ÈðÐÇ¿¨¿¨µçÄÔÕï¶ÏÈÕÖ¾ v1.30 (2009-5-8 11:0:7) ±±¾©ÈðÐÇÐÅÏ¢¼¼ÊõÓÐÏÞ¹«Ë¾ ×¢ÊÍ: [A]±íʾ¸ÃÎļþ´æÔÚ×ÔÆô¶¯¹ØÁª; [M]±íʾ¸ÃÎļþÔÚÄÚ´æÖÐ; + ×¢²á±í×ÔÔËÐÐÏîÄ¿ + ϵͳ·þÎñ + HKLM\System\CurrentControlSet\Services Ati HotKey Poller [A ] 1. c:\windows\system32\ati2evxx.exe ATI Technologies Inc. ATI External Event Utility EXE Module .text,.rdata,.data,.rsrc, ose [A ] 2. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, RavCCenter [AM] 3. e:\ɱ¶¾\rising\rav\ccenter.exe Beijing Rising Information Technology Co., Ltd. CCenter Application .text,.rdata,.data,.rsrc, RavTask [AM] 4. e:\ɱ¶¾\rising\rav\ravtask.exe Beijing Rising Information Technology Co., Ltd. ravtask .text,.rdata,.data,.rsrc, RfwCCenter [A ] 5. e:\ɱ¶¾\rising\rfw\ccenter.exe Beijing Rising Information Technology Co., Ltd. CCenter Application .text,.rdata,.data,.rsrc, RfwService [A ] 6. e:\ɱ¶¾\rising\rfw\rfwsrv.exe Beijing Rising Information Technology Co., Ltd. rfwsrvex Application .text,.rdata,.data,.rsrc, RfwTask [A ] 7. e:\ɱ¶¾\rising\rfw\ravtask.exe Beijing Rising Information Technology Co., Ltd. ravtask .text,.rdata,.data,.rsrc, RsRavMon [AM] 8. e:\ɱ¶¾\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, RsScanSrv [AM] 9. e:\ɱ¶¾\rising\rav\scanfrm.exe Beijing Rising Information Technology Co., Ltd. Rising Scan Service Framework .text,.rdata,.data,.rsrc, UMWdf [AM] 10. c:\windows\system32\wdfmgr.exe Microsoft Corporation Windows User Mode Driver Manager .text,.data,.rsrc, + ÄÚºËÇý¶¯ + HKLM\System\CurrentControlSet\Services ALCXWDM [A ] 11. c:\windows\system32\drivers\alcxwdm.sys Realtek Semiconductor Corp. Realtek AC'97 Audio Driver (WDM) .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, ASTTools [A ] 12. d:\ÎÒµÄÎĵµ\ast\asttools.sys DSW Lab Anti .text,.rdata,.data,INIT,.rsrc,.SuCop0,.SuCop1,.reloc, hookcont [A ] 13. c:\windows\system32\drivers\hookcont.sys Beijing Rising Information Technology Co., Ltd. HookCont Driver .text,.rdata,.data,INIT,.rsrc,.reloc, hooksys [A ] 14. c:\windows\system32\drivers\hooksys.sys Beijing Rising Information Technology Co., Ltd. Hooksys.sys .text,.rdata,.data,INIT,.rsrc,.reloc, hptpro [A ] 15. c:\windows\system32\drivers\hptpro.sys HighPoint Technologies, Inc. Hptpro .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, KAVSafe [A ] 16. c:\windows\system32\drivers\kavsafe.sys Kingsoft Corporation KAVSafe Application .text,.data,.CRT,INIT,.rsrc,.reloc, RfwBase9 [A ] 17. c:\windows\system32\drivers\rfwbase.sys Beijing Rising Information Technology Co., Ltd. rfwbase.sys .text,.rdata,.data,INIT,.rsrc,.reloc, rfwtdi [A ] 18. e:\ɱ¶¾\rising\rfw\rfwtdi.sys Beijing Rising Information Technology Co., Ltd. rfwtdi5.sys .text,.rdata,.data,INIT,.rsrc,.reloc, rsfwdrv [A ] 19. e:\ɱ¶¾\rising\rfw\rsfwdrv.sys Beijing Rising Information Technology Co., Ltd. rsfwdrv.sys .text,.rdata,.data,INIT,.rsrc,.reloc, RsNTGDI [A ] 20. c:\windows\system32\drivers\rsntgdi.sys Beijing Rising Information Technology Co., Ltd. RsNTGDI .text,.rdata,INIT,.rsrc,.reloc, rspp [A ] 21. c:\rspp.sys .text,.rdata,.data,INIT,.rsrc,.reloc, RTL8023xp [A ] 22. c:\windows\system32\drivers\rtnicxp.sys Realtek Semiconductor Corporation Realtek 10/100/1000 NDIS 5.1 Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, Secdrv [A ] 23. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SiFilter [A ] 24. c:\windows\system32\drivers\siwinacc.sys Silicon Image, Inc. Windows Accelerator Driver .text,.rdata,.data,INIT,.rsrc,.reloc, SiRemFil [A ] 25. c:\windows\system32\drivers\siremfil.sys Silicon Image, Inc. Filter driver for Silicon Image SATALink controllers. .text,.rdata,PAGE,INIT,.rsrc,.reloc, viaagp1 [A ] 26. c:\windows\system32\drivers\viaagp1.sys VIA Technologies, Inc. VIA NT AGP Filter .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, videX32 [A ] 27. c:\windows\system32\drivers\videx32.sys VIA Technologies, Inc. VIA Generic PCI IDE Bus Driver .text,.rdata,.data,INIT,.rsrc,.reloc, + ÎļþϵͳÇý¶¯ + HKLM\System\CurrentControlSet\Services exFat [A ] 28. c:\windows\system32\drivers\exfat.sys Microsoft Corporation Microsoft Extended FAT File System .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, + IEä¯ÀÀÆ÷¼ÓÔØÄ£¿é + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 30. c:\windows\network diagnostic\xpnetdiag.exe Microsoft Corporation Network Diagnostic for Windows XP .text,.data,.rsrc, + ×ÊÔ´¹ÜÀíÆ÷¼ÓÔØÄ£¿é + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [A ] 31. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} [A ] 32. c:\windows\system32\ieudinit.exe Microsoft Corporation IE Per User Active Setup Uninstall Utility .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 33. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, IE Search Band [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE AutoComplete [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Shell DocObject Viewer [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, InternetShortcut [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url History Service [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, History [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url Search Hook [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, The Internet [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Internet Name Space [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Portable Media Devices [A ] 34. c:\windows\system32\audiodev.dll Microsoft Corporation ±ãЯýÌåÉ豸ÃüÁîÐнâÊÍÆ÷À©Õ¹ .text,.data,.rsrc,.reloc, Portable Media Devices Menu [A ] 34. c:\windows\system32\audiodev.dll Microsoft Corporation ±ãЯýÌåÉ豸ÃüÁîÐнâÊÍÆ÷À©Õ¹ .text,.data,.rsrc,.reloc, WinRAR shell extension [A ] 35. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, Microsoft Office HTML Icon Handler [A ] 36. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 37. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, RISING [A ] 38. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, IE Microsoft BrowserBand [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Fade Task [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Desk Bar [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Navigation Bar [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Site [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Band [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft History AutoComplete List [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Tracking Shell Menu [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE IShellFolderBand [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE BandProxy [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE MRU AutoComplete List [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE RSS Feeder Folder [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Shell Folder AutoComplete List [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Multiple AutoComplete List Container [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Browser Architecture [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Rebar BandSite [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Band Site Menu [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, &Links [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Registry Tree Options Utility [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE User Assist [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Custom MRU AutoCompleted List [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, + Óû§µÇ½×ÔÔËÐÐÏîÄ¿ + HKCU\Software\Microsoft\Windows\CurrentVersion\Run bgswitch [A ] 39. c:\windows\system32\bgswitch.exe .text,.data,.rsrc, + HKLM\Software\Microsoft\Windows\CurrentVersion\Run RavTray [AM] 40. e:\ɱ¶¾\rising\rav\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, + ¿ª»úÖ´ÐÐ + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 41. c:\windows\system32\bsmain.exe Beijing Rising Information Technology Co., Ltd. Rising Antivirus 2008 .text,.rdata,.data,.rsrc,.reloc, + Ó³Ïñ½Ù³Ö + HKCR\Folder\shell Super Rabbit CDROM Eject [A ] 42. e:\³¬¼¶ÍÃ×Ó\magicset\srcd2.exe Super Rabbit Software UPX0,UPX1,.rsrc, + HKCR\.html htmlfile\Edit\Command [A ] 43. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\open\Command [A ] 44. e:\н¨Îļþ¼Ð (3)\bin\ttraveler.exe Tencent TTraveler .text,.rdata,.data,TT_Share,.rsrc, htmlfile\Print\Command [A ] 43. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\TencentTraveler\Command [A ] 44. e:\н¨Îļþ¼Ð (3)\bin\ttraveler.exe Tencent TTraveler .text,.rdata,.data,TT_Share,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 43. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\open\Command [A ] 44. e:\н¨Îļþ¼Ð (3)\bin\ttraveler.exe Tencent TTraveler .text,.rdata,.data,TT_Share,.rsrc, htmlfile\Print\Command [A ] 43. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\TencentTraveler\Command [A ] 44. e:\н¨Îļþ¼Ð (3)\bin\ttraveler.exe Tencent TTraveler .text,.rdata,.data,TT_Share,.rsrc, + ÆäËû×ÔÆô¶¯ÏîÄ¿ + C:\WINDOWS\Tasks SogouImeMgr.job [A ] 45. c:\program files\sogouinput\4.0.0.2093\pinyinrepair.exe Sogou.com Inc. Ëѹ·Æ´ÒôÊäÈë·¨ ÊäÈë·¨ÐÞ¸´³ÌÐò .text,.rdata,.data,.rsrc, + ÕýÔÚÔËÐеĽø³Ì + 000000b0(176) svchost.exe 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 02600000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 02610000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 02770000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 02780000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 02790000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 027A0000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 027B0000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 027C0000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 029D0000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 029E0000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 029F0000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 02A00000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, + 0000010c(268) svchost.exe 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 00E10000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 00E20000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00F80000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 00F90000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 00FA0000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 00FB0000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 00FC0000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 01010000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 05040000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 00FD0000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 00FE0000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 00FF0000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 05250000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, + 0000014c(332) svchost.exe 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 01870000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 019D0000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 019E0000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 019F0000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 01A50000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 01A60000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 01A70000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 01A80000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 05AB0000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 05CC0000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 05CD0000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 05CE0000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 05CF0000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, + 00000170(368) RavTask.exe 00400000[00020000] [AM] 4. e:\ɱ¶¾\rising\rav\ravtask.exe Beijing Rising Information Technology Co., Ltd. ravtask .text,.rdata,.data,.rsrc, 10000000[00010000] [ M] 61. e:\ɱ¶¾\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 62. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 63. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 003E0000[00017000] [ M] 64. e:\ɱ¶¾\rising\rav\rsconf.dll Beijing Rising Information Technology Co., Ltd. rsconf Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00990000[0000E000] [ M] 65. e:\ɱ¶¾\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 009B0000[00031000] [ M] 66. e:\ɱ¶¾\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 00C00000[00029000] [ M] 67. e:\ɱ¶¾\rising\rav\rstask.dll Beijing Rising Information Technology Co., Ltd. RsTask Control .text,.rdata,.data,.rsrc,.reloc, 00CC0000[00018000] [ M] 68. e:\ɱ¶¾\rising\rav\rsstub.dll Beijing Rising Information Technology Co., Ltd. rsstub Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 0000021c(540) svchost.exe + 00000264(612) svchost.exe 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 00FE0000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 00FF0000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01160000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 01170000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 01180000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 01190000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 011A0000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 011B0000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 051E0000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 053F0000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 05400000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 05410000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 05420000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, + 00000274(628) ScanFrm.exe 00400000[0000B000] [AM] 9. e:\ɱ¶¾\rising\rav\scanfrm.exe Beijing Rising Information Technology Co., Ltd. Rising Scan Service Framework .text,.rdata,.data,.rsrc, 7C3A0000[0007B000] [ M] 63. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 62. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00029000] [ M] 69. e:\ɱ¶¾\rising\rav\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 003E0000[00019000] [ M] 70. e:\ɱ¶¾\rising\rav\moncomm.dll Beijing Rising Information Technology Co., Ltd. MonComm .text,.rdata,.data,.rsrc,.reloc, 00900000[0000A000] [ M] 71. e:\ɱ¶¾\rising\rav\scansrvp.dll Beijing Rising Information Technology Co., Ltd. ScanSrvP Module .text,.rdata,.data,.rsrc,.reloc, 00910000[00010000] [ M] 61. e:\ɱ¶¾\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00C20000[0000E000] [ M] 72. e:\ɱ¶¾\rising\rav\scansrv.dll Beijing Rising Information Technology Co., Ltd. ScanSrv Module .text,.rdata,.data,.rsrc,.reloc, 01130000[0002D000] [ M] 73. e:\ɱ¶¾\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01160000[00019000] [ M] 74. e:\ɱ¶¾\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 01740000[0000F000] [ M] 75. e:\ɱ¶¾\rising\rav\scanravt.dll Beijing Rising Information Technology Co., Ltd. ScanRavT Module .text,.rdata,.data,.rsrc,.reloc, 01750000[00072000] [ M] 76. e:\ɱ¶¾\rising\rav\scanbt.dll Beijing Rising Information Technology Co., Ltd. ScanBT Module .text,.rdata,.data,.rsrc,.reloc, 017D0000[0000D000] [ M] 77. e:\ɱ¶¾\rising\rav\scanstub.dll Beijing Rising Information Technology Co., Ltd. ScanStub Module .text,.rdata,.data,.rsrc,.reloc, 017E0000[00067000] [ M] 78. e:\ɱ¶¾\rising\rav\rslog.dll Beijing Rising Information Technology Co., Ltd. rslog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01870000[0000D000] [ M] 79. e:\ɱ¶¾\rising\rav\scanadd.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Addon .text,.rdata,.data,.rsrc,.reloc, 01880000[0000E000] [ M] 65. e:\ɱ¶¾\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 018A0000[00031000] [ M] 66. e:\ɱ¶¾\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 019E0000[00027000] [ M] 80. e:\ɱ¶¾\rising\rav\scanner.dll Beijing Rising Information Technology Co., Ltd. RsScanner Module .text,.rdata,.data,.rsrc,.reloc, 01A10000[0003C000] [ M] 81. e:\ɱ¶¾\rising\rav\recomp.dll Beijing Rising Information Technology Co., Ltd. component manager Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01A60000[00036000] [ M] 82. e:\ɱ¶¾\rising\rav\refs.dll Beijing Rising Information Technology Co., Ltd. filesystem Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01CC0000[00030000] [ M] 83. e:\ɱ¶¾\rising\rav\viruslib.dll Beijing Rising Information Technology Co., Ltd. VirusLib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01E00000[00029000] [ M] 84. e:\ɱ¶¾\rising\rav\relibldr.dll Beijing Rising Information Technology Co., Ltd. libloader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02230000[0000D000] [ M] 85. e:\ɱ¶¾\rising\rav\sysmail.dll Beijing Rising Information Technology Co., Ltd. SysMail Module .text,.rdata,.data,.rsrc,.reloc, 02240000[00030000] [ M] 86. e:\ɱ¶¾\rising\rav\mvengine.dll Beijing Rising Information Technology Co., Ltd. mvengine Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02280000[00045000] [ M] 87. e:\ɱ¶¾\rising\rav\posttrt.dll Beijing Rising Information Technology Co., Ltd. PostTrt .text,.rdata,.data,.rsrc,.reloc, 13AB0000[00045000] [ M] 88. e:\ɱ¶¾\rising\rav\scanexec.dll Beijing Rising Information Technology Co., Ltd. ScanExec .text,.rdata,.data,.rsrc,.reloc, 