[CODE] 2009-01-10,11:04:51 System Repair Engineer 2.7.0.1210 Smallfrogs (http://www.KZTechs.com) Windows XP Professional Service Pack 2 (Build 2600) - 管理权限用户 - 完整功能 以下内容被选中: 所有的启动项目(包括注册表、启动文件夹、服务等) 浏览器加载项 正在运行的进程(包括进程模块信息) 文件关联 Winsock 提供者 Autorun.inf HOSTS 文件 进程特权扫描 计划任务 API HOOK 隐藏进程 启动项目 注册表 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Publisher] <"C:\Downloads\msn_messenger8.5_green\MSN Messenger\msnmsgr.exe" /background> [File is missing] [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] <> [N/A] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] [(Verified)Microsoft Windows Hardware Compatibility Publisher] <"C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe" /enum:on /alerts:on /notifications:on /fl:on /fr:on /appData:on /tmcp:on> [HP] [Hewlett-Packard Co.] <"C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"> [(Verified)"Adobe Systems, Incorporated"] [(Verified)Microsoft Corporation] <"C:\Program Files\Rising\Rfw\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] <"C:\Program Files\Rising\Rav\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Corporation Limited] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] [File is missing] [File is missing] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Component Publisher] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] [] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{AEB6717E-7E19-11d0-97EE-00C04FD91972}> [(Verified)Microsoft Windows Component Publisher] <{3FDEB171-8F86-0009-0001-69B8DB553683}> [File is missing] <{A3C8E09C-EAAE-4FD7-93FD-4623401BE028}> [] <{5A041F13-A111-12B0-B0CF-F99818AA68A5}> [File is missing] <{FB46946A-8982-4B5D-B858-4F225EA7E673}> [] <{699A8635-CDFF-4D17-B4B7-AB47DAB039DB}> [] <{675B9911-1FA5-4278-8411-41CFF064D1E2}> [] <{353FC55C-C77D-4B35-95B0-5ECAB2008AAF}> [] <{56E902B8-60D0-44BE-9A80-9DB01B34B629}> [] <{D28E74F1-7A4D-4A0B-B2AF-E658F57C5DF9}> [] <{656CDEBA-5755-41A8-81C5-D1FD97DD2406}> [] <{3FDEB171-8F86-0008-0001-69B8DB553683}> [File is missing] <{48CD7A99-6A07-4EE7-A038-6016E90E77FD}> [] <{3FDEB171-8F86-D001-D001-69B8DB553683}> [File is missing] <{385A7427-9A29-4118-88B1-1F74237D00CB}> [] <{09A2FA53-341E-421F-8E30-549499B371D4}> [] <{E9CBCB54-2554-4093-829A-AAC4BF78DEAD}> [] <{2239B5E0-E928-44A9-98ED-516101C16579}> [] <{6707C79B-9C73-4FCD-A7B8-6A6C553043E5}> [] <{8D1C1060-77B6-4FF4-9927-4C67C0BD3F05}> [] <{A317CDBB-06E9-4EA1-84B1-67BBEF613D3B}> [] <{14441013-AE5C-4097-9BBF-BFDC0C376816}> [] <{E53CA0A2-3B43-407C-9834-D700BDFCB215}> [] <{5FBDC9BB-DAC7-4359-B69F-DAB809183110}> [] <{8EEECF3F-43AD-49B1-84EA-0AFD75069C0E}> [] <{07BB19D0-FA36-476C-8B79-29A64942CAC3}> [] <{A7B23190-A2E0-4D87-8611-7EFB80005C49}> [] <{88A181DD-A80A-49B2-B6A2-790105ABD859}> [] <{48BE9EF5-D0C8-41E5-A1F6-93F495789715}> [] <{17C4F824-E74C-436A-A365-2B282C8AF03A}> [] <{7B3BCCC3-F594-42EB-BE57-2B77645E2A1A}> [] <{ACB69D03-C8A5-4609-8D40-43426DB70000}> [] <{69BFE907-D682-4801-AD6E-75DF3CB5D7AF}> [] <{5A041F13-A111-12A4-B0CF-F99818AA68A5}> [] <{B48133C2-868B-4658-9E35-DDE38FA075B4}> [] <{BD1A03D7-592B-4BF6-8FC7-1EDF854E529D}> [] <{675CCFEB-763C-41C3-94CB-B6327416A014}> [] <{ABDD995C-E758-42D5-BD10-1F38AAB76230}> [] <{053E07B1-86E7-4C48-BD55-4AE28801CD3C}> [] <{8AF01555-5CE9-41B7-A671-919C2DDD5C94}> [] <{D0354D4C-C0FF-4D0D-9079-99844B3585AE}> [] <{5155ABA2-6ED4-4AE4-92CA-0CA23266C4BE}> [] <{FB7DFA67-2FE4-457F-B4C7-C1E78CC95DCC}> [] <{FB5A7EAF-6668-4B95-B2A4-F61FBF8AA2B2}> [] <{DDF5B4F9-5CC2-41CB-924C-7FE9EE1C74EE}> [] <{D55DAED4-2035-46DB-B1D5-D170463AA868}> [] <{D8233458-2848-414E-997E-7502130D0726}> [] <{32CD708B-60A7-4C00-9377-D73EAA495F0F}> [(Verified)Beijing Rising Information Technology Corporation Limited] <{9E67CB46-19A8-4285-84F2-5B9977CE74A5}> [] <{ED96FA32-E68E-4384-9E45-3963E0BB0658}> [] <{FDE48342-9E2D-4E9E-AE79-1C241D87A073}> [] <{8FDB9A72-73D2-4E07-B3B7-3F918EDC7C7B}> [] <{88D16DC4-728B-40D5-9730-2FA672F88908}> [] <{6FE56E0D-AFAC-4C1E-BFA9-907A3920A74F}> [] <{25AD1351-4660-4A60-92C5-021191187520}> [] <{9B020C13-6063-4CA0-8917-36F35E024C8D}> [] <{60F01A7A-6E34-4FE1-AB1F-FB1D109F88AB}> [] <{27FC32B2-D773-4E93-9065-CCC47D5CF8DB}> [] <{D88CECFD-7D7C-4B7D-A81A-820FE8068B5E}> [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher] <%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Windows Publisher] [(Verified)Microsoft Windows Publisher] [] [] <699A8635> [] <675B9911> [] <353FC55C> [] <56E902B8> [] [] <656CDEBA> [] <48CD7A99> [] <385A7427> [] <09A2FA53> [] [] <2239B5E0> [] <6707C79B> [] <8D1C1060> [] [] <14441013> [] [] <5FBDC9BB> [] <8EEECF3F> [] <07BB19D0> [] [] <88A181DD> [] <48BE9EF5> [] <17C4F824> [] <7B3BCCC3> [] [] <69BFE907> [] [File is missing] [] [] <675CCFEB> [] [] <053E07B1> [] [File is missing] <8AF01555> [] [] <5155ABA2> [] [] [] [] [] [] <9E67CB46> [] [] [] [File is missing] <8FDB9A72> [] <88D16DC4> [] <6FE56E0D> [] <25AD1351> [] <9B020C13> [] <60F01A7A> [] <27FC32B2> [] [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher] <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] <浏览器自定义组件> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Windows Component Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] <%SystemRoot%\system32\ie4uinit.exe> [(Verified)Microsoft Windows Publisher] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [Microsoft Corporation] [HKEY_CURRENT_USER\Control Panel\Desktop] [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <; nwiz.exe /install> [] ================================== 启动文件夹 [Adobe Acrobat Speed Launcher] C:\WINDOWS\Installer\{AC76BA86-2052-0000-7760-000000000003}\_SC_Acrobat.exe [N/A]> [Adobe Gamma Loader] C:\PROGRA~1\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [Adobe Systems, Inc.]