瑞星卡卡电脑诊断日志 v1.30 (2009-6-27 9:31:29)  北京瑞星信息技术有限公司

注释:	[A]表示该文件存在自启动关联;
	[M]表示该文件在内存中;

+ 注册表自运行项目 
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      Adobe LM Service
        [A ] 1. c:\program files\common files\adobe systems shared\service\adobelmsvc.exe
          Adobe Systems
          System Level Service Utility
          .text,.rdata,.data,.rsrc,


      aspnet_state
        [A ] 2. c:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe
          Microsoft Corporation
          Microsoft ASP.NET State Server
          .text,.data,.rsrc,


      Autodesk Licensing Service
        [A ] 3. c:\program files\common files\autodesk shared\service\adskscsrv.exe
          Autodesk
          System Level Service Utility
          .text,.rdata,.data,.rsrc,


      clr_optimization_v2.0.50727_32
        [A ] 4. c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe
          Microsoft Corporation
          .NET Runtime Optimization Service
          .text,.data,.rsrc,


      fsssvc
        [A ] 5. c:\program files\windows live\family safety\fsssvc.exe
          Microsoft Corporation
          Family Safety Service
          .text,.data,.rsrc,.reloc,


      gusvc
        [A ] 6. c:\program files\google\common\google updater\googleupdaterservice.exe
          Google
          gusvc
          .text,.rdata,.data,.rsrc,


      hpqcxs08
        [AM] 7. c:\program files\hp\digital imaging\bin\hpqcxs08.dll
          Hewlett-Packard Co.
          HP CUE Context Manager Objects
          .text,.rdata,.data,.rsrc,.reloc,


      hpqddsvc
        [AM] 8. c:\program files\hp\digital imaging\bin\hpqddsvc.dll
          Hewlett-Packard Co.
          HP CUE DeviceDiscovery Service
          .text,.rdata,.data,.rsrc,.reloc,


      IDriverT
        [A ] 9. c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe
          Macrovision Corporation
          IDriverT Module
          .text,.rdata,.data,.rsrc,


      NVSvc
        [AM] 10. c:\windows\system32\nvsvc32.exe
          NVIDIA Corporation
          NVIDIA Driver Helper Service, Version 175.19
          .text,.rdata,.data,.rsrc,


      ose
        [A ] 11. c:\program files\common files\microsoft shared\source engine\ose.exe
          Microsoft Corporation
          Office Source Engine
          .text,.data,.rsrc,


      RsCCenter
        [AM] 12. c:\program files\rising\rav\ccenter.exe
          Beijing Rising Technology Co., Ltd.
          CCenter
          .text,.rdata,.data,.rsrc,


      SeaPort
        [AM] 13. c:\program files\microsoft\search enhancement pack\seaport\seaport.exe
          Microsoft Corp.
          Microsoft SeaPort Search Enhancement Broker
          .text,.data,.rsrc,.reloc,


      STacSV
        [AM] 14. c:\program files\idt\intelxpv_v100\wdm\stacsv.exe
          IDT, Inc.
          IDT PC Audio
          .text,.rdata,.data,.rsrc,


      TSUSVC
        [AM] 15. c:\program files\tencent\qqsoftmgr\tencentupdatesvc.exe
          Tencent
          Tencent Software Update Service
          UPX0,UPX1,.rsrc,


      WMPNetworkSvc
        [A ] 16. c:\program files\windows media player\wmpnetwk.exe
          Microsoft Corporation
          Windows Media Player 网络共享服务
          .text,.data,.rsrc,.reloc,


      WudfSvc
        [A ] 17. c:\windows\system32\wudfsvc.dll
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Service
          .text,.data,.rsrc,.reloc,




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      360SelfProtection
        [A ] 18. c:\windows\system32\drivers\360selfprotection.sys
          360安全中心
          360安全卫士 - SelfProtection
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      BFSDRV
        [A ] 19. c:\windows\system32\drivers\bfsdrv.sys
          360安全中心
          bfsdrv
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      e1yexpress
        [A ] 20. c:\windows\system32\drivers\e1y5132.sys
          Intel Corporation
          Intel(R) Gigabit Network Connection NDIS 5.1 deserialized driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      EfiMon
        [A ] 21. c:\windows\system32\drivers\efimon.sys


      FETNDISB
        [A ] 22. c:\windows\system32\drivers\dlkfet5b.sys
          D-Link                              
          NDIS 5.0 miniport driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      fssfltr
        [A ] 23. c:\windows\system32\drivers\fssfltr_tdi.sys
          Microsoft Corporation
          Family Safety Filter Driver (TDI)
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      HDAudBus
        [A ] 24. c:\windows\system32\drivers\hdaudbus.sys
          Windows (R) Server 2003 DDK provider
          High Definition Audio Bus Driver v1.0a
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      HookCont
        [A ] 25. c:\windows\system32\drivers\hookcont.sys
          Beijing Rising Technology Co., Ltd
          HookCont
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookNtos
        [A ] 26. c:\windows\system32\drivers\hookntos.sys
          Beijing Rising Technology Co., Ltd
          HookNtos
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookPort
        [A ] 27. c:\windows\system32\drivers\hookport.sys
          360安全中心
          360安全卫士 - HookPort
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookReg
        [A ] 28. c:\windows\system32\drivers\hookreg.sys
          Beijing Rising Technology Co., Ltd
          HookReg
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookSys
        [A ] 29. c:\windows\system32\drivers\hooksys.sys
          Beijing Rising Technology Co., Ltd
          Hooksys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookUrl
        [A ] 30. c:\program files\rising\rfw\hookurl.sys
          Beijing Rising Technology Co., Ltd.
          URL Filter Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      NAL
        [A ] 31. c:\windows\system32\drivers\iqvw32.sys
          Intel Corporation 
          Intel(R) Network Adapter Diagnostic Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      PxHelp20
        [A ] 32. c:\windows\system32\drivers\pxhelp20.sys
          Sonic Solutions
          Px Engine Device Driver for Windows 2000/XP
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RfwBase
        [A ] 33. c:\windows\system32\drivers\rfwbase.sys
          Beijing Rising Technology Co., Ltd.
          net base driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      ROCKEYNT
        [A ] 34. c:\windows\system32\drivers\rockey4.sys
          Feitian Technologies Co., Ltd.
          Rockey Device Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsFwDrv
        [A ] 35. c:\program files\rising\rfw\rsfwdrv.sys
          Beijing Rising Technology Co., Ltd.
          Rules Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsNTGDI
        [A ] 36. c:\windows\system32\drivers\rsntgdi.sys
          Beijing Rising Technology Co., Ltd.
          RsNTGDI
          .text,.rdata,INIT,.rsrc,.reloc,


