[CODE]

2008-09-08,20:13:59

SysLog Scanner 1.0 - build 20080726
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 3 (build 2600) - Administrators



========================================
注册项

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <Foxmail><"C:\Program Files\Tencent\Foxmail\Foxmail.exe" -min>  [(Verified)Tencent Inc., 6, 13, 102, 15, C:2008-04-17 19:31 M:2008-04-17 19:31]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <RavTask><"C:\Program Files\Rising\Rav\RavTask.exe" -system>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.24, C:2008-08-29 15:59 M:2008-08-29 15:58]
    <IdnSvr><C:\Program Files\OCINS\idnsvr.exe>  [(Verified)中国互联网信息中心(CNNIC), 2, 6, 0, 1, C:2008-08-29 17:47 M:2008-08-29 17:47]
    <NvCplDaemon><RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)NVIDIA Corporation, 6.14.10.9152, C:2008-03-11 14:34 M:2006-10-03 14:07]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    <KKDelay><C:\Program Files\Rising\AntiSpyware\RunOnce.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 19, 0, 0, 3, C:2008-08-29 15:59 M:2008-08-29 15:59]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <Shell><Explorer.exe>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
    <Userinit><C:\WINDOWS\system32\userinit.exe,>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_Dlls><kmon.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost><logonui.exe>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]

[HKEY_CURRENT_USER\Control Panel\Desktop]
    <SCRNSAVE.EXE><C:\WINDOWS\system32\ssmarque.scr>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
    <BootExecute><autocheck autochk *>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs]
    <advapi32><advapi32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <comdlg32><comdlg32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <gdi32><gdi32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <imagehlp><imagehlp.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <kernel32><kernel32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <lz32><lz32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    <ole32><ole32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <oleaut32><oleaut32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    <olecli32><olecli32.dll>  [(Verified)Microsoft Corporation, 1.07 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <olecnv32><olecnv32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <olesvr32><olesvr32.dll>  [(Verified)Microsoft Corporation, 1.09 (XPClient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    <olethk32><olethk32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    <rpcrt4><rpcrt4.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <shell32><shell32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <url><url.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
    <urlmon><urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    <user32><user32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <version><version.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <wininet><wininet.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    <wldap32><wldap32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
    <PostBootReminder><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <CDBurn><%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <WebCheck><C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
    <SysTray><C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <WPDShServiceObj><C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
    <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
    <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2008-03-11 14:37 M:2008-07-29 07:45]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载]
    <><C:\Program Files\Thunder Network\Thunder\Program\geturl.htm>  [N/A, C:2008-03-15 13:59 M:2008-06-13 09:55]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接]
    <><C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm>  [N/A, C:2008-03-15 13:59 M:2008-06-13 09:55]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\导出当前页到超星阅览器(&A)]
    <><C:\Program Files\SSREADER36\ss_all.htm>  [N/A, C:2002-12-19 09:56 M:2002-12-19 09:56]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\导出选中部分到超星阅览器(&S)]
    <><C:\Program Files\SSREADER36\ss_select.htm>  [N/A, C:2002-12-19 09:56 M:2002-12-19 09:56]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
    <WinlogonNotify: crypt32chain><crypt32.dll>  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
    <WinlogonNotify: cryptnet><cryptnet.dll>  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
    <WinlogonNotify: cscdll><cscdll.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
    <WinlogonNotify: dimsntfy><%SystemRoot%\System32\dimsntfy.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-08-24 11:35 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
    <WinlogonNotify: ScCertProp><wlnotify.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
    <WinlogonNotify: Schedule><wlnotify.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
    <WinlogonNotify: sclgntfy><sclgntfy.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
    <WinlogonNotify: SensLogn><WlNotify.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
    <WinlogonNotify: termsrv><wlnotify.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
    <WinlogonNotify: wlballoon><wlnotify.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}]
    <IE7 Uninstall Stub><C:\WINDOWS\system32\ieudinit.exe>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:39 M:2008-06-23 17:20]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
    <Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-23 17:19]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
    <Browser Customizations><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 17.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
    <浏览器自定义组件><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 17.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
    <Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
    <Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
    <Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install>  [(Verified)Microsoft Corporation, 6.00.2800.1106, C:2008-03-11 14:24 M:2002-08-29 09:25]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14|(Verified)N/A, C:2004-08-17 10:00 M:2004-08-17 10:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14|(Verified)N/A, C:2004-08-17 10:00 M:2004-08-17 10:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14|(Verified)N/A, C:2006-11-02 23:38 M:2006-11-02 23:38]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
    <Address Book 5><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install>  [(Verified)Microsoft Corporation, 6.00.2800.1106, C:2008-03-11 14:24 M:2002-08-29 09:25]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
    <Windows 桌面更新><regsvr32.exe /s /n /i:U shell32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
    <Internet Explorer><C:\WINDOWS\system32\ie4uinit.exe -BaseSettings>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-23 17:19]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9EF0045A-CDD9-438e-95E6-02B9AFEC8E11}]
    <CRLUpdate><%SystemRoot%\system32\updcrl.exe -e -u %SystemRoot%\system32\verisignpub1.crl>  [Microsoft Corporation, 5.1.2462.0 (Lab03_N.010322-1915), C:2001-03-23 16:17 M:2001-03-23 16:17]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\BJ Language Monitor]
    <PrintMonitor: BJ Language Monitor><cnbjmon.dll>  [(Verified)Microsoft Corporation, 5.1.2600.2082 (xpsp(skatari).040213-0952), C:2004-08-16 16:38 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Local Port]
    <PrintMonitor: Local Port><localspl.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Microsoft Document Imaging Writer Monitor]
    <PrintMonitor: Microsoft Document Imaging Writer Monitor><mdimon.dll>  [(Verified)Microsoft Corporation, 11.3.8166.2, C:2008-03-11 14:48 M:2007-04-09 13:23]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\PJL Language Monitor]
    <PrintMonitor: PJL Language Monitor><pjlmon.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-16 16:39 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\SmarThru PC Fax Port]
    <PrintMonitor: SmarThru PC Fax Port><SamFaxPort.dll>  [N/A, C:2008-03-11 15:43 M:2005-11-30 20:34]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Standard TCP/IP Port]
    <PrintMonitor: Standard TCP/IP Port><tcpmon.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\SUGW2 Langmon]
    <PrintMonitor: SUGW2 Langmon><SUGW2LMK.DLL>  [(Verified)Samsung Electronics., 1.1.2.0, C:2008-03-11 15:41 M:2005-04-08 10:29]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\USB Monitor]
    <PrintMonitor: USB Monitor><usbmon.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
    <><>  []


========================================
启动项



========================================
计划任务



========================================
组件


ShellServiceObjectDelayLoad
[PostBootReminder 对象]
    {7849596a-48ea-486e-8937-a2a3009f31a9}  <%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[烧 CD 的 ShellFolder]
    {fbeb8a05-beee-4442-804e-409d6c4515e9}  <%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[WebCheck]
    {E6FB5E20-DE35-11CF-9C87-00AA005127ED}  <C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[SysTray]
    {35CEC8A3-2BE6-11D2-8773-92E220524153}  <C:\WINDOWS\system32\stobject.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[WPDShServiceObj Class]
    {AAA288BA-9A4C-45B0-95D7-94D524869DB5}  <C:\WINDOWS\system32\WPDShServiceObj.dll>  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]

ShredTaskScheduler
[Browseui 预加载程序]
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[组件类别缓存程序]
    {8C7461EF-2B13-11d2-BE35-3078302C2030}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]

ShellExecuteHook
[URL 执行挂钩]
    {AEB6717E-7E19-11d0-97EE-00C04FD91972}  <shell32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[ShlExecHack Class]
    {32CD708B-60A7-4C00-9377-D73EAA495F0F}  <C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2008-03-11 14:37 M:2008-07-29 07:45]

