[CODE] 2008-12-14,21:07:16 SysLog Scanner 1.0 - build 20080726 Arswp (http://www.arswp.com) Windows XP Professional Service Pack 2 (build 2600) - Administrators ======================================== 注册项 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] [鱼鱼软件, 2.2.0.1018, C:2008-10-28 21:33 M:2008-10-29 22:09] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <"d:\Program Files\Rising\Rfw\rfwmain.exe" -Startup> [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.1.70, C:2008-11-16 15:08 M:2008-11-16 14:59] <360Safetray> [(Verified)奇虎网, 5, 0, 0, 1002, C:2008-08-25 14:12 M:2008-08-25 14:12] <360Safebox><"C:\Program Files\360Safebox\safeboxTray.exe" /r> [(Verified)360安全中心, 2, 4, 2, 1002, C:2008-12-01 10:30 M:2008-12-01 10:30] <"d:\Program Files\Rising\Rav\RavTask.exe" -system> [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.24, C:2038-11-16 15:37 M:2038-11-16 15:36] <360Antiarp> [(Verified)360安全中心, 2, 0, 0, 1008, C:2008-04-11 20:45 M:2008-04-11 20:45] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载] <> [N/A, C:2008-08-15 16:01 M:2008-07-28 15:43] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接] <> [N/A, C:2008-08-15 16:01 M:2007-12-10 14:17] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] [(Verified)ATI Technologies Inc., 6.14.10.4176, C:2007-10-11 21:56 M:2007-10-11 21:56] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00|(Verified)Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00|(Verified)N/A, C:2007-07-10 12:00 M:2007-07-10 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00|(Verified)Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00|(Verified)N/A, C:2007-07-10 12:00 M:2007-07-10 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00|(Verified)Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00|(Verified)N/A, C:2008-11-16 12:21 M:2005-01-28 15:25] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] <> [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00|Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}] <启动迅雷5> [(Verified)Thunder Networking Technologies,LTD, 5, 6, 8, 19, C:2008-08-15 16:01 M:2008-10-27 14:18] ======================================== 启动项 ======================================== 计划任务 ======================================== 组件 Shell Extension [Display Panning CPL Extension] {42071714-76d4-11d1-8b24-00a0c9068ff3} [] [HyperTerminal Icon Ext] {88895560-9AA2-1069-930E-00AA0030EBC8} [(Verified)Hilgraeve, Inc., 5.1.2600.0, C:2008-11-16 12:16 M:2007-07-10 12:00] [ShellLink for Application References] {e82a2d71-5b2f-43a0-97b8-81be15854de8} [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28] [Shell Icon Handler for Application References] {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28] [Catalyst Context Menu extension] {5E2121EE-0300-11D4-8D3B-444553540000} [Copyright 2004, 2, 0, 0, 0, C:2007-03-02 10:44 M:2007-03-02 10:44] [RISING] {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2038-11-16 15:37 M:2038-11-16 15:35] [WinRAR shell extension] {B41DB860-8EE4-11D2-9906-E49FADC173CA} [N/A, C:2008-10-24 21:41 M:2008-09-30 21:14] [Shell Extensions for RealOne Player] {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} [(Verified)RealNetworks, Inc., 1.0.2.67, C:2008-11-29 17:11 M:2008-11-29 17:11] [NeroCoverEd Live Icons] {97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2} [(Verified)Nero AG, 3, 3, 3, 0, C:2008-06-08 09:34 M:2008-06-08 09:34] [NeroDigitalIconHandler] {B327765E-D724-4347-8B16-78AE18552FC3} [(Verified)Nero AG, 3, 1, 0, 13, C:2008-06-24 13:45 M:2008-06-24 13:45] [NeroDigitalPropSheetHandler] {7F1CF152-04F8-453A-B34C-E609530A9DC8} [(Verified)Nero AG, 3, 1, 0, 13, C:2008-06-24 13:45 M:2008-06-24 13:45] Protocols [Cor MIME Filter, CorFltr, CorFltr 1] {1E66F26B-79EE-11D2-8710-00C04F79ED0D} [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2007-04-13 03:21 M:2007-04-13 03:21] [] {BBCA9F81-8F4F-11D2-90FF-0080C83D3571} <> [] BrowserHelperObject [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2008-08-15 16:02 M:2008-09-19 16:44] [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] ActiveX Extension [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34, C:2008-08-15 16:02 M:2008-09-06 10:36] [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [(Verified)Thunder Networking Technologies,LTD, 6, 0, 4, 42, C:2008-08-15 16:02 M:2008-09-23 10:40] [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} [Xunlei Networking Technologies,LTD, 2, 1, 8, 90, C:2008-11-17 21:35 M:2008-10-27 14:17] [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [(Verified)Thunder Networking Technologies,LTD, 3, 1, 6, 81, C:2008-11-20 15:36 M:2008-11-25 11:16] [360SafeLive] {87515F61-A66C-4319-A0E0-D416CB8059E3} [(Verified)360.cn, 1, 0, 1, 1029, C:2008-11-25 09:42 M:2008-11-25 09:42] [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2008-08-15 16:02 M:2008-09-19 16:44] [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15, C:2008-11-16 14:44 M:2008-11-16 15:48] [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [(Verified)ShenZhen Thunder Networking Technologies Ltd., 2, 2, 5807, 96, C:2008-11-17 21:35 M:2008-10-23 16:36] [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 11:16 M:2008-10-05 11:16] [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [(Verified)Xunlei Networking Technologies,LTD, 2, 1, 5871, 225, C:2008-11-17 21:35 M:2008-10-27 14:10] Context Menu [Cover Designer] {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} [(Verified)Nero AG, 3, 3, 3, 0, C:2008-06-08 09:34 M:2008-06-08 09:34] [RisingRavExt] {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2038-11-16 15:37 M:2038-11-16 15:35] [WinRAR] {B41DB860-8EE4-11D2-9906-E49FADC173CA} [N/A, C:2008-10-24 21:41 M:2008-09-30 21:14] ======================================== 服务 [Intel(R) PROSet/Wireless Event Log / EvtEng][Running/Auto Start] [Intel Corporation, 11.1.0.4, C:2007-02-21 11:28 M:2007-02-21 11:28] [Lookout Citadel Server / LkCitadelServer][Stop Pending/Auto Start] [National Instruments, Inc., 4.5.2.0, C:2005-08-25 14:43 M:2005-08-25 14:43] [National Instruments PSP Server Locator / lkClassAds][Running/Auto Start] [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] [National Instruments Time Synchronization / lkTimeSync][Stop Pending/Auto Start] [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] [National Instruments Domain Service / NIDomainService][Stopped/Auto Start] <"D:\Program Files\National Instruments\Shared\Security\nidmsrv.exe"> [] [NI Service Locator / niSvcLoc][Stopped/Auto Start] [National Instruments Corp., 8, 0, 0, 3, C:2005-10-10 14:08 M:2005-10-10 14:08] [OsdService / OsdService][Stopped/Auto Start] [Copyright 2007, 1, 0, 0, 1, C:2007-09-03 17:01 M:2007-09-03 17:01] [PLFlash DeviceIoControl Service / PLFlash DeviceIoControl Service][Running/Auto Start] [Prolific Technology Inc., 1, 6, 0, 0, C:2006-12-19 10:30 M:2006-12-19 10:30] [Intel(R) PROSet/Wireless Registry Service / RegSrvc][Running/Auto Start] [Intel Corporation, 11.1.0.0 , C:2007-02-21 11:10 M:2007-02-21 11:10] [Intel(R) PROSet/Wireless Service / S24EventMonitor][Running/Auto Start] [Intel Corporation , 11, 1, 0, 9, C:2007-02-21 11:16 M:2007-02-21 11:16] [VMware Authorization Service / VMAuthdService][Running/Auto Start] [VMware, Inc., 5.5.3 build-34685, C:2006-11-13 13:00 M:2008-11-16 22:26] [Ati HotKey Poller / Ati HotKey Poller][Running/Auto Start] <%SystemRoot%\system32\Ati2evxx.exe> [(Verified)ATI Technologies Inc., 6.14.10.4178, C:2007-10-11 21:55 M:2007-10-11 21:55] [Nero BackItUp Scheduler 3 / Nero BackItUp Scheduler 3][Running/Auto Start] [(Verified)Nero AG, 3, 5, 3, 0, C:2008-06-08 09:31 M:2008-06-08 09:31] [NMIndexingService / NMIndexingService][Stopped/Manual Start] <"C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe"> [(Verified)Nero AG, 3.3.8.0, C:2008-06-24 16:05 M:2008-06-24 16:05] [Rising Proxy Service / RfwProxySrv][Stopped/Disabled] [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.37, C:2008-11-16 15:08 M:2008-11-16 15:00] [Rising Personal Firewall Service / RfwService][Running/Auto Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.77, C:2008-11-16 15:08 M:2008-11-16 14:59] [Rising Process Communication Center / RsCCenter][Running/Auto Start] <"d:\Program Files\Rising\Rav\CCenter.exe"> [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.33, C:2038-11-16 15:37 M:2038-11-16 15:36] [Rising RealTime Monitor / RsRavMon][Stopped/Auto Start] <"D:\PROGRAM FILES\RISING\RAV\Ravmond.exe"> [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.80, C:2038-11-16 15:37 M:2038-11-16 15:36] [VMware DHCP Service / VMnetDHCP][Running/Auto Start] [(Verified)VMware, Inc., 5.5.3 build-34685, C:2008-11-16 22:02 M:2006-11-13 13:00] [VMware Virtual Mount Manager Extended / vmount2][Running/Auto Start] <"C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe"> [(Verified)VMware, Inc., 5.5.3 build-34685, C:2006-11-13 12:43 M:2006-11-13 12:43] [VMware NAT Service / VMware NAT Service][Running/Auto Start] [(Verified)VMware, Inc., 5.5.3 build-34685, C:2008-11-16 22:02 M:2006-11-13 13:01] ======================================== 驱动 [AEGIS Protocol (IEEE 802.1x) v3.6.0.0 / AegisP][Running/Auto Start] [Meetinghouse Data Communications, 3.6.0.0, C:2008-11-16 13:01 M:2008-11-16 13:07] [CEBFilter / CEBFilter][Running/Manual Start] <\??\C:\Program Files\C&E\OSD\OsdService\cebuffer.sys> [Windows (R) Codename Longhorn DDK provider, 6.0.6000.16386 built by: WinDDK, C:2007-09-04 16:20 M:2007-09-04 16:20] [CEIO / CEIO][Running/Manual Start] <\??\C:\Program Files\C&E\OSD\OsdService\ceio.sys> [Windows (R) Codename Longhorn DDK provider, 6.0.6000.16386 built by: WinDDK, C:2007-08-31 16:18 M:2007-08-31 16:18] [cKBFilter / cKBFilter][Running/Manual Start] <\??\C:\Program Files\C&E\OSD\OsdService\kbfiltr.sys> [Windows (R) Codename Longhorn DDK provider, 6.0.6000.16386 built by: WinDDK, C:2007-08-31 14:22 M:2007-08-31 14:22] [FTCProtect / FTCProtect][Stopped/Manual Start] [] [NTGDT / NTGDT][Running/System Start] <\??\C:\WINDOWS\system32\Drivers\NTGDT.SYS> [N/A, C:2008-11-16 14:09 M:2008-11-16 14:09] [Srramdisk Driver / RRamdisk][Running/Boot Start] [gavotte, 1.0.2003.1209, C:2008-12-13 21:28 M:2003-12-09 10:04] [RsAntiSpyware / RsAntiSpyware][Running/Boot Start] [Beijing Rising Technology Co., Ltd., 3, 0, 0, 27, C:2008-11-16 14:08 M:2007-07-03 17:20] [Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter / RTLWUSB][Stopped/Manual Start] [Realtek Semiconductor Corporation , 5.1233.0623.2006 built by: WinDDK, C:2008-11-16 13:02 M:2006-06-23 17:54] [WLAN 传输 / s24trans][Running/Auto Start] [Intel Corporation, 11, 1, 0, 0, C:2007-02-21 11:16 M:2007-02-21 11:16] [sptd / sptd][Running/Boot Start] [N/A, C:2008-11-16 16:08 M:2008-11-16 16:08] [360AntiArp / 360AntiArp][Running/System Start] <\??\C:\WINDOWS\system32\drivers\360AntiArp.sys> [(Verified)360安全中心, 1, 0, 1, 1007, C:2008-04-09 16:33 M:2008-04-09 16:33] [ati2mtag / ati2mtag][Running/Manual Start] [(Verified)ATI Technologies Inc., 6.14.10.6727, C:2007-10-11 22:04 M:2007-10-11 22:04] [VMware hcmon / hcmon][Running/Auto Start] <\??\C:\WINDOWS\system32\Drivers\hcmon.sys> [(Verified)VMware, Inc., 5.5.3, C:2006-11-13 13:01 M:2006-11-13 13:01] [Microsoft 用于 High Definition Audio 的 UAA 总线驱动程序 / HDAudBus][Running/Manual Start] [(Verified)Windows (R) Server 2003 DDK provider, 5.10.01.5013 built by: WinDDK, C:2005-01-07 17:07 M:2005-01-07 17:07] [HookCont / HookCont][Running/System Start] <\SystemRoot\system32\drivers\HookCont.sys> [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7, C:2038-11-16 15:37 M:2038-11-16 15:36] [HookNtos / HookNtos][Running/System Start] <\SystemRoot\system32\drivers\HookNtos.sys> [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 52, C:2038-11-16 15:37 M:2008-10-23 19:16] [HookReg / HookReg][Running/System Start] <\SystemRoot\system32\drivers\HookReg.sys> [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29, C:2038-11-16 15:37 M:2038-11-16 15:36] [HookSys / HookSys][Running/System Start] <\SystemRoot\system32\drivers\HookSys.sys> [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55, C:2038-11-16 15:37 M:2038-11-16 15:35] [HookUrl / HookUrl][Running/Auto Start] <\??\d:\Program Files\Rising\Rfw\HookUrl.sys> [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.13, C:2008-11-16 15:08 M:2008-11-16 15:00] [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] [(Verified)Realtek Semiconductor Corp., 5.10.0.5464 built by: WinDDK, C:2008-11-16 12:51 M:2007-08-10 13:52] [DDK PACKET Protocol / Packet][Running/Manual Start] [(Verified)360安全中心, 1, 0, 1, 1001, C:2008-04-09 16:36 M:2008-04-09 16:36] [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2007-07-10 12:00 M:2007-07-10 12:00] [Rising Rfwbase Driver / RfwBase][Running/Auto Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.10, C:2008-11-16 15:08 M:2008-11-16 14:59] [RsFwDrv / RsFwDrv][Running/System Start] <\??\d:\Program Files\Rising\Rfw\RsFwDrv.sys> [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.35, C:2008-11-16 15:08 M:2008-11-16 14:59] [RsNTGDI / RsNTGDI][Running/Boot Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 3, C:2038-11-16 15:37 M:2038-11-16 15:36] [USB Mass Stroage Device / RTSTOR][Running/Manual Start] [(Verified)Realtek Semiconductor Corp., 3.0.0.8, C:2008-11-16 12:55 M:2007-09-18 15:08] [SafeBoxKrnl / SafeBoxKrnl][Running/System Start] <\??\C:\WINDOWS\system32\drivers\SafeBoxKrnl.sys> [(Verified)360安全中心, 2, 2, 2, 1008, C:2008-11-15 11:33 M:2008-11-15 11:33] [Secdrv / Secdrv][Stopped/Manual Start] [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086, C:2007-07-10 12:00 M:2007-11-13 18:25] [SiS191/SiS190 Ethernet Device NDIS 5.1 Driver / SiSGbeXP][Running/Manual Start] [(Verified)Silicon Integrated Systems Corp., 2.0.1039.1090 built by: WinDDK, C:2008-11-16 12:53 M:2007-10-15 12:00] [VMware Virtual Ethernet Adapter Driver / VMnetAdapter][Running/Manual Start] [(Verified)VMware, Inc., 4.0.0.0, C:2006-11-13 13:01 M:2006-11-13 13:01] [VMware Bridge Protocol / VMnetBridge][Running/Auto Start] [(Verified)VMware, Inc., 4.0.0.0, C:2006-11-13 13:01 M:2006-11-13 13:01] [VMware Network Application Interface / VMnetuserif][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\vmnetuserif.sys> [(Verified)VMware, Inc., 4.0.0.0, C:2008-11-16 22:02 M:2006-11-13 13:01] [VMware vmx86 / vmx86][Running/Auto Start] <\??\C:\WINDOWS\system32\Drivers\vmx86.sys> [(Verified)VMware, Inc., 5.5.3, C:2006-11-13 13:01 M:2006-11-13 13:01] [Vstor2 Virtual Storage Driver / vstor2][Running/Auto Start] <\??\C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vstor2.sys> [(Verified)VMware, Inc., 5.5.3 build-34685, C:2006-11-13 12:43 M:2006-11-13 12:43] ======================================== 进程 [PID: 588 / SYSTEM] \SystemRoot\System32\smss.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] [PID: 820 / SYSTEM] \??\C:\WINDOWS\system32\csrss.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 848 / SYSTEM] \??\C:\WINDOWS\system32\winlogon.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] C:\WINDOWS\system32\Ati2evxx.dll [(Verified)ATI Technologies Inc., 6.14.10.4176, C:2007-10-11 21:56 M:2007-10-11 21:56] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 892 / SYSTEM] C:\WINDOWS\system32\services.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2008-12-13 15:57] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 904 / SYSTEM] C:\WINDOWS\system32\lsass.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2008-12-13 15:57] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1076 / SYSTEM] C:\WINDOWS\system32\Ati2evxx.exe [(Verified)ATI Technologies Inc., 6.14.10.4178, C:2007-10-11 21:55 M:2007-10-11 21:55] C:\WINDOWS\system32\Ati2edxx.dll [(Verified)ATI Technologies, Inc., 6, 14, 10, 2512, C:2007-10-11 21:57 M:2007-10-11 21:57] C:\WINDOWS\system32\atipdlxx.dll [(Verified)ATI Technologies, Inc., 6, 14, 10, 2524, C:2007-10-11 21:57 M:2007-10-11 21:57] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1092 / SYSTEM] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1152 / NETWORK SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1828 / SYSTEM] d:\Program Files\Rising\Rav\CCenter.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.33, C:2038-11-16 15:37 M:2038-11-16 15:36] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1844 / SYSTEM] C:\WINDOWS\System32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1912 / SYSTEM] C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [Intel Corporation , 11, 1, 0, 9, C:2007-02-21 11:16 M:2007-02-21 11:16] C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll [The OpenSSL Project, http://www.openssl.org/, 0.9.8, C:2006-03-08 09:21 M:2006-03-08 09:21] C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL [Intel Corporation, 11, 1, 0, 4, C:2007-02-21 11:10 M:2007-02-21 11:10] C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll [Intel Corporation, 11, 1, 0, 1, C:2007-02-21 11:10 M:2007-02-21 11:10] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] C:\Program Files\Intel\Wireless\Bin\IntStngs.dll [Intel Corporation, 11.1.0.2 , C:2007-02-21 11:11 M:2007-02-21 11:11] C:\Program Files\Intel\Wireless\Bin\IWMSPROV.DLL [N/A, C:2007-02-21 11:13 M:2007-02-21 11:13] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 168 / NETWORK SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 432 / LOCAL SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 484 / SYSTEM] D:\PROGRAM FILES\RISING\RAV\ravmond.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.80, C:2038-11-16 15:37 M:2038-11-16 15:36] D:\PROGRAM FILES\RISING\RAV\BWList.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.5, C:2038-11-16 15:37 M:2038-11-16 15:35] C:\WINDOWS\system32\MFC71.DLL [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 21:20 M:2003-03-18 21:20] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14] D:\PROGRAM FILES\RISING\RAV\RSAPPMGR.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\CfgDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\RsLog.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.36, C:2038-11-16 15:37 M:2038-11-16 15:36] D:\PROGRAM FILES\RISING\RAV\ProcCom.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-15 15:50 M:2008-08-15 15:49] D:\PROGRAM FILES\RISING\RAV\RsCommX2.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-15 15:50 M:2008-08-15 15:49] D:\PROGRAM FILES\RISING\RAV\MonRule.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.29, C:2008-08-15 15:50 M:2008-08-15 15:37] D:\PROGRAM FILES\RISING\RAV\Hooksys.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12, C:2038-11-16 15:37 M:2038-11-16 15:35] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] D:\PROGRAM FILES\RISING\RAV\HookReg.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6, C:2008-08-15 15:50 M:2008-08-15 15:38] D:\PROGRAM FILES\RISING\RAV\HookNtos.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5, C:2008-08-15 15:50 M:2008-08-15 15:38] D:\PROGRAM FILES\RISING\RAV\rswalmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 24, C:2008-08-15 15:50 M:2008-08-15 15:38] D:\PROGRAM FILES\RISING\RAV\recomp.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41, C:2008-08-15 15:50 M:2008-08-20 15:58] D:\PROGRAM FILES\RISING\RAV\refs.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18, C:2008-08-15 15:50 M:2008-08-15 15:36] D:\PROGRAM FILES\RISING\RAV\ffr.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-15 15:50 M:2008-09-26 17:02] d:\Program Files\Rising\Rav\RsStore.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.9, C:2038-11-16 15:37 M:2038-11-16 15:36] D:\PROGRAM FILES\RISING\RAV\HookCont.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3, C:2038-11-16 15:37 M:2038-11-16 15:36] d:\Program Files\Rising\Rav\fakescan.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.14, C:2008-08-15 15:50 M:2008-08-15 15:35] d:\Program Files\Rising\Rav\Scanner.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.39, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\viruslib.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\relibldr.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-15 15:50 M:2008-08-15 15:36] D:\PROGRAM FILES\RISING\RAV\HookWeb.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.3, C:2038-11-16 15:37 M:2038-11-16 15:36] D:\PROGRAM FILES\RISING\RAV\nvfile.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\scanexec.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\unexe.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 6, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\scanex.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 1, 0, C:2038-11-16 15:37 M:2008-12-03 12:30] D:\PROGRAM FILES\RISING\RAV\pearc.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 8, C:2008-08-15 15:50 M:2008-08-15 15:36] D:\PROGRAM FILES\RISING\RAV\extfile.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 32, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\scanpack.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\revm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11, C:2008-08-15 15:50 M:2008-08-15 15:36] D:\PROGRAM FILES\RISING\RAV\urutils.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 7, C:2008-08-15 15:50 M:2008-08-15 15:36] D:\PROGRAM FILES\RISING\RAV\ur000.dat [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 22, C:2008-08-15 15:50 M:2008-10-09 18:46] D:\PROGRAM FILES\RISING\RAV\scriptci.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 4, C:2008-08-15 15:50 M:2008-08-15 15:36] D:\PROGRAM FILES\RISING\RAV\ur001.dat [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2008-08-15 15:50 M:2008-10-09 18:46] D:\PROGRAM FILES\RISING\RAV\uroutine.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\scansct.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 11, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\extmail.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 10, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\PROGRAM FILES\RISING\RAV\extole.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 13, C:2038-11-16 15:37 M:2038-11-16 15:35] [PID: 492 / SYSTEM] d:\Program Files\Rising\Rfw\rfwsrv.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.77, C:2008-11-16 15:08 M:2008-11-16 14:59] C:\WINDOWS\system32\MFC71.DLL [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 21:20 M:2003-03-18 21:20] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14] d:\Program Files\Rising\Rfw\ProcCom.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-11-16 15:08 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\RsCommX2.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-11-16 15:08 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\RSAPPMGR.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2008-11-16 14:58 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\CfgDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2008-11-16 14:58 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\RfwRule.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.17, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\rfwlog.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.16, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\Rfwdrv.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.50, C:2008-11-16 15:08 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\ijt_ctrl.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.0, C:2008-11-16 15:08 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\unvdet.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.8, C:2008-11-16 15:08 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\mPorts.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.6, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 688 / SYSTEM] C:\WINDOWS\system32\Ati2evxx.exe [(Verified)ATI Technologies Inc., 6.14.10.4178, C:2007-10-11 21:55 M:2007-10-11 21:55] C:\WINDOWS\system32\Ati2edxx.dll [(Verified)ATI Technologies, Inc., 6, 14, 10, 2512, C:2007-10-11 21:57 M:2007-10-11 21:57] C:\WINDOWS\system32\atipdlxx.dll [(Verified)ATI Technologies, Inc., 6, 14, 10, 2524, C:2007-10-11 21:57 M:2007-10-11 21:57] C:\WINDOWS\system32\ati2evxx.dll [(Verified)ATI Technologies Inc., 6.14.10.4176, C:2007-10-11 21:56 M:2007-10-11 21:56] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1408 / SYSTEM] d:\Program Files\Rising\Rfw\rfwstub.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.12, C:2008-11-16 15:08 M:2008-11-16 14:59] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] d:\Program Files\Rising\Rfw\RSCOMMON.DLL [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-11-16 14:58 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1716 / SYSTEM] D:\PROGRAM FILES\RISING\RAV\RavStub.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.10, C:2038-11-16 15:37 M:2038-11-16 15:36] D:\PROGRAM FILES\RISING\RAV\ProcCom.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-15 15:50 M:2008-08-15 15:49] D:\PROGRAM FILES\RISING\RAV\RsCommX2.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-15 15:50 M:2008-08-15 15:49] D:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2038-11-16 15:37 M:2038-11-16 15:35] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 188 / SYSTEM] C:\WINDOWS\system32\spoolsv.exe [(Verified)Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), C:2007-07-10 12:00 M:2005-06-11 07:53] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 628 / 海翔] C:\WINDOWS\Explorer.EXE [(Verified)Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), C:2007-07-10 12:00 M:2007-06-13 21:21] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] C:\Program Files\Common Files\Nero\Lib\NeroDigitalExt.dll [(Verified)Nero AG, 3, 1, 0, 13, C:2008-06-24 13:45 M:2008-06-24 13:45] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL [Microsoft Corporation, 8.00.50727.762, C:2006-12-02 00:25 M:2006-12-02 00:25] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll [Microsoft Corporation, 8.00.50727.762, C:2006-12-01 22:54 M:2006-12-01 22:54] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll [Microsoft Corporation, 8.00.50727.762, C:2006-12-01 22:54 M:2006-12-01 22:54] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\MFC80CHS.DLL [Microsoft Corporation, 8.00.50727.762, C:2006-12-02 00:08 M:2006-12-02 00:08] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll [Copyright 2004, 2, 0, 0, 0, C:2007-03-02 10:44 M:2007-03-02 10:44] d:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2008-08-15 16:02 M:2008-09-19 16:44] d:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_01.dll [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-11-17 21:35 M:2008-10-27 14:17] d:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_01.dll [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-11-17 21:35 M:2008-10-27 14:17] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] C:\Program Files\Nero\Nero8\Nero BackItUp\NBShell.dll [(Verified)Nero AG, 3, 5, 3, 0, C:2008-06-08 09:31 M:2008-06-08 09:31] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL [Microsoft Corporation, 8.00.50727.762, C:2006-12-02 00:25 M:2006-12-02 00:25] d:\Program Files\WinRAR\rarext.dll [N/A, C:2008-10-24 21:41 M:2008-09-30 21:14] C:\WINDOWS\system32\RavExt.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.18, C:2038-11-16 15:37 M:2038-11-16 15:35] d:\Program Files\Rising\Rav\RSCOMMON.DLL [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2038-11-16 15:37 M:2038-11-16 15:35] C:\WINDOWS\system32\UNISPIM6.IME [(Verified)北京紫光华宇软件股份有限公司, 6.1.0.6240, C:2008-11-16 16:05 M:2008-08-07 10:01] D:\Program Files\Tencent\QQ\qdshm.dll [(Verified)Copyright 2004, 1, 0, 101, 20, C:2007-07-01 08:53 M:2007-07-01 08:53] C:\Program Files\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll [(Verified)Nero AG, 3, 3, 3, 0, C:2008-06-08 09:34 M:2008-06-08 09:34] C:\Program Files\Common Files\Nero\Lib\MediaLibraryNSE.dll [(Verified)Nero AG, 3.3.8.0, C:2008-06-24 16:04 M:2008-06-24 16:04] [PID: 1224 / 海翔] D:\Program Files\Rising\Rfw\rfwmain.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.1.70, C:2008-11-16 15:08 M:2008-11-16 14:59] C:\WINDOWS\system32\MFC71.DLL [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 21:20 M:2003-03-18 21:20] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14] D:\Program Files\Rising\Rfw\RsGuiLib.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2008-11-16 14:58 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\ProcCom.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-11-16 15:08 M:2008-11-16 14:59] D:\Program Files\Rising\Rfw\RsCommX2.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-11-16 15:08 M:2008-11-16 14:59] D:\Program Files\Rising\Rfw\RSAPPMGR.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2008-11-16 14:58 M:2008-11-16 14:59] D:\Program Files\Rising\Rfw\CfgDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2008-11-16 14:58 M:2008-11-16 14:59] D:\Program Files\Rising\Rfw\RSCOMMON.DLL [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-11-16 14:58 M:2008-11-16 14:59] D:\Program Files\Rising\Rfw\RfwCtrl.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 14:58 M:2008-11-16 14:59] D:\Program Files\Rising\Rfw\RsXML.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2008-11-16 14:58 M:2008-11-16 14:59] D:\Program Files\Rising\Rfw\PngDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2008-11-16 14:58 M:2008-11-16 14:59] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] D:\Program Files\Rising\Rfw\RfwRule.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.17, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1312 / 海翔] D:\Program Files\Rising\Rav\RavTask.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.24, C:2038-11-16 15:37 M:2038-11-16 15:36] D:\Program Files\Rising\Rav\ProcCom.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-15 15:50 M:2008-08-15 15:49] D:\Program Files\Rising\Rav\RsCommX2.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-15 15:50 M:2008-08-15 15:49] D:\Program Files\Rising\Rav\RSCOMMON.DLL [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\Program Files\Rising\Rav\RSAPPMGR.DLL [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\Program Files\Rising\Rav\CfgDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2038-11-16 15:37 M:2038-11-16 15:35] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1460 / 海翔] D:\Program Files\Rising\Rav\Ravmon.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.01.27, C:2038-11-16 15:37 M:2038-11-16 15:36] C:\WINDOWS\system32\MFC71.DLL [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 21:20 M:2003-03-18 21:20] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14] D:\Program Files\Rising\Rav\ProcCom.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-15 15:50 M:2008-08-15 15:49] D:\Program Files\Rising\Rav\RsCommX2.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-08-15 15:50 M:2008-08-15 15:49] D:\Program Files\Rising\Rav\RSCOMMON.DLL [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\Program Files\Rising\Rav\recomp.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 41, C:2008-08-15 15:50 M:2008-08-20 15:58] D:\Program Files\Rising\Rav\refs.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 18, C:2008-08-15 15:50 M:2008-08-15 15:36] D:\Program Files\Rising\Rav\viruslib.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 27, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\Program Files\Rising\Rav\relibldr.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 17, C:2008-08-15 15:50 M:2008-08-15 15:36] D:\Program Files\Rising\Rav\RSAPPMGR.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.1, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\Program Files\Rising\Rav\CfgDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.19, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\Program Files\Rising\Rav\MonRule.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.0.29, C:2008-08-15 15:50 M:2008-08-15 15:37] D:\Program Files\Rising\Rav\PngDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\Program Files\Rising\Rav\Rsguilib.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 90, C:2038-11-16 15:37 M:2038-11-16 15:35] D:\Program Files\Rising\Rav\RsXML.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2038-11-16 15:37 M:2038-11-16 15:35] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1468 / 海翔] D:\360safe\antiarp\antiarp.exe [(Verified)360安全中心, 2, 0, 0, 1008, C:2008-04-11 20:45 M:2008-04-11 20:45] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] [PID: 1484 / 海翔] C:\WINDOWS\system32\ctfmon.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] [PID: 1748 / 海翔] D:\Program Files\鱼鱼桌面\FishDesk.exe [鱼鱼软件, 2.2.0.1018, C:2008-10-28 21:33 M:2008-10-29 22:09] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] D:\Program Files\鱼鱼桌面\Res\dll\XDeskScripter.dll [鱼鱼软件 cfishsoft, 2.3.1.0, C:2008-10-28 21:33 M:2007-12-08 16:38] D:\Program Files\鱼鱼桌面\Res\dll\world_clock100.dll [鱼鱼软件, 2.2.0.0, C:2008-10-28 21:33 M:2007-10-31 03:46] D:\Program Files\鱼鱼桌面\IESearch.dll [N/A, C:2008-10-29 22:09 M:2008-10-29 22:09] [PID: 2580 / SYSTEM] C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [Intel Corporation, 11.1.0.4, C:2007-02-21 11:28 M:2007-02-21 11:28] C:\Program Files\Intel\Wireless\Bin\PfMgrApi.dll [Intel Corporation, 11.1.0.2 , C:2007-02-21 11:11 M:2007-02-21 11:11] C:\Program Files\Intel\Wireless\Bin\LIBEAY32.dll [The OpenSSL Project, http://www.openssl.org/, 0.9.8, C:2006-03-08 09:21 M:2006-03-08 09:21] C:\Program Files\Intel\Wireless\Bin\TraceAPI.DLL [Intel Corporation, 11, 1, 0, 4, C:2007-02-21 11:10 M:2007-02-21 11:10] C:\Program Files\Intel\Wireless\Bin\PsRegApi.dll [Intel Corporation, 11, 1, 0, 1, C:2007-02-21 11:10 M:2007-02-21 11:10] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] C:\Program Files\Intel\Wireless\Bin\DbEngine.dll [Intel Corporation, 11, 1, 0, 1 , C:2007-02-21 11:10 M:2007-02-21 11:10] C:\Program Files\Intel\Wireless\Bin\IntStngs.dll [Intel Corporation, 11.1.0.2 , C:2007-02-21 11:11 M:2007-02-21 11:11] C:\Program Files\Intel\Wireless\Bin\MurocApi.dll [Intel Corporation, 11.1.0.9, C:2007-02-21 11:17 M:2007-02-21 11:17] C:\Program Files\Intel\Wireless\Bin\S24MUDLL.dll [Intel Corporation, 11.1.0.2, C:2007-02-21 11:17 M:2007-02-21 11:17] [PID: 2756 / SYSTEM] C:\WINDOWS\system32\lkcitdl.exe [National Instruments, Inc., 4.5.2.0, C:2005-08-25 14:43 M:2005-08-25 14:43] C:\WINDOWS\system32\LKDYNAM.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14] C:\WINDOWS\system32\LKSOCK.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\LKSEC.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\LKOBENV.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\nidscmem.dll [National Instruments, Inc., 1.1.0.1036, C:2005-10-11 14:56 M:2005-10-11 14:56] [PID: 3100 / SYSTEM] C:\WINDOWS\system32\lkads.exe [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\LKSOCK.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\LKSEC.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14] C:\WINDOWS\system32\LKDYNAM.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] [PID: 3388 / SYSTEM] C:\WINDOWS\system32\lktsrv.exe [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\LKSTIME.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\LKSOCK.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\LKSEC.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2003-03-18 20:14 M:2003-03-18 20:14] C:\WINDOWS\system32\LKDYNAM.dll [National Instruments, Inc., 4.6.0.1036, C:2005-10-11 15:00 M:2005-10-11 15:00] [PID: 3412 / SYSTEM] C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [(Verified)Nero AG, 3, 5, 3, 0, C:2008-06-08 09:31 M:2008-06-08 09:31] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll [Microsoft Corporation, 8.00.50727.762, C:2006-12-01 22:54 M:2006-12-01 22:54] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll [Microsoft Corporation, 8.00.50727.762, C:2006-12-01 22:54 M:2006-12-01 22:54] C:\Program Files\Nero\Nero8\Nero BackItUp\NB.dll [(Verified)Nero AG, 3, 5, 3, 0, C:2008-06-08 09:30 M:2008-06-08 09:30] C:\Program Files\Nero\Nero8\Nero BackItUp\NeroAPIGlueLayerUnicode.dll [(Verified)Nero AG, 8.3.6.0, C:2008-06-24 13:45 M:2008-06-24 13:45] C:\Program Files\Nero\Nero8\Nero BackItUp\LBFC.dll [(Verified)Nero AG, 3, 5, 3, 0, C:2008-06-08 09:30 M:2008-06-08 09:30] C:\Program Files\Nero\Nero8\Nero BackItUp\NBHDMgr.dll [(Verified)Nero AG, 3, 5, 3, 0, C:2008-06-08 09:30 M:2008-06-08 09:30] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] [PID: 3504 / SYSTEM] C:\WINDOWS\system32\IoctlSvc.exe [Prolific Technology Inc., 1, 6, 0, 0, C:2006-12-19 10:30 M:2006-12-19 10:30] [PID: 3840 / SYSTEM] C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [Intel Corporation, 11.1.0.0 , C:2007-02-21 11:10 M:2007-02-21 11:10] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] [PID: 3980 / SYSTEM] C:\Program Files\VMware\VMware Workstation\vmware-authd.exe [VMware, Inc., 5.5.3 build-34685, C:2006-11-13 13:00 M:2008-11-16 22:26] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] [PID: 4028 / SYSTEM] C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe [(Verified)VMware, Inc., 5.5.3 build-34685, C:2006-11-13 12:43 M:2006-11-13 12:43] C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2006-11-13 12:43 M:2006-11-13 12:43] C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vmxScsiLib.dll [(Verified)VMware, Inc., 5.5.3 build-34685, C:2006-11-13 12:43 M:2006-11-13 12:43] C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2006-11-13 12:43 M:2006-11-13 12:43] [PID: 4088 / SYSTEM] C:\WINDOWS\system32\vmnat.exe [(Verified)VMware, Inc., 5.5.3 build-34685, C:2008-11-16 22:02 M:2006-11-13 13:01] [PID: 1216 / SYSTEM] C:\WINDOWS\system32\vmnetdhcp.exe [(Verified)VMware, Inc., 5.5.3 build-34685, C:2008-11-16 22:02 M:2006-11-13 13:00] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2003-02-21 04:42 M:2003-02-21 04:42] [PID: 3628 / LOCAL SERVICE] C:\WINDOWS\System32\alg.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] [PID: 3796 / 海翔] C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI.ACE\CORE-STATIC\ccc.exe [ATI Technologies Inc., 2.0.0.0, C:2007-07-17 10:13 M:2007-07-17 10:13] C:\WINDOWS\system32\mscoree.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2007-04-13 03:21 M:2007-04-13 03:21] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2007-04-13 03:21 M:2007-04-13 03:21] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll [Microsoft Corporation, 8.00.50727.762, C:2006-12-01 22:54 M:2006-12-01 22:54] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\6721429f7c6ed20247ebfb8e4832f721\mscorlib.ni.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 14:13 M:2008-11-16 14:13] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2007-04-13 03:21 M:2007-04-13 03:21] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\247cbf18ac3c79d99f76eb8553916fc1\System.ni.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 14:13 M:2008-11-16 14:13] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\f8ed9d4339b3224cd2f26f5239692321\System.Drawing.ni.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 14:13 M:2008-11-16 14:13] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\39096b93850c5dded4afa662fe76ca24\System.Windows.Forms.ni.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 14:14 M:2008-11-16 14:14] C:\WINDOWS\assembly\GAC_MSIL\CCC.Implementation\2.0.2840.38602__90ba9c70f846762e\CCC.Implementation.dll [ATI Technologies Inc., 2.0.2840.38602, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation\2.0.2791.31986__90ba9c70f846762e\LOG.Foundation.dll [ATI Technologies Inc., 2.0.2791.31986, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\MOM.Foundation\2.0.2791.32006__90ba9c70f846762e\MOM.Foundation.dll [Advanced Micro Devices Inc., 2.0.2791.32006, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation\2.0.2791.31988__90ba9c70f846762e\CLI.Foundation.dll [ATI Technologies Inc., 2.0.2791.31988, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.2791.32009__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll [ATI Technologies Inc., 2.0.2791.32009, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.2840.38601__90ba9c70f846762e\LOG.Foundation.Implementation.dll [ATI Technologies Inc., 2.0.2840.38601, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 14:12 M:2008-11-16 14:12] C:\WINDOWS\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.2791.31993__90ba9c70f846762e\LOG.Foundation.Private.dll [ATI Technologies Inc., 2.0.2791.31993, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\MOM.Implementation\2.0.2840.38602__90ba9c70f846762e\MOM.Implementation.dll [Advanced Micro Devices Inc., 2.0.2840.38602, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.2791.32434__90ba9c70f846762e\CLI.Foundation.XManifest.dll [ATI Technologies Inc., 2.0.2791.32434, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\a6ba740c393b2e4c3379f9d20da7673a\System.Xml.ni.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 14:14 M:2008-11-16 14:14] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.2840.38310__90ba9c70f846762e\CLI.Component.Runtime.dll [Advanced Micro Devices, Inc., 2.0.2840.38310, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.2791.32008__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll [ATI Technologies Inc., 2.0.2791.32008, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.2791.31996__90ba9c70f846762e\CLI.Foundation.Private.dll [ATI Technologies Inc., 2.0.2791.31996, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.2791.32001__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll [ATI Technologies Inc., 2.0.2791.32001, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll [ATI Technologies Inc., 2.0.0.0, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\AEM.Server\2.0.2840.38309__90ba9c70f846762e\AEM.Server.dll [ATI Technologies Inc., 2.0.2840.38309, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.2791.31992__90ba9c70f846762e\NEWAEM.Foundation.dll [ATI Technologies Inc., 2.0.2791.31992, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.2840.38309__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll [ATI Technologies Inc., 2.0.2840.38309, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\AEM.Foundation\2.0.2791.31987__90ba9c70f846762e\AEM.Foundation.dll [ATI Technologies Inc., 2.0.2791.31987, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\AEM.Server.Shared\2.0.2791.32001__90ba9c70f846762e\AEM.Server.Shared.dll [ATI Technologies Inc., 2.0.2791.32001, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.2840.38644__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll [ATI Technologies Inc., 2.0.2840.38644, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.2791.32025__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll [ATI Technologies Inc., 2.0.2791.32025, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.2791.32000__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll [ATI Technologies Inc., 2.0.2791.32000, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll [ATI Technologies Inc., 2.0.2573.17685, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll [ATI Technologies Inc., 2.0.2573.17684, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics\2.0.2791.32015__90ba9c70f846762e\DEM.Graphics.dll [ATI Technologies Inc., 2.0.2791.32015, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\system32\ATIDEMGX.dll [(Verified)Advanced Micro Devices, Inc., 2.0.2840.39788, C:2008-11-16 12:44 M:2007-10-11 22:06] C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 14:12 M:2008-11-16 14:12] C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2005-09-23 07:28 M:2005-09-23 07:28] C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.2791.32011__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll [ATI Technologies Inc., 2.0.2791.32011, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.2840.38318__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll [Advanced Mirco Devices, Inc., 2.0.2840.38318, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.2791.32002__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll [Advanced Mirco Devices, Inc., 2.0.2791.32002, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll [ATI Technologies Inc., 2.0.2573.17685, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\DEM.OS.I0602\2.0.2791.32016__90ba9c70f846762e\DEM.OS.I0602.dll [ATI Technologies Inc., 2.0.2791.32016, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\DEM.OS\2.0.2791.32016__90ba9c70f846762e\DEM.OS.dll [ATI Technologies Inc., 2.0.2791.32016, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\ATIDEMOS\2.0.2840.38311__90ba9c70f846762e\ATIDEMOS.dll [ATI Technologies Inc., 2.0.2840.38311, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.2791.32024__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll [ATI Technologies Inc., 2.0.2791.32024, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.2791.31999__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll [ATI Technologies Inc., 2.0.2791.31999, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.2840.38339__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38339, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.2791.32029__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32029, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.2840.38537__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38537, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.2791.32030__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll [ATI Technologies Inc., 2.0.2791.32030, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.2833.15304__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2833.15304, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.2840.38473__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll [Advanced Micro Devices, Inc., 2.0.2840.38473, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.2833.15206__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2833.15206, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll [Advanced Micro Devices, Inc., 2.0.2743.23304, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.2791.32007__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32007, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.2840.38579__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38579, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.2791.32027__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32027, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.2840.38392__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38392, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.2791.32014__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32014, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.2840.38503__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38503, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.2791.32039__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32039, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.2840.38481__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38481, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.2791.32014__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32014, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.2840.38523__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll [Advanced Micro Devices, Inc., 2.0.2840.38523, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.2791.32039__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32039, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.2840.38474__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll [Advanced Micro Devices, Inc., 2.0.2840.38474, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.2833.15324__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2833.15324, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.2840.38545__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38545, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.2791.32027__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32027, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.2840.38481__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38481, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.2791.32015__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32015, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Runtime\2.0.2840.38628__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Runtime.dll [ATI Technologies Inc., 2.0.2840.38628, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Shared\2.0.2791.32042__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32042, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\APM.Server\2.0.2840.38310__90ba9c70f846762e\APM.Server.dll [Advanced Micro Devices, Inc., 2.0.2840.38310, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\APM.Foundation\2.0.2791.32006__90ba9c70f846762e\APM.Foundation.dll [ATI Technologies Inc., 2.0.2791.32006, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\92193ce9057643874614ea61d0001ff9\System.Configuration.ni.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 18:50 M:2008-11-16 18:50] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\c1f37b625c218035c40850db3123b23b\System.Web.ni.dll [Microsoft Corporation, 2.0.50727.832 (QFE.050727-8300), C:2008-11-16 18:51 M:2008-11-16 18:51] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.2840.38594__90ba9c70f846762e\CLI.Component.Systemtray.dll [ATI Technologies Inc., 2.0.2840.38594, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.2791.32004__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll [Advanced Micro Devices, Inc., 2.0.2791.32004, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.2840.38348__90ba9c70f846762e\CLI.Component.Wizard.dll [Advanced Micro Devices, Inc., 2.0.2840.38348, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.2791.31995__90ba9c70f846762e\CLI.Component.Client.Shared.dll [ATI Technologies Inc., 2.0.2791.31995, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.2791.32007__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll [ATI Technologies Inc., 2.0.2791.32007, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.2791.32039__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll [ATI Technologies Inc., 2.0.2791.32039, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.2840.38353__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll [ATI Technologies Inc., 2.0.2840.38353, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.2791.32029__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll [ATI Technologies Inc., 2.0.2791.32029, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.2840.38616__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll [ATI Technologies Inc., 2.0.2840.38616, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.2840.38552__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll [ATI Technologies Inc., 2.0.2840.38552, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.2840.38361__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll [ATI Technologies Inc., 2.0.2840.38361, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.2840.38373__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll [ATI Technologies Inc., 2.0.2840.38373, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.2791.32041__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll [ATI Technologies Inc., 2.0.2791.32041, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll [ , 1.0.0.0, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.2840.38565__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll [ATI Technologies Inc., 2.0.2840.38565, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.2840.38392__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll [ATI Technologies Inc., 2.0.2840.38392, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.2840.38587__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll [ATI Technologies Inc., 2.0.2840.38587, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.2840.38327__90ba9c70f846762e\CLI.Component.Dashboard.dll [Advanced Micro Devices, Inc., 2.0.2840.38327, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.2791.31999__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll [ATI Technologies Inc., 2.0.2791.31999, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.2791.32010__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll [ATI Technologies Inc., 2.0.2791.32010, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.2840.38332__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38332, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.2791.32040__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll [ATI Technologies Inc., 2.0.2791.32040, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.2840.38621__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll [Advanced Mirco Devices, Inc., 2.0.2840.38621, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.2840.38380__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38380, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.2840.38340__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38340, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.2840.38504__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38504, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.2840.38475__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38475, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.2840.38524__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll [Advanced Micro Devices, Inc., 2.0.2840.38524, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.2840.38580__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38580, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.2840.38545__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38545, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.2840.38387__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38387, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.2840.38482__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38482, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Dashboard\2.0.2840.38628__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Dashboard.dll [ATI Technologies Inc., 2.0.2840.38628, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.2840.38312__90ba9c70f846762e\CLI.Component.SkinFactory.dll [ATI Technologies Inc., 2.0.2840.38312, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\GAC\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll [ , 1.0.0.0, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\PROGRA~1\ATITEC~1\ATI.ACE\CORE-I~1\32\wbocx.ocx [(Verified)Stardock.Net, Inc, 4.90, C:2007-01-17 19:20 M:2007-01-17 19:20] C:\WINDOWS\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll [ , 1.0.0.0, C:2008-11-16 12:49 M:2008-11-16 12:49] C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\61d54755c5a63ab5a62a2815b5e02a0b\Accessibility.ni.dll [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2008-11-16 18:50 M:2008-11-16 18:50] C:\Program Files\ATI Technologies\ATI.ACE\Core-Implementation\32\wbhelp2.dll [Stardock.Net, Inc, 1.5, C:2006-10-10 09:55 M:2006-10-10 09:55] C:\WINDOWS\assembly\GAC_MSIL\CLI.Aspect.PowerXpress.Graphics.Shared\2.0.2791.32013__90ba9c70f846762e\CLI.Aspect.PowerXpress.Graphics.Shared.dll [Advanced Micro Devices, Inc., 2.0.2791.32013, C:2008-11-16 12:49 M:2008-11-16 12:49] [PID: 3440 / 海翔] C:\WINDOWS\system32\conime.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] [PID: 2288 / SYSTEM] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] [PID: 2840 / 海翔] D:\Program Files\TTPlayer\TTPlayer.exe [Alen Soft, 5, 2, 1, 0, C:2008-07-03 11:46 M:2008-07-03 11:46] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] D:\Program Files\TTPlayer\ttpcomm.dll [N/A, C:2008-07-03 11:56 M:2008-07-03 11:56] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] D:\Program Files\TTPlayer\ttpres.dll [Alen Soft, 5, 2, 1, 0, C:2008-07-03 11:28 M:2008-07-03 11:28] D:\Program Files\TTPlayer\msdmo.dll [Microsoft Corporation, 6.03.01.0400, C:2006-04-13 15:54 M:2006-04-13 15:54] D:\Program Files\TTPlayer\mp3PRO.dll [Coding Technologies GmbH, 1, 1, 0, 0, C:2006-04-13 15:54 M:2006-04-13 15:54] D:\Program Files\TTPlayer\AddIn\ttp_lrcsh.dll [N/A, C:2008-07-03 12:09 M:2008-07-03 12:09] [PID: 296 / 海翔] C:\WINDOWS\system32\taskmgr.exe [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] [PID: 824 / 海翔] D:\Program Files\arswp\ArSwp.exe [(Verified)ArSwp.com, 2, 8, 2, 1115, C:2008-12-14 20:22 M:2008-11-15 11:58] C:\WINDOWS\system32\comdlg32.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2007-07-10 12:00 M:2007-07-10 12:00] d:\Program Files\Rising\Rfw\ijt_base.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.21, C:2008-11-16 15:08 M:2008-11-16 15:00] d:\Program Files\Rising\Rfw\olemon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 7.0.0.9, C:2008-11-16 15:08 M:2008-11-16 15:00] D:\360safe\safemon\safemon.dll [(Verified)360.CN, 4, 2, 0, 1005, C:2008-07-10 17:42 M:2008-07-10 17:42] D:\Program Files\arswp\plugin\ArFix.dll [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2008-12-14 20:22 M:2007-11-28 15:19] ======================================== 文件关联 ======================================== AutoRun.INF ======================================== Winsock提供者 ======================================== HOSTS 127.0.0.1 c0mo.com 127.0.0.1 gxgxy.net 127.0.0.1 union.daqi.com 127.0.0.1 121.15.247.22 127.0.0.1 61.155.140.4 127.0.0.1 219.129.239.251 127.0.0.1 61.164.118.208 127.0.0.1 www.zmjjjyy.cn 127.0.0.1 user9.78-10.net 127.0.0.1 444.gmwo07.com 127.0.0.1 333.gmwo07.com 127.0.0.1 222.gmwo07.com 127.0.0.1 111.gmwo07.com 127.0.0.1 haha.yaoyao09.com 127.0.0.1 www.noseqing.cn 127.0.0.1 fg.pvs360.com 127.0.0.1 cw.pvs360.com 127.0.0.1 ta.pvs360.com 127.0.0.1 dl.pvs360.com 127.0.0.1 ok.sl8cjs.cn 127.0.0.1 nc.mskess.com 127.0.0.1 idc.windowsupdeta.cn 127.0.0.1 pvs360.com 127.0.0.1 sl8cjs.cn 127.0.0.1 windowsupdeta.cn 127.0.0.1 up.22x44.com 127.0.0.1 my.531jx.cn 127.0.0.1 nx.51ylb.cn 127.0.0.1 llboss.com 127.0.0.1 down.malasc.cn 127.0.0.1 d2.llsging.com 127.0.0.1 171817.171817.com 127.0.0.1 wg.47255.com 127.0.0.1 www.tomwg.com 127.0.0.1 tp.shpzhan.cn 127.0.0.1 1.joppnqq.com 127.0.0.1 xx.exiao01.com 127.0.0.1 www.22aaa.com 127.0.0.1 ilove.com 127.0.0.1 xxx.mmma.biz 127.0.0.1 www.868wg.com 127.0.0.1 2.joppnqq.com 127.0.0.1 1.jopanqc.com 127.0.0.1 yu.8s7.net 127.0.0.1 1.jopmmqq.com 127.0.0.1 cao.kv8.info 127.0.0.1 xtx.kv8.info 127.0.0.1 new.749571.com 127.0.0.1 xxx.vh7.biz 127.0.0.1 1.jopenkk.com 127.0.0.1 d.93se.com 127.0.0.1 3.joppnqq.com 127.0.0.1 xxx.j41m.com 127.0.0.1 1.jopenqc.com 127.0.0.1 xxx.m111.biz 127.0.0.1 down.18dd.net 127.0.0.1 www.333292.com 127.0.0.1 qqq.hao1658.com 127.0.0.1 qqq.dzydhx.com 127.0.0.1 www.exiao01.com 127.0.0.1 www.cike007.cn [/CODE]