> [Adobe Reader Synchronizer] C:\PROGRA~1\Adobe\ACROBA~1.0\Acrobat\ADOBEC~1.EXE []> ================================== 服务 [Adobe LM Service / Adobe LM Service][Stopped/Manual Start] <"C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe"><> [DCOM Server Process Launcher / DcomLaunch][Running/Auto Start] %SystemRoot%\system32\rpcss.dll> [FLEXnet License Server for VPI / FLEXnet License Server for VPI][Running/Auto Start] [FLEXnet Licensing Service / FLEXnet Licensing Service][Running/Manual Start] <"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"> [Human Interface Device Access / HidServ][Stopped/Disabled] %SystemRoot%\System32\hidserv.dll> [hpqcxs08 / hpqcxs08][Running/Manual Start] C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll> [HP CUE DeviceDiscovery 服务 / hpqddsvc][Running/Auto Start] C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll> [MATLAB Server / matlabserver][Running/Auto Start] [NetMeeting Remote Desktop Sharing / mnmsrvc][Stopped/Disabled] <(File is missing)> [Net Driver HPZ12 / Net Driver HPZ12][Running/Auto Start] C:\WINDOWS\system32\HPZinw12.dll> [NVIDIA Display Driver Service / NVSvc][Running/Auto Start] [Pml Driver HPZ12 / Pml Driver HPZ12][Running/Auto Start] C:\WINDOWS\system32\HPZipm12.dll> [Rav Process Communication Center / RavCCenter][Stopped/Auto Start] [Rising RavTask Manager / RavTask][Running/Auto Start] <"C:\Program Files\Rising\Rav\RavTask.exe" RavTask> [Rfw Process Communication Center / RfwCCenter][Stopped/Auto Start] [Rising Personal Firewall Service / RfwService][Stopped/Auto Start] [Rising RfwTask Manager / RfwTask][Running/Auto Start] <"C:\Program Files\Rising\Rfw\RavTask.exe" RfwTask> [Remote Procedure Call (RPC) / RpcSs][Running/Auto Start] c:\windows\system32\rpcss.dll> [Rising RealTime Monitor / RsRavMon][Stopped/Auto Start] [Rising Scan Service / RsScanSrv][Stopped/Auto Start] [System Restore Service / srservice][Stopped/Disabled] C:\WINDOWS\system32\srsvc.dll> ================================== 驱动程序 [gdrv / gdrv][Stopped/Manual Start] <\??\C:\WINDOWS\gdrv.sys> [Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start] [hookcont / hookcont][Running/System Start] [hooksys / hooksys][Stopped/Disabled] [HPFXBULK / HPFXBULK][Running/Manual Start] [HPFXFAX / HPFXFAX][Running/Manual Start] [Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start] [msiffei / msiffei][Stopped/Manual Start] [nv / nv][Running/Manual Start] [presafe / presafe][Stopped/Auto Start] <\??\C:\WINDOWS\system32\drivers\presafe.sys> [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [Rising RfwBase Driver / RfwBase9][Running/Manual Start] [rfwtdi / rfwtdi][Running/Auto Start] <\??\C:\Program Files\Rising\Rfw\rfwtdi.sys> [rsfwdrv / rsfwdrv][Running/System Start] <\??\C:\Program Files\Rising\Rfw\rsfwdrv.sys> [RsNTGDI / RsNTGDI][Running/Boot Start] <\SystemRoot\system32\Drivers\RsNTGdi.sys> [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start] [Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver / RTLE8023xp][Running/Manual Start] [Secdrv / Secdrv][Stopped/Manual Start] [SATALink driver accelerator / SiFilter][Running/Boot Start] <\SystemRoot\system32\DRIVERS\SiWinAcc.sys> [System Restore Filter Driver / sr][Stopped/Disabled] <\SystemRoot\system32\DRIVERS\sr.sys> [TCP/IP Protocol Driver / Tcpip][Running/System Start] ================================== 浏览器加载项 [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} [Adobe PDF Reader Link Helper] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Info cache] {295AB8C6-FB22-4D17-8834-064E2BA0A6F0} [FGCatchUrl] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} [] {5A041F13-A111-12A4-B0CF-F99818AA68A5} [] {5A041F13-A111-12B0-B0CF-F99818AA68A5} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [Adobe PDF Conversion Toolbar Helper] {AE7CD045-E861-484f-8273-0445EE161910} [FlashGet GetFlash Class] {F156768E-81EF-470C-9057-481BA8380DBA} [Web Browser Applet Control] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} [信息检索(&R)] {92780B25-18CC-41C8-B9BE-3C9C571A8263} [雨林木风] {947DDACD-FBDE-4BE7-A8DE-77505872B75F} [Adobe PDF] {47833539-D0C5-4125-9FA8-0819E2EAAC93} [Java Plug-in 1.4.1_07] {8AD9C840-044E-11D1-B3E9-00805F499D93} [Java Plug-in 1.4.1_07] {CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA} [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [Adobe PDF Reader Link Helper] {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [Web Browser Applet Control] {08B0E5C0-4FCB-11CF-AAA5-00401C608501} [Info cache] {295AB8C6-FB22-4D17-8834-064E2BA0A6F0} [FGCatchUrl] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} [Adobe PDF] {47833539-D0C5-4125-9FA8-0819E2EAAC93} [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [] {5A041F13-A111-12A4-B0CF-F99818AA68A5} [] {5A041F13-A111-12B0-B0CF-F99818AA68A5} [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [] {92780B25-18CC-41C8-B9BE-3C9C571A8263} <, > [] {947DDACD-FBDE-4BE7-A8DE-77505872B75F} <, > [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [Adobe PDF Conversion Toolbar Helper] {AE7CD045-E861-484F-8273-0445EE161910} [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [FlashGet GetFlash Class] {F156768E-81EF-470C-9057-481BA8380DBA} [FGCatchUrl] {FB5DA724-162B-11D3-8B9B-AA70B4B0B524} [&使用快车(FlashGet)下载] [&使用快车(FlashGet)下载全部链接] [使用迅雷下载] [使用迅雷下载全部链接] [导出到 Microsoft Office Excel(&X)] [转换为 Adobe PDF] [转换选取内容为 Adobe PDF] [转换选取内容到现有的 PDF] [转换选定的链接到 Adobe PDF] [转换选定的链接到现有的 PDF] [转换链接目标为 Adobe PDF] [转换链接目标到现有的 PDF] [追加到现有的 PDF] ================================== 正在运行的进程 [PID: 1124 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1184 / SYSTEM][\??\C:\WINDOWS\system32\csrss.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\csrss.dll] [N/A, ] [C:\WINDOWS\system32\sh05020.dll] [N/A, ] [C:\WINDOWS\system32\sh08025.dll] [N/A, ] [C:\WINDOWS\system32\sh12018.dll] [N/A, ] [PID: 1220 / SYSTEM][\??\C:\WINDOWS\system32\winlogon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1264 / SYSTEM][C:\WINDOWS\system32\services.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1276 / SYSTEM][C:\WINDOWS\system32\lsass.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1436 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [c:\windows\system32\rpcss.dll] [N/A, ] [C:\WINDOWS\system32\anynice360.dll] [N/A, ] [PID: 1500 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [c:\windows\system32\rpcss.dll] [N/A, ] [PID: 1680 / SYSTEM][C:\Program Files\Rising\Rav\CCENTER.EXE] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37] [C:\Program Files\Rising\Rav\cnt08.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1700 / SYSTEM][C:\Program Files\Rising\Rfw\CCENTER.EXE] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rfw\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rfw\cnt09.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1708 / SYSTEM][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1956 / NETWORK SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2024 / SYSTEM][C:\Program Files\Rising\Rfw\rfwsrv.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rfw\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rfw\MonBase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rfw\MonComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\Program Files\Rising\Rfw\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\Program Files\Rising\Rfw\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.25] [C:\Program Files\Rising\Rfw\rfwsrv.