[CODE]

2008-11-29,22:23:59

SysLog Scanner 1.0 - build 20080726
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 3 (build 2600) - Administrators



========================================
注册项

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <金山清理专家实时保护><"C:\Program Files\Kingsoft Antispy\monitor\kastray.exe">  [(Verified)Kingsoft Corporation, 2008,11,14,88, C:2008-11-14 13:16 M:2008-11-14 13:16]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <SoundMan><SOUNDMAN.EXE>  [(Verified)Realtek Semiconductor Corp., 5, 1, 0, 48, C:2005-11-11 15:07 M:2005-11-11 15:07]
    <StormCodec_Helper><"C:\Program Files\Ringz Studio\Storm Codec\StormSet.exe" /S /opti>  [N/A, C:2006-11-27 03:30 M:2006-11-27 03:30]
    <RfwMain><"D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\rfwmain.exe" -Startup>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.1.70, C:2000-05-28 21:45 M:2008-07-25 20:02]
    <RavTask><"D:\新建文件夹\新建文件夹\Rising\Rav\RavTask.exe" -system>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.24, C:2000-05-28 22:37 M:2008-07-26 22:35]
    <runeip><"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.16, C:2008-08-07 19:24 M:2008-09-11 20:23]
    <Lskbdrv><C:\Program Files\Lenovo\幸福一键通\Kbdriver.exe>  [N/A, C:2008-11-29 12:18 M:2003-05-14 16:24]
    <LenSoft><C:\Program Files\Lenovo\幸福一键通\FlyShuttle.exe>  [版权所有 (C) 2003, 1, 0, 0, 1, C:2008-11-29 12:18 M:2003-04-29 10:23]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_Dlls><kmon.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    <{32CD708B-60A7-4C00-9377-D73EAA495F0F}><C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2000-05-28 21:47 M:2008-07-28 16:29]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Windows Live Search]
    <><res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm>  []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\Add to Windows &Live Favorites]
    <><http://favorites.live.com/quickadd.aspx>  []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载]
    <><D:\新建文件夹 (2)\新建文件夹[迅雷]\Program\GetUrl.htm>  [N/A, C:2008-08-27 20:04 M:2008-07-28 15:43]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接]
    <><D:\新建文件夹 (2)\新建文件夹[迅雷]\Program\GetAllUrl.htm>  [N/A, C:2008-08-27 20:04 M:2007-12-10 14:17]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\导出到 Microsoft Office Excel(&X)]
    <><res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000>  []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\添加到QQ表情]
    <><D:\新建文件夹QQ\新建文件夹\AddEmotion.htm>  [N/A, C:2008-06-30 18:14 M:2008-06-30 18:14]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    <WinlogonNotify: igfxcui><igfxsrvc.dll>  [Intel Corporation, 3.0.0.3943, C:2004-11-02 09:59 M:2004-11-02 09:59]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
    <NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 05:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 7.00.6000.16735 (vista_gdr.080820-1506), C:2004-08-17 05:00 M:2008-08-26 16:57|(Verified)N/A, C:2004-08-17 05:00 M:2004-08-17 05:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
    <Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 05:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 7.00.6000.16735 (vista_gdr.080820-1506), C:2004-08-17 05:00 M:2008-08-26 16:57|(Verified)N/A, C:2004-08-17 05:00 M:2004-08-17 05:00]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 05:00 M:2008-04-13 19:14|(Verified)Microsoft Corporation, 7.00.6000.16735 (vista_gdr.080820-1506), C:2004-08-17 05:00 M:2008-08-26 16:57|(Verified)N/A, C:2006-11-02 23:38 M:2006-11-02 23:38]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
    <><C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install>  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 05:00 M:2008-04-13 19:14|Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}]
    <启动迅雷5><D:\新建文件夹 (2)\新建文件夹[迅雷]\Thunder.exe>  [Thunder Networking Technologies,LTD, 5, 6, 8, 19, C:2008-08-27 20:04 M:2008-08-12 17:41]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
    <><>  []


========================================
启动项



========================================
计划任务

[OGALogon.job]
    <C:\WINDOWS\tasks\OGALogon.job --> "C:\WINDOWS\system32\OGAVerify.exe"  > [(Verified)N/A, C:2008-09-20 23:13 M:2008-09-20 23:13]
[OGADaily.job]
    <C:\WINDOWS\tasks\OGADaily.job --> "C:\WINDOWS\system32\OGAVerify.exe"  > [(Verified)N/A, C:2008-09-20 23:13 M:2008-09-20 23:13]


========================================
组件


ShellExecuteHook
[ShlExecHack Class]
    {32CD708B-60A7-4C00-9377-D73EAA495F0F}  <C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2000-05-28 21:47 M:2008-07-28 16:29]

Shell Extension
[Display Panning CPL Extension]
    {42071714-76d4-11d1-8b24-00a0c9068ff3}  <deskpan.dll>  []
[HyperTerminal Icon Ext]
    {88895560-9AA2-1069-930E-00AA0030EBC8}  <C:\WINDOWS\system32\hticons.dll>  [(Verified)Hilgraeve, Inc., 5.1.2600.0, C:2006-08-18 20:29 M:2004-08-17 13:00]
[WinRAR shell extension]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2008-03-02 18:31 M:2007-03-02 15:42]
[RISING]
    {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}  <C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2000-05-28 21:47 M:2008-07-28 16:29]
[ShellLink for Application References]
    {e82a2d71-5b2f-43a0-97b8-81be15854de8}  <C:\WINDOWS\system32\dfshim.dll>  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]
[Shell Icon Handler for Application References]
    {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}  <C:\WINDOWS\system32\dfshim.dll>  [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28]

Protocols
[Cor MIME Filter, CorFltr, CorFltr 1]
    {1E66F26B-79EE-11D2-8710-00C04F79ED0D}  <mscoree.dll>  [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2007-04-13 03:21 M:2007-04-13 03:21]

