============================================================== 金山清理专家系统诊断报告 该诊断报告由金山清理专家提供 http://www.duba.net ============================================================== 诊断时间: 2008-09-30, 16:58 诊断平台: Windows XP [5.1.2600] Service Pack 3 IE版本: Internet Explorer V7.0.13.5730 计算机物理内存: 511(MB) 当前可用内存: 234(MB) 硬盘总大小: 74(GB) 硬盘可用空间: 59(GB) 清理专家版本: 2008.08.12.553 恶意软件库版本: 2008.08.06.1 漏洞库版本: 2008.09.02.1 ============================================================== 映像劫持 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options 文件路径: C:\WINDOWS\system32\ntsd.exe [安全] [5.1.2600.0 (XPClient.010817-1148)] ============================================================== App Init DLLs ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] 文件路径: C:\WINDOWS\system32\kmon.dll [安全] ============================================================== 常规启动项 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [FixCamera] 文件路径: C:\WINDOWS\FixCamera.exe [安全] [tsnpstd3] 文件路径: C:\WINDOWS\tsnpstd3.exe [安全] [snpstd3] 文件路径: C:\WINDOWS\vsnpstd3.exe [安全] [RfwMain] <"F:\新建文件夹 (2)\Rising\Rfw\rfwmain.exe" -Startup> 文件路径: F:\新建文件夹 (2)\Rising\Rfw\rfwmain.exe [安全] [RavTask] <"C:\Program Files\Rising\Rav\RavTask.exe" -system> 文件路径: C:\Program Files\Rising\Rav\RavTask.exe [安全] [runeip] <"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup> 文件路径: C:\Program Files\Rising\AntiSpyware\rstray.exe [安全] [stup.exe] 文件路径: C:\WINDOWS\system32\Rundll32.exe [安全] [BluetoothAuthenticationAgent] 文件路径: C:\WINDOWS\system32\bthprops.cpl [安全] [KernelFaultCheck] <%systemroot%\system32\dumprep 0 -k> 文件路径: C:\WINDOWS\system32\dumprep.exe [安全] [NMGameX_AutoRun] 文件路径: C:\WINDOWS\system32\NMGameX.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ctfmon.exe] 文件路径: C:\WINDOWS\system32\ctfmon.exe [安全] [miniqqlive] <"D:\My Documents\QQLive\MiniQQLive.exe"> 文件路径: D:\My Documents\QQLive\MiniQQLive.exe [安全] ============================================================== 登陆加载项 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon [Userinit] 文件路径: C:\WINDOWS\system32\userinit.exe [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon [Shell] 文件路径: C:\WINDOWS\Explorer.exe [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon [UIHost] 文件路径: C:\WINDOWS\system32\logonui.exe [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify [crypt32chain] 文件路径: C:\WINDOWS\system32\crypt32.dll [安全] [cryptnet] 文件路径: C:\WINDOWS\system32\cryptnet.dll [安全] [cscdll] 文件路径: C:\WINDOWS\system32\cscdll.dll [安全] [dimsntfy] <%SystemRoot%\System32\dimsntfy.dll> 文件路径: C:\WINDOWS\System32\dimsntfy.dll [安全] [ScCertProp] 文件路径: C:\WINDOWS\system32\wlnotify.dll [安全] [Schedule] 文件路径: C:\WINDOWS\system32\wlnotify.dll [安全] [sclgntfy] 文件路径: C:\WINDOWS\system32\sclgntfy.dll [安全] [SensLogn] 文件路径: C:\WINDOWS\system32\WlNotify.dll [安全] [termsrv] 文件路径: C:\WINDOWS\system32\wlnotify.dll [安全] [wlballoon] 文件路径: C:\WINDOWS\system32\wlnotify.dll [安全] ============================================================== 延迟加载 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad [PostBootReminder] 文件路径: C:\WINDOWS\system32\SHELL32.dll [安全] [CDBurn] 文件路径: C:\WINDOWS\system32\SHELL32.dll [安全] [WebCheck] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [SysTray] 文件路径: C:\WINDOWS\system32\stobject.dll [安全] ============================================================== 执行挂钩 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks <{AEB6717E-7E19-11d0-97EE-00C04FD91972}> 文件路径: C:\WINDOWS\system32\shell32.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks <{32CD708B-60A7-4C00-9377-D73EAA495F0F}> 文件路径: C:\WINDOWS\system32\RavExt.dll [安全] ============================================================== 启动文件夹位置 ============================================================== Common Startup: C:\Documents and Settings\All Users\「开始」菜单\程序\启动 Startup: C:\Documents and Settings\Administrator\「开始」菜单\程序\启动 Common Startup: %ALLUSERSPROFILE%\「开始」菜单\程序\启动 ============================================================== 安全模式启动项 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot [AlternateShell] 文件路径: C:\WINDOWS\system32\cmd.exe [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\SafeBoot [AlternateShell] 文件路径: C:\WINDOWS\system32\cmd.exe [安全] ============================================================== 调试相关项 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AEDebug [Debugger] 文件路径: C:\WINDOWS\system32\drwtsn32.exe [安全] ============================================================== 文件扩展名关联 ============================================================== .TXT 文件路径: C:\WINDOWS\notepad.exe [安全] .ASF <"C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:7 /Open "%L"> 文件路径: C:\Program Files\Windows Media Player\wmplayer.exe [安全] .AVI <"C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:8 /Open "%L"> 文件路径: C:\Program Files\Windows Media Player\wmplayer.exe [安全] .CHM <"hh.exe" %1> 文件路径: C:\WINDOWS\hh.exe [安全] .GIF <"C:\Program Files\ACD Systems\ACDSee\5.0\ACDSee5.exe" "%1"> 文件路径: C:\Program Files\ACD Systems\ACDSee\5.0\ACDSee5.exe [安全] HELPFILE 文件路径: C:\WINDOWS\system32\winhlp32.exe [安全] .HLP 文件路径: C:\WINDOWS\system32\winhlp32.exe [安全] .HTA 文件路径: C:\WINDOWS\system32\mshta.exe [安全] .HTML(.HTM) <"C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome> 文件路径: C:\Program Files\Internet Explorer\IEXPLORE.EXE [安全] .INF 文件路径: C:\WINDOWS\system32\NOTEPAD.EXE [安全] .INI 文件路径: C:\WINDOWS\System32\NOTEPAD.EXE [安全] .JPG(.JPEG) <"C:\Program Files\ACD Systems\ACDSee\5.0\ACDSee5.exe" "%1"> 文件路径: C:\Program Files\ACD Systems\ACDSee\5.0\ACDSee5.exe [安全] .M3U <"D:\kugoo2008\KuGou2008\KuGoo.exe" /Open "%1"> 文件路径: D:\kugoo2008\KuGou2008\KuGoo.exe [安全] .REG 文件路径: C:\WINDOWS\regedit.exe [安全] .WMA <"D:\kugoo2008\KuGou2008\KuGoo.exe" /Open "%1"> 文件路径: D:\kugoo2008\KuGou2008\KuGoo.exe [安全] .MP3 <"D:\kugoo2008\KuGou2008\KuGoo.exe" /Open "%1"> 文件路径: D:\kugoo2008\KuGou2008\KuGoo.exe [安全] .MPG(.MPEG) <"C:\Program Files\Windows Media Player\wmplayer.exe" /prefetch:9 /Open "%L"> 文件路径: C:\Program Files\Windows Media Player\wmplayer.exe [安全] .VBS 文件路径: C:\WINDOWS\System32\WScript.exe [安全] .JS 文件路径: C:\WINDOWS\System32\WScript.exe [安全] ============================================================== Host File ============================================================== 127.0.0.1 localhost ============================================================== 系统服务 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds [StartupPrograms] [已启用] 文件路径: C:\WINDOWS\system32\rdpclip.exe [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services [Alerter] [已禁用] <%SystemRoot%\system32\alrsvc.dll> 文件路径: C:\WINDOWS\system32\alrsvc.dll [安全] [ALG] [已启用] <%SystemRoot%\System32\alg.exe> 文件路径: C:\WINDOWS\System32\alg.exe [安全] [AppMgmt] [已启用] <%SystemRoot%\System32\appmgmts.dll> 文件路径: C:\WINDOWS\System32\appmgmts.dll [安全] [Ati HotKey Poller] [已禁用] <%SystemRoot%\system32\Ati2evxx.exe> 文件路径: C:\WINDOWS\system32\Ati2evxx.exe [安全] [AudioSrv] [已启用] <%SystemRoot%\System32\audiosrv.dll> 文件路径: C:\WINDOWS\System32\audiosrv.dll [安全] [BITS] [已启用] 文件路径: C:\WINDOWS\system32\qmgr.dll [安全] [Browser] [已启用] <%SystemRoot%\System32\browser.dll> 文件路径: C:\WINDOWS\System32\browser.dll [安全] [BthServ] [已启用] <%SystemRoot%\System32\bthserv.dll> 文件路径: C:\WINDOWS\System32\bthserv.dll [安全] [ccosm] [已禁用] 文件路径: C:\Program Files\StormII\stormliv.exe [安全] [CiSvc] [已禁用] <%SystemRoot%\system32\cisvc.exe> 文件路径: C:\WINDOWS\system32\cisvc.exe [安全] [ClipSrv] [已禁用] <%SystemRoot%\system32\clipsrv.exe> 文件路径: C:\WINDOWS\system32\clipsrv.exe [安全] [COMSysApp] [已启用] 文件路径: C:\WINDOWS\system32\dllhost.exe [安全] [CryptSvc] [已启用] <%SystemRoot%\System32\cryptsvc.dll> 文件路径: C:\WINDOWS\System32\cryptsvc.dll [安全] [DcomLaunch] [已启用] <%SystemRoot%\system32\rpcss.dll> 文件路径: C:\WINDOWS\system32\rpcss.dll [安全] [Dhcp] [已启用] <%SystemRoot%\System32\dhcpcsvc.dll> 文件路径: C:\WINDOWS\System32\dhcpcsvc.dll [安全] [dmadmin] [已启用] <%SystemRoot%\System32\dmadmin.exe /com> 文件路径: C:\WINDOWS\System32\dmadmin.exe [安全] [dmserver] [已启用] <%SystemRoot%\System32\dmserver.dll> 文件路径: C:\WINDOWS\System32\dmserver.dll [安全] [Dnscache] [已启用] <%SystemRoot%\System32\dnsrslvr.dll> 文件路径: C:\WINDOWS\System32\dnsrslvr.dll [安全] [Dot3svc] [已启用] <%SystemRoot%\System32\dot3svc.dll> 文件路径: C:\WINDOWS\System32\dot3svc.dll [安全] [EapHost] [已启用] <%SystemRoot%\System32\eapsvc.dll> 文件路径: C:\WINDOWS\System32\eapsvc.dll [安全] [ERSvc] [已禁用] <%SystemRoot%\System32\ersvc.dll> 文件路径: C:\WINDOWS\System32\ersvc.dll [安全] [Eventlog] [已启用] <%SystemRoot%\system32\services.exe> 文件路径: C:\WINDOWS\system32\services.exe [安全] [EventSystem] [已启用] 文件路径: C:\WINDOWS\system32\es.dll [安全] [FastUserSwitchingCompatibility] [已启用] <%SystemRoot%\System32\shsvcs.dll> 文件路径: C:\WINDOWS\System32\shsvcs.dll [安全] [gusvc] [已启用] <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"> 文件路径: C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [安全] [helpsvc] [已禁用] <%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll> 文件路径: C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll [安全] [HidServ] [已启用] <%SystemRoot%\System32\hidserv.dll> 文件路径: C:\WINDOWS\System32\hidserv.dll [安全] [hkmsvc] [已启用] <%SystemRoot%\System32\kmsvc.dll> 文件路径: C:\WINDOWS\System32\kmsvc.dll [安全] [HTTPFilter] [已启用] <%SystemRoot%\System32\w3ssl.dll> 文件路径: C:\WINDOWS\System32\w3ssl.dll [安全] [ImapiService] [已启用] 文件路径: C:\WINDOWS\system32\imapi.exe [安全] [Irmon] [已启用] <%SystemRoot%\System32\irmon.dll> 文件路径: C:\WINDOWS\System32\irmon.dll [安全] [kaccore] [已启用] <"C:\Program Files\Kingsoft\KAC\Service\kaccore.exe"> 文件路径: C:\Program Files\Kingsoft\KAC\Service\kaccore.exe [安全] [lanmanserver] [已启用] <%SystemRoot%\System32\srvsvc.dll> 文件路径: C:\WINDOWS\System32\srvsvc.dll [安全] [lanmanworkstation] [已启用] <%SystemRoot%\System32\wkssvc.dll> 文件路径: C:\WINDOWS\System32\wkssvc.dll [安全] [LmHosts] [已启用] <%SystemRoot%\System32\lmhsvc.dll/TCP/IP NetBIOS Helper> 文件路径: C:\WINDOWS\System32\lmhsvc.dll [安全] [Macromedia Licensing Service] [已启用] <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe"> 文件路径: C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [安全] [Messenger] [已禁用] <%SystemRoot%\System32\msgsvc.dll> 文件路径: C:\WINDOWS\System32\msgsvc.dll [安全] [mnmsrvc] [已启用] 文件路径: C:\WINDOWS\system32\mnmsrvc.exe [安全] [MSDTC] [已启用] 文件路径: C:\WINDOWS\system32\msdtc.exe [安全] [MSIServer] [已启用] 文件路径: C:\WINDOWS\system32\msiexec.exe [安全] [napagent] [已启用] <%SystemRoot%\System32\qagentrt.dll> 文件路径: C:\WINDOWS\System32\qagentrt.dll [安全] [NetDDE] [已禁用] <%SystemRoot%\system32\netdde.exe> 文件路径: C:\WINDOWS\system32\netdde.exe [安全] [NetDDEdsdm] [已禁用] <%SystemRoot%\system32\netdde.exe> 文件路径: C:\WINDOWS\system32\netdde.exe [安全] [Netlogon] [已启用] <%SystemRoot%\system32\lsass.exe> 文件路径: C:\WINDOWS\system32\lsass.exe [安全] [Netman] [已启用] <%SystemRoot%\System32\netman.dll> 文件路径: C:\WINDOWS\System32\netman.dll [安全] [Nla] [已启用] <%SystemRoot%\System32\mswsock.dll> 文件路径: C:\WINDOWS\System32\mswsock.dll [安全] [NtLmSsp] [已启用] <%SystemRoot%\system32\lsass.exe> 文件路径: C:\WINDOWS\system32\lsass.exe [安全] [NtmsSvc] [已启用] <%SystemRoot%\system32\ntmssvc.dll> 文件路径: C:\WINDOWS\system32\ntmssvc.dll [安全] [ose] [已启用] <"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"> 文件路径: C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [安全] [PlugPlay] [已启用] <%SystemRoot%\system32\services.exe> 文件路径: C:\WINDOWS\system32\services.exe [安全] [PolicyAgent] [已启用] <%SystemRoot%\system32\lsass.exe/IPSEC Services> 文件路径: C:\WINDOWS\system32\lsass.exe [安全] [ProtectedStorage] [已启用] <%SystemRoot%\system32\lsass.exe> 文件路径: C:\WINDOWS\system32\lsass.exe [安全] [RasAuto] [已启用] <%SystemRoot%\System32\rasauto.dll> 文件路径: C:\WINDOWS\System32\rasauto.dll [安全] [RasMan] [已启用] <%SystemRoot%\System32\rasmans.dll> 文件路径: C:\WINDOWS\System32\rasmans.dll [安全] [RDSessMgr] [已启用] 文件路径: C:\WINDOWS\system32\sessmgr.exe [安全] [RemoteAccess] [已禁用] <%SystemRoot%\System32\mprdim.dll> 文件路径: C:\WINDOWS\System32\mprdim.dll [安全] [RemoteRegistry] [已禁用] <%SystemRoot%\system32\regsvc.dll> 文件路径: C:\WINDOWS\system32\regsvc.dll [安全] [RfwProxySrv] [已启用] 文件路径: F:\新建文件夹 (2)\Rising\Rfw\rfwProxy.exe [安全] [RfwService] [已启用] 文件路径: F:\新建文件夹 (2)\Rising\Rfw\rfwsrv.exe [安全] [RpcLocator] [已启用] <%SystemRoot%\system32\locator.exe> 文件路径: C:\WINDOWS\system32\locator.exe [安全] [RpcSs] [已启用] <%SystemRoot%\system32\rpcss.dll> 文件路径: C:\WINDOWS\system32\rpcss.dll [安全] [RsCCenter] [已启用] <"C:\Program Files\Rising\Rav\CCenter.exe"> 文件路径: C:\Program Files\Rising\Rav\CCenter.exe [安全] [RsRavMon] [已启用] <"C:\PROGRAM FILES\RISING\RAV\Ravmond.exe"> 文件路径: C:\PROGRAM FILES\RISING\RAV\Ravmond.exe [安全] [RSVP] [已启用] <%SystemRoot%\system32\rsvp.exe> 文件路径: C:\WINDOWS\system32\rsvp.exe [安全] [SamSs] [已启用] <%SystemRoot%\system32\lsass.exe> 文件路径: C:\WINDOWS\system32\lsass.exe [安全] [SCardSvr] [已启用] <%SystemRoot%\System32\SCardSvr.exe> 文件路径: C:\WINDOWS\System32\SCardSvr.exe [安全] [Schedule] [已禁用] <%SystemRoot%\system32\schedsvc.dll> 文件路径: C:\WINDOWS\system32\schedsvc.dll [安全] [seclogon] [已启用] <%SystemRoot%\System32\seclogon.dll> 文件路径: C:\WINDOWS\System32\seclogon.dll [安全] [SENS] [已启用] <%SystemRoot%\system32\sens.dll> 文件路径: C:\WINDOWS\system32\sens.dll [安全] [SharedAccess] [已启用] <%SystemRoot%\System32\ipnathlp.dll/Windows Firewall/Internet Connection Sharing (ICS)> 文件路径: C:\WINDOWS\System32\ipnathlp.dll [安全] [ShellHWDetection] [已启用] <%SystemRoot%\System32\shsvcs.dll> 文件路径: C:\WINDOWS\System32\shsvcs.dll [安全] [Spooler] [已启用] <%SystemRoot%\system32\spoolsv.exe> 文件路径: C:\WINDOWS\system32\spoolsv.exe [安全] [srservice] [已禁用] 文件路径: C:\WINDOWS\system32\srsvc.dll [安全] [SSDPSRV] [已启用] <%SystemRoot%\System32\ssdpsrv.dll> 文件路径: C:\WINDOWS\System32\ssdpsrv.dll [安全] [stisvc] [已启用] <%SystemRoot%\system32\wiaservc.dll> 文件路径: C:\WINDOWS\system32\wiaservc.dll [安全] [SwPrv] [已启用] 文件路径: C:\WINDOWS\system32\dllhost.exe [安全] [SysmonLog] [已启用] <%SystemRoot%\system32\smlogsvc.exe> 文件路径: C:\WINDOWS\system32\smlogsvc.exe [安全] [TapiSrv] [已启用] <%SystemRoot%\System32\tapisrv.dll> 文件路径: C:\WINDOWS\System32\tapisrv.dll [安全] [TermService] [已启用] <%SystemRoot%\System32\termsrv.dll> 文件路径: C:\WINDOWS\System32\termsrv.dll [安全] [Themes] [已启用] <%SystemRoot%\System32\shsvcs.dll> 文件路径: C:\WINDOWS\System32\shsvcs.dll [安全] [TlntSvr] [已禁用] 文件路径: C:\WINDOWS\system32\tlntsvr.exe [安全] [TrkWks] [已启用] <%SystemRoot%\system32\trkwks.dll> 文件路径: C:\WINDOWS\system32\trkwks.dll [安全] [UMWdf] [已启用] 文件路径: C:\WINDOWS\system32\wdfmgr.exe [安全] [upnphost] [已启用] <%SystemRoot%\System32\upnphost.dll> 文件路径: C:\WINDOWS\System32\upnphost.dll [安全] [UPS] [已启用] <%SystemRoot%\System32\ups.exe> 文件路径: C:\WINDOWS\System32\ups.exe [安全] [VSS] [已启用] <%SystemRoot%\System32\vssvc.exe> 文件路径: C:\WINDOWS\System32\vssvc.exe [安全] [W32Time] [已启用] 文件路径: C:\WINDOWS\system32\w32time.dll [安全] [waml] [已启用] 文件路径: C:\Program Files\Common Files\dozoe\koscas.exe [安全] [WebClient] [已启用] <%SystemRoot%\System32\webclnt.dll> 文件路径: C:\WINDOWS\System32\webclnt.dll [安全] [winmgmt] [已启用] <%SystemRoot%\system32\wbem\WMIsvc.dll> 文件路径: C:\WINDOWS\system32\wbem\WMIsvc.dll [安全] [WmdmPmSN] [已启用] 文件路径: C:\WINDOWS\system32\MsPMSNSv.dll [安全] [Wmi] [已启用] <%SystemRoot%\System32\advapi32.dll> 文件路径: C:\WINDOWS\System32\advapi32.dll [安全] [WmiApSrv] [已启用] 文件路径: C:\WINDOWS\system32\wbem\wmiapsrv.exe [安全] [wscsvc] [已启用] <%SYSTEMROOT%\system32\wscsvc.dll> 文件路径: C:\WINDOWS\system32\wscsvc.dll [安全] [wuauserv] [已启用] 文件路径: C:\WINDOWS\system32\wuauserv.dll [安全] [WZCSVC] [已启用] <%SystemRoot%\System32\wzcsvc.dll> 文件路径: C:\WINDOWS\System32\wzcsvc.dll [安全] [xmlprov] [已启用] <%SystemRoot%\System32\xmlprov.dll> 文件路径: C:\WINDOWS\System32\xmlprov.dll [安全] ============================================================== 驱动程序 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers [timer] [已启用] 文件路径: C:\WINDOWS\system32\timer.drv [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32 [midimapper] [已启用] 文件路径: C:\WINDOWS\system32\midimap.dll [安全] [msacm.imaadpcm] [已启用] 文件路径: C:\WINDOWS\system32\imaadp32.acm [安全] [msacm.msadpcm] [已启用] 文件路径: C:\WINDOWS\system32\msadp32.acm [安全] [msacm.msg711] [已启用] 文件路径: C:\WINDOWS\system32\msg711.acm [安全] [msacm.msgsm610] [已启用] 文件路径: C:\WINDOWS\system32\msgsm32.acm [安全] [msacm.trspch] [已启用] 文件路径: C:\WINDOWS\system32\tssoft32.acm [安全] [vidc.cvid] [已启用] 文件路径: C:\WINDOWS\system32\iccvid.dll [安全] [VIDC.I420] [已启用] 文件路径: C:\WINDOWS\system32\msh263.drv [安全] [vidc.iv31] [已启用] 文件路径: C:\WINDOWS\system32\ir32_32.dll [安全] [vidc.iv32] [已启用] 文件路径: C:\WINDOWS\system32\ir32_32.dll [安全] [vidc.iv41] [已启用] 文件路径: C:\WINDOWS\system32\ir41_32.ax [安全] [VIDC.IYUV] [已启用] 文件路径: C:\WINDOWS\system32\iyuv_32.dll [安全] [vidc.mrle] [已启用] 文件路径: C:\WINDOWS\system32\msrle32.dll [安全] [vidc.msvc] [已启用] 文件路径: C:\WINDOWS\system32\msvidc32.dll [安全] [VIDC.UYVY] [已启用] 文件路径: C:\WINDOWS\system32\msyuv.dll [安全] [VIDC.YUY2] [已启用] 文件路径: C:\WINDOWS\system32\msyuv.dll [安全] [VIDC.YVU9] [已启用] 文件路径: C:\WINDOWS\system32\tsbyuv.dll [安全] [VIDC.YVYU] [已启用] 文件路径: C:\WINDOWS\system32\msyuv.dll [安全] [wavemapper] [已启用] 文件路径: C:\WINDOWS\system32\msacm32.drv [安全] [msacm.msg723] [已启用] 文件路径: C:\WINDOWS\system32\msg723.acm [安全] [vidc.M263] [已启用] 文件路径: C:\WINDOWS\system32\msh263.drv [安全] [vidc.M261] [已启用] 文件路径: C:\WINDOWS\system32\msh261.drv [安全] [msacm.msaudio1] [已启用] 文件路径: C:\WINDOWS\system32\msaud32.acm [安全] [msacm.sl_anet] [已启用] 文件路径: C:\WINDOWS\system32\sl_anet.acm [安全] [msacm.iac2] [已启用] 文件路径: C:\WINDOWS\system32\iac25_32.ax [安全] [vidc.iv50] [已启用] 文件路径: C:\WINDOWS\system32\ir50_32.dll [安全] [msacm.l3acm] [已启用] 文件路径: C:\WINDOWS\system32\l3codeca.acm [安全] [wave] [已启用] 文件路径: C:\WINDOWS\system32\wdmaud.drv [安全] [midi] [已启用] 文件路径: C:\WINDOWS\system32\wdmaud.drv [安全] [mixer] [已启用] 文件路径: C:\WINDOWS\system32\wdmaud.drv [安全] [MSVideo8] [已启用] 文件路径: C:\WINDOWS\system32\VfWWDM32.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services [6zwyquhfo] [已启用] 文件路径: C:\WINDOWS\system32\drivers\6zwyquhfo.sys [分析中] [aaatimeo] [已禁用] <\SystemRoot\system32\DRIVERS\aaatimeo.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\aaatimeo.sys [安全] [ac97intc] [已启用] 文件路径: C:\WINDOWS\system32\drivers\ac97intc.sys [安全] [ACPI] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ACPI.sys [安全] [aec] [已启用] 文件路径: C:\WINDOWS\system32\drivers\aec.sys [安全] [AFAMgt] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\afamgt.sys [安全] [AFD] [已启用] <\SystemRoot\System32\drivers\afd.sys> 文件路径: C:\WINDOWS\System32\drivers\afd.sys [安全] [agp440] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\agp440.sys [安全] [agpCPQ] [已禁用] <\SystemRoot\system32\DRIVERS\agpCPQ.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [安全] [Aha154x] [已禁用] <\SystemRoot\system32\DRIVERS\aha154x.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\aha154x.sys [安全] [ahcix86] [已禁用] <\SystemRoot\system32\DRIVERS\ahcix86.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\ahcix86.sys [安全] [ALCXWDM] [已启用] 文件路径: C:\WINDOWS\system32\drivers\ALCXWDM.SYS [安全] [AliIde] [已禁用] <\SystemRoot\system32\DRIVERS\aliide.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\aliide.sys [安全] [alim1541] [已禁用] <\SystemRoot\system32\DRIVERS\alim1541.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\alim1541.sys [安全] [amdagp] [已禁用] <\SystemRoot\system32\DRIVERS\amdagp.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\amdagp.sys [安全] [amdbusdr] [已禁用] <\SystemRoot\system32\DRIVERS\amdbusdr.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\amdbusdr.sys [安全] [amdeide] [已禁用] <\SystemRoot\system32\DRIVERS\AmdEide.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\AmdEide.sys [安全] [AmdK8] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\amdk8.sys [安全] [AmdLLD] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\AmdLLD.sys [安全] [asc3350p] [已禁用] <\SystemRoot\system32\DRIVERS\asc3350p.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\asc3350p.sys [安全] [ASH1205] [已禁用] <\SystemRoot\system32\DRIVERS\ASH1205.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\ASH1205.sys [安全] [AsyncMac] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\asyncmac.sys [安全] [ata1200a] [已禁用] <\SystemRoot\system32\DRIVERS\ata1200a.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\ata1200a.sys [安全] [atapi] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\atapi.sys [安全] [ati2mtag] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [安全] [atiide] [已禁用] <\SystemRoot\system32\DRIVERS\atiide.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\atiide.sys [安全] [Atmarpc] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\atmarpc.sys [安全] [audstub] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\audstub.sys [安全] [bb-run] [已禁用] <\SystemRoot\system32\DRIVERS\bb-run.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\bb-run.sys [安全] [BlueletAudio] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [安全] [BT] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [安全] [BthEnum] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\BthEnum.sys [安全] [BTHidEnum] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\vbtenum.sys [安全] [BTHidMgr] [已启用] 文件路径: C:\WINDOWS\system32\Drivers\BTHidMgr.sys [安全] [BthPan] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\bthpan.sys [安全] [BTHPORT] [已启用] 文件路径: C:\WINDOWS\system32\Drivers\BTHport.sys [安全] [BTHUSB] [已启用] 文件路径: C:\WINDOWS\system32\Drivers\BTHUSB.sys [安全] [CCDECODE] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [安全] [cd20xrnt] [已禁用] <\SystemRoot\system32\DRIVERS\cd20xrnt.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys [安全] [Cdrom] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\cdrom.sys [安全] [cercsr6] [已禁用] <\SystemRoot\system32\DRIVERS\cercsr6.sys/DELL CERC SATA 1.5> 文件路径: C:\WINDOWS\system32\DRIVERS\cercsr6.sys [安全] [CmdIde] [已禁用] <\SystemRoot\system32\DRIVERS\cmdide.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\cmdide.sys [安全] [Cpq32fs2] [已禁用] <\SystemRoot\system32\DRIVERS\Cpq32fs2.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\Cpq32fs2.sys [安全] [Disk] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\disk.sys [安全] [dmboot] [已禁用] 文件路径: C:\WINDOWS\system32\drivers\dmboot.sys [安全] [dmio] [已启用] 文件路径: C:\WINDOWS\system32\drivers\dmio.sys [安全] [dmload] [已启用] 文件路径: C:\WINDOWS\system32\drivers\dmload.sys [安全] [DMusic] [已启用] 文件路径: C:\WINDOWS\system32\drivers\DMusic.sys [安全] [dontgo] [已禁用] <\SystemRoot\system32\DRIVERS\DontGo.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\DontGo.sys [安全] [drmkaud] [已启用] 文件路径: C:\WINDOWS\system32\drivers\drmkaud.sys [安全] [Fdc] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\fdc.sys [安全] [FETNDIS] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\fetnd5.sys [安全] [FltMgr] [已启用] 文件路径: C:\WINDOWS\system32\drivers\fltmgr.sys [安全] [FsVga] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\fsvga.sys [安全] [Ftdisk] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ftdisk.sys [安全] [fttxr52P] [已禁用] <\SystemRoot\system32\DRIVERS\fttxr52P.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\fttxr52P.sys [安全] [gameenum] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\gameenum.sys [安全] [Gpc] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\msgpc.sys [安全] [HidUsb] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\hidusb.sys [安全] [HookCont] [已启用] <\SystemRoot\system32\drivers\HookCont.sys> 文件路径: C:\WINDOWS\system32\drivers\HookCont.sys [安全] [HookNtos] [已启用] <\SystemRoot\system32\drivers\HookNtos.sys> 文件路径: C:\WINDOWS\system32\drivers\HookNtos.sys [安全] [HookReg] [已启用] <\SystemRoot\system32\drivers\HookReg.sys> 文件路径: C:\WINDOWS\system32\drivers\HookReg.sys [安全] [HookSys] [已启用] <\SystemRoot\system32\drivers\HookSys.sys> 文件路径: C:\WINDOWS\system32\drivers\HookSys.sys [安全] [HookUrl] [已启用] <\??\F:\新建文件夹 (2)\Rising\Rfw\HookUrl.sys> 文件路径: F:\新建文件夹 (2)\Rising\Rfw\HookUrl.sys [安全] [HpCISSm2] [已禁用] <\SystemRoot\system32\DRIVERS\HpCISSm2.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\HpCISSm2.sys [安全] [hpn] [已禁用] <\SystemRoot\system32\DRIVERS\hpn.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\hpn.sys [安全] [hptmv6] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\hptmv6.sys [安全] [HTTP] [已启用] 文件路径: C:\WINDOWS\system32\Drivers\HTTP.sys [安全] [i8042prt] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\i8042prt.sys [安全] [iaStor55] [已禁用] <\SystemRoot\system32\DRIVERS\iaStor55.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\iaStor55.sys [安全] [iaStor70] [已禁用] <\SystemRoot\system32\DRIVERS\iaStor70.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\iaStor70.sys [安全] [Imapi] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\imapi.sys [安全] [IntelIde] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\intelide.sys [安全] [intelppm] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\intelppm.sys [安全] [Ip6Fw] [已启用] 文件路径: C:\WINDOWS\system32\drivers\ip6fw.sys [安全] [IpFilterDriver] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [安全] [IpInIp] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ipinip.sys [安全] [IpNat] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ipnat.sys [安全] [IPSec] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ipsec.sys [安全] [irda] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\irda.sys [安全] [IRENUM] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\irenum.sys [安全] [irsir] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\irsir.sys [安全] [isapnp] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\isapnp.sys [安全] [KAVBootC] [已启用] 文件路径: C:\WINDOWS\system32\Drivers\KAVBootC.sys [安全] [KAVSafe] [已启用] <\??\C:\WINDOWS\system32\Drivers\KAVSafe.sys> 文件路径: C:\WINDOWS\system32\Drivers\KAVSafe.sys [安全] [Kbdclass] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\kbdclass.sys [安全] [kbdhid] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\kbdhid.sys [安全] [kmixer] [已启用] 文件路径: C:\WINDOWS\system32\drivers\kmixer.sys [安全] [Mouclass] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\mouclass.sys [安全] [mouhid] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\mouhid.sys [安全] [MRxDAV] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\mrxdav.sys [安全] [MRxSmb] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [安全] [MSKSSRV] [已启用] 文件路径: C:\WINDOWS\system32\drivers\MSKSSRV.sys [安全] [MSPCLOCK] [已启用] 文件路径: C:\WINDOWS\system32\drivers\MSPCLOCK.sys [安全] [MSPQM] [已启用] 文件路径: C:\WINDOWS\system32\drivers\MSPQM.sys [安全] [mssmbios] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\mssmbios.sys [安全] [MSTEE] [已启用] 文件路径: C:\WINDOWS\system32\drivers\MSTEE.sys [安全] [ms_mpu401] [已启用] 文件路径: C:\WINDOWS\system32\drivers\msmpu401.sys [安全] [mv61xx] [已禁用] <\SystemRoot\system32\DRIVERS\mv61xx.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\mv61xx.sys [安全] [mvSata] [已禁用] <\SystemRoot\system32\DRIVERS\mvsata.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\mvsata.sys [安全] [NABTSFEC] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [安全] [NdisIP] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\NdisIP.sys [安全] [NdisTapi] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ndistapi.sys [安全] [Ndisuio] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ndisuio.sys [安全] [NdisWan] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ndiswan.sys [安全] [NetBIOS] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\netbios.sys [安全] [NetBT] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\netbt.sys [安全] [npkcrypt] [已启用] <\??\C:\WINDOWS\system32\npkcrypt.sys> [npkycryp] [已启用] <\??