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.75] [C:\Program Files\Rising\Rfw\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rfw\mPorts.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.0] [C:\Program Files\Rising\Rfw\rfwdrvc.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.3] [C:\Program Files\Rising\Rfw\Rfwdrv.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.5] [C:\Program Files\Rising\Rfw\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\Rfw\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rfw\urlrule.dll] [Beijing Rising Information Technology Co., Ltd., 1.0.0.18] [C:\Program Files\Rising\Rfw\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rfw\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rfw\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rfw\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rfw\rfwproxy.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.24] [C:\Program Files\Rising\Rfw\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rfw\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rfw\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\Rfw\urllib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [PID: 336 / SYSTEM][C:\WINDOWS\system32\spoolsv.exe] [(Verified) Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\AdobePDF.dll] [Adobe Systems Incorporated., 8.0.0.00] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdistRes.CHS] [, ] [C:\WINDOWS\system32\hppfaxprintermon5.dll] [Hewlett-Packard Company, 5, 0, 1, 6] [C:\WINDOWS\system32\HpTcpMon.dll] [Hewlett Packard, 7.01.03.031] [C:\WINDOWS\system32\HPTcpMUI.dll] [Microsoft Corporation, 7.01.03.031] [C:\WINDOWS\system32\hpzjrd01.dll] [Hewlett Packard, 2.01.00.004] [C:\WINDOWS\system32\hptcpmib.dll] [Hewlett Packard, 7.01.03.031] [C:\WINDOWS\System32\spool\PRTPROCS\W32X86\hpzpp5mc.DLL] [Hewlett-Packard Corporation, 61.072.467.21] [PID: 704 / Administrator][C:\WINDOWS\Explorer.EXE] [(Verified) Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\ajcoegpc.dll] [N/A, ] [C:\WINDOWS\system32\fbkmpkma.dll] [N/A, ] [C:\WINDOWS\system32\mppaomjl.dll] [N/A, ] [C:\WINDOWS\system32\mnlbpphh.dll] [N/A, ] [C:\WINDOWS\system32\jljfcllc.dll] [N/A, ] [C:\WINDOWS\system32\lmepgibo.dll] [N/A, ] [C:\WINDOWS\system32\D28E74F1.dll] [N/A, ] [C:\WINDOWS\system32\mlmcdeba.dll] [N/A, ] [C:\WINDOWS\system32\kocdnapp.dll] [N/A, ] [C:\WINDOWS\system32\jolankin.dll] [N/A, ] [C:\WINDOWS\system32\gpaifalj.dll] [N/A, ] [C:\WINDOWS\system32\epcbcblk.dll] [N/A, ] [C:\WINDOWS\system32\iijpbleg.dll] [N/A, ] [C:\WINDOWS\system32\mngncnpb.dll] [N/A, ] [C:\WINDOWS\system32\odhchgmg.dll] [N/A, ] [C:\WINDOWS\system32\A317CDBB.dll] [N/A, ] [C:\WINDOWS\system32\hkkkhghj.dll] [N/A, ] [C:\WINDOWS\system32\eljcagai.dll] [N/A, ] [C:\WINDOWS\system32\lfbdcpbb.dll] [N/A, ] [C:\WINDOWS\system32\oeeecfjf.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\artlbbdll.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\anynice360.dll] [N/A, ] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat Elements\ContextMenu.dll] [Adobe Systems Inc., 8.0.5.2006102200\0] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL] [Microsoft Corporation, 8.00.50727.762] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat Elements\ContextMenu.chs] [Adobe Systems Inc., 8.0.5.2006102200\0] [C:\Program Files\WinRAR\rarext.dll] [N/A, ] [C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200] [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 42] [C:\Program Files\Thunder\Components\ResWorker\DsBho_00.dll] [, 1, 0, 0, 12] [C:\Program Files\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS] [Adobe Systems, Inc., 8.0.0.0] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 8.0.0.0] [PID: 736 / SYSTEM][C:\Program Files\Rising\Rav\rsnetsvr.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\Program Files\Rising\Rav\NComm.dll] [Beijing Rising Information Technology Co., Ltd., 6.0.0.9] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1016 / LOCAL SERVICE][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1076 / SYSTEM][C:\PROGRA~1\VPI\VPILIC~1.0\lmgrd.exe] [Macrovision Corporation, 11, 4, 100, 0] [PID: 1096 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [c:\program files\hp\digital imaging\bin\hpqddsvc.dll] [Hewlett-Packard Co., 90.0.146.000] [c:\program files\hp\digital imaging\bin\hpqddcmn.dll] [Hewlett-Packard Co., 90.0.146.000] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762] [c:\program files\hp\digital imaging\bin\hpqcxs08.dll] [Hewlett-Packard Co., 90.0.236.000] [PID: 1116 / SYSTEM][C:\PROGRA~1\VPI\VPILIC~1.0\lmgrd.exe] [Macrovision Corporation, 11, 4, 100, 0] [PID: 1140 / SYSTEM][C:\MATLAB7\webserver\bin\win32\matlabserver.exe] [N/A, ] [C:\MATLAB7\bin\win32\libeng.dll] [The MathWorks Inc., 7.0.0.12365] [C:\MATLAB7\bin\win32\libut.dll] [The MathWorks Inc., 7.0.0.12365] [C:\MATLAB7\bin\win32\icuuc24.dll] [IBM Corporation and others, 2, 4, 0, 0] [C:\MATLAB7\bin\win32\icudt24l.dll] [N/A, ] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\MATLAB7\bin\win32\icuin24.dll] [IBM Corporation and others, 2, 4, 0, 0] [C:\MATLAB7\bin\win32\icuio24.dll] [IBM Corporation and others, 2, 4, 0, 0] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\MATLAB7\bin\win32\libmx.dll] [The MathWorks Inc., 7.0.0.12365] [C:\MATLAB7\bin\win32\libz.dll] [N/A, ] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [c:\matlab7\bin\win32\mwoles05.dll] [N/A, ] [c:\matlab7\bin\win32\mvalue.dll] [N/A, ] [c:\matlab7\bin\win32\comcli.dll] [N/A, ] [c:\matlab7\bin\win32\m_dispatcher.dll] [N/A, ] [c:\matlab7\bin\win32\xerces-c_2_1_0.dll] [Apache Software Foundation, 2, 1, 0] [c:\matlab7\bin\win32\mpath.dll] [The MathWorks Inc., 7.0.0.14278] [c:\matlab7\bin\win32\libmwservices.dll] [N/A, ] [c:\matlab7\bin\win32\datasvcs.dll] [N/A, ] [c:\matlab7\bin\win32\udd.dll] [N/A, ] [c:\matlab7\bin\win32\mcos.dll] [N/A, ] [c:\matlab7\bin\win32\uiw.dll] [The MathWorks Inc., 7.0.0.18578] [c:\matlab7\bin\win32\libmwhardcopy.dll] [N/A, ] [c:\matlab7\bin\win32\m_interpreter.dll] [The MathWorks Inc., 7.0.0.17225a] [c:\matlab7\bin\win32\m_ir.dll] [N/A, ] [c:\matlab7\bin\win32\libmex.dll] [The MathWorks Inc., 7.0.0.12365] [c:\matlab7\bin\win32\mlib.dll] [N/A, ] [c:\matlab7\bin\win32\m_parser.dll] [The MathWorks Inc., 7.0.0.14278] [c:\matlab7\bin\win32\ir_xfmr.dll] [N/A, ] [c:\matlab7\bin\win32\libmat.dll] [The MathWorks Inc., 