Shell Extension
[Multimedia File Property Sheet]
    {00022613-0000-0000-C000-000000000046}  <mmsys.cpl>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
[ICM 扫描仪管理]
    {176d6597-26d3-11d1-b350-080036a75b03}  <icmui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[NTFS Security Page]
    {1F2E5C40-9550-11CE-99D2-00AA006E086C}  <rshx32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[OLE Docfile Property Page]
    {3EA48300-8CF6-101B-84FB-666CCB9BCD32}  <docprop.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Shell extensions for sharing]
    {40dd6e20-7c17-11ce-a804-00aa003ca9f6}  <ntshrui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[PlusPack CPL Extension]
    {41E300E0-78B6-11ce-849B-444553540000}  <%SystemRoot%\system32\themeui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Display Adapter CPL Extension]
    {42071712-76d4-11d1-8b24-00a0c9068ff3}  <deskadp.dll>  [(Verified)Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Display Monitor CPL Extension]
    {42071713-76d4-11d1-8b24-00a0c9068ff3}  <deskmon.dll>  [(Verified)Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Display Panning CPL Extension]
    {42071714-76d4-11d1-8b24-00a0c9068ff3}  <deskpan.dll>  []
[DS Security Page]
    {4E40F770-369C-11d0-8922-00A024AB2DBB}  <dssec.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Compatibility Page]
    {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}  <SlayerXP.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Shell Scrap DataHandler]
    {56117100-C0CD-101B-81E2-00AA004AE837}  <shscrap.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Disk Copy Extension]
    {59099400-57FF-11CE-BD94-0020AF85B590}  <diskcopy.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Shell extensions for Microsoft Windows Network objects]
    {59be4990-f85c-11ce-aff7-00aa003ca9f6}  <ntlanui2.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[ICM 监视器管理]
    {5DB2625A-54DF-11D0-B6C4-0800091AA605}  <%SystemRoot%\System32\icmui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[ICM 打印机管理]
    {675F097E-4C4D-11D0-B6C1-0800091AA605}  <%SystemRoot%\system32\icmui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Web Printer Shell Extension]
    {77597368-7b15-11d0-a0c2-080036af3f03}  <printui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Disk Quota UI]
    {7988B573-EC89-11cf-9C00-00AA00A14F56}  <dskquoui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[公文包]
    {85BBD920-42A0-1069-A2E4-08002B30309D}  <syncui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[HyperTerminal Icon Ext]
    {88895560-9AA2-1069-930E-00AA0030EBC8}  <C:\WINDOWS\system32\hticons.dll>  [(Verified)Hilgraeve, Inc., 5.1.2600.0, C:2008-03-11 14:23 M:2004-08-17 18:00]
[字体]
    {BD84B380-8CA2-1069-AB1D-08000948F534}  <fontext.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[ICC 配置文件]
    {DBCE2480-C732-101B-BE72-BA78E9AD5B27}  <%SystemRoot%\system32\icmui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Printers Security Page]
    {F37C5810-4D3F-11d0-B4BF-00AA00BBB723}  <rshx32.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Shell extensions for sharing]
    {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}  <ntshrui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Display TroubleShoot CPL Extension]
    {f92e8c40-3d33-11d2-b1aa-080036a75b03}  <deskperf.dll>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Crypto PKO Extension]
    {7444C717-39BF-11D1-8CD9-00C04FC29D45}  <C:\WINDOWS\system32\cryptext.dll>  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Crypto Sign Extension]
    {7444C719-39BF-11D1-8CD9-00C04FC29D45}  <C:\WINDOWS\system32\cryptext.dll>  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[网络连接]
    {7007ACC7-3202-11D1-AAD2-00805FC1270E}  <C:\WINDOWS\system32\NETSHELL.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[网络连接]
    {992CFFA0-F557-101A-88EC-00DD010CCC48}  <C:\WINDOWS\system32\NETSHELL.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[扫描仪和照相机]
    {E211B736-43FD-11D1-9EFB-0000F8757FCD}  <wiashext.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[扫描仪和照相机]
    {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}  <wiashext.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[扫描仪和照相机]
    {905667aa-acd6-11d2-8080-00805f6596d2}  <wiashext.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[扫描仪和照相机]
    {3F953603-1008-4f6e-A73A-04AAC7A992F1}  <wiashext.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[扫描仪和照相机]
    {83bbcbf3-b28a-4919-a5aa-73027445d672}  <wiashext.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Remote Sessions CPL Extension]
    {F0152790-D56E-4445-850E-4F3117DB740C}  <C:\WINDOWS\system32\remotepg.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-03-11 14:23 M:2008-04-13 19:13]
[Windows Script Host 的 Shell extensions]
    {60254CA5-953B-11CF-8C96-00AA00B8708C}  <C:\WINDOWS\system32\wshext.dll>  [(Verified)Microsoft Corporation, 5.7.0.18066, C:2004-08-17 10:00 M:2008-05-09 18:53]
[Microsoft 数据链接]
    {2206CDB2-19C1-11D1-89E0-00C04FD7A829}  <C:\Program Files\Common Files\system\ole db\oledb32.dll>  [(Verified)Microsoft Corporation, 2.81.1132.0 (xpsp.080413-0852), C:2008-03-11 14:24 M:2008-04-13 19:13]
[Tasks Folder Icon Handler]
    {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}  <C:\WINDOWS\system32\mstask.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
[Tasks Folder Shell Extension]
    {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}  <C:\WINDOWS\system32\mstask.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
[任务计划]
    {D6277990-4C6A-11CF-8D87-00AA0060F5BF}  <C:\WINDOWS\system32\mstask.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
[Set Program Access and Defaults]
    {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[Auto Update Property Sheet Extension]
    {5F327514-6C5E-4d60-8F16-D07FA08A78ED}  <C:\WINDOWS\system32\wuaucpl.cpl>  [(Verified)Microsoft Corporation, 7.2.6001.784 (winmain_oob/wu_wsuswlc(wmbla).080718-1904), C:2008-03-11 14:24 M:2008-07-18 22:09]
[搜索]
    {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[帮助和支持]
    {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[帮助和支持]
    {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[运行...]
    {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[Internet]
    {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[电子邮件]
    {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[字体]
    {D20EA4E1-3957-11d2-A40B-0C5020524152}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[管理工具]
    {D20EA4E1-3957-11d2-A40B-0C5020524153}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[Previous Versions Property Page]
    {596AB062-B4D2-4215-9F74-E9109B0A8153}  <C:\WINDOWS\system32\twext.dll>  [(Verified)Microsoft Corporation, 6.00.3800.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Previous Versions]
    {9DB7A13C-F208-4981-8353-73CC61AE2783}  <C:\WINDOWS\system32\twext.dll>  [(Verified)Microsoft Corporation, 6.00.3800.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Audio Media Properties Handler]
    {875CB1A1-0F29-45de-A1AE-CFB4950D0B78}  <%SystemRoot%\system32\shmedia.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Video Media Properties Handler]
    {40C3D757-D6E4-4b49-BB41-0E5BBEA28817}  <%SystemRoot%\system32\shmedia.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Wav Properties Handler]
    {E4B29F9D-D390-480b-92FD-7DDB47101D71}  <%SystemRoot%\system32\shmedia.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Avi Properties Handler]
    {87D62D94-71B3-4b9a-9489-5FE6850DC73E}  <%SystemRoot%\system32\shmedia.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Midi Properties Handler]
    {A6FD9E45-6E44-43f9-8644-08598F5A74D9}  <%SystemRoot%\system32\shmedia.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Video Thumbnail Extractor]
    {c5a40261-cd64-4ccf-84cb-c394da41d590}  <%SystemRoot%\system32\shmedia.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft Internet 工具栏]
    {5E6AB780-7743-11CF-A12B-00AA004AE837}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[下载状态]
    {22BF0C20-6DA7-11D0-B373-00A0C9034938}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[补充的外壳文件夹]
    {91EA3F8B-C99B-11d0-9815-00C04FD91972}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[补充的外壳文件夹 2]
    {6413BA2C-B461-11d1-A18A-080036B11A03}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[BandProxy]
    {F61FFEC1-754F-11d0-80CA-00AA005B4383}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[Microsoft BrowserBand]
    {7BA4C742-9E81-11CF-99D3-00AA004AE837}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[Shell Search Band]
    {21569614-B795-46b1-85F4-E737A8DC09AD}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[窗格中的搜索]
    {169A0691-8DF9-11d1-A1C4-00C04FD75D13}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[注册数目路选项实用程序]
    {AF4F6510-F982-11d0-8595-00AA004CD6D8}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[地址(&A)]
    {01E04581-4EEE-11d0-BFE9-00AA005B4383}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[地址 EditBox]
    {A08C11D2-A228-11d0-825B-00AA005B4383}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[Shell Microsoft AutoComplete]
    {00BB2763-6A77-11D0-A535-00C04FD7D062}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[MRU 自动完成列表]
    {6756A641-DE71-11d0-831B-00AA005B4383}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[自定义 MRU 自动完成列表]
    {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[可访问的]
    {7e653215-fa25-46bd-a339-34a2790f3cb7}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[跟踪弹出栏]
    {acf35015-526e-4230-9596-becbe19f0ac9}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[Microsoft 历史自动完成列表]
    {00BB2764-6A77-11D0-A535-00C04FD7D062}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[Microsoft 外壳文件夹自动完成列表]
    {03C036F1-A186-11D0-824A-00AA005B4383}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[Microsoft 多个自动完成列表容器]
    {00BB2765-6A77-11D0-A535-00C04FD7D062}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[Shell Band Site Menu]
    {ECD4FC4E-521C-11D0-B792-00A0C90312E1}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[外壳 DeskBarApp]
    {3CCF8A41-5C85-11d0-9796-00AA00B90ADF}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[外壳 DeskBar]
    {ECD4FC4C-521C-11D0-B792-00A0C90312E1}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[外壳 Rebar BandSite]
    {ECD4FC4D-521C-11D0-B792-00A0C90312E1}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[用户帮助]
    {DD313E04-FEFF-11d1-8ECD-0000F87A470C}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[全局文件夹设置]
    {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[IE Search Band]
    {30D02401-6A81-11d0-8274-00C04FD5AE38}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE AutoComplete]
    {3028902F-6374-48b2-8DC6-9725E775B926}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[Web 搜索]
    {07798131-AF23-11d1-9111-00A0C98BA67D}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[TridentImageExtractor]
    {7376D660-C583-11d0-A3A5-00C04FD706EC}  <%SystemRoot%\system32\browseui.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
[Favorites Band]
    {EFA24E61-B078-11d0-89E4-00C04FC9E26E}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[History Band]
    {EFA24E62-B078-11d0-89E4-00C04FC9E26E}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[Shell Automation Inproc Service]
    {0A89A860-D7B1-11CE-8350-444553540000}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[Microsoft Browser Architecture]
    {A5E46E3A-8849-11D1-9D8C-00C04FC99D61}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[ISFBand OC]
    {131A6951-7F78-11D0-A979-00C04FD705A2}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[Search Assistant OC]
    {9461b922-3c5a-11d2-bf8b-00c04fb93661}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[Shell DocObject Viewer]
    {E7E4BC40-E76A-11CE-A9BB-00AA004AE837}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[InternetShortcut]
    {FBF23B40-E3F0-101B-8488-00AA003E56F8}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[Microsoft Url History Service]
    {3C374A40-BAE4-11CF-BF7D-00AA006946EE}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[History]
    {FF393560-C2A7-11CF-BFF4-444553540000}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[Temporary Internet Files]
    {7BD29E00-76C1-11CF-9DD0-00A0C9034933}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[Temporary Internet Files]
    {7BD29E01-76C1-11CF-9DD0-00A0C9034933}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[Microsoft Url Search Hook]
    {CFBFAE00-17A6-11D0-99CB-00C04FD64497}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE4 套件初始屏幕]
    {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[CDF Extension Copy Hook]
    {67EA19A0-CCEF-11d0-8024-00C04FD75D13}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[The Internet]
    {3DC7A020-0ACD-11CF-A9BB-00AA004AE837}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[浏览器栏]
    {EFA24E64-B078-11d0-89E4-00C04FC9E26E}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[Internet Name Space]
    {871C5380-42A0-1069-A2EA-08002B30309D}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[Sendmail service]
    {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}  <C:\WINDOWS\system32\sendmail.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Sendmail service]
    {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}  <C:\WINDOWS\system32\sendmail.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[ActiveX Cache Folder]
    {88C6C381-2E85-11D0-94DE-444553540000}  <C:\WINDOWS\system32\occache.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[WebCheck]
    {E6FB5E20-DE35-11CF-9C87-00AA005127ED}  <C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[Subscription Mgr]
    {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}  <C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[Subscription Folder]
    {F5175861-2688-11d0-9C5E-00AA00A45957}  <C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[WebCheckWebCrawler]
    {08165EA0-E946-11CF-9C87-00AA005127ED}  <C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[WebCheckChannelAgent]
    {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}  <%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[TrayAgent]
    {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}  <%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[Code Download Agent]
    {7D559C10-9FE9-11d0-93F7-00AA0059CE02}  <C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[ConnectionAgent]
    {E6CC6978-6B6E-11D0-BECA-00C04FD940BE}  <%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[PostAgent]
    {D8BD2030-6FC9-11D0-864F-00AA006809D9}  <%SystemRoot%\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[WebCheck SyncMgr Handler]
    {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}  <C:\WINDOWS\system32\webcheck.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[Shell Application Manager]
    {352EC2B7-8B9A-11D1-B8AE-006008059382}  <%SystemRoot%\system32\appwiz.cpl>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Installed Apps Enumerator]
    {0B124F8F-91F0-11D1-B8B5-006008059382}  <%SystemRoot%\system32\appwiz.cpl>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Darwin App Publisher]
    {CFCCC7A0-A282-11D1-9082-006008059382}  <%SystemRoot%\system32\appwiz.cpl>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Shell Image Verbs]
    {e84fda7c-1d6a-45f6-b725-cb260c236066}  <%SystemRoot%\system32\shimgvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Shell Image Data Factory]
    {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}  <%SystemRoot%\system32\shimgvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[GDI+ 文件缩略图解压缩程序]
    {3F30C968-480A-4C6C-862D-EFC0897BB84B}  <C:\WINDOWS\system32\shimgvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[摘要信息缩略图处理程序(DOCFILES)]
    {9DBD2C50-62AD-11d0-B806-00C04FD706EC}  <C:\WINDOWS\system32\shimgvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[HTML 缩略图的解压缩程序]
    {EAB841A0-9550-11cf-8C16-00805F1408F3}  <C:\WINDOWS\system32\shimgvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Shell Image Property Handler]
    {eb9b1153-3b57-4e68-959a-a3266bc3d7fe}  <%SystemRoot%\system32\shimgvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[网络出版向导]
    {CC6EEFFB-43F6-46c5-9619-51D571967F7D}  <%SystemRoot%\system32\netplwiz.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[通过 Web 订购照片]
    {add36aa8-751a-4579-a266-d66f5202ccbb}  <%SystemRoot%\system32\netplwiz.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[外壳出版向导对象]
    {6b33163c-76a5-4b6c-bf21-45de9cd503a1}  <%SystemRoot%\system32\netplwiz.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[获取 Passport 向导]
    {58f1f272-9240-4f51-b6d4-fd63d1618591}  <%SystemRoot%\system32\netplwiz.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[压缩(zipped)文件夹]
    {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}  <%SystemRoot%\system32\zipfldr.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Compressed (zipped) Folder Right Drag Handler]
    {BD472F60-27FA-11cf-B8B4-444553540000}  <%SystemRoot%\system32\zipfldr.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Compressed (zipped) Folder SendTo Target]
    {888DCA60-FC0A-11CF-8F0F-00C04FD7D062}  <%SystemRoot%\system32\zipfldr.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Extensions Manager Folder]
    {692F0339-CBAA-47e6-B5B5-3B84DB604E87}  <C:\WINDOWS\system32\extmgr.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:34 M:2008-06-24 00:14]
[FTP Folders Webview]
    {63da6ec0-2e98-11cf-8d82-444553540000}  <C:\WINDOWS\system32\msieftp.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft DocProp Shell Ext]
    {883373C3-BF89-11D1-BE35-080036B11A03}  <C:\WINDOWS\system32\docprop2.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft DocProp Inplace Edit Box Control]
    {A9CF0EAE-901A-4739-A481-E35B73E47F6D}  <C:\WINDOWS\system32\docprop2.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft DocProp Inplace ML Edit Box Control]
    {8EE97210-FD1F-4B19-91DA-67914005F020}  <C:\WINDOWS\system32\docprop2.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft DocProp Inplace Droplist Combo Control]
    {0EEA25CC-4362-4A12-850B-86EE61B0D3EB}  <C:\WINDOWS\system32\docprop2.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft DocProp Inplace Calendar Control]
    {6A205B57-2567-4A2C-B881-F787FAB579A3}  <C:\WINDOWS\system32\docprop2.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft DocProp Inplace Time Control]
    {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}  <C:\WINDOWS\system32\docprop2.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Directory Query UI]
    {8A23E65E-31C2-11d0-891C-00A024AB2DBB}  <%SystemRoot%\system32\dsquery.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Shell properties for a DS object]
    {9E51E0D0-6E0F-11d2-9601-00C04FA31A86}  <%SystemRoot%\system32\dsquery.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Directory Object Find]
    {163FDC20-2ABC-11d0-88F0-00A024AB2DBB}  <%SystemRoot%\system32\dsquery.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Directory Start/Search Find]
    {F020E586-5264-11d1-A532-0000F8757D7E}  <%SystemRoot%\system32\dsquery.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Directory Property UI]
    {0D45D530-764B-11d0-A1CA-00AA00C16E65}  <%SystemRoot%\system32\dsuiext.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Directory Context Menu Verbs]
    {62AE1F9A-126A-11D0-A14B-0800361B1103}  <%SystemRoot%\system32\dsuiext.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[MyDocs Copy Hook]
    {ECF03A33-103D-11d2-854D-006008059367}  <%SystemRoot%\system32\mydocs.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[MyDocs Drop Target]
    {ECF03A32-103D-11d2-854D-006008059367}  <%SystemRoot%\system32\mydocs.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[MyDocs Properties]
    {4a7ded0a-ad25-11d0-98a8-0800361b1103}  <%SystemRoot%\system32\mydocs.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Offline Files Menu]
    {750fdf0e-2a26-11d1-a3ea-080036587f03}  <%SystemRoot%\System32\cscui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Offline Files Folder Options]
    {10CFC467-4392-11d2-8DB4-00C04FA31A66}  <%SystemRoot%\System32\cscui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[脱机文件夹]
    {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}  <%SystemRoot%\System32\cscui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft Agent Character Property Sheet Handler]
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}  <C:\WINDOWS\msagent\agentpsh.dll>  [(Verified)Microsoft Corporation, 2.00.0.3427, C:2004-08-17 10:00 M:2008-04-13 19:13]
[DfsShell]
    {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}  <C:\WINDOWS\system32\dfsshlex.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
[%DESC_PublishDropTarget%]
    {60fd46de-f830-4894-a628-6fa81bc0190d}  <%SystemRoot%\system32\photowiz.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[MMC Icon Handler]
    {7A80E4A8-8005-11D2-BCF8-00C04F72C717}  <%SystemRoot%\System32\mmcshext.dll>  [(Verified)Microsoft Corporation, 5.2.3790.4136 (srv03_sp2_qfe.070821-1204), C:2004-08-17 10:00 M:2008-04-13 19:13]
[.CAB file viewer]
    {0CD7A5C0-9F37-11CE-AE65-08002B2E1262}  <cabview.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[用户(&P)...]
    {32714800-2E5F-11d0-8B85-00AA0044F941}  <C:\Program Files\Outlook Express\wabfind.dll>  [(Verified)Microsoft Corporation, 6.00.2800.1106, C:2008-03-11 14:24 M:2002-08-29 09:25]
[Windows Media Player Burn Audio CD Context Menu Handler]
    {8DD448E6-C188-4aed-AF92-44956194EB1F}  <C:\WINDOWS\system32\wmpshell.dll>  [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 10:00 M:2006-11-02 23:06]
[Windows Media Player Play as Playlist Context Menu Handler]
    {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}  <C:\WINDOWS\system32\wmpshell.dll>  [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 10:00 M:2006-11-02 23:06]
[Windows Media Player Add to Playlist Context Menu Handler]
    {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}  <C:\WINDOWS\system32\wmpshell.dll>  [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 10:00 M:2006-11-02 23:06]
[NvCpl DesktopContext Class]
    {A70C977A-BF00-412C-90B7-034C51DA2439}  <C:\WINDOWS\system32\nvcpl.dll>  [(Verified)NVIDIA Corporation, 6.14.10.9152, C:2008-03-11 14:34 M:2006-10-03 14:07]
[Play on my TV helper]
    {FFB699E0-306A-11d3-8BD1-00104B6F7516}  <C:\WINDOWS\system32\nvcpl.dll>  [(Verified)NVIDIA Corporation, 6.14.10.9152, C:2008-03-11 14:34 M:2006-10-03 14:07]
[Desktop Explorer]
    {1CDB2949-8F65-4355-8456-263E7C208A5D}  <C:\WINDOWS\system32\nvshell.dll>  [N/A, C:2008-03-11 14:34 M:2006-10-03 14:07]
[Desktop Explorer Menu]
    {1E9B04FB-F9E5-4718-997B-B8DA88302A47}  <C:\WINDOWS\system32\nvshell.dll>  [N/A, C:2008-03-11 14:34 M:2006-10-03 14:07]
[nView Desktop Context Menu]
    {1E9B04FB-F9E5-4718-997B-B8DA88302A48}  <C:\WINDOWS\system32\nvshell.dll>  [N/A, C:2008-03-11 14:34 M:2006-10-03 14:07]
[WinRAR shell extension]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2008-03-11 14:36 M:2005-04-06 19:34]
[RISING]
    {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}  <C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2008-03-11 14:37 M:2008-07-29 07:45]
[Web Folders]
    {BDEADF00-C265-11D0-BCED-00A0C90AB50F}  <C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL>  [(Verified)Microsoft Corporation, 11.0.6715.60, C:2005-09-20 12:33 M:2005-09-20 12:33]
[Microsoft Office HTML Icon Handler]
    {42042206-2D85-11D3-8CFF-005004838597}  <C:\Program Files\Microsoft Office\OFFICE11\msohev.dll>  [(Verified)Microsoft Corporation, 11.0.5510, C:2003-07-14 22:52 M:2003-07-14 22:52]
[AutoCAD 数字签名图标覆盖处理程序]
    {36A21736-36C2-4C11-8ACB-D4136F2B57BD}  <C:\WINDOWS\system32\AcSignIcon.dll>  [(Verified)Autodesk, 17.0.54.0, C:2006-04-21 16:00 M:2006-04-21 16:00]
[Autodesk Drawing Preview]
    {AC1DB655-4F9A-4c39-8AD2-A65324A4C446}  <C:\Program Files\Common Files\Autodesk Shared\Thumbnail\AcThumbnail16.dll>  [(Verified)Autodesk, 17.0.54.0, C:2006-04-21 16:00 M:2006-04-21 16:00]
[Portable Media Devices]
    {640167b4-59b0-47a6-b335-a6b3c0695aea}  <%SystemRoot%\system32\Audiodev.dll>  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
[Portable Devices]
    {35786D3C-B075-49b9-88DD-029876E11C01}  <%SystemRoot%\system32\wpdshext.dll>  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
[Portable Devices Menu]
    {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}  <%SystemRoot%\system32\wpdshext.dll>  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
[ShellLink for Application References]
    {e82a2d71-5b2f-43a0-97b8-81be15854de8}  <C:\WINDOWS\system32\dfshim.dll>  [(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47]
[Shell Icon Handler for Application References]
    {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}  <C:\WINDOWS\system32\dfshim.dll>  [(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47]
[Microsoft.XPS.Shell.Metadata.1]
    {45670FA8-ED97-4F44-BC93-305082590BFB}  <%SystemRoot%\System32\XPSSHHDR.DLL>  [(Verified)Microsoft Corporation, 6.0.6000.16438 (winmain(wmbla).070123-1305), C:2006-10-14 20:21 M:2007-03-23 06:07]
[Microsoft.XPS.Shell.Thumbnail.1]
    {44121072-A222-48f2-A58A-6D9AD51EBBE9}  <%SystemRoot%\System32\XPSSHHDR.DLL>  [(Verified)Microsoft Corporation, 6.0.6000.16438 (winmain(wmbla).070123-1305), C:2006-10-14 20:21 M:2007-03-23 06:07]
[Shell Extensions for RealOne Player]
    {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}  <C:\Program Files\Real\RealPlayer\rpshell.dll>  [(Verified)RealNetworks, Inc., 1.0.2.44, C:2008-03-15 14:09 M:2008-04-12 10:37]
[Microsoft Office Metadata Handler]
    {993BE281-6695-4BA5-8A2A-7AACBFAAB69E}  <C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll>  [(Verified)Microsoft Corporation, 12.0.6212.1000, C:2007-09-06 17:55 M:2007-09-06 17:55]
[Microsoft Office Thumbnail Handler]
    {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97}  <C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll>  [(Verified)Microsoft Corporation, 12.0.6212.1000, C:2007-09-06 17:55 M:2007-09-06 17:55]
[Messenger Sharing Folders]
    {FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D}  <C:\Program Files\Windows Live\Messenger\fsshext.8.5.1302.1018.dll>  [(Verified)Microsoft Corporation, 8.5.1302.1018, C:2007-10-18 11:32 M:2007-10-18 11:32]
[Registered ActiveX Controls]
    {6B19FEC2-A45B-11CF-9045-00A0C9039735}  <D:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\DEVXPGL.DLL>  [Microsoft Corporation, 6.00.8168.0, C:1998-06-17 00:00 M:1998-06-17 00:00]
[Developer Studio Components]
    {D545EBD1-BD92-11CF-8772-00A0C9039735}  <D:\Program Files\Microsoft Visual Studio\Common\MSDev98\Bin\IDE\DEVXPGL.DLL>  [Microsoft Corporation, 6.00.8168.0, C:1998-06-17 00:00 M:1998-06-17 00:00]
[IE Microsoft BrowserBand]
    {07C45BB1-4A8C-4642-A1F5-237E7215FF66}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Fade Task]
    {1C1EDB47-CE22-4bbb-B608-77B48F83C823}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Menu Desk Bar]
    {205D7A97-F16D-4691-86EF-F3075DCCA57D}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Navigation Bar]
    {43886CD5-6529-41c4-A707-7B3C92C05E68}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Menu Site]
    {44C76ECD-F7FA-411c-9929-1B77BA77F524}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Menu Band]
    {4B78D326-D922-44f9-AF2A-07805C2A3560}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Microsoft History AutoComplete List]
    {6038EF75-ABFC-4e59-AB6F-12D397F6568D}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Tracking Shell Menu]
    {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE IShellFolderBand]
    {6CF48EF8-44CD-45d2-8832-A16EA016311B}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE BandProxy]
    {73CFD649-CD48-4fd8-A272-2070EA56526B}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE MRU AutoComplete List]
    {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE RSS Feeder Folder]
    {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Microsoft Shell Folder AutoComplete List]
    {9D958C62-3954-4b44-8FAB-C4670C1DB4C2}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Microsoft Multiple AutoComplete List Container]
    {B31C5FAE-961F-415b-BAF0-E697A5178B94}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[Microsoft Browser Architecture]
    {BC476F4C-D9D7-4100-8D4E-E043F6DEC409}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Shell Rebar BandSite]
    {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Shell Band Site Menu]
    {E6EE9AAC-F76B-4947-8260-A9F136138E11}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[&Links]
    {F2CF5485-4E02-4f68-819C-B92DE9277049}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Registry Tree Options Utility]
    {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE User Assist]
    {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[IE Custom MRU AutoCompleted List]
    {FDE7673D-2E19-4145-8376-BBD58C4BC7BA}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]

