[CODE]

2009-05-02,10:21:13

SysLog Scanner 1.0 - build 20080726
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 2 (build 2600) - Administrators



========================================
注册项

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <PPS Accelerator><E:\PPS网络电视(PPStream) V2_0_9_980 正式版 多特软件站.files\PPStream\ppsap.exe>  [(Verified)PPStream Inc, 1, 0, 11, 171, C:2008-02-06 17:48 M:2008-12-11 18:06]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <IgfxTray><C:\WINDOWS\system32\igfxtray.exe>  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:11]
    <HotKeysCmds><C:\WINDOWS\system32\hkcmd.exe>  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:13]
    <Persistence><C:\WINDOWS\system32\igfxpers.exe>  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:10]
    <runeip><"D:\瑞星卡卡\rstray.exe" /startup>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.17, C:2008-07-23 12:39 M:2009-04-28 19:46]
    <Cnups><rundll32.exe "C:\Program Files\IdnKw\cnups.dll", Rundll32>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57|中国互联网络信息中心(CNNIC), 2, 6, 0, 3, C:2007-03-31 17:34 M:2007-03-31 17:34|(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    <QQDoctorRTP><"E:\腾讯软件\QQ医生\QQ医生 1.5正式版\QQDoctorRTP.exe">  [(Verified)Copyright Tencent 2008. All Rights Reserved, 2, 1, 9, 202, C:2009-04-18 19:55 M:2009-04-18 19:55]
    <TkBellExe><"C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot>  [(Verified)RealNetworks, Inc., 0.1.1.45, C:2008-08-01 11:16 M:2008-08-01 11:16]
    <RavTray><"E:\瑞星杀毒软件\Rising\Rav\RsTray.exe" -system>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.22, C:2009-02-01 01:00 M:2009-02-01 00:59]
    <RFWTray><"D:\rsfhq\Rising\RFW\RsTray.exe" -system>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.22, C:2009-02-11 20:40 M:2009-02-11 20:38]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
    <AppInit_Dlls><kmon.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\iSee 保存所有图片]
    <><D:\isee\iSeeSavePicAll.htm>  [N/A, C:2009-01-28 20:19 M:2006-05-26 15:23]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\iSee保存Flash]
    <><D:\isee\iSeeSaveFlash.htm>  [N/A, C:2009-01-28 20:19 M:2006-05-26 15:24]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\iSee保存所有图片]
    <><D:\isee\iSeeSavePicAll.htm>  [N/A, C:2009-01-28 20:19 M:2006-05-26 15:23]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\iSee读取Exif]
    <><D:\isee\iSeeReadExif.htm>  [N/A, C:2009-01-28 20:19 M:2006-05-11 15:34]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载]
    <><D:\迅雷\Program\geturl.htm>  [N/A, C:2008-07-23 13:12 M:2008-07-28 15:43]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\使用迅雷下载全部链接]
    <><D:\迅雷\Program\getallurl.htm>  [N/A, C:2008-07-23 13:12 M:2007-12-10 14:17]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\导出到 Microsoft Office Excel(&X)]
    <><res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000>  []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\添加相册用户到iSee收藏]
    <><D:\isee\iSeeAddToAlbum.htm>  [N/A, C:2009-01-28 20:19 M:2008-04-15 15:38]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
    <WinlogonNotify: igfxcui><igfxdev.dll>  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:09]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
    <Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub>  [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57|(Verified)Microsoft Corporation, 7.00.6000.16825 (vista_gdr.090218-1505), C:1980-01-01 00:00 M:2009-02-21 02:09|(Verified)N/A, C:2006-11-02 23:38 M:2006-11-02 23:38]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{0713E8D2-850A-101B-AFC0-4210102A8DA7}]
    <铃声><http://huanghetv.sms.163.com>  []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}]
    <启动迅雷5><D:\迅雷\Thunder.exe>  [Thunder Networking Technologies,LTD, 5, 6, 8, 19, C:2008-07-23 13:12 M:2008-08-12 17:41]


========================================
启动项



========================================
计划任务

[SogouImeMgr.job]
    <C:\WINDOWS\tasks\SogouImeMgr.job --> "D:\搜狗\SOGOUI~1\400~1.208\PinyinRepair.exe" /S > [(Verified)Sogou.com Inc., 4.0.0.2088, C:2009-01-21 18:21 M:2009-01-21 18:21]


========================================
组件


Shell Extension
[Display Panning CPL Extension]
    {42071714-76d4-11d1-8b24-00a0c9068ff3}  <deskpan.dll>  []
[HyperTerminal Icon Ext]
    {88895560-9AA2-1069-930E-00AA0030EBC8}  <C:\WINDOWS\system32\hticons.dll>  [(Verified)Hilgraeve, Inc., 5.1.2600.0, C:2007-01-11 22:49 M:2006-11-08 18:57]
[Microsoft Agent Character Property Sheet Handler]
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}  <C:\WINDOWS\msagent\AgentPsh.dll>  [Microsoft Corporation, 2.00.0.2115, C:1998-09-15 17:21 M:1998-09-15 17:21]
[WinRAR shell extension]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2007-01-11 23:20 M:2006-12-04 22:07]
[Shell Extensions for RealOne Player]
    {F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}  <D:\realplayer\rpshell.dll>  [(Verified)RealNetworks, Inc., 1.0.2.44, C:2008-08-01 11:17 M:2008-08-01 11:17]
[UnlockerShellExtension]
    {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}  <D:\Unlocker 1.8.7\Unlocker\UnlockerCOM.dll>  [N/A, C:2008-05-02 12:15 M:2008-05-02 12:15]
[RISING]
    {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}  <C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 01:00 M:2009-02-01 00:59]

Protocols
[Google Dictionary Compression filter]
    {B1759355-3EEC-4C1E-B0F1-B719FE26E377}  <C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll>  [(Verified)Google Inc., 1, 0, 610, 27482, C:2009-04-21 19:38 M:2009-04-21 19:38]
[]
    {6AC4FBC7-AA38-45EC-9634-D6D20B679EFC}  <C:\WINDOWS\system32\KuGoo3DownXControl.ocx>  [酷狗, 5.2.4.4, C:2008-12-31 18:01 M:2009-01-01 00:43]

BrowserHelperObject
[ThunderAtOnce Class]
    {01443AEC-0FD1-40fd-9C87-E93D1494C233}  <D:\迅雷\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-07-23 13:12 M:2008-06-13 09:43]
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <D:\迅雷\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-07-23 13:12 M:2008-06-13 09:43]
[CBBrowerBuddy Class]
    {A412E581-59B2-485E-834F-C5F0C0268C79}  <E:\谷歌金山词霸合作版\PowerWord Lite\CBEBand.dll>  [(Verified)Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.2, C:2008-12-05 18:22 M:2008-12-05 18:22]
[Google Toolbar Helper]
    {AA58ED58-01DD-4d91-8333-CF10577473F7}  <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll>  [(Verified)Google Inc., 6, 1, 1518, 856, C:2009-02-14 16:37 M:2009-04-21 19:38]
[Google Toolbar Notifier BHO]
    {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}  <C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll>  [(Verified)Google Inc., 5, 1, 1309, 3572, C:2009-04-23 19:56 M:2009-04-23 19:56]
[Google Dictionary Compression sdch]
    {C84D72FE-E17D-4195-BB24-76C02E2E7C4E}  <C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll>  [(Verified)Google Inc., 1, 0, 610, 27482, C:2009-04-21 19:38 M:2009-04-21 19:38]