7.0.0.12365] [c:\matlab7\bin\win32\m_pcodeio.dll] [N/A, ] [c:\matlab7\bin\win32\m_pcodegen.dll] [N/A, ] [c:\matlab7\bin\win32\libmwgui.dll] [N/A, ] [c:\matlab7\bin\win32\bridge.dll] [N/A, ] [c:\matlab7\bin\win32\jmi.dll] [The MathWorks Inc., 7.0.0.14434] [c:\matlab7\bin\win32\hg.dll] [The MathWorks Inc., 7.0.0.19355a] [c:\matlab7\bin\win32\libuij.dll] [N/A, ] [c:\matlab7\bin\win32\numerics.dll] [The MathWorks Inc., 7.0.0.14894] [c:\matlab7\bin\win32\libfftw3.dll] [N/A, ] [c:\matlab7\bin\win32\libfftw3f.dll] [N/A, ] [c:\matlab7\bin\win32\libmwlapack.dll] [N/A, ] [c:\matlab7\bin\win32\libmwumfpack.dll] [N/A, ] [c:\matlab7\bin\win32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [c:\matlab7\bin\win32\udd_mi.dll] [The MathWorks Inc., 7.0.0.14245] [c:\matlab7\bin\win32\uinone.dll] [N/A, ] [C:\MATLAB7\bin\win32\atlas_PIII.dll] [N/A, ] [C:\MATLAB7\bin\win32\lapack.dll] [N/A, ] [C:\MATLAB7\bin\win32\DFORRT.dll] [Compaq Computer Corporation, 6.6 - 893 (Update A)] [C:\WINDOWS\system32\MFC71CHS.DLL] [Microsoft Corporation, 7.10.3077.0] [PID: 1624 / SYSTEM][C:\PROGRA~1\VPI\VPILIC~1.0\bned.exe] [N/A, ] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1864 / LOCAL SERVICE][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [c:\windows\system32\hpzinw12.dll] [Hewlett-Packard, 12,1,1,54] [PID: 1908 / SYSTEM][C:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.11.7519] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.7519] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 1968 / LOCAL SERVICE][C:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [c:\windows\system32\hpzipm12.dll] [Hewlett-Packard, 12,1,1,54] [PID: 2020 / SYSTEM][C:\Program Files\Rising\Rav\RavTask.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 22] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\rsstub.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\Rav\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 35] [PID: 116 / SYSTEM][c:\matlab7\bin\win32\matlab.exe] [The MathWorks Inc., 7.0.0.19156a] [c:\matlab7\bin\win32\mcr.dll] [N/A, ] [c:\matlab7\bin\win32\mpath.dll] [The MathWorks Inc., 7.0.0.14278] [c:\matlab7\bin\win32\libut.dll] [The MathWorks Inc., 7.0.0.12365] [c:\matlab7\bin\win32\icuuc24.dll] [IBM Corporation and others, 2, 4, 0, 0] [c:\matlab7\bin\win32\icudt24l.dll] [N/A, ] [c:\matlab7\bin\win32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [c:\matlab7\bin\win32\icuin24.dll] [IBM Corporation and others, 2, 4, 0, 0] [c:\matlab7\bin\win32\icuio24.dll] [IBM Corporation and others, 2, 4, 0, 0] [c:\matlab7\bin\win32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [c:\matlab7\bin\win32\mwoles05.dll] [N/A, ] [c:\matlab7\bin\win32\mvalue.dll] [N/A, ] [c:\matlab7\bin\win32\libmx.dll] [The MathWorks Inc., 7.0.0.12365] [c:\matlab7\bin\win32\libz.dll] [N/A, ] [c:\matlab7\bin\win32\comcli.dll] [N/A, ] [c:\matlab7\bin\win32\m_dispatcher.dll] [N/A, ] [c:\matlab7\bin\win32\xerces-c_2_1_0.dll] [Apache Software Foundation, 2, 1, 0] [c:\matlab7\bin\win32\libmwservices.dll] [N/A, ] [c:\matlab7\bin\win32\datasvcs.dll] [N/A, ] [c:\matlab7\bin\win32\udd.dll] [N/A, ] [c:\matlab7\bin\win32\mcos.dll] [N/A, ] [c:\matlab7\bin\win32\uiw.dll] [The MathWorks Inc., 7.0.0.18578] [c:\matlab7\bin\win32\libmwhardcopy.dll] [N/A, ] [c:\matlab7\bin\win32\m_interpreter.dll] [The MathWorks Inc., 7.0.0.17225a] [c:\matlab7\bin\win32\m_ir.dll] [N/A, ] [c:\matlab7\bin\win32\libmex.dll] [The MathWorks Inc., 7.0.0.12365] [c:\matlab7\bin\win32\mlib.dll] [N/A, ] [c:\matlab7\bin\win32\m_parser.dll] [The MathWorks Inc., 7.0.0.14278] [c:\matlab7\bin\win32\ir_xfmr.dll] [N/A, ] [c:\matlab7\bin\win32\libmat.dll] [The MathWorks Inc., 7.0.0.12365] [c:\matlab7\bin\win32\m_pcodeio.dll] [N/A, ] [c:\matlab7\bin\win32\m_pcodegen.dll] [N/A, ] [c:\matlab7\bin\win32\libmwgui.dll] [N/A, ] [c:\matlab7\bin\win32\bridge.dll] [N/A, ] [c:\matlab7\bin\win32\jmi.dll] [The MathWorks Inc., 7.0.0.14434] [c:\matlab7\bin\win32\hg.dll] [The MathWorks Inc., 7.0.0.19355a] [c:\matlab7\bin\win32\libuij.dll] [N/A, ] [c:\matlab7\bin\win32\numerics.dll] [The MathWorks Inc., 7.0.0.14894] [c:\matlab7\bin\win32\libfftw3.dll] [N/A, ] [c:\matlab7\bin\win32\libfftw3f.dll] [N/A, ] [c:\matlab7\bin\win32\libmwlapack.dll] [N/A, ] [c:\matlab7\bin\win32\libmwumfpack.dll] [N/A, ] [c:\matlab7\bin\win32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [c:\matlab7\bin\win32\udd_mi.dll] [The MathWorks Inc., 7.0.0.14245] [c:\matlab7\bin\win32\uinone.dll] [N/A, ] [c:\matlab7\bin\win32\mlautoregister.dll] [N/A, ] [c:\matlab7\bin\win32\atlas_PIII.dll] [N/A, ] [c:\matlab7\bin\win32\lapack.dll] [N/A, ] [c:\matlab7\bin\win32\DFORRT.dll] [Compaq Computer Corporation, 6.6 - 893 (Update A)] [c:\matlab7\bin\win32\MFC71CHS.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\nvoglnt.dll] [NVIDIA Corporation, 6.14.11.7519] [c:\matlab7\sys\java\jre\win32\jre1.4.2\bin\client\jvm.dll] [N/A, ] [c:\matlab7\sys\java\jre\win32\jre1.4.2\bin\hpi.dll] [N/A, ] [c:\matlab7\sys\java\jre\win32\jre1.4.2\bin\verify.dll] [N/A, ] [c:\matlab7\sys\java\jre\win32\jre1.4.2\bin\java.dll] [N/A, ] [c:\matlab7\sys\java\jre\win32\jre1.4.2\bin\zip.dll] [N/A, ] [C:\MATLAB7\sys\java\jre\win32\jre1.4.2\bin\awt.dll] [N/A, ] [C:\MATLAB7\sys\java\jre\win32\jre1.4.2\bin\fontmanager.dll] [N/A, ] [c:\matlab7\bin\win32\jmi_mi.dll] [N/A, ] [C:\WINDOWS\Resources\themes\Luna\Luna.msstyles] [Microsoft, 1, 0, 0, 1] [c:\matlab7\bin\win32\glren.dll] [The MathWorks Inc., 6.0.0.19901] [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpzpi5mc.dll] [N/A, ] [c:\matlab7\bin\win32\libmwbuiltins.dll] [The MathWorks Inc., 7.0.0.12365] [PID: 288 / SYSTEM][C:\Program Files\Rising\Rfw\RavTask.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 22] [C:\Program Files\Rising\Rfw\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rfw\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rfw\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rfw\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rfw\rsstub.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\Rfw\rstask.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 35] [PID: 472 / SYSTEM][C:\Program Files\Rising\Rav\ScanFrm.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.11] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rav\combase.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rav\moncomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\Program Files\Rising\Rav\scansrvp.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.11] [C:\Program Files\Rising\Rav\proccomm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\ScanSrv.