      SafeBoxKrnl
        [A ] 37. c:\windows\system32\drivers\safeboxkrnl.sys
          360安全中心
          360安全卫士 - 保险箱
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Secdrv
        [A ] 38. c:\windows\system32\drivers\secdrv.sys
          Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
          Macrovision SECURITY Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      STHDA
        [A ] 39. c:\windows\system32\drivers\sthda.sys
          IDT, Inc.
          IDT PC Audio
          .text,page,.rdata,.data,INIT,.rsrc,.reloc,


      Tcpip
        [A ] 40. c:\windows\system32\drivers\tcpip.sys
          Microsoft Corporation
          TCP/IP Protocol Driver
          .text,.rdata,.data,PAGE,PAGELK,PAGEIPMc,.edata,INIT,.rsrc,.reloc,


      TF1D091010
        [A ] 41. c:\windows\system32\drivers\tf1d091010.sys
          TechFaith Wireless Technology Limited.
          USB Modem/Serial Device Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      WudfPf
        [A ] 42. c:\windows\system32\drivers\wudfpf.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Platform Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      WudfRd
        [A ] 43. c:\windows\system32\drivers\wudfrd.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Reflector
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,




  + 文件系统驱动
    + HKLM\System\CurrentControlSet\Services
      exFat
        [A ] 44. c:\windows\system32\drivers\exfat.sys
          Microsoft Corporation
          Microsoft Extended FAT File System
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,




  + 系统登陆自运行
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      WgaLogon
        [AM] 45. c:\windows\system32\wgalogon.dll
          .text,.rsrc,



    + HKCU\Control Panel\Desktop
      Scrnsave.exe
        [A ] 46. c:\windows\system32\gphotos.scr
          Google Inc.
          Google Photos Screensaver
          .text,.rdata,.data,.rsrc,




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {3041d03e-fd4b-44e0-b742-2d9b88305f98}
        [A ] 47. c:\program files\askbardis\bar\bin\askbar.dll
          Ask.com
          Ask.com Toolbar
          .text,.rdata,.data,.rsrc,.reloc,


      {21FA44EF-376D-4D53-9B0F-8A89D3229068}
        [A ] 48. c:\program files\windows live\toolbar\wltcore.dll
          Microsoft Corporation
          Windows Live Toolbar Core
          .text,.data,.rsrc,.reloc,


      {FE063DB9-4EC0-403e-8DD8-394C54984B2C}
        [A ] 49. c:\program files\asktbar\bar\2.bin\asktbar.dll
          Ask.com
          Ask Toolbar
          .text,.rdata,.data,AskTBarS,.rsrc,.reloc,


      {29CF293A-1E7D-4069-9E11-E39698D0AF95}
        [A ] 50. c:\program files\tencent\qqtoolbar\iebar.dll
          TENCENT
          QQ工具栏
          .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc,


      {6C3797D2-3FEF-4cd4-B654-D3AE55B4128C}
        [A ] 51. f:\acting shoft\fastait 2009\addins\ieband.dll
          Copyright (c) Kingsoft Corporation Limited. All rights reserved.
          Kingsoft FastAit 2009
          .text,.rdata,.data,.rsrc,.reloc,



    + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
      {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      {1E315374-71A5-471A-B683-4C4ADB5C588B}
        [A ] 53. c:\windows\system32\jfcheck.dll
          PIPI Tech.
          PIPI Helper For Internet Explorer
          .text,.rdata,.data,.rsrc,.reloc,


      {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}
        [AM] 54. c:\program files\tencent\ssplus\saddr1.dll
          腾讯
          腾讯中文搜搜
          .text,.rdata,.data,Shared_S,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {01443AEC-0FD1-40fd-9C87-E93D1494C233}
        [AM] 55. f:\acting shoft\comdlls\tdatonce_now.dll
          深圳市迅雷网络技术有限公司
          TDAtOnce
          .text,.rdata,.data,sharedda,.rsrc,.reloc,


      {0347C33E-8762-4905-BF09-768834316C61}
        [A ] 56. c:\program files\hp\smart web printing\hpswp_printenhancer.dll
          Hewlett-Packard Co.
          hpswp_printenhancer dll
          .text,.rdata,.data,.rsrc,.reloc,


      {053F9267-DC04-4294-A72C-58F732D338C0}
        [A ] 57. c:\program files\hp\smart web printing\hpswp_framework.dll
          Hewlett-Packard Co.
          Leo (Framework) - add-on for Internet Explorer
          .text,.rdata,.data,.rsrc,.reloc,