ToolBar
[System Link]
    {00AF1010-BCC0-41AE-91B5-BAAD1A84619C}  <C:\WINDOWS\system32\bdsys3.dll>  []
[Google Toolbar]
    {2318C2B1-4965-11d4-9B18-009027A5CD4F}  <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll>  [(Verified)Google Inc., 6, 1, 1518, 856, C:2009-02-14 16:37 M:2009-04-21 19:38]

ActiveX Extension
[System Link]
    {00AF1010-BCC0-41AE-91B5-BAAD1A84619C}  <C:\WINDOWS\system32\bdsys3.dll>  []
[Google Script Object]
    {00EF2092-6AC5-47C0-BD25-CF2D5D657FEB}  <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll>  [(Verified)Google Inc., 6, 1, 1518, 856, C:2009-02-14 16:37 M:2009-04-21 19:38]
[ThunderAtOnce Class]
    {01443AEC-0FD1-40FD-9C87-E93D1494C233}  <D:\迅雷\ComDlls\TDAtOnce_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-07-23 13:12 M:2008-06-13 09:43]
[Office Genuine Advantage Validation Tool]
    {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8}  <C:\WINDOWS\system32\OGACheckControl.dll>  [N/A, C:2007-05-27 04:17 M:2007-05-27 04:17]
[PhotoDrawEx Class]
    {05F5F404-7C24-4B39-B5CC-340CEDEB9C0D}  <C:\WINDOWS\system32\QQPhotoDrawEx.dll>  [(Verified)TENCENT, 1, 10, 110, 145, C:2007-12-10 19:32 M:2007-12-10 19:32]
[Web Browser Applet Control]
    {08B0E5C0-4FCB-11CF-AAA5-00401C608501}  <C:\WINDOWS\system32\msjava.dll>  [Microsoft Corporation, 5.00.3810, C:2007-01-11 22:54 M:2003-02-28 18:26]
[GerneralPeerID Class]
    {0A47E819-F82E-4D5D-B806-6A9EA94D68CD}  <C:\Program Files\Thunder Network\Thunder\Components\InMedia\peerid.dll>  []
[KuGoo3Down Control]
    {162AF25B-5A2A-448E-A842-194653EF3E05}  <C:\WINDOWS\system32\KuGoo3DownXControl.ocx>  [酷狗, 5.2.4.4, C:2008-12-31 18:01 M:2009-01-01 00:43]
[CnBho Class]
    {1CE35DBA-0DEC-4FC9-AF83-4B12642E9EC9}  <C:\PROGRA~1\IdnKw\cnbho.dll>  [中国互联网络信息中心(CNNIC), 2, 6, 0, 0, C:2007-03-28 10:39 M:2007-03-28 10:39]
[InstallHelper Class]
    {1DABF8D5-8430-4985-9B7F-A30E53D709B3}  <E:\腾讯软件\QQLive\QQLiveInstaller.dll>  [(Verified)Copyright (C) 2005 - 2008 TENCENT Inc. All Rights Reserved. 腾讯公司 版权所有 (C) 2005 - 2008, 7.00.4017.8, C:2008-06-26 15:27 M:2008-06-26 15:27]
[Google Toolbar]
    {2318C2B1-4965-11D4-9B18-009027A5CD4F}  <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll>  [(Verified)Google Inc., 6, 1, 1518, 856, C:2009-02-14 16:37 M:2009-04-21 19:38]
[RealPlayer RAM Download Handler]
    {2F542A2E-EDC9-4BF7-8CB1-87C9919F7F93}  <C:\WINDOWS\system32\rmoc3260.dll>  [(Verified)RealNetworks, Inc., 6.0.10.50, C:2008-06-30 20:25 M:2008-08-01 11:17]
[RealPlayer Download and Record Plugin for Internet Explorer]
    {3049C3E9-B461-4BC5-8870-4C09146192CA}  <D:\realplayer\rpbrowserrecordplugin.dll>  [(Verified)RealPlayer, 1.0.1.57, C:2008-08-01 11:17 M:2008-08-01 11:17]
[QuickTime Object]
    {4063BE15-3B08-470D-A0D5-B37161CFFD69}  <C:\Program Files\Ringz Studio\Storm Codec\QTSystem\QTPlugin.ocx>  []
[Thunder Agent Class]
    {485463B7-8FB2-4B3B-B29B-8B919B0EACCE}  <D:\迅雷\ComDlls\ThunderAgent_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 4, 23, C:2008-07-23 13:12 M:2008-11-13 10:18]
[KvCoVirus Class]
    {518D171D-CF41-4EA0-B0E0-ECBA5AA84126}  <C:\WINDOWS\KVDownScan\WebScan\virusbox.dll>  [Jiangmin Co.Ltd, 1, 0, 7, 1203, C:2008-01-13 11:17 M:2008-01-13 11:17]
[PowerPlayer Control]
    {5EC7C511-CD0F-42E6-830C-1BD9882F3458}  <e:\PPS网~1.FIL\PPStream\110~2.266\POWERP~1.DLL>  [(Verified)PPStream Inc., 2,3,468,9468, C:2009-04-17 21:56 M:2009-04-04 14:57]
[XMP Class]
    {6483F145-A768-4C41-AACC-52D4D7845851}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work>  [Xunlei Networking Technologies,LTD, 2, 1, 6, 81, C:2008-07-23 13:13 M:2008-11-13 10:54]
[Upload61soft Control]
    {69131BC9-081A-4A7E-B6F8-537E7C826273}  <D:\isee\iSeeUpload.ocx>  [61软件工作室  http://www.iseesoft.cn, 1.3.3.3, C:2009-01-28 20:19 M:2008-09-18 01:27]
[XDRM]
    {693571CB-54A3-4E90-9D52-EEAE1334E2D3}  <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work>  [Copyright XunLei 2007, 1, 0, 0, 7, C:2008-07-23 13:12 M:2008-11-13 10:54]
[KvOLScan Control]
    {6E0D0002-DC95-4405-8F9E-9FB1EA80AEDE}  <C:\WINDOWS\KVDOWN~1\WebScan\kvKill.ocx>  [Jiangmin Co., 1, 0, 8, 204, C:2008-01-13 11:17 M:2008-06-30 10:31]
[MediaComm Class]
    {7670648D-461B-42AF-BDFE-46D26AF5EFF2}  <D:\迅雷\Components\InMedia\MediaAddin18.dll>  [(Verified)Thunder Networking Technologies,LTD, 3, 1, 6, 81, C:2008-12-06 21:54 M:2008-11-25 11:16]
[BDBHOSL3.CBHOSL3]
    {871CEDBA-3947-47DD-BD65-61FA3E7C83AE}  <C:\WINDOWS\system32\bhosan.dll>  []
[Thunder Browser Helper]
    {889D2FEB-5411-4565-8998-1DD2C5261283}  <D:\迅雷\ComDlls\xunleiBHO_Now.dll>  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-07-23 13:12 M:2008-06-13 09:43]
[JsObject Class]
    {91A9D6D5-AFEE-4748-82D7-737A523F63D5}  <C:\PROGRA~1\snav\Snav.dll>  [Copyright 2006, 1, 0, 0, 21, C:2008-06-04 16:26 M:2008-06-04 16:26]
[CBBrowerBuddy Class]
    {A412E581-59B2-485E-834F-C5F0C0268C79}  <E:\谷歌金山词霸合作版\PowerWord Lite\CBEBand.dll>  [(Verified)Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.2, C:2008-12-05 18:22 M:2008-12-05 18:22]
[Google Toolbar Helper]
    {AA58ED58-01DD-4D91-8333-CF10577473F7}  <C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll>  [(Verified)Google Inc., 6, 1, 1518, 856, C:2009-02-14 16:37 M:2009-04-21 19:38]
[DapCtrl Class]
    {ACACC6EB-1FBA-4E13-A729-53AEB2DF54F8}  <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.1.5805.77.(479).dll>  [ShenZhen Thunder Networking Technologies Ltd., 2, 1, 5805, 77, C:2008-12-01 13:43 M:2008-11-13 10:54]
[Google Toolbar Notifier BHO]
    {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}  <C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll>  [(Verified)Google Inc., 5, 1, 1309, 3572, C:2009-04-23 19:56 M:2009-04-23 19:56]
[Tencent Safety Online Base Module]
    {C09B522F-8AED-4E21-A65C-DC1AB652BAEE}  <C:\WINDOWS\system32\TSOBase\TSOBase.ocx>  [(Verified)Tencent Corporation, 2007, 4, 10, 12, C:2006-12-17 16:10 M:2006-12-17 16:10]
[Google Dictionary Compression sdch]
    {C84D72FE-E17D-4195-BB24-76C02E2E7C4E}  <C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll>  [(Verified)Google Inc., 1, 0, 610, 27482, C:2009-04-21 19:38 M:2009-04-21 19:38]
[KVFileUpdate Class]
    {CA234A53-E68D-44D5-A07C-481C051D0C7B}  <C:\WINDOWS\Downloaded Program Files\OLDown.dll>  [Jiangmin Co.,Ltd, 1, 0, 7, 926, C:2007-09-27 17:35 M:2007-09-27 17:35]
[QQPlayerCtrl Class]
    {CD108273-D434-43E6-AA90-1469F97EB398}  <E:\QQMusic\QzoneMusic.dll>  []
[RealPlayer G2 Control]
    {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}  <C:\WINDOWS\system32\rmoc3260.dll>  [(Verified)RealNetworks, Inc., 6.0.10.50, C:2008-06-30 20:25 M:2008-08-01 11:17]
[Shockwave Flash Object]
    {D27CDB6E-AE6D-11CF-96B8-444553540000}  <C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx>  [(Verified)Adobe Systems, Inc., 10,0,22,87, C:2009-02-03 10:07 M:2009-02-03 10:07]
[Microsoft Silverlight]
    {DFEAF541-F3E1-4C24-ACAC-99C30715084A}  <C:\Program Files\Microsoft Silverlight\2.0.31005.0\npctrl.dll>  [(Verified) Microsoft Corporation, 2.0.31005.0, C:2008-10-04 21:48 M:2008-10-04 21:48]
[PlayerCtrl Class]
    {E05BC2A3-9A46-4A32-80C9-023A473F5B23}  <E:\QQMusic\QzoneMusic.dll>  []
[TimwpDll.TimwpCheck]
    {ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4}  <E:\腾讯软件\Timwp.dll>  [(Verified)TENCENT, 8,0,1300,1881, C:2007-07-01 08:53 M:2008-11-27 09:45]
[Thunder DapPlayer]
    {EEDD6FF9-13DE-496B-9A1C-D78B3215E266}  <D:\迅雷\Components\DownAndPlay\DapPlayer3.0.5712.71.320.dll>  [ShenZhen Thunder Networking Technologies Ltd., 3, 0, 5712, 71, C:2008-08-05 18:56 M:2008-08-04 12:58]
[FlashGet GetFlash Class]
    {F156768E-81EF-470C-9057-481BA8380DBA}  <C:\Program Files\FlashGet\getflash.dll>  []
[XPPlayer Class]
    {F3E70CEA-956E-49CC-B444-73AFE593AD7F}  <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.5853.212.(480).dll>  [Xunlei Networking Technologies,LTD, 2, 1, 5853, 212, C:2008-12-01 13:43 M:2008-11-13 10:54]
[FGCatchUrl]
    {FB5DA724-162B-11D3-8B9B-AA70B4B0B524}  <C:\Program Files\FlashGet\jccatch.dll>  []
[IERPCtl Class]
    {FDC7A535-4070-4B92-A0EA-D9994BCC0DC5}  <D:\realplayer\rpplugins\ierpplug.dll>  [(Verified)RealNetworks, Inc., 1.0.2.45, C:2008-08-01 11:17 M:2008-08-01 11:17]

