .text,.rdata,.data,.rsrc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce KKDelay [A ] 92. c:\program files\rising\antispyware\runonce.exe Beijing Rising Information Technology Co., Ltd. RunOnce Application .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 93. c:\windows\system32\kknative.exe Beijing Rising Information Technology Co., Ltd. NativeAp .text,.data,.rsrc,.reloc, + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 94. c:\program files\microsoft office\office\msohtmed.exe Microsoft Corporation Microsoft Office 2000 component .text,.data,.idata,.rsrc, htmlfile\Print\Command [A ] 94. c:\program files\microsoft office\office\msohtmed.exe Microsoft Corporation Microsoft Office 2000 component .text,.data,.idata,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 94. c:\program files\microsoft office\office\msohtmed.exe Microsoft Corporation Microsoft Office 2000 component .text,.data,.idata,.rsrc, htmlfile\Print\Command [A ] 94. c:\program files\microsoft office\office\msohtmed.exe Microsoft Corporation Microsoft Office 2000 component .text,.data,.idata,.rsrc, + HKCR\.mp3 RealPlayer.MP3.6\open\Command [A ] 95. c:\program files\real\realplayer\realplay.exe RealNetworks, Inc. RealPlayer .text,.rdata,.data,.rsrc, + 程序初始化和已知动态连接库 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows AppInit_DLLs [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, + 正在运行的进程 + 00000098(152) svchost.exe 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 0000010c(268) TCtrlIOHook.exe 00400000[00007000] [AM] 85. c:\windows\system32\tctrliohook.exe TOSHIBA TOSHIBA Control Utility Hotkey Hook .text,.rdata,.data,.rsrc, 10000000[00015000] [ M] 98. c:\windows\system32\tctrlio.dll TOSHIBA Dynmaic Library For TOSHIBA Control Utility .text,.rdata,.data,.rsrc,.reloc, 00B20000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01100000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000234(564) RavD12.exe 00400000[00030000] [AM] 90. c:\下载\safe\ravd12.exe Beijing Rising Information Technology Co., Ltd. ravdown Application .text,.rdata,.data,.rsrc, 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00A30000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00AB0000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00BF0000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01BB0000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, + 00000248(584) smss.exe + 00000290(656) csrss.exe 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000002a8(680) winlogon.exe 01360000[0003B000] [AM] 57. c:\windows\system32\wgalogon.dll Microsoft Corporation Windows Genuine Advantage Notification .text,.data,.rsrc,.reloc, 10000000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 72C60000[00008000] [ M] 103. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 00BF0000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000002d4(724) services.exe 47260000[0000F000] [ M] 104. c:\windows\apppatch\acadproc.dll Microsoft Corporation Windows Compatibility DLL .text,.data,.rsrc,.reloc, 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000002e0(736) lsass.exe 00E50000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 0000030c(780) rstray.exe 00400000[00023000] [AM] 89. c:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[0003C000] [ M] 105. c:\program files\rising\antispyware\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 106. c:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 107. c:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 108. c:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00C60000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01220000[00024000] [ M] 109. c:\program files\rising\antispyware\comserv.dll Beijing Rising Information Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 01250000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 23700000[00026000] [ M] 110. c:\program files\rising\antispyware\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01290000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 111. c:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01620000[0005C000] [ M] 112. c:\program files\rising\antispyware\runiep.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware tray .text,.rdata,.data,.rsrc,.reloc, 03230000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, 04AF0000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04BA0000[000C1000] [ M] 113. c:\program files\rising\antispyware\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C140000[00103000] [ M] 114. c:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 04C70000[0002F000] [ M] 115. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, + 00000350(848) wuauclt.exe 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00840000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 008A0000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000388(904) svchost.exe 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000003c8(968) jjsvr4.exe 00400000[00073000] [AM] 81. c:\program files\jj4\jjsvr4.exe 加加开发组 加加输入法 4.0 作者:孙百川 .text,.rdata,.data,.rsrc, 10000000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01880000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000003d4(980) svchost.exe 00930000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, + 00000430(1072) svchost.exe 009F0000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000458(1112) bwsvc.exe 00400000[00064000] [ M] 116. c:\program files\buffalo\client manager3\bwsvc\bwsvc.exe BUFFALO INC. BUFFALO Netwrok Service .text,.rdata,.data,STLPORT_,.rsrc, 10000000[000A7000] [ M] 117. c:\program files\buffalo\client manager3\bwsvc\essidset.dll BUFFALO INC. ESSIDSET.DLL .text,.rdata,.data,.rsrc,.reloc, 008C0000[0001D000] [ M] 118. c:\program files\buffalo\client manager3\bwsvc\wnetprof2.dll BUFFALO WNETPROF2.DLL .text,.rdata,.data,.rsrc,.reloc, 008F0000[0001A000] [ M] 119. c:\program files\buffalo\client manager3\bwsvc\bufpkt.dll BUFFALO INC. BUFPKT .text,.rdata,.data,.rsrc,.reloc, 00920000[0000F000] [ M] 120. c:\program files\buffalo\client manager3\bwsvc\bufaegis.dll BUFFALO INC. bufaegis .text,.rdata,.data,.rsrc,.reloc, 00930000[00166000] [ M] 121. c:\program files\buffalo\client manager3\bwsvc\aegise5.dll Meetinghouse Data Communications IEEE 802.1X Protocol .text,.rdata,.data,.idata,.rsrc,.reloc, 014D0000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000464(1124) svchost.exe 00B10000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, + 00000474(1140) stormliv.exe 00400000[00075000] [ M] 122. c:\program files\stormii\stormliv.exe 北京暴风网际科技有限公司 暴风影音媒体控制中心 .text,.rdata,.data,.rsrc, 75FF0000[00065000] [ M] 123. c:\program files\stormii\msvcp60.dll Microsoft Corporation Microsoft (R) C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00BC0000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000490(1168) CFSvcs.exe 00400000[0000A000] [AM] 2. c:\program files\toshiba\configfree\cfsvcs.exe TOSHIBA CORPORATION Service of ConfigFree. .text,.rdata,.data,.rsrc, 10000000[00035000] [ M] 124. c:\program files\toshiba\configfree\ndsapi.dll TOSHIBA CORPORATION ConfigFree(TM) API .text,.rdata,.data,.rsrc,.reloc, 00370000[00018000] [ M] 125. c:\program files\toshiba\configfree\ipadrset.dll TOSHIBA CORPORATION TCP/IP API for ConfigFree. .text,.rdata,.data,.rsrc,.reloc, 00860000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000004d0(1232) DVDRAMSV.exe 00400000[0001D000] [AM] 3. c:\windows\system32\dvdramsv.exe Matsushita Electric Industrial Co., Ltd. Service of RAMAsst for Windows XP .text,.rdata,.data,.rsrc, 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000004f4(1268) svchost.exe 00A70000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, + 0000057c(1404) PhCore.exe 00400000[0004A000] [AM] 4. c:\program files\oray\peanuthull5\phcore.exe 上海贝锐 花生壳客户端5.1服务程序 .text,.rdata,.data,.rsrc, 10000000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01410000[0000F000] [ M] 126. c:\program files\oray\peanuthull5\phalive.dll 上海贝锐 花生壳5.1更新内核 .text,.rdata,.data,.rsrc,.reloc, 01520000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, 01600000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000598(1432) CeEKey.exe 00400000[000A4000] [AM] 84. c:\program files\toshiba\e-key\ceekey.exe COMPAL ELECTRONIC INC. TOSHIBA HotKey Utility .text,.rdata,.data,.idata,.rsrc,.reloc, 10000000[0000F000] [ M] 127. c:\windows\system32\ekecioctl.dll .text,.rdata,.data,.reloc, 00A10000[00008000] [ M] 128. c:\windows\system32\ceekpolicy.dll COMPAL ELECTRONIC INC. CeEKPolicy DLL .text,.rdata,.data,.rsrc,.reloc, 00AC0000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01230000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000005a8(1448) spoolsv.exe 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000628(1576) Explorer.EXE 10000000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 164A0000[00023000] [AM] 80. c:\windows\system32\wpdshserviceobj.dll Microsoft Corporation Windows Portable Device Shell Service Object .text,.data,.rsrc,.reloc, 109C0000[0002C000] [ M] 129. c:\windows\system32\portabledevicetypes.dll Microsoft Corporation Windows Portable Device (Parameter) Types Component .text,.orpc,.data,.rsrc,.reloc, 10930000[00049000] [ M] 130. c:\windows\system32\portabledeviceapi.dll Microsoft Corporation Windows Portable Device API Components .text,.orpc,.data,.rsrc,.reloc, 72C60000[00008000] [ M] 103. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 03570000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03760000[0002C000] [AM] 58. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, 03790000[0000C000] [AM] 59. c:\program files\adobe\acrobat 6.0\reader\activex\acroiehelper.dll Adobe Systems Incorporated Adobe Acrobat IE Helper Version 6.0 for ActivieX .text,.rdata,.data,.rsrc,.reloc, 039B0000[00031000] [AM] 61. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 240A0000[0000E000] [ M] 131. c:\program files\thunder network\thunder\components\resworker\dsbho_00.dll Thunder Networking Technologies,LTD DsBho .text,.rdata,.data,.rsrc,.reloc, 24050000[0001E000] [ M] 132. c:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, + 0000071c(1820) wscntfy.exe 10000000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 00F30000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 0000074c(1868) AGRSMMSG.exe 00400000[0001B000] [AM] 82. c:\windows\agrsmmsg.exe Agere Systems SoftModem Messaging Applet .text,.rdata,.data,.rsrc, 10000000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01330000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000778(1912) Apoint.exe 00400000[00034000] [AM] 83. c:\program files\apoint2k\apoint.exe Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.sdata,.rdata,.data,.rsrc, 10000000[00010000] [ M] 133. c:\windows\system32\vxdif.dll Alps Electric Co., Ltd. Vxdif .text,.rdata,.data,.SHARED,.rsrc,.reloc, 00AB0000[00014000] [ M] 134. c:\program files\apoint2k\apmain.dll Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.APOINT,.rsrc,.reloc, 00AE0000[0001D000] [ M] 135. c:\program files\apoint2k\apcommon.dll Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.APCOMMO,.rsrc,.reloc, 00B00000[00014000] [ M] 136. c:\program files\apoint2k\apdual.dll Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.APDUAL,.rsrc,.reloc, 00B20000[00066000] [ M] 137. c:\program files\apoint2k\appad.dll Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.APPAD,.rsrc,.reloc, 00BA0000[00015000] [ M] 138. c:\program files\apoint2k\ezcapt.dll Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.EZCAPT,.rsrc,.reloc, 00BC0000[00029000] [ M] 139. c:\program files\apoint2k\ezlaunch.dll Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.EZLAUNC,.rsrc,.reloc, 00C00000[00024000] [ M] 140. c:\program files\apoint2k\apstick.dll ALPS Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.APSTICK,.rsrc,.reloc, 00C30000[00015000] [ M] 141. c:\program files\apoint2k\apothers.dll Alps Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.APOTHER,.rsrc,.reloc, 00C50000[00019000] [ M] 142. c:\program files\apoint2k\apmouse.dll ALPS Electric Co., Ltd. Alps Pointing-device Driver .text,.rdata,.data,.APMOUSE,.rsrc,.reloc, 00D00000[00011000] [ M] 143. c:\program files\apoint2k\ezauto.dll Alps Electric Co., Ltd. Alps pointing device extension .text,.rdata,.data,.EzAuto,.rsrc,.reloc, 00DA0000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 012E0000[00059000] [ M] 144. c:\program files\apoint2k\apstring.dll Alps Electric Co., Ltd. Alps Pointing-device Driver .rsrc,.reloc, 013E0000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000007dc(2012) tfswctrl.exe 00400000[00020000] [AM] 86. c:\windows\system32\dla\tfswctrl.exe Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc, 10000000[0000F000] [ M] 145. c:\windows\system32\tfswapi.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, 00420000[00097000] [ M] 146. c:\windows\system32\dla\tfswcres.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, 00B70000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01240000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01230000[00007000] [ M] 147. c:\windows\system32\vxblock.dll Sonic Solutions VxBlock .text,.rdata,.data,.rsrc,.reloc, + 000007ec(2028) ZoomingHook.exe 00400000[00006000] [AM] 87. c:\windows\system32\zoominghook.exe TOSHIBA Zooming Utility Hotkey Hook .text,.rdata,.data,.rsrc, 10000000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01010000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000838(2104) FireWall.exe 00400000[00323000] [AM] 88. c:\program files\ashampoo\ashampoo firewall\firewall.exe .text,.itext,.data,.bss,.idata,.tls,.rdata,.reloc,.rsrc, 10000000[00076000] [ M] 148. c:\program files\ashampoo\ashampoo firewall\ash_inet.dll ash_inet .text,.rdata,.data,.rsrc,.reloc, 013D0000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 72C60000[00008000] [ M] 103. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 02BC0000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 0000083c(2108) Apntex.exe 00400000[0000B000] [ M] 149. c:\program files\apoint2k\apntex.exe Alps Electric Co., Ltd. Alps Pointing-device Driver for Windows NT/2000/XP .text,.rdata,.data,.rsrc, 10000000[00010000] [ M] 133. c:\windows\system32\vxdif.dll Alps Electric Co., Ltd. Vxdif .text,.rdata,.data,.SHARED,.rsrc,.reloc, 00950000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01040000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 0000085c(2140) ctfmon.exe 10000000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01080000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000008e4(2276) iexplore.exe 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00A10000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00BA0000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01D60000[0002C000] [AM] 58. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, 01DA0000[0000C000] [AM] 59. c:\program files\adobe\acrobat 6.0\reader\activex\acroiehelper.dll Adobe Systems Incorporated Adobe Acrobat IE Helper Version 6.0 for ActivieX .text,.rdata,.data,.rsrc,.reloc, 01DB0000[0001F000] [AM] 60. c:\windows\system32\dla\tfswshx.