      {0C7C23EF-A848-485B-873C-0ED954731014}
        [AM] 54. c:\program files\tencent\ssplus\saddr1.dll
          腾讯
          腾讯中文搜搜
          .text,.rdata,.data,Shared_S,.rsrc,.reloc,


      {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
        [A ] 58. c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll
          Adobe Systems Incorporated
          Adobe PDF Helper for Internet Explorer
          .text,.orpc,.rdata,.data,.rsrc,.reloc,


      {1A3440C6-F123-4CAB-84EE-C814E1AE0D8F}
        [A ] 53. c:\windows\system32\jfcheck.dll
          PIPI Tech.
          PIPI Helper For Internet Explorer
          .text,.rdata,.data,.rsrc,.reloc,


      {201f27d4-3704-41d6-89c1-aa35e39143ed}
        [A ] 47. c:\program files\askbardis\bar\bin\askbar.dll
          Ask.com
          Ask.com Toolbar
          .text,.rdata,.data,.rsrc,.reloc,


      {29CF293A-1E7D-4069-9E11-E39698D0AF95}
        [A ] 50. c:\program files\tencent\qqtoolbar\iebar.dll
          TENCENT
          QQ工具栏
          .text,.rdata,.data,.toolbar,.webslic,.rsrc,.reloc,


      {3049C3E9-B461-4BC5-8870-4C09146192CA}
        [A ] 59. c:\program files\real\realplayer\rpbrowserrecordplugin.dll
          RealPlayer
          RealPlayer Download and Record Plugin
          .text,.rdata,.data,.rsrc,.reloc,


      {489873CE-F3E1-44A3-8E89-04BE26BE4446}
        [A ] 60. c:\program files\internet explorer\ietimber\ietimber.dll
          北京世纪乾坤软件
          .text,.rdata,.data,.rsrc,.reloc,


      {6A49F431-2A2E-41a5-9080-0F41D1A3AEC2}
        [A ] 61. c:\program files\iefxz\iefxz.dll
          IEFXZ
          .text,.rdata,.data,.phoenix,.rsrc,.reloc,


      {6EBF7485-159F-4bff-A14F-B9E3AAC4465B}
        [A ] 62. c:\program files\microsoft\search enhancement pack\search helper\searchhelper.dll
          Microsoft Corp.
          Microsoft Search Helper Extention
          .text,.data,.rsrc,.reloc,


      {9030D464-4C02-4ABF-8ECC-5164760863C6}
        [A ] 63. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
          Microsoft Corporation
          WindowsLiveLogin.dll
          .text,.data,.rsrc,.reloc,


      {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
        [A ] 64. c:\windows\system32\urlfilter.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising AntiSpyware UrlFilter Module
          .text,.rdata,.data,.rsrc,.reloc,


      {B69F34DD-F0F9-42DC-9EDD-957187DA688D}
        [A ] 65. f:\360系列\360safe\safemon\safemon.dll
          360.CN
          360安全卫士实时保护模块
          .text,.rdata,.data,.share,.rsrc,.reloc,


      {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}
        [A ] 48. c:\program files\windows live\toolbar\wltcore.dll
          Microsoft Corporation
          Windows Live Toolbar Core
          .text,.data,.rsrc,.reloc,


      {FE063DB1-4EC0-403e-8DD8-394C54984B2C}
        [A ] 49. c:\program files\asktbar\bar\2.bin\asktbar.dll
          Ask.com
          Ask Toolbar
          .text,.rdata,.data,AskTBarS,.rsrc,.reloc,




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      application/octet-stream
        [A ] 66. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      application/x-complus
        [A ] 66. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      application/x-msdownload
        [A ] 66. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      text/xml
        [A ] 67. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
          Microsoft Corporation
          Microsoft Office XML MIME Filter
          .text,.data,.cdata,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      KuGoo
        [A ] 68. c:\windows\system32\kugoo3downxcontrol.ocx
          酷狗
          酷狗音乐控件
          .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc,


      KuGoo3
        [A ] 68. c:\windows\system32\kugoo3downxcontrol.ocx
          酷狗
          酷狗音乐控件
          .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc,


      livecall
        [A ] 69. c:\program files\windows live\messenger\msgrapp.14.0.8064.0206.dll
          Microsoft Corporation
          Windows Live Messenger Protocol Handler Module
          .text,.data,.rsrc,.reloc,


      msnim
        [A ] 69. c:\program files\windows live\messenger\msgrapp.14.0.8064.0206.dll
          Microsoft Corporation
          Windows Live Messenger Protocol Handler Module
          .text,.data,.rsrc,.reloc,


      mso-offdap
        [A ] 70. c:\program files\common files\microsoft shared\web components\10\owc10.dll
          Microsoft Corporation
          Microsoft Office XP Web Components
          .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc,


      wlmailhtml
        [A ] 71. c:\program files\windows live\mail\mailcomm.dll
          Microsoft Corporation
          Windows Live Mail
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
      <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
        [A ] 72. c:\windows\system32\ieudinit.exe
          Microsoft Corporation
          IE Per User Active Setup Uninstall Utility
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {F9DB5320-233E-11D1-9F84-707F02C10627}
        [AM] 73. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll
          Adobe Systems, Inc.
          PDF Shell Extension
          .text,.orpc,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 74. c:\windows\system32\hticons.dll
          Hilgraeve, Inc.
          HyperTerminal Applet Library
          .text,.data,.rsrc,.reloc,