Protocols
[Cor MIME Filter, CorFltr, CorFltr 1]
    {1E66F26B-79EE-11D2-8710-00C04F79ED0D}  <mscoree.dll>  [(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47]
[AP Class Install Handler filter]
    {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[AP encoding/decoding Filters]
    {8f6b0360-b80d-11d0-a9b3-006097942311}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[WebView MIME Filter]
    {733AC4CB-F1A4-11d0-B951-00A0C90312E1}  <%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[]
    {807553E5-5146-11D5-A672-00B0D022E945}  <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL>  [(Verified)Microsoft Corporation, 11.0.8164, C:2007-04-19 13:57 M:2007-04-19 13:57]
[Microsoft HTML About Pluggable Protocol]
    {3050F406-98B5-11CF-BB82-00AA00BDCE0B}  <C:\WINDOWS\system32\mshtml.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
[CDL: Asychronous Pluggable Protocol Handler]
    {3dd53d40-7b8b-11D0-b013-00aa0059ce02}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[DVD: 可插入协议]
    {12D51199-0DB5-46FE-A120-47A3D7D937CC}  <C:\WINDOWS\system32\msvidctl.dll>  [(Verified)Microsoft Corporation, 6.05.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
[file:, local: Asychronous Pluggable Protocol Handler]
    {79eac9e7-baf9-11ce-8c82-00aa004ba90b}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[ftp: Asychronous Pluggable Protocol Handler]
    {79eac9e3-baf9-11ce-8c82-00aa004ba90b}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[gopher: Asychronous Pluggable Protocol Handler]
    {79eac9e4-baf9-11ce-8c82-00aa004ba90b}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[http: Asychronous Pluggable Protocol Handler]
    {79eac9e2-baf9-11ce-8c82-00aa004ba90b}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[https: Asychronous Pluggable Protocol Handler]
    {79eac9e5-baf9-11ce-8c82-00aa004ba90b}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[]
    {BBCA9F81-8F4F-11D2-90FF-0080C83D3571}  <C:\WINDOWS\wc98pp.dll>  [N/A, C:2008-08-01 11:11 M:2008-08-01 11:11]
[Microsoft InfoTech Protocols for IE 4.0]
    {9D148291-B9C8-11D0-A4CC-0000F80149F6}  <C:\WINDOWS\system32\itss.dll>  [(Verified)Microsoft Corporation, 5.2.3790.4186 (srv03_sp2_qfe.071108-1306), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Microsoft HTML Javascript Pluggable Protocol]
    {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B}  <C:\WINDOWS\system32\mshtml.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
[]
    {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC}  <C:\WINDOWS\system32\KuGoo3DownXControl.ocx>  [酷狗, 5.0.0.0, C:2008-05-28 07:38 M:2008-02-01 13:15]
[]
    {828030A1-22C1-4009-854F-8E305202313F}  <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL>  [(Verified)Microsoft Corporation, 8.5.1302.1018, C:2007-10-18 11:31 M:2007-10-18 11:31]
[Microsoft HTML Mailto Pluggable Protocol]
    {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B}  <C:\WINDOWS\system32\mshtml.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
[MHTML Asychronous Pluggable Protocol Handler]
    {05300401-BCBC-11d0-85E3-00C04FD85AB4}  <%SystemRoot%\system32\inetcomm.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5579 (xpsp_sp3_gdr.080411-1536), C:2008-03-11 14:24 M:2008-04-12 03:04]
[mk: Asychronous Pluggable Protocol Handler]
    {79eac9e6-baf9-11ce-8c82-00aa004ba90b}  <C:\WINDOWS\system32\urlmon.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
[Data Page Plugable Protocal mso-offdap11 Handler]
    {32505114-5902-49B2-880A-1F7738E5A384}  <C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL>  [(Verified)Microsoft Corporation, 11.0.8166, C:2007-05-10 13:45 M:2007-05-10 13:45]
[Microsoft HTML Resource Pluggable Protocol]
    {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B}  <C:\WINDOWS\system32\mshtml.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
[Microsoft HTML Resource Pluggable Protocol]
    {76E67A63-06E9-11D2-A840-006008059382}  <%SystemRoot%\system32\mshtml.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
[TV: 可插入协议]
    {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E}  <C:\WINDOWS\system32\msvidctl.dll>  [(Verified)Microsoft Corporation, 6.05.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
[WiaProtocol Class]
    {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE}  <C:\WINDOWS\system32\wiascr.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

BrowserHelperObject
[ThunderAtOnce Class]
    {01443AEC-0FD1-40fd-9C87-E93D1494C233}  <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-03-15 14:00 M:2008-06-13 09:43]
[Adobe PDF Reader Link Helper]
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}  <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll>  [(Verified)Adobe Systems Incorporated, 8.0.0.2006102200, C:2006-10-22 23:08 M:2006-10-22 23:08]
[Airey Class]
    {1FED1242-3E89-4A67-ABD7-3B010227AF03}  <C:\WINDOWS\system32\winbodun.dll>  [Microsoft, 1.0.0.1, C:2008-09-01 18:06 M:2008-09-01 18:07]
[RealPlayer Download and Record Plugin for Internet Explorer]
    {3049C3E9-B461-4BC5-8870-4C09146192CA}  <C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll>  [(Verified)RealPlayer, 1.0.1.57, C:2008-03-15 14:09 M:2008-04-12 10:38]
[IEAux Class]
    {7605CC7C-00FD-4A5F-BAFD-828342DE6279}  <C:\PROGRA~1\OCINS\ieaux.dll>  [(Verified)中国互联网络信息中心(CNNIC), 2, 6, 0, 9, C:2008-08-29 17:47 M:2008-08-29 17:47]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-03-15 14:00 M:2008-06-13 09:43]
[Windows Live 登录帮助程序]
    {9030D464-4C02-4ABF-8ECC-5164760863C6}  <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll>  [(Verified)Microsoft Corporation, 4.200.520.1, C:2007-09-20 10:30 M:2007-09-20 10:30]
[卡卡上网安全助手]
    {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}  <C:\WINDOWS\system32\UrlFilter.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15, C:2008-08-29 15:59 M:2008-08-29 15:59]

UrlSeachHook
[Microsoft Url Search Hook]
    {CFBFAE00-17A6-11D0-99CB-00C04FD64497}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]

ActiveX Extension
[ThunderAtOnce Class]
    {01443AEC-0FD1-40FD-9C87-E93D1494C233}  <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-03-15 14:00 M:2008-06-13 09:43]
[NTKO OFFICE文档控件]
    {01DFB4B4-0E07-4E3F-8B7A-98FD6BFF153F}  <C:\Program Files\NTKO SOFTWARE\OfficeControl\OfficeControl.ocx>  [软航科技[NTKO SOFTWARE] WEB:http://www.ntko.com Email: tanger@ntko.com, 4, 0, 1, 1, C:2005-09-11 18:01 M:2007-07-10 20:07]
[ActiveMovieControl Object]
    {05589FA1-C356-11CE-BF01-00AA0055595A}  <C:\WINDOWS\system32\wmpdxm.dll>  [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 10:00 M:2006-10-18 21:47]
[Adobe PDF Reader Link Helper]
    {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}  <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll>  [(Verified)Adobe Systems Incorporated, 8.0.0.2006102200, C:2006-10-22 23:08 M:2006-10-22 23:08]
[GerneralPeerID Class]
    {0A47E819-F82E-4D5D-B806-6A9EA94D68CD}  <C:\Program Files\Thunder Network\Thunder\Components\InMedia\peerid.dll>  [Copyright 2007, 1, 0, 0, 1, C:2008-03-15 14:00 M:2008-01-24 10:22]
[NuSphere ToolBar]
    {0F62D223-9206-4EA3-9EA8-D0F3C7C82ACA}  <d:\Program Files\nusphere\phped\nubar\NuSphereIEBar.dll>  [NuSphere Corp. (C) Copyright 2006, 1, 4, 0, 0, C:2008-08-27 16:01 M:2007-04-26 22:08]
[Fade]
    {16B280C5-EE70-11D1-9066-00C04FD9189D}  <C:\WINDOWS\system32\Dxtmsft.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
[Windows Genuine Advantage Validation Tool]
    {17492023-C23A-453E-A040-C7C580BBF700}  <C:\WINDOWS\system32\legitcheckcontrol.dll>  [(Verified)Microsoft Corporation, 1.7.0069.2, C:2008-03-20 18:06 M:2008-03-20 18:06]
[EWA Control]
    {18226BF8-DC0B-4D81-80E9-A41AE37BB73A}  <C:\PROGRA~1\COMMON~1\Synacast\SynaLive\SYNACA~1.OCX>  [(Verified)Synacast, 1, 2, 32, 0, C:2006-05-26 13:24 M:2006-05-26 13:24]
[Airey Class]
    {1FED1242-3E89-4A67-ABD7-3B010227AF03}  <C:\WINDOWS\system32\winbodun.dll>  [Microsoft, 1.0.0.1, C:2008-09-01 18:06 M:2008-09-01 18:07]
[Windows Media Player]
    {22D6F312-B0F6-11D0-94AB-0080C74C7E95}  <C:\WINDOWS\system32\wmpdxm.dll>  [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2004-08-17 10:00 M:2006-10-18 21:47]
[HTML Document]
    {25336920-03F9-11CF-8FD0-00AA00686F13}  <C:\WINDOWS\system32\mshtml.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
[XML DOM Document]
    {2933BF90-7B36-11D2-B20E-00C04F983E60}  <%SystemRoot%\system32\msxml3.dll>  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
[RealPlayer RAM Download Handler]
    {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93}  <C:\WINDOWS\system32\rmoc3260.dll>  [(Verified)RealNetworks, Inc., 6.0.10.50, C:2008-03-15 14:09 M:2008-04-12 10:37]
[RealPlayer Download and Record Plugin for Internet Explorer]
    {3049C3E9-B461-4BC5-8870-4C09146192CA}  <C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll>  [(Verified)RealPlayer, 1.0.1.57, C:2008-03-15 14:09 M:2008-04-12 10:38]
[HtmlDlgSafeHelper Class]
    {3050F819-98B5-11CF-BB82-00AA00BDCE0B}  <C:\WINDOWS\system32\mshtmled.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
[IETag Factory]
    {38481807-CA0E-42D2-BF39-B33AF135CC4D}  <C:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL>  [(Verified)Microsoft Corporation, 11.0.8164, C:2007-04-19 14:09 M:2007-04-19 14:09]
[Microsoft Office Control]
    {4453D895-F2A1-4A38-A285-1EF9BD3F6D5D}  <C:\PROGRA~1\MICROS~2\OFFICE11\AUTHZAX.DLL>  [(Verified)Microsoft Corporation, 11.0.8164, C:2007-04-19 14:10 M:2007-04-19 14:10]
[Thunder Agent Class]
    {485463B7-8FB2-4B3B-B29B-8B919B0EACCE}  <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 4, 23, C:2008-03-15 14:00 M:2008-06-13 09:43]
[EditCtrl Class]
    {488A4255-3236-44B3-8F27-FA1AECAA8844}  <C:\WINDOWS\system32\aliedit\aliedit.dll>  [(Verified)Copyright 2007, 2, 1, 2, 1, C:2007-04-19 18:46 M:2008-05-20 10:51]
[Microsoft Terminal Services Client Control (redist)]
    {4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2}  <%systemroot%\system32\mstscax.dll>  [(Verified)Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2008-03-11 14:23 M:2008-04-13 19:13]
[Microsoft Terminal Services Client Control (redist)]
    {4EDCB26C-D24C-4e72-AF07-B576699AC0DE}  <%systemroot%\system32\mstscax.dll>  [(Verified)Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2008-03-11 14:23 M:2008-04-13 19:13]
[HHCtrl Object]
    {52A2AAAE-085D-4187-97EA-8C30DB990436}  <C:\WINDOWS\system32\hhctrl.ocx>  [(Verified)Microsoft Corporation, 5.2.3790.4110 (srv03_sp2_qfe.070702-2345), C:2004-08-17 10:00 M:2008-04-13 19:12]
[Shell Name Space]
    {55136805-B2DE-11D1-B9F2-00A0C98BC547}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[WUWebControl Class]
    {6414512B-B978-451D-A0D8-FCFDF33E833C}  <C:\WINDOWS\system32\wuweb.dll>  [(Verified)Microsoft Corporation, 7.2.6001.784 (winmain_oob/wu_wsuswlc(wmbla).080718-1904), C:2008-03-11 14:24 M:2008-07-18 22:09]
[XMP Class]
    {6483F145-A768-4C41-AACC-52D4D7845851}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>  [Copyright XunLei 2007, 2, 1, 2, 77, C:2008-03-15 14:00 M:2008-08-04 12:58]
[XDRM]
    {693571CB-54A3-4E90-9D52-EEAE1334E2D3}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work>  [Copyright XunLei 2007, 1, 0, 0, 7, C:2008-03-15 14:00 M:2008-08-04 12:58]
[Windows Media Player]
    {6BF52A52-394A-11D3-B153-00C04F79FAA6}  <C:\WINDOWS\system32\wmp.dll>  [(Verified)Microsoft Corporation, 11.0.5721.5230 (WMP_11.070611-2109), C:2004-08-17 10:00 M:2007-06-11 23:51]
[MUWebControl Class]
    {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}  <C:\WINDOWS\system32\muweb.dll>  [(Verified)Microsoft Corporation, 7.2.6001.784 (winmain_oob/wu_wsuswlc(wmbla).080718-1904), C:2007-07-30 19:18 M:2008-07-18 22:07]
[Microsoft Terminal Services Client Control (redist)]
    {7390f3d8-0439-4c05-91e3-cf5cb290c3d0}  <%systemroot%\system32\mstscax.dll>  [(Verified)Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2008-03-11 14:23 M:2008-04-13 19:13]
[AxInputControl Class]
    {73E4740C-08EB-4133-896B-8D0A7C9EE3CD}  <C:\WINDOWS\DOWNLO~1\INPUTC~1.DLL>  [Copyright 2003, 1, 0, 0, 12, C:2005-07-25 15:51 M:2005-07-25 15:51]
[Microsoft Terminal Services Client Control (redist)]
    {7584c670-2274-4efb-b00b-d6aaba6d3850}  <%systemroot%\system32\mstscax.dll>  [(Verified)Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2008-03-11 14:23 M:2008-04-13 19:13]
[IEAux Class]
    {7605CC7C-00FD-4A5F-BAFD-828342DE6279}  <C:\PROGRA~1\OCINS\ieaux.dll>  [(Verified)中国互联网络信息中心(CNNIC), 2, 6, 0, 9, C:2008-08-29 17:47 M:2008-08-29 17:47]
[MediaComm Class]
    {7670648D-461B-42AF-BDFE-46D26AF5EFF2}  <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin17.dll>  [Thunder Networking Technologies,LTD, 3, 1, 5, 78, C:2008-07-23 19:51 M:2008-07-12 09:58]
[DLoader Class]
    {78ABDC59-D8E7-44D3-9A76-9A0918C52B4A}  <C:\WINDOWS\Downloaded Program Files\downloader.dll>  [Sina Com, 1, 0, 0, 11, C:2008-04-22 11:17 M:2008-04-22 11:17]
[Microsoft Web Browser]
    {8856F961-340A-11D0-A96B-00C04FD705A2}  <C:\WINDOWS\system32\ieframe.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-03-15 14:00 M:2008-06-13 09:43]
[XML HTTP 4.0]
    {88D969C5-F192-11D4-A65F-0040963251E5}  <C:\WINDOWS\system32\msxml4.dll>  [Microsoft Corporation, 4.20.9848.0, C:2007-05-08 15:10 M:2007-05-08 15:10]
[XML HTTP 5.0]
    {88D969EA-F192-11D4-A65F-0040963251E5}  <C:\Program Files\Common Files\Microsoft Shared\OFFICE11\msxml5.dll>  [(Verified)Microsoft Corporation, 5.20.1081.0, C:2007-03-16 18:41 M:2007-03-16 18:41]
[XML DOM Document 6.0]
    {88D96A05-F192-11D4-A65F-0040963251E5}  <C:\WINDOWS\system32\msxml6.dll>  [(Verified)Microsoft Corporation, 6.20.1076.0, C:2007-05-15 15:43 M:2008-04-13 19:13]
[XML HTTP 6.0]
    {88D96A0A-F192-11D4-A65F-0040963251E5}  <C:\WINDOWS\system32\msxml6.dll>  [(Verified)Microsoft Corporation, 6.20.1076.0, C:2007-05-15 15:43 M:2008-04-13 19:13]
[AxSubmitControl Class]
    {8D9E0B29-563C-4226-86C1-5FF2AE77E1D2}  <C:\WINDOWS\DOWNLO~1\SUBMIT~1.DLL>  [Copyright 2003, 1, 0, 0, 5, C:2005-01-26 00:36 M:2005-01-26 00:36]
[Windows Live 登录帮助程序]
    {9030D464-4C02-4ABF-8ECC-5164760863C6}  <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll>  [(Verified)Microsoft Corporation, 4.200.520.1, C:2007-09-20 10:30 M:2007-09-20 10:30]
[Microsoft Terminal Services Client Control (redist)]
    {9059f30f-4eb1-4bd2-9fdc-36f43a218f4a}  <%systemroot%\system32\mstscax.dll>  [(Verified)Microsoft Corporation, 6.0.6001.18000 (longhorn_rtm.080118-1840), C:2008-03-11 14:23 M:2008-04-13 19:13]
[卡卡上网安全助手]
    {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}  <C:\WINDOWS\system32\UrlFilter.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15, C:2008-08-29 15:59 M:2008-08-29 15:59]
[RavOnline Class]
    {9FAFB576-6933-4CCC-AB3D-B988EC43D04E}  <C:\WINDOWS\Downloaded Program Files\RavOLCtl.dll>  [Beijing Rising Information Technology Co., Ltd., 20.0.0.17, C:2008-08-19 09:46 M:2008-08-19 09:46]
[RMGetLicense Class]
    {A9FC132B-096D-460B-B7D5-1DB0FAE0C062}  <C:\WINDOWS\system32\msnetobj.dll>  [(Verified)Microsoft Corporation, 10.00.00.3802, C:2004-08-17 10:00 M:2005-01-28 13:44]
[DapCtrl Class]
    {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}  <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5803.60.(420).dll>  [ShenZhen Thunder Networking Technologies Ltd., 2, 1, 5803, 60, C:2008-08-06 14:43 M:2008-08-04 12:58]
[Microsoft Scriptlet Component]
    {AE24FDAE-03C6-11D1-8B76-0080C744F389}  <C:\WINDOWS\system32\mshtml.dll>  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
[SearchAssistantOC]
    {B45FF030-4447-11D2-85DE-00C04FA35C89}  <%SystemRoot%\system32\shdocvw.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
[RDS.DataSpace]
    {BD96C556-65A3-11D0-983A-00C04FC29E36}  <C:\Program Files\Common Files\system\msadc\msadco.dll>  [(Verified)Microsoft Corporation, 2.81.1132.0 (xpsp.080413-0852), C:2008-03-11 14:24 M:2008-04-13 19:13]
[VIDEO__MPEG Moniker Class]
    {CD3AFA89-B84F-48F0-9393-7EDC34128127}  <C:\WINDOWS\system32\wmp.dll>  [(Verified)Microsoft Corporation, 11.0.5721.5230 (WMP_11.070611-2109), C:2004-08-17 10:00 M:2007-06-11 23:51]
[VIDEO__X_MS_ASF Moniker Class]
    {CD3AFA8F-B84F-48F0-9393-7EDC34128127}  <C:\WINDOWS\system32\wmp.dll>  [(Verified)Microsoft Corporation, 11.0.5721.5230 (WMP_11.070611-2109), C:2004-08-17 10:00 M:2007-06-11 23:51]
[RealPlayer G2 Control]
    {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}  <C:\WINDOWS\system32\rmoc3260.dll>  [(Verified)RealNetworks, Inc., 6.0.10.50, C:2008-03-15 14:09 M:2008-04-12 10:37]
[Windows Live 登录控制]
    {D2517915-48CE-4286-970F-921E881B8C5C}  <C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll>  [(Verified)Microsoft Corporation, 4.200.520.1, C:2007-09-20 10:30 M:2007-09-20 10:30]
[Shockwave Flash Object]
    {D27CDB6E-AE6D-11CF-96B8-444553540000}  <C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx>  [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32]
[]
    {E1771B7F-98BE-407F-BA67-AA16ADA5D0C5}  <C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGSC8~1.DLL>  [(Verified)Microsoft Corporation, 8.5.1302.1018, C:2007-10-18 11:32 M:2007-10-18 11:32]
[XML HTTP Request]
    {ED8C108E-4349-11D2-91A4-00C04F7969E8}  <%SystemRoot%\system32\msxml3.dll>  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
[Thunder DapPlayer]
    {EEDD6FF9-13DE-496B-9A1C-D78B3215E266}  <C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DapPlayer3.0.5712.71.420.dll>  [ShenZhen Thunder Networking Technologies Ltd., 3, 0, 5712, 71, C:2008-08-06 14:43 M:2008-08-04 12:58]
[XPPlayer Class]
    {F3E70CEA-956E-49CC-B444-73AFE593AD7F}  <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.0.0.181.(420).dll>  [Xunlei Networking Technologies,LTD, 2, 0, 0, 181, C:2008-08-06 14:43 M:2008-08-04 12:58]
[XML DOM Document 3.0]
    {F5078F32-C551-11D3-89B9-0000F81FE221}  <%SystemRoot%\system32\msxml3.dll>  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
[Free Threaded XML DOM Document 3.0]
    {F5078F33-C551-11D3-89B9-0000F81FE221}  <%SystemRoot%\system32\msxml3.dll>  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
[XML HTTP 3.0]
    {F5078F35-C551-11D3-89B9-0000F81FE221}  <%SystemRoot%\system32\msxml3.dll>  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
[XSL Template 3.0]
    {F5078F36-C551-11D3-89B9-0000F81FE221}  <%SystemRoot%\system32\msxml3.dll>  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
[XML HTTP]
    {F6D90F16-9C73-11D3-B32E-00C04F990BB4}  <%SystemRoot%\system32\msxml3.dll>  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]