Context Menu
[RisingRavExt]
    {1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}  <C:\WINDOWS\system32\RavExt.dll>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 01:00 M:2009-02-01 00:59]
[WinRAR]
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}  <C:\Program Files\WinRAR\rarext.dll>  [N/A, C:2007-01-11 23:20 M:2006-12-04 22:07]
[UnlockerShellExtension]
    {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}  <D:\Unlocker 1.8.7\Unlocker\UnlockerCOM.dll>  [N/A, C:2008-05-02 12:15 M:2008-05-02 12:15]


========================================
服务

[Help and Support / helpsvc][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll">  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
[Human Interface Device Access / HidServ][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll">  [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[Google Software Updater / gusvc][Stopped/Manual Start]
    <"C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe">  [(Verified)Google, 2.4.1441.4352.beta, C:2007-10-02 05:32 M:2009-04-21 19:51]
[Rav Process Communication Center / RavCCenter][Stopped/Auto Start]
    <E:\瑞星杀毒软件\Rising\Rav\CCENTER.EXE>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 01:00 M:2009-02-01 00:59]
[Rising RavTask Manager / RavTask][Running/Auto Start]
    <"E:\瑞星杀毒软件\Rising\Rav\RavTask.exe" RavTask>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24, C:2009-02-01 01:00 M:2009-04-13 20:05]
[Rfw Process Communication Center / RfwCCenter][Stopped/Auto Start]
    <D:\rsfhq\Rising\RFW\CCENTER.EXE>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-11 20:40 M:2009-02-11 20:38]
[Rising Personal Firewall Service / RfwService][Stopped/Auto Start]
    <D:\rsfhq\Rising\RFW\rfwsrv.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-11 20:40 M:2009-02-11 20:38]
[Rising RfwTask Manager / RfwTask][Running/Auto Start]
    <"D:\rsfhq\Rising\RFW\RavTask.exe" RfwTask>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24, C:2009-02-11 20:40 M:2009-04-13 20:05]
[Rising RealTime Monitor / RsRavMon][Stopped/Auto Start]
    <E:\瑞星杀毒软件\Rising\Rav\RavMonD.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 01:00 M:2009-02-01 00:59]
[Rising Scan Service / RsScanSrv][Stopped/Auto Start]
    <E:\瑞星杀毒软件\Rising\Rav\ScanFrm.exe>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.11, C:2009-02-01 01:00 M:2009-02-01 00:59]


