[CODE] 2009-02-03,12:59:38 SysLog Scanner 1.0 - build 20080726 Arswp (http://www.arswp.com) Windows XP Professional Service Pack 3 (build 2600) - Administrators ======================================== 注册项 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] <"d:\Program Files\Rising\AntiSpyware\rstray.exe" /startup> [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.16, C:2009-02-01 15:15 M:2009-02-01 15:56] <360Safebox><"d:\Program Files\360\360safebox\safeboxTray.exe" /r> [(Verified)360安全中心, 2, 5, 1, 1003, C:2009-01-19 21:48 M:2009-01-19 21:48] <360Safetray> [(Verified)360安全中心, 5, 0, 0, 1011, C:2009-01-16 15:21 M:2009-01-16 15:21] <"d:\Program Files\Rising\Ris\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.22, C:2009-02-01 16:06 M:2009-02-01 16:05] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)NVIDIA Corporation, 6.14.11.7516, C:2009-02-01 14:10 M:2008-05-03 05:46] [NVIDIA Corporation, 6.14.10.10040, C:2008-05-03 05:46 M:2005-04-01 16:16] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)NVIDIA Corporation, 6.14.11.7516, C:2009-02-01 14:10 M:2008-05-03 05:46] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 1.07 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 1.09 (XPClient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:07] [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] <{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] <{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] <{AEB6717E-7E19-11d0-97EE-00C04FD91972}> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载] <> [N/A, C:2009-02-01 15:05 M:2008-12-24 13:09] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接] <> [N/A, C:2009-02-01 15:05 M:2008-12-24 13:09] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\导出到 Microsoft Office Excel(&X)] <> [] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\用flvcd下载本页的视频] <> [N/A, C:2009-02-03 10:29 M:2009-02-03 10:29] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy] <%SystemRoot%\System32\dimsntfy.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}] [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:06] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 18.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:06] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] <浏览器自定义组件> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 18.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:06] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] <%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] <%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] <"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-12-10 23:34 M:2008-04-14 20:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:06|(Verified)N/A, C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:06|(Verified)N/A, C:2006-11-02 23:38 M:2006-11-02 23:38] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}] <通讯簿 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-12-10 23:34 M:2008-04-14 20:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}] [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:06] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\BJ Language Monitor] [(Verified)Microsoft Corporation, 5.1.2600.2082 (xpsp(skatari).040213-0952), C:2008-04-13 19:13 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Local Port] [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\PJL Language Monitor] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-13 19:13 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\Standard TCP/IP Port] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors\USB Monitor] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] ======================================== 启动项 ======================================== 计划任务 ======================================== 组件 ShellServiceObjectDelayLoad [PostBootReminder 对象] {7849596a-48ea-486e-8937-a2a3009f31a9} <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [烧 CD 的 ShellFolder] {fbeb8a05-beee-4442-804e-409d6c4515e9} <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [WebCheck] {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [SysTray] {35CEC8A3-2BE6-11D2-8773-92E220524153} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [WPDShServiceObj Class] {AAA288BA-9A4C-45B0-95D7-94D524869DB5} [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] ShredTaskScheduler [Browseui 预加载程序] {438755C2-A8BA-11D1-B96B-00A0C90312E1} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [组件类别缓存程序] {8C7461EF-2B13-11d2-BE35-3078302C2030} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] ShellExecuteHook [URL 执行挂钩] {AEB6717E-7E19-11d0-97EE-00C04FD91972} [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] Shell Extension [Multimedia File Property Sheet] {00022613-0000-0000-C000-000000000046} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [ICM 扫描仪管理] {176d6597-26d3-11d1-b350-080036a75b03} [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [NTFS Security Page] {1F2E5C40-9550-11CE-99D2-00AA006E086C} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [OLE Docfile Property Page] {3EA48300-8CF6-101B-84FB-666CCB9BCD32} [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell extensions for sharing] {40dd6e20-7c17-11ce-a804-00aa003ca9f6} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [PlusPack CPL Extension] {41E300E0-78B6-11ce-849B-444553540000} <%SystemRoot%\system32\themeui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Display Adapter CPL Extension] {42071712-76d4-11d1-8b24-00a0c9068ff3} [(Verified)Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Display Monitor CPL Extension] {42071713-76d4-11d1-8b24-00a0c9068ff3} [(Verified)Microsoft Corporation, 6.00.2600.0000 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [DS Security Page] {4E40F770-369C-11d0-8922-00A024AB2DBB} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Compatibility Page] {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell Scrap DataHandler] {56117100-C0CD-101B-81E2-00AA004AE837} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Disk Copy Extension] {59099400-57FF-11CE-BD94-0020AF85B590} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell extensions for Microsoft Windows Network objects] {59be4990-f85c-11ce-aff7-00aa003ca9f6} [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [ICM 监视器管理] {5DB2625A-54DF-11D0-B6C4-0800091AA605} <%SystemRoot%\System32\icmui.dll> [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [ICM 打印机管理] {675F097E-4C4D-11D0-B6C1-0800091AA605} <%SystemRoot%\system32\icmui.dll> [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Web Printer Shell Extension] {77597368-7b15-11d0-a0c2-080036af3f03} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Disk Quota UI] {7988B573-EC89-11cf-9C00-00AA00A14F56} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [公文包] {85BBD920-42A0-1069-A2E4-08002B30309D} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [HyperTerminal Icon Ext] {88895560-9AA2-1069-930E-00AA0030EBC8} [(Verified)Hilgraeve, Inc., 5.1.2600.0, C:2008-12-10 23:33 M:2008-04-14 20:00] [字体] {BD84B380-8CA2-1069-AB1D-08000948F534} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [ICC 配置文件] {DBCE2480-C732-101B-BE72-BA78E9AD5B27} <%SystemRoot%\system32\icmui.dll> [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Printers Security Page] {F37C5810-4D3F-11d0-B4BF-00AA00BBB723} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell extensions for sharing] {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Display TroubleShoot CPL Extension] {f92e8c40-3d33-11d2-b1aa-080036a75b03} [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [MMC Icon Handler] {7A80E4A8-8005-11D2-BCF8-00C04F72C717} <%SystemRoot%\System32\mmcshext.dll> [(Verified)Microsoft Corporation, 5.2.3790.4136 (srv03_sp2_qfe.070821-1204), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell Search Band] {21569614-B795-46b1-85F4-E737A8DC09AD} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Crypto PKO Extension] {7444C717-39BF-11D1-8CD9-00C04FC29D45} [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Crypto Sign Extension] {7444C719-39BF-11D1-8CD9-00C04FC29D45} [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [网络连接] {7007ACC7-3202-11D1-AAD2-00805FC1270E} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [网络连接] {992CFFA0-F557-101A-88EC-00DD010CCC48} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [扫描仪和照相机] {E211B736-43FD-11D1-9EFB-0000F8757FCD} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [扫描仪和照相机] {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [扫描仪和照相机] {905667aa-acd6-11d2-8080-00805f6596d2} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [扫描仪和照相机] {3F953603-1008-4f6e-A73A-04AAC7A992F1} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [扫描仪和照相机] {83bbcbf3-b28a-4919-a5aa-73027445d672} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Remote Sessions CPL Extension] {F0152790-D56E-4445-850E-4F3117DB740C} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:33 M:2008-04-14 20:00] [Windows Script Host 的 Shell extensions] {60254CA5-953B-11CF-8C96-00AA00B8708C} [(Verified)Microsoft Corporation, 5.7.0.18066, C:2008-04-14 12:00 M:2008-05-09 18:53] [Microsoft 数据链接] {2206CDB2-19C1-11D1-89E0-00C04FD7A829} [(Verified)Microsoft Corporation, 2.81.1132.0 (xpsp.080413-0852), C:2008-12-10 23:34 M:2008-04-14 20:00] [Tasks Folder Icon Handler] {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:34 M:2008-04-14 20:00] [Tasks Folder Shell Extension] {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:34 M:2008-04-14 20:00] [任务计划] {D6277990-4C6A-11CF-8D87-00AA0060F5BF} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:34 M:2008-04-14 20:00] [Set Program Access and Defaults] {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [Auto Update Property Sheet Extension] {5F327514-6C5E-4d60-8F16-D07FA08A78ED} [(Verified)Microsoft Corporation, 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330), C:2008-12-10 23:34 M:2008-10-16 14:12] [搜索] {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [帮助和支持] {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [帮助和支持] {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [运行...] {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [Internet] {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [电子邮件] {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [字体] {D20EA4E1-3957-11d2-A40B-0C5020524152} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [管理工具] {D20EA4E1-3957-11d2-A40B-0C5020524153} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [以前的版本属性页] {596AB062-B4D2-4215-9F74-E9109B0A8153} <%SystemRoot%\system32\twext.dll> [(Verified)Microsoft Corporation, 6.00.3800.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [以前的版本] {9DB7A13C-F208-4981-8353-73CC61AE2783} <%SystemRoot%\system32\twext.dll> [(Verified)Microsoft Corporation, 6.00.3800.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Audio Media Properties Handler] {875CB1A1-0F29-45de-A1AE-CFB4950D0B78} <%SystemRoot%\system32\shmedia.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Video Media Properties Handler] {40C3D757-D6E4-4b49-BB41-0E5BBEA28817} <%SystemRoot%\system32\shmedia.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Wav Properties Handler] {E4B29F9D-D390-480b-92FD-7DDB47101D71} <%SystemRoot%\system32\shmedia.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Avi Properties Handler] {87D62D94-71B3-4b9a-9489-5FE6850DC73E} <%SystemRoot%\system32\shmedia.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Midi Properties Handler] {A6FD9E45-6E44-43f9-8644-08598F5A74D9} <%SystemRoot%\system32\shmedia.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Video Thumbnail Extractor] {c5a40261-cd64-4ccf-84cb-c394da41d590} <%SystemRoot%\system32\shmedia.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft Internet 工具栏] {5E6AB780-7743-11CF-A12B-00AA004AE837} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [下载状态] {22BF0C20-6DA7-11D0-B373-00A0C9034938} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [补充的外壳文件夹] {91EA3F8B-C99B-11d0-9815-00C04FD91972} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [补充的外壳文件夹 2] {6413BA2C-B461-11d1-A18A-080036B11A03} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [BandProxy] {F61FFEC1-754F-11d0-80CA-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft BrowserBand] {7BA4C742-9E81-11CF-99D3-00AA004AE837} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [窗格中的搜索] {169A0691-8DF9-11d1-A1C4-00C04FD75D13} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [注册数目路选项实用程序] {AF4F6510-F982-11d0-8595-00AA004CD6D8} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [地址(&A)] {01E04581-4EEE-11d0-BFE9-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [地址 EditBox] {A08C11D2-A228-11d0-825B-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell Microsoft AutoComplete] {00BB2763-6A77-11D0-A535-00C04FD7D062} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [MRU 自动完成列表] {6756A641-DE71-11d0-831B-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [自定义 MRU 自动完成列表] {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [可访问的] {7e653215-fa25-46bd-a339-34a2790f3cb7} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [跟踪弹出栏] {acf35015-526e-4230-9596-becbe19f0ac9} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft 历史自动完成列表] {00BB2764-6A77-11D0-A535-00C04FD7D062} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft 外壳文件夹自动完成列表] {03C036F1-A186-11D0-824A-00AA005B4383} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft 多个自动完成列表容器] {00BB2765-6A77-11D0-A535-00C04FD7D062} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell Band Site Menu] {ECD4FC4E-521C-11D0-B792-00A0C90312E1} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [外壳 DeskBarApp] {3CCF8A41-5C85-11d0-9796-00AA00B90ADF} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [外壳 DeskBar] {ECD4FC4C-521C-11D0-B792-00A0C90312E1} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [外壳 Rebar BandSite] {ECD4FC4D-521C-11D0-B792-00A0C90312E1} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [用户帮助] {DD313E04-FEFF-11d1-8ECD-0000F87A470C} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [全局文件夹设置] {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [IE Search Band] {30D02401-6A81-11d0-8274-00C04FD5AE38} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE AutoComplete] {3028902F-6374-48b2-8DC6-9725E775B926} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [Web 搜索] {07798131-AF23-11d1-9111-00A0C98BA67D} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [TridentImageExtractor] {7376D660-C583-11d0-A3A5-00C04FD706EC} <%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Favorites Band] {EFA24E61-B078-11d0-89E4-00C04FC9E26E} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [History Band] {EFA24E62-B078-11d0-89E4-00C04FC9E26E} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [Shell Automation Inproc Service] {0A89A860-D7B1-11CE-8350-444553540000} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [Microsoft Browser Architecture] {A5E46E3A-8849-11D1-9D8C-00C04FC99D61} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [ISFBand OC] {131A6951-7F78-11D0-A979-00C04FD705A2} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [Search Assistant OC] {9461b922-3c5a-11d2-bf8b-00c04fb93661} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [Shell DocObject Viewer] {E7E4BC40-E76A-11CE-A9BB-00AA004AE837} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [InternetShortcut] {FBF23B40-E3F0-101B-8488-00AA003E56F8} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [Microsoft Url History Service] {3C374A40-BAE4-11CF-BF7D-00AA006946EE} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [History] {FF393560-C2A7-11CF-BFF4-444553540000} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [Temporary Internet Files] {7BD29E00-76C1-11CF-9DD0-00A0C9034933} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [Temporary Internet Files] {7BD29E01-76C1-11CF-9DD0-00A0C9034933} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [Microsoft Url Search Hook] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE4 套件初始屏幕] {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [CDF Extension Copy Hook] {67EA19A0-CCEF-11d0-8024-00C04FD75D13} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [The Internet] {3DC7A020-0ACD-11CF-A9BB-00AA004AE837} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [浏览器栏] {EFA24E64-B078-11d0-89E4-00C04FC9E26E} <%SystemRoot%\system32\shdocvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] [Internet Name Space] {871C5380-42A0-1069-A2EA-08002B30309D} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [Sendmail service] {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Sendmail service] {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [ActiveX Cache Folder] {88C6C381-2E85-11D0-94DE-444553540000} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:07] [WebCheck] {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [Subscription Mgr] {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [Subscription Folder] {F5175861-2688-11d0-9C5E-00AA00A45957} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [WebCheckWebCrawler] {08165EA0-E946-11CF-9C87-00AA005127ED} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [WebCheckChannelAgent] {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB} <%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [TrayAgent] {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7} <%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [Code Download Agent] {7D559C10-9FE9-11d0-93F7-00AA0059CE02} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [ConnectionAgent] {E6CC6978-6B6E-11D0-BECA-00C04FD940BE} <%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [PostAgent] {D8BD2030-6FC9-11D0-864F-00AA006809D9} <%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [WebCheck SyncMgr Handler] {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [Shell Application Manager] {352EC2B7-8B9A-11D1-B8AE-006008059382} <%SystemRoot%\system32\appwiz.cpl> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Installed Apps Enumerator] {0B124F8F-91F0-11D1-B8B5-006008059382} <%SystemRoot%\system32\appwiz.cpl> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Darwin App Publisher] {CFCCC7A0-A282-11D1-9082-006008059382} <%SystemRoot%\system32\appwiz.cpl> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell Image Verbs] {e84fda7c-1d6a-45f6-b725-cb260c236066} <%SystemRoot%\system32\shimgvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell Image Data Factory] {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178} <%SystemRoot%\system32\shimgvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [GDI+ 文件缩略图解压缩程序] {3F30C968-480A-4C6C-862D-EFC0897BB84B} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [摘要信息缩略图处理程序(DOCFILES)] {9DBD2C50-62AD-11d0-B806-00C04FD706EC} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [HTML 缩略图的解压缩程序] {EAB841A0-9550-11cf-8C16-00805F1408F3} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell Image Property Handler] {eb9b1153-3b57-4e68-959a-a3266bc3d7fe} <%SystemRoot%\system32\shimgvw.