Context Menu
[AVG Anti-Spyware]
    {8934FCEF-F5B8-468f-951F-78A921CD3920}  <C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll>  [(Verified)GRISOFT s.r.o., 7, 5, 1, 36, C:2007-05-30 20:29 M:2007-05-30 20:29]
[BriefcaseMenu]
    {85BBD920-42A0-1069-A2E4-08002B30309D}  <syncui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Offline Files]
    {750fdf0e-2a26-11d1-a3ea-080036587f03}  <%SystemRoot%\System32\cscui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Open With]
    {09799AFB-AD67-11d1-ABCD-00C04FC30936}  <%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Open With EncryptionMenu]
    {A470F8CF-A1E8-4f65-8335-227475AA5C46}  <%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[RisingRavExt]
    {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}  <C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2008-03-11 14:37 M:2008-07-29 07:45]
[WinRAR]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2008-03-11 14:36 M:2005-04-06 19:34]
[Send To]
    {7BA4C740-9E81-11CF-99D3-00AA004AE837}  <%SystemRoot%\system32\SHELL32.dll>  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Sharing]
    {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}  <ntshrui.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]


========================================
服务

[Apache2.2 / Apache2.2][Running/Auto Start]
    <"C:\Program Files\xampp\apache\bin\apache.exe" -k runservice>  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:37 M:2008-01-18 07:37]
[C-DillaCdaC11BA / C-DillaCdaC11BA][Running/Auto Start]
    <C:\WINDOWS\system32\drivers\CDAC11BA.EXE>  [Macrovision, 4.20.020, C:2008-03-11 14:51 M:2008-03-11 14:51]
[FileZilla Server FTP server / FileZilla Server][Stopped/Manual Start]
    <C:\Program Files\xampp\FileZillaFTP\FileZillaServer.exe>  [FileZilla Project, 0, 9, 25, 0, C:2007-12-26 05:25 M:2007-12-26 05:25]
[Human Interface Device Access / HidServ][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll">  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Windows CardSpace / idsvc][/Manual Start]
    <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe">  [Microsoft Corporation, 3.0.4506.648 (Winfxred.004506-0648), C:2007-10-11 09:55 M:2007-10-11 09:55]
[Kingsoft Uplive Service / kaccore][Stopped/Auto Start]
    <"C:\Program Files\Kingsoft\KAC\Service\kaccore.exe">  []
[mysql / MySql][Running/Auto Start]
    <"C:\Program Files\xampp\mysql\bin\mysqld-nt.exe" "--defaults-file=C:\Program Files\xampp\mysql\bin\my.cnf" mysql>  [N/A, C:2007-12-21 22:54 M:2007-12-21 22:54]
[Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled]
    <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe">  [Microsoft Corporation, 3.0.4506.648 (Winfxred.004506-0648), C:2007-10-11 09:55 M:2007-10-11 09:55]
[RavService / RavService][Stopped/Disabled]
    <"C:\Program Files\Rising\Rav\RavService.exe" /service>  []
[Time Proted / StTimeProted][Stopped/Auto Start]
    <I:\Menu\Sctime.exe>  []

[Alerter / Alerter][Stopped/Disabled]
    <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\system32\alrsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Application Layer Gateway Service / ALG][Running/Manual Start]
    <%SystemRoot%\System32\alg.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Application Management / AppMgmt][Stopped/Manual Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\appmgmts.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[ASP.NET 状态服务 / aspnet_state][Stopped/Manual Start]
    <%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe>  [(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47]
[Windows Audio / AudioSrv][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\audiosrv.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
[AVG Anti-Spyware Guard / AVG Anti-Spyware Guard][Running/Auto Start]
    <C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe>  [(Verified)GRISOFT s.r.o., 7, 5, 1, 22, C:2007-05-30 20:31 M:2007-05-30 20:31]
[Background Intelligent Transfer Service / BITS][Stopped/Manual Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\qmgr.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 6.7.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
[Computer Browser / Browser][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\browser.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Indexing Service / CiSvc][Stopped/Manual Start]
    <%SystemRoot%\system32\cisvc.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[ClipBook / ClipSrv][Stopped/Disabled]
    <%SystemRoot%\system32\clipsrv.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[.NET Runtime Optimization Service v2.0.50727_X86 / clr_optimization_v2.0.50727_32][Stopped/Manual Start]
    <C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe>  [(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47]
[COM+ System Application / COMSysApp][Stopped/Manual Start]
    <C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Cryptographic Services / CryptSvc][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\cryptsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[DCOM 服务器进程启动器 / DcomLaunch][Running/Auto Start]
    <%SystemRoot%\system32\svchost -k DcomLaunch --> "%SystemRoot%\system32\rpcss.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
[DHCP Client / Dhcp][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\dhcpcsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start]
    <%SystemRoot%\System32\dmadmin.exe /com>  [(Verified)Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2004-08-17 10:00 M:2008-04-13 19:14]
[Logical Disk Manager / dmserver][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\dmserver.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corp., 2600.5512.503.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
[DNS Client / Dnscache][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k NetworkService --> "%SystemRoot%\System32\dnsrslvr.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Wired AutoConfig / Dot3svc][Stopped/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k dot3svc --> "%SystemRoot%\System32\dot3svc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
[Extensible Authentication Protocol Service / EapHost][Stopped/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k eapsvcs --> "%SystemRoot%\System32\eapsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
[Error Reporting Service / ERSvc][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\ersvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Event Log / Eventlog][Running/Auto Start]
    <%SystemRoot%\system32\services.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
[COM+ Event System / EventSystem][Running/Manual Start]
    <C:\WINDOWS\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\es.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 2001.12.4414.706, C:2004-08-17 10:00 M:2008-07-08 04:26]
[Fast User Switching Compatibility / FastUserSwitchingCompatibility][Running/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Windows Presentation Foundation Font Cache 3.0.0.0 / FontCache3.0.0.0][Stopped/Manual Start]
    <C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe>  [(Verified)Microsoft Corporation, 3.0.6920.1109 (lh_tools_devdiv_wpf.071009-1109), C:2007-10-09 12:58 M:2007-10-09 12:58]
[Help and Support / helpsvc][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
[Health Key and Certificate Management Service / hkmsvc][Stopped/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\kmsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
[HTTP SSL / HTTPFilter][Stopped/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k HTTPFilter --> "%SystemRoot%\System32\w3ssl.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 6.0.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[IMAPI CD-Burning COM Service / ImapiService][Stopped/Manual Start]
    <C:\WINDOWS\system32\imapi.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Server / lanmanserver][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\srvsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Workstation / lanmanworkstation][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\wkssvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[TCP/IP NetBIOS Helper / LmHosts][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\lmhsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Messenger / Messenger][Stopped/Disabled]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\msgsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Manual Start]
    <C:\WINDOWS\system32\mnmsrvc.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-03-11 14:24 M:2008-04-13 19:14]
[Distributed Transaction Coordinator / MSDTC][Stopped/Manual Start]
    <C:\WINDOWS\system32\msdtc.exe>  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:14]
[Windows Installer / MSIServer][Stopped/Manual Start]
    <C:\WINDOWS\system32\msiexec.exe /V>  [(Verified)Microsoft Corporation, 3.1.4001.5512, C:2004-08-17 10:00 M:2008-04-13 19:14]
[Network Access Protection Agent / napagent][Stopped/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\qagentrt.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
[Network DDE / NetDDE][Stopped/Disabled]
    <%SystemRoot%\system32\netdde.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Network DDE DSDM / NetDDEdsdm][Stopped/Disabled]
    <%SystemRoot%\system32\netdde.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Net Logon / Netlogon][Stopped/Manual Start]
    <%SystemRoot%\system32\lsass.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Network Connections / Netman][Running/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\netman.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Network Location Awareness (NLA) / Nla][Running/Manual Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\mswsock.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
[NT LM Security Support Provider / NtLmSsp][Stopped/Manual Start]
    <%SystemRoot%\system32\lsass.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Removable Storage / NtmsSvc][Stopped/Manual Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\ntmssvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2400.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
    <%SystemRoot%\system32\nvsvc32.exe>  [(Verified)NVIDIA Corporation, 6.14.10.9152, C:2008-03-11 14:34 M:2006-10-03 14:07]
[Office Source Engine / ose][Stopped/Manual Start]
    <"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE">  [(Verified)Microsoft Corporation, 11.0.5525, C:2003-07-28 12:28 M:2003-07-28 12:28]
[Plug and Play / PlugPlay][Running/Auto Start]
    <%SystemRoot%\system32\services.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
[IPSEC Services / PolicyAgent][Running/Auto Start]
    <%SystemRoot%\system32\lsass.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Protected Storage / ProtectedStorage][Running/Auto Start]
    <%SystemRoot%\system32\lsass.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\rasauto.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Remote Access Connection Manager / RasMan][Running/Manual Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\rasmans.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start]
    <C:\WINDOWS\system32\sessmgr.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-03-11 14:23 M:2008-04-13 19:14]
[Routing and Remote Access / RemoteAccess][Stopped/Disabled]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\mprdim.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Remote Registry / RemoteRegistry][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\system32\regsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Rising Proxy  Service / RfwProxySrv][Stopped/Manual Start]
    <C:\Program Files\Rising\Rfw\rfwProxy.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.37, C:2008-08-30 11:24 M:2008-08-30 11:23]
[Rising Personal Firewall Service / RfwService][Stopped/Manual Start]
    <C:\Program Files\Rising\Rfw\rfwsrv.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.76, C:2008-08-30 11:24 M:2008-08-30 11:23]
[Remote Procedure Call (RPC) Locator / RpcLocator][Stopped/Manual Start]
    <%SystemRoot%\system32\locator.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Remote Procedure Call (RPC) / RpcSs][Running/Auto Start]
    <%SystemRoot%\system32\svchost -k rpcss --> "%SystemRoot%\system32\rpcss.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
    <"C:\Program Files\Rising\Rav\CCenter.exe">  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.33, C:2008-08-29 15:59 M:2008-08-29 15:58]
[Rising RealTime Monitor / RsRavMon][Stopped/Auto Start]
    <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe">  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.80, C:2008-08-29 15:59 M:2008-08-29 15:58]
[QoS RSVP / RSVP][Stopped/Manual Start]
    <%SystemRoot%\system32\rsvp.exe>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Security Accounts Manager / SamSs][Running/Auto Start]
    <%SystemRoot%\system32\lsass.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Smart Card / SCardSvr][Stopped/Manual Start]
    <%SystemRoot%\System32\SCardSvr.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Task Scheduler / Schedule][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\schedsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
[Secondary Logon / seclogon][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\seclogon.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[System Event Notification / SENS][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\sens.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Windows Firewall/Internet Connection Sharing (ICS) / SharedAccess][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\ipnathlp.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Shell Hardware Detection / ShellHWDetection][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Print Spooler / Spooler][Running/Auto Start]
    <%SystemRoot%\system32\spoolsv.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
[System Restore Service / srservice][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\srsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
[SSDP Discovery Service / SSDPSRV][Running/Manual Start]
    <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\ssdpsrv.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Windows Image Acquisition (WIA) / stisvc][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k imgsvc --> "%SystemRoot%\system32\wiaservc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[MS Software Shadow Copy Provider / SwPrv][Stopped/Manual Start]
    <C:\WINDOWS\system32\dllhost.exe /Processid:{7A745428-75C7-460F-91A9-D0854E7D4B24}>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Performance Logs and Alerts / SysmonLog][Stopped/Manual Start]
    <%SystemRoot%\system32\smlogsvc.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Telephony / TapiSrv][Running/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\tapisrv.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Terminal Services / TermService][Running/Manual Start]
    <%SystemRoot%\System32\svchost -k DComLaunch --> "%SystemRoot%\System32\termsrv.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-03-11 14:23 M:2008-04-13 19:13]
[Themes / Themes][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Telnet / TlntSvr][Stopped/Disabled]
    <C:\WINDOWS\system32\tlntsvr.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Distributed Link Tracking Client / TrkWks][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\trkwks.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Windows User Mode Driver Framework / UMWdf][Stopped/Manual Start]
    <C:\WINDOWS\system32\wdfmgr.exe>  [(Verified)Microsoft Corporation, 5.2.3790.1230 built by: dnsrv(bld4act), C:2006-10-18 21:58 M:2005-01-28 13:44]
[Universal Plug and Play Device Host / upnphost][Stopped/Manual Start]
    <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\upnphost.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Uninterruptible Power Supply / UPS][Stopped/Manual Start]
    <%SystemRoot%\System32\ups.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Messenger 共享文件夹 USN 杂志阅读器服务 / usnjsvc][Stopped/Manual Start]
    <"C:\Program Files\Windows Live\Messenger\usnsvc.exe">  [(Verified)Microsoft Corporation, 8.5.1302.1018, C:2007-10-18 11:31 M:2007-10-18 11:31]
[Volume Shadow Copy / VSS][Stopped/Manual Start]
    <%SystemRoot%\System32\vssvc.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:14]
[Windows Time / W32Time][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\w32time.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[WebClient / WebClient][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\webclnt.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Windows Management Instrumentation / winmgmt][Running/Auto Start]
    <%systemroot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\wbem\WMIsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
[Windows Live Setup Service / WLSetupSvc][Stopped/Manual Start]
    <"C:\Program Files\Windows Live\installer\WLSetupSvc.exe">  [(Verified)Microsoft Corporation, 12.0.1471.1025, C:2007-10-25 15:27 M:2007-10-25 15:27]
[Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\MsPMSNSv.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 10.0.3790.3802, C:2004-08-17 10:00 M:2005-01-28 13:44]
[Windows Management Instrumentation Driver Extensions / Wmi][Stopped/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\advapi32.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
[WMI Performance Adapter / WmiApSrv][Stopped/Manual Start]
    <C:\WINDOWS\system32\wbem\wmiapsrv.exe>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:14]
[Windows Media Player Network Sharing Service / WMPNetworkSvc][Stopped/Manual Start]
    <"C:\Program Files\Windows Media Player\WMPNetwk.exe">  [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2006-11-02 23:06 M:2006-11-02 23:06]
[Security Center / wscsvc][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SYSTEMROOT%\system32\wscsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
[Automatic Updates / wuauserv][Running/Auto Start]
    <%systemroot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\wuauserv.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.4.3790.5512 (xpsp.080413-0852), C:2008-03-11 14:24 M:2008-04-13 19:13]
[Windows Driver Foundation - User-mode Driver Framework / WudfSvc][Running/Auto Start]
    <%SystemRoot%\system32\svchost.exe -k WudfServiceGroup --> "%SystemRoot%\System32\WUDFSvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 18:56 M:2006-09-28 18:56]
[Wireless Zero Configuration / WZCSVC][Running/Auto Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\wzcsvc.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-16 16:39 M:2008-04-13 19:13]
[Network Provisioning Service / xmlprov][Stopped/Manual Start]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\xmlprov.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]