022F0000[002DD000] [ M] 89. e:\ɱ¶¾\rising\rav\unexe.dll Beijing Rising Information Technology Co., Ltd. UnExe .text,.rdata,.data,.rsrc,.reloc, 02950000[000DD000] [ M] 90. e:\ɱ¶¾\rising\rav\scanex.dll Beijing Rising Information Technology Co., Ltd. ScanEx .text,.rdata,.data,.rsrc,.reloc, 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 03710000[00022000] [ M] 91. e:\ɱ¶¾\rising\rav\ffr.dll Beijing Rising Information Technology Co., Ltd. ffr Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03770000[00021000] [ M] 92. e:\ɱ¶¾\rising\rav\nvfile.dll Beijing Rising Information Technology Co., Ltd. NVFile .text,.rdata,.data,.rsrc,.reloc, 037C0000[00029000] [ M] 93. e:\ɱ¶¾\rising\rav\pearc.dll Beijing Rising Information Technology Co., Ltd. pearchive Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03800000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 03810000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 03A30000[0002A000] [ M] 94. e:\ɱ¶¾\rising\rav\scanpe.dll Beijing Rising Information Technology Co., Ltd. scanpe Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03A70000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 03AB0000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 03B90000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 03BA0000[0001B000] [ M] 95. e:\ɱ¶¾\rising\rav\ur000.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 03BD0000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 03BE0000[00035000] [ M] 96. e:\ɱ¶¾\rising\rav\urutils.dll Beijing Rising Information Technology Co., Ltd. urutils Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03D30000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 046F0000[000F7000] [ M] 97. e:\ɱ¶¾\rising\rav\extfile.dll Beijing Rising Information Technology Co., Ltd. extfile Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 049A0000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 03700000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 04800000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 04810000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 04830000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, 04CB0000[000B8000] [ M] 98. e:\ɱ¶¾\rising\rav\revm.dll Beijing Rising Information Technology Co., Ltd. REVM Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 05F70000[00013000] [ M] 99. e:\ɱ¶¾\rising\rav\ur025.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 05FA0000[00012000] [ M] 100. e:\ɱ¶¾\rising\rav\ur001.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 02170000[00045000] [ M] 101. e:\ɱ¶¾\rising\rav\extole.dll Beijing Rising Information Technology Co., Ltd. ExtOLE .text,.rdata,.data,.rsrc,.reloc, 026E0000[00023000] [ M] 102. e:\ɱ¶¾\rising\rav\scansct.dll Beijing Rising Information Technology Co., Ltd. ScanSct Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 14210000[00039000] [ M] 103. e:\ɱ¶¾\rising\rav\extmail.dll Beijing Rising Information Technology Co., Ltd. ExtMail .text,.rdata,.data,.rsrc,.reloc, 03460000[0003A000] [ M] 104. e:\ɱ¶¾\rising\rav\scriptci.dll Beijing Rising Information Technology Co., Ltd. scriptci Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 034B0000[0006C000] [ M] 105. e:\ɱ¶¾\rising\rav\uroutine.dll Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 03530000[0001D000] [ M] 106. e:\ɱ¶¾\rising\rav\ur004.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 035A0000[00022000] [ M] 107. e:\ɱ¶¾\rising\rav\scanmac.dll Beijing Rising Information Technology Co., Ltd. ScanMac .text,.rdata,.data,.rsrc,.reloc, 03620000[00015000] [ M] 108. e:\ɱ¶¾\rising\rav\ur023.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 04880000[00087000] [ M] 109. e:\ɱ¶¾\rising\rav\ur027.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, + 0000034c(844) smss.exe + 000003cc(972) spoolsv.exe 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 00A20000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 00AB0000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00AD0000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 00AE0000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 00E30000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 00E40000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 00E50000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 01560000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 05590000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 00E60000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 00E70000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 00E80000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 00E90000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, + 00000408(1032) RsMain.exe 00400000[00010000] [ M] 110. e:\ɱ¶¾\rising\rav\rsmain.exe Beijing Rising Information Technology Co., Ltd. Rising RsShell .text,.rdata,.data,.rsrc, 7C340000[00056000] [ M] 62. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00032000] [ M] 111. e:\ɱ¶¾\rising\rav\rspalmgr.dll Beijing Rising Information Technology Co., Ltd. rspalmgr Program .text,.rdata,.data,.rsrc,.reloc, 00940000[00019000] [ M] 74. e:\ɱ¶¾\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 23800000[00025000] [ M] 112. e:\ɱ¶¾\rising\rav\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 63. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 26600000[000C3000] [ M] 113. e:\ɱ¶¾\rising\rav\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 7C140000[00103000] [ M] 114. c:\windows\system32\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 23700000[00023000] [ M] 115. e:\ɱ¶¾\rising\rav\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 34000000[00025000] [ M] 116. e:\ɱ¶¾\rising\rav\ravbmenu.dll Beijing Rising Information Technology Co., Ltd. ravbmenu Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B60000[00017000] [ M] 64. e:\ɱ¶¾\rising\rav\rsconf.dll Beijing Rising Information Technology Co., Ltd. rsconf Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B90000[00030000] [ M] 117. e:\ɱ¶¾\rising\rav\rspalvd.dll Beijing Rising Information Technology Co., Ltd. rspalvd .text,.rdata,.data,.rsrc,.reloc, 32000000[0006F000] [ M] 118. e:\ɱ¶¾\rising\rav\ravppops.dll Beijing Rising Information Technology Co., Ltd. ravppops Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 33000000[00025000] [ M] 119. e:\ɱ¶¾\rising\rav\ravbintl.dll Beijing Rising Information Technology Co., Ltd. ravbintl Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00BE0000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00E10000[00041000] [ M] 120. e:\ɱ¶¾\rising\rav\ravpsafe.dll Beijing Rising Information Technology Co., Ltd. ravpsafe Module .text,.rdata,.data,.rsrc,.reloc, 00E70000[00013000] [ M] 121. e:\ɱ¶¾\rising\rav\monstate.dll Beijing Rising Information Technology Co., Ltd. MonState .text,.rdata,.data,.rsrc,.reloc, 00EA0000[00059000] [ M] 122. e:\ɱ¶¾\rising\rav\scanprxy.dll Beijing Rising Information Technology Co., Ltd. ScanPrxy Module .text,.rdata,.data,.rsrc,.reloc, 00F00000[0001F000] [ M] 123. e:\ɱ¶¾\rising\rav\psafecfg.dll Beijing Rising Information Technology Co., Ltd. psafecfg Program .text,.rdata,.data,.rsrc,.reloc, 01030000[0000E000] [ M] 65. e:\ɱ¶¾\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 01050000[00031000] [ M] 66. e:\ɱ¶¾\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 01350000[0002D000] [ M] 73. e:\ɱ¶¾\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 014A0000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 014B0000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 014C0000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 014D0000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 014E0000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 014F0000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 01500000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 05530000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 05740000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 05750000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 05760000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 05770000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, 01250000[00010000] [ M] 61. e:\ɱ¶¾\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 30000000[000A5000] [ M] 124. e:\ɱ¶¾\rising\rav\ravxpage.dll Beijing Rising Information Technology Co., Ltd. scanviru Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 31000000[00023000] [ M] 125. e:\ɱ¶¾\rising\rav\ravxmons.dll Beijing Rising Information Technology Co., Ltd. scanviru Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01280000[0002F000] [ M] 126. e:\ɱ¶¾\rising\rav\ravptool.dll Beijing Rising Information Technology Co., Ltd. Rising tools page .text,.rdata,.data,.rsrc,.reloc, 012C0000[0006F000] [ M] 127. e:\ɱ¶¾\rising\rav\log2file.dll Beijing Rising Information Technology Co., Ltd. Rising Log2File .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 128. e:\ɱ¶¾\rising\rav\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 06260000[00030000] [ M] 129. e:\ɱ¶¾\rising\rav\htmllib.dll Beijing Rising Information Technology Co., Ltd. htmllib .text,.rdata,.data,.rsrc,.reloc, + 00000418(1048) RsTray.exe 00400000[00023000] [AM] 40. e:\ɱ¶¾\rising\rav\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, 10000000[00023000] [ M] 130. e:\ɱ¶¾\rising\rav\comserv.dll Beijing Rising Information Technology Co., Ltd. Rising tray common service .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 63. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 62. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 23700000[00023000] [ M] 115. e:\ɱ¶¾\rising\rav\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00990000[0002D000] [ M] 73. e:\ɱ¶¾\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 009C0000[00019000] [ M] 74. e:\ɱ¶¾\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 23800000[00025000] [ M] 112. e:\ɱ¶¾\rising\rav\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00BC0000[00010000] [ M] 61. e:\ɱ¶¾\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00DD0000[00013000] [ M] 121. e:\ɱ¶¾\rising\rav\monstate.dll Beijing Rising Information Technology Co., Ltd. MonState .text,.rdata,.data,.rsrc,.reloc, 00E00000[0000B000] [ M] 131. e:\ɱ¶¾\rising\rav\scanevnt.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Event Handler .text,.rdata,.data,.rsrc,.reloc, 26600000[000C3000] [ M] 113. e:\ɱ¶¾\rising\rav\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 7C140000[00103000] [ M] 114. c:\windows\system32\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 00F50000[00017000] [ M] 64. e:\ɱ¶¾\rising\rav\rsconf.dll Beijing Rising Information Technology Co., Ltd. rsconf Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00F80000[0000E000] [ M] 65. e:\ɱ¶¾\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 00FA0000[00031000] [ M] 66. e:\ɱ¶¾\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 010E0000[00030000] [ M] 117. e:\ɱ¶¾\rising\rav\rspalvd.dll Beijing Rising Information Technology Co., Ltd. rspalvd .text,.rdata,.data,.rsrc,.reloc, 33000000[00025000] [ M] 119. e:\ɱ¶¾\rising\rav\ravbintl.dll Beijing Rising Information Technology Co., Ltd. ravbintl Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01120000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01370000[0006C000] [ M] 132. e:\ɱ¶¾\rising\rav\mruleui.dll Beijing Rising Information Technology Co., Ltd. mruleui .text,.rdata,.data,.rsrc,.reloc, 013E0000[0006C000] [ M] 133. e:\ɱ¶¾\rising\rav\montray.dll Beijing Rising Information Technology Co., Ltd. Rising AntiVirus 2009 .