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [网络出版向导] {CC6EEFFB-43F6-46c5-9619-51D571967F7D} <%SystemRoot%\system32\netplwiz.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [通过 Web 订购照片] {add36aa8-751a-4579-a266-d66f5202ccbb} <%SystemRoot%\system32\netplwiz.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [外壳出版向导对象] {6b33163c-76a5-4b6c-bf21-45de9cd503a1} <%SystemRoot%\system32\netplwiz.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [获取 Passport 向导] {58f1f272-9240-4f51-b6d4-fd63d1618591} <%SystemRoot%\system32\netplwiz.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Extensions Manager Folder] {692F0339-CBAA-47e6-B5B5-3B84DB604E87} <%SystemRoot%\system32\extmgr.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [FTP Folders Webview] {63da6ec0-2e98-11cf-8d82-444553540000} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft DocProp Shell Ext] {883373C3-BF89-11D1-BE35-080036B11A03} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft DocProp Inplace Edit Box Control] {A9CF0EAE-901A-4739-A481-E35B73E47F6D} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft DocProp Inplace ML Edit Box Control] {8EE97210-FD1F-4B19-91DA-67914005F020} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft DocProp Inplace Droplist Combo Control] {0EEA25CC-4362-4A12-850B-86EE61B0D3EB} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft DocProp Inplace Calendar Control] {6A205B57-2567-4A2C-B881-F787FAB579A3} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft DocProp Inplace Time Control] {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Directory Query UI] {8A23E65E-31C2-11d0-891C-00A024AB2DBB} <%SystemRoot%\system32\dsquery.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Shell properties for a DS object] {9E51E0D0-6E0F-11d2-9601-00C04FA31A86} <%SystemRoot%\system32\dsquery.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Directory Object Find] {163FDC20-2ABC-11d0-88F0-00A024AB2DBB} <%SystemRoot%\system32\dsquery.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Directory Start/Search Find] {F020E586-5264-11d1-A532-0000F8757D7E} <%SystemRoot%\system32\dsquery.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Directory Property UI] {0D45D530-764B-11d0-A1CA-00AA00C16E65} <%SystemRoot%\system32\dsuiext.dll> [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] [Directory Context Menu Verbs] {62AE1F9A-126A-11D0-A14B-0800361B1103} <%SystemRoot%\system32\dsuiext.dll> [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] [MyDocs Copy Hook] {ECF03A33-103D-11d2-854D-006008059367} <%SystemRoot%\system32\mydocs.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [MyDocs Drop Target] {ECF03A32-103D-11d2-854D-006008059367} <%SystemRoot%\system32\mydocs.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [MyDocs Properties] {4a7ded0a-ad25-11d0-98a8-0800361b1103} <%SystemRoot%\system32\mydocs.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Offline Files Menu] {750fdf0e-2a26-11d1-a3ea-080036587f03} <%SystemRoot%\System32\cscui.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Offline Files Folder Options] {10CFC467-4392-11d2-8DB4-00C04FA31A66} <%SystemRoot%\System32\cscui.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [脱机文件夹] {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E} <%SystemRoot%\System32\cscui.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft Agent Character Property Sheet Handler] {143A62C8-C33B-11D1-84FE-00C04FA34A14} [Microsoft Corporation, 2.00.0.2115, C:1998-09-15 17:21 M:1998-09-15 17:21] [DfsShell] {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [%DESC_PublishDropTarget%] {60fd46de-f830-4894-a628-6fa81bc0190d} <%SystemRoot%\system32\photowiz.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [.CAB file viewer] {0CD7A5C0-9F37-11CE-AE65-08002B2E1262} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [用户(&P)...] {32714800-2E5F-11d0-8B85-00AA0044F941} [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-12-10 23:34 M:2008-04-14 20:00] [Windows Media Player Burn Audio CD Context Menu Handler] {8DD448E6-C188-4aed-AF92-44956194EB1F} [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-11-02 23:06] [Windows Media Player Play as Playlist Context Menu Handler] {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C} [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-11-02 23:06] [Windows Media Player Add to Playlist Context Menu Handler] {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD} [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-11-02 23:06] [Microsoft Office HTML Icon Handler] {42042206-2D85-11D3-8CFF-005004838597} [(Verified)Microsoft Corporation, 11.0.5510, C:2009-02-01 14:14 M:2003-07-14 22:52] [Web Folders] {BDEADF00-C265-11D0-BCED-00A0C90AB50F} [(Verified)Microsoft Corporation, 11.0.6715.60, C:2005-09-20 12:33 M:2005-09-20 12:33] [WinRAR shell extension] {B41DB860-8EE4-11D2-9906-E49FADC173CA} [N/A, C:2009-02-01 14:44 M:2008-09-30 21:02] [ScriptDropShellExt] {97C1D2CE-3AB4-4459-9142-D50D9338CB9A} [Copyright 2001, 0, 5, 0, 1, C:2001-09-05 12:17 M:2001-09-05 12:17] [AutoCAD 数字签名图标覆盖处理程序] {36A21736-36C2-4C11-8ACB-D4136F2B57BD} [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31] [Autodesk Drawing Preview] {AC1DB655-4F9A-4c39-8AD2-A65324A4C446} [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31] [TeraCopy] {A7005AF0-D6E8-48AF-8DFA-023B1CF660A7} [N/A, C:2009-02-01 16:03 M:2007-06-21 21:26] [RISING] {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 16:06 M:2009-02-01 16:05] [IE Microsoft BrowserBand] {07C45BB1-4A8C-4642-A1F5-237E7215FF66} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Fade Task] {1C1EDB47-CE22-4bbb-B608-77B48F83C823} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Menu Desk Bar] {205D7A97-F16D-4691-86EF-F3075DCCA57D} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [HTML Document] {25336920-03f9-11cf-8fd0-00aa00686f13} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] [MSHTML Document] {3050f3d9-98b5-11cf-bb82-00aa00bdce0b} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] [IE Navigation Bar] {43886CD5-6529-41c4-A707-7B3C92C05E68} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Menu Site] {44C76ECD-F7FA-411c-9929-1B77BA77F524} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Menu Band] {4B78D326-D922-44f9-AF2A-07805C2A3560} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Microsoft History AutoComplete List] {6038EF75-ABFC-4e59-AB6F-12D397F6568D} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Tracking Shell Menu] {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE IShellFolderBand] {6CF48EF8-44CD-45d2-8832-A16EA016311B} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE BandProxy] {73CFD649-CD48-4fd8-A272-2070EA56526B} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [Microsoft Web Browser] {8856f961-340a-11d0-a96b-00c04fd705a2} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE MRU AutoComplete List] {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE RSS Feeder Folder] {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Microsoft Shell Folder AutoComplete List] {9D958C62-3954-4b44-8FAB-C4670C1DB4C2} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Microsoft Multiple AutoComplete List Container] {B31C5FAE-961F-415b-BAF0-E697A5178B94} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Shell Rebar BandSite] {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Shell Band Site Menu] {E6EE9AAC-F76B-4947-8260-A9F136138E11} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [&Links] {F2CF5485-4E02-4f68-819C-B92DE9277049} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Registry Tree Options Utility] {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [IE Custom MRU AutoCompleted List] {FDE7673D-2E19-4145-8376-BBD58C4BC7BA} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] [Portable Media Devices] {640167b4-59b0-47a6-b335-a6b3c0695aea} <%SystemRoot%\system32\Audiodev.dll> [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2008-12-25 05:41 M:2006-10-18 21:47] [Portable Devices] {35786D3C-B075-49b9-88DD-029876E11C01} <%SystemRoot%\system32\wpdshext.dll> [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] [Portable Devices Menu] {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8} <%SystemRoot%\system32\wpdshext.dll> [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] [压缩(zipped)文件夹] {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} <%SystemRoot%\system32\zipfldr.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Compressed (zipped) Folder Right Drag Handler] {BD472F60-27FA-11cf-B8B4-444553540000} <%SystemRoot%\system32\zipfldr.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Compressed (zipped) Folder SendTo Target] {888DCA60-FC0A-11CF-8F0F-00C04FD7D062} <%SystemRoot%\system32\zipfldr.dll> [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [NvCpl DesktopContext Class] {A70C977A-BF00-412C-90B7-034C51DA2439} [(Verified)NVIDIA Corporation, 6.14.11.7516, C:2009-02-01 14:10 M:2008-05-03 05:46] [Play on my TV helper] {FFB699E0-306A-11d3-8BD1-00104B6F7516} [(Verified)NVIDIA Corporation, 6.14.11.7516, C:2009-02-01 14:10 M:2008-05-03 05:46] [Desktop Explorer] {1CDB2949-8F65-4355-8456-263E7C208A5D} [NVIDIA Corporation, 6.14.10.10040, C:2008-05-03 05:46 M:2005-04-01 16:16] [Desktop Explorer Menu] {1E9B04FB-F9E5-4718-997B-B8DA88302A47} [NVIDIA Corporation, 6.14.10.10040, C:2008-05-03 05:46 M:2005-04-01 16:16] [nView Desktop Context Menu] {1E9B04FB-F9E5-4718-997B-B8DA88302A48} [NVIDIA Corporation, 6.14.10.10040, C:2008-05-03 05:46 M:2005-04-01 16:16] Protocols [AP Class Install Handler filter] {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [AP encoding/decoding Filters] {8f6b0360-b80d-11d0-a9b3-006097942311} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [WebView MIME Filter] {733AC4CB-F1A4-11d0-B951-00A0C90312E1} <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [] {807553E5-5146-11D5-A672-00B0D022E945} [(Verified)Microsoft Corporation, 11.0.8164, C:2007-04-19 13:57 M:2007-04-19 13:57] [Microsoft HTML About Pluggable Protocol] {3050F406-98B5-11CF-BB82-00AA00BDCE0B} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] [CDL: Asychronous Pluggable Protocol Handler] {3dd53d40-7b8b-11D0-b013-00aa0059ce02} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [DVD: 可插入协议] {12D51199-0DB5-46FE-A120-47A3D7D937CC} [(Verified)Microsoft Corporation, 6.05.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] [file:, local: Asychronous Pluggable Protocol Handler] {79eac9e7-baf9-11ce-8c82-00aa004ba90b} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [ftp: Asychronous Pluggable Protocol Handler] {79eac9e3-baf9-11ce-8c82-00aa004ba90b} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [gopher: Asychronous Pluggable Protocol Handler] {79eac9e4-baf9-11ce-8c82-00aa004ba90b} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [http: Asychronous Pluggable Protocol Handler] {79eac9e2-baf9-11ce-8c82-00aa004ba90b} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [https: Asychronous Pluggable Protocol Handler] {79eac9e5-baf9-11ce-8c82-00aa004ba90b} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [Microsoft InfoTech Protocols for IE 4.0] {9D148291-B9C8-11D0-A4CC-0000F80149F6} [(Verified)Microsoft Corporation, 5.2.3790.4186 (srv03_sp2_qfe.071108-1306), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft HTML Javascript Pluggable Protocol] {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] [Microsoft HTML Mailto Pluggable Protocol] {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] [MHTML Asychronous Pluggable Protocol Handler] {05300401-BCBC-11d0-85E3-00C04FD85AB4} <%SystemRoot%\system32\inetcomm.dll> [(Verified)Microsoft Corporation, 6.00.2900.5579 (xpsp_sp3_gdr.080411-1536), C:2008-12-10 23:34 M:2008-04-12 03:04] [mk: Asychronous Pluggable Protocol Handler] {79eac9e6-baf9-11ce-8c82-00aa004ba90b} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] [Microsoft HTML Resource Pluggable Protocol] {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] [Microsoft HTML Resource Pluggable Protocol] {76E67A63-06E9-11D2-A840-006008059382} <%SystemRoot%\system32\mshtml.dll> [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] [TV: 可插入协议] {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} [(Verified)Microsoft Corporation, 6.05.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] [WiaProtocol Class] {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] BrowserHelperObject [ThunderAtOnce Class] {01443AEC-0FD1-40fd-9C87-E93D1494C233} [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34, C:2009-02-01 15:05 M:2008-12-24 12:54] [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2009-02-01 15:05 M:2008-12-24 12:54] [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15, C:2009-02-01 15:15 M:2009-02-01 15:56] [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [(Verified)360.CN, 5, 0, 0, 1005, C:2009-01-15 23:36 M:2009-01-15 23:36] UrlSeachHook [Microsoft Url Search Hook] {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] ActiveX Extension [ThunderAtOnce Class] {01443AEC-0FD1-40FD-9C87-E93D1494C233} [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34, C:2009-02-01 15:05 M:2008-12-24 12:54] [QQDownload Class] {0BDFC279-D782-4507-8FB8-ED789E4A4E0F} [TODO: , 1.0.0.1, C:2009-02-01 15:05 M:2008-08-08 08:08] [Thunder Agent Class] {485463B7-8FB2-4B3B-B29B-8B919B0EACCE} [(Verified)Thunder Networking Technologies,LTD, 6, 0, 5, 47, C:2009-02-01 15:05 M:2008-12-24 12:54] [XMP Class] {6483F145-A768-4C41-AACC-52D4D7845851} [Xunlei Networking Technologies,LTD, 2, 1, 9, 102, C:2008-12-25 05:55 M:2009-01-12 19:45] [MediaComm Class] {7670648D-461B-42AF-BDFE-46D26AF5EFF2} [(Verified)Thunder Networking Technologies,LTD, 3, 1, 6, 81, C:2009-02-01 15:07 M:2008-12-24 12:58] [360SafeLive] {87515F61-A66C-4319-A0E0-D416CB8059E3} [(Verified)360.cn, 1, 0, 1, 1029, C:2008-11-25 09:42 M:2008-11-25 09:42] [Thunder Browser Helper] {889D2FEB-5411-4565-8998-1DD2C5261283} [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2009-02-01 15:05 M:2008-12-24 12:54] [OFrameObject Class] {9701758C-4373-482E-B13C-776C048EC890} [(Verified)ShenZhen Thunder Networking Technologies Ltd., 2, 3, 5809, 132, C:2009-02-01 15:07 M:2009-01-12 19:44] [卡卡上网安全助手] {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15, C:2009-02-01 15:15 M:2009-02-01 15:56] [DapCtrl Class] {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8} [(Verified)ShenZhen Thunder Networking Technologies Ltd., 2, 3, 5809, 132, C:2009-02-01 15:07 M:2009-01-12 19:44] [SafeMon Class] {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [(Verified)360.CN, 5, 0, 0, 1005, C:2009-01-15 23:36 M:2009-01-15 23:36] [Shockwave Flash Object] {D27CDB6E-AE6D-11CF-96B8-444553540000} [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 11:16 M:2008-10-05 11:16] [FlashGet Class] {DBE2EBCE-5CAD-4A76-BC2D-8D7619C3EAE2} [TODO: , 1.0.0.1, C:2009-02-01 15:05 M:2008-08-08 08:08] [XPPlayer Class] {F3E70CEA-956E-49CC-B444-73AFE593AD7F} [(Verified)Thunder Networking Technologies,LTD, 2, 1, 5890, 247, C:2009-02-01 15:07 M:2009-01-09 19:03] Context Menu [Offline Files] {750fdf0e-2a26-11d1-a3ea-080036587f03} <%SystemRoot%\System32\cscui.