========================================
驱动

[AlcwWmDrv / AlcwWmDrv][Stopped/Disabled]
    <\??\C:\WINDOWS\system32\drivers\AlcwWmDrv.sys>  [Windows (R) 2000 DDK provider, 5.1.2600.0 built by: WinDDK, C:2008-07-13 07:33 M:2008-12-11 23:25]
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
    <system32\drivers\ALCXWDM.SYS>  [Realtek Semiconductor Corp., 5.10.00.6200 built by: WinDDK, C:2007-09-28 23:53 M:2006-11-23 17:11]
[Antivirus Filter Driver / AvFlt][Stopped/Manual Start]
    <\SystemRoot\system32\drivers\av5flt.sys>  []
[Rising TDI Base Driver / BaseTDI][Running/Auto Start]
    <System32\DRIVERS\BaseTDI.SYS>  [Beijing Rising Technology Co., Ltd., 5, 0, 0, 5, C:2007-10-03 08:48 M:2007-10-03 21:03]
[MemPatch / MemPatch][Stopped/Manual Start]
    <\??\E:\网上下载的文件\New.sys>  []
[Netgroup Packet Filter / NPF][Stopped/Manual Start]
    <system32\drivers\npf.sys>  [Politecnico di Torino, 3, 0, 0, 18, C:2007-12-09 14:27 M:2004-10-08 08:50]
[npkcrypt / npkcrypt][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\npkcrypt.sys>  []
[npkycryp / npkycryp][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\npkycryp.sys>  []
[PnpWmkDrv / PnpWmkDrv][Stopped/Disabled]
    <\??\C:\WINDOWS\system32\drivers\PnpWmkDrv.sys>  [Windows (R) 2000 DDK provider, 5.1.2600.0 built by: WinDDK, C:2008-07-13 07:27 M:2007-09-05 18:23]
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
    <system32\DRIVERS\tcpip.sys>  [Microsoft Corporation, 5.1.2600.3394 (xpsp_sp2_gdr.080620-1245), C:2008-07-09 19:51 M:2008-06-20 18:45]
[TesSafe / TesSafe][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\TesSafe.sys>  [TENCENT, 0, 0, 3, 2, C:2007-12-23 18:34 M:2007-12-23 18:34]
[UnlockerDriver5 / UnlockerDriver5][/Boot Start]
    <\??\D:\Unlocker 1.8.7\Unlocker\UnlockerDriver5.sys>  [N/A, C:2008-05-02 12:15 M:2008-05-02 12:15]
[WmRegProDrv / WmRegProDrv][Stopped/Disabled]
    <System32\Drivers\WmRegProDrv.sys>  [Windows (R) 2000 DDK provider, 5.1.2600.0 built by: WinDDK, C:2009-02-10 22:47 M:2008-11-04 23:21]

[Intel(r) 82801 Audio Driver Install Service (WDM) / ac97intc][Stopped/Manual Start]
    <system32\drivers\ac97intc.sys>  [(Verified)Intel Corporation, 5.10.3523 built by: WinDDK, C:2007-01-11 22:45 M:2001-08-17 12:20]
[Creative SBLive! Gameport / ctljystk][Stopped/Manual Start]
    <system32\DRIVERS\ctljystk.sys>  [(Verified)Creative Technology Ltd., 5.1.2501.0 built by: WinDDK, C:2007-01-11 22:46 M:2001-08-17 12:19]
[hookcont / hookcont][Running/System Start]
    <system32\drivers\HookCont.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 6, C:2009-02-01 01:00 M:2009-02-01 00:59]
[hooksys / hooksys][Running/System Start]
    <system32\drivers\HookSys.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 55, C:2009-02-01 01:00 M:2009-05-01 09:38]
[ialm / ialm][Running/Manual Start]
    <system32\DRIVERS\igxpmp32.sys>  [(Verified)Intel Corporation, 6.14.10.4704, C:2007-09-28 23:47 M:2006-10-06 14:24]
[nv / nv][Stopped/Manual Start]
    <system32\DRIVERS\nv4_mini.sys>  [(Verified)NVIDIA Corporation, 6.14.10.5673, C:2007-01-11 22:46 M:2004-08-03 22:29]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148), C:1980-01-01 00:00 M:2006-11-08 18:57]
[Rising RfwBase Driver / RfwBase9][Running/Manual Start]
    <system32\DRIVERS\rfwbase.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.2, C:2009-02-11 20:40 M:2009-02-11 20:38]
[rfwtdi / rfwtdi][Running/Auto Start]
    <\??\D:\rsfhq\Rising\RFW\rfwtdi.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.7, C:2009-02-11 20:40 M:2009-04-17 22:00]
[rsfwdrv / rsfwdrv][Running/System Start]
    <\??\D:\rsfhq\Rising\RFW\rsfwdrv.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.46, C:2009-02-11 20:40 M:2009-03-15 12:52]
[RsNTGDI / RsNTGDI][Running/Boot Start]
    <system32\Drivers\RsNTGdi.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 01:00 M:2009-02-01 00:59]
[RsProtect / RsProtect][Running/System Start]
    <system32\drivers\RsPtect.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 10, C:2009-02-12 13:40 M:2009-02-28 13:19]
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
    <system32\DRIVERS\RTL8139.SYS>  [(Verified)Realtek Semiconductor Corporation, 5.398.613.2003 built by: WinDDK, C:2007-01-11 22:46 M:2004-08-03 22:31]
[Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys>  [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086, C:1980-01-01 00:00 M:2007-11-13 18:25]
[TSKSP / TSKSP][Stopped/Manual Start]
    <\??\E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSKSP.sys>  [(Verified)Tencent, 2009, 3, 31, 17, C:2009-04-15 20:47 M:2009-04-15 20:47]