      IE Search Band
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE AutoComplete
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Shell DocObject Viewer
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      InternetShortcut
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Microsoft Url History Service
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      History
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Temporary Internet Files
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Temporary Internet Files
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Microsoft Url Search Hook
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      The Internet
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Internet Name Space
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Microsoft BrowserBand
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Fade Task
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Menu Desk Bar
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Navigation Bar
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Menu Site
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Menu Band
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Microsoft History AutoComplete List
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Tracking Shell Menu
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE IShellFolderBand
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE BandProxy
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE MRU AutoComplete List
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE RSS Feeder Folder
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Microsoft Shell Folder AutoComplete List
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Microsoft Multiple AutoComplete List Container
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Microsoft Browser Architecture
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Shell Rebar BandSite
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Shell Band Site Menu
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      &Links
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Registry Tree Options Utility
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE User Assist
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      IE Custom MRU AutoCompleted List
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Portable Media Devices
        [AM] 75. c:\windows\system32\audiodev.dll
          Microsoft Corporation
          Portable Media Devices Shell Extension
          .text,.data,.rsrc,.reloc,


      Portable Devices
        [AM] 76. c:\windows\system32\wpdshext.dll
          Microsoft Corporation
          Portable Devices Shell Extension
          .text,.data,.rsrc,.reloc,


      Portable Devices Menu
        [AM] 76. c:\windows\system32\wpdshext.dll
          Microsoft Corporation
          Portable Devices Shell Extension
          .text,.data,.rsrc,.reloc,


      WinRAR shell extension
        [AM] 77. c:\program files\winrar\rarext.dll
          .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


      NvCpl DesktopContext Class
        [AM] 78. c:\windows\system32\nvcpl.dll
          NVIDIA Corporation
          NVIDIA Display Properties Extension
          .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc,


      Play on my TV helper
        [AM] 78. c:\windows\system32\nvcpl.dll
          NVIDIA Corporation
          NVIDIA Display Properties Extension
          .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc,


      Desktop Explorer
        [AM] 79. c:\windows\system32\nvshell.dll
          .text,.rdata,.data,.idata,.shared,.rsrc,.reloc,


      Desktop Explorer Menu
        [AM] 79. c:\windows\system32\nvshell.dll
          .text,.rdata,.data,.idata,.shared,.rsrc,.reloc,


      nView Desktop Context Menu
        [AM] 79. c:\windows\system32\nvshell.dll
          .text,.rdata,.data,.idata,.shared,.rsrc,.reloc,


      Microsoft Office HTML Icon Handler
        [AM] 80. c:\program files\microsoft office\office11\msohev.dll
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,.reloc,


      Web Folders
        [A ] 81. c:\program files\common files\microsoft shared\web folders\msonsext.dll
          Microsoft Corporation
          Microsoft Web Folders
          .text,.data,.rsrc,.reloc,


      Microsoft Office Outlook Desktop Icon Handler
        [A ] 82. c:\program files\microsoft office\office11\mlshext.dll
          Microsoft Corporation
          Microsoft Shell Extension Library
          .text,.data,.cdata,.rsrc,.reloc,


      Microsoft Office Outlook Custom Icon Handler
        [A ] 83. c:\program files\microsoft office\office11\olkfstub.dll
          Microsoft Corporation
          Outlook Shell Hook for Start/Find
          .text,.data,.cdata,.rsrc,.reloc,


      IE History and Feeds Shell Data Source for Windows Search
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      Microsoft Web Browser
        [AM] 52. c:\windows\system32\ieframe.dll
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,.reloc,


      WLMD Message Handler
        [A ] 71. c:\program files\windows live\mail\mailcomm.dll
          Microsoft Corporation
          Windows Live Mail
          .text,.data,.rsrc,.reloc,


      
        [A ] 84. c:\program files\windows live\photo gallery\photoviewershim.dll
          Microsoft Corporation
          Windows Live Drop Target Shim
          .text,.data,.rsrc,.reloc,


      Windows Live Photo Gallery Viewer Drop Target Shim
        [A ] 84. c:\program files\windows live\photo gallery\photoviewershim.dll
          Microsoft Corporation
          Windows Live Drop Target Shim
          .text,.data,.rsrc,.reloc,


      Windows Live Photo Gallery Editor Drop Target Shim
        [A ] 84. c:\program files\windows live\photo gallery\photoviewershim.dll
          Microsoft Corporation
          Windows Live Drop Target Shim
          .text,.data,.rsrc,.reloc,


      Windows Live Photo Gallery Autoplay Drop Target Shim
        [A ] 84. c:\program files\windows live\photo gallery\photoviewershim.dll
          Microsoft Corporation
          Windows Live Drop Target Shim
          .text,.data,.rsrc,.reloc,


      Microsoft.XPS.Shell.Metadata.1
        [A ] 85. c:\windows\system32\xpsshhdr.dll
          Microsoft Corporation
          Package Document Shell Extension Handler
          .text,.data,.rsrc,.reloc,


      Microsoft.XPS.Shell.Thumbnail.1
        [A ] 85. c:\windows\system32\xpsshhdr.dll
          Microsoft Corporation
          Package Document Shell Extension Handler
          .text,.data,.rsrc,.reloc,


      AutoCAD 数字签名图标覆盖处理程序
        [AM] 86. c:\windows\system32\acsignicon.dll
          Autodesk
          AcSignIcon Module
          .text,.rdata,.data,.rsrc,.reloc,


      Autodesk Drawing Preview
        [A ] 87. c:\program files\common files\autodesk shared\thumbnail\acthumbnail16.dll
          Autodesk
          AcThumbnail Module
          .text,.rdata,.data,.rsrc,.reloc,


      Shell Extensions for RealOne Player
        [A ] 88. c:\program files\real\realplayer\rpshell.dll
          RealNetworks, Inc.
          RealPlayer Shell Extensions
          .text,.rdata,.data,.rsrc,.reloc,