BrowserHelperObject
[ThunderAtOnce Class]
    {01443AEC-0FD1-40fd-9C87-E93D1494C233}  <D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-08-27 20:05 M:2008-06-13 09:43]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-08-27 20:05 M:2008-06-13 09:43]
[卡卡上网安全助手]
    {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}  <C:\WINDOWS\system32\urlFilter.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15, C:2008-08-07 19:24 M:2008-08-07 19:22]

ActiveX Extension
[ThunderAtOnce Class]
    {01443AEC-0FD1-40FD-9C87-E93D1494C233}  <D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-08-27 20:05 M:2008-06-13 09:43]
[Office Genuine Advantage Validation Tool]
    {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8}  <C:\WINDOWS\system32\OGACheckControl.dll>  [(Verified)N/A, C:2008-09-20 23:13 M:2008-09-20 23:13]
[DrvCert Class]
    {2FD68643-4BCE-4EF5-B7B8-F0F1192FDE86}  <C:\PROGRA~1\Walker\DrvInst\Bin\DrvCertC.dll>  [联想（北京）有限公司, 3.2.3.9, C:2007-04-18 00:29 M:2007-04-18 00:29]
[QuickTime Object]
    {4063BE15-3B08-470D-A0D5-B37161CFFD69}  <C:\Program Files\Ringz Studio\Storm Codec\QTSystem\QTPlugin.ocx>  [Apple Computer, Inc., 7.1.3, C:2006-09-01 18:26 M:2006-09-01 18:26]
[Thunder Agent Class]
    {485463B7-8FB2-4B3B-B29B-8B919B0EACCE}  <D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\ThunderAgent_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 4, 23, C:2008-08-27 20:05 M:2008-11-13 10:18]
[DrvINFReader Class]
    {631AC624-4EA0-49AB-ABD7-64409592AE15}  <C:\PROGRA~1\Walker\DrvInst\Bin\DrvInf.dll>  [联想（北京）有限公司, 1.0.0.0, C:2007-04-18 00:25 M:2007-04-18 00:25]
[XMP Class]
    {6483F145-A768-4C41-AACC-52D4D7845851}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>  [Xunlei Networking Technologies,LTD, 2, 1, 6, 81, C:2008-05-29 08:21 M:2008-11-13 10:54]
[XDRM]
    {693571CB-54A3-4E90-9D52-EEAE1334E2D3}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work>  [Copyright XunLei 2007, 1, 0, 0, 7, C:2008-05-29 08:21 M:2008-11-13 10:54]
[MediaComm Class]
    {7670648D-461B-42AF-BDFE-46D26AF5EFF2}  <D:\新建文件夹 (2)\新建文件夹[迅雷]\Components\InMedia\MediaAddin18.dll>  [(Verified)Thunder Networking Technologies,LTD, 3, 1, 6, 81, C:2008-11-29 19:58 M:2008-11-25 11:16]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-08-27 20:05 M:2008-06-13 09:43]
[CibaCtrl Class]
    {8DE0FCD4-5EB5-11D3-AD25-00002100131B}  <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll>  [Copyright 1999, 1, 0, 0, 1, C:2000-05-29 01:48 M:2001-09-20 21:02]
[DrvInst Class]
    {9222E48D-8985-4BE2-B9DB-EBE734CBE7B5}  <C:\Program Files\Walker\DrvInst\Bin\DrvInst.dll>  [联想（北京）有限公司, 1.0.0.0, C:2007-04-18 00:26 M:2007-04-18 00:26]
[卡卡上网安全助手]
    {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}  <C:\WINDOWS\system32\urlFilter.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15, C:2008-08-07 19:24 M:2008-08-07 19:22]
[CCTVUpdateInstall]
    {AC414988-E5BB-4C2C-873B-EA53D2F3D23A}  <C:\WINDOWS\Downloaded Program Files\CCTVUpdateInstall.dll>  [(Verified)Copyright 2008, 1, 0, 0, 7, C:2008-08-18 16:05 M:2008-08-18 16:05]
[DapCtrl Class]
    {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}  <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5805.77.(791).dll>  [ShenZhen Thunder Networking Technologies Ltd., 2, 1, 5805, 77, C:2008-11-28 20:41 M:2008-11-13 10:54]
[KooPlayer Control]
    {C728DAB8-FDF5-4CD7-89DD-879D25794C77}  <C:\DOCUME~1\Masato\APPLIC~1\CCTV\tv\CCTVPL~1.OCX>  [(Verified)CCTV.COM, 1, 0, 0, 96, C:2008-08-18 16:06 M:2008-08-18 16:06]
[JoyoCtrl Class]
    {C8CE29C5-7589-11D3-B81B-0080C8DC5DC8}  <C:\PROGRA~1\Kingsoft\XDict\IEPlugin.dll>  [Copyright 1999, 1, 0, 0, 1, C:2000-05-29 01:48 M:2001-09-20 21:02]
[Shockwave Flash Object]
    {D27CDB6E-AE6D-11CF-96B8-444553540000}  <C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx>  [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 12:16 M:2008-10-05 12:16]
[QuickTimeCheck Class]
    {DE4AF3B0-F4D4-11D3-B41A-0050DA2E6C21}  <C:\Program Files\Ringz Studio\Storm Codec\QTSystem\QTCheck.ocx>  [(Verified)Apple Computer, Inc., 7.1.3, C:2006-09-01 18:26 M:2006-09-01 18:26]
[Microsoft Silverlight]
    {DFEAF541-F3E1-4C24-ACAC-99C30715084A}  <C:\Program Files\Microsoft Silverlight\2.0.31005.0\npctrl.dll>  [(Verified) Microsoft Corporation, 2.0.31005.0, C:2008-10-04 21:48 M:2008-10-04 21:48]
[PasswordEditCtrl Class]
    {E787FD25-8D7C-4693-AE67-9406BC6E22DF}  <C:\WINDOWS\system32\qqedit\qqedit.dll>  [(Verified)腾讯科技（深圳）有限公司, 1, 1, 0, 5, C:2008-01-07 18:08 M:2008-01-07 18:08]
[Thunder DapPlayer]
    {EEDD6FF9-13DE-496B-9A1C-D78B3215E266}  <D:\新建文件夹 (2)\新建文件夹[迅雷]\Components\DownAndPlay\DapPlayer3.0.5712.71.710.dll>  [ShenZhen Thunder Networking Technologies Ltd., 3, 0, 5712, 71, C:2008-08-28 20:54 M:2008-08-04 12:58]
[XPPlayer Class]
    {F3E70CEA-956E-49CC-B444-73AFE593AD7F}  <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.5853.212.(791).dll>  [Xunlei Networking Technologies,LTD, 2, 1, 5853, 212, C:2008-11-28 20:41 M:2008-11-13 10:54]