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Open With] {09799AFB-AD67-11d1-ABCD-00C04FC30936} <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [Open With EncryptionMenu] {A470F8CF-A1E8-4f65-8335-227475AA5C46} <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [RisingRavExt] {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D} [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 16:06 M:2009-02-01 16:05] [WinRAR] {B41DB860-8EE4-11D2-9906-E49FADC173CA} [N/A, C:2009-02-01 14:44 M:2008-09-30 21:02] [Send To] {7BA4C740-9E81-11CF-99D3-00AA004AE837} <%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] [Sharing] {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] ======================================== 服务 [C-DillaCdaC11BA / C-DillaCdaC11BA][Stopped/Disabled] [Macrovision, 4.20.020, C:2009-02-01 15:43 M:2009-02-01 15:43] [Alerter / Alerter][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\system32\alrsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Application Layer Gateway Service / ALG][Stopped/Auto Start] <%SystemRoot%\System32\alg.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Application Management / AppMgmt][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\appmgmts.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Windows Audio / AudioSrv][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\audiosrv.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] [Background Intelligent Transfer Service / BITS][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\qmgr.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 6.7.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:34 M:2008-04-14 20:00] [Computer Browser / Browser][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\browser.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Contrl Center of Storm Media / ccosm][Stopped/Disabled] [(Verified)北京暴风网际科技有限公司, 3, 9, 1, 15, C:2009-01-14 12:18 M:2009-01-14 12:18] [Indexing Service / CiSvc][Stopped/Disabled] <%SystemRoot%\system32\cisvc.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [ClipBook / ClipSrv][Stopped/Disabled] <%SystemRoot%\system32\clipsrv.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [COM+ System Application / COMSysApp][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Cryptographic Services / CryptSvc][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\cryptsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [DCOM Server Process Launcher / DcomLaunch][Running/Auto Start] <%SystemRoot%\system32\svchost -k DcomLaunch --> "%SystemRoot%\system32\rpcss.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [DHCP Client / Dhcp][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\dhcpcsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Logical Disk Manager Administrative Service / dmadmin][Stopped/Manual Start] <%SystemRoot%\System32\dmadmin.exe /com> [(Verified)Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2008-04-14 12:00 M:2008-04-14 12:00] [Logical Disk Manager / dmserver][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\dmserver.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corp., 2600.5512.503.0, C:2008-04-14 12:00 M:2008-04-14 12:00] [DNS Client / Dnscache][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k NetworkService --> "%SystemRoot%\System32\dnsrslvr.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Wired AutoConfig / Dot3svc][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k dot3svc --> "%SystemRoot%\System32\dot3svc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Extensible Authentication Protocol Service / EapHost][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k eapsvcs --> "%SystemRoot%\System32\eapsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Error Reporting Service / ERSvc][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\ersvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Event Log / Eventlog][Running/Auto Start] <%SystemRoot%\system32\services.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [COM+ Event System / EventSystem][Running/Auto Start] "C:\WINDOWS\system32\es.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 2001.12.4414.706, C:2008-04-14 12:00 M:2008-07-08 04:26] [Fast User Switching Compatibility / FastUserSwitchingCompatibility][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Help and Support / helpsvc][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [HID Input Service / HidServ][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [Health Key and Certificate Management Service / hkmsvc][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\kmsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [HTTP SSL / HTTPFilter][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k HTTPFilter --> "%SystemRoot%\System32\w3ssl.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 6.0.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [IMAPI CD-Burning COM Service / ImapiService][Stopped/Disabled] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Server / LanmanServer][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\srvsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Workstation / lanmanworkstation][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\wkssvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] [TCP/IP NetBIOS Helper / LmHosts][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\lmhsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Messenger / Messenger][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\msgsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Distributed Transaction Coordinator / MSDTC][Stopped/Manual Start] [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] [Windows Installer / MSIServer][Stopped/Manual Start] [(Verified)Microsoft Corporation, 4.5.6001.22159 (vistasp1_ldr.080415-1732), C:2008-04-14 12:00 M:2008-05-19 01:57] [Network Access Protection Agent / napagent][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\qagentrt.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Network DDE / NetDDE][Stopped/Manual Start] <%SystemRoot%\system32\netdde.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Network DDE DSDM / NetDDEdsdm][Stopped/Manual Start] <%SystemRoot%\system32\netdde.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Net Logon / Netlogon][Stopped/Manual Start] <%SystemRoot%\system32\lsass.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Network Connections / Netman][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\netman.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Network Location Awareness (NLA) / Nla][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\mswsock.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] [NT LM Security Support Provider / NtLmSsp][Stopped/Manual Start] <%SystemRoot%\system32\lsass.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Removable Storage / NtmsSvc][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\ntmssvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2400.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] [NVIDIA Display Driver Service / NVSvc][Stopped/Disabled] <%SystemRoot%\system32\nvsvc32.exe> [(Verified)NVIDIA Corporation, 6.14.11.7516, C:2009-02-01 14:10 M:2008-05-03 05:46] [Office Source Engine / ose][Stopped/Manual Start] <"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"> [(Verified)Microsoft Corporation, 11.0.5525, C:2003-07-28 12:28 M:2003-07-28 12:28] [Plug and Play / PlugPlay][Running/Auto Start] <%SystemRoot%\system32\services.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [IPSEC Services / PolicyAgent][Stopped/Manual Start] <%SystemRoot%\system32\lsass.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Protected Storage / ProtectedStorage][Running/Auto Start] <%SystemRoot%\system32\lsass.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Remote Access Auto Connection Manager / RasAuto][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\rasauto.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Remote Access Connection Manager / RasMan][Running/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\rasmans.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Remote Desktop Help Session Manager / RDSessMgr][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:33 M:2008-04-14 20:00] [Routing and Remote Access / RemoteAccess][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\mprdim.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Remote Registry / RemoteRegistry][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\system32\regsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [Ris Process Communication Center / RisCCenter][Stopped/Auto Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] [Rising RisTask Manager / RisTask][Running/Auto Start] <"d:\Program Files\Rising\Ris\RavTask.exe" RisTask> [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 23, C:2009-02-01 16:06 M:2009-02-01 16:05] [Remote Procedure Call (RPC) Locator / RpcLocator][Stopped/Manual Start] <%SystemRoot%\system32\locator.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Remote Procedure Call (RPC) / RpcSs][Running/Auto Start] <%SystemRoot%\system32\svchost -k rpcss --> "%SystemRoot%\system32\rpcss.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Rising RealTime Monitor / RsRavMon][Stopped/Auto Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 16:06 M:2009-02-01 16:05] [Rising Scan Service / RsScanSrv][Stopped/Auto Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.11, C:2009-02-01 16:06 M:2009-02-01 16:05] [QoS RSVP / RSVP][Stopped/Manual Start] <%SystemRoot%\system32\rsvp.exe> [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Security Accounts Manager / SamSs][Running/Auto Start] <%SystemRoot%\system32\lsass.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Smart Card / SCardSvr][Stopped/Manual Start] <%SystemRoot%\System32\SCardSvr.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Task Scheduler / Schedule][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\schedsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:34 M:2008-04-14 20:00] [Secondary Logon / seclogon][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\seclogon.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [System Event Notification / SENS][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\sens.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Windows Firewall/Internet Connection Sharing (ICS) / SharedAccess][Stopped/Auto Start] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\ipnathlp.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5584 (xpsp_sp3_qfe.080421-1413), C:2008-04-14 12:00 M:2008-04-22 02:44] [Shell Hardware Detection / ShellHWDetection][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Print Spooler / Spooler][Stopped/Manual Start] <%SystemRoot%\system32\spoolsv.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [System Restore Service / srservice][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [SSDP Discovery Service / SSDPSRV][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\ssdpsrv.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Windows Image Acquisition (WIA) / stisvc][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k imgsvc --> "%SystemRoot%\system32\wiaservc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [MS Software Shadow Copy Provider / SwPrv][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Performance Logs and Alerts / SysmonLog][Stopped/Manual Start] <%SystemRoot%\system32\smlogsvc.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Telephony / TapiSrv][Running/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\tapisrv.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Terminal Services / TermService][Running/Auto Start] <%SystemRoot%\System32\svchost -k DComLaunch --> "%SystemRoot%\System32\termsrv.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:33 M:2008-04-14 20:00] [Themes / Themes][Running/Auto Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\shsvcs.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [Telnet / TlntSvr][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Distributed Link Tracking Client / TrkWks][Stopped/Disabled] <%SystemRoot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\trkwks.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Universal Plug and Play Device Host / upnphost][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\upnphost.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Uninterruptible Power Supply / UPS][Stopped/Manual Start] <%SystemRoot%\System32\ups.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [Volume Shadow Copy / VSS][Stopped/Manual Start] <%SystemRoot%\System32\vssvc.exe> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Windows Time / W32Time][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\w32time.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] [WebClient / WebClient][Running/Auto Start] <%SystemRoot%\system32\svchost.exe -k LocalService --> "%SystemRoot%\System32\webclnt.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [Windows Management Instrumentation / winmgmt][Running/Auto Start] <%systemroot%\system32\svchost.exe -k netsvcs --> "%SystemRoot%\system32\wbem\WMIsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] [Portable Media Serial Number Service / WmdmPmSN][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\MsPMSNSv.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 11.0.5721.5145, C:2008-04-14 12:00 M:2006-10-18 21:47] [Windows Management Instrumentation Driver Extensions / Wmi][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\advapi32.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [WMI Performance Adapter / WmiApSrv][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] [Windows Media Player Network Sharing Service / WMPNetworkSvc][Stopped/Disabled] <"C:\Program Files\Windows Media Player\WMPNetwk.exe"> [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2006-11-02 23:06 M:2006-11-02 23:06] [Security Center / wscsvc][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SYSTEMROOT%\system32\wscsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Automatic Updates / wuauserv][Stopped/Disabled] <%systemroot%\system32\svchost.exe -k netsvcs --> "C:\WINDOWS\system32\wuauserv.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.4.3790.5512 (xpsp.080413-0852), C:2008-12-10 23:34 M:2008-04-14 20:00] [Windows Driver Foundation - User-mode Driver Framework / WudfSvc][Stopped/Manual Start] <%SystemRoot%\system32\svchost.exe -k WudfServiceGroup --> "%SystemRoot%\System32\WUDFSvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 18:56 M:2006-09-28 18:56] [Wireless Zero Configuration / WZCSVC][Stopped/Disabled] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\wzcsvc.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-13 19:13 M:2008-04-14 12:00] [Network Provisioning Service / xmlprov][Stopped/Manual Start] <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\xmlprov.dll"> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00|(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] ======================================== 驱动 [Service for Realtek AC97 Audio (WDM) / ALCXWDM][Stopped/Manual Start] [Realtek Semiconductor Corp., 5.10.00.6300 built by: WinDDK, C:2009-02-01 14:12 M:2008-09-24 10:40] [CdaC15BA / CdaC15BA][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS> [Macrovision Europe Ltd, 3.17.000, C:2009-02-01 15:43 M:2009-02-01 15:43] [Crystal SoundFusion(tm) Driver / cwcspud][Running/Manual Start] [Crystal Semiconductor Corporation, 5.12.01.3041, C:2009-02-02 14:31 M:2000-05-25 16:47] [Crystal SoundFusion(tm) WDM Driver / cwcwdm][Running/Manual Start] [Crystal Semiconductor Corporation, 5.12.01.3041, C:2009-02-02 14:31 M:2000-05-25 16:47] [hptpro / hptpro][Stopped/Boot Start] [HighPoint Technologies, Inc., 1.23.12.10, C:2008-12-26 09:40 M:2002-12-10 11:54] [ROCKEYNT / ROCKEYNT][Running/Auto Start] <\??\C:\WINDOWS\system32\drivers\Rockeynt.sys> [FeiTian Tech Co.,Ltd, 4.00, C:2009-02-01 15:39 M:2009-02-01 15:39] [TCP/IP Protocol Driver / Tcpip][Running/System Start] [Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-20 19:51] [WINIO / WINIO][Stopped/Manual Start] <\??\d:\Program Files\DriveTheLife\winio.sys> [] [360procmon / 360procmon][Running/Manual Start] <\??