      ShellLink for Application References
        [A ] 89. c:\windows\system32\dfshim.dll
          Microsoft Corporation
          Application Deployment Support Library
          .text,.data,.rsrc,.reloc,


      Shell Icon Handler for Application References
        [A ] 89. c:\windows\system32\dfshim.dll
          Microsoft Corporation
          Application Deployment Support Library
          .text,.data,.rsrc,.reloc,


      RISING
        [AM] 90. c:\windows\system32\ravext.dll
          Beijing Rising Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 90. c:\windows\system32\ravext.dll
          Beijing Rising Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
      flysoft.dll
        [AM] 91. c:\windows\system32\flysoft.dll
          Simple_ATL Module
          .text,.rdll,.fdsf,.sloo,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
      WPDShServiceObj
        [AM] 92. c:\windows\system32\wpdshserviceobj.dll
          Microsoft Corporation
          Windows Portable Device Shell Service Object
          .text,.data,.rsrc,.reloc,




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      TkBellExe
        [AM] 93. c:\program files\common files\real\update_ob\realsched.exe
          RealNetworks, Inc.
          RealNetworks Scheduler
          .text,.rdata,.data,.rsrc,


      UUSEE
        [AM] 94. c:\program files\common files\uusee\uuseemediacenter.exe
          UUSEE
          MediaCenter
          .text,.rdata,.data,.rsrc,


      Adobe Reader Speed Launcher
        [A ] 95. c:\program files\adobe\reader 9.0\reader\reader_sl.exe
          Adobe Systems Incorporated
          Adobe Acrobat SpeedLauncher
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 96. c:\program files\rising\antispyware\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          RSTray
          .text,.rdata,.data,.rsrc,


      360Safebox
        [A ] 97. f:\360系列\360safebox\safeboxtray.exe
          360安全中心
          360保险箱
          .text,.rdata,.data,.rsrc,




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 98. c:\windows\system32\bsmain.exe
          Beijing Rising Technology Co., Ltd.
          Rising Antivirus 2008
          .text,.rdata,.data,.rsrc,.reloc,




  + 映像劫持
    + HKCR\.exe
      exefile\启用/禁用数字签名图标\Command
        [A ] 99. c:\windows\system32\acsignopt.exe
          Autodesk
          AcSignOpt Module
          .text,.rdata,.data,.rsrc,



    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 100. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.cdata,.rsrc,


      htmlfile\Print\Command
        [A ] 100. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.cdata,.rsrc,


      htmlfile\TheWorld\Command
        [A ] 101. c:\program files\theworld 2.0\theworld.exe
          Phoenix Studio
          TheWorld Browser
          .text,.rdata,.data,.rsrc,



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 100. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.cdata,.rsrc,


      htmlfile\Print\Command
        [A ] 100. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.cdata,.rsrc,


      htmlfile\TheWorld\Command
        [A ] 101. c:\program files\theworld 2.0\theworld.exe
          Phoenix Studio
          TheWorld Browser
          .text,.rdata,.data,.rsrc,



    + HKCR\.mp3
      KuGoo.MP3\Open\Command
        [A ] 102. f:\acting shoft\kugou2008\kugoo.exe
          酷狗音乐
          酷狗音乐2008
          .text,.itext,.data,.bss,.idata,.tls,.rdata,.reloc,.rsrc,


      KuGoo.MP3\PlayList\Command
        [A ] 102. f:\acting shoft\kugou2008\kugoo.exe
          酷狗音乐
          酷狗音乐2008
          .text,.itext,.data,.bss,.idata,.tls,.rdata,.reloc,.rsrc,




  + 程序初始化和已知动态连接库
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
      AppInit_DLLs
        [AM] 103. c:\windows\system32\kmon.dll
          Beijing Rising Information Technology Co., Ltd.
          KaKa Monitors
          .text,.rdata,.data,.rsrc,.reloc,




  + 打印机监控
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      LIDIL hpzll5ha
        [AM] 104. c:\windows\system32\hpzll5ha.dll
          Hewlett-Packard Company
          LanguageMonitor
          .text,.data,.rsrc,.reloc,


      Microsoft Document Imaging Writer Monitor
        [AM] 105. c:\windows\system32\mdimon.dll
          Microsoft Corporation
          Microsoft? Document Imaging
          .text,.data,.rsrc,.reloc,





+ 其他自启动项目
  + C:\WINDOWS\Tasks
    SogouImeMgr.job
      [A ] 106. f:\acting shoft\sogouinput\4.2.1.2707\pinyinrepair.exe
        Sogou.com Inc.
        搜狗拼音输入法 输入法修复程序
        .text,.rdata,.data,.rsrc,




+ 正在运行的进程
  + 00000160(352) Explorer.EXE
    00400000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    00E20000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,


    60560000[00033000]
      [AM] 86. c:\windows\system32\acsignicon.dll
        Autodesk
        AcSignIcon Module
        .text,.rdata,.data,.rsrc,.reloc,


    3ECA0000[00A91000]
      [AM] 52. c:\windows\system32\ieframe.dll
        Microsoft Corporation
        Internet Explorer
        .text,.data,.rsrc,.reloc,


    60610000[00061000]
      [ M] 112. c:\program files\common files\autodesk shared\acsigncore16.dll
        Autodesk
        AcSignCore Module
        .text,.orpc,.rdata,.data,.rsrc,.reloc,


    07B20000[00488000]
      [ M] 113. c:\windows\system32\macromed\flash\flash10b.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 10.0 r22
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    164A0000[00023000]
      [AM] 92. c:\windows\system32\wpdshserviceobj.dll
        Microsoft Corporation
        Windows Portable Device Shell Service Object
        .text,.data,.rsrc,.reloc,