========================================
进程

[PID: 820 / SYSTEM]   \SystemRoot\System32\smss.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1248 / SYSTEM]   \??\C:\WINDOWS\system32\csrss.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1304 / SYSTEM]   \??\C:\WINDOWS\SYSTEM32\winlogon.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1396 / SYSTEM]   C:\WINDOWS\system32\services.exe   [(Verified)Microsoft Corporation, 5.1.2600.3520 (xpsp_sp2_qfe.090206-1239), C:1980-01-01 00:00 M:2009-02-09 17:48]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1408 / SYSTEM]   C:\WINDOWS\system32\lsass.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1608 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1672 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1784 / SYSTEM]   E:\瑞星杀毒软件\Rising\Rav\CCENTER.EXE   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\combase.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\cnt09.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\cnt08.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1880 / SYSTEM]   D:\rsfhq\Rising\RFW\CCENTER.EXE   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\combase.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\cnt09.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 37, C:2009-02-11 20:40 M:2009-02-11 20:38]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1888 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1932 / SYSTEM]   E:\瑞星杀毒软件\Rising\Rav\RavTask.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24, C:2009-02-01 01:00 M:2009-04-13 20:05]
    E:\瑞星杀毒软件\Rising\Rav\proccomm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    E:\瑞星杀毒软件\Rising\Rav\rsconf.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 01:00 M:2009-03-19 19:17]
    E:\瑞星杀毒软件\Rising\Rav\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.19, C:2009-02-01 01:00 M:2009-04-23 21:55]
    E:\瑞星杀毒软件\Rising\Rav\rstask.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 36, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\rsstub.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 2000 / SYSTEM]   D:\rsfhq\Rising\RFW\RavTask.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24, C:2009-02-11 20:40 M:2009-04-13 20:05]
    D:\rsfhq\Rising\RFW\proccomm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-11 20:40 M:2009-02-11 20:38]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    D:\rsfhq\Rising\RFW\rsconf.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-11 20:40 M:2009-03-19 19:17]
    D:\rsfhq\Rising\RFW\rstask.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 36, C:2009-02-11 20:40 M:2009-02-11 20:42]

[PID: 172 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 304 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 380 / SYSTEM]   D:\rsfhq\Rising\RFW\rfwsrv.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\combase.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-11 20:40 M:2009-02-11 20:38]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    D:\rsfhq\Rising\RFW\MonBase.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6, C:2009-02-11 20:40 M:2009-02-26 20:28]
    D:\rsfhq\Rising\RFW\MonComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rfwlog.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rfwrule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.25, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rfwsrv.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.80, C:2009-02-11 20:40 M:2009-02-26 20:28]
    D:\rsfhq\Rising\RFW\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\mPorts.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.0, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rfwdrvc.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.3, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\Rfwdrv.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.5, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rsnetsvr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14, C:2009-02-11 20:40 M:2009-03-16 21:51]
    D:\rsfhq\Rising\RFW\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-11 20:40 M:2009-03-03 20:08]
    D:\rsfhq\Rising\RFW\urlrule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1.0.0.18, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\recomp.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-11 20:40 M:2009-02-26 20:28]
    D:\rsfhq\Rising\RFW\refs.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\viruslib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\relibldr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rfwproxy.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.25, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.18, C:2009-02-11 20:40 M:2009-02-11 20:42]
    D:\rsfhq\Rising\RFW\proccomm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-11 20:40 M:2009-02-11 20:38]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    D:\rsfhq\Rising\RFW\urllib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-11 20:40 M:2009-02-11 20:38]

[PID: 412 / SYSTEM]   E:\瑞星杀毒软件\Rising\Rav\RavMonD.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\combase.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    E:\瑞星杀毒软件\Rising\Rav\moncomm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\MonBase.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 6, C:2009-02-01 01:00 M:2009-02-26 20:28]
    E:\瑞星杀毒软件\Rising\Rav\Rslog.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.36, C:2009-02-01 01:00 M:2009-04-23 21:55]
    E:\瑞星杀毒软件\Rising\Rav\mondrv.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9, C:2009-02-01 01:00 M:2009-03-18 21:45]
    E:\瑞星杀毒软件\Rising\Rav\defmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 31, C:2009-02-01 01:00 M:2009-04-03 19:23]
    E:\瑞星杀毒软件\Rising\Rav\moncom08.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\MonRule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\FileMon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 27, C:2009-02-01 01:00 M:2009-04-23 21:55]
    E:\瑞星杀毒软件\Rising\Rav\MailMon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 24, C:2009-02-01 01:00 M:2009-02-26 20:28]
    E:\瑞星杀毒软件\Rising\Rav\HookWeb.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\proccomm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.19, C:2009-02-01 01:00 M:2009-04-23 21:55]
    E:\瑞星杀毒软件\Rising\Rav\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 01:00 M:2009-03-05 19:02]
    E:\瑞星杀毒软件\Rising\Rav\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\Hooksys.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 18, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\HookCont.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 23, 0, 0, 12, C:2009-02-01 01:00 M:2009-02-26 20:28]
    E:\瑞星杀毒软件\Rising\Rav\rsnetsvr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14, C:2009-02-01 01:00 M:2009-03-18 21:45]
    E:\瑞星杀毒软件\Rising\Rav\BACore.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 22, C:2009-02-01 01:00 M:2009-04-03 19:23]
    E:\瑞星杀毒软件\Rising\Rav\recomp.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 01:00 M:2009-02-26 20:28]
    E:\瑞星杀毒软件\Rising\Rav\refs.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\RSStore.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 01:00 M:2009-05-01 09:38]
    E:\瑞星杀毒软件\Rising\Rav\ScanAdd.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.17, C:2009-02-01 01:00 M:2009-04-13 20:06]
    E:\瑞星杀毒软件\Rising\Rav\Scanner.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.38, C:2009-02-01 01:00 M:2009-05-01 09:38]
    E:\瑞星杀毒软件\Rising\Rav\viruslib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\relibldr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\瑞星杀毒软件\Rising\Rav\ffr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 01:00 M:2009-02-26 20:28]
    E:\瑞星杀毒软件\Rising\Rav\nvfile.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\extfile.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13, C:2009-02-01 01:00 M:2009-02-26 20:28]
    E:\瑞星杀毒软件\Rising\Rav\scanexec.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5, C:2009-02-01 01:00 M:2009-02-26 20:28]
    E:\瑞星杀毒软件\Rising\Rav\unexe.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 1, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\scanex.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 36, C:2009-02-01 01:00 M:2009-05-01 09:38]
    E:\瑞星杀毒软件\Rising\Rav\scansct.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 01:00 M:2009-02-26 20:28]
    E:\瑞星杀毒软件\Rising\Rav\pearc.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\scanpe.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 01:00 M:2009-05-01 09:38]
    E:\瑞星杀毒软件\Rising\Rav\ur000.dat  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 13, C:2009-02-01 01:00 M:2009-05-01 09:38]
    E:\瑞星杀毒软件\Rising\Rav\urutils.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\revm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 3, C:2009-02-01 01:00 M:2009-04-03 19:23]
    E:\瑞星杀毒软件\Rising\Rav\extmail.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 5, C:2009-02-01 01:00 M:2009-04-14 19:41]

[PID: 760 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), C:1980-01-01 00:00 M:2005-06-11 07:53]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll  [Windows (R) 2000 DDK provider, 5.00.2195.1620, C:2008-07-23 10:21 M:2006-12-13 11:04]