\d:\Program Files\360\360Safe\safemon\360procmon.sys> [(Verified)版权所有 (C) 2006-2008 360.cn, 1, 0, 0, 1001, C:2008-09-28 00:56 M:2008-09-28 00:56] [Microsoft ACPI Driver / ACPI][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft Kernel Acoustic Echo Canceller / aec][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2601.3142, C:2008-12-10 23:30 M:2008-04-13 09:39] [AFD / AFD][Running/System Start] <\SystemRoot\System32\drivers\afd.sys> [(Verified)Microsoft Corporation, 5.1.2600.5695 (xpsp_sp3_gdr.081016-1716), C:2008-04-14 12:00 M:2008-10-16 22:43] [Intel AGP Bus Filter / agp440][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:29 M:2008-04-13 11:36] [Compaq AGP Bus Filter / agpCPQ][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-26 09:40 M:2008-04-13 11:36] [ALI AGP Bus Filter / alim1541][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-26 09:40 M:2008-04-13 11:36] [AMD AGP Bus Filter Driver / amdagp][Running/Boot Start] [(Verified)Advanced Micro Devices, Inc., 5.00 (xpsp.080413-2111), C:2008-12-26 09:40 M:2008-04-13 11:36] [RAS Asynchronous Media Driver / AsyncMac][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [标准 IDE/ESDI 硬盘控制器 / atapi][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-13 11:40] [ATM ARP Client Protocol / Atmarpc][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [音频存根驱动程序 / audstub][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-12-10 23:30 M:2001-08-17 13:59] [CD-ROM Driver / Cdrom][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5593 (xpsp_sp3_qfe.080502-1245), C:2008-04-14 12:00 M:2008-05-02 18:49] [Microsoft AC Adapter Driver / CmBatt][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:29 M:2008-04-13 11:36] [C-Media PCI Audio Driver (WDM) / cmpci][Stopped/Manual Start] [(Verified)C-Media Inc, 5.12.01.0643, C:2009-02-02 14:00 M:2002-11-18 15:51] [Microsoft Composite Battery Driver / Compbatt][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:29 M:2008-04-13 11:36] [磁盘驱动器 / Disk][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [dmboot / dmboot][Stopped/Disabled] [(Verified)Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2008-04-14 12:00 M:2008-04-14 12:00] [Logical Disk Manager Driver / dmio][Running/Boot Start] [(Verified)Microsoft Corp., Veritas Software, 2600.5512.503.0, C:2008-04-14 12:00 M:2008-04-14 12:00] [dmload / dmload][Running/Boot Start] [(Verified)Microsoft Corp., Veritas Software., 2600.0.503.0, C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft Kernel DLS Syntheiszer / DMusic][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 11:45] [Microsoft Kernel DRM Audio Descrambler / drmkaud][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 11:45] [Creative AudioPCI (ES1371,ES1373) (WDM) / es1371][Stopped/Manual Start] [(Verified)Creative Technology Ltd., 5.1.2501.0 built by: WinDDK, C:2008-12-10 23:29 M:2001-08-17 12:19] [Floppy Disk Controller Driver / Fdc][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [软盘驱动程序 / Flpydisk][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [FltMgr / FltMgr][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:34 M:2008-04-14 20:00] [FsVga / FsVga][Stopped/System Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2001-08-31 15:43 M:2008-04-14 12:00] [Volume Manager Driver / Ftdisk][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-04-14 12:00 M:2001-08-31 15:43] [Crystal SoundFusion(tm) Game Port / gameenum][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:29 M:2008-04-13 11:45] [Generic Packet Classifier / Gpc][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft HID Class Driver / HidUsb][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-26 09:40 M:2008-04-13 11:45] [hookcont / hookcont][Running/System Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 6, C:2009-02-01 16:06 M:2009-02-01 16:05] [hooksys / hooksys][Running/System Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 47, C:2009-02-01 16:06 M:2009-02-01 16:05] [HTTP / HTTP][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [i8042 键盘和 PS/2 鼠标端口驱动程序 / i8042prt][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [CD 烧制筛选驱动器 / Imapi][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Intel Processor Driver / intelppm][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-13 18:54] [IPv6 Windows Firewall Driver / Ip6Fw][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [IP Traffic Filter Driver / IpFilterDriver][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [IP in IP Tunnel Driver / IpInIp][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [IP Network Address Translator / IpNat][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [IPSEC driver / IPSec][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [IR Enumerator Service / IRENUM][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-12-10 23:28 M:2008-04-14 20:00] [PnP ISA/EISA Bus Driver / isapnp][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-13 18:54] [Keyboard Class Driver / Kbdclass][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-13 18:55] [Keyboard HID Driver / kbdhid][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-26 09:40 M:2008-04-13 18:55] [Microsoft Kernel Wave Audio Mixer / kmixer][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 11:45] [Mouse Class Driver / Mouclass][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 18:48 M:2008-04-13 18:48] [Mouse HID Driver / mouhid][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-12-26 09:40 M:2001-08-31 15:31] [WebDav Client Redirector / MRxDAV][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [MRXSMB / MRxSmb][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5700 (xpsp_sp3_gdr.081024-1351), C:2008-04-14 12:00 M:2008-10-24 19:21] [Microsoft Streaming Service Proxy / MSKSSRV][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 11:39] [Microsoft Streaming Clock Proxy / MSPCLOCK][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 11:39] [Microsoft Streaming Quality Manager Proxy / MSPQM][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 11:39] [Microsoft System Management BIOS Driver / mssmbios][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-13 11:36 M:2008-04-13 11:36] [Microsoft MPU-401 MIDI UART Driver / ms_mpu401][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2009-02-01 14:09 M:2001-08-17 14:00] [Remote Access NDIS TAPI Driver / NdisTapi][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [NDIS 用户模式 I/O 协议 / Ndisuio][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-13 11:56 M:2008-04-14 12:00] [Remote Access NDIS WAN Driver / NdisWan][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [NetBIOS Interface / NetBIOS][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [NetBios over Tcpip / NetBT][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [nv / nv][Running/Manual Start] [(Verified)NVIDIA Corporation, 6.14.11.7516, C:2009-02-01 14:11 M:2008-05-03 05:46] [IPX Traffic Filter Driver / NwlnkFlt][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [IPX Traffic Forwarder Driver / NwlnkFwd][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Parallel port driver / Parport][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 18:57 M:2008-04-14 12:00] [PCI Bus Driver / PCI][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-13 18:57] [AMD PCNET Compatable Adapter Driver / PCnet][Stopped/Manual Start] [(Verified)AMD Inc., 4.38.00 built by: WinDDK, C:2008-12-10 23:29 M:2001-08-17 12:11] [WAN Miniport (PPTP) / PptpMiniport][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [处理器驱动程序 / Processor][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-13 18:50 M:2008-04-14 12:00] [QoS Packet Scheduler / PSched][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Direct Parallel Link Driver / Ptilink][Running/Manual Start] [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Remote Access Auto Connection Driver / RasAcd][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [WAN Miniport (L2TP) / Rasl2tp][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [远程访问 PPPOE 驱动程序 / RasPppoe][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Direct Parallel / Raspti][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Rdbss / Rdbss][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [RDPCDD / RDPCDD][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [Terminal Server Device Redirector Driver / rdpdr][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:33 M:2008-04-13 11:32] [Digital CD Audio Playback Filter Driver / redbook][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:29 M:2008-04-13 18:51] [Rising RfwBase Driver / RfwBase9][Running/Manual Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.2, C:2009-02-01 16:06 M:2009-02-01 16:05] [rfwtdi / rfwtdi][Running/Auto Start] <\??\d:\Program Files\Rising\Ris\rfwtdi.sys> [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.2, C:2009-02-01 16:06 M:2009-02-01 16:05] [rsfwdrv / rsfwdrv][Running/System Start] <\??\d:\Program Files\Rising\Ris\rsfwdrv.sys> [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.44, C:2009-02-01 16:06 M:2009-02-01 16:05] [RsNTGDI / RsNTGDI][Running/Boot Start] [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] [Realtek 10/100/1000 PCI NIC Family NDIS XP Driver / RTL8023xp][Running/Manual Start] [(Verified)Realtek Semiconductor Corporation , 5.709.1121.2008 built by: WinDDK, C:2009-02-01 14:11 M:2008-12-02 14:05] [Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Stopped/Manual Start] [(Verified)Realtek Semiconductor Corporation, 5.398.613.2003 built by: WinDDK, C:2009-02-01 14:11 M:2008-04-13 09:35] [SafeBoxKrnl / SafeBoxKrnl][Running/System Start] <\??\C:\WINDOWS\system32\drivers\SafeBoxKrnl.sys> [(Verified)360安全中心, 2, 3, 0, 1007, C:2009-01-12 18:48 M:2009-01-12 18:48] [Secdrv / Secdrv][Stopped/Manual Start] [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086, C:2008-04-14 12:00 M:2008-04-14 12:00] [Serenum Filter Driver / serenum][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Serial port driver / Serial][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [SATALink driver accelerator / SiFilter][Running/Boot Start] [(Verified)Silicon Image, Inc., 1.0.0.11, C:2008-12-26 09:40 M:2007-05-25 09:41] [SATALink External Device Filter / SiRemFil][Running/Boot Start] [(Verified)Silicon Image, Inc., 1, 1, 7, 0, C:2008-12-26 09:40 M:2007-05-25 09:40] [SiS AGP winXP Filter / sisagp][Running/Boot Start] [(Verified)Silicon Integrated Systems Corporation, 7.2.0.1220 built by: WinDDK, C:2009-02-01 14:10 M:2006-06-16 10:04] [SiSide / SiSide][Running/Boot Start] [(Verified)Silicon Integrated Systems Corp., 2.04.00.00 built by: WinDDK, C:2009-02-01 14:12 M:2008-04-29 10:06] [Microsoft Kernel Audio Splitter / splitter][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 11:45] [Srv / Srv][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5725 (xpsp_sp3_gdr.081211-1306), C:2008-04-14 12:00 M:2008-12-11 18:57] [Software Bus Driver / swenum][Running/Manual Start] [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-2108), C:2008-04-13 11:39 M:2008-04-13 11:39] [Microsoft Kernel GS Wavetable Synthesizer / swmidi][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 11:45] [Microsoft Kernel System Audio Device / sysaudio][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 12:15] [Terminal Device Driver / TermDD][Running/System Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:33 M:2008-04-13 19:14] [TesDrvPt / TesDrvPt][Stopped/Manual Start] <\??\C:\WINDOWS\system32\TesDrvPt.sys> [(Verified)TENCENT, 1.0.4 built by: WinDDK, C:2009-02-01 19:24 M:2009-02-01 19:24] [TesSafe / TesSafe][Stopped/Manual Start] <\??\C:\WINDOWS\system32\TesSafe.sys> [(Verified)TENCENT, 0, 0, 9, 2, C:2009-02-01 19:24 M:2009-02-02 22:56] [Microcode Update Driver / Update][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft USB Generic Parent Driver / usbccgp][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-26 09:40 M:2008-04-13 11:45] [Microsoft USB 2.0 Enhanced Host Controller Miniport Driver / usbehci][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-13 11:45] [USB2 Enabled Hub / usbhub][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-13 11:45] [Microsoft USB Open Host Controller Miniport Driver / usbohci][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-26 09:40 M:2008-04-13 11:45] [Microsoft USB Universal Host Controller Miniport Driver / usbuhci][Stopped/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [VgaSave / VgaSave][Running/System Start] <\SystemRoot\System32\drivers\vga.sys> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [VIA AGP Bus Filter / viaagp][Running/Boot Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-26 09:40 M:2008-04-13 11:36] [Remote Access IP ARP Driver / Wanarp][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [Microsoft WINMM WDM Audio Compatibility Driver / wdmaud][Running/Manual Start] [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:30 M:2008-04-13 12:17] [Windows Driver Foundation - User-mode Driver Framework Platform Driver / WudfPf][Stopped/Manual Start] [(Verified)Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 18:55 M:2006-09-28 18:55] [Windows Driver Foundation - User-mode Driver Framework Reflector / WudfRd][Stopped/Manual Start] [(Verified)Microsoft Corporation, 6.0.5716.32 (winmain(wmbla).060928-1756), C:2006-09-28 19:00 M:2006-09-28 19:00] ======================================== 进程 [PID: 892 / SYSTEM] \SystemRoot\System32\smss.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 1112 / SYSTEM] \??\C:\WINDOWS\system32\csrss.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CSRSRV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\basesrv.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\winsrv.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\KERNEL32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sxs.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Apphelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 1320 / SYSTEM] \??\C:\WINDOWS\system32\winlogon.exe [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2008-04-14 12:00 M:2006-09-24 16:42] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\AUTHZ.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\NDdeApi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\PROFMAP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\REGAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSGINA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\COMCTL32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ODBC32.dll [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\comdlg32.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\odbcint.dll [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHSVCS.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sfc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sfc_os.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2008-04-14 12:00 M:2004-08-08 16:03] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Apphelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSCARD.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WTSAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\cscdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\dimsntfy.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WlNotify.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MPR.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSPOOL.DRV [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wldap32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\cscui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NTMARTA.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wdmaud.drv [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 19:14 M:2008-04-13 19:14] C:\WINDOWS\system32\msacm32.drv [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\midimap.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 1436 / SYSTEM] C:\WINDOWS\system32\services.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NCObjAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SCESRV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\AUTHZ.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\umpnpmgr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcAdProc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Apphelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\eventlog.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 1448 / SYSTEM] C:\WINDOWS\system32\lsass.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LSASRV.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\system32\MPR.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\NTDSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMSRV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\cryptdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msprivs.