    093A0000[0002D000]
      [ M] 114. c:\program files\tencent\ssplus\splus.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 115. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    029B0000[00014000]
      [ M] 116. c:\program files\common files\smartcom\dragndropcopyhook.dll
        DragnDropCopyHook Dynamic Link Library
        .text,.rdata,.data,COPYHOOK,.rsrc,.reloc,


    109C0000[0002C000]
      [ M] 117. c:\windows\system32\portabledevicetypes.dll
        Microsoft Corporation
        Windows Portable Device (Parameter) Types Component
        .text,.orpc,.data,.rsrc,.reloc,


    10930000[00049000]
      [ M] 118. c:\windows\system32\portabledeviceapi.dll
        Microsoft Corporation
        Windows Portable Device API Components
        .text,.orpc,.data,.rsrc,.reloc,


    029A0000[00010000]
      [AM] 91. c:\windows\system32\flysoft.dll
        Simple_ATL Module
        .text,.rdll,.fdsf,.sloo,.rdata,.data,.rsrc,.reloc,


    07FE0000[00028000]
      [ M] 119. c:\program files\rising\rav\ravscrch.dll
        Beijing Rising Technology Co., Ltd.
        RavScrCh Module
        .text,.rdata,.data,.rsrc,.reloc,


    09EE0000[0005B000]
      [AM] 73. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll
        Adobe Systems, Inc.
        PDF Shell Extension
        .text,.orpc,.rdata,.data,.rsrc,.reloc,


    09F40000[0004C000]
      [ M] 120. c:\program files\common files\adobe\acrobat\activex\pdfshell.chs
        .rsrc,.reloc,


    23700000[00028000]
      [ M] 121. c:\program files\rising\rav\rscommon.dll
        Beijing Rising Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    0BE50000[00D0D000]
      [AM] 78. c:\windows\system32\nvcpl.dll
        NVIDIA Corporation
        NVIDIA Display Properties Extension
        .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc,


    09AF0000[00037000]
      [ M] 122. c:\windows\system32\nvrszhc.dll
        NVIDIA Corporation
        NVIDIA Simplified Chinese language resource library
        .rsrc,.reloc,


    0B760000[0006A000]
      [ M] 123. c:\windows\system32\nvapi.dll
        NVIDIA Corporation
        NVIDIA NVAPI Library, Version 175.19 
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    0B7D0000[00073000]
      [AM] 79. c:\windows\system32\nvshell.dll
        .text,.rdata,.data,.idata,.shared,.rsrc,.reloc,


    09BE0000[0002E000]
      [AM] 77. c:\program files\winrar\rarext.dll
        .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


    09CE0000[0001C000]
      [AM] 90. c:\windows\system32\ravext.dll
        Beijing Rising Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    09D90000[00015000]
      [ M] 124. f:\acting shoft\bobohu\qvodplayer\qvodband.dll
        Shenzhen QVOD Technology Co.,Ltd
        QvodBand
        .text,.rdata,.data,.rsrc,.reloc,


    16210000[0027E000]
      [AM] 76. c:\windows\system32\wpdshext.dll
        Microsoft Corporation
        Portable Devices Shell Extension
        .text,.data,.rsrc,.reloc,


    09B90000[00046000]
      [AM] 75. c:\windows\system32\audiodev.dll
        Microsoft Corporation
        Portable Media Devices Shell Extension
        .text,.data,.rsrc,.reloc,


    0B230000[0005F000]
      [AM] 54. c:\program files\tencent\ssplus\saddr1.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_S,.rsrc,.reloc,


    0AFF0000[0003B000]
      [AM] 55. f:\acting shoft\comdlls\tdatonce_now.dll
        深圳市迅雷网络技术有限公司
        TDAtOnce
        .text,.rdata,.data,sharedda,.rsrc,.reloc,


    7C120000[0001A000]
      [ M] 125. c:\windows\system32\atl71.dll
        Microsoft Corporation
        ATL Module for Windows (ANSI)
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 126. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 127. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    325C0000[00012000]
      [AM] 80. c:\program files\microsoft office\office11\msohev.dll
        Microsoft Corporation
        Microsoft Office 2003 component
        .text,.data,.rsrc,.reloc,



  + 000001ac(428) smss.exe

  + 000001e4(484) csrss.exe

  + 000001fc(508) winlogon.exe
    01000000[0007D000]
      [ M] 128. c:\windows\system32\winlogon.exe
        Microsoft Corporation
        Windows NT Logon Application
        .text,.data,.rsrc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    73D50000[00003000]
      [AM] 45. c:\windows\system32\wgalogon.dll
        .text,.rsrc,


    10000000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    01630000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,


    72C80000[00008000]
      [ M] 115. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000228(552) services.exe
    46040000[0000F000]
      [ M] 129. c:\windows\apppatch\acadproc.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,



  + 00000234(564) lsass.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,



  + 000002cc(716) svchost.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,



  + 00000308(776) svchost.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,



  + 00000330(816) CCenter.exe
    00400000[00029000]
      [AM] 12. c:\program files\rising\rav\ccenter.exe
        Beijing Rising Technology Co., Ltd.
        CCenter
        .text,.rdata,.data,.rsrc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,



  + 00000344(836) svchost.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    01A00000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    50E60000[0000C000]
      [ M] 130. c:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,



  + 0000038c(908) stMgr.exe
    00400000[000B3000]
      [ M] 131. f:\acting shoft\stmgr.exe
        北京暴风网际科技有限公司
        暴风影音媒体管理
        .text,.rdata,.data,.rsrc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    10000000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    00C50000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,


    02960000[00015000]
      [ M] 132. f:\acting shoft\bfoptdll.dll
        北京暴风网际科技有限公司
        .text,.rdata,.data,.rsrc,.reloc,


