瑞星卡卡电脑诊断日志 v1.30 (2008-11-18 0:25:39) 北京瑞星信息技术有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services Ati HotKey Poller [A ] 1. c:\windows\system32\ati2evxx.exe ATI Technologies Inc. ATI External Event Utility EXE Module .text,.rdata,.data,.rsrc, IBMPMSVC [AM] 2. c:\windows\system32\ibmpmsvc.exe Lenovo ThinkPad Power Management Service .text,.data,.rsrc, ose [A ] 3. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, RfwProxySrv [AM] 4. d:\program files\rising\rfw\rfwproxy.exe Beijing Rising Information Technology Co., Ltd. Rising Personal Proxy Service .text,.rdata,.data,.rsrc, RfwService [AM] 5. d:\program files\rising\rfw\rfwsrv.exe Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Service .text,.rdata,.data,.rsrc, RsCCenter [AM] 6. c:\program files\rising\rav\ccenter.exe Beijing Rising Information Technology Co., Ltd. CCenter .text,.rdata,.data,.rsrc, RsRavMon [AM] 7. c:\program files\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. Rising Realtime Moniter .text,.rdata,.data,.rsrc, UMWdf [AM] 8. c:\windows\system32\wdfmgr.exe Microsoft Corporation Windows User Mode Driver Manager .text,.data,.rsrc, + 内核驱动 + HKLM\System\CurrentControlSet\Services 3WAREDRV [A ] 9. c:\windows\system32\drivers\3waredrv.sys .text,.rdata,.data,INIT,.rsrc,.reloc, A320RAID [A ] 10. c:\windows\system32\drivers\a320raid.sys Adaptec, Inc. Adaptec HostRAID for Ultra320 SCSI .text,.rdata,.data,INIT,.rsrc,.reloc, AAC [A ] 11. c:\windows\system32\drivers\aac.sys Adaptec, Inc. Adaptec RAID Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, AACSAS [A ] 12. c:\windows\system32\drivers\aacsas.sys Adaptec, Inc. Adaptec SAS RAID Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, AARSI3X [A ] 13. c:\windows\system32\drivers\aarsi3x.sys Adaptec, Inc. Adaptec HostRAID for Serial ATA .text,.rdata,.data,INIT,.rsrc,.reloc, ADP94XX [A ] 14. c:\windows\system32\drivers\adp94xx.sys Adaptec, Inc. Adaptec Windows SAS/SATA Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ADPU320 [A ] 15. c:\windows\system32\drivers\adpu320.sys Adaptec, Inc. Adaptec Windows Ultra320 Driver .text,.rdata,.data,INIT,.rsrc,.reloc, aeaudio [A ] 16. c:\windows\system32\drivers\aeaudio.sys Andrea Electronics Corporation Andrea Audio Noise Cancellation Driver .text,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, AEC6880 [A ] 17. c:\windows\system32\drivers\aec6880.sys ACARD Technology Corp. AEC6880/90 PCI Ultra ATA133 RAID Adapter Driver .text,.rdata,INIT,.rsrc,.reloc, AEC6897 [A ] 18. c:\windows\system32\drivers\aec6897.sys ACARD Technology Corp. RAID miniport driver for AEC6897/AEC6898 .text,.rdata,.data,INIT,.rsrc,.reloc, AEC68X5 [A ] 19. c:\windows\system32\drivers\aec68x5.sys ACARD Technology Corp. AEC6885/95/96 PCI ATA133 4 Channel RAID Adapter Driver .text,.rdata,INIT,.rsrc,.reloc, ahci8086 [A ] 20. c:\windows\system32\drivers\ahci8086.sys ATI Technologies Inc. ATI Technology AHCI Compatible Controller Driver for Windows family .text,.rdata,.data,INIT,.rsrc,.reloc, AlcwWmDrv [A ] 21. c:\windows\system32\drivers\alcwwmdrv.sys .text,.rdata,.data,INIT,.reloc, Alidevice [A ] 22. c:\windows\system32\drivers\alidevice.sys alipay.com Windows NT alipay kernel module .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, AmdK8 [A ] 23. c:\windows\system32\drivers\amdk8.sys Advanced Micro Devices AMD Processor Driver .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc, ARCM_X86 [A ] 24. c:\windows\system32\drivers\arcm_x86.sys ARECA Technology Corporation WINDOWS X86-32 SCSIPORT DRIVER for ARECA SATA RAID host controller .text,.data,INIT,.rsrc,.reloc, BCRAID [A ] 25. c:\windows\system32\drivers\bcraid.sys Broadcom Corporation RAIDCore MiniPort .text,.rdata,.data,INIT,.rsrc,.reloc, DKbFltr [A ] 26. c:\windows\system32\drivers\dkbfltr.sys Dritek System Inc. Dritek PS2 Keyboard Filter Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, FASTSX [A ] 27. c:\windows\system32\drivers\fastsx.sys Promise Technology, Inc. Promise FastTRAK SX4/SX4000 Driver for Windows .text,.rdata,.data,INIT,.rsrc,.reloc, FASTTRAK [A ] 28. c:\windows\system32\drivers\fasttrak.sys Promise Technology, Inc. Promise FastTrak Series Driver for Win2000 .text,.rdata,.data,INIT,.rsrc,.reloc, FT8300 [A ] 29. c:\windows\system32\drivers\ft8300.sys Promise Technology, Inc. Promise FastTRAK SX4300/8300 Driver for Windows family .text,.rdata,.data,INIT,.rsrc,.reloc, FTSATA2 [A ] 30. c:\windows\system32\drivers\ftsata2.sys Promise Technology, Inc. Promise Driver for Windows Server 2003 .text,.rdata,.data,INIT,.rsrc,.reloc, HookCont [A ] 31. c:\windows\system32\drivers\hookcont.sys Beijing Rising Information Technology Co., Ltd. HookCont .text,.rdata,.data,INIT,.rsrc,.reloc, HookNtos [A ] 32. c:\windows\system32\drivers\hookntos.sys Beijing Rising Information Technology Co., Ltd. HookNtos .text,.rdata,.data,INIT,.rsrc,.reloc, HookReg [A ] 33. c:\windows\system32\drivers\hookreg.sys Beijing Rising Information Technology Co., Ltd. HookReg .text,.rdata,.data,INIT,.rsrc,.reloc, HookSys [A ] 34. c:\windows\system32\drivers\hooksys.sys