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kerberos.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\netlogon.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\system32\w32time.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\schannel.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wdigest.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\setupapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\scecli.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\pstorsvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\psbase.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\dssenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 1684 / SYSTEM] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NTMARTA.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\rpcss.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\termsrv.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:33 M:2008-04-14 20:00] c:\windows\system32\ICAAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:33 M:2008-04-14 20:00] c:\windows\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\AUTHZ.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\mstlsapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\ACTIVEDS.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\adsldpc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] c:\windows\system32\ATL.DLL [(Verified)Microsoft Corporation, 3.05.2284, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\REGAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WTSAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msi.dll [Microsoft Corporation, 4.5.6001.22159, C:2008-04-14 12:00 M:2008-05-19 06:33] [PID: 1776 / NETWORK SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\rpcss.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\winrnr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasadhlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msi.dll [Microsoft Corporation, 4.5.6001.22159, C:2008-04-14 12:00 M:2008-05-19 06:33] [PID: 1964 / SYSTEM] d:\Program Files\Rising\Ris\CCENTER.EXE [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\combase.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\cnt09.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\cnt08.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] [PID: 1972 / SYSTEM] C:\WINDOWS\System32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\System32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\NTMARTA.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\shsvcs.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] c:\windows\system32\dhcpcsvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] c:\windows\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\audiosrv.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] c:\windows\system32\wkssvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] c:\windows\system32\NTDSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\System32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\cryptsvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\certcli.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\ATL.DLL [(Verified)Microsoft Corporation, 3.05.2284, C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\CRYPTUI.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] c:\windows\system32\ESENT.dll [(Verified)Microsoft Corporation, 5.1.2468.0 (Lab03_N(jliem).010306-1456), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] c:\windows\system32\netman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\MPRAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\ACTIVEDS.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\adsldpc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\rtutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\netshell.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\credui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\dot3api.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\dot3dlg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\OneX.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WTSAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\eappcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\eappprxy.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\RASAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\rasman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\TAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WZCSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-13 19:13 M:2008-04-14 12:00] c:\windows\system32\WZCSvc.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-13 19:13 M:2008-04-14 12:00] c:\windows\system32\WMI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\EapolQec.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\QUtil.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\srvsvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\System32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\es.dll [(Verified)Microsoft Corporation, 2001.12.4414.706, C:2008-04-14 12:00 M:2008-07-08 04:26] c:\windows\system32\wbem\wmisvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\VSSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\HNETCFG.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\SXS.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\comsvcs.dll [(Verified)Microsoft Corporation, 2001.12.4414.702, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\colbact.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\MTXCLU.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WSOCK32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\CLUSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\RESUTILS.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\sens.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\ipnathlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5584 (xpsp_sp3_qfe.080421-1413), C:2008-04-14 12:00 M:2008-04-22 02:44] c:\windows\system32\AUTHZ.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\browser.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\rasadhlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wbem\wbemcomn.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\System32\Wbem\wbemcore.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\System32\Wbem\esscli.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\System32\Wbem\FastProx.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\wmiutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\repdrvfs.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\wmiprvsd.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\NCObjAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wbem\wbemess.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\netcfgx.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\upnp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINHTTP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SSDPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\msi.dll [Microsoft Corporation, 4.5.6001.22159, C:2008-04-14 12:00 M:2008-05-19 06:33] C:\WINDOWS\System32\rasmans.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\WINIPSEC.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\tapisrv.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\rastapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\unimdm.tsp [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\uniplat.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\kmddsp.tsp [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\ndptsp.tsp [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\ipconf.tsp [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\h323.tsp [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\hidphone.tsp [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\HID.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 19:13 M:2008-04-14 12:00] C:\WINDOWS\System32\rasppp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\ntlsapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kerberos.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\cryptdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\RASQEC.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\raschap.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\rastls.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\SCHANNEL.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\WinSCard.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\RASDLG.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wbem\ncprov.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\wbemsvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] [PID: 124 / NETWORK SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\dnsrslvr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] c:\windows\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 316 / LOCAL SERVICE] C:\WINDOWS\system32\svchost.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NTMARTA.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\lmhsvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\webclnt.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] c:\windows\system32\ssdpsrv.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\upnphost.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\WINHTTP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] c:\windows\system32\SSDPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\netapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\httpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 400 / SYSTEM] d:\Program Files\Rising\Ris\RavMonD.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\combase.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] d:\Program Files\Rising\Ris\moncomm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\MonBase.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\Rslog.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.32, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\mondrv.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\defmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 29, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\moncom08.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\MonRule.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\FileMon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 21, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\MailMon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 23, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\HookWeb.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\rfwlog.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\rfwrule.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.25, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\rfwsrv.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.75, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\mPorts.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.0, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\rfwdrvc.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.3, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\Rfwdrv.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.5, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\psapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\rsnetsvr.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\Iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] d:\Program Files\Rising\Ris\urlrule.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1.0.0.18, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\recomp.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\refs.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\viruslib.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\relibldr.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\rfwproxy.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.25, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\WSOCK32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\proccomm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\RSAPPMGR.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\CfgDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.18, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\Hooksys.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 18, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\ProcCom.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\RsCommX2.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\HookCont.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 11, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\BACore.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 19, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sfc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sfc_os.dll [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:2008-04-14 12:00 M:2004-08-08 16:03] C:\WINDOWS\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\RSStore.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\ScanAdd.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.14, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\Scanner.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.33, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\ffr.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\nvfile.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\scanexec.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\unexe.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\scanex.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 17, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\pearc.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\scanpe.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\ur000.dat [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\extfile.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\revm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\urutils.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\urllib.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\extole.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\scansct.dll [Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\extmail.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\ur023.dat [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\ur001.dat [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\scriptci.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\uroutine.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\posttrt.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] [PID: 996 / SYSTEM] d:\Program Files\Rising\Ris\RavTask.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 23, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\rsconf.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\RSAPPMGR.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\CfgDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.18, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\proccomm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] d:\Program Files\Rising\Ris\rsstub.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\COMCTL32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] d:\Program Files\Rising\Ris\rstask.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 36, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\netapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] [PID: 1100 / SYSTEM] d:\Program Files\Rising\Ris\ScanFrm.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.11, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\combase.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\moncomm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\scansrvp.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.11, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\proccomm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\ScanSrv.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.9, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 16:06 M:2009-02-01 16:05] d:\Program Files\Rising\Ris\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 456 / Administrator] C:\WINDOWS\Explorer.EXE [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\BROWSEUI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHDOCVW.dll [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPTUI.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] C:\WINDOWS\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\appHelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\AcSignIcon.dll [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31] C:\WINDOWS\system32\WINSPOOL.DRV [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEACC.dll [(Verified)Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\cscui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\CSCDLL.