Context Menu
[CopyPathExt]
    {7E41911F-13AA-11D3-A831-00104B9E30B5}  <C:\WINDOWS\system32\LgdGuard.dll>  [N/A, C:2008-05-29 07:32 M:2003-04-04 15:33]
[RisingRavExt]
    {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}  <C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2000-05-28 21:47 M:2008-07-28 16:29]
[WinRAR]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2008-03-02 18:31 M:2007-03-02 15:42]


========================================
服务

[Human Interface Device Access / HidServ][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll">  [Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:14]

[Kingsoft Basic Service / kaccore][Running/Manual Start]
    <"C:\Program Files\Kingsoft\KAC\Service\kaccore.exe">  [(Verified)Kingsoft Corporation, 2008,11,03,330, C:2008-11-03 09:49 M:2008-11-03 09:49]
[Rising Proxy  Service / RfwProxySrv][Running/Auto Start]
    <D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\rfwProxy.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.37, C:2000-05-28 20:51 M:2008-07-29 18:02]
[Rising Personal Firewall Service / RfwService][Running/Auto Start]
    <D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\rfwsrv.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.77, C:2000-05-28 20:51 M:2008-10-15 19:03]
[Rising Process Communication Center / RsCCenter][Running/Auto Start]
    <"D:\新建文件夹\新建文件夹\Rising\Rav\CCenter.exe">  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.33, C:2000-05-28 22:37 M:2008-07-28 16:31]
[Rising RealTime Monitor / RsRavMon][Stopped/Auto Start]
    <"D:\新建文件夹\新建文件夹\RISING\RAV\Ravmond.exe">  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.80, C:2000-05-28 22:38 M:2008-07-28 16:29]


========================================
驱动

[AMD K8 Processor Driver / AmdK8][Stopped/Manual Start]
    <System32\DRIVERS\amdk8.sys>  [Advanced Micro Devices, 1.1.0 (srv03_sp1_rtm.050324-1447), C:2005-08-12 10:09 M:2005-05-21 21:43]
[CALLKEY_IO / CALLKEY_IO][Stopped/Manual Start]
    <\??\C:\Program Files\OneKey\CALLKEY.sys>  [N/A, C:2008-05-29 07:32 M:2003-05-11 09:17]
[ialm / ialm][Running/Manual Start]
    <system32\DRIVERS\ialmnt5.sys>  [Intel Corporation, 6.14.10.3943, C:2004-11-02 10:27 M:2004-11-02 10:27]
[vmscsi / vmscsi][Stopped/Boot Start]
    <System32\DRIVERS\vmscsi.sys>  [VMware, Inc., 1, 2, 0, 0, C:2004-04-12 21:37 M:2004-01-31 16:13]