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.9] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\Rav\ScanRavT.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.23] [C:\Program Files\Rising\Rav\ScanBT.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.36] [C:\Program Files\Rising\Rav\ScanStub.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.8] [C:\Program Files\Rising\Rav\RsLog.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.32] [C:\Program Files\Rising\Rav\ScanAdd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.14] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rav\Scanner.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.32] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\SysMail.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.5] [C:\Program Files\Rising\Rav\mvengine.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\posttrt.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\ffr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\nvfile.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\scanexec.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\unexe.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\scanex.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 17] [C:\Program Files\Rising\Rav\pearc.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\scanpe.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\Rav\ur000.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\extfile.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\Program Files\Rising\Rav\revm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\rsstore.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\Program Files\Rising\Rav\urutils.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\scriptci.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\uroutine.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\ur027.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\ur001.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\scansct.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\extmail.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\extole.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\scanmac.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\scanelf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\ur004.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\ur025.dat] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [PID: 1392 / SYSTEM][C:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\hpxp1522.dll] [Hewlett-Packard, 6.0.0.0] [C:\WINDOWS\system32\hpptsp03.dll] [Hewlett-Packard, 2.0.0.0] [PID: 2352 / LOCAL SERVICE][C:\WINDOWS\System32\alg.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [PID: 2816 / Administrator][C:\WINDOWS\RTHDCPL.EXE] [Realtek Semiconductor Corp., 2.2.2.4] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [PID: 2928 / Administrator][C:\WINDOWS\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 1, 0, 0, 31] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [PID: 3044 / Administrator][C:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.11.7519] [C:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.7519] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\WINDOWS\system32\NVRSZHC.DLL] [NVIDIA Corporation, 6.14.11.7519] [PID: 3072 / Administrator][C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe] [HP, 4.9.140.0] [C:\WINDOWS\system32\mscoree.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\cc660950388e0f478d858e39ada99029\mscorlib.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\48dae69f753ef843a83d03d0af67324e\System.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\1dbebf59aa71934086ee2b66d5c1b408\System.Drawing.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\85ef13e79028024fab554523c7884244\System.Windows.Forms.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\Program Files\HP\ToolBoxFX\bin\HPTools.dll] [, 4.9.140.0] [C:\Program Files\HP\ToolBoxFX\bin\AppConstants.dll] [, 4.9.140.0] [C:\Program Files\HP\ToolBoxFX\bin\HPAppTools.dll] [, 4.9.140.0] [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\28a04a996db9c84090b5f658427a11f0\System.Xml.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\0074bdbd895dce4393cf6cd9497db6f4\System.Configuration.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\Program Files\HP\ToolBoxFX\bin\HPToolkit.dll] [, 4.9.140.0] [C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Deployment\f50dd8776e86b3479509d16ad5cee27d\System.Deployment.ni.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\WINDOWS\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_zh-CHS_b03f5f7f11d50a3a\System.Deployment.resources.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\Program Files\HP\ToolBoxFX\bin\Enumeration.dll] [, 4.9.140.0] [C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\Program Files\HP\ToolBoxFX\bin\HPFaxUtilities.dll] [, 4.9.140.0] [C:\Program Files\HP\ToolBoxFX\bin\Alerts.dll] [, 4.9.140.0] [C:\Program Files\HP\ToolBoxFX\bin\HPStreamsInterface.dll] [, 4.9.140.0] [C:\WINDOWS\system32\FXCompChannel.dll] [Hewlett-Packard, 01.02.13] [C:\WINDOWS\system32\ajcoegpc.dll] [N/A, ] [C:\WINDOWS\system32\fbkmpkma.dll] [N/A, ] [C:\WINDOWS\system32\mppaomjl.dll] [N/A, ] [C:\WINDOWS\system32\mnlbpphh.dll] [N/A, ] [C:\WINDOWS\system32\jljfcllc.dll] [N/A, ] [C:\WINDOWS\system32\lmepgibo.dll] [N/A, ] [C:\WINDOWS\system32\D28E74F1.dll] [N/A, ] [C:\WINDOWS\system32\mlmcdeba.dll] [N/A, ] [C:\WINDOWS\system32\kocdnapp.dll] [N/A, ] [C:\WINDOWS\system32\jolankin.dll] [N/A, ] [C:\WINDOWS\system32\gpaifalj.dll] [N/A, ] [C:\WINDOWS\system32\epcbcblk.dll] [N/A, ] [C:\WINDOWS\system32\iijpbleg.dll] [N/A, ] [C:\WINDOWS\system32\mngncnpb.dll] [N/A, ] [C:\WINDOWS\system32\odhchgmg.dll] [N/A, ] [C:\WINDOWS\system32\A317CDBB.dll] [N/A, ] [C:\WINDOWS\system32\hkkkhghj.dll] [N/A, ] [C:\WINDOWS\system32\eljcagai.dll] [N/A, ] [C:\WINDOWS\system32\lfbdcpbb.dll] [N/A, ] [C:\WINDOWS\system32\oeeecfjf.dll] [N/A, ] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll] [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200)] [C:\Program Files\HP\ToolBoxFX\bin\nativeutils.dll] [N/A, ] [PID: 3104 / Administrator][C:\Program Files\HP\HP Software Update\HPWuSchd2.exe] [Hewlett-Packard Co., 50.0.146.000] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [PID: 3112 / Administrator][C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe] [Adobe Systems