========================================
驱动

[360TimeProt / 360TimeProt][Running/Auto Start]
    <\??\C:\WINDOWS\system32\drivers\360TimeProt.sys>  [N/A, C:2008-05-01 08:07 M:2008-05-01 08:07]
[CdaC15BA / CdaC15BA][Running/Auto Start]
    <\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS>  [Macrovision Europe Ltd, 3.17.000, C:2008-03-11 14:51 M:2008-03-11 14:51]
[cnprov / cnprov][Running/Boot Start]
    <system32\drivers\cnprov.sys>  [中国互联网络信息中心(CNNIC), 2.6.0.0, C:2008-08-29 17:47 M:2008-08-29 17:47]
[DgiVecp / DgiVecp][Running/Auto Start]
    <\??\C:\WINDOWS\system32\Drivers\DgiVecp.sys>  [DeviceGuys, Inc., 1.1.1.30, C:2008-03-11 15:40 M:2005-11-30 17:42]
[idnaux / idnaux][Running/Auto Start]
    <system32\drivers\idnaux.sys>  [中国互联网络信息中心(CNNIC), 2, 6, 0, 0, C:2008-08-29 17:47 M:2008-08-29 17:47]
[PnpWmkDrv / PnpWmkDrv][Running/System Start]
    <\??\C:\WINDOWS\system32\drivers\PnpWmkDrv.sys>  [Windows (R) 2000 DDK provider, 5.1.2600.0 built by: WinDDK, C:2008-08-29 10:18 M:2007-09-05 10:23]
[SSPORT / SSPORT][Stopped/Auto Start]
    <\??\C:\WINDOWS\system32\Drivers\SSPORT.sys>  []
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
    <system32\DRIVERS\tcpip.sys>  [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-07-09 13:48 M:2008-06-20 19:51]

[Microsoft ACPI Driver / ACPI][Running/Boot Start]
    <system32\DRIVERS\ACPI.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 18:47]
[Microsoft Kernel Acoustic Echo Canceller / aec][Stopped/Manual Start]
    <system32\drivers\aec.sys>  [(Verified)Microsoft Corporation, 5.1.2601.3142, C:2008-03-11 14:32 M:2008-04-13 09:39]
[AFD / AFD][Running/System Start]
    <\SystemRoot\System32\drivers\afd.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-07-09 13:48 M:2008-06-20 19:40]
[AMD Processor Driver / AmdK8][Running/System Start]
    <system32\DRIVERS\AmdK8.sys>  [(Verified)Advanced Micro Devices, 1.3.2 (dnsrv(wmbla).060701-2226), C:2008-03-11 14:33 M:2006-07-01 22:39]
[RAS Asynchronous Media Driver / AsyncMac][Stopped/Manual Start]
    <system32\DRIVERS\asyncmac.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:57]
[标准 IDE/ESDI 硬盘控制器 / atapi][Running/Boot Start]
    <system32\DRIVERS\atapi.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:40]
[ATM ARP Client Protocol / Atmarpc][Stopped/Manual Start]
    <system32\DRIVERS\atmarpc.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:51]
[音频存根驱动程序 / audstub][Running/Manual Start]
    <system32\DRIVERS\audstub.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-03-11 14:22 M:2001-08-17 13:59]
[AVG Anti-Spyware Driver / AVG Anti-Spyware Driver][Running/System Start]
    <\??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys>  [(Verified)N/A, C:2007-05-30 20:10 M:2007-05-30 20:10]
[AVG Anti-Spyware Clean Driver / AvgAsCln][Running/System Start]
    <System32\DRIVERS\AvgAsCln.sys>  [(Verified)GRISOFT, s.r.o., 1.0.0.14, C:2008-09-07 12:51 M:2007-05-30 20:10]
[Broadcom NetXtreme Gigabit Ethernet / b57w2k][Running/Manual Start]
    <system32\DRIVERS\b57xp32.sys>  [(Verified)Broadcom Corporation, 9.52.0.0 built by: WinDDK, C:2008-03-11 14:34 M:2006-05-10 15:00]
[Closed Caption Decoder / CCDECODE][Stopped/Manual Start]
    <system32\DRIVERS\CCDECODE.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-05-04 15:06 M:2008-04-13 11:46]
[CD-ROM Driver / Cdrom][Running/System Start]
    <system32\DRIVERS\cdrom.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:40]
[磁盘驱动器 / Disk][Running/Boot Start]
    <system32\DRIVERS\disk.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:40]
[dmboot / dmboot][Stopped/Disabled]
    <System32\drivers\dmboot.sys>  [(Verified)Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2004-08-17 10:00 M:2008-04-13 18:54]
[Logical Disk Manager Driver / dmio][Running/Boot Start]
    <System32\drivers\dmio.sys>  [(Verified)Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2004-08-17 10:00 M:2008-04-13 18:54]
[dmload / dmload][Running/Boot Start]
    <System32\drivers\dmload.sys>  [(Verified)Microsoft Corp., Veritas Software., 2600.0.503.0, C:2004-08-17 10:00 M:2004-08-17 10:00]
[Microsoft Kernel DLS Syntheiszer / DMusic][Stopped/Manual Start]
    <system32\drivers\DMusic.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 11:45]
[Microsoft Kernel DRM Audio Descrambler / drmkaud][Stopped/Manual Start]
    <system32\drivers\drmkaud.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 11:45]
[FltMgr / FltMgr][Running/Boot Start]
    <system32\drivers\fltmgr.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-03-11 14:24 M:2008-04-13 11:33]
[FsVga / FsVga][Running/System Start]
    <system32\DRIVERS\fsvga.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2001-08-31 15:43 M:2004-08-17 10:00]
[Volume Manager Driver / Ftdisk][Running/Boot Start]
    <system32\DRIVERS\ftdisk.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Generic Packet Classifier / Gpc][Running/Manual Start]
    <system32\DRIVERS\msgpc.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:56]
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
    <system32\DRIVERS\HDAudBus.sys>  [(Verified)Windows (R) Server 2003 DDK provider, 5.10.01.5013 built by: WinDDK, C:2004-08-12 17:45 M:2008-04-13 09:36]
[Microsoft HID Class Driver / hidusb][Running/Manual Start]
    <system32\DRIVERS\hidusb.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:45]
[HookCont / HookCont][Running/System Start]
    <\SystemRoot\system32\drivers\HookCont.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7, C:2008-06-07 14:40 M:2008-07-29 07:46]
[HookNtos / HookNtos][Running/System Start]
    <\SystemRoot\system32\drivers\HookNtos.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 50, C:2008-06-07 14:40 M:2008-07-29 07:45]
[HookReg / HookReg][Running/System Start]
    <\SystemRoot\system32\drivers\HookReg.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 28, C:2008-06-07 14:40 M:2008-07-29 07:45]
[HookSys / HookSys][Running/System Start]
    <\SystemRoot\system32\drivers\HookSys.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55, C:2008-06-07 14:40 M:2008-08-29 16:02]
[HookUrl / HookUrl][Running/Auto Start]
    <\??\C:\Program Files\Rising\Rfw\HookUrl.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.12, C:2008-08-30 11:24 M:2008-08-30 11:23]
[HTTP / HTTP][Running/Manual Start]
    <System32\Drivers\HTTP.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:53]
[CD 烧制筛选驱动器 / Imapi][Stopped/System Start]
    <system32\DRIVERS\imapi.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:41]
[IPv6 Windows Firewall Driver / Ip6Fw][Stopped/Manual Start]
    <system32\drivers\ip6fw.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:53]
[IP Traffic Filter Driver / IpFilterDriver][Stopped/Manual Start]
    <system32\DRIVERS\ipfltdrv.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start]
    <system32\DRIVERS\ipinip.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:57]
[IP Network Address Translator / IpNat][Running/Manual Start]
    <system32\DRIVERS\ipnat.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:57]
[IPSEC driver / IPSec][Running/System Start]
    <system32\DRIVERS\ipsec.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 12:19]
[IR Enumerator Service / IRENUM][Stopped/Manual Start]
    <system32\DRIVERS\irenum.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-03-11 14:19 M:2008-04-13 11:54]
[PnP ISA/EISA Bus Driver / isapnp][Running/Boot Start]
    <system32\DRIVERS\isapnp.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 18:54]
[Keyboard Class Driver / Kbdclass][Running/System Start]
    <system32\DRIVERS\kbdclass.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 18:55]
[Keyboard HID Driver / kbdhid][Running/System Start]
    <system32\DRIVERS\kbdhid.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 18:55]
[Microsoft Kernel Wave Audio Mixer / kmixer][Running/Manual Start]
    <system32\drivers\kmixer.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 11:45]
[Mouse Class Driver / Mouclass][Running/System Start]
    <system32\DRIVERS\mouclass.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:23 M:2008-04-13 18:48]
[Mouse HID Driver / mouhid][Running/Manual Start]
    <system32\DRIVERS\mouhid.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-03-11 14:30 M:2001-08-31 15:31]
[WebDav Client Redirector / MRxDAV][Running/Manual Start]
    <system32\DRIVERS\mrxdav.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 11:32]
[MRXSMB / MRxSmb][Running/System Start]
    <system32\DRIVERS\mrxsmb.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 12:17]
[Microsoft Streaming Service Proxy / MSKSSRV][Stopped/Manual Start]
    <system32\drivers\MSKSSRV.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 11:39]
[Microsoft Streaming Clock Proxy / MSPCLOCK][Stopped/Manual Start]
    <system32\drivers\MSPCLOCK.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 11:39]
[Microsoft Streaming Quality Manager Proxy / MSPQM][Stopped/Manual Start]
    <system32\drivers\MSPQM.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 11:39]
[Microsoft System Management BIOS Driver / mssmbios][Running/Manual Start]
    <system32\DRIVERS\mssmbios.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-03 23:07 M:2008-04-13 11:36]
[Microsoft Streaming Tee/Sink-to-Sink Converter / MSTEE][Stopped/Manual Start]
    <system32\drivers\MSTEE.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-05-04 15:06 M:2008-04-13 11:39]
[NABTS/FEC VBI Codec / NABTSFEC][Stopped/Manual Start]
    <system32\DRIVERS\NABTSFEC.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-05-04 15:06 M:2008-04-13 11:46]
[Microsoft TV/Video Connection / NdisIP][Stopped/Manual Start]
    <system32\DRIVERS\NdisIP.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-05-04 15:06 M:2008-04-13 11:46]
[Remote Access NDIS TAPI Driver / NdisTapi][Running/Manual Start]
    <system32\DRIVERS\ndistapi.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:57]
[NDIS 用户模式 I/O 协议 / Ndisuio][Running/Manual Start]
    <system32\DRIVERS\ndisuio.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-03 23:03 M:2008-04-13 11:56]
[Remote Access NDIS WAN Driver / NdisWan][Running/Manual Start]
    <system32\DRIVERS\ndiswan.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 12:20]
[NetBIOS Interface / NetBIOS][Running/System Start]
    <system32\DRIVERS\netbios.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:56]
[NetBios over Tcpip / NetBT][Running/System Start]
    <system32\DRIVERS\netbt.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 12:21]
[nv / nv][Running/Manual Start]
    <system32\DRIVERS\nv4_mini.sys>  [(Verified)NVIDIA Corporation, 6.14.10.9152, C:2008-03-11 14:34 M:2006-10-03 14:07]
[nvata / nvata][Running/Boot Start]
    <system32\DRIVERS\nvata.sys>  [(Verified)NVIDIA Corporation, 5.10.2600.0692 built by: WinDDK, C:2008-03-11 14:32 M:2006-10-18 16:31]
[IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start]
    <system32\DRIVERS\nwlnkflt.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start]
    <system32\DRIVERS\nwlnkfwd.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Parallel port driver / Parport][Running/Manual Start]
    <system32\DRIVERS\parport.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:22 M:2008-04-13 18:57]
[PCI Bus Driver / PCI][Running/Boot Start]
    <system32\DRIVERS\pci.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 18:57]
[PCIIde / PCIIde][Running/Boot Start]
    <system32\DRIVERS\pciide.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[WAN Miniport (PPTP) / PptpMiniport][Running/Manual Start]
    <system32\DRIVERS\raspptp.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 12:19]
[处理器驱动程序 / Processor][Stopped/System Start]
    <system32\DRIVERS\processr.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-16 16:24 M:2008-04-13 18:50]
[QoS Packet Scheduler / PSched][Running/Manual Start]
    <system32\DRIVERS\psched.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:56]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Remote Access Auto Connection Driver / RasAcd][Running/System Start]
    <system32\DRIVERS\rasacd.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[WAN Miniport (L2TP) / Rasl2tp][Running/Manual Start]
    <system32\DRIVERS\rasl2tp.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 12:19]
[远程访问 PPPOE 驱动程序 / RasPppoe][Running/Manual Start]
    <system32\DRIVERS\raspppoe.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:57]
[Direct Parallel / Raspti][Running/Manual Start]
    <system32\DRIVERS\raspti.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Rdbss / Rdbss][Running/System Start]
    <system32\DRIVERS\rdbss.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 12:28]
[RDPCDD / RDPCDD][Running/System Start]
    <System32\DRIVERS\RDPCDD.sys>  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[Terminal Server Device Redirector Driver / rdpdr][Running/Manual Start]
    <system32\DRIVERS\rdpdr.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-03-11 14:23 M:2008-04-13 11:32]
[Digital CD Audio Playback Filter Driver / redbook][Running/System Start]
    <system32\DRIVERS\redbook.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:22 M:2008-04-13 18:51]
[Rising  Rfwbase Driver / RfwBase][Running/Auto Start]
    <System32\DRIVERS\rfwbase.SYS>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.10, C:2008-08-30 11:24 M:2008-08-30 11:23]
[RsFwDrv / RsFwDrv][Running/System Start]
    <\??\C:\Program Files\Rising\Rfw\RsFwDrv.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.34, C:2008-08-30 11:24 M:2008-08-30 11:23]
[RsNTGDI / RsNTGDI][Running/Boot Start]
    <system32\Drivers\RsNTGdi.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 3, C:2008-06-07 14:40 M:2008-07-29 07:45]
[Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys>  [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086, C:2004-08-17 10:00 M:2007-11-13 18:25]
[Serenum Filter Driver / serenum][Running/Manual Start]
    <system32\DRIVERS\serenum.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:40]
[Serial port driver / Serial][Running/System Start]
    <system32\DRIVERS\serial.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 18:52]
[BDA Slip De-Framer / SLIP][Stopped/Manual Start]
    <system32\DRIVERS\SLIP.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-05-04 15:06 M:2008-04-13 11:46]
[Microsoft Kernel Audio Splitter / splitter][Stopped/Manual Start]
    <system32\drivers\splitter.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 11:45]
[System Restore Filter Driver / sr][Running/Boot Start]
    <system32\DRIVERS\sr.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 18:57]
[Srv / Srv][Running/Manual Start]
    <system32\DRIVERS\srv.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 12:15]
[SigmaTel High Definition Audio CODEC / STHDA][Running/Manual Start]
    <system32\drivers\sthda.sys>  [(Verified)SigmaTel, Inc., 5.10.5143.0  nd491 cp1, C:2008-03-11 14:32 M:2006-07-27 14:24]
[BDA IPSink / streamip][Stopped/Manual Start]
    <system32\DRIVERS\StreamIP.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-05-04 15:06 M:2008-04-13 11:46]
[Software Bus Driver / swenum][Running/Manual Start]
    <system32\DRIVERS\swenum.sys>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2004-08-03 22:58 M:2008-04-13 11:39]
[Microsoft Kernel GS Wavetable Synthesizer / swmidi][Stopped/Manual Start]
    <system32\drivers\swmidi.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 11:45]
[Microsoft Kernel System Audio Device / sysaudio][Running/Manual Start]
    <system32\drivers\sysaudio.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 12:15]
[Terminal Device Driver / TermDD][Running/System Start]
    <system32\DRIVERS\termdd.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-03-11 14:23 M:2008-04-13 19:14]
[Microcode Update Driver / Update][Running/Manual Start]
    <system32\DRIVERS\update.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:39]
[Microsoft USB Generic Parent Driver / usbccgp][Running/Manual Start]
    <system32\DRIVERS\usbccgp.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 15:36 M:2008-04-13 11:45]
[Microsoft USB 2.0 Enhanced Host Controller Miniport Driver / usbehci][Running/Manual Start]
    <system32\DRIVERS\usbehci.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:45]
[USB2 Enabled Hub / usbhub][Running/Manual Start]
    <system32\DRIVERS\usbhub.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:45]
[Microsoft USB Open Host Controller Miniport Driver / usbohci][Running/Manual Start]
    <system32\DRIVERS\usbohci.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:45]
[Microsoft USB PRINTER Class / usbprint][Running/Manual Start]
    <system32\DRIVERS\usbprint.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-03-11 15:36 M:2008-04-13 11:47]
[USB 扫描仪驱动程序 / usbscan][Running/Manual Start]
    <system32\DRIVERS\usbscan.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-03-11 15:43 M:2008-04-13 11:45]
[USB 大容量存储设备 / USBSTOR][Stopped/Manual Start]
    <system32\DRIVERS\USBSTOR.SYS>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 15:44 M:2008-04-13 11:45]
[USB 视频设备(WDM) / usbvideo][Stopped/Manual Start]
    <System32\Drivers\usbvideo.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-05-04 15:06 M:2008-04-13 11:46]
[VGA 显示控制器。 / VgaSave][Running/System Start]
    <\SystemRoot\System32\drivers\vga.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 11:44]
[Remote Access IP ARP Driver / Wanarp][Running/Manual Start]
    <system32\DRIVERS\wanarp.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 11:57]
[Microsoft WINMM WDM Audio Compatibility Driver / wdmaud][Running/Manual Start]
    <system32\drivers\wdmaud.sys>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:32 M:2008-04-13 12:17]
[WpdUsb / WpdUsb][Stopped/Manual Start]
    <system32\DRIVERS\wpdusb.sys>  [(Verified)Microsoft Corporation, 5.2.3802.3802 built by: dnsrv(bld4act), C:2006-10-18 20:00 M:2005-01-28 13:44]
[World Standard Teletext Codec / WSTCODEC][Stopped/Manual Start]
    <system32\DRIVERS\WSTCODEC.SYS>  [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-05-04 15:06 M:2008-04-13 11:46]
[Windows Driver Foundation - User-mode Driver Framework Platform Driver / WudfPf][Running/Boot Start]
    <system32\DRIVERS\WudfPf.sys>  [(Verified)Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 18:55 M:2006-09-28 18:55]
[Windows Driver Foundation - User-mode Driver Framework Reflector / WudfRd][Stopped/Manual Start]
    <system32\DRIVERS\wudfrd.sys>  [(Verified)Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 19:00 M:2006-09-28 19:00]