[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
    <system32\drivers\ALCXWDM.SYS>  [(Verified)Realtek Semiconductor Corp., 5.10.00.5970 built by: WinDDK, C:2005-11-22 15:44 M:2005-11-22 15:44]
[Creative AudioPCI (ES1371,ES1373) (WDM) / es1371][Stopped/Manual Start]
    <system32\drivers\es1371mp.sys>  [(Verified)Creative Technology Ltd., 5.1.2501.0 built by: WinDDK, C:2006-08-18 20:27 M:2001-08-17 13:19]
[HookCont / HookCont][Running/System Start]
    <\SystemRoot\system32\drivers\HookCont.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7, C:2000-05-28 23:38 M:2008-07-28 16:30]
[HookNtos / HookNtos][Running/System Start]
    <\SystemRoot\system32\drivers\HookNtos.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 52, C:2000-05-28 23:38 M:2008-10-23 18:21]
[HookReg / HookReg][Running/System Start]
    <\SystemRoot\system32\drivers\HookReg.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29, C:2000-05-28 23:38 M:2008-11-04 21:23]
[HookSys / HookSys][Running/System Start]
    <\SystemRoot\system32\drivers\HookSys.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55, C:2000-05-28 23:38 M:2008-08-27 18:14]
[HookUrl / HookUrl][Running/Auto Start]
    <\??\D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\HookUrl.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.13, C:2000-05-28 21:45 M:2008-10-20 16:02]
[HSFHWBS2 / HSFHWBS2][Running/Manual Start]
    <system32\DRIVERS\HSFBS2S2.sys>  [(Verified)Conexant Systems, Inc., 7.12.09, C:2008-03-02 18:23 M:2004-08-03 23:41]
[HSF_DP / HSF_DP][Running/Manual Start]
    <system32\DRIVERS\HSFDPSP2.sys>  [(Verified)Conexant Systems, Inc., 7.12.09, C:2008-03-02 18:23 M:2004-08-03 23:41]
[mdmxsdk / mdmxsdk][Running/Auto Start]
    <system32\DRIVERS\mdmxsdk.sys>  [(Verified)Conexant, 1.0.2.006, C:2008-03-02 18:23 M:2004-08-03 23:41]
[MSJDrvr / MSJDrvr][Running/System Start]
    <system32\drivers\MSJDrvr.sys>  [(Verified)N/A, C:2008-11-29 12:18 M:2003-03-31 13:31]
[Service for NVIDIA(R) nForce(TM) MIDI UART / nvmpu401][Running/Manual Start]
    <system32\drivers\nvmpu401.sys>  [(Verified)NVIDIA Corporation, 6.14.0460.0 built by: NVIDIA, C:2005-03-10 22:48 M:2005-03-10 22:48]
[AMD PCNET Compatable Adapter Driver / PCnet][Stopped/Manual Start]
    <system32\DRIVERS\pcntpci5.sys>  [(Verified)AMD Inc., 4.38.00 built by: WinDDK, C:2006-08-18 20:27 M:2001-08-17 13:11]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2004-08-17 05:00 M:2004-08-17 05:00]
[Rising  Rfwbase Driver / RfwBase][Running/Auto Start]
    <System32\DRIVERS\rfwbase.SYS>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.10, C:2000-05-28 22:45 M:2008-07-29 18:02]
[RsFwDrv / RsFwDrv][Running/System Start]
    <\??\D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RsFwDrv.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.35, C:2000-05-28 21:45 M:2008-10-20 16:02]
[RsNTGDI / RsNTGDI][Running/Boot Start]
    <system32\Drivers\RsNTGdi.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 3, C:2000-05-28 23:37 M:2008-07-28 16:34]
[Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver / RTL8023xp][Running/Manual Start]
    <system32\DRIVERS\Rtlnicxp.sys>  [(Verified)Realtek Semiconductor Corporation                           , 5.620.1202.2004 built by: WinDDK, C:2008-03-02 18:23 M:2005-03-10 22:48]
[Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys>  [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086, C:2004-08-17 05:00 M:2007-11-13 19:25]
[winachsf / winachsf][Running/Manual Start]
    <system32\DRIVERS\HSFCXTS2.sys>  [(Verified)Conexant Systems, Inc., 7.12.09 built by: WinDDK, C:2008-03-02 18:23 M:2004-08-03 23:41]


========================================
进程

[PID: 452 / SYSTEM]   \SystemRoot\System32\smss.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:14]

[PID: 524 / SYSTEM]   \??\C:\WINDOWS\system32\csrss.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:13]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 548 / SYSTEM]   \??\C:\WINDOWS\system32\winlogon.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 592 / SYSTEM]   C:\WINDOWS\system32\services.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 604 / SYSTEM]   C:\WINDOWS\system32\lsass.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 764 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 820 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 900 / SYSTEM]   D:\新建文件夹\新建文件夹\Rising\Rav\CCenter.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.33, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 916 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹\Rising\Rav\RavScrCh.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2000-05-28 20:47 M:2008-07-28 16:30]

[PID: 956 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 1008 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 1284 / Masato]   C:\WINDOWS\Explorer.EXE   [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2004-08-17 05:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    C:\Program Files\WinRAR\rarext.dll  [N/A, C:2008-03-02 18:31 M:2007-03-02 15:42]
    C:\WINDOWS\system32\RavExt.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2000-05-28 21:47 M:2008-07-28 16:29]
    D:\新建文件夹\新建文件夹\Rising\Rav\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 22:37 M:2008-07-28 16:31]
    C:\WINDOWS\system32\LgdGuard.dll  [N/A, C:2008-05-29 07:32 M:2003-04-04 15:33]
    D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\TDAtOnce_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-08-27 20:05 M:2008-06-13 09:43]
    D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-08-27 20:05 M:2008-06-13 09:43]
    D:\新建文件夹 (2)\新建文件夹[迅雷]\Components\ResWorker\DsBho_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-08-27 20:05 M:2008-11-13 10:54]
    D:\新建文件夹 (2)\新建文件夹[迅雷]\Components\ResWorker\DataProcessor_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-08-27 20:05 M:2008-11-13 10:54]

[PID: 1312 / SYSTEM]   D:\新建文件夹\新建文件夹\RISING\RAV\ravmond.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.80, C:2000-05-28 22:38 M:2008-07-28 16:29]
    D:\新建文件夹\新建文件夹\RISING\RAV\BWList.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.5, C:2000-05-28 22:37 M:2008-07-28 16:31]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2000-05-28 22:45 M:2000-05-28 22:12]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 11:31 M:2004-04-05 11:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\RsLog.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.36, C:2000-05-28 22:37 M:2008-07-26 22:36]
    D:\新建文件夹\新建文件夹\RISING\RAV\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\MonRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.29, C:2000-05-28 22:38 M:2008-07-28 16:29]
    D:\新建文件夹\新建文件夹\RISING\RAV\Hooksys.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12, C:2000-05-28 22:38 M:2008-07-28 16:29]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹\RISING\RAV\HookReg.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6, C:2000-05-28 22:38 M:2008-07-28 16:30]
    D:\新建文件夹\新建文件夹\RISING\RAV\HookNtos.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5, C:2000-05-28 22:38 M:2008-07-28 16:30]
    D:\新建文件夹\新建文件夹\RISING\RAV\rswalmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 24, C:2000-05-28 22:38 M:2008-07-28 16:30]
    D:\新建文件夹\新建文件夹\RISING\RAV\recomp.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41, C:2000-05-28 22:37 M:2008-08-20 18:59]
    D:\新建文件夹\新建文件夹\RISING\RAV\refs.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\ffr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 22:37 M:2008-09-26 16:25]
    D:\新建文件夹\新建文件夹\Rising\Rav\RsStore.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.9, C:2000-05-28 22:38 M:2008-07-28 16:36]
    D:\新建文件夹\新建文件夹\RISING\RAV\HookCont.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3, C:2000-05-28 22:38 M:2008-07-28 16:30]
    D:\新建文件夹\新建文件夹\Rising\Rav\fakescan.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.14, C:2000-05-28 22:37 M:2008-07-28 16:37]
    D:\新建文件夹\新建文件夹\Rising\Rav\Scanner.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.39, C:2000-05-28 22:37 M:2008-07-28 16:37]
    D:\新建文件夹\新建文件夹\RISING\RAV\viruslib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\relibldr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\HookWeb.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.3, C:2000-05-28 22:38 M:2008-07-28 16:30]
    D:\新建文件夹\新建文件夹\RISING\RAV\nvfile.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\scanexec.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22, C:2000-05-28 22:37 M:2008-08-27 18:14]
    D:\新建文件夹\新建文件夹\RISING\RAV\unexe.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 6, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\scanex.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 99, C:2000-05-28 22:37 M:2008-11-19 16:11]
    D:\新建文件夹\新建文件夹\RISING\RAV\pearc.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 8, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\extfile.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 32, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\scanpack.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\revm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\urutils.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\ur000.dat  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22, C:2000-05-28 22:37 M:2008-10-09 18:02]
    D:\新建文件夹\新建文件夹\RISING\RAV\scansct.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11, C:2000-05-28 22:37 M:2008-09-02 21:03]
    D:\新建文件夹\新建文件夹\RISING\RAV\extole.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 13, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\extmail.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\scriptci.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 4, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\ur001.dat  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2000-05-28 22:37 M:2008-10-09 18:02]