Inc., 8.0.0.2006102200] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.chs] [Adobe Systems Inc., 8.0.0.0] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\FNP_Act_Installer.dll] [Macrovision Europe Ltd., 11.03.005] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\asneu.dll] [Adobe Systems Inc., 1, 6, 0, 8] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\adobe_personalization.dll] [Adobe Systems Incorporated, 2,0,0,37] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\adobe_epic.dll] [Adobe Systems Incorporated, 2,0,0,37] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\adobe_pcd.dll] [Adobe Systems Incorporated, 1,0,0] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [PID: 3128 / Administrator][C:\Program Files\Rising\Rfw\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.22] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\Program Files\Rising\Rfw\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.49] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rfw\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 27] [C:\Program Files\Rising\Rfw\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rfw\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rfw\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rfw\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rfw\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\Rfw\rfwrule.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.25] [C:\Program Files\Rising\Rfw\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rfw\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rfw\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rfw\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.21] [C:\Program Files\Rising\Rfw\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 70] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71CHS.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rfw\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 25] [C:\Program Files\Rising\Rfw\rsnetsvr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13] [C:\Program Files\Rising\Rfw\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [C:\Program Files\Rising\Rfw\rfwtray.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 1, 5] [C:\Program Files\Rising\Rfw\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rfw\rfwlog.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [PID: 3136 / Administrator][C:\Program Files\Rising\Rav\RsTray.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.22] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\Program Files\Rising\Rav\ComServ.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.49] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Rising\Rav\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 27] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\rsxml.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\Rav\ScanEvnt.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.12] [C:\Program Files\Rising\Rav\rsguilib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 70] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71CHS.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rav\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.21] [C:\Program Files\Rising\Rav\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 25] [C:\Program Files\Rising\Rav\mruleui.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 10] [C:\Program Files\Rising\Rav\MonTray.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.89] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\RavITray.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 19] [C:\Program Files\Rising\Rav\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rav\rsmginfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11] [PID: 3148 / Administrator][C:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [PID: 3548 / SYSTEM][C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe] [Macrovision Europe Ltd., 11.03.005] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [PID: 3572 / Administrator][C:\Program Files\Rising\Rav\rsmain.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\Program Files\Rising\Rav\rspalmgr.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.29] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\RSXML.DLL] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\RsGuiLib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 70] [C:\WINDOWS\system32\MFC71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MFC71CHS.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\rslang.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 27] [C:\Program Files\Rising\Rav\ravbmenu.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 15] [C:\Program Files\Rising\Rav\rsconf.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\rspalvd.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.21] [C:\Program Files\Rising\Rav\ravppops.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\Program Files\Rising\Rav\ravbintl.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 25] [C:\Program Files\Rising\Rav\ravpsafe.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.24] [C:\Program Files\Rising\Rav\MonState.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7] [C:\Program Files\Rising\Rav\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\Program Files\Rising\Rav\psafecfg.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.17] [C:\Program Files\Rising\Rav\RSAPPMGR.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.1] [C:\Program Files\Rising\Rav\CfgDll.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\WINDOWS\system32\ajcoegpc.dll] [N/A, ] [C:\WINDOWS\system32\fbkmpkma.dll] [N/A, ] [C:\WINDOWS\system32\mppaomjl.dll] [N/A, ] [C:\WINDOWS\system32\mnlbpphh.dll] [N/A, ] [C:\WINDOWS\system32\jljfcllc.dll] [N/A, ] [C:\WINDOWS\system32\lmepgibo.dll] [N/A, ] [C:\WINDOWS\system32\D28E74F1.dll] [N/A, ] [C:\WINDOWS\system32\mlmcdeba.dll] [N/A, ] [C:\WINDOWS\system32\kocdnapp.dll] [N/A, ] [C:\WINDOWS\system32\jolankin.dll] [N/A, ] [C:\WINDOWS\system32\gpaifalj.dll] [N/A, ] [C:\WINDOWS\system32\epcbcblk.dll] [N/A, ] [C:\WINDOWS\system32\iijpbleg.dll] [N/A, ] [C:\WINDOWS\system32\mngncnpb.dll] [N/A, ] [C:\WINDOWS\system32\odhchgmg.dll] [N/A, ] [C:\WINDOWS\system32\A317CDBB.dll] [N/A, ] [C:\WINDOWS\system32\hkkkhghj.dll] [N/A, ] [C:\WINDOWS\system32\eljcagai.dll] [N/A, ] [C:\WINDOWS\system32\lfbdcpbb.dll] [N/A, ] [C:\WINDOWS\system32\oeeecfjf.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\Program Files\Rising\Rav\ravxpage.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 81] [C:\Program Files\Rising\Rav\ravxmons.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24] [C:\Program Files\Rising\Rav\ravptool.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.20] [C:\Program Files\Rising\Rav\log2file.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.5] [C:\Program Files\Rising\Rav\PngDll.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\htmllib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1] [C:\Program Files\Rising\Rav\rsvrinfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [PID: 3600 / Administrator][C:\Program Files\Rising\Rav\RsAgent.exe] [Beijing Rising Information Technology Co., Ltd., 21.0.0.17] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Rising\Rav\comx3.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.37] [C:\Program Files\Rising\Rav\Syslay.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.6] [C:\Program Files\Rising\Rav\ScanPrxy.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.13] [C:\WINDOWS\msagent\AgentMPx.dll] [Microsoft Corporation, 2.00.0.2115] [PID: 3668 / Administrator][C:\WINDOWS\msagent\AgentSvr.exe] [Microsoft Corporation, 2.00.0.2202] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\WINDOWS\msagent\AgentDP2.dll] [Microsoft Corporation, 2.00.0.2115] [PID: 3212 / Administrator][D:\Foxmail\Foxmail.exe] [Tencent Inc., 6, 9, 201, 16] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [D:\Foxmail\FoxAntiSpam.dll] [N/A, ] [D:\Foxmail\pcre.dll] [N/A, ] [D:\Foxmail\3rdParty\punylib.dll] [CNNIC, 1, 0, 0, 3] [PID: 3008 / Administrator][C:\Program Files\FlashGet\flashget.exe] [FlashGet.com, 1, 9, 6, 1073] [C:\Program Files\FlashGet\FGBTCORE.dll] [, 1, 0, 0, 36] [C:\Program Files\FlashGet\FGEMCORE.dll] [, 1, 0, 3, 1002] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\FlashGet\debugrpt.dll] [flashget, 1, 0, 0, 1006] [C:\Program Files\FlashGet\fgmgr.dll] [www.flashget.com, 1, 8, 4, 1007] [C:\Program Files\FlashGet\fgupdate.dll] [www.flashget.com, 1, 8, 1, 1003] [PID: 2320 / SYSTEM][C:\Program Files\Rising\Rav\RsReport.exe] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\Program Files\Rising\Rav\ProcComm.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Rising\Rav\rsvrinfo.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5] [C:\Program Files\Rising\Rav\recomp.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [C:\Program Files\Rising\Rav\refs.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3] [C:\Program Files\Rising\Rav\viruslib.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4] [C:\Program Files\Rising\Rav\relibldr.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2] [PID: 2700 / Administrator][C:\Program Files\Internet Explorer\iexplore.exe] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll] [Adobe Systems Incorporated, 8.0.0.0] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll] [Microsoft Corporation, 8.00.50727.762] [C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.CHS] [Adobe Systems Incorporated, 8.0.0.0] [C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16] [C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll] [Adobe Systems Incorporated, 8.0.0.2006102200] [C:\Program Files\FlashGet\jccatch.dll] [www.flashget.com, 1, 8, 4, 1007] [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 42] [C:\Program Files\Thunder\Components\ResWorker\DsBho_00.dll] [, 1, 0, 0, 12] [C:\Program Files\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13] [C:\WINDOWS\system32\urlFilter.dll] [Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15] [C:\Program Files\Rising\AntiSpyware\UrlRule.dll] [Beijing Rising Information Technology Co., Ltd., 1.0.0.15] [C:\Program Files\FlashGet\getflash.dll] [www.flashget.com, 1, 8, 4, 1003] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.55] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\WINDOWS\system32\Macromed\Flash\Flash9e.ocx] [Adobe Systems, Inc., 9,0,115,0] [C:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 4, 23] [C:\WINDOWS\system32\ajcoegpc.dll] [N/A, ] [C:\WINDOWS\system32\fbkmpkma.dll] [N/A, ] [C:\WINDOWS\system32\mppaomjl.dll] [N/A, ] [C:\WINDOWS\system32\mnlbpphh.dll] [N/A, ] [C:\WINDOWS\system32\jljfcllc.dll] [N/A, ] [C:\WINDOWS\system32\lmepgibo.dll] [N/A, ] [C:\WINDOWS\system32\D28E74F1.dll] [N/A, ] [C:\WINDOWS\system32\mlmcdeba.dll] [N/A, ] [C:\WINDOWS\system32\kocdnapp.dll] [N/A, ] [C:\WINDOWS\system32\jolankin.dll] [N/A, ] [C:\WINDOWS\system32\gpaifalj.dll] [N/A, ] [C:\WINDOWS\system32\epcbcblk.dll] [N/A, ] [C:\WINDOWS\system32\iijpbleg.dll] [N/A, ] [C:\WINDOWS\system32\mngncnpb.dll] [N/A, ] [C:\WINDOWS\system32\odhchgmg.dll] [N/A, ] [C:\WINDOWS\system32\A317CDBB.dll] [N/A, ] [C:\WINDOWS\system32\hkkkhghj.dll] [N/A, ] [C:\WINDOWS\system32\eljcagai.dll] [N/A, ] [C:\WINDOWS\system32\lfbdcpbb.dll] [N/A, ] [C:\WINDOWS\system32\oeeecfjf.dll] [N/A, ] [C:\WINDOWS\system32\RavExt.dll] [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12] [PID: 3124 / Administrator][C:\Program Files\Thunder\Program\Thunder5.exe] [Thunder Networking Technologies,LTD, 5.7.3.389] [C:\Program Files\Thunder\Program\tpatch.dll] [N/A, ] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder\Program\TaskManager.dll] [Thunder Networking Technologies,LTD, 1, 2, 3, 36] [C:\Program Files\Thunder\Program\download_interface.dll] [Thunder Networking Technologies,LTD, 2, 19, 2, 172] [C:\Program Files\Thunder\Program\stlport_vc646.dll] [STLport Consulting, Inc., 4.6.2003.1031] [C:\Program Files\Thunder\Program\asyn_dns.dll] [Thunder Networking Technologies,LTD, 2, 19, 2, 172] [C:\Program Files\Thunder\Program\streammedialib.dll] [, 1, 2, 0, 70] [C:\Program Files\Thunder\Program\al.dll] [, 1, 0, 0, 9] [C:\Program Files\Thunder\Program\XLNet.Dll] [Thunder Networking Technologies,LTD, 1, 2, 1, 9] [C:\Program Files\Thunder\Program\BHOStub.dll] [Thunder Networking Technologies,LTD, 1, 1, 0, 8] [C:\Program Files\Thunder\Components\DownAndPlay\DownAndPlay.dll] [, 1, 0, 4, 22] [C:\Program Files\Rising\Rav\RavScrCh.dll] [Beijing Rising Information Technology Co., Ltd., 21.0.0.55] [C:\WINDOWS\system32\MSVCP71.dll] [Microsoft Corporation, 7.10.3077.0] [C:\WINDOWS\system32\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4] [C:\Program Files\Thunder\Program\iTargetAD.dll] [N/A, ] [C:\Program Files\Thunder\Components\Community\XLCommunity.dll] [Thunder Networking Technologies,LTD, 1, 4, 0, 7] [C:\Program Files\Thunder\Program\xpatch.dll] [N/A, ] [C:\Program Files\Thunder\Program\RegisterDll.dll] [Thunder Networking Technologies,LTD, 2, 16, 5, 63] [C:\Program Files\Thunder\Program\MSVCIRT.dll] [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] [C:\Program Files\Thunder\Components\Security\ThunderSafe.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 59] [C:\Program Files\Thunder\Program\ATL71.DLL] [Microsoft Corporation, 7.10.3077.0] [C:\Program Files\Thunder\Components\Security\XLSafeUI.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 59] [C:\WINDOWS\system32\ajcoegpc.dll] [N/A, ] [C:\WINDOWS\system32\fbkmpkma.dll] [N/A, ] [C:\WINDOWS\system32\mppaomjl.dll] [N/A, ] [C:\WINDOWS\system32\mnlbpphh.dll] [N/A, ] [C:\WINDOWS\system32\jljfcllc.dll] [N/A, ] [C:\WINDOWS\system32\lmepgibo.dll] [N/A, ] [C:\WINDOWS\system32\D28E74F1.dll] [N/A, ] [C:\WINDOWS\system32\mlmcdeba.dll] [N/A, ] [C:\WINDOWS\system32\kocdnapp.dll] [N/A, ] [C:\WINDOWS\system32\jolankin.dll] [N/A, ] [C:\WINDOWS\system32\gpaifalj.dll] [N/A, ] [C:\WINDOWS\system32\epcbcblk.dll] [N/A, ] [C:\WINDOWS\system32\iijpbleg.dll] [N/A, ] [C:\WINDOWS\system32\mngncnpb.dll] [N/A, ] [C:\WINDOWS\system32\odhchgmg.dll] [N/A, ] [C:\WINDOWS\system32\A317CDBB.dll] [N/A, ] [C:\WINDOWS\system32\hkkkhghj.dll] [N/A, ] [C:\WINDOWS\system32\eljcagai.dll] [N/A, ] [C:\WINDOWS\system32\lfbdcpbb.dll] [N/A, ] [C:\WINDOWS\system32\oeeecfjf.dll] [N/A, ] [C:\Program Files\Thunder\Components\Search\XLSearch.dll] [Thunder Networking Technologies,LTD, 1, 1, 5, 18] [C:\Program Files\Thunder\Program\LiveUpdate.dll] [Thunder Networking Technologies,LTD, 1, 2, 1, 20] [C:\Program Files\Thunder\Plugins\XLSafeHost\XLSafeHost.dll] [深圳市迅雷网络技术有限公司, 1, 0, 7, 54] [C:\Program Files\Thunder\Plugins\BhoAdv\bho_adv.dll] [深圳市迅雷网络技术有限公司, 1.0.1.0] [C:\Program Files\Thunder\Components\ExplorerHelper\ExplorerHelper.dll] [Thunder Networking Technologies,LTD, 1, 0, 4, 16] [C:\Program Files\Thunder\ComDlls\ThunderAgent_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 4, 23] [C:\Program Files\Thunder\ComDlls\xunleiBHO_Now.dll] [Thunder Networking Technologies,LTD, 5, 0, 8, 42] [C:\Program Files\Thunder\ComDlls\TDAtOnce_Now.dll] [Thunder Networking Technologies,LTD, 1.0.5.16] [C:\Program Files\Thunder\Components\VPSHELL\VPSHELL.dll] [XunLei, 2, 3, 0, 26] [C:\Program Files\Thunder\Components\VPSHELL\VideoPicture.dll] [XunLei, 2, 3, 0, 26] [C:\Program Files\Thunder\Components\UserExperience\UserExperience.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 1] [C:\Program Files\Thunder\Components\ResWorker\DsXlCom.dll] [, 1, 0, 0, 26] [C:\Program Files\Thunder\Components\ResWorker\DataProcessor_00.dll] [Thunder Networking Technologies,LTD, 1, 0, 0, 13] [C:\Program Files\Thunder\Components\ResWorker\MediaWorker.dll] [Thunder Networking Technologies,LTD, 1, 2, 0, 20] [C:\Program Files\Thunder\Components\DownloadStat\DownloadStat.dll] [深圳市迅雷网络技术有限公司, 1, 2, 0, 4] [PID: 2972 / Administrator][D:\software\sreng2\SREngLdr.EXE] [Smallfrogs Studio, 2.7.0.1210] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [PID: 3968 / Administrator][D:\software\sreng2\SRE796940c0.EXE] [Smallfrogs Studio, 2.7.0.1210] [C:\WINDOWS\system32\doocecfd.dll] [N/A, ] [C:\WINDOWS\system32\infcjibi.dll] [N/A, ] [C:\WINDOWS\system32\mgfghana.dll] [N/A, ] [C:\WINDOWS\system32\9B020C13.dll] [N/A, ] [C:\WINDOWS\system32\iladhjlh.dll] [N/A, ] [C:\WINDOWS\system32\mfelmegd.dll] [N/A, ] [C:\WINDOWS\system32\oodhmdck.dll] [N/A, ] [C:\WINDOWS\system32\ofdbpani.dll] [N/A, ] [C:\WINDOWS\system32\fdekojki.dll] [N/A, ] [C:\WINDOWS\system32\edpmfaji.dll] [N/A, ] [C:\WINDOWS\system32\pemncbkm.dll] [N/A, ] [C:\WINDOWS\system32\D8233458.dll] [N/A, ] [C:\WINDOWS\system32\dlldaedk.dll] [N/A, ] [C:\WINDOWS\system32\ddflbkfp.dll] [N/A, ] [C:\WINDOWS\system32\fblaneaf.dll] [N/A, ] [C:\WINDOWS\system32\fbndfamn.dll] [N/A, ] [C:\WINDOWS\system32\lhllabai.dll] [N/A, ] [C:\WINDOWS\system32\dgjlkdkc.dll] [N/A, ] [C:\WINDOWS\system32\oafghlll.dll] [N/A, ] [C:\WINDOWS\system32\053E07B1.dll] [N/A, ] [C:\WINDOWS\system32\abddpplc.dll] [N/A, ] [C:\WINDOWS\system32\mnlccfeb.dll] [N/A, ] [C:\WINDOWS\system32\bdhagjdn.dll] [N/A, ] [C:\WINDOWS\system32\bkohjjci.dll] [N/A, ] [C:\WINDOWS\system32\mpbfepgn.dll] [N/A, ] [C:\WINDOWS\system32\acbmpdgj.dll] [N/A, ] [C:\WINDOWS\system32\nbjbcccj.dll] [N/A, ] [C:\WINDOWS\system32\17C4F824.dll] [N/A, ] [C:\WINDOWS\system32\kobepefl.dll] [N/A, ] [C:\WINDOWS\system32\ooahohdd.dll] [N/A, ] [C:\WINDOWS\system32\anbijhpg.dll] [N/A, ] [C:\WINDOWS\system32\gnbbhpdg.dll] [N/A, ] [C:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] [D:\software\sreng2\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15] ================================== 文件关联 .TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1] .EXE OK. ["%1" %*] .COM OK. ["%1" %*] .PIF OK. ["%1" %*] .REG OK. [regedit.exe "%1"] .BAT OK. ["%1" %*] .SCR OK. ["%1" /S] .CHM OK. ["C:\WINDOWS\hh.exe" %1] .HLP OK. [%SystemRoot%\System32\winhlp32.exe %1] .INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1] .VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*] .LNK OK. [{00021401-0000-0000-C000-000000000046}] ================================== Winsock 提供者 N/A ================================== Autorun.inf N/A ================================== HOSTS 文件 127.0.0.1 js.tongji.cn.yahoo.com 127.0.0.1 img.tongji.cn.yahoo.com ================================== 进程特权扫描 特殊特权被允许: SeDebugPrivilege [PID = 3072, C:\PROGRAM FILES\HP\TOOLBOXFX\BIN\HPTLBXFX.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 3072, C:\PROGRAM FILES\HP\TOOLBOXFX\BIN\HPTLBXFX.EXE] 特殊特权被允许: SeDebugPrivilege [PID = 3104, C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 3104, C:\PROGRAM FILES\HP\HP SOFTWARE UPDATE\HPWUSCHD2.EXE] 特殊特权被允许: SeDebugPrivilege [PID = 3668, C:\WINDOWS\MSAGENT\AGENTSVR.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 3668, C:\WINDOWS\MSAGENT\AGENTSVR.EXE] 特殊特权被允许: SeDebugPrivilege [PID = 3008, C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 3008, C:\PROGRAM FILES\FLASHGET\FLASHGET.EXE] 特殊特权被允许: SeDebugPrivilege [PID = 3124, C:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 3124, C:\PROGRAM FILES\THUNDER\PROGRAM\THUNDER5.EXE] 特殊特权被允许: SeDebugPrivilege [PID = 2972, D:\SOFTWARE\SRENG2\SRENGLDR.EXE] 特殊特权被允许: SeLoadDriverPrivilege [PID = 2972, D:\SOFTWARE\SRENG2\SRENGLDR.EXE] ================================== 计划任务 N/A ================================== API HOOK N/A ================================== 隐藏进程 N/A ================================== [/CODE]