\C:\WINDOWS\system32\npkycryp.sys> [NtApm] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\NtApm.sys [安全] [nv] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [安全] [nvgts] [已禁用] <\SystemRoot\system32\DRIVERS\nvgts.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\nvgts.sys [安全] [nvrd32] [已禁用] <\SystemRoot\system32\DRIVERS\nvrd32.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\nvrd32.sys [安全] [NwlnkFlt] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys [安全] [NwlnkFwd] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys [安全] [P3] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\p3.sys [安全] [Parport] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\parport.sys [安全] [PCI] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\pci.sys [安全] [PCIIde] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\pciide.sys [安全] [PptpMiniport] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\raspptp.sys [安全] [PSched] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\psched.sys [安全] [Ptilink] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\ptilink.sys [安全] [ql2100] [已禁用] <\SystemRoot\system32\DRIVERS\ql2100.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\ql2100.sys [安全] [ql2200] [已禁用] <\SystemRoot\system32\DRIVERS\ql2200.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\ql2200.sys [安全] [RasAcd] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rasacd.sys [安全] [Rasirda] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rasirda.sys [安全] [Rasl2tp] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rasl2tp.sys [安全] [RasPppoe] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\raspppoe.sys [安全] [Raspti] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\raspti.sys [安全] [Rdbss] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rdbss.sys [安全] [RDPCDD] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\RDPCDD.sys [安全] [rdpdr] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rdpdr.sys [安全] [redbook] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\redbook.sys [安全] [RFCOMM] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rfcomm.sys [安全] [RfwBase] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rfwbase.SYS [安全] [ROOTMODEM] [已启用] 文件路径: C:\WINDOWS\system32\Drivers\RootMdm.sys [安全] [rr172x] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rr172x.sys [安全] [rr174x] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rr174x.sys [安全] [rr2340] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\rr2340.sys [安全] [RsFwDrv] [已启用] <\??\F:\新建文件夹 (2)\Rising\Rfw\RsFwDrv.sys> 文件路径: F:\新建文件夹 (2)\Rising\Rfw\RsFwDrv.sys [安全] [RsNTGDI] [已启用] 文件路径: C:\WINDOWS\system32\Drivers\RsNTGdi.sys [安全] [rspp] [已启用] <\??\C:\WINDOWS\system32\Drivers\Rspp.sys> 文件路径: C:\WINDOWS\system32\Drivers\Rspp.sys [安全] [rtl8139] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [安全] [Secdrv] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\secdrv.sys [安全] [serenum] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\serenum.sys [安全] [Serial] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\serial.sys [安全] [sermouse] [已启用] 文件路径: C:\WINDOWS\system32\drivers\sermouse.sys [安全] [SiRemFil] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\SiRemFil.sys [安全] [sisagp] [已禁用] <\SystemRoot\system32\DRIVERS\sisagp.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\sisagp.sys [安全] [sisraidx] [已禁用] <\SystemRoot\system32\DRIVERS\sisraidx.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\sisraidx.sys [安全] [SLIP] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\SLIP.sys [安全] [SNPSTD3] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\snpstd3.sys [安全] [splitter] [已启用] 文件路径: C:\WINDOWS\system32\drivers\splitter.sys [安全] [sr] [已禁用] <\SystemRoot\system32\DRIVERS\sr.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\sr.sys [安全] [Srv] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\srv.sys [安全] [streamip] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\StreamIP.sys [安全] [swenum] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\swenum.sys [安全] [swmidi] [已启用] 文件路径: C:\WINDOWS\system32\drivers\swmidi.sys [安全] [sysaudio] [已启用] 文件路径: C:\WINDOWS\system32\drivers\sysaudio.sys [安全] [Tcpip] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\tcpip.sys [安全] [TermDD] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\termdd.sys [安全] [TesSafe] [已启用] <\??\C:\WINDOWS\system32\TesSafe.sys> 文件路径: C:\WINDOWS\system32\TesSafe.sys [安全] [TKP] [已启用] <\??\C:\WINDOWS\system32\DRIVERS\1435> [TosIde] [已禁用] <\SystemRoot\system32\DRIVERS\toside.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\toside.sys [安全] [Update] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\update.sys [安全] [usbccgp] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\usbccgp.sys [安全] [usbehci] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\usbehci.sys [安全] [usbhub] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\usbhub.sys [安全] [USBOHCI] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\usbohci.sys [安全] [usbprint] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\usbprint.sys [安全] [USBSTOR] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [安全] [usbuhci] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\usbuhci.sys [安全] [VComm] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\VComm.sys [安全] [VcommMgr] [已启用] 文件路径: C:\WINDOWS\system32\Drivers\VcommMgr.sys [安全] [VgaSave] [已启用] <\SystemRoot\System32\drivers\vga.sys> 文件路径: C:\WINDOWS\System32\drivers\vga.sys [安全] [viaagp] [已禁用] <\SystemRoot\system32\DRIVERS\viaagp.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\viaagp.sys [安全] [ViBus] [已禁用] <\SystemRoot\system32\DRIVERS\ViBus.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\ViBus.sys [安全] [videX32] [已禁用] <\SystemRoot\system32\DRIVERS\videX32.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\videX32.sys [安全] [ViPrt] [已禁用] <\SystemRoot\system32\DRIVERS\ViPrt.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\ViPrt.sys [安全] [Wanarp] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\wanarp.sys [安全] [wdmaud] [已启用] 文件路径: C:\WINDOWS\system32\drivers\wdmaud.sys [安全] [wfps] [已启用] [WSTCODEC] [已启用] 文件路径: C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [安全] [xfilt] [已禁用] <\SystemRoot\system32\DRIVERS\xfilt.sys> 文件路径: C:\WINDOWS\system32\DRIVERS\xfilt.sys [安全] ============================================================== BHO ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects [QQCycloneHelper Class] {00000000-12C9-4305-82F9-43058F20E8D2} 文件路径: E:\超级旋风\QQIEHelper01.dll [安全] [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} 文件路径: E:\迅雷5\ComDlls\TDAtOnce_Now.dll [安全] [Tencent Browser Helper] {0C7C23EF-A848-485B-873C-0ED954731014} 文件路径: C:\Program Files\TENCENT\SSPlus\SAddr1.dll [安全] [QQToolbar] {29CF293A-1E7D-4069-9E11-E39698D0AF95} 文件路径: C:\Program Files\Tencent\QQToolbar\IEBar.dll [安全] [AddrTool] {87E6008E-AC34-4535-A374-2A337311A83F} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} 文件路径: E:\迅雷5\ComDlls\xunleiBHO_Now.dll [安全] [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} 文件路径: C:\WINDOWS\system32\UrlFilter.dll [安全] [Google Toolbar Helper] {AA58ED58-01DD-4d91-8333-CF10577473F7} 文件路径: c:\program files\google\googletoolbar2.dll [安全] [Google Toolbar Notifier BHO] {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} 文件路径: C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [安全] ============================================================== LSP ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004 文件路径: C:\WINDOWS\system32\rsvpsp.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005 文件路径: C:\WINDOWS\system32\rsvpsp.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021 文件路径: C:\WINDOWS\system32\mswsock.dll [安全] ============================================================== 当前进程 ============================================================== 名称: smss.exe [已启用] 该项来源: \SystemRoot\System32\smss.exe 命令行: \SystemRoot\System32\smss.exe 文件路径: C:\WINDOWS\System32\smss.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 名称: csrss.exe [已启用] 该项来源: \??\C:\WINDOWS\system32\csrss.exe 命令行: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 文件路径: C:\WINDOWS\system32\csrss.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CSRSRV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\basesrv.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\winsrv.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\KERNEL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sxs.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\imm32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 名称: winlogon.exe [已启用] 该项来源: \??\C:\WINDOWS\system32\winlogon.exe 命令行: winlogon.exe 文件路径: C:\WINDOWS\system32\winlogon.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\AUTHZ.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NDdeApi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\PROFMAP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\REGAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSGINA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ODBC32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comdlg32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\odbcint.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHSVCS.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sfc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sfc_os.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Apphelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sxs.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSCARD.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WTSAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\cscdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wldap32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\dimsntfy.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WlNotify.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MPR.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSPOOL.DRV (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SAMLIB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\cscui.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wdmaud.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msacm32.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\midimap.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NTMARTA.DLL (Microsoft Corporation) 名称: services.exe [已启用] 文件路径: C:\WINDOWS\system32\services.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NCObjAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP60.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SCESRV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\AUTHZ.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\umpnpmgr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcAdProc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Apphelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\eventlog.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wtsapi32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 名称: lsass.exe [已启用] 文件路径: C:\WINDOWS\system32\lsass.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LSASRV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MPR.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NTDSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SAMLIB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SAMSRV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\cryptdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msprivs.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kerberos.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\netlogon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\w32time.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP60.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\schannel.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wdigest.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\setupapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\scecli.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\pstorsvc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\psbase.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\dssenh.dll (Microsoft Corporation) 名称: svchost.exe [已启用] 命令行: C:\WINDOWS\system32\svchost -k DcomLaunch 文件路径: C:\WINDOWS\system32\svchost.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NTMARTA.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SAMLIB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\rpcss.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2_32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: c:\windows\system32\termsrv.dll (Microsoft Corporation) 模块文件: c:\windows\system32\ICAAPI.dll (Microsoft Corporation) 模块文件: c:\windows\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: c:\windows\system32\AUTHZ.dll (Microsoft Corporation) 模块文件: c:\windows\system32\mstlsapi.dll (Microsoft Corporation) 模块文件: c:\windows\system32\ACTIVEDS.dll (Microsoft Corporation) 模块文件: c:\windows\system32\adsldpc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\ATL.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\REGAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Apphelp.dll (Microsoft Corporation) 名称: svchost.exe [已启用] 命令行: C:\WINDOWS\system32\svchost -k rpcss 文件路径: C:\WINDOWS\system32\svchost.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\rpcss.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2_32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wshbth.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 名称: CCenter.exe [已启用] 命令行: "C:\Program Files\Rising\Rav\CCenter.exe" 文件路径: C:\Program Files\Rising\Rav\CCenter.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 名称: svchost.exe [已启用] 命令行: C:\WINDOWS\System32\svchost.exe -k netsvcs 文件路径: C:\WINDOWS\System32\svchost.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\NTMARTA.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\SAMLIB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\xpsp2res.dll (Microsoft Corporation) 模块文件: c:\windows\system32\shsvcs.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\dhcpcsvc.dll (Microsoft Corporation) 模块文件: c:\windows\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2_32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: c:\windows\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: c:\windows\system32\wzcsvc.dll (Microsoft Corporation) 模块文件: c:\windows\system32\rtutils.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WMI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: c:\windows\system32\EapolQec.dll (Microsoft Corporation) 模块文件: c:\windows\system32\ATL.DLL (Microsoft Corporation) 模块文件: c:\windows\system32\QUtil.dll (Microsoft Corporation) 模块文件: c:\windows\system32\MSVCP60.dll (Microsoft Corporation) 模块文件: c:\windows\system32\dot3api.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WTSAPI32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\ESENT.dll (Microsoft Corporation) 模块文件: c:\windows\system32\irmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshirda.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\rsaenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\rastls.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPTUI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\MPRAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\ACTIVEDS.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\adsldpc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\RASAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\rasman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\TAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\SCHANNEL.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WinSCard.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\PSAPI.DLL (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\System32\raschap.dll (Microsoft Corporation) 模块文件: c:\windows\system32\audiosrv.dll (Microsoft Corporation) 模块文件: c:\windows\system32\wkssvc.dll (Microsoft Corporation) 模块文件: c:\windows\system32\NTDSAPI.dll (Microsoft Corporation) 模块文件: c:\windows\system32\qmgr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MPR.dll (Microsoft Corporation) 模块文件: c:\windows\system32\SHFOLDER.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WINHTTP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\netman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\netshell.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\credui.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\dot3dlg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\OneX.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\eappcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\eappprxy.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WZCSAPI.DLL (Microsoft Corporation) 模块文件: c:\windows\system32\cryptsvc.dll (Microsoft Corporation) 模块文件: c:\windows\system32\certcli.dll (Microsoft Corporation) 模块文件: c:\windows\system32\srvsvc.dll (Microsoft Corporation) 模块文件: c:\windows\system32\hidserv.dll (Microsoft Corporation) 模块文件: c:\windows\system32\HID.DLL (Microsoft Corporation) 模块文件: c:\windows\system32\seclogon.dll (Microsoft Corporation) 模块文件: c:\windows\system32\w32time.dll (Microsoft Corporation) 模块文件: c:\windows\system32\es.dll (Microsoft Corporation) 模块文件: c:\windows\system32\trkwks.dll (Microsoft Corporation) 模块文件: c:\windows\system32\dmserver.dll (Microsoft Corp.) 模块文件: c:\windows\system32\wuauserv.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wuaueng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WINSPOOL.DRV (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\Cabinet.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\mspatcha.dll (Microsoft Corporation) 模块文件: c:\windows\system32\wbem\wmisvc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VSSAPI.DLL (Microsoft Corporation) 模块文件: c:\windows\system32\sens.dll (Microsoft Corporation) 模块文件: c:\windows\system32\browser.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\sfc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\sfc_os.dll (Microsoft Corporation) 模块文件: c:\windows\system32\wscsvc.dll (Microsoft Corporation) 模块文件: c:\windows\system32\msi.dll (Microsoft Corporation) 模块文件: c:\windows\system32\ipnathlp.dll (Microsoft Corporation) 模块文件: c:\windows\system32\AUTHZ.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wbemcomn.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\Wbem\wbemcore.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\Wbem\esscli.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\Wbem\FastProx.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\SXS.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comsvcs.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\colbact.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MTXCLU.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WSOCK32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\CLUSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\RESUTILS.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wmiutils.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\repdrvfs.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wmiprvsd.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NCObjAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wbemess.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\ncprov.dll (Microsoft Corporation) 模块文件: c:\windows\system32\tapisrv.dll (Microsoft Corporation) 模块文件: c:\windows\system32\rasmans.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WINIPSEC.DLL (Microsoft Corporation) 模块文件: c:\windows\system32\netcfgx.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\rasadhlp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\rastapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\unimdm.tsp (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\uniplat.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\kmddsp.tsp (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\ndptsp.tsp (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\ipconf.tsp (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\h323.tsp (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\hidphone.tsp (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\rasppp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\ntlsapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kerberos.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\cryptdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\RASQEC.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msxml3.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Apphelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\dssenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wshbth.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\upnp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SSDPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\RASDLG.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wbemcons.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wbemsvc.dll (Microsoft Corporation) 名称: svchost.exe [已启用] 命令行: C:\WINDOWS\system32\svchost.exe -k NetworkService 文件路径: C:\WINDOWS\system32\svchost.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\dnsrslvr.dll (Microsoft Corporation) 模块文件: c:\windows\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2_32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: c:\windows\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MPRAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ACTIVEDS.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\adsldpc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ATL.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SAMLIB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 名称: svchost.exe [已启用] 命令行: C:\WINDOWS\system32\svchost.exe -k LocalService 文件路径: C:\WINDOWS\system32\svchost.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NTMARTA.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SAMLIB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: c:\windows\system32\lmhsvc.dll (Microsoft Corporation) 模块文件: c:\windows\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2_32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: c:\windows\system32\webclnt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation) 模块文件: c:\windows\system32\ssdpsrv.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 名称: ravmond.exe [已启用] 命令行: "C:\PROGRAM FILES\RISING\RAV\ravmond.exe" -step 文件路径: C:\PROGRAM FILES\RISING\RAV\ravmond.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\BWList.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\MFC71.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCR71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WSOCK32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\CfgDll.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\RsLog.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\ProcCom.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Wtsapi32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\MonRule.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\Hooksys.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\HookReg.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\HookNtos.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\rswalmon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\recomp.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\refs.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\ffr.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\sfc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sfc_os.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\Rav\RsStore.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\HookCont.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\Rav\fakescan.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\Rav\Scanner.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\viruslib.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\relibldr.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\HookWeb.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\extfile.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\pearc.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\nvfile.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\scanexec.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\unexe.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\scanex.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\scanpack.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\revm.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\urutils.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\ur000.dat (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\posttrt.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\scansct.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\scriptci.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\ur001.dat (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\extmail.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\ur023.dat (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\uroutine.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\extole.dll (Beijing Rising Information Technology Co.. Ltd.) 名称: rfwsrv.exe [已启用] 命令行: "F:\新建文件夹 (2)\Rising\Rfw\rfwsrv.exe" 文件路径: F:\新建文件夹 (2)\Rising\Rfw\rfwsrv.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC71.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCR71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ProcCom.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RsCommX2.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RSAPPMGR.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\CfgDll.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RfwRule.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\rfwlog.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\Rfwdrv.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\psapi.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_ctrl.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\unvdet.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\sfc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sfc_os.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\netapi32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Iphlpapi.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\mPorts.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\perfproc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 名称: rfwProxy.exe [已启用] 命令行: "F:\新建文件夹 (2)\Rising\Rfw\rfwProxy.exe" 文件路径: F:\新建文件夹 (2)\Rising\Rfw\rfwProxy.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC71.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCR71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\psapi.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ProcCom.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RsCommX2.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RfwRule.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\urlrule.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\version.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\MonMid.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\perfproc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 名称: rfwstub.exe [已启用] 命令行: "rfwstub.exe" -rfwsrv 文件路径: F:\新建文件夹 (2)\Rising\Rfw\rfwstub.