[PID: 544 / SYSTEM]   E:\瑞星杀毒软件\Rising\Rav\rsnetsvr.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 15, C:2009-02-01 01:00 M:2009-03-18 21:45]
    E:\瑞星杀毒软件\Rising\Rav\NComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.12, C:2009-02-01 01:00 M:2009-03-18 21:45]
    E:\瑞星杀毒软件\Rising\Rav\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 01:00 M:2009-03-05 19:02]
    E:\瑞星杀毒软件\Rising\Rav\ProcComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 1068 / Administrator]   C:\WINDOWS\Explorer.EXE   [(Verified)Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), C:1980-01-01 00:00 M:2007-06-13 21:21]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll  [ppstream.com, 1.0.0.2, C:2007-09-29 22:41 M:2007-09-12 16:43]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]
    C:\WINDOWS\system32\igfxpph.dll  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:09]
    C:\WINDOWS\system32\hccutils.DLL  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:09]
    C:\WINDOWS\system32\igfxres.dll  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-29 00:07 M:2006-10-06 12:13]
    C:\WINDOWS\system32\igfxress.dll  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:10]
    C:\WINDOWS\system32\igfxsrvc.dll  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:09]
    D:\Unlocker 1.8.7\Unlocker\UnlockerCOM.dll  [N/A, C:2008-05-02 12:15 M:2008-05-02 12:15]
    C:\Program Files\WinRAR\rarext.dll  [N/A, C:2007-01-11 23:20 M:2006-12-04 22:07]
    C:\WINDOWS\system32\RavExt.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 01:00 M:2009-02-01 00:59]
    D:\迅雷\ComDlls\TDAtOnce_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-07-23 13:12 M:2008-06-13 09:43]
    D:\迅雷\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-07-23 13:12 M:2008-06-13 09:43]
    D:\迅雷\Components\ResWorker\DsBho_01.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-12-01 13:43 M:2008-11-13 10:54]
    D:\迅雷\Components\ResWorker\DataProcessor_01.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-12-01 13:43 M:2008-11-13 10:54]

[PID: 1160 / Administrator]   C:\WINDOWS\system32\ctfmon.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]

[PID: 1920 / Administrator]   C:\WINDOWS\system32\hkcmd.exe   [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:13]
    C:\WINDOWS\system32\hccutils.DLL  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:09]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\igfxsrvc.dll  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:09]
    C:\WINDOWS\system32\igfxres.dll  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-29 00:07 M:2006-10-06 12:13]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]

[PID: 1976 / Administrator]   C:\WINDOWS\system32\igfxpers.exe   [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:10]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\igfxsrvc.dll  [(Verified)Intel Corporation, 3.0.0.4704, C:2007-09-28 23:47 M:2006-10-06 12:09]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]

[PID: 148 / Administrator]   D:\瑞星卡卡\rstray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.17, C:2008-07-23 12:39 M:2009-04-28 19:46]
    D:\瑞星卡卡\rsmginfo.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2008-07-23 12:39 M:2009-01-11 19:40]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    D:\瑞星卡卡\RsXML.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2, C:2008-07-23 12:39 M:2008-07-26 16:37]
    D:\瑞星卡卡\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2008-07-23 12:39 M:2008-07-23 12:39]
    D:\瑞星卡卡\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2008-07-23 12:39 M:2008-07-23 12:39]
    D:\瑞星卡卡\ComServ.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.31, C:2008-07-23 12:39 M:2008-07-26 16:36]
    D:\瑞星卡卡\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-07-23 12:39 M:2008-08-28 14:31]
    D:\瑞星卡卡\rscommon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.1.1, C:2008-07-23 12:39 M:2008-07-26 16:37]
    D:\瑞星卡卡\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-07-23 12:39 M:2009-03-03 21:28]
    D:\瑞星卡卡\pngdll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5, C:2008-07-23 12:39 M:2008-07-26 16:37]
    D:\瑞星卡卡\runiep.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.42, C:2008-07-23 12:39 M:2008-12-31 18:53]
    D:\瑞星卡卡\NComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.11, C:2008-07-23 12:39 M:2008-12-31 18:53]
    E:\瑞星杀毒软件\Rising\Rav\ProcCom.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2009-02-01 01:00 M:2009-02-01 00:59]
    D:\瑞星卡卡\RsCommX2.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20, C:2008-12-31 18:54 M:2008-12-31 18:54]
    D:\瑞星卡卡\pscan.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.64, C:2008-07-23 12:39 M:2009-04-29 21:30]
    D:\瑞星卡卡\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2008-07-23 12:39 M:2008-07-23 12:39]
    C:\WINDOWS\system32\MFC71CHS.DLL  [Microsoft Corporation, 7.10.3077.0, C:2007-10-02 21:57 M:2006-07-13 11:04]

[PID: 112 / Administrator]   C:\WINDOWS\system32\rundll32.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    C:\Program Files\IdnKw\cnups.dll  [中国互联网络信息中心(CNNIC), 2, 6, 0, 3, C:2007-03-31 17:34 M:2007-03-31 17:34]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]

[PID: 404 / Administrator]   E:\腾讯软件\QQ医生\QQ医生 1.5正式版\QQDoctorRTP.exe   [(Verified)Copyright Tencent 2008. All Rights Reserved, 2, 1, 9, 202, C:2009-04-18 19:55 M:2009-04-18 19:55]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSFSEngine.dat  [(Verified)Tencent, 2009, 3, 11, 7, C:2007-12-27 15:23 M:2009-03-18 21:50]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSFileFilter.dat  [(Verified)tencent, 2007, 12, 5, 01, C:2007-12-07 14:28 M:2009-03-18 21:50]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]

[PID: 692 / Administrator]   C:\Program Files\Common Files\Real\Update_OB\realsched.exe   [(Verified)RealNetworks, Inc., 0.1.1.45, C:2008-08-01 11:16 M:2008-08-01 11:16]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]

[PID: 900 / Administrator]   E:\瑞星杀毒软件\Rising\Rav\RsTray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.22, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\瑞星杀毒软件\Rising\Rav\ComServ.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.49, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    E:\瑞星杀毒软件\Rising\Rav\rslang.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28, C:2009-02-01 01:00 M:2009-03-05 19:02]
    E:\瑞星杀毒软件\Rising\Rav\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 01:00 M:2009-03-05 19:02]
    E:\瑞星杀毒软件\Rising\Rav\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\rsxml.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\ProcComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\MonState.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\ScanEvnt.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.14, C:2009-02-01 01:00 M:2009-04-13 20:06]
    E:\瑞星杀毒软件\Rising\Rav\rsguilib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 73, C:2009-02-01 01:00 M:2009-04-13 20:06]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2007-10-02 21:57 M:2006-07-13 11:04]
    C:\WINDOWS\system32\MFC71CHS.DLL  [Microsoft Corporation, 7.10.3077.0, C:2007-10-02 21:57 M:2006-07-13 11:04]
    E:\瑞星杀毒软件\Rising\Rav\rsconf.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 01:00 M:2009-03-19 19:17]
    E:\瑞星杀毒软件\Rising\Rav\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.19, C:2009-02-01 01:00 M:2009-04-23 21:55]
    E:\瑞星杀毒软件\Rising\Rav\rspalvd.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.24, C:2009-02-01 01:00 M:2009-03-18 21:45]
    E:\瑞星杀毒软件\Rising\Rav\ravbintl.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28, C:2009-02-01 01:00 M:2009-03-18 21:45]
    E:\瑞星杀毒软件\Rising\Rav\mruleui.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 10, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\MonTray.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.1.0, C:2009-02-01 01:00 M:2009-04-13 20:06]
    E:\瑞星杀毒软件\Rising\Rav\PngDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\RavITray.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 23, C:2009-02-01 01:00 M:2009-04-03 19:23]
    E:\瑞星杀毒软件\Rising\Rav\ScanPrxy.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.17, C:2009-02-01 01:00 M:2009-05-01 09:38]
    E:\瑞星杀毒软件\Rising\Rav\rsmginfo.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 01:00 M:2009-02-01 00:59]