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\themeui.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSIMG32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msutb.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\Program Files\Windows Media Player\wmpband.dll [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-12-10 23:34 M:2006-11-02 23:06] C:\WINDOWS\system32\MPR.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LINKINFO.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntshrui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ATL.DLL [(Verified)Microsoft Corporation, 3.05.2284, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msi.dll [Microsoft Corporation, 4.5.6001.22159, C:2008-04-14 12:00 M:2008-05-19 06:33] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ieframe.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\webcheck.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\MLANG.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\stobject.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\BatMeter.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\POWRPROF.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WTSAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WPDShServiceObj.dll [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\system32\WINHTTP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mydocs.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wdmaud.drv [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 19:14 M:2008-04-13 19:14] C:\WINDOWS\system32\PortableDeviceTypes.dll [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\system32\PortableDeviceApi.dll [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\system32\msacm32.drv [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\midimap.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETSHELL.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\credui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\dot3api.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rtutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\dot3dlg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OneX.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\eappcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\eappprxy.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.CN, 5, 0, 0, 1005, C:2009-01-15 23:36 M:2009-01-15 23:36] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll [(Verified)Adobe Systems, Inc., 9.0.0.2008061100, C:2008-06-11 22:49 M:2008-06-11 22:49] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll [Microsoft Corporation, 8.00.50727.762, C:2006-12-01 22:54 M:2006-12-01 22:54] C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS [Adobe Systems, Inc., 9.0.0.0, C:2008-06-22 22:23 M:2008-06-22 22:23] C:\WINDOWS\system32\nvcpl.dll [(Verified)NVIDIA Corporation, 6.14.11.7516, C:2009-02-01 14:10 M:2008-05-03 05:46] C:\WINDOWS\system32\comdlg32.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NVRSZHC.DLL [NVIDIA Corporation, 6.14.10.7189, C:2008-05-03 05:46 M:2005-04-01 16:16] C:\WINDOWS\system32\NTMARTA.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\nvapi.dll [(Verified)NVIDIA Corporation, 6.14.11.7516, C:2008-05-03 05:46 M:2008-05-03 05:46] C:\WINDOWS\system32\nvshell.dll [NVIDIA Corporation, 6.14.10.10040, C:2008-05-03 05:46 M:2005-04-01 16:16] C:\WINDOWS\system32\SXS.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DSOUND.dll [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mstask.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:34 M:2008-04-14 20:00] C:\WINDOWS\system32\NTDSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\browselc.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120, C:2009-02-01 15:05 M:2008-12-24 12:54] d:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsBho_00.dll [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2009-02-01 15:07 M:2009-01-12 19:45] d:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2009-02-01 15:07 M:2009-01-12 19:45] C:\WINDOWS\System32\drprov.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\ntlanman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\NETUI0.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\NETUI1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\NETRAP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\davclnt.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DUSER.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSGINA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ODBC32.dll [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\odbcint.dll [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\WinRAR\rarext.dll [N/A, C:2009-02-01 14:44 M:2008-09-30 21:02] C:\WINDOWS\system32\RavExt.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\zipfldr.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\actxprxy.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sendmail.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wpdshext.dll [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll [(Verified)Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416), C:2008-12-25 05:43 M:2008-04-16 01:47] C:\WINDOWS\system32\shgina.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Audiodev.dll [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2008-12-25 05:41 M:2006-10-18 21:47] C:\WINDOWS\system32\WMVCore.DLL [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-10-18 21:47] C:\WINDOWS\system32\WMASF.DLL [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-10-18 21:47] d:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34, C:2009-02-01 15:05 M:2008-12-24 12:54] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\Program Files\Microsoft Office\OFFICE11\msohev.dll [(Verified)Microsoft Corporation, 11.0.5510, C:2009-02-01 14:14 M:2003-07-14 22:52] C:\WINDOWS\system32\shimgvw.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\TeraCopy\TeraCopy.dll [N/A, C:2009-02-01 16:03 M:2007-06-21 21:26] C:\WINDOWS\system32\SOGOUPY.IME [(Verified)Sogou.com Inc., 3.6.0.1653, C:2008-09-17 10:07 M:2008-09-17 10:07] C:\WINDOWS\system32\shdoclc.dll [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:2008-04-14 12:00 M:2008-04-20 19:14] [PID: 1084 / SYSTEM] d:\Program Files\Rising\Ris\rsnetsvr.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\NComm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.9, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] d:\Program Files\Rising\Ris\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] d:\Program Files\Rising\Ris\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] d:\Program Files\Rising\Ris\ProcComm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wintrust.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\userenv.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\cryptnet.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SensApi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINHTTP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 1584 / Administrator] D:\Program Files\Rising\AntiSpyware\rstray.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.16, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Rising\AntiSpyware\rsmginfo.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Rising\AntiSpyware\RsXML.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\ComServ.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.31, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\rscommon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.1.1, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Rising\AntiSpyware\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] D:\Program Files\Rising\AntiSpyware\pngdll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\runiep.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.42, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\NComm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.11, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\ProcCom.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2009-02-01 15:15 M:2009-02-01 15:56] D:\Program Files\Rising\AntiSpyware\RsCommX2.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ws2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RASAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\TAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rtutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sensapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\rasadhlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\System32\winrnr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 524 / Administrator] D:\Program Files\Rising\Ris\RsTray.exe [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.22, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Rising\Ris\ComServ.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.49, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] D:\Program Files\Rising\Ris\rslang.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 27, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] D:\Program Files\Rising\Ris\rsxml.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\ProcComm.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\MonState.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\ScanEvnt.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.12, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\rsguilib.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 70, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\MFC71.DLL [Microsoft Corporation, 7.10.3077.0, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\rsconf.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\RSAPPMGR.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\CfgDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.18, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\rfwrule.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.25, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\rspalvd.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.21, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\rsnetsvr.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\ravbintl.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 25, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] D:\Program Files\Rising\Ris\mruleui.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 10, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\MonTray.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.90, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Rising\Ris\PngDll.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\RavITray.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 19, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\ScanPrxy.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.14, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\rfwtray.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 1, 5, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Rising\Ris\rsmginfo.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 16:06 M:2009-02-01 16:05] D:\Program Files\Rising\Ris\rfwlog.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9, C:2009-02-01 16:06 M:2009-02-01 16:05] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MPRAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ACTIVEDS.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\adsldpc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ATL.DLL [(Verified)Microsoft Corporation, 3.05.2284, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rtutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RASAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\TAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\system32\sensapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\rasadhlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\System32\winrnr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 2360 / Administrator] C:\WINDOWS\system32\ctfmon.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSUTB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 3144 / Administrator] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\FetionVM.exe [China Mobile, 1.0.0.0, C:2008-02-28 15:13 M:2008-02-28 15:13] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\rsdeploy.dll [Remotesoft Inc., 1, 0, 6, 0, C:2006-07-05 13:19 M:2006-07-05 13:19] C:\WINDOWS\system32\imagehlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\mscoree.dll [(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] d:\Program Files\Rising\AntiSpyware\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 15:15 M:2009-02-01 15:56] d:\Program Files\Rising\AntiSpyware\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\FetionVM.rsm [N/A, C:2008-02-28 13:59 M:2008-02-28 13:59] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\v2.0.50727\mscorwks.dll [(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47] C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll [Microsoft Corporation, 8.00.50727.762, C:2006-12-01 22:54 M:2006-12-01 22:54] C:\WINDOWS\system32\shell32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\c\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll [Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-12-06 13:53 M:2007-12-06 13:53] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] D:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.CN, 5, 0, 0, 1005, C:2009-01-15 23:36 M:2009-01-15 23:36] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\v2.0.50727\mscorjit.dll [(Verified)Microsoft Corporation, 2.0.50727.1433 (REDBITS.050727-1400), C:2007-10-24 01:47 M:2007-10-24 01:47] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\c\windows\assembly\NativeImages_v2.0.50727_32\FetionVM\a87393057972c752eb50061d4235f9ec\FetionVM.ni.exe [China Mobile, 1.0.0.0, C:2008-02-28 15:13 M:2008-02-28 15:13] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\System\System.Windows.Forms.dll [Microsoft Corporation, 2.0.50727.214 (QFE.050727-2100), C:2006-09-19 03:34 M:2006-09-19 03:34] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\System\System.dll [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2006-11-16 14:08 M:2006-11-16 14:08] D:\Program Files\China Mobile\Fetion\ImpsControls.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\System\System.Drawing.dll [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2006-11-16 14:08 M:2006-11-16 14:08] D:\Program Files\China Mobile\Fetion\ImpsPcBase.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\System\System.Xml.dll [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2006-11-16 14:08 M:2006-11-16 14:08] D:\Program Files\China Mobile\Fetion\ImpsClientBase.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] D:\Program Files\China Mobile\Fetion\ImpsClientUtils.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] D:\Program Files\China Mobile\Fetion\ImpsClientResource.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] D:\Program Files\China Mobile\Fetion\ImpsClientCore.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] D:\Program Files\China Mobile\Fetion\ImpsBase.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll [(Verified)Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416), C:2008-12-25 05:43 M:2008-04-16 01:47] C:\WINDOWS\system32\apphelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\System\Accessibility.dll [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2006-11-16 14:08 M:2006-11-16 14:08] D:\Program Files\China Mobile\Fetion\VmDotNet\v2.0.50727\System\System.Configuration.dll [Microsoft Corporation, 2.0.50727.42 (RTM.050727-4200), C:2006-11-16 14:08 M:2006-11-16 14:08] C:\WINDOWS\system32\shfolder.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\NCindy.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\browseui.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ws2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\netman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MPRAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ACTIVEDS.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\adsldpc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ATL.DLL [(Verified)Microsoft Corporation, 3.05.2284, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rtutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\netshell.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\credui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\dot3api.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\dot3dlg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OneX.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\eappcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\eappprxy.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RASAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\TAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\WZCSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-13 19:13 M:2008-04-14 12:00] C:\WINDOWS\system32\WZCSvc.