[PID: 1320 / SYSTEM]   D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\rfwsrv.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.77, C:2000-05-28 20:51 M:2008-10-15 19:03]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2000-05-28 22:45 M:2000-05-28 22:12]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2000-05-28 20:51 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2000-05-28 20:51 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RfwRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.17, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\rfwlog.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.16, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\Rfwdrv.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.50, C:2000-05-28 21:45 M:2008-10-27 20:23]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_ctrl.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.0, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\unvdet.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.8, C:2000-05-28 21:45 M:2008-07-30 19:03]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\mPorts.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.6, C:2000-05-28 21:45 M:2008-07-29 18:02]

[PID: 1404 / SYSTEM]   D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\rfwProxy.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.37, C:2000-05-28 20:51 M:2008-07-29 18:02]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2000-05-28 22:45 M:2000-05-28 22:12]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RfwRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.17, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\urlrule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1.0.0.15, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\MonMid.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.6, C:2000-05-28 21:45 M:2008-07-29 18:02]

[PID: 1604 / SYSTEM]   D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\rfwstub.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.12, C:2000-05-28 21:45 M:2008-07-30 19:03]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 1816 / SYSTEM]   D:\新建文件夹\新建文件夹\RISING\RAV\RavStub.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.10, C:2000-05-28 22:38 M:2008-07-28 16:29]
    D:\新建文件夹\新建文件夹\RISING\RAV\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 1920 / Masato]   D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RfwMain.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.1.70, C:2000-05-28 21:45 M:2008-07-25 20:02]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2000-05-28 22:45 M:2000-05-28 22:12]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 11:31 M:2004-04-05 11:31]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RsGuiLib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2000-05-28 21:45 M:2008-07-30 19:03]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2000-05-28 20:51 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2000-05-28 20:51 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RfwCtrl.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RsXML.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2000-05-28 21:45 M:2008-07-29 18:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\PngDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2000-05-28 21:45 M:2008-07-30 19:03]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\RfwRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.17, C:2000-05-28 21:45 M:2008-07-29 18:02]

[PID: 2004 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 05:00 M:2008-04-13 19:14]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 2072 / Masato]   D:\新建文件夹\新建文件夹\RISING\RAV\RavMon.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.01.27, C:2000-05-28 22:38 M:2008-08-27 18:14]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2000-05-28 22:45 M:2000-05-28 22:12]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 11:31 M:2004-04-05 11:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\recomp.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41, C:2000-05-28 22:37 M:2008-08-20 18:59]
    D:\新建文件夹\新建文件夹\RISING\RAV\refs.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\viruslib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\relibldr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 22:37 M:2008-07-28 16:33]
    D:\新建文件夹\新建文件夹\RISING\RAV\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\RISING\RAV\MonRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.29, C:2000-05-28 22:38 M:2008-07-28 16:29]
    D:\新建文件夹\新建文件夹\RISING\RAV\PngDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2000-05-28 22:37 M:2008-07-26 22:35]
    D:\新建文件夹\新建文件夹\RISING\RAV\Rsguilib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2000-05-28 22:37 M:2008-07-26 22:35]
    D:\新建文件夹\新建文件夹\RISING\RAV\RsXML.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2000-05-28 22:37 M:2008-07-28 16:31]

[PID: 2184 / LOCAL SERVICE]   C:\WINDOWS\System32\alg.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2004-08-17 05:00 M:2008-04-13 19:13]
    C:\WINDOWS\System32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]

[PID: 2648 / Masato]   C:\WINDOWS\SOUNDMAN.EXE   [(Verified)Realtek Semiconductor Corp., 5, 1, 0, 48, C:2005-11-11 15:07 M:2005-11-11 15:07]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 2840 / Masato]   D:\新建文件夹\新建文件夹\Rising\Rav\RavTask.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.24, C:2000-05-28 22:37 M:2008-07-26 22:35]
    D:\新建文件夹\新建文件夹\Rising\Rav\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\Rising\Rav\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\Rising\Rav\RSCOMMON.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\Rising\Rav\RSAPPMGR.DLL  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2000-05-28 22:37 M:2008-07-28 16:31]
    D:\新建文件夹\新建文件夹\Rising\Rav\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2000-05-28 22:37 M:2008-07-28 16:31]