Beijing Rising Information Technology Co., Ltd. Hooksys .text,.rdata,.data,INIT,.rsrc,.reloc, HookUrl [A ] 35. d:\program files\rising\rfw\hookurl.sys Beijing Rising Information Technology Co., Ltd. URL Filter Driver .text,.rdata,.data,INIT,.rsrc,.reloc, HPT374 [A ] 36. c:\windows\system32\drivers\hpt374.sys HighPoint Technologies, Inc. HPT374 Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, IASTOR [A ] 37. c:\windows\system32\drivers\iastor.sys Intel Corporation Intel Matrix Storage Manager driver - ia32 .text,.rdata,.data,INIT,.rsrc,.reloc, IBMPMDRV [A ] 38. c:\windows\system32\drivers\ibmpmdrv.sys Lenovo. ThinkPad Power Management Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, iteatapi [A ] 39. c:\windows\system32\drivers\iteatapi.sys Integrated Technology Express, Inc. ITE IT8211 ATA/ATAPI SCSI miniport .text,.rdata,.data,INIT,.rsrc,.reloc, ITERAID [A ] 40. c:\windows\system32\drivers\iteraid.sys Integrated Technology Express, Inc. ITE IT8212 ATA RAID SCSI miniport .text,.rdata,.data,INIT,.rsrc,.reloc, JRAID [A ] 41. c:\windows\system32\drivers\jraid.sys JMicron Technology Corp. JMicron JMB36X RAID Driver .text,.rdata,.data,INIT,.rsrc,.reloc, M5228 [A ] 42. c:\windows\system32\drivers\m5228.sys ALi Corporation. M5228 ATA RAID Controller Driver .text,.rdata,.data,INIT,.rsrc,.reloc, M5281 [A ] 43. c:\windows\system32\drivers\m5281.sys ALi Corporation ALi SATA RAID Controller Driver .text,.rdata,.data,INIT,.rsrc,.reloc, M5287 [A ] 44. c:\windows\system32\drivers\m5287.sys ULi Electronics Inc. ULi SATA Controller Driver .text,.rdata,.data,.idata,.rsrc,.reloc, M5288 [A ] 45. c:\windows\system32\drivers\m5288.sys ULi Electronics Inc. ULi SATA Controller Driver .text,.rdata,.data,INIT,.rsrc,.reloc, M5289 [A ] 46. c:\windows\system32\drivers\m5289.sys ULi Electronics Inc. ULi SATA RAID Controller Driver .text,.rdata,.data,INIT,.rsrc,.reloc, nvgts [A ] 47. c:\windows\system32\drivers\nvgts.sys NVIDIA Corporation NVIDIA? nForce(TM) Sata Performance Driver .text,.rdata,.data,INIT,.rsrc,.reloc, nvrd32 [A ] 48. c:\windows\system32\drivers\nvrd32.sys NVIDIA Corporation NVIDIA? nForce(TM) RAID Driver .text,.rdata,.data,PAGE,INIT,DUMPDATA,.rsrc,.reloc, PnpWmkDrv [A ] 49. c:\windows\system32\drivers\pnpwmkdrv.sys Windows (R) 2000 DDK provider 完美卸载 Driver .text,.rdata,.data,INIT,.rsrc,.reloc, QL2300 [A ] 50. c:\windows\system32\drivers\ql2300.sys QLogic Corporation Miniport Driver for QLA2300 Adapter .text,.rdata,.data,INIT,.rsrc,.reloc, RAIDSRC [A ] 51. c:\windows\system32\drivers\raidsrc.sys Intel/ICP Intel(r)/ICP Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, RfwBase [A ] 52. c:\windows\system32\drivers\rfwbase.sys Beijing Rising Information Technology Co., Ltd. net base driver .text,.rdata,.data,INIT,.rsrc,.reloc, RR232X [A ] 53. c:\windows\system32\drivers\rr232x.sys HighPoint Technologies, Inc. RR232x Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, RRamdisk [A ] 54. c:\windows\system32\drivers\rramdisk.sys gavotte Ramdisk Driver for win2k/xp/2k3 .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, RsFwDrv [A ] 55. d:\program files\rising\rfw\rsfwdrv.sys Beijing Rising Information Technology Co., Ltd. Rules Driver .text,.rdata,.data,INIT,.rsrc,.reloc, RsNTGDI [A ] 56. c:\windows\system32\drivers\rsntgdi.sys Beijing Rising Information Technology Co., Ltd. RsNTGDI .text,.rdata,INIT,.rsrc,.reloc, S150SX8 [A ] 57. c:\windows\system32\drivers\s150sx8.sys Promise Technology, Inc. Promise SATAII150 SX8 Driver for WindowsXP .text,.rdata,.data,INIT,.rsrc,.reloc, Secdrv [A ] 58. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3112 [A ] 59. c:\windows\system32\drivers\si3112.sys Silicon Image, Inc. Serial ATA miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3112R [A ] 60. c:\windows\system32\drivers\si3112r.sys Silicon Image, Inc Serial ATA RAID miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3114 [A ] 61. c:\windows\system32\drivers\si3114.sys Silicon Image, Inc. Serial ATA miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3114R [A ] 62. c:\windows\system32\drivers\si3114r.sys Silicon Image, Inc SATARAID miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3114R5 [A ] 63. c:\windows\system32\drivers\si3114r5.sys Silicon Image, Inc SATA SoftRAID 5 miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3124 [A ] 64. c:\windows\system32\drivers\si3124.sys Silicon Image, Inc. Serial ATA miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3124R [A ] 65. c:\windows\system32\drivers\si3124r.sys Silicon Image, Inc SATARAID miniport driver (PRE-RELEASE) .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3124R5 [A ] 66. c:\windows\system32\drivers\si3124r5.sys Silicon Image, Inc SATA SoftRAID 5 miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3132 [A ] 67. c:\windows\system32\drivers\si3132.sys Silicon Image, Inc. Serial ATA miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SI3132R5 [A ] 68. c:\windows\system32\drivers\si3132r5.sys Silicon Image, Inc SATA SoftRAID 5 miniport driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SISRAID2 [A ] 69. c:\windows\system32\drivers\sisraid2.sys Silicon Integrated Systems Corp SiS RAID Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, SISRAID4 [A ] 70. c:\windows\system32\drivers\sisraid4.sys Silicon Integrated Systems SiS AHCI Miniport Driver .text,.rdata,.data,INIT,.rsrc,.reloc, smwdm [A ] 71. c:\windows\system32\drivers\smwdm.sys Analog Devices, Inc. SoundMAX Integrated Digital Audio .