    75FF0000[00065000]
      [ M] 133. f:\acting shoft\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    03060000[0001E000]
      [ M] 134. f:\acting shoft\corelog.dll
        北京暴风网际科技有限公司
        暴风影音播放组件
        .text,.rdata,.data,.rsrc,.reloc,


    01000000[0002D000]
      [ M] 114. c:\program files\tencent\ssplus\splus.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 000003c8(968) svchost.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,



  + 000003dc(988) svchost.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,



  + 0000049c(1180) spoolsv.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    00A00000[00021000]
      [AM] 104. c:\windows\system32\hpzll5ha.dll
        Hewlett-Packard Company
        LanguageMonitor
        .text,.data,.rsrc,.reloc,


    00C40000[00008000]
      [AM] 105. c:\windows\system32\mdimon.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    00E30000[00048000]
      [ M] 135. c:\windows\system32\spool\prtprocs\w32x86\hpzpp5ha.dll
        Hewlett-Packard Corporation
        .text,.data,.rsrc,.reloc,


    00C60000[00008000]
      [ M] 136. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    3F420000[0001B000]
      [ M] 137. c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
        Microsoft Corporation
        Print Filter Pipeline Proxy
        .text,.orpc,.data,.rsrc,.reloc,



  + 000004c4(1220) STacSV.exe
    00400000[00036000]
      [AM] 14. c:\program files\idt\intelxpv_v100\wdm\stacsv.exe
        IDT, Inc.
        IDT PC Audio
        .text,.rdata,.data,.rsrc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 115. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    10000000[0006D000]
      [ M] 138. c:\windows\system32\stacapi.dll
        IDT, Inc.
        IDT PC Audio
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000530(1328) svchost.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    006C0000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,



  + 00000558(1368) stormliv.exe
    00400000[00091000]
      [ M] 139. f:\acting shoft\stormliv.exe
        北京暴风网际科技有限公司
        暴风影音媒体控制中心
        .text,.rdata,.data,.rsrc,


    75FF0000[00065000]
      [ M] 133. f:\acting shoft\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00390000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    10000000[00015000]
      [ M] 132. f:\acting shoft\bfoptdll.dll
        北京暴风网际科技有限公司
        .text,.rdata,.data,.rsrc,.reloc,


    02370000[00049000]
      [ M] 140. f:\acting shoft\box\boxlog.dll
        北京暴风网际科技有限公司
        暴风影视组件
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000580(1408) svchost.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    10000000[00021000]
      [AM] 8. c:\program files\hp\digital imaging\bin\hpqddsvc.dll
        Hewlett-Packard Co.
        HP CUE DeviceDiscovery Service
        .text,.rdata,.data,.rsrc,.reloc,


    3AF00000[0002D000]
      [ M] 141. c:\program files\hp\digital imaging\bin\hpqddcmn.dll
        Hewlett-Packard Co.
        HP CUE DeviceDiscovery Common Library
        .text,.rdata,.data,.rsrc,.reloc,


    14A00000[00036000]
      [AM] 7. c:\program files\hp\digital imaging\bin\hpqcxs08.dll
        Hewlett-Packard Co.
        HP CUE Context Manager Objects
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000594(1428) nvsvc32.exe
    00400000[0002C000]
      [AM] 10. c:\windows\system32\nvsvc32.exe
        NVIDIA Corporation
        NVIDIA Driver Helper Service, Version 175.19
        .text,.rdata,.data,.rsrc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    00A40000[0006A000]
      [ M] 123. c:\windows\system32\nvapi.dll
        NVIDIA Corporation
        NVIDIA NVAPI Library, Version 175.19 
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,



  + 000005c8(1480) Rundll32.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    10000000[0002D000]
      [ M] 114. c:\program files\tencent\ssplus\splus.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    00C10000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    01010000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,



  + 000005e0(1504) SeaPort.exe
    00400000[0003B000]
      [AM] 13. c:\program files\microsoft\search enhancement pack\seaport\seaport.exe
        Microsoft Corp.
        Microsoft SeaPort Search Enhancement Broker
        .text,.data,.rsrc,.reloc,


    002D0000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    46CC0000[00025000]
      [ M] 142. c:\program files\microsoft\search enhancement pack\seashadow\seashado.dll
        Microsoft Corp.
        Microsoft Search Shadow
        .text,.data,.rsrc,.reloc,



  + 00000628(1576) realsched.exe
    00400000[00032000]
      [AM] 93. c:\program files\common files\real\update_ob\realsched.exe
        RealNetworks, Inc.
        RealNetworks Scheduler
        .text,.rdata,.data,.rsrc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    10000000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    00BB0000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,


    00F80000[0002D000]
      [ M] 114. c:\program files\tencent\ssplus\splus.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 00000634(1588) svchost.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,



  + 0000064c(1612) TencentUpdateSvc.exe
    00400000[0000B000]
      [AM] 15. c:\program files\tencent\qqsoftmgr\tencentupdatesvc.exe
        Tencent
        Tencent Software Update Service
        UPX0,UPX1,.rsrc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,



  + 00000698(1688) UUSeeMediaCenter.exe
    00400000[000F5000]
      [AM] 94. c:\program files\common files\uusee\uuseemediacenter.exe
        UUSEE
        MediaCenter
        .text,.rdata,.data,.rsrc,


    00380000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    10000000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    01450000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,


    3ECA0000[00A91000]
      [AM] 52. c:\windows\system32\ieframe.dll
        Microsoft Corporation
        Internet Explorer
        .text,.data,.rsrc,.reloc,


