[CODE]

2009-10-27,04:00:38

SysLog Scanner 3.0 - build 200900810
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 3 (build 2600)


================================================================
注册项


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <SoundMan> <SOUNDMAN.EXE> [(Verified)Realtek Semiconductor Corp., 5.1.0.27]
    <NvCplDaemon> <RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup> [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2105) | (Verified)NVIDIA Corporation, 6.14.10.5303]
    <nwiz> <nwiz.exe /install> [NVIDIA Corporation, 6.14.10.5303]
    <SKDaemon> <C:\Program Files\Lenovo\Legend Standard Keyboard\skdaemon.exe> [版权所有 (C) 2002, 1, 0, 0, 1]
    <Shuttle.exe> <C:\Program Files\联想(北京)有限公司\幸福飞梭\Shuttle.exe> [Copyright (C) 2003, 1, 0, 0, 1]
    <ControlCenter.exe> <"C:\Program Files\Lenovo\RemoteControlCenter\ControlCenter.exe"> [N/A]
    <RmtService > <C:\Program Files\MUSE\RmtService.exe> [Bitland Information Technology Co.,Ltd, 1, 0, 0, 7]
    <LightCtrl > <C:\Program Files\MUSE\lightCtrl.exe> [N/A]
    <runeip> <"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup> [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.17]
    <Adobe Reader Speed Launcher> <"C:\新文件夹\Reader\Reader_sl.exe"> [(Verified)Adobe Systems Incorporated, 9.2.0.124]
    <Adobe ARM> <"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"> [(Verified)Adobe Systems Incorporated, 1.0.5.0]
    <RavTray> <"C:\Program Files\Rising\Rav\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.10]
    <RFWTray> <"C:\Program Files\Rising\Rfw\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.10]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
    <{6096E38F-5AC1-4391-8EC4-75DFA92FB32F}> <http://www.lenovo.com> []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MenuExt]
    <添加到QQ表情> <C:\Documents and Settings\Administrator\桌面\新建文件夹\Bin\AddEmotion.htm> [N/A]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors]
    <Microsoft Document Imaging Writer Monitor> <mdimon.dll> [Microsoft Corporation, 11.3.1897.0]

================================================================
启动组

[QQ游戏启动加速程序]
    <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\QQ游戏启动加速程序.lnk> <"C:\Documents and Settings\Administrator\桌面\新建文件夹 (2)\QQGAME\Accel.exe"> [深圳市腾讯计算机系统有限公司, 2, 0, 103, 5]

================================================================
任务计划


================================================================
组件


--------------------------------
ShellExecuteHook
    [ShlExecHack Class]
        <{32CD708B-60A7-4C00-9377-D73EAA495F0F}> <C:\WINDOWS\system32\RavExt.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]

--------------------------------
Shell Extension
    [Display Panning CPL Extension]
        <{42071714-76d4-11d1-8b24-00a0c9068ff3}> <deskpan.dll> []
    [HyperTerminal Icon Ext]
        <{88895560-9AA2-1069-930E-00AA0030EBC8}> <C:\WINDOWS\system32\hticons.dll> [(Verified)Hilgraeve, Inc., 5.1.2600.0]
    [任务栏和「开始」菜单]
        <{0DF44EAA-FF21-4412-828E-260A8728E7F1}> <> []
    [Desktop Explorer]
        <{1CDB2949-8F65-4355-8456-263E7C208A5D}> <C:\WINDOWS\system32\nvshell.dll> [NVIDIA Corporation, 6.14.10.5303]
    [WinRAR shell extension]
        <{B41DB860-8EE4-11D2-9906-E49FADC173CA}> <C:\Program Files\WinRAR\rarext.dll> [N/A]
    [RISING]
        <{1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}> <C:\WINDOWS\system32\RavExt.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]

--------------------------------
Protocols
    [Microsoft Infotech Storage Protocol for IE 4.0]
        <{0A9007C0-4076-11D3-8789-0000F8105754}> <C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL> [Microsoft Corporation, 05.02.9336.01]

--------------------------------
Context Menu
    [RisingKaKaExt]
        <{356B11FA-929F-4eb7-8B26-D7E3184DDD16}> <C:\WINDOWS\system32\KakaExt.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [RisingRavExt]
        <{1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}> <C:\WINDOWS\system32\RavExt.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [WinRAR]
        <{B41DB860-8EE4-11D2-9906-E49FADC173CA}> <C:\Program Files\WinRAR\rarext.dll> [N/A]
    [nView]
        <{1E9B04FB-F9E5-4718-997B-B8DA88302A48}> <C:\WINDOWS\system32\nvshell.dll> [NVIDIA Corporation, 6.14.10.5303]

--------------------------------
BrowserHelperObject
    [Adobe PDF Link Helper]
        <{18DF081C-E8AD-4283-A596-FA578C2EBDC3}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll> [(Verified)Adobe Systems Incorporated, 9.1.0.2009022700]
    [卡卡上网安全助手]
        <{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}> <C:\WINDOWS\system32\UrlFilter.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15]

--------------------------------
ActiveX Extension
    [卡卡上网安全助手]
        <{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}> <C:\WINDOWS\system32\UrlFilter.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15]

================================================================
服务

[Human Interface Device Access / HidServ][Stopped/Disabled]
    <%SystemRoot%\System32\svchost.exe -k netsvcs --> "%SystemRoot%\System32\hidserv.dll">  [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]

[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
    <%SystemRoot%\system32\nvsvc32.exe>  [(Verified)NVIDIA Corporation, 6.14.10.5303]
[Rav Service / RsRavMon][Running/Auto Start]
    <"C:\Program Files\Rising\Rav\RavMonD.exe">  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
[RFW Service / RsRFWMon][Running/Auto Start]
    <"C:\Program Files\Rising\Rfw\RavMonD.exe">  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]

================================================================
驱动


[SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS) / alcan5ln][Running/Manual Start]
    <system32\DRIVERS\alcan5ln.sys>  [(Verified)THOMSON, 300.7.0.2]
[SpeedTouch ADSL Modem ATM Transport / alcaudsl][Running/Manual Start]
    <system32\DRIVERS\alcaudsl.sys>  [(Verified)THOMSON, 300.7.0.2]
[Service for WDM 3D Audio Driver / ALCXSENS][Running/Manual Start]
    <system32\drivers\ALCXSENS.SYS>  [(Verified)Sensaura, 5.10.00.3513]
[Service for Realtek AC97 Audio (WDM) / ALCXWDM][Running/Manual Start]
    <system32\drivers\ALCXWDM.SYS>  [(Verified)Realtek Semiconductor Corp., 5.10.5580]
[AtpKrnl / AtpKrnl][Running/Manual Start]
    <System32\Drivers\AtpKrnl.sys>  [(Verified)www.arswp.com, 3.00]
[VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver / FETNDIS][Running/Manual Start]
    <system32\DRIVERS\fetnd5.sys>  [(Verified)VIA Technologies, Inc.              , 2.66]
[hookcont / hookcont][Running/System Start]
    <system32\drivers\HookCont.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 1]
[hooksys / hooksys][Running/System Start]
    <system32\drivers\HookSys.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 23]
[nv / nv][Running/Manual Start]
    <system32\DRIVERS\nv4_mini.sys>  [(Verified)NVIDIA Corporation, 6.14.10.5303]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148)]
[Rising RfwARP Driver / RFWARP][Running/Auto Start]
    <system32\DRIVERS\rfwarp.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
[Rising RfwBase Driver / RfwBase9][Running/Manual Start]
    <system32\DRIVERS\rfwbase.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.3]
[rfwtdi / rfwtdi][Running/Auto Start]
    <\??\C:\Program Files\Rising\Rfw\rfwtdi.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
[rsassist / rsassist][Running/Auto Start]
    <system32\drivers\rsassist.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 1]
[rsfwdrv / rsfwdrv][Running/System Start]
    <\??\C:\Program Files\Rising\Rfw\rsfwdrv.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.32]
[RsNTGDI / RsNTGDI][Running/Boot Start]
    <system32\Drivers\RsNTGdi.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
[Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys>  [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086]
[PS/2 Keyboard Filter Driver for WinXp / Skkbdf][Running/Manual Start]
    <system32\DRIVERS\Skkbdf.sys>  [(Verified)Silitek Corp., 1.0.1.0]

================================================================
活动进程


[PID: 1536 / SYSTEM]   C:\Program Files\Rising\Rav\RavMonD.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\combase.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 16]
    C:\Program Files\Rising\Rav\cnt09.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\moncomm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\Program Files\Rising\Rav\MonBase.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\Rslog.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.40]
    C:\Program Files\Rising\Rav\mondrv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\defmon.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 41]
    C:\Program Files\Rising\Rav\moncom08.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\MonRule.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\Program Files\Rising\Rav\FileMon.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 28]
    C:\Program Files\Rising\Rav\MailMon.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22]
    C:\Program Files\Rising\Rav\HookWeb.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12]
    C:\Program Files\Rising\Rav\rsindent.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7]
    C:\Program Files\Rising\Rav\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\Rav\taskplug.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 8]
    C:\Program Files\Rising\Rav\scansrvp.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.7]
    C:\Program Files\Rising\Rav\cnt08.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\proccomm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\RSAPPMGR.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rav\CfgDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rav\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\Rav\Hooksys.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 3]
    C:\Program Files\Rising\Rav\ProcCom.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    C:\Program Files\Rising\Rav\RsCommX2.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    C:\Program Files\Rising\Rav\HookCont.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 1]
    C:\Program Files\Rising\Rav\BACore.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 27]
    C:\Program Files\Rising\Rav\recomp.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\refs.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\viruslib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\relibldr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\rsnetsvr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\bawhite.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\RSStore.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\Scanner.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.17]
    C:\Program Files\Rising\Rav\ScanAdd.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
    C:\Program Files\Rising\Rav\rstask.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\rsstub.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\ScanSrv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.3]
    C:\Program Files\Rising\Rav\scanpe.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10]
    C:\Program Files\Rising\Rav\pearc.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\ur000.dat   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\urutils.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\ffr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\nvfile.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\scanexec.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\unexe.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\scanex.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 30]
    C:\Program Files\Rising\Rav\scantj.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\methodex.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\revm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\heurex.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\Program Files\Rising\Rav\pecompd.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\extsfx.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\extmail.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\scansct.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]

[PID: 1548 / SYSTEM]   C:\Program Files\Rising\Rfw\RavMonD.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rfw\combase.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 16]
    C:\Program Files\Rising\Rfw\cnt09.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rfw\MonBase.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rfw\MonComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\Program Files\Rising\Rfw\rfwlog.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.12]
    C:\Program Files\Rising\Rfw\rfwrule.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Rising\Rfw\rfwsrv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.2]
    C:\Program Files\Rising\Rfw\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\Rfw\mPorts.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rfw\rfwdrvc.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    C:\Program Files\Rising\Rfw\Rfwdrv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.5]
    C:\Program Files\Rising\Rfw\rsnetsvr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rfw\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\Rfw\RfwArp.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.5]
    C:\Program Files\Rising\Rfw\urlrule.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\Program Files\Rising\Rfw\recomp.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rfw\refs.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rfw\viruslib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rfw\relibldr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rfw\rfwproxy.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 40]
    C:\Program Files\Rising\Rfw\rsindent.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7]
    C:\Program Files\Rising\Rfw\taskplug.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 8]
    C:\Program Files\Rising\Rfw\RSAPPMGR.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rfw\CfgDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rfw\proccomm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rfw\NComm2.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rfw\rstask.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rfw\rsstub.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rfw\urllib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]

[PID: 1560 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-2111)]
    c:\windows\system32\msi.dll   [Microsoft Corporation, 4.5.6001.22159]

[PID: 280 / Administrator]   C:\WINDOWS\Explorer.EXE   [(Verified)Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]
    C:\WINDOWS\system32\msi.dll   [Microsoft Corporation, 4.5.6001.22159]
    C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll   [(Verified)Adobe Systems, Inc., 9.1.0.2009022700]
    C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS   [N/A]
    C:\WINDOWS\system32\nvshell.dll   [NVIDIA Corporation, 6.14.10.5303]
    C:\WINDOWS\system32\NVWRSZHC.DLL   [NVIDIA Corporation, 6.14.10.5303]

[PID: 316 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.5512 (xpsp.080413-0852)]
    C:\WINDOWS\system32\mdimon.dll   [Microsoft Corporation, 11.3.1897.0]
    C:\WINDOWS\system32\msi.dll   [Microsoft Corporation, 4.5.6001.22159]
    C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll   [Microsoft Corporation, 11.3.1897.0]

[PID: 536 / SYSTEM]   C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE   [(Verified)Microsoft Corporation, 7.00.9466]
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\2052\mdmui.dll   [Microsoft Corporation, 7.00.9466]

[PID: 576 / SYSTEM]   C:\WINDOWS\system32\nvsvc32.exe   [(Verified)NVIDIA Corporation, 6.14.10.5303]

[PID: 1704 / Administrator]   C:\WINDOWS\SOUNDMAN.EXE   [(Verified)Realtek Semiconductor Corp., 5.1.0.27]

[PID: 1748 / Administrator]   C:\Program Files\Lenovo\Legend Standard Keyboard\skdaemon.exe   [版权所有 (C) 2002, 1, 0, 0, 1]
    C:\Program Files\Lenovo\Legend Standard Keyboard\MacFun.dll   [Silitek, 1, 0, 0, 0]
    C:\Program Files\Lenovo\Legend Standard Keyboard\OpenDriver.dll   [Silitek, 1, 0, 0, 0]
    C:\Program Files\Lenovo\Legend Standard Keyboard\OSD.dll   [silitek, 1, 0, 0, 1]
    C:\Program Files\Lenovo\Legend Standard Keyboard\lxkeyled.dll   [Silitek, 1, 0, 0, 1]

[PID: 1756 / Administrator]   C:\Program Files\联想(北京)有限公司\幸福飞梭\Shuttle.exe   [Copyright (C) 2003, 1, 0, 0, 1]
    C:\Program Files\联想(北京)有限公司\幸福飞梭\SK_OSD.dll   [silitek, 1, 0, 0, 1]
    C:\Program Files\联想(北京)有限公司\幸福飞梭\VolumeOsd.dll   [N/A]
    C:\Program Files\联想(北京)有限公司\幸福飞梭\ScrOSD32.dll   [N/A]

[PID: 1784 / Administrator]   C:\Program Files\Lenovo\RemoteControlCenter\ControlCenter.exe   [N/A]
    C:\Program Files\Lenovo\RemoteControlCenter\SK_OSD.dll   [silitek, 1, 0, 0, 1]
    C:\Program Files\Lenovo\RemoteControlCenter\VolumeOsd.dll   [N/A]
    C:\Program Files\Lenovo\RemoteControlCenter\ScrOSD32.dll   [N/A]

[PID: 1824 / Administrator]   C:\Program Files\MUSE\RmtService.exe   [Bitland Information Technology Co.,Ltd, 1, 0, 0, 7]

[PID: 2056 / Administrator]   C:\Program Files\MUSE\lightCtrl.exe   [N/A]

[PID: 2124 / Administrator]   C:\Program Files\Rising\AntiSpyware\rstray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.17]
    C:\Program Files\Rising\AntiSpyware\rsmginfo.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    C:\Program Files\Rising\AntiSpyware\RsXML.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    C:\Program Files\Rising\AntiSpyware\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\Program Files\Rising\AntiSpyware\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Rising\AntiSpyware\ComServ.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.31]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\AntiSpyware\rscommon.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.1.1]
    C:\Program Files\Rising\AntiSpyware\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\AntiSpyware\pngdll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    C:\Program Files\Rising\AntiSpyware\runiep.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.44]
    C:\Program Files\Rising\AntiSpyware\NComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.11]
    C:\Program Files\Rising\Rav\ProcCom.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    C:\Program Files\Rising\AntiSpyware\RsCommX2.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]

[PID: 2288 / Administrator]   C:\Program Files\Rising\Rav\RsTray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.10]
    C:\Program Files\Rising\Rav\comserv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.15]
    C:\Program Files\Rising\Rav\rslang.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\Rav\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\Rav\ProcComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\rsxml.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\MonState.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\ScanEvnt.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.3]
    C:\Program Files\Rising\Rav\rsguilib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 54]
    C:\Program Files\Rising\Rav\rsconf.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\Program Files\Rising\Rav\rspalvd.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.6]
    C:\Program Files\Rising\Rav\ravbintl.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21]
    C:\Program Files\Rising\Rav\mruleui.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\MonTray.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.67]
    C:\Program Files\Rising\Rav\RavITray.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\rsmginfo.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\scanleak.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\ravppops.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 20]
    C:\Program Files\Rising\Rav\RSAPPMGR.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rav\CfgDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rav\PngDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    C:\Program Files\Rising\Rav\ScanPrxy.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.3]

[PID: 2328 / Administrator]   C:\Program Files\Rising\Rfw\RsTray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.10]
    C:\Program Files\Rising\Rfw\comserv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.15]
    C:\Program Files\Rising\Rfw\rslang.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rfw\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\Rfw\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\Rfw\ProcComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rfw\rsxml.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rfw\MonState.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rfw\rfwrule.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Rising\Rfw\rsconf.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\Program Files\Rising\Rfw\rspalvd.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.6]
    C:\Program Files\Rising\Rfw\rsguilib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 54]
    C:\Program Files\Rising\Rfw\ravbintl.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21]
    C:\Program Files\Rising\Rfw\rsnetsvr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rfw\rsmginfo.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rfw\rfwtray.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 37]
    C:\Program Files\Rising\Rfw\ravppops.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 20]
    C:\Program Files\Rising\Rfw\RSAPPMGR.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rfw\CfgDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rfw\PngDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    C:\Program Files\Rising\Rfw\rfwlog.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.12]

[PID: 2908 / Administrator]   C:\Program Files\Rising\Rav\rslogvw.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Rising\Rav\rspalmgr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.20]
    C:\Program Files\Rising\Rav\RSXML.DLL   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\RsGuiLib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 54]
    C:\Program Files\Rising\Rav\rslang.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\logquery.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.6]
    C:\Program Files\Rising\Rav\PngDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    C:\Program Files\Rising\Rav\ProcComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\rslogvw.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.1.5]

[PID: 4004 / Administrator]   C:\Program Files\arswp3\arswp3.exe   [(Verified)Windows 清 理 助 手, 3.0.9.916]
    C:\Program Files\Rising\Rav\RavScrCh.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\WINDOWS\system32\msi.dll   [Microsoft Corporation, 4.5.6001.22159]
    C:\Program Files\Common Files\Microsoft Shared\INK\PENCHS.DLL   [Microsoft Corporation, 1.0.1038.0]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]

================================================================
文件关联


================================================================
Autorun.Inf

================================================================
Winsock提供者


================================================================
隐藏进程


================================================================
可疑文件


================================================================
HOSTS

    127.0.0.1 localhost


[/CODE]