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, snpshot [A ] 72. c:\windows\system32\drivers\snpshot.sys Ensurebit Shadow System .text,texts,.rdata,.data,PAGE,INIT,.rsrc,.reloc, ST8350 [A ] 73. c:\windows\system32\drivers\st8350.sys Promise Technology, Inc. Promise SuperTrak EX8350/EX8300 for Windows Family .text,.rdata,.data,INIT,.rsrc,.reloc, SYMMPI [A ] 74. c:\windows\system32\drivers\symmpi.sys LSI Logic LSI Logic Fusion-MPT MiniPort Driver (ScsiPort) .text,.rdata,.data,INIT,.rsrc,.reloc, SynTP [A ] 75. c:\windows\system32\drivers\syntp.sys Synaptics, Inc. Synaptics Touchpad Driver .text,.data,INIT,.rsrc,.reloc, ULSATA [A ] 76. c:\windows\system32\drivers\ulsata.sys Promise Technology, Inc. Promise Ultra/Sata Series Driver for Win2003 .text,.rdata,.data,INIT,.rsrc,.reloc, ULSATA2 [A ] 77. c:\windows\system32\drivers\ulsata2.sys Promise Technology, Inc. Promise SATAII150 Series Windows Drivers .text,.rdata,.data,INIT,.rsrc,.reloc, VIAMRAID [A ] 78. c:\windows\system32\drivers\viamraid.sys VIA Technologies inc,.ltd VIA AHCI RAID DRIVER FOR WIN XP/SRV2003 .text,.rdata,.data,INIT,.rsrc,.reloc, vmscsi [A ] 79. c:\windows\system32\drivers\vmscsi.sys VMware, Inc. VMware SCSI Controller .text,.rdata,.data,INIT,.rsrc,.reloc, WmRegProDrv [A ] 80. c:\windows\system32\drivers\wmregprodrv.sys Windows (R) 2000 DDK provider 完美卸载 保护驱动 .text,.rdata,.data,INIT,.rsrc,.reloc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {01443AEC-0FD1-40fd-9C87-E93D1494C233} [A ] 81. d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, {889D2FEB-5411-4565-8998-1DD2C5261283} [AM] 82. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [A ] 83. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 84. d:\program files\thunder network\thunder\thunder.exe Thunder Networking Technologies,LTD .text,.rdata,.data,.rsrc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [AM] 85. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 86. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, Portable Media Devices [A ] 87. c:\windows\system32\audiodev.dll Microsoft Corporation 便携媒体设备命令行解释器扩展 .text,.data,.rsrc,.reloc, Portable Media Devices Menu [A ] 87. c:\windows\system32\audiodev.dll Microsoft Corporation 便携媒体设备命令行解释器扩展 .text,.data,.rsrc,.reloc, Microsoft Office HTML Icon Handler [A ] 88. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 89. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, WinRAR shell extension [AM] 90. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, RISING [AM] 91. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, UnlockerShellExtension [AM] 92. c:\program files\unlocker\unlockercom.dll .text,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKLM\Software\Microsoft\Windows\CurrentVersion\Run RfwMain [AM] 93. d:\program files\rising\rfw\rfwmain.exe Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Main Program .text,.rdata,.data,.rsrc, RavTask [AM] 94. c:\program files\rising\rav\ravtask.exe Beijing Rising Information Technology Co., Ltd. RavTimer .text,.rdata,.data,.rsrc, SynTPLpr [AM] 95. c:\program files\synaptics\syntp\syntplpr.exe Synaptics, Inc. TouchPad Driver Helper Application .text,.rdata,.data,.rsrc, SynTPEnh [AM] 96. c:\program files\synaptics\syntp\syntpenh.exe Synaptics, Inc. Synaptics TouchPad Enhancements .text,.rdata,.data,.rsrc, PowerRemind [A ] 97. c:\windows\system32\shadow\powerremind.exe 北京坚果比特科技有限公司 影子系统Remind .text,.rdata,.data,.rsrc, runeip [A ] 98. d:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 99. c:\windows\system32\bsmain.exe Beijing Rising Information Technology Co., Ltd. Rising Antivirus 2008 .text,.rdata,.data,.rsrc,.reloc, + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 100. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\傲游(Maxthon)\Command [AM] 101. d:\program files\maxthon2\maxthon.exe Maxthon International ltd. Maxthon Browser .text,.rdata,.data,.rsrc,.reloc, + HKCR\.htm htmlfile\Edit\Command [A ] 100. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\傲游(Maxthon)\Command [AM] 101. d:\program files\maxthon2\maxthon.exe Maxthon International ltd. Maxthon Browser .text,.rdata,.data,.rsrc,.reloc, + 其他自启动项目 + C:\WINDOWS\Tasks SogouImeMgr.job [A ] 102. d:\program files\sogouinput\3.6.0.1653\pinyinrepair.exe Sogou.com Inc. 搜狗拼音输入法 输入法修复程序 .text,.rdata,.data,.rsrc, + 正在运行的进程 + 00000084(132) RavStub.exe 00400000[00021000] [ M] 103. c:\program files\rising\rav\ravstub.exe Beijing Rising Information Technology Co., Ltd. Rising RavStub .text,.rdata,.data,.rsrc, 10000000[0001F000] [ M] 104. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00620000[00024000] [ M] 105. c:\program files\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 23700000[00028000] [ M] 106. c:\program files\rising\rav\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 000000e8(232) SynTPEnh.exe 00400000[000A5000] [AM] 96. c:\program files\synaptics\syntp\syntpenh.exe Synaptics, Inc. Synaptics TouchPad Enhancements .text,.rdata,.data,.rsrc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 10000000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 63010000[0001C000] [ M] 110. c:\windows\system32\syntpapi.dll Synaptics, Inc. SynTPAPI .text,.rdata,.data,.rsrc,.reloc, 024C0000[00014000] [ M] 111. c:\windows\system32\syntpfcs.dll Synaptics, Inc. SynTPFcs .text,.rdata,.data,.idata,.rsrc,.reloc, + 000001f4(500) ctfmon.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 63000000[00014000] [ M] 111. c:\windows\system32\syntpfcs.dll Synaptics, Inc. SynTPFcs .text,.rdata,.data,.idata,.rsrc,.reloc, 10000000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, + 000002a4(676) csrss.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 000002c0(704) winlogon.exe 10000000[0001B000] [ M] 112. c:\windows\system32\psnotify.dll .text,.rdata,.data,.rsrc,.reloc, 013A0000[00040000] [ M] 113. c:\windows\system32\chnormal.dll .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 01680000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 72C80000[00008000] [ M] 114. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 000002ec(748) services.exe 46040000[0000F000] [ M] 115. c:\windows\apppatch\acadproc.dll Microsoft Corporation Windows Compatibility DLL .text,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 000002f8(760) lsass.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 00000394(916) ibmpmsvc.exe 01000000[0000A000] [AM] 2. c:\windows\system32\ibmpmsvc.exe Lenovo ThinkPad Power Management Service .text,.data,.rsrc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 000003b0(944) svchost.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 000003b8(952) wdfmgr.exe 01000000[0000C000] [AM] 8. c:\windows\system32\wdfmgr.exe Microsoft Corporation Windows User Mode Driver Manager .text,.data,.rsrc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 000003c0(960) svchost.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 000003fc(1020) spoolsv.exe + 00000400(1024) svchost.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 00000448(1096) Explorer.EXE 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 10000000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 72C80000[00008000] [ M] 114. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 63000000[00014000] [ M] 111. c:\windows\system32\syntpfcs.dll Synaptics, Inc. SynTPFcs .text,.rdata,.data,.idata,.rsrc,.reloc, 05DD0000[00020000] [AM] 82. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 23CE0000[0000E000] [ M] 116. d:\program files\thunder network\thunder\components\resworker\dsbho_00.dll Thunder Networking Technologies,LTD DsBho .text,.rdata,.data,.rsrc,.reloc, 23C90000[0001E000] [ M] 117. d:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, 23700000[00028000] [ M] 106. c:\program files\rising\rav\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02160000[0002E000] [AM] 90. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, 02010000[00006000] [AM] 92. c:\program files\unlocker\unlockercom.dll .text,.data,.rsrc,.reloc, 020B0000[0001C000] [AM] 91. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + 00000474(1140) CCenter.exe 00400000[0002A000] [AM] 6. c:\program files\rising\rav\ccenter.exe Beijing Rising Information Technology Co., Ltd. CCenter .text,.rdata,.data,.rsrc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 00000484(1156) svchost.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 50E60000[0000C000] [ M] 118. c:\windows\system32\wups2.dll Microsoft Corporation Windows Update client proxy stub 2 .text,.orpc,.data,.rsrc,.reloc, + 000004c8(1224) RfwMain.exe 00400000[00092000] [AM] 93. d:\program files\rising\rfw\rfwmain.exe Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Main Program .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 119. c:\windows\system32\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 120. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 121. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 26600000[000A8000] [ M] 122. d:\program files\rising\rfw\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 10000000[0001F000] [ M] 123. d:\program files\rising\rfw\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00A60000[00024000] [ M] 124. d:\program files\rising\rfw\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00BA0000[0000E000] [ M] 125. d:\program files\rising\rfw\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 00BC0000[00030000] [ M] 126. d:\program files\rising\rfw\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 23700000[00028000] [ M] 127. d:\program files\rising\rfw\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00E00000[00014000] [ M] 128. d:\program files\rising\rfw\rfwctrl.dll Beijing Rising Information Technology Co., Ltd. RfwCtrl DLL .