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-13 19:13 M:2008-04-14 12:00] C:\WINDOWS\system32\WMI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DHCPCSVC.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\EapolQec.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\QUtil.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ESENT.dll [(Verified)Microsoft Corporation, 5.1.2468.0 (Lab03_N(jliem).010306-1456), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\Interop.DynamicGifCtlLib.dll [ , 1.0.0.0, C:2008-05-08 11:44 M:2008-05-08 11:44] C:\WINDOWS\system32\RichEd20.DLL [(Verified)Microsoft Corporation, 5.30.23.1230, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ieframe.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] C:\WINDOWS\system32\SXS.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\ImpsPcCommLayer.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] C:\WINDOWS\system32\dciman32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\System32\winrnr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasadhlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\security.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\schannel.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\ImpsClientData.dll [China Mobile, 3.0.0.0, C:2008-05-08 11:46 M:2008-05-08 11:46] C:\WINDOWS\system32\dssenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\China Mobile\Fetion\SQLite.Interop.DLL [Released to the public domain, 1.0.44.0, C:2008-05-08 11:44 M:2008-05-08 11:44] D:\Program Files\China Mobile\Fetion\sensmon.dll [China Mobile, 1.0.0.1, C:2008-05-08 11:44 M:2008-05-08 11:44] D:\Program Files\China Mobile\Fetion\Interop.WMPLib.dll [ , 1.0.0.0, C:2008-05-08 11:44 M:2008-05-08 11:44] D:\Program Files\China Mobile\Fetion\AxInterop.WMPLib.dll [ , 1.0.0.0, C:2008-05-08 11:44 M:2008-05-08 11:44] C:\WINDOWS\system32\wmp.dll [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-10-18 21:47] C:\WINDOWS\system32\MSVFW32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\dbghelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wmploc.dll [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-11-02 23:38] C:\WINDOWS\system32\MFPlat.DLL [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] d:\Program Files\Rising\Ris\RavScrCh.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.60, C:2009-02-01 16:06 M:2009-02-01 16:12] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\jscript.dll [(Verified)Microsoft Corporation, 5.8.6001.18241, C:2008-04-14 12:00 M:2008-08-22 03:06] C:\WINDOWS\system32\vbscript.dll [(Verified)Microsoft Corporation, 5.8.6001.18241, C:2008-04-14 12:00 M:2008-08-22 03:06] d:\Program Files\China Mobile\Fetion\DynamicGifCtl.dll [China Mobile, 2.0.0.0, C:2008-05-08 11:44 M:2008-05-08 11:44] C:\WINDOWS\system32\MLANG.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sensapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mshtml.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] C:\WINDOWS\system32\msls31.dll [(Verified)Microsoft Corporation, 3.10.349.0, C:2008-04-14 12:00 M:2008-08-22 02:57] C:\WINDOWS\system32\wdmaud.drv [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 19:14 M:2008-04-13 19:14] C:\WINDOWS\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msacm32.drv [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\midimap.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 3244 / Administrator] D:\Program Files\Tencent\qq\QQ.exe [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-28 12:19 M:2008-11-28 12:19] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\QQBaseClassInDll.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\QQHelperDll.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\BasicCtrlDll.dll [(Verified)TENCENT, 8,0,1248,1851, C:2008-11-27 09:44 M:2008-11-27 09:44] C:\WINDOWS\system32\AVICAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVFW32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] D:\Program Files\Tencent\qq\MFC42.DLL [(Verified)Microsoft Corporation, 6.00.8665.0, C:2007-07-01 08:53 M:2007-07-01 08:53] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WSOCK32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEPRO32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\MSIMG32.dll [N/A, C:2008-07-17 12:50 M:2008-07-17 12:50] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] C:\WINDOWS\system32\MFC42LOC.DLL [(Verified)Microsoft Corporation, 6.00.8665.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] D:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.CN, 5, 0, 0, 1005, C:2009-01-15 23:36 M:2009-01-15 23:36] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSIMG32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\FinePlus.dll [N/A, C:2008-07-17 12:50 M:2008-07-17 12:50] C:\WINDOWS\system32\comdlg32.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\fphelper.dll [N/A, C:2008-07-17 12:50 M:2008-07-17 12:50] d:\Program Files\Rising\AntiSpyware\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 15:15 M:2009-02-01 15:56] d:\Program Files\Rising\AntiSpyware\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\RICHED32.DLL [(Verified)Microsoft Corporation, 5.00.2134.1, C:2007-07-01 08:52 M:2007-07-01 08:52] D:\Program Files\Tencent\qq\RICHED20.dll [(Verified)Microsoft Corporation, 5.31.23.1218, C:2007-07-01 08:53 M:2007-07-01 08:53] D:\Program Files\Tencent\qq\QQAPI.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\LoginCtrl.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\LoginCtrlRes.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\QQRes.dll [(Verified)TENCENT, 8,0,978,1833, C:2008-11-27 11:35 M:2008-11-27 11:35] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\userenv.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\QQMainFrame.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-12-10 15:13 M:2008-12-10 15:13] D:\Program Files\Tencent\qq\gdiplus.dll [(Verified)Microsoft Corporation, 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158), C:2008-11-27 09:44 M:2008-11-27 09:44] C:\WINDOWS\system32\asycfilt.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\UnReadMsgMgr.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\QQAllInOne.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\SCCore.dll [(Verified)TENCENT, 1, 6, 0, 2, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\CameraDll.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\CQQApplication.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 16:08 M:2008-11-27 16:08] D:\Program Files\Tencent\qq\FlashAvatarDll.dll [(Verified)版权所有 (C) 2008, 1, 0, 0, 1, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\NewSkin.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\MailSummary.dll [(Verified)TENCENT, 8,0,1234,1851, C:2008-11-27 09:43 M:2008-11-27 09:43] C:\WINDOWS\System32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\System32\winrnr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasadhlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\QQSpace.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\vbscript.dll [(Verified)Microsoft Corporation, 5.6.0.7426, C:2007-07-01 08:52 M:2007-07-01 08:52] C:\WINDOWS\system32\SXS.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\devenum.dll [(Verified)Microsoft Corporation, 6.05.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\setupapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msdmo.dll [(Verified)N/A, C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\QQAvatar.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\OEMApplication.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] C:\WINDOWS\system32\ieframe.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] D:\Program Files\Tencent\qq\QQKnowledgeSearch.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\QQGroupMng.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\QQPlugin.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 11:16 M:2008-10-05 11:16] C:\WINDOWS\system32\mscms.dll [(Verified)Microsoft Corporation, 5.1.2600.5627 (xpsp_sp3_gdr.080624-1245), C:2008-04-14 12:00 M:2008-06-25 00:42] C:\WINDOWS\system32\WINSPOOL.DRV [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wdmaud.drv [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 19:14 M:2008-04-13 19:14] C:\WINDOWS\system32\msacm32.drv [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\midimap.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\schannel.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\QQPet.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\QRingMng.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\QQSysMsgMng.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\UserDefinedHead.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\QQConfigPlugin.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] C:\WINDOWS\system32\DINPUT.dll [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\QQCustomFace.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] C:\WINDOWS\system32\RASAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\TAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rtutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\system32\sensapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\LongConnection.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\PhoneAPI.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\DialerAllinOne.dll [(Verified)tencent, 1, 4, 0, 0, C:2008-11-27 09:43 M:2008-11-27 09:43] C:\WINDOWS\system32\HID.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 19:13 M:2008-04-14 12:00] C:\WINDOWS\system32\CFGMGR32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\BQQApplication.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\PersonalDesktop.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\QQMagicFace.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\ImageOle.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\QQSceneMng.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\QQLiveQMng.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] C:\WINDOWS\system32\mshtml.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] C:\WINDOWS\system32\msls31.dll [(Verified)Microsoft Corporation, 3.10.349.0, C:2008-04-14 12:00 M:2008-08-22 02:57] C:\WINDOWS\system32\mlang.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\iepeers.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] d:\Program Files\Rising\Ris\RavScrCh.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.60, C:2009-02-01 16:06 M:2009-02-01 16:12] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\jscript.dll [(Verified)Microsoft Corporation, 5.8.6001.18241, C:2008-04-14 12:00 M:2008-08-22 03:06] C:\WINDOWS\system32\vbscript.dll [(Verified)Microsoft Corporation, 5.8.6001.18241, C:2008-04-14 12:00 M:2008-08-22 03:06] C:\WINDOWS\system32\appHelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\CommercesMng.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43] D:\Program Files\Tencent\qq\QQAddr.dll [(Verified)深圳市腾讯计算机系统有限公司, 5, 0, 101, 330, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\GroupConnection.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\AddrSearch.dll [(Verified)腾讯科技（深圳）有限公司, 2, 0, 1, 10, C:2008-11-27 09:42 M:2008-11-27 09:43] C:\WINDOWS\system32\LINKINFO.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntshrui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ATL.DLL [(Verified)Microsoft Corporation, 3.05.2284, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\perfos.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SOGOUPY.IME [(Verified)Sogou.com Inc., 3.6.0.1653, C:2008-09-17 10:07 M:2008-09-17 10:07] C:\WINDOWS\system32\NTMARTA.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msadp32.acm [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] D:\Program Files\Tencent\qq\QQFileTransfer.dll [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44] D:\Program Files\Tencent\qq\DShared.dll [(Verified)Tencent, 2, 1, 0, 0, C:2008-11-27 09:44 M:2008-11-27 09:44] [PID: 3264 / Administrator] D:\Program Files\TheWorld 2.0\TheWorld.exe [(Verified)Phoenix Studio, 2, 4, 0, 2, C:2009-01-20 10:57 M:2009-01-20 10:57] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\comdlg32.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\COMCTL32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll [(Verified)Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416), C:2008-12-25 05:43 M:2008-04-16 01:47] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] d:\Program Files\Rising\AntiSpyware\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 15:15 M:2009-02-01 15:56] d:\Program Files\Rising\AntiSpyware\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] D:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.CN, 5, 0, 0, 1005, C:2009-01-15 23:36 M:2009-01-15 23:36] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\appHelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\AcSignIcon.dll [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31] C:\WINDOWS\system32\WINSPOOL.DRV [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEACC.dll [(Verified)Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\cscui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\CSCDLL.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ieframe.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] C:\WINDOWS\system32\MLANG.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msxml3.dll [(Verified)Microsoft Corporation, 8.100.1048.0, C:2008-04-14 12:00 M:2008-09-05 01:15] C:\WINDOWS\system32\DSOUND.DLL [(Verified)Microsoft Corporation, 5.3.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\vbscript.dll [(Verified)Microsoft Corporation, 5.8.6001.18241, C:2008-04-14 12:00 M:2008-08-22 03:06] C:\WINDOWS\system32\SXS.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mshtml.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] C:\WINDOWS\system32\msls31.dll [(Verified)Microsoft Corporation, 3.10.349.0, C:2008-04-14 12:00 M:2008-08-22 02:57] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msi.dll [Microsoft Corporation, 4.5.6001.22159, C:2008-04-14 12:00 M:2008-05-19 06:33] C:\WINDOWS\system32\wdmaud.drv [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 19:14 M:2008-04-13 19:14] C:\WINDOWS\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msacm32.drv [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\midimap.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RASAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\TAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rtutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\sensapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasadhlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\System32\winrnr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\Ris\RavScrCh.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.60, C:2009-02-01 16:06 M:2009-02-01 16:12] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\jscript.dll [(Verified)Microsoft Corporation, 5.8.6001.18241, C:2008-04-14 12:00 M:2008-08-22 03:06] C:\WINDOWS\system32\schannel.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ddrawex.dll [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DDRAW.dll [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DCIMAN32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\D3DIM700.DLL [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 11:16 M:2008-10-05 11:16] C:\WINDOWS\system32\mscms.dll [(Verified)Microsoft Corporation, 5.1.2600.5627 (xpsp_sp3_gdr.080624-1245), C:2008-04-14 12:00 M:2008-06-25 00:42] C:\WINDOWS\system32\iepeers.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\actxprxy.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\Program Files\Internet Explorer\ieproxy.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:07 M:2008-08-22 03:07] C:\WINDOWS\system32\SOGOUPY.IME [(Verified)Sogou.com Inc., 3.6.0.1653, C:2008-09-17 10:07 M:2008-09-17 10:07] C:\WINDOWS\system32\MSIMG32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NTMARTA.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Dxtrans.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\ATL.DLL [(Verified)Microsoft Corporation, 3.05.2284, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Dxtmsft.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\ImgUtil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\pngfilt.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\MFPlat.DLL [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\system32\MSRATING.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:07] [PID: 3124 / Administrator] d:\Program Files\arswp\ArSwp.exe [(Verified)ArSwp.com, 2, 8, 2, 1115, C:2009-02-03 12:39 M:2008-11-15 11:58] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WININET.