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCR71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RSCOMMON.DLL (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 名称: spoolsv.exe [已启用] 文件路径: C:\WINDOWS\system32\spoolsv.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SPOOLSS.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\localspl.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sfc_os.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\winspool.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\netapi32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\cnbjmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CNMLM76.DLL (CANON INC.) 模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\pjlmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\tcpmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\usbmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CNMPD76.DLL (CANON INC.) 模块文件: C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wshbth.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\win32spl.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETRAP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NTDSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\inetpp.dll (Microsoft Corporation) 名称: RavStub.exe [已启用] 命令行: "C:\PROGRAM FILES\RISING\RAV\RavStub.exe" /RAVMOND=1023 文件路径: C:\PROGRAM FILES\RISING\RAV\RavStub.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\ProcCom.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 名称: svchost.exe [已启用] 命令行: C:\WINDOWS\system32\svchost.exe -k bthsvcs 文件路径: C:\WINDOWS\system32\svchost.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\bthserv.dll (Microsoft Corporation) 模块文件: c:\windows\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 名称: svchost.exe [已启用] 命令行: C:\WINDOWS\system32\svchost.exe -k imgsvc 文件路径: C:\WINDOWS\system32\svchost.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\wiaservc.dll (Microsoft Corporation) 模块文件: c:\windows\system32\CFGMGR32.dll (Microsoft Corporation) 模块文件: c:\windows\system32\setupapi.DLL (Microsoft Corporation) 模块文件: c:\windows\system32\mscms.dll (Microsoft Corporation) 模块文件: c:\windows\system32\WINSPOOL.DRV (Microsoft Corporation) 模块文件: c:\windows\system32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wiavusd.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHFOLDER.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\actxprxy.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\sti.dll (Microsoft Corporation) 名称: wdfmgr.exe [已启用] 文件路径: C:\WINDOWS\system32\wdfmgr.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 名称: Explorer.EXE [已启用] 文件路径: C:\WINDOWS\Explorer.EXE [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\BROWSEUI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHDOCVW.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPTUI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\appHelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\cscui.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\CSCDLL.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\themeui.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSIMG32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msutb.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LINKINFO.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntshrui.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ATL.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SAMLIB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETSHELL.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\credui.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\dot3api.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\dot3dlg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OneX.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WTSAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\eappcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP60.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\eappprxy.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\stobject.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\BatMeter.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\POWRPROF.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wdmaud.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msacm32.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\midimap.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RASDLG.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MPRAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ACTIVEDS.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\adsldpc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RASAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MPR.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\drprov.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\ntlanman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\NETUI0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\NETUI1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\NETRAP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\davclnt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\browselc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSGINA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ODBC32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comdlg32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\odbcint.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DUSER.dll (Microsoft Corporation) 模块文件: C:\Program Files\Microsoft Office\OFFICE11\msohev.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MLANG.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wiashext.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SXS.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sti.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CFGMGR32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\QQPINYIN.IME (Tencent) 模块文件: C:\WINDOWS\system32\NTMARTA.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mydocs.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\shdoclc.dll (Microsoft Corporation) 名称: RfwMain.exe [已启用] 命令行: -StartUp 文件路径: F:\新建文件夹 (2)\Rising\Rfw\RfwMain.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC71.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCR71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP71.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RsGuiLib.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ProcCom.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RsCommX2.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RSAPPMGR.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\CfgDll.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RSCOMMON.DLL (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RfwCtrl.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RsXML.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\PngDll.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\RfwRule.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\wintrust.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\perfproc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\netapi32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 名称: RavMon.exe [已启用] 命令行: C:\PROGRAM FILES\RISING\RAV\RavMon.exe -SYSTEM 文件路径: C:\PROGRAM FILES\RISING\RAV\RavMon.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC71.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCR71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\ProcCom.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\RsCommX2.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\recomp.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\refs.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\viruslib.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\relibldr.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\CfgDll.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\MonRule.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRAM FILES\RISING\RAV\PngDll.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\wtsapi32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\Rsguilib.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\perfproc.dll (Microsoft Corporation) 模块文件: C:\PROGRAM FILES\RISING\RAV\RsXML.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 名称: macesv.exe [已启用] 命令行: "C:\Program Files\Common Files\dozoe\macesv.exe" 文件路径: C:\Program Files\Common Files\dozoe\macesv.exe [安全] 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\version.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\winmm.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\olepro32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ws2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\Program Files\Common Files\dozoe\hoscas\wogese.dll 模块文件: C:\Program Files\Common Files\dozoe\hoscas\woxos.dll 模块文件: C:\WINDOWS\system32\apphelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RASAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\sensapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wshbth.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 名称: alg.exe [已启用] 文件路径: C:\WINDOWS\System32\alg.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\ATL.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WSOCK32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\MSWSOCK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 名称: FixCamera.exe [已启用] 命令行: "C:\WINDOWS\FixCamera.exe" 文件路径: C:\WINDOWS\FixCamera.exe [安全] 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC42.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC42LOC.DLL (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 名称: tsnpstd3.exe [已启用] 命令行: "C:\WINDOWS\tsnpstd3.exe" 文件路径: C:\WINDOWS\tsnpstd3.exe [安全] 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC42.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEPRO32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC42LOC.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 名称: vsnpstd3.exe [已启用] 命令行: "C:\WINDOWS\vsnpstd3.exe" 文件路径: C:\WINDOWS\vsnpstd3.exe [安全] 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC42.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MFC42LOC.DLL (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 名称: RavTask.exe [已启用] 命令行: "C:\Program Files\Rising\Rav\RavTask.exe" -system 文件路径: C:\Program Files\Rising\Rav\RavTask.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\Rav\ProcCom.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\Rav\RsCommX2.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\Rav\RSCOMMON.DLL (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\Rav\RSAPPMGR.DLL (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\Rav\CfgDll.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 名称: rstray.exe [已启用] 命令行: "C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup 文件路径: C:\Program Files\Rising\AntiSpyware\rstray.exe [安全] (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\AntiSpyware\rsmginfo.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\AntiSpyware\RsXML.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\AntiSpyware\MSVCP71.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\AntiSpyware\MSVCR71.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\Program Files\Rising\AntiSpyware\ComServ.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\AntiSpyware\Syslay.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\AntiSpyware\rscommon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\AntiSpyware\comx3.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\Wtsapi32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\AntiSpyware\pngdll.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\AntiSpyware\runiep.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\AntiSpyware\NComm.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\Rav\ProcCom.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\Program Files\Rising\Rav\RsCommX2.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\ws2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RASAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 名称: Rundll32.exe [已启用] 命令行: "C:\WINDOWS\system32\Rundll32.exe" C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll,Rundll32 R 文件路径: C:\WINDOWS\system32\Rundll32.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\PROGRA~1\TENCENT\SSPlus\SPlus.dll (TENCENT) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Dbghelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 名称: rundll32.exe [已启用] 命令行: "C:\WINDOWS\system32\rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent 文件路径: C:\WINDOWS\system32\rundll32.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\bthprops.cpl (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DEVMGR.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MPR.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WMI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 名称: ctfmon.exe [已启用] 命令行: "C:\WINDOWS\system32\ctfmon.exe" 文件路径: C:\WINDOWS\system32\ctfmon.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSUTB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ShimEng.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\AppPatch\AcGenral.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 名称: iexplore.exe [已启用] 命令行: "C:\Program Files\Internet Explorer\iexplore.exe" 文件路径: C:\Program Files\Internet Explorer\iexplore.exe [安全] (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\IEFRAME.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\UxTheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IEUI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSIMG32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xmllite.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\apphelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msimtf.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\cscui.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\CSCDLL.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\Program Files\Microsoft Office\OFFICE11\msohev.dll (Microsoft Corporation) 模块文件: C:\Program Files\Internet Explorer\ieproxy.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SXS.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MLANG.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ws2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\Program Files\Tencent\QQToolbar\IEBar.dll (TENCENT) 模块文件: C:\WINDOWS\system32\MSVCP60.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEACC.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\crypt32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wintrust.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\userenv.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\netapi32.dll (Microsoft Corporation) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Toolbar.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\TBAddr.dll (TENCENT) 模块文件: C:\WINDOWS\system32\Wtsapi32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSTA.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msls31.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ieapfltr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NTMARTA.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SAMLIB.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\actxprxy.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\Rav\RavScrCh.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\vbscript.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\jscript.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iepeers.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSPOOL.DRV (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Dxtrans.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ATL.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ddrawex.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DDRAW.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DCIMAN32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Dxtmsft.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mshtmled.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RASAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\QQMail.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Shuqian.dll (TENCENT) 模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wshbth.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Wenwen.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Weather.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Paipai.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Qzone.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\MusicBox.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\HighLight.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\QQDoctor.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\PopupBlocker.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Dict.dll (TENCENT) 模块文件: C:\Documents and Settings\Administrator\Application Data\TENCENT\QQToolbar\buttons\Hot.dll (TENCENT) 模块文件: C:\WINDOWS\system32\msfeeds.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wdmaud.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msacm32.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\midimap.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Dbghelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Macromed\Flash\Flash10.ocx (Adobe Systems. Inc.) 模块文件: C:\WINDOWS\system32\COMDLG32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mscms.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\schannel.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msxml3.dll (Microsoft Corporation) 模块文件: E:\迅雷5\ComDlls\xunleiBHO_Now.dll (Thunder Networking Technologies.LTD) 模块文件: C:\WINDOWS\system32\dssenh.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ImgUtil.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\pngfilt.dll (Microsoft Corporation) 名称: kaccore.exe [已启用] 命令行: "C:\Program Files\Kingsoft\KAC\Service\kaccore.exe" 文件路径: C:\Program Files\Kingsoft\KAC\Service\kaccore.exe [安全] (Kingsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comctl32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\Program Files\Kingsoft\KAC\Service\corehelper.dll (Kingsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RASAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) 名称: kabackreport.exe [已启用] 命令行: "D:\金山清理專家\Kingsoft Antispy\kabackreport.exe" -8 -s 文件路径: D:\金山清理專家\Kingsoft Antispy\kabackreport.exe [安全] (Kingsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: D:\金山清理專家\Kingsoft Antispy\KAVDevC.dll (Kingsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 模块文件: D:\金山清理專家\Kingsoft Antispy\KAEAutorunEx.dll (Kingsoft Corporation) 名称: KASMain.EXE [已启用] 命令行: "D:\金山清理專家\Kingsoft Antispy\KASMain.EXE" 文件路径: D:\金山清理專家\Kingsoft Antispy\KASMain.EXE [安全] (Kingsoft Corporation) 模块文件: C:\WINDOWS\system32\ntdll.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\kernel32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msvcrt.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\GDI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USER32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHLWAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ADVAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RPCRT4.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Secur32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSIMG32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\comdlg32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ole32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\OLEAUT32.dll (Microsoft Corporation) 模块文件: D:\金山清理專家\Kingsoft Antispy\kis.dll (Kingsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\VERSION.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WININET.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Normaliz.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iertutil.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\PSAPI.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2_32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WS2HELP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMM32.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\LPK.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USP10.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL (Microsoft Corporation) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\ijt_base.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: F:\新建文件夹 (2)\Rising\Rfw\olemon.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\uxtheme.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSCTF.dll (Microsoft Corporation) 模块文件: D:\金山清理專家\Kingsoft Antispy\KAVDevC.dll (Kingsoft Corporation) 模块文件: C:\WINDOWS\system32\msctfime.ime (Microsoft Corporation) 模块文件: D:\金山清理專家\Kingsoft Antispy\KAO\KAOExtend.dll 模块文件: D:\金山清理專家\Kingsoft Antispy\KAEAutorunEx.DLL (Kingsoft Corporation) 模块文件: D:\金山清理專家\Kingsoft Antispy\RICHED20.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\RASAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasman.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NETAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\TAPI32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rtutils.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINMM.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\USERENV.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msv1_0.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\iphlpapi.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\CLBCATQ.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\COMRes.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\rasadhlp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\DNSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WLDAP32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wshbth.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SETUPAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\hnetcfg.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\System32\wshtcpip.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\appHelp.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MLANG.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msxml3.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msls31.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msimtf.dll (Microsoft Corporation) 模块文件: C:\Program Files\Rising\Rav\RavScrCh.dll (Beijing Rising Information Technology Co.. Ltd.) 模块文件: C:\WINDOWS\system32\vbscript.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\jscript.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wbemprox.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wbemcomn.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\wbemsvc.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wbem\fastprox.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSVCP60.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\NTDSAPI.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\SXS.DLL (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\Macromed\Flash\Flash10.ocx (Adobe Systems. Inc.) 模块文件: C:\WINDOWS\system32\CRYPT32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSASN1.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\mscms.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINSPOOL.DRV (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\WINTRUST.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\IMAGEHLP.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\wdmaud.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\msacm32.drv (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\MSACM32.dll (Microsoft Corporation) 模块文件: C:\WINDOWS\system32\midimap.dll (Microsoft Corporation) 模块文件: D:\金山清理專家\Kingsoft Antispy\KasCommon.dll (Kingsoft Corporation) 模块文件: D:\金山清理專家\Kingsoft Antispy\KAVRep.DLL (Kingsoft Corporation) 模块文件: C:\WINDOWS\system32\SensApi.dll (Microsoft Corporation) ============================================================== 协议 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\SHELL32.dll [安全] 文件路径: C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler 文件路径: C:\WINDOWS\system32\mshtml.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\msvidctl.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\itss.dll [安全] 文件路径: C:\WINDOWS\system32\mshtml.dll [安全] 文件路径: C:\WINDOWS\system32\KuGoo3DownXControl.ocx [安全] 文件路径: C:\WINDOWS\system32\KuGoo3DownXControl.ocx [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\mshtml.dll [安全] 文件路径: C:\WINDOWS\system32\inetcomm.dll [安全] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] 文件路径: C:\WINDOWS\system32\itss.dll [安全] 文件路径: C:\WINDOWS\system32\mshtml.dll [安全] 文件路径: C:\WINDOWS\system32\mshtml.dll [安全] 文件路径: C:\WINDOWS\system32\msvidctl.dll [安全] 文件路径: C:\WINDOWS\system32\mshtml.dll [安全] 文件路径: C:\WINDOWS\system32\wiascr.dll [安全] ============================================================== 屏幕保护程序 ============================================================== 该项来源: HKEY_CURRENT_USER\Control Panel\Desktop [SCRNSAVE.EXE] 文件路径: C:\WINDOWS\system32\ssmypics.scr [安全] ============================================================== 预加载程序 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer [Browseui 预加载程序] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [组件类别缓存程序] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] ============================================================== URL Search Hook ============================================================== 该项来源: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks [Microsoft Url Search Hook] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Tencent SearchHook] 文件路径: C:\Program Files\TENCENT\SSPlus\SAddr1.dll [安全] ============================================================== IE工具栏 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer [&Google] 文件路径: c:\program files\google\googletoolbar2.dll [安全] [QQToolbar] 文件路径: C:\Program Files\Tencent\QQToolbar\IEBar.dll [安全] ============================================================== 浏览器栏 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars [每日提示(&T)] <{4D5C8C25-D075-11d0-B416-00C04FB90376}> 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars [Shell Search Band] <{21569614-B795-46B1-85F4-E737A8DC09AD}> 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [File Search Explorer Band] <{C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1}> 文件路径: C:\WINDOWS\system32\SHELL32.dll [安全] ============================================================== IE扩展按钮 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions [知识库] <{06926B30-424E-4f1c-8EE3-543CD96573DC}> [启动迅雷5] <{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}> 文件路径: E:\迅雷5\Thunder.exe [安全] [Exec] <{e2e2dd38-d088-4134-82b7-f2ba38496583}> <%windir%\Network Diagnostic\xpnetdiag.exe> 文件路径: C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [安全] [Messenger] <{FB5F1910-F110-11d2-BB9E-00C04F795683}> 文件路径: C:\Program Files\Messenger\msmsgs.exe [安全] ============================================================== IE扩展菜单 ============================================================== 该项来源: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt <&使用超级旋风下载> 文件路径: E:\超级旋风\geturl.htm [安全] <&使用超级旋风下载全部链接> 文件路径: E:\超级旋风\getAllurl.htm [安全] 文件路径: C:\Program Files\Common Files\SourceTec\SWF Catcher\InternetExplorer.htm [安全] <使用迅雷下载> 文件路径: E:\迅雷5\Program\geturl.htm [安全] <使用迅雷下载全部链接> 文件路径: E:\迅雷5\Program\getallurl.htm [安全] <导出到 Microsoft Office Excel(&X)> 文件路径: C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE [安全] <添加到QQ表情> 文件路径: F:\QQ2088\AddEmotion.htm [安全] ============================================================== ActiveX控件 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components [<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] <<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}> 文件路径: C:\WINDOWS\system32\ieudinit.exe [安全] [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] <>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}> 文件路径: C:\WINDOWS\inf\unregmp2.exe [安全] [>{26923b43-4d38-484f-9b9e-de460746276c}] <>{26923b43-4d38-484f-9b9e-de460746276c}> <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> 文件路径: C:\WINDOWS\system32\shmgrate.exe [安全] [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}> <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> 文件路径: C:\WINDOWS\system32\shmgrate.exe [安全] [>{D9FCD29C-7E14-4AF4-A935-B1321815EDEE}] <>{D9FCD29C-7E14-4AF4-A935-B1321815EDEE}> 文件路径: C:\WINDOWS\system32\IEDKCS32.DLL [安全] [{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <{2C7339CF-2B09-4501-B3F3-F3508C9228ED}> <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> 文件路径: C:\WINDOWS\system32\themeui.dll [安全] [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <{44BBA840-CC51-11CF-AAFA-00AA00B6015C}> <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> 文件路径: C:\Program Files\Outlook Express\setup50.exe [安全] [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] <{44BBA842-CC51-11CF-AAFA-00AA00B6015B}> 文件路径: C:\WINDOWS\system32\advpack.dll [安全] [{5945c046-1e7d-11d1-bc44-00c04fd912be}] <{5945c046-1e7d-11d1-bc44-00c04fd912be}> 文件路径: C:\WINDOWS\system32\advpack.dll [安全] [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] <{6BF52A52-394A-11d3-B153-00C04F79FAA6}> 文件路径: C:\WINDOWS\system32\advpack.dll [安全] [{7790769C-0471-11d2-AF11-00C04FA35D02}] <{7790769C-0471-11d2-AF11-00C04FA35D02}> <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> 文件路径: C:\Program Files\Outlook Express\setup50.exe [安全] [{89820200-ECBD-11cf-8B85-00AA005B4340}] <{89820200-ECBD-11cf-8B85-00AA005B4340}> 文件路径: C:\WINDOWS\system32\shell32.dll [安全] [{89820200-ECBD-11cf-8B85-00AA005B4383}] <{89820200-ECBD-11cf-8B85-00AA005B4383}> 文件路径: C:\WINDOWS\system32\ie4uinit.exe [安全] -------------------------------------------------------------- 该项来源: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats [QQCycloneHelper Class] <{00000000-12C9-4305-82F9-43058F20E8D2}> 文件路径: E:\超级旋风\QQIEHelper01.dll [安全] [Google Script Object] <{00EF2092-6AC5-47C0-BD25-CF2D5D657FEB}> 文件路径: c:\program files\google\googletoolbar2.dll [安全] [ThunderAtOnce Class] <{01443AEC-0FD1-40FD-9C87-E93D1494C233}> 文件路径: E:\迅雷5\ComDlls\TDAtOnce_Now.dll [安全] [Fade] <{16B280C5-EE70-11D1-9066-00C04FD9189D}> 文件路径: C:\WINDOWS\system32\Dxtmsft.dll [安全] [Windows Media Player] <{22D6F312-B0F6-11D0-94AB-0080C74C7E95}> 文件路径: C:\WINDOWS\system32\wmpdxm.dll [安全] [&Google] <{2318C2B1-4965-11D4-9B18-009027A5CD4F}> 文件路径: c:\program files\google\googletoolbar2.dll [安全] [PhotoDraw Class] <{2375BEE5-F175-4F1C-81EC-8E4E2E72E2DD}> 文件路径: D:\Program Files\Tencent\QQ\Qzone\QQPhotoDraw.dll [安全] [HTML Document] <{25336920-03F9-11CF-8FD0-00AA00686F13}> 文件路径: C:\WINDOWS\system32\mshtml.dll [安全] [XML DOM Document] <{2933BF90-7B36-11D2-B20E-00C04F983E60}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [QQToolbar] <{29CF293A-1E7D-4069-9E11-E39698D0AF95}> 文件路径: C:\Program Files\Tencent\QQToolbar\IEBar.dll [安全] [DHTML Edit Control Safe for Scripting for IE5] <{2D360201-FFF5-11D1-8D03-00A0C959BC0A}> 文件路径: C:\Program Files\Common Files\Microsoft Shared\Triedit\dhtmled.ocx [安全] [XML Document] <{48123BC4-99D9-11D1-A6B3-00C04FD91555}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [QQRightClick Class] <{4836C333-208E-4BCE-B30B-00B9545B0F6E}> 文件路径: E:\超级旋风\QQIEHelper01.dll [安全] [Thunder Agent Class] <{485463B7-8FB2-4B3B-B29B-8B919B0EACCE}> 文件路径: E:\迅雷5\ComDlls\ThunderAgent_Now.dll [安全] [Microsoft Terminal Services Client Control (redist)] <{4eb89ff4-7f78-4a0f-8b8d-2bf02e94e4b2}> 文件路径: C:\WINDOWS\system32\mstscax.dll [安全] [Microsoft Terminal Services Client Control (redist)] <{4EDCB26C-D24C-4e72-AF07-B576699AC0DE}> 文件路径: C:\WINDOWS\system32\mstscax.dll [安全] [HHCtrl Object] <{52A2AAAE-085D-4187-97EA-8C30DB990436}> 文件路径: C:\WINDOWS\system32\hhctrl.ocx [安全] [XMP Class] <{6483F145-A768-4C41-AACC-52D4D7845851}> 文件路径: C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work [分析中] [QQMusicCreator Class] <{6927992D-6A89-4549-8A32-95901BF5D920}> 文件路径: D:\Program Files\Tencent\QQMusic\QQMusic.exe [安全] [XDRM] <{693571CB-54A3-4E90-9D52-EEAE1334E2D3}> 文件路径: C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work [安全] [Windows Media Player] <{6BF52A52-394A-11D3-B153-00C04F79FAA6}> 文件路径: C:\WINDOWS\system32\wmp.dll [安全] [Microsoft Terminal Services Client Control (redist)] <{7390f3d8-0439-4c05-91e3-cf5cb290c3d0}> 文件路径: C:\WINDOWS\system32\mstscax.dll [安全] [Microsoft Terminal Services Client Control (redist)] <{7584c670-2274-4efb-b00b-d6aaba6d3850}> 文件路径: C:\WINDOWS\system32\mstscax.dll [安全] [MediaComm Class] <{7670648D-461B-42AF-BDFE-46D26AF5EFF2}> 文件路径: E:\迅雷5\Components\InMedia\MediaAddin17.dll [安全] [Microsoft Web Browser] <{8856F961-340A-11D0-A96B-00C04FD705A2}> 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Thunder Browser Helper] <{889D2FEB-5411-4565-8998-1DD2C5261283}> 文件路径: E:\迅雷5\ComDlls\xunleiBHO_Now.dll [安全] [XML DOM 文档 5.0] <{88D969E5-F192-11D4-A65F-0040963251E5}> 文件路径: C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL [安全] [XML HTTP 5.0] <{88D969EA-F192-11D4-A65F-0040963251E5}> 文件路径: C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSXML5.DLL [安全] [XML DOM Document 6.0] <{88D96A05-F192-11D4-A65F-0040963251E5}> 文件路径: C:\WINDOWS\system32\msxml6.dll [安全] [Uploader Class] <{8B054DFE-79A3-4A6A-9F46-CD2A2F601129}> 文件路径: C:\WINDOWS\system32\TXGYMailActiveX.dll [安全] [Microsoft Terminal Services Client Control (redist)] <{9059f30f-4eb1-4bd2-9fdc-36f43a218f4a}> 文件路径: C:\WINDOWS\system32\mstscax.dll [安全] [VqqSpeedDlProxy Class] <{9ADACAA6-533E-4383-AFA7-F0A66650B6D8}> 文件路径: C:\WINDOWS\vqqsdl10.dll [安全] [RavOnline Class] <{9FAFB576-6933-4CCC-AB3D-B988EC43D04E}> 文件路径: C:\WINDOWS\Downloaded Program Files\RavOLCtl.dll [安全] [UploadFilePartition Class] <{A877BA28-1F7E-4876-B299-50B3199A1A5D}> 文件路径: C:\WINDOWS\system32\TXGYMailActiveX.dll [安全] [Google Toolbar Helper] <{AA58ED58-01DD-4D91-8333-CF10577473F7}> 文件路径: c:\program files\google\googletoolbar2.dll [安全] [WebVGPlayer Class] <{AA899B43-24BD-4B6B-BBD0-45557D8D11E0}> 文件路径: C:\PROGRA~1\VIEWGOOD\WEBPLA~1\VGPlayer.dll [安全] [DapCtrl Class] <{ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}> 文件路径: C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5804.63.(397).dll [安全] [Google Toolbar Notifier BHO] <{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}> 文件路径: C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [安全] [SearchAssistantOC] <{B45FF030-4447-11D2-85DE-00C04FA35C89}> 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [RDS.DataSpace] <{BD96C556-65A3-11D0-983A-00C04FC29E36}> 文件路径: C:\Program Files\Common Files\System\msadc\msadco.dll [安全] [ScreenCapture Class] <{BFB79EE1-04AE-4D4A-B85E-27EE5F30C095}> 文件路径: C:\WINDOWS\system32\TXGYMailActiveX.dll [安全] [Tencent Safety Online Base Module] <{C09B522F-8AED-4E21-A65C-DC1AB652BAEE}> 文件路径: C:\WINDOWS\DOWNLO~1\TSOBase.ocx [安全] [WebActivater Control] <{C661F36D-DF85-4EF4-83C7-E107B83D04B1}> 文件路径: C:\WINDOWS\system32\3DShowVM.ocx [安全] [AUDIO__MP3 Moniker Class] <{CD3AFA76-B84F-48F0-9393-7EDC34128127}> 文件路径: C:\WINDOWS\system32\wmp.dll [安全] [AUDIO__X_MS_WMA Moniker Class] <{CD3AFA84-B84F-48F0-9393-7EDC34128127}> 文件路径: C:\WINDOWS\system32\wmp.dll [安全] [VIDEO__X_MS_ASF Moniker Class] <{CD3AFA8F-B84F-48F0-9393-7EDC34128127}> 文件路径: C:\WINDOWS\system32\wmp.dll [安全] [VIDEO__X_MS_WMV Moniker Class] <{CD3AFA94-B84F-48F0-9393-7EDC34128127}> 文件路径: C:\WINDOWS\system32\wmp.dll [安全] [Shockwave Flash Object] <{D27CDB6E-AE6D-11CF-96B8-444553540000}> 文件路径: C:\WINDOWS\system32\Macromed\Flash\Flash10.ocx [安全] [TencentVmpCtl Class] <{D9819BD5-422B-4281-8523-726466ED692B}> 文件路径: C:\Program Files\Tencent\Viewpoint Media Player\AxMetaStream.dll [安全] [AgControl Class] <{DFEAF541-F3E1-4C24-ACAC-99C30715084A}> 文件路径: C:\Program Files\Microsoft Silverlight\npctrl.1.0.30716.0.dll [安全] [PlayerCtrl Class] <{E05BC2A3-9A46-4A32-80C9-023A473F5B23}> 文件路径: D:\Program Files\Tencent\QQMusic\QzoneMusic.dll [安全] [SWFDecompiler.InternetExplorer] <{E19ADC6E-3909-43E4-9A89-B7B676377EE3}> 文件路径: C:\PROGRA~1\COMMON~1\SOURCE~1\SWFCAT~1\SWFCAT~1.DLL [安全] [PasswordEditCtrl Class] <{E787FD25-8D7C-4693-AE67-9406BC6E22DF}> 文件路径: C:\WINDOWS\system32\qqedit\qqedit.dll [安全] [TimwpDll.TimwpCheck] <{ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4}> 文件路径: F:\QQ2088\Timwp.dll [安全] [XML HTTP Request] <{ED8C108E-4349-11D2-91A4-00C04F7969E8}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [XPPlayer Class] <{F3E70CEA-956E-49CC-B444-73AFE593AD7F}> 文件路径: C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.5853.212.(643).dll [安全] [XML DOM Document 3.0] <{F5078F32-C551-11D3-89B9-0000F81FE221}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [Free Threaded XML DOM Document 3.0] <{F5078F33-C551-11D3-89B9-0000F81FE221}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [XML HTTP 3.0] <{F5078F35-C551-11D3-89B9-0000F81FE221}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [XSL Template 3.0] <{F5078F36-C551-11D3-89B9-0000F81FE221}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [XML DOM Document] <{F6D90F11-9C73-11D3-B32E-00C04F990BB4}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [XML HTTP] <{F6D90F16-9C73-11D3-B32E-00C04F990BB4}> 文件路径: C:\WINDOWS\system32\msxml3.dll [安全] [QQToolbar] <{FB46BBEE-B3D5-46BF-94F4-A6C1A17F0A28}> 文件路径: C:\Program Files\Tencent\QQToolbar\IEBar.dll [安全] ============================================================== 兼容模式相关项 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\WOW\boot [comm.drv] 文件路径: C:\WINDOWS\system32\comm.drv [安全] [display.drv] 文件路径: C:\WINDOWS\system32\vga.drv [安全] [drivers] 文件路径: C:\WINDOWS\system32\mmsystem.dll [安全] [fixedfon.fon] 文件路径: C:\WINDOWS\fonts\vgafix.fon [安全] [fonts.fon] 文件路径: C:\WINDOWS\fonts\vgasys.fon [安全] [keyboard.drv] 文件路径: C:\WINDOWS\system32\keyboard.drv [安全] [mouse.drv] 文件路径: C:\WINDOWS\system32\mouse.drv [安全] [network.drv] 文件路径: C:\WINDOWS\system32\wfwnet.drv [安全] [oemfonts.fon] 文件路径: C:\WINDOWS\fonts\vgaoem.fon [安全] [shell] 文件路径: C:\WINDOWS\system32\progman.exe [安全] [sound.drv] 文件路径: C:\WINDOWS\system32\sound.drv [安全] [system.drv] 文件路径: C:\WINDOWS\system32\system.drv [安全] ============================================================== 其他安全区域 ============================================================== 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved [多媒体文件属性表] 文件路径: C:\WINDOWS\system32\mmsys.cpl [安全] [ICM 扫描仪管理] 文件路径: C:\WINDOWS\system32\icmui.dll [安全] [Security Shell Extension] 文件路径: C:\WINDOWS\system32\rshx32.dll [安全] [OLE 文档属性页] 文件路径: C:\WINDOWS\system32\docprop.dll [安全] [Shell extensions for sharing] 文件路径: C:\WINDOWS\system32\ntshrui.dll [安全] [PlusPack CPL 扩展] 文件路径: C:\WINDOWS\system32\themeui.dll [安全] [显示适配卡 CPL 扩展] 文件路径: C:\WINDOWS\system32\deskadp.dll [安全] [显示监视器 CPL 扩展] 文件路径: C:\WINDOWS\system32\deskmon.dll [安全] [显示摇曳 CPL 扩展] [Security Shell Extension] 文件路径: C:\WINDOWS\system32\dssec.dll [安全] [兼容网页] 文件路径: C:\WINDOWS\system32\SlayerXP.dll [安全] [Shell Scrap DataHandler] 文件路径: C:\WINDOWS\system32\shscrap.dll [安全] [磁盘复制扩展] 文件路径: C:\WINDOWS\system32\diskcopy.dll [安全] [Microsoft Windows Network 对象的 Shell 扩展] 文件路径: C:\WINDOWS\system32\ntlanui2.dll [安全] [ICM 监视器管理] 文件路径: C:\WINDOWS\System32\icmui.dll [安全] [ICM 打印机管理] 文件路径: C:\WINDOWS\system32\icmui.dll [安全] [Web 打印机 Shell 扩展] 文件路径: C:\WINDOWS\system32\printui.dll [安全] [Microsoft Disk Quota UI] 文件路径: C:\WINDOWS\system32\dskquoui.dll [安全] [HyperTerminal Icon Ext] 文件路径: C:\WINDOWS\system32\hticons.dll [安全] [字体] 文件路径: C:\WINDOWS\system32\fontext.dll [安全] [ICC 配置文件] 文件路径: C:\WINDOWS\system32\icmui.dll [安全] [Security Shell Extension] 文件路径: C:\WINDOWS\system32\rshx32.dll [安全] [Shell extensions for sharing] 文件路径: C:\WINDOWS\system32\ntshrui.dll [安全] [Display TroubleShoot CPL Extension] 文件路径: C:\WINDOWS\system32\deskperf.dll [安全] [CryptPKO Class] 文件路径: C:\WINDOWS\system32\cryptext.dll [安全] [CryptSig Class] 文件路径: C:\WINDOWS\system32\cryptext.dll [安全] [网络连接] 文件路径: C:\WINDOWS\system32\NETSHELL.dll [安全] [网络连接] 文件路径: C:\WINDOWS\system32\NETSHELL.dll [安全] [扫描仪和照相机] 文件路径: C:\WINDOWS\system32\wiashext.dll [安全] [扫描仪和照相机] 文件路径: C:\WINDOWS\system32\wiashext.dll [安全] [{905667aa-acd6-11d2-8080-00805f6596d2}] 文件路径: C:\WINDOWS\system32\wiashext.dll [安全] [扫描仪和照相机] 文件路径: C:\WINDOWS\system32\wiashext.dll [安全] [{83bbcbf3-b28a-4919-a5aa-73027445d672}] 文件路径: C:\WINDOWS\system32\wiashext.dll [安全] [Remote Sessions CPL Extension] 文件路径: C:\WINDOWS\system32\remotepg.dll [安全] [Shell Extension For Windows Script Host] 文件路径: C:\WINDOWS\system32\wshext.dll [安全] [Microsoft OLE DB Service Component Data Links] 文件路径: C:\Program Files\Common Files\System\Ole DB\oledb32.dll [安全] [Scheduling UI icon handler] 文件路径: C:\WINDOWS\system32\mstask.dll [安全] [Scheduling UI property sheet handler] 文件路径: C:\WINDOWS\system32\mstask.dll [安全] [任务计划] 文件路径: C:\WINDOWS\system32\mstask.dll [安全] [Set Program Access and Defaults] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [Auto Update Property Sheet Extension] 文件路径: C:\WINDOWS\system32\wuaucpl.cpl [安全] [搜索] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [帮助和支持] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [Windows 安全性] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [运行...] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [Internet] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [电子邮件] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [字体] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [管理工具] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [Previous Versions Property Page] 文件路径: C:\WINDOWS\system32\twext.dll [安全] [Previous Versions] 文件路径: C:\WINDOWS\system32\twext.dll [安全] [Audio Media Properties Handler] 文件路径: C:\WINDOWS\system32\shmedia.dll [安全] [Video Media Properties Handler] 文件路径: C:\WINDOWS\system32\shmedia.dll [安全] [Wav Properties Handler] 文件路径: C:\WINDOWS\system32\shmedia.dll [安全] [Avi Properties Handler] 文件路径: C:\WINDOWS\system32\shmedia.dll [安全] [Midi Properties Handler] 文件路径: C:\WINDOWS\system32\shmedia.dll [安全] [Video Thumbnail Extractor] 文件路径: C:\WINDOWS\system32\shmedia.dll [安全] [Microsoft Internet 工具栏] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [下载状态] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [补充的外壳文件夹] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [补充的外壳文件夹 2] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [BandProxy] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [Microsoft BrowserBand] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [IE Search Band] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [窗格中的搜索] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [Web 搜索] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [注册数目路选项实用程序] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [地址(&A)] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [地址 EditBox] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [Microsoft AutoComplete] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [TridentImageExtractor] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [MRU 自动完成列表] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [自定义 MRU 自动完成列表] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [可访问的] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [跟踪弹出栏] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [Microsoft 历史自动完成列表] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [Microsoft 外壳文件夹自动完成列表] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [Microsoft 多个自动完成列表容器] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [Shell Band Site Menu] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [外壳 DeskBarApp] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [外壳 DeskBar] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [外壳 Rebar BandSite] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [用户帮助] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [全局文件夹设置] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [Favorites Band] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [Shell Automation Inproc Service] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [Shell DocObject Viewer] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Microsoft Browser Architecture] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [Internet Shortcut] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Microsoft Url History Service] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [History] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Temporary Internet Files] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Temporary Internet Files] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Microsoft Url Search Hook] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE4 套件初始屏幕] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [CDF Extension Copy Hook] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [ISFBand OC] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [Search Assistant OC] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [The Internet] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [{871C5380-42A0-1069-A2EA-08002B30309D}] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [浏览器栏] 文件路径: C:\WINDOWS\system32\shdocvw.dll [安全] [{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}] 文件路径: C:\WINDOWS\system32\sendmail.dll [安全] [{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}] 文件路径: C:\WINDOWS\system32\sendmail.dll [安全] [ActiveX Cache Folder] 文件路径: C:\WINDOWS\system32\occache.dll [安全] [WebCheck] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [Subscription Mgr] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [Subscription Folder] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [WebCheckWebCrawler] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [WebCheckChannelAgent] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [TrayAgent] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [Code Download Agent] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [ConnectionAgent] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [PostAgent] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [WebCheck SyncMgr Handler] 文件路径: C:\WINDOWS\system32\webcheck.dll [安全] [Shell Application Manager] 文件路径: C:\WINDOWS\system32\appwiz.cpl [安全] [Installed Apps Enumerator] 文件路径: C:\WINDOWS\system32\appwiz.cpl [安全] [Darwin App Publisher] 文件路径: C:\WINDOWS\system32\appwiz.cpl [安全] [Shell Image Verbs] 文件路径: C:\WINDOWS\system32\shimgvw.dll [安全] [Shell Image Data Factory] 文件路径: C:\WINDOWS\system32\shimgvw.dll [安全] [幻灯片的外壳自动播放] 文件路径: C:\WINDOWS\system32\shimgvw.dll [安全] [GDI+ 文件缩略图解压缩程序] 文件路径: C:\WINDOWS\system32\shimgvw.dll [安全] [摘要信息缩略图处理程序(DOCFILES)] 文件路径: C:\WINDOWS\system32\shimgvw.dll [安全] [HTML 缩略图的解压缩程序] 文件路径: C:\WINDOWS\system32\shimgvw.dll [安全] [Shell Image Property Handler] 文件路径: C:\WINDOWS\system32\shimgvw.dll [安全] [网络出版向导] 文件路径: C:\WINDOWS\system32\netplwiz.dll [安全] [通过 Web 订购照片] 文件路径: C:\WINDOWS\system32\netplwiz.dll [安全] [外壳出版向导对象] 文件路径: C:\WINDOWS\system32\netplwiz.dll [安全] [获取 Passport 向导] 文件路径: C:\WINDOWS\system32\netplwiz.dll [安全] [Extensions Manager Folder] 文件路径: C:\WINDOWS\system32\extmgr.dll [安全] [Microsoft FTP Folder] 文件路径: C:\WINDOWS\system32\msieftp.dll [安全] [Microsoft DocProp Shell Ext] 文件路径: C:\WINDOWS\system32\docprop2.dll [安全] [Microsoft DocProp Inplace Edit Box Control] 文件路径: C:\WINDOWS\system32\docprop2.dll [安全] [Microsoft DocProp Inplace ML Edit Box Control] 文件路径: C:\WINDOWS\system32\docprop2.dll [安全] [Microsoft DocProp Inplace Droplist Combo Control] 文件路径: C:\WINDOWS\system32\docprop2.dll [安全] [Microsoft DocProp Inplace Calendar Control] 文件路径: C:\WINDOWS\system32\docprop2.dll [安全] [Microsoft DocProp Inplace Time Control] 文件路径: C:\WINDOWS\system32\docprop2.dll [安全] [{8A23E65E-31C2-11d0-891C-00A024AB2DBB}] 文件路径: C:\WINDOWS\system32\dsquery.dll [安全] [{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}] 文件路径: C:\WINDOWS\system32\dsquery.dll [安全] [{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}] 文件路径: C:\WINDOWS\system32\dsquery.dll [安全] [{F020E586-5264-11d1-A532-0000F8757D7E}] 文件路径: C:\WINDOWS\system32\dsquery.dll [安全] [{0D45D530-764B-11d0-A1CA-00AA00C16E65}] 文件路径: C:\WINDOWS\system32\dsuiext.dll [安全] [{62AE1F9A-126A-11D0-A14B-0800361B1103}] 文件路径: C:\WINDOWS\system32\dsuiext.dll [安全] [{ECF03A33-103D-11d2-854D-006008059367}] 文件路径: C:\WINDOWS\system32\mydocs.dll [安全] [MyDocs Drop Target] 文件路径: C:\WINDOWS\system32\mydocs.dll [安全] [MyDocs menu and properties] 文件路径: C:\WINDOWS\system32\mydocs.dll [安全] [Offline Files Menu] 文件路径: C:\WINDOWS\System32\cscui.dll [安全] [Offline Files Folder Options] 文件路径: C:\WINDOWS\System32\cscui.dll [安全] [脱机文件夹] 文件路径: C:\WINDOWS\System32\cscui.dll [安全] [Microsoft Agent Character Property Sheet Handler] 文件路径: C:\WINDOWS\msagent\agentpsh.dll [安全] [DfsShell Class] 文件路径: C:\WINDOWS\system32\dfsshlex.dll [安全] [DropTarget Object for Photo Printing Wizard] 文件路径: C:\WINDOWS\system32\photowiz.dll [安全] [ExtractIcon Class] 文件路径: C:\WINDOWS\System32\mmcshext.dll [安全] [Cab 文件] 文件路径: C:\WINDOWS\system32\cabview.dll [安全] [用户(&P)...] 文件路径: C:\Program Files\Outlook Express\wabfind.dll [安全] [WMP Burn Audio CD Launcher] 文件路径: C:\WINDOWS\system32\wmpshell.dll [安全] [WMP Play As Playlist Launcher] 文件路径: C:\WINDOWS\system32\wmpshell.dll [安全] [WMP Add To Playlist Launcher] 文件路径: C:\WINDOWS\system32\wmpshell.dll [安全] [Shell Search Band] 文件路径: C:\WINDOWS\system32\browseui.dll [安全] [WinRAR] 文件路径: C:\Program Files\WinRAR\rarext.dll [安全] [{42042206-2D85-11D3-8CFF-005004838597}] 文件路径: C:\Program Files\Microsoft Office\OFFICE11\msohev.dll [安全] [Web 文件夹] 文件路径: C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL [安全] [Portable Media Devices] 文件路径: C:\WINDOWS\system32\Audiodev.dll [安全] [Portable Media Devices Menu] 文件路径: C:\WINDOWS\system32\Audiodev.dll [安全] [MenuShlExt Class] 文件路径: C:\WINDOWS\system32\RavExt.dll [安全] [{669751ED-D558-49AE-B01A-3B374CC7910E}] 文件路径: C:\WINDOWS\system32\SSup.dll [安全] [IE Microsoft BrowserBand] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Fade Task] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Menu Desk Bar] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE AutoComplete] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Navigation Bar] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Menu Site] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Menu Band] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Microsoft History AutoComplete List] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Tracking Shell Menu] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [{6CF48EF8-44CD-45d2-8832-A16EA016311B}] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE BandProxy] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE MRU AutoComplete List] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE RSS Feeds Folder] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Microsoft Shell Folder AutoComplete List] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Microsoft Multiple AutoComplete List Container] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Microsoft Browser Architecture] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Shell Rebar BandSite] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Shell Band Site Menu] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [&Links] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Registry Tree Options Utility] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE User Assist] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [IE Custom MRU AutoCompleted List] 文件路径: C:\WINDOWS\system32\ieframe.dll [安全] [Tencent Browser Helper] 文件路径: C:\Program Files\TENCENT\SSPlus\SAddr1.dll [安全] [Tencent SearchHook] 文件路径: C:\Program Files\TENCENT\SSPlus\SAddr1.dll [安全] [Tencent AddrDropTarget] 文件路径: C:\Program Files\TENCENT\SSPlus\SAddr1.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\shellex\ColumnHandlers [{0D2E74C4-3C34-11d2-A27E-00C04FC30871}] 文件路径: C:\WINDOWS\system32\SHELL32.dll [安全] [{24F14F01-7B1C-11d1-838f-0000F80461CF}] 文件路径: C:\WINDOWS\system32\SHELL32.dll [安全] [{24F14F02-7B1C-11d1-838f-0000F80461CF}] 文件路径: C:\WINDOWS\system32\SHELL32.dll [安全] [{66742402-F9B9-11D1-A202-0000F81FEDEE}] 文件路径: C:\WINDOWS\system32\SHELL32.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager [BootExecute] 文件路径: C:\WINDOWS\system32\autochk.exe [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs [advapi32] 文件路径: C:\WINDOWS\system32\advapi32.dll [安全] [comdlg32] 文件路径: C:\WINDOWS\system32\comdlg32.dll [安全] [gdi32] 文件路径: C:\WINDOWS\system32\gdi32.dll [安全] [imagehlp] 文件路径: C:\WINDOWS\system32\imagehlp.dll [安全] [kernel32] 文件路径: C:\WINDOWS\system32\kernel32.dll [安全] [lz32] 文件路径: C:\WINDOWS\system32\lz32.dll [安全] [ole32] 文件路径: C:\WINDOWS\system32\ole32.dll [安全] [oleaut32] 文件路径: C:\WINDOWS\system32\oleaut32.dll [安全] [olecli32] 文件路径: C:\WINDOWS\system32\olecli32.dll [安全] [olecnv32] 文件路径: C:\WINDOWS\system32\olecnv32.dll [安全] [olesvr32] 文件路径: C:\WINDOWS\system32\olesvr32.dll [安全] [olethk32] 文件路径: C:\WINDOWS\system32\olethk32.dll [安全] [rpcrt4] 文件路径: C:\WINDOWS\system32\rpcrt4.dll [安全] [shell32] 文件路径: C:\WINDOWS\system32\shell32.dll [安全] [url] 文件路径: C:\WINDOWS\system32\url.dll [安全] [urlmon] 文件路径: C:\WINDOWS\system32\urlmon.dll [安全] [user32] 文件路径: C:\WINDOWS\system32\user32.dll [安全] [version] 文件路径: C:\WINDOWS\system32\version.dll [安全] [wininet] 文件路径: C:\WINDOWS\system32\wininet.dll [安全] [wldap32] 文件路径: C:\WINDOWS\system32\wldap32.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors [BJ Language Monitor] 文件路径: C:\WINDOWS\system32\cnbjmon.dll [安全] [Canon BJ Language Monitor iP1200] 文件路径: C:\WINDOWS\system32\CNMLM76.DLL [安全] [Local Port] 文件路径: C:\WINDOWS\system32\localspl.dll [安全] [PJL Language Monitor] 文件路径: C:\WINDOWS\system32\pjlmon.dll [安全] [Standard TCP/IP Port] 文件路径: C:\WINDOWS\system32\tcpmon.dll [安全] [USB Monitor] 文件路径: C:\WINDOWS\system32\usbmon.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa [Authentication Packages] 文件路径: C:\WINDOWS\system32\msv1_0.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa [Notification Packages] 文件路径: C:\WINDOWS\system32\scecli.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa [Security Packages] 文件路径: C:\WINDOWS\system32\kerberos.dll [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment [ComSpec] <%SystemRoot%\system32\cmd.exe> 文件路径: C:\WINDOWS\system32\cmd.exe [安全] -------------------------------------------------------------- 该项来源: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Session Manager\Environment [ComSpec] <%SystemRoot%\system32\cmd.exe> 文件路径: C:\WINDOWS\system32\cmd.exe [安全]