    06240000[00488000]
      [ M] 113. c:\windows\system32\macromed\flash\flash10b.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 10.0 r22
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 115. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    07C30000[0002D000]
      [ M] 114. c:\program files\tencent\ssplus\splus.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    09A90000[000F2000]
      [ M] 143. c:\program files\common files\uusee\in_net.dll
        www.uusee.com
        in_net
        .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc,


    0A1E0000[00018000]
      [ M] 144. c:\program files\common files\uusee\cocode.dll
        CoCode 动态链接库
        .text,.rdata,.data,.rsrc,.reloc,


    0BAC0000[00028000]
      [ M] 119. c:\program files\rising\rav\ravscrch.dll
        Beijing Rising Technology Co., Ltd.
        RavScrCh Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000910(2320) rstray.exe
    00400000[00023000]
      [AM] 96. c:\program files\rising\antispyware\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        RSTray
        .text,.rdata,.data,.rsrc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    10000000[0003C000]
      [ M] 145. c:\program files\rising\antispyware\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    00950000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    00CD0000[0002D000]
      [ M] 114. c:\program files\tencent\ssplus\splus.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    23800000[00022000]
      [ M] 146. c:\program files\rising\antispyware\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 147. c:\program files\rising\antispyware\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 148. c:\program files\rising\antispyware\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00D60000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    01160000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,


    02CC0000[00024000]
      [ M] 149. c:\program files\rising\antispyware\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    02CF0000[00019000]
      [ M] 150. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00026000]
      [ M] 151. c:\program files\rising\antispyware\rscommon.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02D30000[00030000]
      [ M] 152. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 153. c:\program files\rising\antispyware\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03190000[0005C000]
      [ M] 154. c:\program files\rising\antispyware\runiep.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware tray
        .text,.rdata,.data,.rsrc,.reloc,


    03200000[0001F000]
      [ M] 155. c:\program files\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03220000[00024000]
      [ M] 156. c:\program files\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    780C0000[00061000]
      [ M] 157. c:\program files\rising\antispyware\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    04460000[0001C000]
      [AM] 90. c:\windows\system32\ravext.dll
        Beijing Rising Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000928(2344) ctfmon.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    10000000[0002D000]
      [ M] 114. c:\program files\tencent\ssplus\splus.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    00A90000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    00E70000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,



  + 00001460(5216) wmiprvse.exe
    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00030000]
      [ M] 152. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    007D0000[00019000]
      [ M] 150. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,



  + 00001730(5936) ras.exe
    00400000[0000B000]
      [ M] 158. c:\program files\rising\antispyware\ras.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 159. c:\program files\rising\antispyware\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 148. c:\program files\rising\antispyware\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 109. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    10000000[0002D000]
      [ M] 114. c:\program files\tencent\ssplus\splus.dll
        腾讯
        腾讯中文搜搜
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    00AD0000[00047000]
      [ M] 160. c:\program files\rising\antispyware\kakamgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 147. c:\program files\rising\antispyware\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B20000[00019000]
      [ M] 150. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    00B50000[0001F000]
      [ M] 155. c:\program files\rising\rav\proccom.dll
        Beijing Rising Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B70000[00024000]
      [ M] 156. c:\program files\rising\rav\rscommx2.dll
        Beijing Rising Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00CC0000[00030000]
      [ M] 152. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F30000[00058000]
      [ M] 161. c:\program files\rising\antispyware\dbmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 146. c:\program files\rising\antispyware\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    01090000[0002D000]
      [ M] 162. c:\program files\rising\antispyware\pweb.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    010C0000[000C1000]
      [ M] 163. c:\program files\rising\antispyware\pscan.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01190000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    011A0000[0002F000]
      [ M] 164. c:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01200000[00070000]
      [ M] 165. c:\program files\rising\antispyware\pset.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01270000[0002A000]
      [ M] 166. c:\program files\rising\antispyware\pdefend.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    014D0000[000B6000]
      [ M] 167. c:\program files\rising\antispyware\ptools.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01690000[0008C000]
      [ M] 168. c:\program files\rising\antispyware\psysinfo.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    3ECA0000[00A91000]
      [AM] 52. c:\windows\system32\ieframe.dll
        Microsoft Corporation
        Internet Explorer
        .text,.data,.rsrc,.reloc,


    01940000[0001C000]
      [AM] 90. c:\windows\system32\ravext.dll
        Beijing Rising Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 153. c:\program files\rising\antispyware\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01B90000[0020B000]
      [ M] 110. c:\windows\system32\sogoupy.ime
        Sogou.com Inc.
        搜狗拼音输入法
        UPX0,UPX1,.rsrc,


    01F70000[00032000]
      [ M] 111. f:\acting shoft\sogouinput\4.2.1.2707\resource.dll
        Sogou.com Inc.
        搜狗拼音输入法
        .rsrc,.reloc,



  + 00001770(6000) knownsvr.exe
    00400000[00072000]
      [ M] 169. c:\program files\rising\antispyware\knownsvr.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    10000000[0002F000]
      [ M] 164. c:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    00390000[00009000]
      [ M] 107. c:\windows\system32\normaliz.dll
        Microsoft Corporation
        Unicode Normalization DLL
        .text,.data,.rsrc,.reloc,


    3EAB0000[001E8000]
      [ M] 108. c:\windows\system32\iertutil.dll
        Microsoft Corporation
        Run time utility for Internet Explorer
        .text,.data,.rsrc,.reloc,


    60000000[00074000]
      [AM] 103. c:\windows\system32\kmon.dll
        Beijing Rising Information Technology Co., Ltd.
        KaKa Monitors
        .text,.rdata,.data,.rsrc,.reloc,


    00BD0000[00030000]
      [ M] 152. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00C00000[00019000]
      [ M] 150. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,