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\Normaliz.dll [(Verified)Microsoft Corporation, 6.0.5441.0 (winmain(wmbla).060628-1735), C:2008-06-12 11:27 M:2008-06-12 11:27] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\imagehlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WTSAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\comdlg32.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\COMCTL32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\WINSPOOL.DRV [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\oledlg.dll [(Verified)Microsoft Corporation, 1.0 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEPRO32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WSOCK32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\iphlpapi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] d:\Program Files\Rising\AntiSpyware\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 15:15 M:2009-02-01 15:56] d:\Program Files\Rising\AntiSpyware\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\uxtheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] D:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.CN, 5, 0, 0, 1005, C:2009-01-15 23:36 M:2009-01-15 23:36] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\appHelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\AcSignIcon.dll [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31] C:\WINDOWS\system32\OLEACC.dll [(Verified)Microsoft Corporation, 4.2.5406.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rsaenh.dll [(Verified)Microsoft Corporation, 5.1.2600.5507 (xpsp.080318-1711), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\cryptnet.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SensApi.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINHTTP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Cabinet.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ieframe.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:10 M:2008-08-22 03:10] C:\WINDOWS\system32\asycfilt.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mswsock.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\hnetcfg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\wshtcpip.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RASAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rasman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\TAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\rtutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msv1_0.dll [(Verified)Microsoft Corporation, 5.1.2600.5594 (xpsp_sp3_qfe.080503-1404), C:2008-04-14 12:00 M:2008-05-05 19:06] C:\WINDOWS\system32\rasadhlp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\System32\winrnr.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL [(Verified)Microsoft Corporation, 11.0.8164, C:2007-04-19 13:57 M:2007-04-19 13:57] C:\WINDOWS\system32\SXS.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mshtml.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:09] C:\WINDOWS\system32\msls31.dll [(Verified)Microsoft Corporation, 3.10.349.0, C:2008-04-14 12:00 M:2008-08-22 02:57] C:\WINDOWS\system32\mlang.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\arswp\plugin\ArFix.dll [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2009-02-03 12:39 M:2007-11-28 15:19] C:\WINDOWS\system32\MSRATING.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:07] C:\WINDOWS\system32\msi.dll [Microsoft Corporation, 4.5.6001.22159, C:2008-04-14 12:00 M:2008-05-19 06:33] C:\WINDOWS\system32\actxprxy.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\Program Files\Internet Explorer\ieproxy.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:07 M:2008-08-22 03:07] C:\WINDOWS\system32\LINKINFO.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntshrui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ATL.DLL [(Verified)Microsoft Corporation, 3.05.2284, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\mstask.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:34 M:2008-04-14 20:00] C:\WINDOWS\system32\MPR.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NTDSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\system32\iepeers.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] d:\Program Files\Rising\Ris\RavScrCh.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.60, C:2009-02-01 16:06 M:2009-02-01 16:12] C:\WINDOWS\system32\MSVCP71.dll [Microsoft Corporation, 7.10.3077.0, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\MSVCR71.dll [Microsoft Corporation, 7.10.3052.4, C:2008-12-25 05:55 M:2008-08-12 17:41] C:\WINDOWS\system32\jscript.dll [(Verified)Microsoft Corporation, 5.8.6001.18241, C:2008-04-14 12:00 M:2008-08-22 03:06] C:\WINDOWS\system32\vbscript.dll [(Verified)Microsoft Corporation, 5.8.6001.18241, C:2008-04-14 12:00 M:2008-08-22 03:06] C:\WINDOWS\system32\Macromed\Flash\Flash10a.ocx [(Verified)Adobe Systems, Inc., 10,0,12,36, C:2008-10-05 11:16 M:2008-10-05 11:16] C:\WINDOWS\system32\mscms.dll [(Verified)Microsoft Corporation, 5.1.2600.5627 (xpsp_sp3_gdr.080624-1245), C:2008-04-14 12:00 M:2008-06-25 00:42] C:\WINDOWS\system32\wdmaud.drv [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-13 19:14 M:2008-04-13 19:14] C:\WINDOWS\system32\msacm32.drv [(Verified)Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\midimap.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ImgUtil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\Dxtrans.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\ddrawex.dll [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DDRAW.dll [(Verified)Microsoft Corporation, 5.03.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DCIMAN32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\pngfilt.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\Dxtmsft.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:05] C:\WINDOWS\system32\msimg32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NTMARTA.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\browseui.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\shdocvw.dll [(Verified)Microsoft Corporation, 6.00.2900.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 09:00] C:\WINDOWS\system32\CRYPTUI.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll [(Verified)Autodesk, 16.0.0.86, C:2003-02-14 01:31 M:2003-02-14 01:31] C:\WINDOWS\System32\drprov.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\ntlanman.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\NETUI0.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\NETUI1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\NETRAP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\System32\davclnt.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wpdshext.dll [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll [(Verified)Microsoft Corporation, 5.1.3102.5581 (xpsp_sp3_qfe.080415-1416), C:2008-12-25 05:43 M:2008-04-16 01:47] C:\WINDOWS\system32\PortableDeviceApi.dll [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2006-10-18 21:47 M:2006-10-18 21:47] C:\WINDOWS\system32\shgina.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSGINA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ODBC32.dll [(Verified)Microsoft Corporation, 3.525.1132.0 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\odbcint.dll [(Verified)Microsoft Corporation, 3.525.1117.0 built by: (_sqlbld), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Audiodev.dll [(Verified)Microsoft Corporation, 5.2.5721.5145 (WMP_11.061018-2006), C:2008-12-25 05:41 M:2006-10-18 21:47] C:\WINDOWS\system32\WMVCore.DLL [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-10-18 21:47] C:\WINDOWS\system32\WMASF.DLL [(Verified)Microsoft Corporation, 11.0.5721.5145 (WMP_11.061018-2006), C:2008-04-14 12:00 M:2006-10-18 21:47] C:\WINDOWS\system32\Apphelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 1224 / Administrator] C:\WINDOWS\system32\rundll32.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\IMAGEHLP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\AntiSpyware\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 15:15 M:2009-02-01 15:56] d:\Program Files\Rising\AntiSpyware\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] D:\Program Files\360\360Safe\safemon\safemon.dll [(Verified)360.CN, 5, 0, 0, 1005, C:2009-01-15 23:36 M:2009-01-15 23:36] C:\WINDOWS\system32\PSAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSCTF.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msctfime.ime [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\appHelp.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SYSDM.CPL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\comdlg32.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\netid.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\credui.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wuaucpl.cpl [(Verified)Microsoft Corporation, 7.2.6001.788 (winmain_oob/wu_wsuswlc(wmbla).081016-1330), C:2008-12-10 23:34 M:2008-10-16 14:12] C:\WINDOWS\system32\Cabinet.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSIMG32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CRYPT32.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSASN1.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINTRUST.dll [(Verified)Microsoft Corporation, 5.131.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\remotepg.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\SAMLIB.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wbem\wbemprox.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\wbemcomn.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\wbemsvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\fastprox.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\NTDSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\browseui.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\themeui.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] [PID: 580 / NETWORK SERVICE] C:\WINDOWS\system32\wbem\wmiprvse.exe [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\ntdll.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kernel32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\msvcrt.dll [(Verified)Microsoft Corporation, 7.0.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ADVAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\RPCRT4.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\Secur32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USER32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\GDI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932), C:2008-04-14 12:00 M:2008-10-23 20:38] C:\WINDOWS\system32\wbem\wbemcomn.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\ole32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\OLEAUT32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wbem\FastProx.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\MSVCP60.dll [(Verified)Microsoft Corporation, 6.02.3104.0, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NTDSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5582 (xpsp_sp3_qfe.080416-1432), C:2008-04-14 12:00 M:2008-04-17 12:50] C:\WINDOWS\system32\DNSAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] C:\WINDOWS\system32\WS2_32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WS2HELP.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NETAPI32.dll [(Verified)Microsoft Corporation, 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312), C:2008-04-14 12:00 M:2008-10-16 00:35] C:\WINDOWS\system32\WLDAP32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\NCObjAPI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\ShimEng.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\AppPatch\AcGenral.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINMM.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\MSACM32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0845), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\VERSION.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\SHELL32.dll [(Verified)Microsoft Corporation, 6.00.2900.5622 (xpsp_sp3_gdr.080617-1319), C:2008-04-14 12:00 M:2008-06-18 03:00] C:\WINDOWS\system32\SHLWAPI.dll [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USERENV.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\UxTheme.dll [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-23 01:53] C:\WINDOWS\system32\IMM32.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\LPK.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\USP10.dll [(Verified)Microsoft Corporation, 1.0420.2600.5512 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\kmon.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2009-02-01 15:15 M:2009-02-01 15:15] C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [(Verified)Microsoft Corporation, 6.0 (xpsp.080413-2105), C:2008-12-10 23:27 M:2008-04-14 20:00] C:\WINDOWS\system32\comctl32.dll [(Verified)Microsoft Corporation, 5.82 (xpsp.080413-2105), C:2008-04-14 12:00 M:2008-04-14 12:00] d:\Program Files\Rising\AntiSpyware\comx3.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 15:15 M:2009-02-01 15:56] d:\Program Files\Rising\AntiSpyware\Syslay.dll [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 15:15 M:2009-02-01 15:56] C:\WINDOWS\system32\Wtsapi32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WINSTA.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\urlmon.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-04-14 12:00 M:2008-08-22 03:08] C:\WINDOWS\system32\iertutil.dll [(Verified)Microsoft Corporation, 8.00.6001.18241 (longhorn_ie8_beta2(wmbla).080822-0214), C:2008-08-22 03:06 M:2008-08-22 03:06] C:\WINDOWS\system32\xpsp2res.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\CLBCATQ.DLL [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\COMRes.dll [(Verified)Microsoft Corporation, 2001.12.4414.700, C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\wbem\wbemprox.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\wbemsvc.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\wmiutils.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\cimwin32.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\wbem\framedyn.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2108), C:2008-12-10 23:33 M:2008-04-14 20:00] C:\WINDOWS\system32\SETUPAPI.dll [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111), C:2008-04-14 12:00 M:2008-04-14 12:00] C:\WINDOWS\system32\WMI.DLL [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2113), C:2008-04-14 12:00 M:2008-04-14 12:00] ======================================== 文件关联 [.hlp] <%SystemRoot%\System32\winhlp32.exe %1> [(Verified)Microsoft Corporation, 5.1.2600.0 (XPClient.010817-1148), C:2008-04-14 12:00 M:2008-04-14 12:00] [.vbs] <%SystemRoot%\System32\WScript.exe "%1" %*> [(Verified)Microsoft Corporation, 5.7.0.18066, C:2008-04-14 12:00 M:2008-05-08 19:24] [.js] <%SystemRoot%\System32\WScript.exe "%1" %*> [(Verified)Microsoft Corporation, 5.7.0.18066, C:2008-04-14 12:00 M:2008-05-08 19:24] [.chm] <"C:\WINDOWS\hh.exe" %1> [(Verified)Microsoft Corporation, 5.2.3790.2453 (srv03_sp1_qfe.050525-1536), C:2008-04-14 12:00 M:2008-04-14 12:00] ======================================== AutoRun.INF ======================================== Winsock提供者 MSAFD Tcpip [TCP/IP] <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] MSAFD Tcpip [UDP/IP] <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] MSAFD Tcpip [RAW/IP] <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] RSVP UDP Service Provider <%SystemRoot%\system32\rsvpsp.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] RSVP TCP Service Provider <%SystemRoot%\system32\rsvpsp.dll> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852), C:2008-04-14 12:00 M:2008-04-14 12:00] MSAFD NetBIOS [\Device\NetBT_Tcpip_{D5F8D466-A597-4092-9204-1683A9741C98}] SEQPACKET 0 <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] MSAFD NetBIOS [\Device\NetBT_Tcpip_{D5F8D466-A597-4092-9204-1683A9741C98}] DATAGRAM 0 <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] MSAFD NetBIOS [\Device\NetBT_Tcpip_{1677000B-D452-4402-87C0-E8A68F632C9D}] SEQPACKET 1 <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] MSAFD NetBIOS [\Device\NetBT_Tcpip_{1677000B-D452-4402-87C0-E8A68F632C9D}] DATAGRAM 1 <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] MSAFD NetBIOS [\Device\NetBT_Tcpip_{0058E835-9D09-48C6-A107-E97CFC59E1EF}] SEQPACKET 2 <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] MSAFD NetBIOS [\Device\NetBT_Tcpip_{0058E835-9D09-48C6-A107-E97CFC59E1EF}] DATAGRAM 2 <%SystemRoot%\system32\mswsock.dll> [(Verified)Microsoft Corporation, 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249), C:2008-04-14 12:00 M:2008-06-21 01:46] ======================================== HOSTS 127.0.0.1 localhost [/CODE]