[PID: 2888 / Masato]   C:\Program Files\Rising\AntiSpyware\rstray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.16, C:2008-08-07 19:24 M:2008-09-11 20:23]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\rsmginfo.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 8, C:2008-08-07 19:24 M:2008-08-07 19:23]
    C:\Program Files\Rising\AntiSpyware\RsXML.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2000-05-28 21:56 M:2008-08-07 19:22]
    C:\Program Files\Rising\AntiSpyware\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2000-05-28 21:56 M:2008-08-07 19:21]
    C:\Program Files\Rising\AntiSpyware\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2000-05-28 21:56 M:2008-08-07 19:21]
    C:\Program Files\Rising\AntiSpyware\ComServ.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.31, C:2008-08-07 19:23 M:2008-08-07 19:20]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    C:\Program Files\Rising\AntiSpyware\rscommon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.1.1, C:2008-08-07 19:24 M:2008-08-07 19:21]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\pngdll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2008-08-07 19:24 M:2008-08-07 19:21]
    C:\Program Files\Rising\AntiSpyware\runiep.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.41, C:2008-08-07 19:24 M:2008-11-04 18:19]
    C:\Program Files\Rising\AntiSpyware\NComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.6, C:2000-05-28 21:56 M:2008-08-07 19:21]
    D:\新建文件夹\新建文件夹\Rising\Rav\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2000-05-28 22:37 M:2008-07-28 16:31]
    C:\Program Files\Rising\AntiSpyware\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-10-06 23:43 M:2008-10-06 23:43]
    C:\WINDOWS\system32\RavExt.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2000-05-28 21:47 M:2008-07-28 16:29]

[PID: 3092 / Masato]   C:\Program Files\Lenovo\幸福一键通\Kbdriver.exe   [N/A, C:2008-11-29 12:18 M:2003-05-14 16:24]
    C:\Program Files\Lenovo\幸福一键通\lxkeyled.dll  [N/A, C:2008-11-29 12:18 M:2003-03-31 09:28]
    C:\Program Files\Lenovo\幸福一键通\VolumeOsd.dll  [N/A, C:2008-11-29 12:18 M:2003-04-02 15:40]
    C:\Program Files\Lenovo\幸福一键通\ScrOSD32.dll  [N/A, C:2008-11-29 12:18 M:2003-04-03 10:29]
    C:\Program Files\Lenovo\幸福一键通\tgekb.dll  [N/A, C:2008-11-29 12:18 M:2003-03-16 13:07]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    C:\Program Files\Lenovo\幸福一键通\XPNyGet.dll  [N/A, C:2008-11-29 12:18 M:2002-06-20 08:59]

[PID: 3152 / Masato]   C:\Program Files\Lenovo\幸福一键通\FlyShuttle.exe   [版权所有 (C) 2003, 1, 0, 0, 1, C:2008-11-29 12:18 M:2003-04-29 10:23]
    C:\Program Files\Lenovo\幸福一键通\CLxUI.dll  [联想（北京）有限公司, 1, 0, 0, 1, C:2008-11-29 12:18 M:2003-04-03 10:29]
    C:\Program Files\Lenovo\幸福一键通\SKOSD.DLL  [Silitek Corp., 1, 0, 6, 0, C:2008-11-29 12:18 M:2003-04-03 10:29]
    C:\Program Files\Lenovo\幸福一键通\SKUtil.DLL  [Silitek Corp., 1, 0, 9, 0, C:2008-11-29 12:18 M:2003-04-03 10:30]
    C:\Program Files\Lenovo\幸福一键通\VolumeOsd.dll  [N/A, C:2008-11-29 12:18 M:2003-04-02 15:40]
    C:\Program Files\Lenovo\幸福一键通\ScrOSD32.dll  [N/A, C:2008-11-29 12:18 M:2003-04-03 10:29]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 3320 / Masato]   C:\WINDOWS\system32\ctfmon.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2004-08-17 05:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 2808 / Masato]   C:\Program Files\Rising\AntiSpyware\knownsvr.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.12, C:2008-08-07 19:24 M:2008-10-20 16:03]
    C:\Program Files\Rising\AntiSpyware\NComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.6, C:2000-05-28 21:56 M:2008-08-07 19:21]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]

[PID: 3736 / Masato]   d:\My Documents\arswp2\ArSwp.exe   [(Verified)ArSwp.com, 2, 8, 2, 1115, C:2008-11-29 20:01 M:2008-11-15 11:58]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    d:\My Documents\arswp2\plugin\ArFix.dll  [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2008-11-29 20:01 M:2007-11-28 15:19]

[PID: 3876 / SYSTEM]   C:\Program Files\Kingsoft\KAC\Service\kaccore.exe   [(Verified)Kingsoft Corporation, 2008,11,03,330, C:2008-11-03 09:49 M:2008-11-03 09:49]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    C:\Program Files\Kingsoft\KAC\Service\corehelper.dll  [(Verified)Kingsoft Corporation, 2008,10,20,303, C:2008-10-20 18:35 M:2008-10-20 18:35]
    C:\Program Files\Kingsoft Antispy\kutltproxy.dll  [Kingsoft Corporation, 2008,11,11,68, C:2008-11-11 10:57 M:2008-11-11 10:57]

[PID: 2828 / Masato]   C:\Program Files\Windows Media Player\wmplayer.exe   [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2006-08-18 20:31 M:2006-11-02 23:06]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹\Rising\Rav\RavScrCh.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2000-05-28 20:47 M:2008-07-28 16:30]
    C:\WINDOWS\system32\msdmo.dll  [(Verified)N/A, C:2004-08-17 05:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\l3codeca.acm  [(Verified)Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305, C:2004-08-17 05:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\ffdshow.ax  [Copyright ? 2002-2005 Milan ?utka, 1.0.2.2028, C:2006-05-26 22:29 M:2006-05-26 22:29]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-04-05 11:31 M:2004-04-05 11:31]
    C:\Program Files\Ringz Studio\Storm Codec\Codecs\VSFilter.dll  [Gabest, 1, 0, 1, 3, C:2005-12-03 15:12 M:2005-12-03 15:12]