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, 01DD0000[0000F000] [ M] 145. c:\windows\system32\tfswapi.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, 01E10000[00097000] [ M] 146. c:\windows\system32\dla\tfswcres.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, 01ED0000[00031000] [AM] 61. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 240A0000[0000E000] [ M] 131. c:\program files\thunder network\thunder\components\resworker\dsbho_00.dll Thunder Networking Technologies,LTD DsBho .text,.rdata,.data,.rsrc,.reloc, 24050000[0001E000] [ M] 132. c:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, 01F80000[00018000] [AM] 62. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, 01FB0000[00011000] [ M] 150. c:\program files\rising\antispyware\urlrule.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlRule Library .text,.rdata,.data,.rsrc,.reloc, 02CF0000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, 30000000[003AE000] [ M] 151. c:\windows\system32\macromed\flash\flash9e.ocx Adobe Systems, Inc. Adobe Flash Player 9.0 r115 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C60000[00008000] [ M] 103. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 69000000[0000E000] [ M] 152. c:\windows\system32\macromed\common\swsupport.dll Macromedia, Inc. Shockwave Remote Support .text,.rdata,.data,.rsrc,.reloc, 02650000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000009c0(2496) Rav.dat 00400000[00122000] [ M] 153. c:\documents and settings\li\local settings\temp\ravdown\rav.dat Beijing Rising Information Technology Co., Ltd. .text,.rdata,.data,.rsrc, 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B20000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00B90000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000b18(2840) wmiprvse.exe 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00800000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, + 00000ba0(2976) TFncKy.exe 00400000[0001C000] [ M] 154. c:\program files\toshiba\toshiba controls\tfncky.exe TOSHIBA Corporation TFncKy .text,.rdata,.data,.rsrc, 10000000[0001A000] [ M] 155. c:\windows\system32\tctrlcommon.dll TOSHIBA Corporation TCtrlCommon .text,.rdata,.data,.rsrc,.reloc, 00370000[0000A000] [ M] 156. c:\program files\toshiba\toshiba controls\tbtncommon.dll TOSHIBA Corporation TBtnCommon DLL .text,.rdata,.data,.rsrc,.reloc, 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 00AA0000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00AD0000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00D40000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01290000[00015000] [ M] 98. c:\windows\system32\tctrlio.dll TOSHIBA Dynmaic Library For TOSHIBA Control Utility .text,.rdata,.data,.rsrc,.reloc, 014D0000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000cc4(3268) knownsvr.exe 00400000[00072000] [ M] 157. c:\program files\rising\antispyware\knownsvr.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[0002F000] [ M] 115. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 00A90000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00AD0000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B00000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, + 00000e18(3608) orangeaug.com 00400000[00085000] [ M] 158. c:\documents and settings\li\デスクトップ\orangeaug.com Beijing Rising Tech. Co., Ltd. RavOrangeAug .text,.rdata,.data,.rsrc, 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00A90000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00C20000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 02330000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, + 00000e48(3656) Explorer.EXE 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B30000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00CE0000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 01EE0000[0002C000] [AM] 58. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, 01F10000[0000C000] [AM] 59. c:\program files\adobe\acrobat 6.0\reader\activex\acroiehelper.dll Adobe Systems Incorporated Adobe Acrobat IE Helper Version 6.0 for ActivieX .text,.rdata,.data,.rsrc,.reloc, 01FE0000[0001F000] [AM] 60. c:\windows\system32\dla\tfswshx.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, 02000000[0000F000] [ M] 145. c:\windows\system32\tfswapi.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, 02010000[00097000] [ M] 146. c:\windows\system32\dla\tfswcres.dll Sonic Solutions Drive Letter Access Component .text,.rdata,.data,.rsrc,.reloc, 020F0000[00031000] [AM] 61. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 240A0000[0000E000] [ M] 131. c:\program files\thunder network\thunder\components\resworker\dsbho_00.dll Thunder Networking Technologies,LTD DsBho .text,.rdata,.data,.rsrc,.reloc, 24050000[0001E000] [ M] 132. c:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, 10930000[00049000] [ M] 130. c:\windows\system32\portabledeviceapi.dll Microsoft Corporation Windows Portable Device API Components .text,.orpc,.data,.rsrc,.reloc, 1C000000[00006000] [ M] 159. c:\program files\namirobot\data\namipanext1.dll .