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 128. e:\ɱ¶¾\rising\rav\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 34500000[00020000] [ M] 134. e:\ɱ¶¾\rising\rav\ravitray.dll Beijing Rising Information Technology Co., Ltd. ravitray Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01AB0000[00059000] [ M] 122. e:\ɱ¶¾\rising\rav\scanprxy.dll Beijing Rising Information Technology Co., Ltd. ScanPrxy Module .text,.rdata,.data,.rsrc,.reloc, 01B10000[00044000] [ M] 135. e:\ɱ¶¾\rising\rav\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, + 000004e4(1252) svchost.exe 006C0000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, + 00000524(1316) alg.exe 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 00710000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 00D00000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00E60000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 00E70000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 00E80000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 00E90000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 00EA0000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 01010000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 05040000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 00EB0000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 00EC0000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 00ED0000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 00EE0000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, + 000005a8(1448) CCENTER.EXE 00400000[0001B000] [AM] 3. e:\ɱ¶¾\rising\rav\ccenter.exe Beijing Rising Information Technology Co., Ltd. CCenter Application .text,.rdata,.data,.rsrc, 10000000[00029000] [ M] 69. e:\ɱ¶¾\rising\rav\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 00680000[00027000] [ M] 136. e:\ɱ¶¾\rising\rav\cnt09.dll Beijing Rising Information Technology Co., Ltd. cnt09 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 009C0000[0001D000] [ M] 137. e:\ɱ¶¾\rising\rav\cnt08.dll Beijing Rising Information Technology Co., Ltd. cnt08 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000005b0(1456) wdfmgr.exe 01000000[0000C000] [AM] 10. c:\windows\system32\wdfmgr.exe Microsoft Corporation Windows User Mode Driver Manager .text,.data,.rsrc, + 000005ec(1516) RavMonD.exe 00400000[00020000] [AM] 8. e:\ɱ¶¾\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, 10000000[00029000] [ M] 69. e:\ɱ¶¾\rising\rav\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 63. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 62. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00A00000[00019000] [ M] 70. e:\ɱ¶¾\rising\rav\moncomm.dll Beijing Rising Information Technology Co., Ltd. MonComm .text,.rdata,.data,.rsrc,.reloc, 00A20000[0001D000] [ M] 138. e:\ɱ¶¾\rising\rav\monbase.dll Beijing Rising Information Technology Co., Ltd. MonBase .text,.rdata,.data,.rsrc,.reloc, 00A50000[00067000] [ M] 78. e:\ɱ¶¾\rising\rav\rslog.dll Beijing Rising Information Technology Co., Ltd. rslog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00AE0000[00018000] [ M] 139. e:\ɱ¶¾\rising\rav\mondrv.dll Beijing Rising Information Technology Co., Ltd. mondrv .text,.rdata,.data,.rsrc,.reloc, 00B10000[00023000] [ M] 140. e:\ɱ¶¾\rising\rav\defmon.dll Beijing Rising Information Technology Co., Ltd. DefMon .text,.rdata,.data,.rsrc,.reloc, 00B50000[00010000] [ M] 141. e:\ɱ¶¾\rising\rav\moncom08.dll Beijing Rising Information Technology Co., Ltd. MonCom08 .text,.rdata,.data,.rsrc,.reloc, 00B70000[0006C000] [ M] 142. e:\ɱ¶¾\rising\rav\monrule.dll Beijing Rising Information Technology Co., Ltd. MonRule .text,.rdata,.data,.rsrc,.reloc, 00C20000[00028000] [ M] 143. e:\ɱ¶¾\rising\rav\filemon.dll Beijing Rising Information Technology Co., Ltd. Filemon .text,.rdata,.data,.rsrc,.reloc, 00C60000[0002B000] [ M] 144. e:\ɱ¶¾\rising\rav\mailmon.dll Beijing Rising Information Technology Co., Ltd. MailMon .text,.rdata,.data,.rsrc,.reloc, 00CA0000[00012000] [ M] 145. e:\ɱ¶¾\rising\rav\hookweb.dll Beijing Rising Information Technology Co., Ltd. hookweb .text,.rdata,.data,.rsrc,.reloc, 00CE0000[00010000] [ M] 61. e:\ɱ¶¾\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00EF0000[0000E000] [ M] 65. e:\ɱ¶¾\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 00F10000[00031000] [ M] 66. e:\ɱ¶¾\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 01050000[0002D000] [ M] 73. e:\ɱ¶¾\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01080000[00019000] [ M] 74. e:\ɱ¶¾\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 011F0000[00020000] [ M] 146. e:\ɱ¶¾\rising\rav\hooksys.dll Beijing Rising Information Technology Co., Ltd. Hooksys.dll .text,.rdata,.data,.idata,.rsrc,.reloc, 012A0000[0001F000] [ M] 147. e:\ɱ¶¾\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 012C0000[00024000] [ M] 148. e:\ɱ¶¾\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 01310000[00013000] [ M] 149. e:\ɱ¶¾\rising\rav\hookcont.dll Beijing Rising Information Technology Co., Ltd. HookCont Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01350000[00067000] [ M] 150. e:\ɱ¶¾\rising\rav\rsnetsvr.dll Beijing Rising Information Technology Co., Ltd. rsnetsvr .text,.rdata,.data,.rsrc,.reloc, 01820000[00071000] [ M] 151. e:\ɱ¶¾\rising\rav\bacore.dll Beijing Rising Information Technology Co., Ltd. Rising MBA DLL .text,.rdata,.data,.rsrc,.reloc, 019B0000[0003C000] [ M] 81. e:\ɱ¶¾\rising\rav\recomp.dll Beijing Rising Information Technology Co., Ltd. component manager Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01A00000[00036000] [ M] 82. e:\ɱ¶¾\rising\rav\refs.dll Beijing Rising Information Technology Co., Ltd. filesystem Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01A50000[0002B000] [ M] 152. e:\ɱ¶¾\rising\rav\rsstore.dll Beijing Rising Information Technology Co., Ltd. RSStore .text,.rdata,.data,.rsrc,.reloc, 01A90000[0000D000] [ M] 79. e:\ɱ¶¾\rising\rav\scanadd.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Addon .text,.rdata,.data,.rsrc,.reloc, 01AA0000[00027000] [ M] 80. e:\ɱ¶¾\rising\rav\scanner.dll Beijing Rising Information Technology Co., Ltd. RsScanner Module .text,.rdata,.data,.rsrc,.reloc, 01CE0000[00030000] [ M] 83. e:\ɱ¶¾\rising\rav\viruslib.dll Beijing Rising Information Technology Co., Ltd. VirusLib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01E20000[00029000] [ M] 84. e:\ɱ¶¾\rising\rav\relibldr.dll Beijing Rising Information Technology Co., Ltd. libloader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 03640000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 03650000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 03670000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 03680000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 03690000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 036A0000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 036B0000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 04190000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 081C0000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 036C0000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 036D0000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 036E0000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 036F0000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, 03530000[00022000] [ M] 91. e:\ɱ¶¾\rising\rav\ffr.dll Beijing Rising Information Technology Co., Ltd. ffr Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03570000[00021000] [ M] 92. e:\ɱ¶¾\rising\rav\nvfile.dll Beijing Rising Information Technology Co., Ltd. NVFile .text,.rdata,.data,.rsrc,.reloc, 13AB0000[00045000] [ M] 88. e:\ɱ¶¾\rising\rav\scanexec.dll Beijing Rising Information Technology Co., Ltd. ScanExec .text,.rdata,.data,.rsrc,.reloc, 08C20000[002DD000] [ M] 89. e:\ɱ¶¾\rising\rav\unexe.dll Beijing Rising Information Technology Co., Ltd. UnExe .text,.rdata,.data,.rsrc,.reloc, 08F00000[000DD000] [ M] 90. e:\ɱ¶¾\rising\rav\scanex.dll Beijing Rising Information Technology Co., Ltd. ScanEx .text,.rdata,.data,.rsrc,.reloc, 03600000[00029000] [ M] 93. e:\ɱ¶¾\rising\rav\pearc.dll Beijing Rising Information Technology Co., Ltd. pearchive Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03710000[0002A000] [ M] 94. e:\ɱ¶¾\rising\rav\scanpe.dll Beijing Rising Information Technology Co., Ltd. scanpe Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 090F0000[0001B000] [ M] 95. e:\ɱ¶¾\rising\rav\ur000.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 09120000[00035000] [ M] 96. e:\ɱ¶¾\rising\rav\urutils.dll Beijing Rising Information Technology Co., Ltd. urutils Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 09370000[000F7000] [ M] 97. e:\ɱ¶¾\rising\rav\extfile.dll Beijing Rising Information Technology Co., Ltd. extfile Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 09BE0000[000B8000] [ M] 98. e:\ɱ¶¾\rising\rav\revm.dll Beijing Rising Information Technology Co., Ltd. REVM Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03DB0000[00012000] [ M] 100. e:\ɱ¶¾\rising\rav\ur001.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 14210000[00039000] [ M] 103. e:\ɱ¶¾\rising\rav\extmail.dll Beijing Rising Information Technology Co., Ltd. ExtMail .text,.rdata,.data,.rsrc,.reloc, + 00000610(1552) RSNETSVR.EXE 00400000[00079000] [ M] 153. e:\ɱ¶¾\rising\rav\rsnetsvr.exe Beijing Rising Information Technology Co., Ltd. rsnetsvr .text,.rdata,.data,.rsrc, 10000000[00035000] [ M] 154. e:\ɱ¶¾\rising\rav\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00390000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 003A0000[00019000] [ M] 74. e:\ɱ¶¾\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00CC0000[0002D000] [ M] 73. e:\ɱ¶¾\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00E30000[00010000] [ M] 61. e:\ɱ¶¾\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 62. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 63. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, + 00000618(1560) csrss.exe + 00000694(1684) winlogon.exe 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 00DB0000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 00DC0000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00FB0000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 00FC0000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 00FD0000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 00FE0000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 01440000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 02610000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 01800000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 01450000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 01460000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 01470000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 015F0000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, 72C80000[00008000] [ M] 155. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000720(1824) services.exe 46040000[0000F000] [ M] 156. c:\windows\apppatch\acadproc.dll Microsoft Corporation Windows Compatibility DLL .text,.data,.rsrc,.reloc, + 0000072c(1836) lsass.exe + 000007ec(2028) ~rs.tmp 00400000[00204000] [ M] 157. c:\documents and settings\administrator\local settings\temp\~rs.tmp Beijing Rising Information Technology Co., Ltd. RepairTool .text,.rdata,.data,.rsrc, 00390000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[0000D000] [ M] 158. c:\documents and settings\administrator\local settings\temp\rspp.dll Beijing Rising Technology Co., Ltd rspp Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00E00000[0011A000] [ M] 159. c:\documents and settings\administrator\local settings\temp\autohelp.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 62. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 63. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 01090000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 010A0000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 010B0000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 010C0000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 010D0000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 010E0000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 01720000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 05750000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 010F0000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 01100000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 01110000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 01120000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, + 0000090c(2316) uy.exe 00400000[0000B000] [ M] 160. e:\ɱ¶¾\¿¨¿¨\uy.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 161. e:\ɱ¶¾\¿¨¿¨\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 162. e:\ɱ¶¾\¿¨¿¨\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00047000] [ M] 163. e:\ɱ¶¾\¿¨¿¨\kakamgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 164. e:\ɱ¶¾\¿¨¿¨\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00A10000[00019000] [ M] 165. e:\ɱ¶¾\¿¨¿¨\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00A40000[0001F000] [ M] 147. e:\ɱ¶¾\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00A60000[00024000] [ M] 166. e:\ɱ¶¾\¿¨¿¨\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00BB0000[0002D000] [ M] 167. e:\ɱ¶¾\¿¨¿¨\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00D20000[00058000] [ M] 168. e:\ɱ¶¾\¿¨¿¨\dbmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 169. e:\ɱ¶¾\¿¨¿¨\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00E80000[0002D000] [ M] 170. e:\ɱ¶¾\¿¨¿¨\pweb.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00EB0000[000C1000] [ M] 171. e:\ɱ¶¾\¿¨¿¨\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00F80000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00F90000[00034000] [ M] 172. e:\ɱ¶¾\¿¨¿¨\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01200000[00070000] [ M] 173. e:\ɱ¶¾\¿¨¿¨\pset.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01270000[0002A000] [ M] 174. e:\ɱ¶¾\¿¨¿¨\pdefend.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 012A0000[000B6000] [ M] 175. e:\ɱ¶¾\¿¨¿¨\ptools.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01460000[0008D000] [ M] 176. e:\ɱ¶¾\¿¨¿¨\psysinfo.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 408A0000[005CD000] [AM] 29. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 23900000[00040000] [ M] 177. e:\ɱ¶¾\¿¨¿¨\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01C10000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 01CD0000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 01D00000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 02120000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 02210000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 02220000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 02240000[04026000] [ M] 60. c:\windows\fonts\gth61390.ttf .bss,.data,shard,.reloc, 06280000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 065E0000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 06610000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 06680000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 06690000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc, 06D10000[00017000] [ M] 178. e:\ɱ¶¾\rising\rav\ravscrch.dll Beijing Rising Information Technology Co., Ltd. webmon module .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 155. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000be4(3044) knownsvr.exe 00400000[00072000] [ M] 179. e:\ɱ¶¾\¿¨¿¨\knownsvr.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[00034000] [ M] 172. e:\ɱ¶¾\¿¨¿¨\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00390000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 78000000[00045000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00B90000[0002D000] [ M] 167. e:\ɱ¶¾\¿¨¿¨\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00BC0000[00019000] [ M] 165. e:\ɱ¶¾\¿¨¿¨\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 77020000[0009A000] [ M] 46. c:\windows\system32\sysgth.dll Microsoft Corporation .text,.data,.rsrc,.reloc, 01BB0000[0000E000] [ M] 47. c:\windows\fonts\gth02545.ttf .bss,.data,shard,.reloc, 01BC0000[0000F000] [ M] 50. c:\windows\fonts\gth19545.ttf .bss,.data,shard,.reloc, 01BD0000[0000F000] [ M] 51. c:\windows\fonts\gth26535.ttf .bss,.data,shard,.reloc, 01BF0000[0000F000] [ M] 52. c:\windows\fonts\gth30545.ttf .bss,.data,shard,.reloc, 01C00000[0000E000] [ M] 53. c:\windows\fonts\gth37545.ttf .bss,.data,shard,.reloc, 01C10000[0000E000] [ M] 54. c:\windows\fonts\gth39541.ttf .bss,.data,shard,.reloc, 01D90000[00210000] [ M] 55. c:\windows\fonts\gth63380.ttf .bss,.data,shard,.reloc, 01C30000[0000E000] [ M] 56. c:\windows\fonts\gth64380.ttf .bss,.data,shard,.reloc, 01C40000[0000E000] [ M] 57. c:\windows\fonts\gth67380.ttf .bss,.data,shard,.reloc, 01C50000[0000E000] [ M] 58. c:\windows\fonts\gth72390.ttf .bss,.data,shard,.reloc, 01C60000[0000F000] [ M] 59. c:\windows\fonts\gth78380.ttf .bss,.data,shard,.reloc,