[PID: 3352 / Masato]   C:\Program Files\Kingsoft Antispy\KASMain.EXE   [(Verified)Kingsoft Corporation, 2008,11,21,104, C:2008-11-18 17:48 M:2008-11-29 21:53]
    C:\Program Files\Kingsoft Antispy\MFC80U.DLL  [Microsoft Corporation, 8.00.50727.762, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\MSVCR80.dll  [Microsoft Corporation, 8.00.50727.762, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\kis.dll  [(Verified)Kingsoft Corporation, 2008,08,12,55, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\MSVCP80.dll  [Microsoft Corporation, 8.00.50727.762, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    C:\Program Files\Kingsoft Antispy\KAVDevC.dll  [(Verified)Kingsoft Corporation, 2008,04,28,112, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\infoc.dll  [(Verified)Kingsoft Corporation, 1, 0, 0, 96, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\KAO\KAOExtend.dll  [(Verified)Copyright (C) 1998-2008 Kingsoft Corporation, 2008,06,16,525, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\KAEAutorunEx.DLL  [(Verified)Kingsoft Corporation, 2008,05,15,287, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\RICHED20.DLL  [Microsoft Corporation, 5.30.23.1221, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\kacc.dll  [(Verified)Kingsoft Corporation, 1, 0, 0, 1, C:2008-10-30 11:37 M:2008-10-30 11:37]
    D:\新建文件夹\新建文件夹\Rising\Rav\RavScrCh.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2000-05-28 20:47 M:2008-07-28 16:30]
    C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx  [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 12:16 M:2008-10-05 12:16]
    C:\WINDOWS\system32\RavExt.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2000-05-28 21:47 M:2008-07-28 16:29]
    C:\Program Files\Kingsoft Antispy\KasCommon.dll  [(Verified)Kingsoft Corporation, 2008,05,27,110, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\KAVRep.DLL  [(Verified)Kingsoft Corporation, 2008,04,30,183, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\KAS\KASLua.dll  [(Verified)Kingsoft Corporation, 2008,11,14,161, C:2008-11-29 21:53 M:2008-11-29 21:53]
    C:\Program Files\Kingsoft Antispy\Plugins\systemrepair.dll  [(Verified)Kingsoft Corporation, 2008,11,03,36, C:2008-11-03 13:14 M:2008-11-03 13:14]

[PID: 3952 / Masato]   C:\Program Files\Kingsoft Antispy\monitor\kastray.exe   [(Verified)Kingsoft Corporation, 2008,11,14,88, C:2008-11-14 13:16 M:2008-11-14 13:16]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    C:\Program Files\Kingsoft Antispy\monitor\kaspop.dll  [(Verified)Kingsoft Corporation, 2008,11,14,93, C:2008-11-14 18:35 M:2008-11-14 18:35]

[PID: 2272 / Masato]   C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe   [(Verified)Microsoft Corporation, 4.200.520.1, C:2007-09-20 10:35 M:2007-09-20 10:35]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]

[PID: 2104 / Masato]   C:\Program Files\Internet Explorer\iexplore.exe   [(Verified)Microsoft Corporation, 7.00.6000.16735 (vista_gdr.080820-1506), C:2006-08-18 20:31 M:2008-08-23 14:56]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    C:\Program Files\Windows Live Toolbar\zh-cn\mtbres.dll.mui  [Microsoft Corporation, 03.00.0001.2012, C:2007-10-19 11:55 M:2007-10-19 11:55]
    C:\Program Files\Windows Live Toolbar\mtbres.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\Tem.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\zh-cn\searchboxRes.dll.mui  [Microsoft Corporation, 03.00.0001.2012, C:2007-10-19 11:55 M:2007-10-19 11:55]
    C:\Program Files\Windows Live Toolbar\searchboxRes.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\Components\zh-cn\hvres.dll.mui  [Microsoft Corporation, 03.00.0001.2012, C:2007-10-19 12:07 M:2007-10-19 12:07]
    C:\Program Files\Windows Live Toolbar\Components\hvres.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\zh-cn\CMRes.dll.mui  [Microsoft Corporation, 03.00.0001.2032, C:2007-10-19 11:55 M:2007-10-19 11:55]
    C:\Program Files\Windows Live Toolbar\CMRes.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\zh-cn\msn_slrs.DLL.mui  [Microsoft Corporation, 03.00.0001.2012, C:2007-10-19 11:55 M:2007-10-19 11:55]
    C:\Program Files\Windows Live Toolbar\msn_slrs.DLL  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\Components\zh-cn\MSNExtensionRes.dll.mui  [Microsoft Corporation, 03.00.0001.2012, C:2007-10-19 13:06 M:2007-10-19 13:06]
    C:\Program Files\Windows Live Toolbar\Components\MSNExtensionRes.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:23 M:2007-10-19 11:23]
    C:\Program Files\Windows Live Toolbar\Components\zh-cn\SmaMenRes.dll.mui  [Microsoft Corporation。, 03.00.0001.2012, C:2007-10-19 13:21 M:2007-10-19 13:21]
    C:\Program Files\Windows Live Toolbar\Components\SmaMenRes.dll  [Microsoft Corporation., 03.01.0000.0146, C:2007-10-19 11:23 M:2007-10-19 11:23]
    C:\Program Files\Windows Live Toolbar\zh-cn\CBRes.dll.mui  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:55 M:2007-10-19 11:55]
    C:\Program Files\Windows Live Toolbar\CBRes.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\TDAtOnce_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-08-27 20:05 M:2008-06-13 09:43]
    D:\新建文件夹 (2)\新建文件夹[迅雷]\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-08-27 20:05 M:2008-06-13 09:43]
    D:\新建文件夹 (2)\新建文件夹[迅雷]\Components\ResWorker\DsBho_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-08-27 20:05 M:2008-11-13 10:54]
    D:\新建文件夹 (2)\新建文件夹[迅雷]\Components\ResWorker\DataProcessor_00.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-08-27 20:05 M:2008-11-13 10:54]
    C:\WINDOWS\system32\urlFilter.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15, C:2008-08-07 19:24 M:2008-08-07 19:22]
    C:\Program Files\Rising\AntiSpyware\UrlRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1.0.0.15, C:2008-08-07 19:24 M:2008-08-07 19:22]
    C:\Program Files\Windows Live Toolbar\searchbox.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\stmain.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\cm.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\msn_slps.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\Components\WLExtension.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:23 M:2007-10-19 11:23]
    C:\Program Files\Windows Live Toolbar\Components\smamen.dll  [Microsoft Corporation., 03.01.0000.0146, C:2007-10-19 11:23 M:2007-10-19 11:23]
    C:\Program Files\Windows Live Toolbar\CB.dll  [Microsoft Corporation, 03.01.0000.0146, C:2007-10-19 11:18 M:2007-10-19 11:18]
    C:\Program Files\Windows Live Toolbar\Components\COMCRF\COMCRF.dll  [Microsoft Corporation., 03.01.0000.0146, C:2007-10-19 11:23 M:2007-10-19 11:23]
    D:\新建文件夹\新建文件夹\Rising\Rav\RavScrCh.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2000-05-28 20:47 M:2008-07-28 16:30]
    C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx  [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 12:16 M:2008-10-05 12:16]