========================================
进程

[PID: 612 / SYSTEM]   \SystemRoot\System32\smss.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 672 / SYSTEM]   \??\C:\WINDOWS\system32\csrss.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CSRSRV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\basesrv.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\winsrv.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\KERNEL32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sxs.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 696 / SYSTEM]   \??\C:\WINDOWS\system32\winlogon.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\AUTHZ.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NDdeApi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\PROFMAP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\REGAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSGINA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMCTL32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ODBC32.dll  [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comdlg32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\odbcint.dll  [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2004-08-17 10:00 M:2007-03-28 05:51]
    C:\WINDOWS\system32\SHSVCS.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sfc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sfc_os.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\sxs.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSCARD.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WTSAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\cscdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\dimsntfy.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-08-24 11:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\WINDOWS\system32\WlNotify.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MPR.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSPOOL.DRV  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\cscui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wdmaud.drv  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:39 M:2008-04-13 19:14]
    C:\WINDOWS\system32\msacm32.drv  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\midimap.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]

[PID: 740 / SYSTEM]   C:\WINDOWS\system32\services.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NCObjAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCP60.dll  [(Verified)Microsoft Corporation, 6.02.3104.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SCESRV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\AUTHZ.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\umpnpmgr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcAdProc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-03-15 10:04 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\eventlog.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wtsapi32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 752 / SYSTEM]   C:\WINDOWS\system32\lsass.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LSASRV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MPR.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTDSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMSRV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\cryptdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msprivs.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 09:23]
    C:\WINDOWS\system32\kerberos.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\netlogon.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\w32time.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCP60.dll  [(Verified)Microsoft Corporation, 6.02.3104.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\schannel.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wdigest.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\WINDOWS\system32\setupapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\scecli.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ipsecsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\AUTHZ.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\oakley.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINIPSEC.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\pstorsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\psbase.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\dssenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]

[PID: 928 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\rpcss.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\termsrv.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-03-11 14:23 M:2008-04-13 19:13]
    c:\windows\system32\ICAAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-03-11 14:23 M:2008-04-13 19:13]
    c:\windows\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\AUTHZ.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\mstlsapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\ACTIVEDS.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\adsldpc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\ATL.DLL  [(Verified)Microsoft Corporation, 3.05.2284, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\REGAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\WINDOWS\system32\Apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 992 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\rpcss.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 1080 / SYSTEM]   C:\Program Files\Rising\Rav\CCenter.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.33, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 1096 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    c:\windows\system32\shsvcs.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\dhcpcsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    c:\windows\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    c:\windows\system32\wzcsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-16 16:39 M:2008-04-13 19:13]
    c:\windows\system32\rtutils.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WMI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\EapolQec.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    c:\windows\system32\ATL.DLL  [(Verified)Microsoft Corporation, 3.05.2284, C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\QUtil.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    c:\windows\system32\MSVCP60.dll  [(Verified)Microsoft Corporation, 6.02.3104.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\dot3api.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    c:\windows\system32\WTSAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\ESENT.dll  [(Verified)Microsoft Corporation, 5.1.2468.0 (Lab03_N(jliem).010306-1456), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\System32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\rastls.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPTUI.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WININET.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\MPRAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\ACTIVEDS.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\adsldpc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\RASAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\rasman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\TAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\SCHANNEL.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\WinSCard.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\raschap.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\schedsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
    c:\windows\system32\NTDSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\MSIDLE.DLL  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\audiosrv.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\wkssvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\cryptsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\certcli.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\dmserver.dll  [(Verified)Microsoft Corp., 2600.5512.503.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\es.dll  [(Verified)Microsoft Corporation, 2001.12.4414.706, C:2004-08-17 10:00 M:2008-07-08 04:26]
    c:\windows\pchealth\helpctr\binaries\pchsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
    c:\windows\system32\ersvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\srvsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\HNETCFG.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\netman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\netshell.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\credui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\dot3dlg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    c:\windows\system32\OneX.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    c:\windows\system32\eappcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    c:\windows\system32\eappprxy.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    c:\windows\system32\WZCSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-16 16:39 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\seclogon.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\sens.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\upnp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINHTTP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SSDPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\srsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
    c:\windows\system32\POWRPROF.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\trkwks.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\wbem\wmisvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VSSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\browser.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wbem\wbemcomn.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    c:\windows\system32\wuauserv.dll  [(Verified)Microsoft Corporation, 5.4.3790.5512 (xpsp.080413-0852), C:2008-03-11 14:24 M:2008-04-13 19:13]
    C:\WINDOWS\System32\Wbem\wbemcore.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\System32\Wbem\esscli.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\System32\Wbem\FastProx.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wuaueng.dll  [(Verified)Microsoft Corporation, 7.2.6001.784 (winmain_oob/wu_wsuswlc(wmbla).080718-1904), C:2008-03-11 14:24 M:2008-07-18 22:09]
    C:\WINDOWS\System32\WINSPOOL.DRV  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\Cabinet.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\mspatcha.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\w32time.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\SXS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\wscsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\msi.dll  [(Verified)Microsoft Corporation, 3.1.4001.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\ipnathlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\AUTHZ.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wbem\wmiutils.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comsvcs.dll  [(Verified)Microsoft Corporation, 2001.12.4414.702, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\colbact.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MTXCLU.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WSOCK32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\CLUSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\RESUTILS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\sfc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\sfc_os.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wbem\repdrvfs.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\netcfgx.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\rasmans.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\WINIPSEC.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wbem\wmiprvsd.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NCObjAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wbem\wbemess.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wbem\ncprov.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:23 M:2008-04-13 19:13]
    c:\windows\system32\tapisrv.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\rastapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\unimdm.tsp  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\uniplat.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\kmddsp.tsp  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\ndptsp.tsp  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\ipconf.tsp  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\h323.tsp  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\hidphone.tsp  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\HID.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:38 M:2008-04-13 19:13]
    C:\WINDOWS\System32\rasppp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\ntlsapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kerberos.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\cryptdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\RASQEC.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    C:\WINDOWS\System32\RASDLG.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\advpack.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
    C:\WINDOWS\system32\msxml3.dll  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\catsrvut.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\System32\catsrv.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\System32\MfcSubs.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MPR.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]

[PID: 1136 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\wudfsvc.dll  [(Verified)Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 18:56 M:2006-09-28 18:56]
    c:\windows\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WUDFPlatform.dll  [(Verified)Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 18:56 M:2006-09-28 18:56]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 1220 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\dnsrslvr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    c:\windows\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 1292 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    c:\windows\system32\lmhsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\webclnt.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WININET.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    c:\windows\system32\regsvc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\ssdpsrv.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 1384 / SYSTEM]   C:\PROGRAM FILES\RISING\RAV\ravmond.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.80, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\PROGRAM FILES\RISING\RAV\BWList.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.5, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\MFC71.DLL  [(Verified)Microsoft Corporation, 7.10.3077.0, C:2008-06-07 14:40 M:2008-06-07 14:37]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\WSOCK32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\RsLog.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.36, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\MonRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.29, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\Hooksys.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\HookReg.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\HookNtos.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\rswalmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 24, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\recomp.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\PROGRAM FILES\RISING\RAV\refs.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\ffr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 16, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\sfc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sfc_os.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Rising\Rav\RsStore.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.9, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\HookCont.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\fakescan.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.14, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\Scanner.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.39, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\PROGRAM FILES\RISING\RAV\extfile.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 32, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\pearc.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 8, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\viruslib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\relibldr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\PROGRAM FILES\RISING\RAV\HookWeb.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.3, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\PROGRAM FILES\RISING\RAV\nvfile.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\PROGRAM FILES\RISING\RAV\scanexec.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\PROGRAM FILES\RISING\RAV\unexe.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 6, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\scanex.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\PROGRAM FILES\RISING\RAV\scanpack.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\revm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\urutils.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\ur000.dat  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\PROGRAM FILES\RISING\RAV\extmail.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\Wtsapi32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\PROGRAM FILES\RISING\RAV\scansct.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11, C:2008-08-29 15:59 M:2008-09-03 07:21]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\PROGRAM FILES\RISING\RAV\scriptci.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 4, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\uroutine.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2008-08-29 15:59 M:2008-08-29 15:58]

[PID: 1704 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SPOOLSS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\localspl.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sfc_os.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\winspool.drv  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\netapi32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\cnbjmon.dll  [(Verified)Microsoft Corporation, 5.1.2600.2082 (xpsp(skatari).040213-0952), C:2004-08-16 16:38 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mdimon.dll  [(Verified)Microsoft Corporation, 11.3.8166.2, C:2008-03-11 14:48 M:2007-04-09 13:23]
    C:\WINDOWS\system32\msi.dll  [(Verified)Microsoft Corporation, 3.1.4001.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\pjlmon.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-16 16:39 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SamFaxPort.dll  [N/A, C:2008-03-11 15:43 M:2005-11-30 20:34]
    C:\WINDOWS\system32\ATL.DLL  [(Verified)Microsoft Corporation, 3.05.2284, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\tcpmon.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SUGW2LMK.DLL  [(Verified)Samsung Electronics., 1.1.2.0, C:2008-03-11 15:41 M:2005-04-08 10:29]
    C:\WINDOWS\system32\usbmon.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll  [(Verified)Microsoft Corporation, 11.3.8166.2, C:2008-03-11 14:48 M:2007-04-09 13:23]
    C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll  [Microsoft Corporation, 6.0.5824.16384 (winmain(wmbla).060911-0725), C:2008-03-15 10:08 M:2006-10-14 16:43]
    C:\WINDOWS\System32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\win32spl.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETRAP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTDSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\inetpp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]

[PID: 1760 / Administrator]   C:\WINDOWS\Explorer.EXE   [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\BROWSEUI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHDOCVW.dll  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPTUI.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WININET.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\AcSignIcon.dll  [(Verified)Autodesk, 17.0.54.0, C:2006-04-21 16:00 M:2006-04-21 16:00]
    C:\WINDOWS\system32\WINSPOOL.DRV  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\cscui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\CSCDLL.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\themeui.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\system32\RavExt.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2008-03-11 14:37 M:2008-07-29 07:45]
    C:\WINDOWS\system32\ieframe.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
    C:\WINDOWS\system32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msutb.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll  [(Verified)Autodesk, 17.0.54.110, C:2006-04-21 16:00 M:2006-04-21 16:00]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ntshrui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ATL.DLL  [(Verified)Microsoft Corporation, 3.05.2284, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LINKINFO.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETSHELL.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\credui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\dot3api.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rtutils.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\dot3dlg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OneX.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WTSAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\eappcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCP60.dll  [(Verified)Microsoft Corporation, 6.02.3104.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\eappprxy.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-08-24 11:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msi.dll  [(Verified)Microsoft Corporation, 3.1.4001.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\webcheck.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
    C:\WINDOWS\system32\stobject.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\BatMeter.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\POWRPROF.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WPDShServiceObj.dll  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
    C:\WINDOWS\system32\WINHTTP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MLANG.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mydocs.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wdmaud.drv  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:39 M:2008-04-13 19:14]
    C:\WINDOWS\system32\msacm32.drv  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\PortableDeviceTypes.dll  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
    C:\WINDOWS\system32\midimap.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\PortableDeviceApi.dll  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
    C:\WINDOWS\system32\SXS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MPR.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\drprov.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\ntlanman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETUI0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETUI1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETRAP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\davclnt.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll  [Adobe Systems, Inc., 8.1.0.0, C:2007-05-10 22:54 M:2007-05-10 22:54]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll  [(Verified)Microsoft Corporation, 8.00.50727.1433, C:2007-10-24 01:47 M:2007-10-24 01:47]
    C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS  [Adobe Systems, Inc., 8.0.0.0, C:2006-11-17 00:37 M:2006-11-17 00:37]
    C:\WINDOWS\system32\nvcpl.dll  [(Verified)NVIDIA Corporation, 6.14.10.9152, C:2008-03-11 14:34 M:2006-10-03 14:07]
    C:\WINDOWS\system32\comdlg32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEACC.dll  [(Verified)Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\NVRSZHC.DLL  [NVIDIA Corporation, 6.14.10.9152, C:2008-03-11 14:34 M:2006-10-03 14:07]
    C:\WINDOWS\system32\nvapi.dll  [(Verified)N/A, C:2008-03-11 14:34 M:2006-10-03 14:07]
    C:\WINDOWS\system32\nvshell.dll  [N/A, C:2008-03-11 14:34 M:2006-10-03 14:07]
    C:\WINDOWS\system32\browselc.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 18:50]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll  [(Verified)Microsoft Corporation, 5.1.3102.5512 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\MSGINA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ODBC32.dll  [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\odbcint.dll  [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2004-08-17 10:00 M:2007-03-28 05:51]
    C:\WINDOWS\system32\DUSER.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wiashext.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sti.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CFGMGR32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\Program Files\Microsoft Office\OFFICE11\msohev.dll  [(Verified)Microsoft Corporation, 11.0.5510, C:2003-07-14 22:52 M:2003-07-14 22:52]
    C:\Program Files\WinRAR\rarext.dll  [N/A, C:2008-03-11 14:36 M:2005-04-06 19:34]
    C:\WINDOWS\system32\syncui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]

[PID: 1832 / SYSTEM]   C:\PROGRAM FILES\RISING\RAV\RavStub.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.10, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMCTL32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\PROGRAM FILES\RISING\RAV\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 1988 / SYSTEM]   C:\Program Files\xampp\apache\bin\apache.exe   [Apache Software Foundation, 2.2.8, C:2008-01-18 07:37 M:2008-01-18 07:37]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\apache\bin\libapr-1.dll  [Apache Software Foundation, 1.2.12, C:2008-01-18 07:35 M:2008-01-18 07:35]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSWSOCK.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\Program Files\xampp\apache\bin\libaprutil-1.dll  [Apache Software Foundation, 1.2.12, C:2008-01-18 07:36 M:2008-01-18 07:36]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\apache\bin\libapriconv-1.dll  [Apache Software Foundation, 1.2.1, C:2008-01-18 07:35 M:2008-01-18 07:35]
    C:\Program Files\xampp\apache\bin\libhttpd.dll  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:37 M:2008-01-18 07:37]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\shell32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\Program Files\xampp\apache\modules\mod_actions.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:41 M:2008-01-18 07:41]
    C:\Program Files\xampp\apache\modules\mod_alias.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:41 M:2008-01-18 07:41]
    C:\Program Files\xampp\apache\modules\mod_asis.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:41 M:2008-01-18 07:41]
    C:\Program Files\xampp\apache\modules\mod_auth_basic.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:41 M:2008-01-18 07:41]
    C:\Program Files\xampp\apache\modules\mod_authn_default.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authn_file.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authz_default.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authz_groupfile.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authz_host.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authz_user.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_cgi.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_dav.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_dav_fs.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_dir.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_env.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_include.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_info.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_isapi.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_ldap.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_log_config.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_mime.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:44 M:2008-01-18 07:44]
    C:\Program Files\xampp\apache\modules\mod_negotiation.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:44 M:2008-01-18 07:44]
    C:\Program Files\xampp\apache\modules\mod_setenvif.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:44 M:2008-01-18 07:44]
    C:\Program Files\xampp\apache\modules\mod_status.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:44 M:2008-01-18 07:44]
    C:\Program Files\xampp\apache\modules\mod_ssl.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:46 M:2008-01-18 07:46]
    C:\Program Files\xampp\apache\bin\LIBEAY32.dll  [The OpenSSL Project, http://www.openssl.org/, 0.9.8g, C:2008-01-18 04:57 M:2008-01-18 04:57]
    C:\WINDOWS\system32\WSOCK32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\apache\bin\zlib1.dll  [(C) 1995-2004 Jean-loup Gailly & Mark Adler, 1.2.3, C:2008-01-18 07:17 M:2008-01-18 07:17]
    C:\Program Files\xampp\apache\bin\SSLEAY32.dll  [The OpenSSL Project, http://www.openssl.org/, 0.9.8g, C:2008-01-18 04:59 M:2008-01-18 04:59]
    C:\Program Files\xampp\apache\modules\mod_autoindex_color.so  [Apache Software Foundation, 2.2.0, C:2007-12-21 10:00 M:2007-12-21 10:00]
    C:\Program Files\xampp\apache\bin\php5apache2.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\apache\bin\php5ts.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\WINDOWS\system32\ODBC32.dll  [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comdlg32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\odbcint.dll  [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2004-08-17 10:00 M:2007-03-28 05:51]
    C:\Program Files\xampp\php\zendOptimizer\lib\ZendExtensionManager.dll  [N/A, C:2007-02-04 18:14 M:2007-02-04 18:14]
    C:\Program Files\xampp\php\ext\php_gd2.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_gettext.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_imap.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\php\ext\php_mbstring.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_exif.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_mcrypt.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\apache\bin\libmcrypt.dll  [N/A, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_mime_magic.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_ming.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_mssql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\apache\bin\ntwdblib.dll  [Microsoft Corporation, 2000.02.08, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\php\ext\php_mysql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\apache\bin\LIBMYSQL.dll  [N/A, C:2007-12-21 22:50 M:2007-12-21 22:50]
    C:\Program Files\xampp\php\ext\php_mysqli.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pdf.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pdo.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pdo_mssql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pdo_mysql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pgsql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_soap.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_sockets.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_sqlite.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_xmlrpc.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_xsl.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_zip.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_ps.dll  [The PHP Group, 5.2.4.4, C:2007-10-25 16:33 M:2007-10-25 16:33]
    C:\Program Files\xampp\apache\bin\pslib.dll  [N/A, C:2007-10-25 16:34 M:2007-10-25 16:34]
    C:\Program Files\xampp\php\ext\php_paradox.dll  [The PHP Group, 5.2.4.4, C:2007-10-25 16:33 M:2007-10-25 16:33]
    C:\Program Files\xampp\apache\bin\pxlib.dll  [N/A, C:2007-10-30 20:28 M:2007-10-30 20:28]
    C:\Program Files\xampp\apache\bin\iconv.dll  [N/A, C:2007-12-21 10:00 M:2007-12-21 10:00]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\php\zendOptimizer\lib\Optimizer\php-5.2.x\ZendOptimizer.dll  [N/A, C:2007-06-14 23:15 M:2007-06-14 23:15]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 180 / SYSTEM]   C:\WINDOWS\system32\drivers\CDAC11BA.EXE   [Macrovision, 4.20.020, C:2008-03-11 14:51 M:2008-03-11 14:51]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]