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 129. d:\program files\rising\rfw\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 130. d:\program files\rising\rfw\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 012F0000[0000F000] [ M] 131. d:\program files\rising\rfw\rfwrule.dll Beijing Rising Information Technology Co., Ltd. rule DLL .text,.rdata,.data,.rsrc,.reloc, + 000004e8(1256) RavMon.exe 00400000[00067000] [ M] 132. c:\program files\rising\rav\ravmon.exe Beijing Rising Information Technology Co., Ltd. Rising realtime monitor shell .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 119. c:\windows\system32\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 120. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 121. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[0001F000] [ M] 104. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00A30000[00024000] [ M] 105. c:\program files\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 23700000[00028000] [ M] 106. c:\program files\rising\rav\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00C80000[00035000] [ M] 133. c:\program files\rising\rav\recomp.dll Beijing Rising Information Technology Co., Ltd. component manager Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00CD0000[00036000] [ M] 134. c:\program files\rising\rav\refs.dll Beijing Rising Information Technology Co., Ltd. filesystem Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00F30000[0002F000] [ M] 135. c:\program files\rising\rav\viruslib.dll Beijing Rising Information Technology Co., Ltd. VirusLib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01070000[00028000] [ M] 136. c:\program files\rising\rav\relibldr.dll Beijing Rising Information Technology Co., Ltd. libloader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 010F0000[0000E000] [ M] 137. c:\program files\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 01110000[00030000] [ M] 138. c:\program files\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 01270000[00075000] [ M] 139. c:\program files\rising\rav\monrule.dll Beijing Rising Information Technology Co., Ltd. MonRule .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 140. c:\program files\rising\rav\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01370000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 26600000[000A8000] [ M] 141. c:\program files\rising\rav\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 142. c:\program files\rising\rav\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 00000504(1284) svchost.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 00000590(1424) svchost.exe 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 000005e8(1512) ravmond.exe 00400000[00069000] [AM] 7. c:\program files\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. Rising Realtime Moniter .text,.rdata,.data,.rsrc, 10000000[00042000] [ M] 143. c:\program files\rising\rav\bwlist.dll Beijing Rising Information Technology Co., Ltd. BWList DLL .text,.rdata,.data,.rsrc,.reloc, 7C140000[00103000] [ M] 119. c:\windows\system32\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 120. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 121. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00A30000[0000E000] [ M] 137. c:\program files\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 00A50000[00030000] [ M] 138. c:\program files\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 00CF0000[00067000] [ M] 144. c:\program files\rising\rav\rslog.dll Beijing Rising Information Technology Co., Ltd. RsLog DLL .text,.rdata,.data,.rsrc,.reloc, 00A90000[0001F000] [ M] 104. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00D60000[00024000] [ M] 105. c:\program files\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00DA0000[00075000] [ M] 139. c:\program files\rising\rav\monrule.dll Beijing Rising Information Technology Co., Ltd. MonRule .text,.rdata,.data,.rsrc,.reloc, 00E90000[00013000] [ M] 145. c:\program files\rising\rav\hooksys.dll Beijing Rising Information Technology Co., Ltd. Hooksys Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 01020000[00013000] [ M] 146. c:\program files\rising\rav\hookreg.dll Beijing Rising Information Technology Co., Ltd. HookReg Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01080000[00013000] [ M] 147. c:\program files\rising\rav\hookntos.dll Beijing Rising Information Technology Co., Ltd. SysMon Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 010E0000[0001D000] [ M] 148. c:\program files\rising\rav\rswalmon.dll Beijing Rising Information Technology Co., Ltd. Rising WAL Monitor DLL .text,.rdata,.data,.rsrc,.reloc, 01F10000[00035000] [ M] 133. c:\program files\rising\rav\recomp.dll Beijing Rising Information Technology Co., Ltd. component manager Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01F60000[00036000] [ M] 134. c:\program files\rising\rav\refs.dll Beijing Rising Information Technology Co., Ltd. filesystem Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01FB0000[00022000] [ M] 149. c:\program files\rising\rav\ffr.dll Beijing Rising Information Technology Co., Ltd. ffr Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01FF0000[00020000] [ M] 150. c:\program files\rising\rav\rsstore.dll Beijing Rising Information Technology Co., Ltd. RSStore .text,.rdata,.data,.rsrc,.reloc, 02020000[00013000] [ M] 151. c:\program files\rising\rav\hookcont.dll Beijing Rising Information Technology Co., Ltd. HookCont Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02050000[00028000] [ M] 152. c:\program files\rising\rav\fakescan.dll Beijing Rising Information Technology Co., Ltd. FakeScan Module .text,.rdata,.data,.rsrc,.reloc, 02090000[00022000] [ M] 153. c:\program files\rising\rav\scanner.dll Beijing Rising Information Technology Co., Ltd. RsScanner Module .text,.rdata,.data,.rsrc,.reloc, 026D0000[0002F000] [ M] 135. c:\program files\rising\rav\viruslib.dll Beijing Rising Information Technology Co., Ltd. VirusLib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02810000[00028000] [ M] 136. c:\program files\rising\rav\relibldr.dll Beijing Rising Information Technology Co., Ltd. libloader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02EA0000[00012000] [ M] 154. c:\program files\rising\rav\hookweb.dll Beijing Rising Information Technology Co., Ltd. Rising HookWeb Dll .text,.rdata,.data,.rsrc,.reloc, 045B0000[00021000] [ M] 155. c:\program files\rising\rav\nvfile.dll Beijing Rising Information Technology Co., Ltd. NVFile .text,.rdata,.data,.rsrc,.reloc, 13AB0000[0004A000] [ M] 156. c:\program files\rising\rav\scanexec.dll Beijing Rising Information Technology Co., Ltd. ScanExec .text,.rdata,.data,.rsrc,.reloc, 05EA0000[002DC000] [ M] 157. c:\program files\rising\rav\unexe.dll Beijing Rising Information Technology Co., Ltd. UnExe .text,.rdata,.data,.rsrc,.reloc, 06190000[000D4000] [ M] 158. c:\program files\rising\rav\scanex.dll Beijing Rising Information Technology Co., Ltd. ScanEx .text,.rdata,.data,.rsrc,.reloc, 06600000[00027000] [ M] 159. c:\program files\rising\rav\pearc.dll Beijing Rising Information Technology Co., Ltd. pearchive Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04E80000[000DC000] [ M] 160. c:\program files\rising\rav\extfile.dll Beijing Rising Information Technology Co., Ltd. extFile Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04F90000[00036000] [ M] 161. c:\program files\rising\rav\scanpack.dll Beijing Rising Information Technology Co., Ltd. Unpack Engine .text,.rdata,.data,.rsrc,.reloc, 04FD0000[000B7000] [ M] 162. c:\program files\rising\rav\revm.dll Beijing Rising Information Technology Co., Ltd. REVM Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 052E0000[00020000] [ M] 163. c:\program files\rising\rav\urutils.dll Beijing Rising Information Technology Co., Ltd. urutils Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 05300000[00018000] [ M] 164. c:\program files\rising\rav\ur000.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 05560000[00038000] [ M] 165. c:\program files\rising\rav\scriptci.dll Beijing Rising Information Technology Co., Ltd. scriptci Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 055B0000[0001D000] [ M] 166. c:\program files\rising\rav\ur001.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 14210000[00038000] [ M] 167. c:\program files\rising\rav\extmail.dll Beijing Rising Information Technology Co., Ltd. ExtMail .text,.rdata,.data,.rsrc,.reloc, 044B0000[000F3000] [ M] 168. c:\program files\rising\rav\uroutine.dll Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 02CF0000[00023000] [ M] 169. c:\program files\rising\rav\scansct.dll Beijing Rising Information Technology Co., Ltd. ScanSct Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 043B0000[00045000] [ M] 170. c:\program files\rising\rav\extole.dll Beijing Rising Information Technology Co., Ltd. ExtOLE .text,.rdata,.data,.rsrc,.reloc, + 000005f8(1528) rfwsrv.exe 00400000[00037000] [AM] 5. d:\program files\rising\rfw\rfwsrv.exe Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Service .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 119. c:\windows\system32\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 120. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 121. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[0001F000] [ M] 123. d:\program files\rising\rfw\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00780000[00024000] [ M] 124. d:\program files\rising\rfw\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 009C0000[0000E000] [ M] 125. d:\program files\rising\rfw\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 009E0000[00030000] [ M] 126. d:\program files\rising\rfw\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 00AF0000[0000F000] [ M] 131. d:\program files\rising\rfw\rfwrule.dll Beijing Rising Information Technology Co., Ltd. rule DLL .text,.rdata,.data,.rsrc,.reloc, 00B00000[0000C000] [ M] 171. d:\program files\rising\rfw\rfwlog.dll Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Logfile DLL .text,.rdata,.data,.rsrc,.reloc, 00B10000[00018000] [ M] 172. d:\program files\rising\rfw\rfwdrv.dll Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Driver DLL .text,.rdata,.data,.rsrc,.reloc, 00B30000[0000E000] [ M] 173. d:\program files\rising\rfw\ijt_ctrl.dll Beijing Rising Information Technology Co., Ltd. Injector Controller .