[PID: 984 / Administrator]   D:\rsfhq\Rising\RFW\RsTray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.22, C:2009-02-11 20:40 M:2009-02-11 20:38]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    D:\rsfhq\Rising\RFW\ComServ.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.49, C:2009-02-11 20:40 M:2009-02-11 20:38]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    D:\rsfhq\Rising\RFW\rslang.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28, C:2009-02-11 20:40 M:2009-03-03 20:08]
    D:\rsfhq\Rising\RFW\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-11 20:40 M:2009-03-03 20:08]
    D:\rsfhq\Rising\RFW\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rsxml.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 2, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\ProcComm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\MonState.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rfwrule.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.25, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rsconf.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-11 20:40 M:2009-03-19 19:17]
    D:\rsfhq\Rising\RFW\rspalvd.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.24, C:2009-02-11 20:40 M:2009-03-16 21:51]
    D:\rsfhq\Rising\RFW\RSAPPMGR.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\CfgDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.18, C:2009-02-11 20:40 M:2009-02-11 20:42]
    D:\rsfhq\Rising\RFW\rsguilib.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 73, C:2009-02-11 20:40 M:2009-04-13 20:05]
    C:\WINDOWS\system32\MFC71.DLL  [Microsoft Corporation, 7.10.3077.0, C:2007-10-02 21:57 M:2006-07-13 11:04]
    C:\WINDOWS\system32\MFC71CHS.DLL  [Microsoft Corporation, 7.10.3077.0, C:2007-10-02 21:57 M:2006-07-13 11:04]
    D:\rsfhq\Rising\RFW\ravbintl.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 28, C:2009-02-11 20:40 M:2009-03-15 12:52]
    D:\rsfhq\Rising\RFW\rsnetsvr.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 14, C:2009-02-11 20:40 M:2009-03-16 21:51]
    D:\rsfhq\Rising\RFW\rsmginfo.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rfwtray.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 1, 9, C:2009-02-11 20:40 M:2009-02-26 20:28]
    D:\rsfhq\Rising\RFW\PngDll.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4, C:2009-02-11 20:40 M:2009-02-11 20:38]
    D:\rsfhq\Rising\RFW\rfwlog.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 9, C:2009-02-11 20:40 M:2009-02-11 20:38]

[PID: 1708 / Administrator]   E:\PPS网络电视(PPStream) V2_0_9_980 正式版 多特软件站.files\PPStream\ppsap.exe   [(Verified)PPStream Inc, 1, 0, 11, 171, C:2008-02-06 17:48 M:2008-12-11 18:06]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]
    e:\PPS网络电视(PPStream) V2_0_9_980 正式版 多特软件站.files\PPStream\1.1.0.2663\vodnet.dll  [(Verified)PPStream Inc., 1, 0, 11, 209, C:2009-04-17 21:56 M:2009-04-17 21:56]
    e:\PPS网络电视(PPStream) V2_0_9_980 正式版 多特软件站.files\PPStream\1.1.0.2663\vodres.dll  [(Verified)PPStream Inc., 1, 0, 11, 209, C:2009-04-17 21:56 M:2009-04-17 21:56]
    e:\PPS网络电视(PPStream) V2_0_9_980 正式版 多特软件站.files\PPStream\1.1.0.2663\ppssg.dll  [(Verified)PPStream Inc., 1, 0, 11, 192, C:2009-04-17 21:56 M:2009-04-04 14:56]
    e:\PPS网络电视(PPStream) V2_0_9_980 正式版 多特软件站.files\PPStream\1.1.0.2663\fds.dll  [(Verified)PPStream Inc., 1, 0, 0, 101, C:2009-04-17 21:56 M:2009-04-04 14:56]

[PID: 3604 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 3640 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 3748 / SYSTEM]   E:\瑞星杀毒软件\Rising\Rav\ScanFrm.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.11, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    E:\瑞星杀毒软件\Rising\Rav\combase.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\moncomm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 12, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\scansrvp.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.12, C:2009-02-01 01:00 M:2009-04-13 20:06]
    E:\瑞星杀毒软件\Rising\Rav\proccomm.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 46, C:2009-02-01 01:00 M:2009-02-01 00:59]
    E:\瑞星杀毒软件\Rising\Rav\ScanSrv.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.10, C:2009-02-01 01:00 M:2009-04-13 20:06]
    E:\瑞星杀毒软件\Rising\Rav\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2009-02-01 01:00 M:2009-03-05 19:02]
    E:\瑞星杀毒软件\Rising\Rav\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2009-02-01 01:00 M:2009-02-01 00:59]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]

[PID: 816 / LOCAL SERVICE]   C:\WINDOWS\System32\alg.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\System32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    C:\WINDOWS\System32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    D:\瑞星卡卡\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-07-23 12:39 M:2009-03-03 21:28]
    D:\瑞星卡卡\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-07-23 12:39 M:2008-08-28 14:31]

[PID: 2416 / Administrator]   C:\Program Files\Internet Explorer\iexplore.exe   [(Verified)Microsoft Corporation, 7.00.6000.16827 (vista_gdr.090226-1506), C:2007-01-11 22:50 M:2009-02-28 12:54]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    D:\瑞星卡卡\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-07-23 12:39 M:2009-03-03 21:28]
    D:\瑞星卡卡\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-07-23 12:39 M:2008-08-28 14:31]
    C:\WINDOWS\system32\UxTheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]
    c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll  [ppstream.com, 1.0.0.2, C:2007-09-29 22:41 M:2007-09-12 16:43]
    C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll  [(Verified)Google Inc., 6, 1, 1518, 856, C:2009-02-14 16:37 M:2009-04-21 19:38]
    C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_6D0D6FD66D664927.dll  [(Verified)Google Inc., 6, 1, 1518, 856, C:2009-04-21 19:38 M:2009-04-21 19:38]
    C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_zh-CN_27C51813E9BF5574.dll  [Google Inc., 6, 1, 1518, 856, C:2009-04-21 19:38 M:2009-04-21 19:38]
    C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll  [(Verified)Google Inc., 5, 1, 1309, 3572, C:2009-04-23 19:56 M:2009-04-23 19:56]
    D:\迅雷\ComDlls\TDAtOnce_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 1.0.5.29, C:2008-07-23 13:12 M:2008-06-13 09:43]
    D:\迅雷\ComDlls\xunleiBHO_Now.dll  [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 96, C:2008-07-23 13:12 M:2008-06-13 09:43]
    D:\迅雷\Components\ResWorker\DsBho_01.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 20, C:2008-12-01 13:43 M:2008-11-13 10:54]
    D:\迅雷\Components\ResWorker\DataProcessor_01.dll  [Thunder Networking Technologies,LTD, 1, 0, 0, 16, C:2008-12-01 13:43 M:2008-11-13 10:54]
    E:\谷歌金山词霸合作版\PowerWord Lite\CBEBand.dll  [(Verified)Copyright (c) Kingsoft Corporation Limited. All rights reserved., 0.0.1.2, C:2008-12-05 18:22 M:2008-12-05 18:22]
    C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll  [(Verified)Google Inc., 1, 0, 610, 27482, C:2009-04-21 19:38 M:2009-04-21 19:38]
    E:\瑞星杀毒软件\Rising\Rav\RavScrCh.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.70, C:2009-02-01 01:00 M:2009-04-23 21:55]
    C:\WINDOWS\system32\MSVCP71.dll  [Microsoft Corporation, 7.10.3077.0, C:2004-04-05 10:31 M:2004-04-05 10:31]
    C:\WINDOWS\system32\MSVCR71.dll  [Microsoft Corporation, 7.10.3052.4, C:2004-10-05 15:39 M:2004-10-05 15:39]
    C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx  [(Verified)Adobe Systems, Inc., 10,0,22,87, C:2009-02-03 10:07 M:2009-02-03 10:07]
    C:\WINDOWS\system32\SOGOUPY.IME  [(Verified)Sogou.com Inc., 4.0.0.2088, C:2009-01-21 18:22 M:2009-01-21 18:22]