[PID: 232 / SYSTEM]   C:\Program Files\xampp\mysql\bin\mysqld-nt.exe   [N/A, C:2007-12-21 22:54 M:2007-12-21 22:54]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WSOCK32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\System32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 408 / SYSTEM]   C:\WINDOWS\system32\nvsvc32.exe   [(Verified)NVIDIA Corporation, 6.14.10.9152, C:2008-03-11 14:34 M:2006-10-03 14:07]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\POWRPROF.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\wtsapi32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMCTL32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\nvapi.dll  [(Verified)N/A, C:2008-03-11 14:34 M:2006-10-03 14:07]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 448 / Administrator]   C:\Program Files\Rising\Rav\RavTask.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.24, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMCTL32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\Program Files\Rising\Rav\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Rising\Rav\RSAPPMGR.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 484 / Administrator]   C:\Program Files\OCINS\idnsvr.exe   [(Verified)中国互联网信息中心(CNNIC), 2, 6, 0, 1, C:2008-08-29 17:47 M:2008-08-29 17:47]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMCTL32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\OCINS\idnsvr.dll  [中国互联网信息中心(CNNIC), 2, 6, 0, 4, C:2008-08-29 17:47 M:2008-08-29 17:47]
    C:\WINDOWS\system32\WININET.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 516 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\wiaservc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\CFGMGR32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:12]
    c:\windows\system32\setupapi.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    c:\windows\system32\mscms.dll  [(Verified)Microsoft Corporation, 5.1.2600.5627 (xpsp_sp3_gdr.080624-1245), C:2004-08-17 10:00 M:2008-06-25 00:42]
    c:\windows\system32\WINSPOOL.DRV  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    c:\windows\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sswiadrv.dll  [(Verified)1, 2, 9, 0, C:2008-03-11 15:40 M:2006-02-06 11:24]
    C:\WINDOWS\system32\WIASTIIO.dll  [(Verified)1, 2, 9, 0, C:2008-03-11 15:40 M:2006-02-06 09:05]
    C:\WINDOWS\system32\WIAEH.dll  [(Verified)1, 2, 4, 0, C:2008-03-11 15:40 M:2006-02-04 09:28]
    C:\WINDOWS\system32\WIAIPH.dll  [(Verified)1, 2, 3, 0, C:2008-03-11 15:40 M:2006-02-01 08:12]
    C:\WINDOWS\system32\actxprxy.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sti.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 356 / Administrator]   C:\WINDOWS\system32\ctfmon.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSUTB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]

[PID: 952 / Administrator]   C:\Program Files\Tencent\Foxmail\Foxmail.exe   [(Verified)Tencent Inc., 6, 13, 102, 15, C:2008-04-17 19:31 M:2008-04-17 19:31]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\user32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\advapi32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\oleaut32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\version.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\imm32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\winspool.drv  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\URLMON.DLL  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\wininet.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\shell32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comdlg32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\winmm.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wsock32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\olepro32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ieframe.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
    C:\WINDOWS\system32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SXS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MAPI32.DLL  [(Verified)Microsoft Corporation, 1.0.2536.0 (XPClient.010817-1148), C:2008-03-11 14:26 M:2004-08-17 10:00]
    C:\Program Files\Tencent\Foxmail\FoxAntiSpam.dll  [(Verified)N/A, C:2007-12-29 10:47 M:2007-12-29 10:47]
    C:\Program Files\Tencent\Foxmail\pcre.dll  [N/A, C:2007-12-29 10:47 M:2007-12-29 10:47]
    C:\WINDOWS\system32\RICHED32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\RICHED20.dll  [(Verified)Microsoft Corporation, 5.30.23.1230, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mlang.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Tencent\Foxmail\3rdParty\EffectiveSearch\MiniSE2D.dll  [(Verified)TENCENT, 1, 1, 0, 1, C:2008-04-16 16:34 M:2008-04-16 16:34]
    C:\Program Files\Tencent\Foxmail\3rdParty\EffectiveSearch\libdb44.dll  [Sleepycat Software, 4.4.20, C:2007-12-29 10:47 M:2007-12-29 10:47]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\Program Files\Tencent\Foxmail\3rdParty\punylib.dll  [CNNIC, 1, 0, 0, 3, C:2007-12-29 10:47 M:2007-12-29 10:47]
    C:\WINDOWS\system32\browseui.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
    C:\WINDOWS\System32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msxml3.dll  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RASAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\TAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rtutils.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sensapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 936 / Administrator]   C:\Program Files\Rising\Rav\Ravmon.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.01.27, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MFC71.DLL  [(Verified)Microsoft Corporation, 7.10.3077.0, C:2008-06-07 14:40 M:2008-06-07 14:37]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Rising\Rav\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\recomp.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\Program Files\Rising\Rav\refs.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\viruslib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\relibldr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\MonRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.29, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\PngDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\wtsapi32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\Program Files\Rising\Rav\Rsguilib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\perfproc.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Rising\Rav\RsXML.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2008-08-29 15:59 M:2008-08-29 15:58]

[PID: 2316 / SYSTEM]   C:\Program Files\xampp\apache\bin\apache.exe   [Apache Software Foundation, 2.2.8, C:2008-01-18 07:37 M:2008-01-18 07:37]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\apache\bin\libapr-1.dll  [Apache Software Foundation, 1.2.12, C:2008-01-18 07:35 M:2008-01-18 07:35]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSWSOCK.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\Program Files\xampp\apache\bin\libaprutil-1.dll  [Apache Software Foundation, 1.2.12, C:2008-01-18 07:36 M:2008-01-18 07:36]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\apache\bin\libapriconv-1.dll  [Apache Software Foundation, 1.2.1, C:2008-01-18 07:35 M:2008-01-18 07:35]
    C:\Program Files\xampp\apache\bin\libhttpd.dll  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:37 M:2008-01-18 07:37]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\shell32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\Program Files\xampp\apache\modules\mod_actions.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:41 M:2008-01-18 07:41]
    C:\Program Files\xampp\apache\modules\mod_alias.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:41 M:2008-01-18 07:41]
    C:\Program Files\xampp\apache\modules\mod_asis.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:41 M:2008-01-18 07:41]
    C:\Program Files\xampp\apache\modules\mod_auth_basic.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:41 M:2008-01-18 07:41]
    C:\Program Files\xampp\apache\modules\mod_authn_default.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authn_file.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authz_default.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authz_groupfile.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authz_host.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_authz_user.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_cgi.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_dav.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_dav_fs.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_dir.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_env.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_include.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_info.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_isapi.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_ldap.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:42 M:2008-01-18 07:42]
    C:\Program Files\xampp\apache\modules\mod_log_config.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:43 M:2008-01-18 07:43]
    C:\Program Files\xampp\apache\modules\mod_mime.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:44 M:2008-01-18 07:44]
    C:\Program Files\xampp\apache\modules\mod_negotiation.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:44 M:2008-01-18 07:44]
    C:\Program Files\xampp\apache\modules\mod_setenvif.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:44 M:2008-01-18 07:44]
    C:\Program Files\xampp\apache\modules\mod_status.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:44 M:2008-01-18 07:44]
    C:\Program Files\xampp\apache\modules\mod_ssl.so  [Apache Software Foundation, 2.2.8, C:2008-01-18 07:46 M:2008-01-18 07:46]
    C:\Program Files\xampp\apache\bin\LIBEAY32.dll  [The OpenSSL Project, http://www.openssl.org/, 0.9.8g, C:2008-01-18 04:57 M:2008-01-18 04:57]
    C:\WINDOWS\system32\WSOCK32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\apache\bin\zlib1.dll  [(C) 1995-2004 Jean-loup Gailly & Mark Adler, 1.2.3, C:2008-01-18 07:17 M:2008-01-18 07:17]
    C:\Program Files\xampp\apache\bin\SSLEAY32.dll  [The OpenSSL Project, http://www.openssl.org/, 0.9.8g, C:2008-01-18 04:59 M:2008-01-18 04:59]
    C:\Program Files\xampp\apache\modules\mod_autoindex_color.so  [Apache Software Foundation, 2.2.0, C:2007-12-21 10:00 M:2007-12-21 10:00]
    C:\Program Files\xampp\apache\bin\php5apache2.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\apache\bin\php5ts.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\WINDOWS\system32\ODBC32.dll  [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comdlg32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\odbcint.dll  [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2004-08-17 10:00 M:2007-03-28 05:51]
    C:\Program Files\xampp\php\zendOptimizer\lib\ZendExtensionManager.dll  [N/A, C:2007-02-04 18:14 M:2007-02-04 18:14]
    C:\Program Files\xampp\php\ext\php_gd2.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_gettext.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_imap.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\php\ext\php_mbstring.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_exif.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_mcrypt.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\apache\bin\libmcrypt.dll  [N/A, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_mime_magic.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_ming.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_mssql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\apache\bin\ntwdblib.dll  [Microsoft Corporation, 2000.02.08, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\php\ext\php_mysql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\apache\bin\LIBMYSQL.dll  [N/A, C:2007-12-21 22:50 M:2007-12-21 22:50]
    C:\Program Files\xampp\php\ext\php_mysqli.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pdf.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pdo.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pdo_mssql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pdo_mysql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_pgsql.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_soap.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_sockets.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_sqlite.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_xmlrpc.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_xsl.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_zip.dll  [The PHP Group, 5.2.5.5, C:2007-11-09 06:23 M:2007-11-09 06:23]
    C:\Program Files\xampp\php\ext\php_ps.dll  [The PHP Group, 5.2.4.4, C:2007-10-25 16:33 M:2007-10-25 16:33]
    C:\Program Files\xampp\apache\bin\pslib.dll  [N/A, C:2007-10-25 16:34 M:2007-10-25 16:34]
    C:\Program Files\xampp\php\ext\php_paradox.dll  [The PHP Group, 5.2.4.4, C:2007-10-25 16:33 M:2007-10-25 16:33]
    C:\Program Files\xampp\apache\bin\pxlib.dll  [N/A, C:2007-10-30 20:28 M:2007-10-30 20:28]
    C:\Program Files\xampp\apache\bin\iconv.dll  [N/A, C:2007-12-21 10:00 M:2007-12-21 10:00]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\xampp\php\zendOptimizer\lib\Optimizer\php-5.2.x\ZendOptimizer.dll  [N/A, C:2007-06-14 23:15 M:2007-06-14 23:15]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 3684 / LOCAL SERVICE]   C:\WINDOWS\System32\alg.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\ATL.DLL  [(Verified)Microsoft Corporation, 3.05.2284, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\WSOCK32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\MSWSOCK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\ShimEng.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\AppPatch\AcGenral.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\System32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\System32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 564 / Administrator]   C:\Program Files\Internet Explorer\iexplore.exe   [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2008-03-11 14:24 M:2008-06-23 17:19]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\comctl32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IEFRAME.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
    C:\WINDOWS\system32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\UxTheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WININET.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\dbghelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\IEUI.dll  [(Verified)Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2007-08-13 18:54 M:2007-08-13 18:54]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\gdiplus.dll  [(Verified)Microsoft Corporation, 5.1.3102.5512 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msimtf.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\AcSignIcon.dll  [(Verified)Autodesk, 17.0.54.0, C:2006-04-21 16:00 M:2006-04-21 16:00]
    C:\WINDOWS\system32\WINSPOOL.DRV  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\cscui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\CSCDLL.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Microsoft Office\OFFICE11\msohev.dll  [(Verified)Microsoft Corporation, 11.0.5510, C:2003-07-14 22:52 M:2003-07-14 22:52]
    C:\Program Files\Internet Explorer\ieproxy.dll  [(Verified)Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2007-08-13 18:54 M:2007-08-13 18:54]
    C:\WINDOWS\system32\msi.dll  [(Verified)Microsoft Corporation, 3.1.4001.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SXS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MLANG.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mshtml.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
    C:\WINDOWS\system32\msls31.dll  [(Verified)Microsoft Corporation, 3.10.349.0, C:2004-08-17 10:00 M:2007-08-13 18:54]
    C:\WINDOWS\system32\ieapfltr.dll  [(Verified)Microsoft Corporation, 7.0.6000.16461, C:2007-07-11 12:27 M:2008-06-24 00:14]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\actxprxy.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\jscript.dll  [(Verified)Microsoft Corporation, 5.7.0.18066, C:2004-08-17 10:00 M:2008-05-09 18:53]
    C:\WINDOWS\system32\msxml3.dll  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\userenv.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\netapi32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\schannel.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RASAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\TAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rtutils.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sensapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\WINDOWS\system32\dssenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx  [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32]
    C:\WINDOWS\system32\comdlg32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wdmaud.drv  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:39 M:2008-04-13 19:14]
    C:\WINDOWS\system32\msacm32.drv  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\midimap.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ddrawex.dll  [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DDRAW.dll  [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DCIMAN32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MPR.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\drprov.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\ntlanman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETUI0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETUI1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETRAP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\davclnt.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wpdshext.dll  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
    C:\WINDOWS\system32\PortableDeviceApi.dll  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
    C:\WINDOWS\system32\shgina.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSGINA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ODBC32.dll  [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\odbcint.dll  [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2004-08-17 10:00 M:2007-03-28 05:51]
    C:\WINDOWS\system32\Audiodev.dll  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
    C:\WINDOWS\system32\WMVCore.DLL  [(Verified)Microsoft Corporation, 10.00.00.4054 built by: dnsrv(bld4act), C:2004-08-17 10:00 M:2006-12-07 13:29]
    C:\WINDOWS\system32\WMASF.DLL  [(Verified)Microsoft Corporation, 10.00.00.4060 built by: Microsoft, C:2004-08-17 10:00 M:2007-10-20 06:01]
    C:\WINDOWS\system32\wiashext.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sti.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CFGMGR32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\mshtmled.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\idndl.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\ImgUtil.dll  [(Verified)Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2004-08-17 10:00 M:2007-08-13 18:36]
    C:\WINDOWS\system32\pngfilt.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\iepeers.dll  [(Verified)Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2006-03-04 03:34 M:2007-08-13 18:54]
    C:\WINDOWS\system32\Dxtrans.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\ATL.DLL  [(Verified)Microsoft Corporation, 3.05.2284, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Dxtmsft.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
    C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-03-15 14:00 M:2008-06-13 09:43]
    C:\WINDOWS\system32\OLEACC.dll  [(Verified)Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\MSVCP60.dll  [(Verified)Microsoft Corporation, 6.02.3104.0, C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 5224 / Administrator]   C:\Program Files\Rising\Rav\Rav.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 72, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WSOCK32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\WININET.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\Program Files\Rising\Rav\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\Rsguilib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\MFC71.DLL  [(Verified)Microsoft Corporation, 7.10.3077.0, C:2008-06-07 14:40 M:2008-06-07 14:37]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\Program Files\Rising\Rav\RsXML.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\PngDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RsCommon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\ravpagem.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 1, 9, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Rising\Rav\htmllib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.17, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\RASAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\TAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rtutils.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sensapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RavExt.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2008-03-11 14:37 M:2008-07-29 07:45]
    C:\WINDOWS\system32\ieframe.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
    C:\WINDOWS\system32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 5556 / Administrator]   C:\Program Files\Rising\Rav\RsAgent.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.10, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MFC71.DLL  [(Verified)Microsoft Corporation, 7.10.3077.0, C:2008-06-07 14:40 M:2008-06-07 14:37]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Rising\Rav\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\msagent\agentmpx.dll  [(Verified)Microsoft Corporation, 2.00.0.3427, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msi.dll  [(Verified)Microsoft Corporation, 3.1.4001.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SXS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 3344 / Administrator]   C:\WINDOWS\msagent\AgentSvr.exe   [(Verified)Microsoft Corporation, 2.00.0.3427, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMCTL32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\msagent\agentdp2.dll  [(Verified)Microsoft Corporation, 2.00.0.3427, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msi.dll  [(Verified)Microsoft Corporation, 3.1.4001.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SXS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\winmm.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msacm32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]

[PID: 6388 / Administrator]   C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe   [Thunder Networking Technologies,LTD, 5.8.3.556, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\BugReport.dll  [Thunder Networking Technologies,LTD, 1, 4, 1, 20, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCRT.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WININET.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\MFC42.DLL  [(Verified)Microsoft Corporation, 6.02.4131.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comdlg32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMCTL32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCP60.dll  [(Verified)Microsoft Corporation, 6.02.3104.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMAGEHLP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\MFC42LOC.DLL  [(Verified)Microsoft Corporation, 6.00.8665.0, C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\RICHED32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\RICHED20.dll  [(Verified)Microsoft Corporation, 5.30.23.1230, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll  [Thunder Networking Technologies,LTD, 1, 3, 8, 68, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll  [Thunder Networking Technologies,LTD, 3, 1, 2, 318, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-03-15 14:09 M:2008-04-12 10:37]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mlang.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\asyn_frame.dll  [Thunder Networking Technologies,LTD, 1, 1, 2, 21, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\WINDOWS\system32\MSWSOCK.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\ATL71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\fs.dll  [Thunder Networking Technologies,LTD, 1, 1, 2, 10, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\XLNet.Dll  [Thunder Networking Technologies,LTD, 1, 5, 2, 25, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\apphelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RASAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\TAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rtutils.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll  [Thunder Networking Technologies,LTD, 1, 1, 1, 10, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DownAndPlay.dll  [Copyright 2007, 1, 0, 12, 30, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\WINDOWS\system32\ATL.DLL  [(Verified)Microsoft Corporation, 3.05.2284, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\backend_agent.dll  [Thunder Networking Technologies,LTD, 1, 1, 2, 20, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\WINDOWS\system32\ieframe.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
    C:\WINDOWS\system32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SXS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\mshtml.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
    C:\WINDOWS\system32\msls31.dll  [(Verified)Microsoft Corporation, 3.10.349.0, C:2004-08-17 10:00 M:2007-08-13 18:54]
    C:\Program Files\Thunder Network\Thunder\Program\p2sp.dll  [Thunder Networking Technologies,LTD, 1, 1, 2, 25, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\down_dispatcher.dll  [Thunder Networking Technologies,LTD, 1, 0, 2, 17, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\ptl.dll  [Thunder Networking Technologies,LTD, 3, 1, 2, 24, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\xl_stat.dll  [Thunder Networking Technologies,LTD, 1, 1, 2, 3, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\p2p_network_com.dll  [版权所有 (C) 2008, 1, 0, 2, 25, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\WINDOWS\system32\rsaenh.dll  [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2004-08-17 10:00 M:2008-04-13 10:37]
    C:\WINDOWS\system32\msimtf.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\jscript.dll  [(Verified)Microsoft Corporation, 5.7.0.18066, C:2004-08-17 10:00 M:2008-05-09 18:53]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll  [Thunder Networking Technologies,LTD, 1, 0, 4, 35, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\OLEPRO32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\asycfilt.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx  [(Verified)Adobe Systems, Inc., 9,0,124,0, C:2008-03-25 10:32 M:2008-03-25 10:32]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\wdmaud.drv  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-16 16:39 M:2008-04-13 19:14]
    C:\WINDOWS\system32\msacm32.drv  [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\WINDOWS\system32\MSACM32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\midimap.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sensapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\p2p_upload.dll  [Thunder Networking Technologies,LTD, 1, 1, 2, 8, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\p2p.dll  [Thunder Networking Technologies,LTD, 1,1,2,24, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\xldc.dll  [Thunder Networking Technologies,LTD, 3, 6, 2, 15, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\stream.dll  [Thunder Networking Technologies,LTD, 2, 1, 2, 382, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\p2p_local_res.dll  [Thunder Networking Technologies,LTD, 1,1,2,12, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\al.dll  [Thunder Networking Technologies,LTD, 1,1,2,15, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\AcSignIcon.dll  [(Verified)Autodesk, 17.0.54.0, C:2006-04-21 16:00 M:2006-04-21 16:00]
    C:\WINDOWS\system32\WINSPOOL.DRV  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msxml3.dll  [(Verified)Microsoft Corporation, 8.90.1101.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL  [(Verified)Microsoft Corporation, 11.0.8164, C:2007-04-19 13:57 M:2007-04-19 13:57]
    C:\WINDOWS\system32\schannel.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll  [　, 1, 0, 2, 25, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed17.dll  [Thunder Networking Technologies,LTD, 3, 4, 8, 107, C:2008-07-23 19:51 M:2008-07-12 09:58]
    C:\Program Files\Thunder Network\Thunder\Components\InMedia\PlayerHelper.dll  [thunder, 1, 2, 7, 61, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\InMedia\XLIPC.DLL  [Thunder Networking Technologies,LTD, 1, 0, 0, 2, C:2008-03-15 13:59 M:2008-01-24 10:22]
    C:\Program Files\Thunder Network\Thunder\Program\emule_id.dll  [Copyright 2007, 1, 0, 2, 8, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\P4PClient\P4PClient.dll  [Thunder Networking Technologies,LTD, 2, 2, 5, 70, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll  [Thunder Networking Technologies,LTD, 2, 4, 0, 77, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\WINDOWS\system32\dbghelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll  [Thunder Networking Technologies,LTD, 2, 17, 0, 67, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\MSVCIRT.dll  [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\msi.dll  [(Verified)Microsoft Corporation, 3.1.4001.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Program\imdt.dll  [TODO: <Company name>, 1.1.2.5, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\WINDOWS\system32\ImgUtil.dll  [(Verified)Microsoft Corporation, 7.00.5730.13 (longhorn(wmbla).070711-1130), C:2004-08-17 10:00 M:2007-08-13 18:36]
    C:\WINDOWS\system32\pngfilt.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\Program Files\Thunder Network\Thunder\Components\Security\ThunderSafe.dll  [深圳市迅雷网络技术有限公司, 2, 1, 1, 93, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\Security\ConfigManager.dll  [深圳市迅雷网络技术有限公司, 1, 0, 0, 1, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\Security\SafeManager.dll  [深圳市迅雷网络技术有限公司, 1, 0, 4, 16, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\XLSafeHost.dll  [深圳市迅雷网络技术有限公司, 1, 2, 5, 81, C:2008-08-05 11:01 M:2008-08-05 11:01]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\ThunderRAV.dll  [N/A, C:2007-09-19 12:26 M:2007-09-19 12:26]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\rsscan.dll  [Beijing Rising Technology Co., Ltd., 20, 0, 0, 4, C:2008-04-02 14:42 M:2008-04-02 14:42]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\recomp.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41, C:2007-08-23 13:27 M:2008-08-29 16:02]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\refs.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18, C:2008-08-31 10:48 M:2008-08-29 15:58]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\viruslib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2008-08-31 10:48 M:2008-08-29 15:58]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\relibldr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-31 10:48 M:2008-08-29 15:58]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\AutoHelp.dll  [Beijing Rising Technology Co., Ltd., 6.0.0.3, C:2008-07-23 19:51 M:2008-07-12 09:58]
    C:\Program Files\Thunder Network\Thunder\Program\XLNetU.Dll  [Thunder Networking Technologies,LTD, 1, 5, 1, 24, C:2008-07-23 19:51 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll  [Thunder Networking Technologies,LTD, 1, 1, 6, 21, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll  [Thunder Networking Technologies,LTD, 1, 2, 3, 25, C:2008-03-15 13:59 M:2008-08-04 12:58]
    C:\WINDOWS\system32\Dxtrans.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\ddrawex.dll  [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DDRAW.dll  [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DCIMAN32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Dxtmsft.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2004-08-17 10:00 M:2008-06-24 00:14]
    C:\Program Files\Thunder Network\Thunder\Plugins\KLScan\PluginKLScan.dll  [Thunder Networking Technologies,LTD, 1.1.0.10, C:2008-03-11 10:09 M:2008-03-11 10:09]
    C:\WINDOWS\system32\oledlg.dll  [(Verified)Microsoft Corporation, 1.0 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Plugins\KanKanTop\KanKanTop.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 4, C:2008-03-19 10:18 M:2008-03-11 13:59]
    C:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll  [Thunder Networking Technologies,LTD, 1, 0, 4, 19, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 4, 23, C:2008-03-15 14:00 M:2008-06-13 09:43]
    C:\WINDOWS\system32\OLEACC.dll  [(Verified)Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
    C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-03-15 14:00 M:2008-06-13 09:43]
    C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-03-15 14:00 M:2008-06-13 09:43]
    C:\Program Files\Thunder Network\Thunder\Components\Tips\TipsClient.dll  [Thunder Networking Technologies,LTD, 2, 2, 13, 118, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll  [迅雷网络, 3, 0, 1, 33, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\UserExperience\UserExperience.dll  [Thunder Networking Technologies,LTD, 1, 0, 3, 5, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsXlCom.dll  [版权所有 (C) 2007, 1, 0, 0, 30, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\MediaWorker.dll  [Thunder Networking Technologies,LTD, 1, 2, 0, 22, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\WINDOWS\system32\WMVCore.DLL  [(Verified)Microsoft Corporation, 10.00.00.4054 built by: dnsrv(bld4act), C:2004-08-17 10:00 M:2006-12-07 13:29]
    C:\WINDOWS\system32\WMASF.DLL  [(Verified)Microsoft Corporation, 10.00.00.4060 built by: Microsoft, C:2004-08-17 10:00 M:2007-10-20 06:01]
    C:\WINDOWS\system32\AVIFIL32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVFW32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\ffr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 16, C:2008-08-31 10:48 M:2008-08-29 15:58]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\scanexec.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22, C:2008-08-31 10:48 M:2008-08-29 16:02]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\unexe.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 6, C:2008-08-31 10:48 M:2008-08-29 15:58]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\scanex.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2008-08-31 10:48 M:2008-08-29 16:02]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\extfile.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 32, C:2008-08-31 10:48 M:2008-08-29 15:58]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\pearc.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 8, C:2008-08-31 10:48 M:2008-08-29 15:58]
    C:\Program Files\Thunder Network\Thunder\Components\DownloadStat\DownloadStat.dll  [Thunder Networking Technologies,LTD, 1, 4, 1, 6, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Components\Tips\XLIPC.DLL  [Thunder Networking Technologies,LTD, 1, 0, 0, 2, C:2008-03-15 14:00 M:2008-08-04 12:58]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\ThunderRAV\bin\scansct.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11, C:2008-08-31 10:48 M:2008-09-03 07:21]
    C:\Program Files\Thunder Network\Thunder\Program\bd.dll  [Thunder Networking Technologies,LTD, 1, 0, 2, 17, C:2008-03-15 13:59 M:2008-08-04 12:58]

[PID: 7624 / Administrator]   C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.828\arswp2\ArSwp.exe   [(Verified)ArSwp.com, 2, 8, 1, 815, C:2008-09-08 20:09 M:2008-08-15 22:25]
    C:\WINDOWS\system32\ntdll.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kernel32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHLWAPI.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:35 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ADVAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RPCRT4.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\Secur32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\GDI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USER32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msvcrt.dll  [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WININET.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-04 03:35 M:2008-06-24 00:14]
    C:\WINDOWS\system32\Normaliz.dll  [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2006-06-29 08:05 M:2006-06-29 08:05]
    C:\WINDOWS\system32\iertutil.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:34 M:2008-06-24 00:14]
    C:\WINDOWS\system32\VERSION.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\imagehlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINTRUST.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CRYPT32.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSASN1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WTSAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSTA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NETAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\PSAPI.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\comdlg32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMCTL32.dll  [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SHELL32.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINSPOOL.DRV  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\oledlg.dll  [(Verified)Microsoft Corporation, 1.0 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ole32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEPRO32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\OLEAUT32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\urlmon.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-18 11:08 M:2008-06-24 00:14]
    C:\WINDOWS\system32\WSOCK32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2_32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WS2HELP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iphlpapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSVCP60.dll  [(Verified)Microsoft Corporation, 6.02.3104.0, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SETUPAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\IMM32.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LPK.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\USP10.dll  [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 28, C:2008-08-29 15:59 M:2008-08-29 16:02]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll  [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-04-13 19:11 M:2008-04-13 19:11]
    C:\WINDOWS\system32\uxtheme.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MSCTF.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\appHelp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CLBCATQ.DLL  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-03-11 14:23 M:2008-04-13 19:13]
    C:\WINDOWS\system32\COMRes.dll  [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\AcSignIcon.dll  [(Verified)Autodesk, 17.0.54.0, C:2006-04-21 16:00 M:2006-04-21 16:00]
    C:\WINDOWS\system32\msctfime.ime  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\WINDOWS\system32\MSIMG32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTMARTA.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SAMLIB.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WLDAP32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\SogouInput\Plugin\SgImeWord.dll  [(Verified)Sogou.com Inc., 3.5.0.0, C:2008-06-16 13:35 M:2008-06-16 13:35]
    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.828\arswp2\plugin\ArFix.dll  [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2008-09-08 20:09 M:2007-11-28 15:19]
    C:\WINDOWS\system32\USERENV.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ieframe.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2007-08-13 18:54 M:2008-06-24 00:14]
    C:\WINDOWS\system32\asycfilt.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mswsock.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\system32\hnetcfg.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\wshtcpip.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\RASAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\TAPI32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rtutils.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\WINMM.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\msv1_0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\sensapi.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\rasadhlp.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\DNSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
    C:\WINDOWS\System32\winrnr.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL  [(Verified)Microsoft Corporation, 11.0.8164, C:2007-04-19 13:57 M:2007-04-19 13:57]
    C:\WINDOWS\system32\Cabinet.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\SXS.DLL  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mshtml.dll  [(Verified)Microsoft Corporation, 7.00.6000.16705 (vista_gdr.080618-1506), C:2006-03-23 17:35 M:2008-06-24 10:14]
    C:\WINDOWS\system32\msls31.dll  [(Verified)Microsoft Corporation, 3.10.349.0, C:2004-08-17 10:00 M:2007-08-13 18:54]
    C:\WINDOWS\system32\mlang.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\LINKINFO.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ntshrui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ATL.DLL  [(Verified)Microsoft Corporation, 3.05.2284, C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\mstask.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-03-11 14:24 M:2008-04-13 19:13]
    C:\WINDOWS\system32\MPR.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\NTDSAPI.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\browseui.dll  [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2006-03-04 03:34 M:2008-04-13 19:13]
    C:\WINDOWS\system32\shdocvw.dll  [(Verified)Microsoft Corporation, 6.00.2900.5628 (xpsp_sp3_gdr.080625-1652), C:2006-03-30 09:19 M:2008-06-26 16:12]
    C:\WINDOWS\system32\CRYPTUI.dll  [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\drprov.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\ntlanman.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETUI0.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETUI1.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\NETRAP.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\davclnt.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\PortableDeviceApi.dll  [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47]
    C:\WINDOWS\system32\MSGINA.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\ODBC32.dll  [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\odbcint.dll  [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2004-08-17 10:00 M:2007-03-28 05:51]
    C:\WINDOWS\system32\xpsp2res.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 10:00 M:2008-04-13 11:35]
    C:\WINDOWS\system32\sti.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\CFGMGR32.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:12]
    C:\Program Files\Rising\Rav\ravpagew.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 89, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\WINDOWS\system32\AcSignIcon.dll  [(Verified)Autodesk, 17.0.54.0, C:2006-04-21 16:00 M:2006-04-21 16:00]
    C:\WINDOWS\system32\WINSPOOL.DRV  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:14]
    C:\WINDOWS\System32\cscui.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\CSCDLL.dll  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 10:00 M:2008-04-13 19:13]
    C:\Program Files\Rising\Rav\fakescan.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.14, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\Scanner.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.39, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\BWList.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.5, C:2008-08-29 15:59 M:2008-08-29 15:58]
    C:\Program Files\Rising\Rav\SysMail.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.11, C:2008-08-29 15:59 M:2008-08-29 15:58]


========================================
文件关联

[.txt] <C:\WINDOWS\notepad.exe %1> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-03-11 14:19 M:2008-04-13 19:14]
[.ini] <C:\WINDOWS\System32\NOTEPAD.EXE %1> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 10:00 M:2008-04-13 19:14]
[.hlp] <%SystemRoot%\System32\winhlp32.exe %1> [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2004-08-17 10:00 M:2004-08-17 10:00]
[.vbs] <%SystemRoot%\System32\WScript.exe "%1" %*> [(Verified)Microsoft Corporation, 5.7.0.18066, C:2004-08-17 10:00 M:2008-05-08 19:24]
[.js] <%SystemRoot%\System32\WScript.exe "%1" %*> [(Verified)Microsoft Corporation, 5.7.0.18066, C:2004-08-17 10:00 M:2008-05-08 19:24]
[.chm] <"hh.exe" %1> [(Verified)Microsoft Corporation, 5.2.3790.2453 (srv03_sp1_qfe.050525-1536), C:2004-08-17 10:00 M:2008-04-13 19:14]


========================================
AutoRun.INF



========================================
Winsock提供者

MSAFD Tcpip [TCP/IP]
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD Tcpip [UDP/IP]
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD Tcpip [RAW/IP]
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
RSVP UDP Service Provider
    <%SystemRoot%\system32\rsvpsp.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
RSVP TCP Service Provider
    <%SystemRoot%\system32\rsvpsp.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 10:00 M:2008-04-13 19:13]
MSAFD NetBIOS [\Device\NetBT_Tcpip_{388920DC-DA90-4855-8341-505761052C57}] SEQPACKET 3
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD NetBIOS [\Device\NetBT_Tcpip_{388920DC-DA90-4855-8341-505761052C57}] DATAGRAM 3
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD NetBIOS [\Device\NetBT_Tcpip_{7E9C9E65-912A-4EA2-8890-555C8FD75244}] SEQPACKET 0
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD NetBIOS [\Device\NetBT_Tcpip_{7E9C9E65-912A-4EA2-8890-555C8FD75244}] DATAGRAM 0
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD NetBIOS [\Device\NetBT_Tcpip_{A94BD4AA-109A-405D-ABB3-EE68B65AB021}] SEQPACKET 1
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD NetBIOS [\Device\NetBT_Tcpip_{A94BD4AA-109A-405D-ABB3-EE68B65AB021}] DATAGRAM 1
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DA974B0-0965-4B5F-A3DD-213548507BAC}] SEQPACKET 2
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]
MSAFD NetBIOS [\Device\NetBT_Tcpip_{0DA974B0-0965-4B5F-A3DD-213548507BAC}] DATAGRAM 2
    <%SystemRoot%\system32\mswsock.dll>  [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2004-08-17 10:00 M:2008-06-21 01:46]


========================================
HOSTS

    127.0.0.1 localhost


[/CODE]