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 00B60000[00016000] [ M] 174. d:\program files\rising\rfw\unvdet.dll Beijing Rising Information Technology Co., Ltd. ScanUnv .text,.rdata,.data,.rsrc,.reloc, 00BB0000[0001B000] [ M] 175. d:\program files\rising\rfw\mports.dll Beijing Rising Information Technology Co., Ltd. get ports list .text,.rdata,.data,.rsrc,.reloc, + 00000648(1608) rfwProxy.exe 00400000[00236000] [AM] 4. d:\program files\rising\rfw\rfwproxy.exe Beijing Rising Information Technology Co., Ltd. Rising Personal Proxy Service .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 119. c:\windows\system32\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 120. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[0001F000] [ M] 123. d:\program files\rising\rfw\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00960000[00024000] [ M] 124. d:\program files\rising\rfw\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00AA0000[0000F000] [ M] 131. d:\program files\rising\rfw\rfwrule.dll Beijing Rising Information Technology Co., Ltd. rule DLL .text,.rdata,.data,.rsrc,.reloc, 00BC0000[00011000] [ M] 176. d:\program files\rising\rfw\urlrule.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlRule Library .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 01110000[00016000] [ M] 177. d:\program files\rising\rfw\monmid.dll Beijing Rising Information Technology Co., Ltd. URL filter dll .text,.rdata,.data,.rsrc,.reloc, + 00000720(1824) rfwstub.exe 00400000[00017000] [ M] 178. d:\program files\rising\rfw\rfwstub.exe Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Service Rfwstub .text,.rdata,.data,.rsrc, 7C3A0000[0007B000] [ M] 121. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 120. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 23700000[00028000] [ M] 127. d:\program files\rising\rfw\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, + 00000994(2452) ras.exe 00400000[0000B000] [ M] 179. d:\program files\rising\antispyware\ras.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 180. d:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 181. d:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 63000000[00014000] [ M] 111. c:\windows\system32\syntpfcs.dll Synaptics, Inc. SynTPFcs .text,.rdata,.data,.idata,.rsrc,.reloc, 10000000[00047000] [ M] 182. d:\program files\rising\antispyware\kakamgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 183. d:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00E70000[00019000] [ M] 184. d:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00EA0000[0001F000] [ M] 104. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00EC0000[00024000] [ M] 185. d:\program files\rising\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 01010000[0002E000] [ M] 186. d:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01280000[00058000] [ M] 187. d:\program files\rising\antispyware\dbmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 188. d:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 013E0000[0002D000] [ M] 189. d:\program files\rising\antispyware\pweb.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01410000[000C3000] [ M] 190. d:\program files\rising\antispyware\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 014E0000[0002F000] [ M] 191. d:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01530000[00070000] [ M] 192. d:\program files\rising\antispyware\pset.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 015C0000[0002A000] [ M] 193. d:\program files\rising\antispyware\pdefend.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01690000[000B6000] [ M] 194. d:\program files\rising\antispyware\ptools.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 015F0000[0008C000] [ M] 195. d:\program files\rising\antispyware\psysinfo.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 196. d:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01AF0000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 30000000[003AF000] [ M] 197. c:\windows\system32\macromed\flash\flash9f.ocx Adobe Systems, Inc. Adobe Flash Player 9.0 r124 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 114. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 05350000[0002F000] [ M] 198. d:\program files\rising\antispyware\engine.dll Beijing Rising Information Technology Co., Ltd. kaka engine .text,.rdata,.data,.rsrc,.reloc, 03030000[0000F000] [ M] 199. d:\program files\rising\antispyware\zip.dll Beijing Rising Information Technology Co., Ltd. zip .text,.rdata,.data,.rsrc,.reloc, 04C00000[00024000] [ M] 200. d:\program files\rising\antispyware\secscan.dll Beijing Rising Information Technology Co., Ltd. SecScan Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04C30000[00018000] [ M] 201. d:\program files\rising\antispyware\secex.dll Beijing Rising Information Technology Co., Ltd. SecScanE Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000b14(2836) WmSysPro.exe 00400000[00099000] [ M] 202. d:\program files\wmxz\wmsyspro.exe 系统保护防毒墙 .text,.rdata,.data,.rsrc, 10000000[00016000] [ M] 203. d:\program files\wmxz\scanengine.dll ScanEngine DLL .text,.rdata,.data,.rsrc,.reloc, 004A0000[000C6000] [ M] 204. d:\program files\wmxz\skinplusplus.dll http://www.killsoft.cn 完美卸载图形模块 .text,.rdata,.data,.rsrc,.reloc, 75FF0000[00065000] [ M] 205. d:\program files\wmxz\msvcp60.dll Microsoft Corporation Microsoft (R) C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 63000000[00014000] [ M] 111. c:\windows\system32\syntpfcs.dll Synaptics, Inc. SynTPFcs .text,.rdata,.data,.idata,.rsrc,.reloc, 00C00000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, + 00000b1c(2844) alg.exe + 00000c78(3192) Maxthon.exe 00400000[0034F000] [AM] 101. d:\program files\maxthon2\maxthon.exe Maxthon International ltd. Maxthon Browser .text,.rdata,.data,.rsrc,.reloc, 10000000[00017000] [ M] 206. d:\program files\maxthon2\mxpp.dll Maxthon International ltd. .text,.rdata,.data,.rsrc,.reloc, 007F0000[00022000] [ M] 207. d:\program files\maxthon2\mxsk.dll Maxthon .text,.rdata,.data,.rsrc,.reloc, 00820000[0009E000] [ M] 208. d:\program files\maxthon2\mxproxy2.dll Maxthon International ltd. .text,.text1,.rdata,.data,.data1,.rsrc,.reloc, 003F0000[0000D000] [ M] 209. d:\program files\maxthon2\mxext.dll .text,.rdata,.data,.reloc, 008C0000[001D6000] [ M] 210. d:\program files\maxthon2\mxui.dll Maxthon International MxUI library UPX0,UPX1,.rsrc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 63000000[00014000] [ M] 111. c:\windows\system32\syntpfcs.dll Synaptics, Inc. SynTPFcs .text,.rdata,.data,.idata,.rsrc,.reloc, 01AF0000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 03700000[00015000] [ M] 211. d:\program files\maxthon2\mxtool.dll mxtool Module .text,.rdata,.data,.rsrc,.reloc, 03720000[00012000] [ M] 212. d:\program files\maxthon2\maxzlib.dll zlib data compression library .text,.rdata,.data,.rsrc,.reloc, 056E0000[0000D000] [AM] 85. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, 05B60000[00016000] [ M] 213. d:\program files\maxthon2\modules\mxpagesearch\mxpagesearch.dll Maxthon International ltd. MxPageSearch .text,.text1,.rdata,.data,.data1,.rsrc,.reloc, 05D70000[0003B000] [ M] 214. d:\program files\maxthon2\modules\mxwebboost\mxwebboost.dll Maxthon MxWebBoost .text,.rdata,.data,.rsrc,.reloc, 05DB0000[00062000] [ M] 215. d:\program files\maxthon2\mxdb.dll Max mxdb .text,.text1,.rdata,.data,.data1,.rsrc,.reloc, 06300000[00028000] [ M] 216. d:\program files\maxthon2\modules\mxguardian\mxguardian.dll Maxthon International ltd. MxGuardian .text,.rdata,.data,.rsrc,.reloc, 06540000[0002F000] [ M] 217. d:\program files\maxthon2\modules\mxhistory\mxhistory.dll Maxthon International ltd. MxHistory .text,.rdata,.data,.rsrc,.reloc, 030B0000[0001E000] [ M] 218. d:\program files\maxthon2\mxfav.dll Maxthon International ltd. .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 114. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000d10(3344) knownsvr.exe 00400000[00072000] [ M] 219. d:\program files\rising\antispyware\knownsvr.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[0002F000] [ M] 191. d:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00980000[0002E000] [ M] 186. d:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 009B0000[00019000] [ M] 184. d:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, + 00000f6c(3948) RavTask.exe 00400000[00034000] [AM] 94. c:\program files\rising\rav\ravtask.exe Beijing Rising Information Technology Co., Ltd. RavTimer .text,.rdata,.data,.rsrc, 10000000[0001F000] [ M] 104. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00940000[00024000] [ M] 105. c:\program files\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 23700000[00028000] [ M] 106. c:\program files\rising\rav\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00BA0000[0000E000] [ M] 137. c:\program files\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 08BC0000[00030000] [ M] 138. c:\program files\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 08D90000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, + 00000fac(4012) SynTPLpr.exe 00400000[0001F000] [AM] 95. c:\program files\synaptics\syntp\syntplpr.exe Synaptics, Inc. TouchPad Driver Helper Application .text,.rdata,.data,.rsrc, 70000000[00019000] [ M] 107. d:\program files\rising\rfw\ijt_base.dll Beijing Rising Information Technology Co., Ltd. Inject Base .text,.rdata,.data,.rsrc,.reloc, 75000000[0000F000] [ M] 108. d:\program files\rising\rfw\olemon.dll Beijing Rising Information Technology Co., Ltd. Ole Mon Dll .text,.rdata,.data,.rsrc,.reloc, 63000000[00014000] [ M] 111. c:\windows\system32\syntpfcs.dll Synaptics, Inc. SynTPFcs .text,.rdata,.data,.idata,.rsrc,.reloc, 10000000[0014F000] [ M] 109. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc,