瑞星卡卡电脑诊断日志 v1.30 (2008-12-19 18:58:45)  北京瑞星信息技术有限公司

注释:	[A]表示该文件存在自启动关联;
	[M]表示该文件在内存中;

+ 注册表自运行项目 
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      NVSvc
        [AM] 1. c:\windows\system32\nvsvc32.exe
          NVIDIA Corporation
          NVIDIA Driver Helper Service, Version 91.36
          .text,.rdata,.data,.rsrc,


      ose
        [A ] 2. c:\program files\common files\microsoft shared\source engine\ose.exe
          Microsoft Corporation
          Office Source Engine
          .text,.data,.rsrc,


      RavCCenter
        [AM] 3. d:\rising\rav\ccenter.exe
          Beijing Rising Information Technology Co., Ltd.
          CCenter Application
          .text,.rdata,.data,.rsrc,


      RavTask
        [AM] 4. d:\rising\rav\ravtask.exe
          Beijing Rising Information Technology Co., Ltd.
          ravtask
          .text,.rdata,.data,.rsrc,


      RfwProxySrv
        [AM] 5. d:\rising\rfw\rfwproxy.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising Personal Proxy Service
          .text,.rdata,.data,.rsrc,


      RfwService
        [AM] 6. d:\rising\rfw\rfwsrv.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising Personal FireWall Service
          .text,.rdata,.data,.rsrc,


      RsRavMon
        [AM] 7. d:\rising\rav\ravmond.exe
          Beijing Rising Information Technology Co., Ltd.
          ravmond
          .text,.rdata,.data,.rsrc,


      RsScanSrv
        [AM] 8. d:\rising\rav\scanfrm.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising Scan Service Framework
          .text,.rdata,.data,.rsrc,


      Ukwsvr
        [AM] 9. c:\program files\unikeyword\ukwsvr.exe
          China Internet Network Information Center
          Ukwsvr Module
          .text,.rdata,.data,.rsrc,


      UMWdf
        [A ] 10. c:\windows\system32\wdfmgr.exe
          Microsoft Corporation
          Windows User Mode Driver Manager
          .text,.data,.rsrc,




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      HDAudBus
        [A ] 11. c:\windows\system32\drivers\hdaudbus.sys
          Windows (R) Server 2003 DDK provider
          High Definition Audio Bus Driver v1.0a
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      hookcont
        [A ] 12. c:\windows\system32\drivers\hookcont.sys
          Beijing Rising Information Technology Co., Ltd.
          HookCont Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      hooksys
        [A ] 13. c:\windows\system32\drivers\hooksys.sys
          Beijing Rising Information Technology Co., Ltd.
          Hooksys.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookUrl
        [A ] 14. d:\rising\rfw\hookurl.sys
          Beijing Rising Information Technology Co., Ltd.
          URL Filter Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      IntcAzAudAddService
        [A ] 15. c:\windows\system32\drivers\rtkhdaud.sys
          Realtek Semiconductor Corp.
          Realtek(r) High Definition Audio Function Driver
          .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc,


      RfwBase
        [A ] 16. c:\windows\system32\drivers\rfwbase.sys
          Beijing Rising Information Technology Co., Ltd.
          net base driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsFwDrv
        [A ] 17. d:\rising\rfw\rsfwdrv.sys
          Beijing Rising Information Technology Co., Ltd.
          Rules Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsNTGDI
        [A ] 18. c:\windows\system32\drivers\rsntgdi.sys
          Beijing Rising Information Technology Co., Ltd.
          RsNTGDI
          .text,.rdata,INIT,.rsrc,.reloc,


      Secdrv
        [A ] 19. c:\windows\system32\drivers\secdrv.sys
          Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
          Macrovision SECURITY Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      ViBus
        [A ] 20. c:\windows\system32\drivers\vibus.sys
          VIA Technologies, Inc.
          VIA SATA IDE Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      yukonwxp
        [A ] 21. c:\windows\system32\drivers\yk51x86.sys
          Marvell
          NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller
          .text,.rdata,.data,INIT,.rsrc,.reloc,




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {01443AEC-0FD1-40fd-9C87-E93D1494C233}
        [A ] 22. d:\thunder\comdlls\tdatonce_now.dll
          Thunder Networking Technologies,LTD
          迅雷浏览器高级特性支持模块
          .text,.rdata,.data,.rsrc,.reloc,


      {28B3B717-A610-4e32-8555-B8BA4779CF8A}
        [A ] 23. c:\program files\unikeyword\addr.dll
          China Internet Network Information Center
          Address Module
          .text,.rdata,.data,Shared,.rsrc,.reloc,


      {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}
        [A ] 24. d:\bitcomet\tools\bitcometbho_1.2.8.7.dll
          BitComet
          BitCometBHO
          .text,.rdata,.data,.rsrc,.reloc,


      {889D2FEB-5411-4565-8998-1DD2C5261283}
        [A ] 25. d:\thunder\comdlls\xunleibho_now.dll
          Thunder Networking Technologies,LTD
          XunLeiBHO
          .text,.rdata,.data,.rsrc,.reloc,


      {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
        [A ] 26. c:\windows\system32\urlfilter.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising AntiSpyware UrlFilter Module
          .text,.rdata,.data,.rsrc,.reloc,


      {B69F34DD-F0F9-42DC-9EDD-957187DA688D}
        [A ] 27. d:\360safe\safemon\safemon.dll
          360.CN
          360安全卫士实时保护模块
          .text,.rdata,.data,.share,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 28. d:\thunder\thunder.exe
          Thunder Networking Technologies,LTD
          .text,.rdata,.data,.rsrc,


      Exec
        [A ] 29. c:\program files\flashget\flashget.exe
          FlashGet.com
          FlashGet
          .text,.rdata,.data,.rsrc,




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [A ] 30. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
          Microsoft Corporation
          Microsoft Office XML MIME Filter
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 31. c:\windows\system32\hticons.dll
          Hilgraeve, Inc.
          HyperTerminal Applet Library
          .text,.data,.rsrc,.reloc,


      Portable Media Devices
        [A ] 32. c:\windows\system32\audiodev.dll
          Microsoft Corporation
          便携媒体设备命令行解释器扩展
          .text,.data,.rsrc,.reloc,


      Portable Media Devices Menu
        [A ] 32. c:\windows\system32\audiodev.dll
          Microsoft Corporation
          便携媒体设备命令行解释器扩展
          .text,.data,.rsrc,.reloc,


      Microsoft Office HTML Icon Handler
        [A ] 33. c:\program files\microsoft office\office11\msohev.dll
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,.reloc,


      Web Folders
        [A ] 34. c:\program files\common files\microsoft shared\web folders\msonsext.dll
          Microsoft Corporation
          Microsoft Web Folders
          .text,.data,.rsrc,.reloc,


      WinRAR shell extension
        [A ] 35. c:\program files\winrar\rarext.dll
          .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


      NvCpl DesktopContext Class
        [A ] 36. c:\windows\system32\nvcpl.dll
          NVIDIA Corporation
          NVIDIA Display Properties Extension
          .text,.rdata,.data,CONST,.rsrc,.reloc,


      Play on my TV helper
        [A ] 36. c:\windows\system32\nvcpl.dll
          NVIDIA Corporation
          NVIDIA Display Properties Extension
          .text,.rdata,.data,CONST,.rsrc,.reloc,


      Desktop Explorer
        [A ] 37. c:\windows\system32\nvshell.dll
          .text,.rdata,.data,.idata,.shared,.rsrc,.reloc,


      Desktop Explorer Menu
        [A ] 37. c:\windows\system32\nvshell.dll
          .text,.rdata,.data,.idata,.shared,.rsrc,.reloc,


      nView Desktop Context Menu
        [A ] 37. c:\windows\system32\nvshell.dll
          .text,.rdata,.data,.idata,.shared,.rsrc,.reloc,


      Shell Extensions for RealOne Player
        [A ] 38. d:\realplayer\rpshell.dll
          RealNetworks, Inc.
          RealPlayer Shell Extensions
          .text,.rdata,.data,.rsrc,.reloc,


      RISING
        [AM] 39. c:\windows\system32\ravext.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 39. c:\windows\system32\ravext.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      RfwMain
        [AM] 40. d:\rising\rfw\rfwmain.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising Personal FireWall Main Program
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 41. d:\rising\卡卡\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          RSTray
          .text,.rdata,.data,.rsrc,


      TkBellExe
        [A ] 42. c:\program files\common files\real\update_ob\realsched.exe
          RealNetworks, Inc.
          RealNetworks Scheduler
          .text,.rdata,.data,.rsrc,


      RavTray
        [AM] 43. d:\rising\rav\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising tray framework
          .text,.rdata,.data,.rsrc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
      KKDelay
        [A ] 44. d:\rising\卡卡\runonce.exe
          Beijing Rising Information Technology Co., Ltd.
          RunOnce Application
          .text,.rdata,.data,.rsrc,




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 45. c:\windows\system32\bsmain.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising Antivirus 2008
          .text,.rdata,.data,.rsrc,.reloc,

        [A ] 46. c:\windows\system32\kknative.exe
          Beijing Rising Information Technology Co., Ltd.
          NativeAp
          .text,.data,.rsrc,.reloc,




  + 映像劫持
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 47. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 47. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 47. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 47. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,




  + 程序初始化和已知动态连接库
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      AppInit_DLLs
        [AM] 48. c:\windows\system32\kmon.dll
          Beijing Rising Information Technology Co., Ltd.
          KaKa Monitors
          .text,.rdata,.data,.rsrc,.reloc,





+ 正在运行的进程
  + 00000144(324) spoolsv.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000001d0(464) RfwMain.exe
    00400000[00092000]
      [AM] 40. d:\rising\rfw\rfwmain.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal FireWall Main Program
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 51. c:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 53. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[000A8000]
      [ M] 54. d:\rising\rfw\rsguilib.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001F000]
      [ M] 55. d:\rising\rfw\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B60000[00024000]
      [ M] 56. d:\rising\rfw\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00BB0000[0000E000]
      [ M] 57. d:\rising\rfw\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00BD0000[00030000]
      [ M] 58. d:\rising\rfw\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 59. d:\rising\rfw\rscommon.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F30000[00014000]
      [ M] 60. d:\rising\rfw\rfwctrl.dll
        Beijing Rising Information Technology Co., Ltd.
        RfwCtrl DLL
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 61. d:\rising\rfw\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 62. d:\rising\rfw\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    01420000[0000F000]
      [ M] 63. d:\rising\rfw\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000258(600) smss.exe

  + 000002a0(672) csrss.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000002b8(696) winlogon.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 64. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 000002e4(740) services.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000002f0(752) lsass.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000320(800) nvsvc32.exe
    00400000[0002C000]
      [AM] 1. c:\windows\system32\nvsvc32.exe
        NVIDIA Corporation
        NVIDIA Driver Helper Service, Version 91.36
        .text,.rdata,.data,.rsrc,


    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000394(916) svchost.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000003e4(996) svchost.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000464(1124) CCENTER.EXE
    00400000[0001B000]
      [AM] 3. d:\rising\rav\ccenter.exe
        Beijing Rising Information Technology Co., Ltd.
        CCenter Application
        .text,.rdata,.data,.rsrc,


    10000000[00029000]
      [ M] 65. d:\rising\rav\combase.dll
        Beijing Rising Information Technology Co., Ltd.
        combase
        .text,.rdata,.data,.rsrc,.reloc,


    00680000[00027000]
      [ M] 66. d:\rising\rav\cnt09.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt09 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    009B0000[0001D000]
      [ M] 67. d:\rising\rav\cnt08.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt08 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000046c(1132) svchost.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000004c8(1224) svchost.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000558(1368) svchost.exe
    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000580(1408) RavMonD.exe
    00400000[00020000]
      [AM] 7. d:\rising\rav\ravmond.exe
        Beijing Rising Information Technology Co., Ltd.
        ravmond
        .text,.rdata,.data,.rsrc,


    10000000[00029000]
      [ M] 65. d:\rising\rav\combase.dll
        Beijing Rising Information Technology Co., Ltd.
        combase
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 53. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00A00000[00019000]
      [ M] 68. d:\rising\rav\moncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        MonComm
        .text,.rdata,.data,.rsrc,.reloc,


    00A20000[0001D000]
      [ M] 69. d:\rising\rav\monbase.dll
        Beijing Rising Information Technology Co., Ltd.
        MonBase
        .text,.rdata,.data,.rsrc,.reloc,


    00A50000[00067000]
      [ M] 70. d:\rising\rav\rslog.dll
        Beijing Rising Information Technology Co., Ltd.
        rslog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00AE0000[00018000]
      [ M] 71. d:\rising\rav\mondrv.dll
        Beijing Rising Information Technology Co., Ltd.
        mondrv
        .text,.rdata,.data,.rsrc,.reloc,


    00B10000[00023000]
      [ M] 72. d:\rising\rav\defmon.dll
        Beijing Rising Information Technology Co., Ltd.
        DefMon
        .text,.rdata,.data,.rsrc,.reloc,


    00B50000[00010000]
      [ M] 73. d:\rising\rav\moncom08.dll
        Beijing Rising Information Technology Co., Ltd.
        MonCom08
        .text,.rdata,.data,.rsrc,.reloc,


    00B70000[0006C000]
      [ M] 74. d:\rising\rav\monrule.dll
        Beijing Rising Information Technology Co., Ltd.
        MonRule
        .text,.rdata,.data,.rsrc,.reloc,


    00C10000[00027000]
      [ M] 75. d:\rising\rav\filemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Filemon
        .text,.rdata,.data,.rsrc,.reloc,


    00C50000[0002B000]
      [ M] 76. d:\rising\rav\mailmon.dll
        Beijing Rising Information Technology Co., Ltd.
        MailMon
        .text,.rdata,.data,.rsrc,.reloc,


    00C90000[00012000]
      [ M] 77. d:\rising\rav\hookweb.dll
        Beijing Rising Information Technology Co., Ltd.
        hookweb
        .text,.rdata,.data,.rsrc,.reloc,


    00CD0000[00010000]
      [ M] 78. d:\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    01020000[0000E000]
      [ M] 79. d:\rising\rav\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00EF0000[00031000]
      [ M] 80. d:\rising\rav\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    00F40000[0002E000]
      [ M] 81. d:\rising\rav\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F70000[00019000]
      [ M] 82. d:\rising\rav\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    01330000[00020000]
      [ M] 83. d:\rising\rav\hooksys.dll
        Beijing Rising Information Technology Co., Ltd.
        Hooksys.dll
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    013F0000[0001F000]
      [ M] 84. d:\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01410000[00024000]
      [ M] 85. d:\rising\rav\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    01550000[00013000]
      [ M] 86. d:\rising\rav\hookcont.dll
        Beijing Rising Information Technology Co., Ltd.
        HookCont Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01590000[00066000]
      [ M] 87. d:\rising\rav\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    01950000[0006C000]
      [ M] 88. d:\rising\rav\bacore.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising MBA DLL
        .text,.rdata,.data,.rsrc,.reloc,


    01AD0000[0003C000]
      [ M] 89. d:\rising\rav\recomp.dll
        Beijing Rising Information Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01B20000[00036000]
      [ M] 90. d:\rising\rav\refs.dll
        Beijing Rising Information Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01B70000[00022000]
      [ M] 91. d:\rising\rav\rsstore.dll
        Beijing Rising Information Technology Co., Ltd.
        RSStore
        .text,.rdata,.data,.rsrc,.reloc,


    01BB0000[0000D000]
      [ M] 92. d:\rising\rav\scanadd.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Addon
        .text,.rdata,.data,.rsrc,.reloc,


    01BC0000[00026000]
      [ M] 93. d:\rising\rav\scanner.dll
        Beijing Rising Information Technology Co., Ltd.
        RsScanner Module
        .text,.rdata,.data,.rsrc,.reloc,


    01E00000[00030000]
      [ M] 94. d:\rising\rav\viruslib.dll
        Beijing Rising Information Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01E40000[00028000]
      [ M] 95. d:\rising\rav\relibldr.dll
        Beijing Rising Information Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03B40000[00022000]
      [ M] 96. d:\rising\rav\ffr.dll
        Beijing Rising Information Technology Co., Ltd.
        ffr Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03B80000[00021000]
      [ M] 97. d:\rising\rav\nvfile.dll
        Beijing Rising Information Technology Co., Ltd.
        NVFile
        .text,.rdata,.data,.rsrc,.reloc,


    13AB0000[00045000]
      [ M] 98. d:\rising\rav\scanexec.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanExec
        .text,.rdata,.data,.rsrc,.reloc,


    044C0000[002DD000]
      [ M] 99. d:\rising\rav\unexe.dll
        Beijing Rising Information Technology Co., Ltd.
        UnExe
        .text,.rdata,.data,.rsrc,.reloc,


    047B0000[000D7000]
      [ M] 100. d:\rising\rav\scanex.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanEx
        .text,.rdata,.data,.rsrc,.reloc,


    04C20000[00029000]
      [ M] 101. d:\rising\rav\pearc.dll
        Beijing Rising Information Technology Co., Ltd.
        pearchive Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    04C60000[00028000]
      [ M] 102. d:\rising\rav\scanpe.dll
        Beijing Rising Information Technology Co., Ltd.
        scanpe Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    04FA0000[0001A000]
      [ M] 103. d:\rising\rav\ur000.dat
        Beijing Rising Information Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    052E0000[000EC000]
      [ M] 104. d:\rising\rav\extfile.dll
        Beijing Rising Information Technology Co., Ltd.
        extfile Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01640000[000B7000]
      [ M] 105. d:\rising\rav\revm.dll
        Beijing Rising Information Technology Co., Ltd.
        REVM Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03750000[00035000]
      [ M] 106. d:\rising\rav\urutils.dll
        Beijing Rising Information Technology Co., Ltd.
        urutils Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000058c(1420) rfwsrv.exe
    00400000[00037000]
      [AM] 6. d:\rising\rfw\rfwsrv.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal FireWall Service
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 51. c:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 53. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001F000]
      [ M] 55. d:\rising\rfw\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00780000[00024000]
      [ M] 56. d:\rising\rfw\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    007D0000[0000E000]
      [ M] 57. d:\rising\rfw\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    007F0000[00030000]
      [ M] 58. d:\rising\rfw\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    00B10000[0000F000]
      [ M] 63. d:\rising\rfw\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00B20000[0000C000]
      [ M] 107. d:\rising\rfw\rfwlog.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal FireWall Logfile DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00B30000[00018000]
      [ M] 108. d:\rising\rfw\rfwdrv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal FireWall Driver DLL
        .text,.rdata,.data,.rsrc,.reloc,


    731B0000[0000A000]
      [ M] 109. d:\rising\rfw\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.rdata,.data,.rsrc,.reloc,


    00C50000[0000E000]
      [ M] 110. d:\rising\rfw\ijt_ctrl.dll
        Beijing Rising Information Technology Co., Ltd.
        Injector Controller
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    00DA0000[00016000]
      [ M] 111. d:\rising\rfw\unvdet.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanUnv
        .text,.rdata,.data,.rsrc,.reloc,


    018F0000[0001B000]
      [ M] 112. d:\rising\rfw\mports.dll
        Beijing Rising Information Technology Co., Ltd.
        get ports list
        .text,.rdata,.data,.rsrc,.reloc,



  + 000005ac(1452) RavTask.exe
    00400000[00020000]
      [AM] 4. d:\rising\rav\ravtask.exe
        Beijing Rising Information Technology Co., Ltd.
        ravtask
        .text,.rdata,.data,.rsrc,


    10000000[00016000]
      [ M] 113. d:\rising\rav\rsconf.dll
        Beijing Rising Information Technology Co., Ltd.
        rsconf Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00760000[0000E000]
      [ M] 79. d:\rising\rav\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    00780000[00031000]
      [ M] 80. d:\rising\rav\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    009C0000[00010000]
      [ M] 78. d:\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 53. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    009E0000[00018000]
      [ M] 114. d:\rising\rav\rsstub.dll
        Beijing Rising Information Technology Co., Ltd.
        rsstub Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00CD0000[00028000]
      [ M] 115. d:\rising\rav\rstask.dll
        Beijing Rising Information Technology Co., Ltd.
        RsTask Control
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000614(1556) rfwproxy.exe
    00400000[00236000]
      [AM] 5. d:\rising\rfw\rfwproxy.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal Proxy Service
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 51. c:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    731B0000[0000A000]
      [ M] 109. d:\rising\rfw\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001F000]
      [ M] 55. d:\rising\rfw\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00A80000[00024000]
      [ M] 56. d:\rising\rfw\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00AC0000[0000F000]
      [ M] 63. d:\rising\rfw\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        rule DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00AD0000[00011000]
      [ M] 116. d:\rising\rfw\urlrule.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlRule  Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,


    01330000[00016000]
      [ M] 117. d:\rising\rfw\monmid.dll
        Beijing Rising Information Technology Co., Ltd.
        URL filter dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000006f0(1776) rfwstub.exe
    00400000[00017000]
      [ M] 118. d:\rising\rfw\rfwstub.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal FireWall Service Rfwstub 
        .text,.rdata,.data,.rsrc,


    7C3A0000[0007B000]
      [ M] 53. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00028000]
      [ M] 59. d:\rising\rfw\rscommon.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000700(1792) ukwsvr.exe
    00400000[00025000]
      [AM] 9. c:\program files\unikeyword\ukwsvr.exe
        China Internet Network Information Center
        Ukwsvr Module
        .text,.rdata,.data,.rsrc,


    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000780(1920) ScanFrm.exe
    00400000[0000B000]
      [AM] 8. d:\rising\rav\scanfrm.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Framework
        .text,.rdata,.data,.rsrc,


    7C3A0000[0007B000]
      [ M] 53. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00029000]
      [ M] 65. d:\rising\rav\combase.dll
        Beijing Rising Information Technology Co., Ltd.
        combase
        .text,.rdata,.data,.rsrc,.reloc,


    003E0000[00019000]
      [ M] 68. d:\rising\rav\moncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        MonComm
        .text,.rdata,.data,.rsrc,.reloc,


    00900000[0000A000]
      [ M] 119. d:\rising\rav\scansrvp.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSrvP Module
        .text,.rdata,.data,.rsrc,.reloc,


    00910000[00010000]
      [ M] 78. d:\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C20000[0000E000]
      [ M] 120. d:\rising\rav\scansrv.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSrv Module
        .text,.rdata,.data,.rsrc,.reloc,


    01130000[0002E000]
      [ M] 81. d:\rising\rav\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01160000[00019000]
      [ M] 82. d:\rising\rav\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000079c(1948) Explorer.EXE
    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00024000]
      [AM] 39. c:\windows\system32\ravext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007dc(2012) rsnetsvr.exe
    00400000[00079000]
      [ M] 121. d:\rising\rav\rsnetsvr.exe
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,


    10000000[00030000]
      [ M] 122. d:\rising\rav\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    00380000[00019000]
      [ M] 82. d:\rising\rav\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    00BA0000[0002E000]
      [ M] 81. d:\rising\rav\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00E10000[00010000]
      [ M] 78. d:\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 53. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000098c(2444) alg.exe
    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,



  + 000009e0(2528) rstray.exe
    00400000[00023000]
      [AM] 41. d:\rising\卡卡\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        RSTray
        .text,.rdata,.data,.rsrc,


    10000000[0003C000]
      [ M] 123. d:\rising\卡卡\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 124. d:\rising\卡卡\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 125. d:\rising\卡卡\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 126. d:\rising\卡卡\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C00000[00024000]
      [ M] 127. d:\rising\卡卡\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    00C30000[00019000]
      [ M] 128. d:\rising\卡卡\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00026000]
      [ M] 129. d:\rising\卡卡\rscommon.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C60000[0002E000]
      [ M] 130. d:\rising\卡卡\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 131. d:\rising\卡卡\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01070000[00068000]
      [ M] 132. d:\rising\卡卡\runiep.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware tray
        .text,.rdata,.data,.rsrc,.reloc,


    010E0000[00034000]
      [ M] 133. d:\rising\卡卡\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01140000[0001F000]
      [ M] 84. d:\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01160000[00024000]
      [ M] 134. d:\rising\卡卡\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000a14(2580) RsTray.exe
    00400000[00023000]
      [AM] 43. d:\rising\rav\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising tray framework
        .text,.rdata,.data,.rsrc,


    10000000[00023000]
      [ M] 135. d:\rising\rav\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising tray common service
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 53. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 52. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00023000]
      [ M] 136. d:\rising\rav\rslang.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00A80000[0002E000]
      [ M] 81. d:\rising\rav\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00AB0000[00019000]
      [ M] 82. d:\rising\rav\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00025000]
      [ M] 137. d:\rising\rav\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    00F00000[00010000]
      [ M] 78. d:\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01110000[00013000]
      [ M] 138. d:\rising\rav\monstate.dll
        Beijing Rising Information Technology Co., Ltd.
        MonState
        .text,.rdata,.data,.rsrc,.reloc,


    01140000[0000B000]
      [ M] 139. d:\rising\rav\scanevnt.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Event Handler
        .text,.rdata,.data,.rsrc,.reloc,


    01150000[00014000]
      [ M] 140. d:\rising\rav\rsvrinfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsvrinfo Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01180000[0003C000]
      [ M] 89. d:\rising\rav\recomp.dll
        Beijing Rising Information Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    011D0000[00036000]
      [ M] 90. d:\rising\rav\refs.dll
        Beijing Rising Information Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01220000[00030000]
      [ M] 94. d:\rising\rav\viruslib.dll
        Beijing Rising Information Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01480000[00028000]
      [ M] 95. d:\rising\rav\relibldr.dll
        Beijing Rising Information Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[000C3000]
      [ M] 141. d:\rising\rav\rsguilib.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    7C140000[00103000]
      [ M] 51. c:\windows\system32\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    01640000[00016000]
      [ M] 113. d:\rising\rav\rsconf.dll
        Beijing Rising Information Technology Co., Ltd.
        rsconf Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01670000[0000E000]
      [ M] 79. d:\rising\rav\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    01690000[00031000]
      [ M] 80. d:\rising\rav\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    017D0000[0002B000]
      [ M] 142. d:\rising\rav\rspalvd.dll
        Beijing Rising Information Technology Co., Ltd.
        rspalvd
        .text,.rdata,.data,.rsrc,.reloc,


    33000000[00025000]
      [ M] 143. d:\rising\rav\ravbintl.dll
        Beijing Rising Information Technology Co., Ltd.
        ravbintl Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01820000[0006C000]
      [ M] 144. d:\rising\rav\mruleui.dll
        Beijing Rising Information Technology Co., Ltd.
        mruleui
        .text,.rdata,.data,.rsrc,.reloc,


    018C0000[0006A000]
      [ M] 145. d:\rising\rav\montray.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiVirus 2009
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 146. d:\rising\rav\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    34500000[00020000]
      [ M] 147. d:\rising\rav\ravitray.dll
        Beijing Rising Information Technology Co., Ltd.
        ravitray Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01E80000[00059000]
      [ M] 148. d:\rising\rav\scanprxy.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanPrxy Module
        .text,.rdata,.data,.rsrc,.reloc,


    01EE0000[00043000]
      [ M] 149. d:\rising\rav\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000a2c(2604) ctfmon.exe
    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    70000000[00019000]
      [ M] 49. d:\rising\rfw\ijt_base.dll
        Beijing Rising Information Technology Co., Ltd.
        Inject Base
        .text,.rdata,.data,.rsrc,.reloc,


    75000000[0000F000]
      [ M] 50. d:\rising\rfw\olemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Ole Mon Dll
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000e40(3648) ras.exe
    00400000[0000B000]
      [ M] 150. d:\rising\卡卡\ras.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 151. d:\rising\卡卡\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 126. d:\rising\卡卡\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00047000]
      [ M] 152. d:\rising\卡卡\kakamgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 125. d:\rising\卡卡\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B70000[00019000]
      [ M] 128. d:\rising\卡卡\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    00BA0000[0001F000]
      [ M] 84. d:\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00BC0000[00024000]
      [ M] 134. d:\rising\卡卡\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00D10000[0002E000]
      [ M] 130. d:\rising\卡卡\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F80000[00058000]
      [ M] 153. d:\rising\卡卡\dbmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 124. d:\rising\卡卡\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    010E0000[0002D000]
      [ M] 154. d:\rising\卡卡\pweb.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01110000[000C1000]
      [ M] 155. d:\rising\卡卡\pscan.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    011E0000[00034000]
      [ M] 133. d:\rising\卡卡\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01240000[00070000]
      [ M] 156. d:\rising\卡卡\pset.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    012D0000[0002A000]
      [ M] 157. d:\rising\卡卡\pdefend.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01390000[000B6000]
      [ M] 158. d:\rising\卡卡\ptools.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01550000[0008D000]
      [ M] 159. d:\rising\卡卡\psysinfo.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01330000[00024000]
      [AM] 39. c:\windows\system32\ravext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 131. d:\rising\卡卡\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000e68(3688) knownsvr.exe
    00400000[00072000]
      [ M] 160. d:\rising\卡卡\knownsvr.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    10000000[00034000]
      [ M] 133. d:\rising\卡卡\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 48. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    00A90000[0002E000]
      [ M] 130. d:\rising\卡卡\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00AC0000[00019000]
      [ M] 128. d:\rising\卡卡\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,