[PID: 2292 / Administrator]   C:\Program Files\WinRAR\WinRAR.exe   [N/A, C:2007-01-11 23:20 M:2006-12-04 22:07]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    D:\瑞星卡卡\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-07-23 12:39 M:2009-03-03 21:28]
    D:\瑞星卡卡\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-07-23 12:39 M:2008-08-28 14:31]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]
    c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll  [ppstream.com, 1.0.0.2, C:2007-09-29 22:41 M:2007-09-12 16:43]
    C:\Program Files\WinRAR\Formats\tar.fmt  [N/A, C:2007-01-11 23:20 M:2006-12-03 14:52]
    C:\Program Files\WinRAR\Formats\gz.fmt  [N/A, C:2007-01-11 23:20 M:2006-12-03 14:52]

[PID: 3260 / Administrator]   E:\清理助手\arswp2\ArSwp.exe   [(Verified)ArSwp.com, 2, 8, 2, 1115, C:2009-01-31 22:55 M:2008-11-15 11:58]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    D:\瑞星卡卡\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-07-23 12:39 M:2009-03-03 21:28]
    D:\瑞星卡卡\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-07-23 12:39 M:2008-08-28 14:31]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]
    c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll  [ppstream.com, 1.0.0.2, C:2007-09-29 22:41 M:2007-09-12 16:43]
    E:\清理助手\arswp2\plugin\ArFix.dll  [(Verified)ArSwp.Com, 2, 5, 0, 0, C:2009-01-31 22:55 M:2007-11-28 15:19]

[PID: 2588 / Administrator]   E:\腾讯软件\QQ.exe   [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-28 12:19 M:2008-11-28 12:19]
    E:\腾讯软件\QQBaseClassInDll.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\QQHelperDll.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\BasicCtrlDll.dll  [(Verified)TENCENT, 8,0,1248,1851, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\MSIMG32.dll  [N/A, C:2008-08-07 13:24 M:2008-11-07 21:26]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]
    D:\瑞星卡卡\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-07-23 12:39 M:2009-03-03 21:28]
    D:\瑞星卡卡\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-07-23 12:39 M:2008-08-28 14:31]
    E:\腾讯软件\QQAPI.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\LoginCtrl.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\LoginCtrlRes.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\QQRes.dll  [TENCENT, 8,0,978,1833, C:2008-11-27 11:35 M:2009-02-06 09:05]
    E:\腾讯软件\QQMainFrame.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-12-10 15:13 M:2008-12-10 15:13]
    E:\腾讯软件\UnReadMsgMgr.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\QQAllInOne.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\SCCore.dll  [(Verified)TENCENT, 1, 6, 0, 2, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\CameraDll.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\CQQApplication.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 16:08 M:2008-11-27 16:08]
    E:\腾讯软件\FlashAvatarDll.dll  [(Verified)版权所有 (C) 2008, 1, 0, 0, 1, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\NewSkin.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\MailSummary.dll  [(Verified)TENCENT, 8,0,1234,1851, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\QQSpace.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\UserDefinedHead.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\QQPlugin.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    C:\WINDOWS\system32\Macromed\Flash\Flash10b.ocx  [(Verified)Adobe Systems, Inc., 10,0,22,87, C:2009-02-03 10:07 M:2009-02-03 10:07]
    C:\WINDOWS\system32\msdmo.dll  [(Verified)N/A, C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQAvatar.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\OEMApplication.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\QQKnowledgeSearch.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\QQGroupMng.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\QQPet.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\QRingMng.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\QQConfigPlugin.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\QQCustomFace.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\LongConnection.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\PhoneAPI.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\DialerAllinOne.dll  [(Verified)tencent, 1, 4, 0, 0, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\SafeBase\TSFSCAN.DAT  [(Verified)TENCENT, 2009, 1, 13, 27, C:2008-09-10 11:23 M:2009-02-28 11:27]
    E:\腾讯软件\BQQApplication.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\CommercesMng.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\PersonalDesktop.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\QQAddr.dll  [(Verified)深圳市腾讯计算机系统有限公司, 5, 0, 101, 330, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\QQSysMsgMng.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\QQMagicFace.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    E:\腾讯软件\ImageOle.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\QQLiveQMng.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:43 M:2008-11-27 09:43]
    c:\documents and settings\administrator\application data\ppstream\bin\1.0.0.2\vodrc.dll  [ppstream.com, 1.0.0.2, C:2007-09-29 22:41 M:2007-09-12 16:43]
    E:\腾讯软件\QQSceneMng.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]
    E:\腾讯软件\GroupConnection.dll  [(Verified)TENCENT, 8,0,1300,1881, C:2008-11-27 09:44 M:2008-11-27 09:44]

[PID: 1556 / Administrator]   E:\腾讯软件\TXPlatform.exe   [(Verified)Tencent, 1, 5, 225, 0, C:2008-05-20 17:53 M:2008-05-20 17:53]
    C:\WINDOWS\system32\kmon.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 33, C:2008-07-23 12:39 M:2008-12-31 18:53]
    D:\瑞星卡卡\comx3.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37, C:2008-07-23 12:39 M:2009-03-03 21:28]
    D:\瑞星卡卡\Syslay.dll  [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6, C:2008-07-23 12:39 M:2008-08-28 14:31]
    C:\WINDOWS\SYSTEM32\uxtheme.dll  [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), C:1980-01-01 00:00 M:2006-11-08 18:57]
    E:\腾讯软件\QQ医生\QQ医生 1.5正式版\TSVulMon.DAT  [(Verified)Tencent, 2009, 4, 2, 10, C:2009-01-01 23:09 M:2009-04-15 20:47]
    E:\瑞星杀毒软件\Rising\Rav\ur001.dat  [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 7, C:2009-02-01 01:00 M:2009-03-04 20:30]


========================================
文件关联



========================================
AutoRun.INF



========================================
Winsock提供者



[/CODE]