[PID: 3332 / Masato]   C:\Program Files\Kingsoft Antispy\kbox.exe   [(Verified)Kingsoft Corporation, 2008,11,17,67, C:2008-11-18 11:13 M:2008-11-18 11:13]
    C:\Program Files\Kingsoft Antispy\MFC80U.DLL  [Microsoft Corporation, 8.00.50727.762, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\MSVCR80.dll  [Microsoft Corporation, 8.00.50727.762, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\Program Files\Kingsoft Antispy\MSVCP80.dll  [Microsoft Corporation, 8.00.50727.762, C:2008-10-30 11:47 M:2008-10-30 11:47]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    C:\Program Files\Kingsoft\KAC\Service\kacctl.dll  [(Verified)Kingsoft Corporation, 2008,10,15,297, C:2008-10-15 17:27 M:2008-10-15 17:27]
    D:\新建文件夹\新建文件夹\Rising\Rav\RavScrCh.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2000-05-28 20:47 M:2008-07-28 16:30]

[PID: 2836 / Masato]   C:\Program Files\Ringz Studio\Storm Codec\mplayerc.exe   [Gabest, 6, 4, 9, 0, C:2006-09-15 03:11 M:2006-09-15 03:11]
    C:\Program Files\Ringz Studio\Storm Codec\stormupd.dll  [N/A, C:2007-01-12 18:24 M:2007-01-12 18:24]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-08-07 19:24 M:2008-11-07 17:30]
    C:\Program Files\Rising\AntiSpyware\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-08-07 19:23 M:2008-09-29 03:05]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-08-07 19:24 M:2008-08-29 00:17]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\ijt_base.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2000-05-28 21:45 M:2008-07-25 20:02]
    D:\新建文件夹\新建文件夹 (2)\Rising\Rfw\olemon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2000-05-28 21:45 M:2008-07-25 20:02]
    C:\WINDOWS\system32\msdmo.dll  [(Verified)N/A, C:2004-08-17 05:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\tssoft32.acm  [(Verified)DSP GROUP, INC., 1.01, C:2004-08-17 05:00 M:2004-08-17 05:00]
    C:\WINDOWS\system32\tsd32.dll  [(Verified)N/A, C:2004-08-17 05:00 M:2004-08-17 05:00]
    C:\WINDOWS\system32\sl_anet.acm  [(Verified)Sipro Lab Telecom Inc., 3.02, C:2004-08-17 05:00 M:2008-04-13 19:13]
    C:\WINDOWS\system32\iac25_32.ax  [(Verified)Intel Corporation, 2.05.53, C:2004-08-17 05:00 M:2008-04-13 19:14]
    C:\WINDOWS\system32\l3codeca.acm  [(Verified)Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305, C:2004-08-17 05:00 M:2008-04-13 19:12]
    C:\WINDOWS\system32\vorbis.acm  [HMS http://hp.vector.co.jp/authors/VA012897/, 0, 0, 3, 6, C:2002-07-08 01:14 M:2002-07-08 01:14]
    C:\WINDOWS\system32\vct3216.acm  [Voxware, Inc., 1.6.0.17, C:1999-10-30 03:36 M:1999-10-30 03:36]
    C:\WINDOWS\system32\vct3216.dll  [Voxware, Inc., 1.6.0.12, C:1999-10-30 03:36 M:1999-10-30 03:36]
    C:\WINDOWS\system32\msms001.vwp  [Voxware, Inc., 2.0.2.61, C:1999-04-15 14:10 M:1999-04-15 14:10]
    C:\WINDOWS\system32\mvoice.vwp  [Voxware, Inc., 2.0.0.12.01, C:1999-10-30 03:36 M:1999-10-30 03:36]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll  [Microsoft Corporation, 8.00.50727.163, C:2006-06-05 14:14 M:2006-06-05 14:14]


========================================
文件关联



========================================
AutoRun.INF



========================================
Winsock提供者



========================================
HOSTS

    127.0.0.1 localhost


[/CODE]