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 160. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 029C0000[0003C000] [ M] 161. c:\windows\system32\igfxpph.dll Intel Corporation igfxpph Module .text,.rdata,.data,.rsrc,.reloc, 02A00000[0001E000] [ M] 162. c:\windows\system32\hccutils.dll Intel Corporation hccutils Module .text,.rdata,.data,.rsrc,.reloc, 03040000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, 02250000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000f74(3956) setup.exe 00400000[000A1000] [ M] 163. c:\documents and settings\li\local settings\temp\ravtmp\setup.exe Beijing Rising Information Technology Co., Ltd. Rising Installation Program .text,.rdata,.data,.rsrc, 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 005C0000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00C10000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00C50000[0001B000] [ M] 164. c:\documents and settings\li\local settings\temp\ravtmp\rscommx.dll Beijing Rising Information Technology Co., Ltd. RsCommX .text,.rdata,.data,.rsrc,.reloc, 00C80000[0001F000] [ M] 165. c:\documents and settings\li\local settings\temp\ravtmp\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00CC0000[00024000] [ M] 166. c:\documents and settings\li\local settings\temp\ravtmp\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00EE0000[00029000] [ M] 167. c:\documents and settings\li\local settings\temp\ravtmp\setup.dll Beijing Rising Information Technology Co., Ltd. Module install implement .text,.rdata,.data,.rsrc,.reloc, 23700000[00028000] [ M] 168. c:\documents and settings\li\local settings\temp\ravtmp\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000fd0(4048) ras.exe 7C140000[00103000] [ M] 114. c:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 108. c:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 60000000[00074000] [AM] 96. c:\windows\system32\kmon.dll Beijing Rising Information Technology Co., Ltd. KaKa Monitors .text,.rdata,.data,.rsrc,.reloc, 10000000[00019000] [ M] 97. c:\documents and settings\li\local settings\temp\rsve.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00BB0000[00047000] [ M] 169. c:\program files\rising\antispyware\kakamgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 107. c:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00B40000[00019000] [ M] 101. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00C10000[00030000] [ M] 100. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00E80000[00058000] [ M] 170. c:\program files\rising\antispyware\dbmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 106. c:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00FE0000[0002D000] [ M] 171. c:\program files\rising\antispyware\pweb.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01010000[000C1000] [ M] 113. c:\program files\rising\antispyware\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 010E0000[0002F000] [ M] 115. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01130000[00070000] [ M] 172. c:\program files\rising\antispyware\pset.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 011C0000[0002A000] [ M] 173. c:\program files\rising\antispyware\pdefend.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 011F0000[000B6000] [ M] 174. c:\program files\rising\antispyware\ptools.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01410000[0008C000] [ M] 175. c:\program files\rising\antispyware\psysinfo.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 111. c:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 016A0000[0005E000] [ M] 99. c:\windows\system32\pyjj4.ime 加加工作组 加加输入法 4.0 .text,.rdata,.data,.rsrc,.reloc, 03940000[0002F000] [ M] 176. c:\program files\rising\antispyware\engine.dll Beijing Rising Information Technology Co., Ltd. kaka engine .text,.rdata,.data,.rsrc,.reloc, 032E0000[0000F000] [ M] 177. c:\program files\rising\antispyware\zip.dll Beijing Rising Information Technology Co., Ltd. zip .text,.rdata,.data,.rsrc,.reloc, 03870000[00066000] [ M] 102. c:\program files\ashampoo\ashampoo firewall\spi.dll CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, 30000000[003AE000] [ M] 151. c:\windows\system32\macromed\flash\flash9e.ocx Adobe Systems, Inc. Adobe Flash Player 9.0 r115 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C60000[00008000] [ M] 103. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 060A0000[00085000] [ M] 178. c:\program files\rising\antispyware\kengine.dll Beijing Rising Information Technology Co., Ltd. KEngine .text,.rdata,.data,.rsrc,.reloc, 06130000[00045000] [ M] 179. c:\program files\rising\antispyware\posttrt.dll Beijing Rising Information Technology Co., Ltd. PostTrt .text,.rdata,.data,.rsrc,.reloc, 06380000[00010000] [ M] 180. c:\program files\rising\antispyware\kscanex.dll Beijing Rising Information Technology Co., Ltd. KEngine ScanEx .text,.rdata,.data,.rsrc,.reloc, 063B0000[00033000] [ M] 181. c:\program files\rising\antispyware\rsdialog.dll Beijing Rising Information Technology Co., Ltd. Rsdiaglo DLL .text,.rdata,.data,.rsrc,.reloc,