未知家族病毒分析
扫描结果:
无可疑文件

系统活动进程
C:\PROGRAM FILES\RISING\RFW\RFWSTUB.EXE
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RFW\RSCOMMON.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\STARSEC\PLUGSERVER.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\STARSEC\PLUGINS\PLUGSTARKEY220.DLL

C:\PROGRAM FILES\WINDOWS LIVE\TOOLBAR\WLTUSER.EXE
C:\PROGRAM FILES\WINDOWS LIVE\TOOLBAR\SQMAPI.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\WINDOWS LIVE\TOOLBAR\MSIDCRL40.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL

C:\PROGRAM FILES\RISING\RFW\RFWMAIN.EXE
C:\WINDOWS\SYSTEM32\MFC71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\PROGRAM FILES\RISING\RFW\RSGUILIB.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RFW\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RFW\RSCOMMX2.DLL
C:\PROGRAM FILES\RISING\RFW\RSAPPMGR.DLL
C:\PROGRAM FILES\RISING\RFW\CFGDLL.DLL
C:\PROGRAM FILES\RISING\RFW\RSCOMMON.DLL
C:\PROGRAM FILES\RISING\RFW\RFWCTRL.DLL
C:\PROGRAM FILES\RISING\RFW\RSXML.DLL
C:\PROGRAM FILES\RISING\RFW\PNGDLL.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\RISING\RFW\RFWRULE.DLL

C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\WINDOWS\SYSTEM32\EBPMON2.DLL
C:\WINDOWS\SYSTEM32\AWMON.DLL
C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\FILTERPIPELINEPRINTPROC.DLL

C:\PROGRAM FILES\MICROSOFT\SEARCH ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\MICROSOFT\SEARCH ENHANCEMENT PACK\SEASHADOW\SEASHADO.DLL

C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\PCANOTIFY.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV

C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\RHINOSOFT.COM\SERV-U\SERVUDAEMON.EXE
C:\PROGRAM FILES\RHINOSOFT.COM\SERV-U\ZLIB1.DLL
C:\PROGRAM FILES\RHINOSOFT.COM\SERV-U\RHINONET.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RHINOSOFT.COM\SERV-U\LIBEAY32.DLL
C:\PROGRAM FILES\RHINOSOFT.COM\SERV-U\SSLEAY32.DLL

C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE
C:\PROGRAM FILES\RISING\RAV\COMBASE.DLL
C:\PROGRAM FILES\RISING\RAV\CNT09.DLL
C:\PROGRAM FILES\RISING\RAV\MONCOMM.DLL
C:\PROGRAM FILES\RISING\RAV\MONBASE.DLL
C:\PROGRAM FILES\RISING\RAV\RSLOG.DLL
C:\PROGRAM FILES\RISING\RAV\MONDRV.DLL
C:\PROGRAM FILES\RISING\RAV\DEFMON.DLL
C:\PROGRAM FILES\RISING\RAV\MONCOM08.DLL
C:\PROGRAM FILES\RISING\RAV\MONRULE.DLL
C:\PROGRAM FILES\RISING\RAV\FILEMON.DLL
C:\PROGRAM FILES\RISING\RAV\MAILMON.DLL
C:\PROGRAM FILES\RISING\RAV\HOOKWEB.DLL
C:\PROGRAM FILES\RISING\RAV\RSINDENT.DLL
C:\PROGRAM FILES\RISING\RAV\SYSLAY.DLL
C:\PROGRAM FILES\RISING\RAV\TASKPLUG.DLL
C:\PROGRAM FILES\RISING\RAV\SCANSRVP.DLL
C:\PROGRAM FILES\RISING\RAV\CNT08.DLL
C:\PROGRAM FILES\RISING\RAV\PROCCOMM.DLL
C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL
C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL
C:\PROGRAM FILES\RISING\RAV\COMX3.DLL
C:\PROGRAM FILES\RISING\RAV\HOOKSYS.DLL
C:\PROGRAM FILES\RISING\RAV\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMX2.DLL
C:\PROGRAM FILES\RISING\RAV\HOOKCONT.DLL
C:\PROGRAM FILES\RISING\RAV\BACORE.DLL
C:\PROGRAM FILES\RISING\RAV\RECOMP.DLL
C:\PROGRAM FILES\RISING\RAV\REFS.DLL
C:\PROGRAM FILES\RISING\RAV\VIRUSLIB.DLL
C:\PROGRAM FILES\RISING\RAV\RELIBLDR.DLL
C:\PROGRAM FILES\RISING\RAV\RSNETSVR.DLL
C:\PROGRAM FILES\RISING\RAV\BAWHITE.DLL
C:\PROGRAM FILES\RISING\RAV\RSSTORE.DLL
C:\PROGRAM FILES\RISING\RAV\SCANNER.DLL
C:\PROGRAM FILES\RISING\RAV\SCANADD.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\RISING\RAV\NCOMM2.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RAV\RSTASK.DLL
C:\PROGRAM FILES\RISING\RAV\RSSTUB.DLL
C:\PROGRAM FILES\RISING\RAV\SCANSRV.DLL
C:\PROGRAM FILES\RISING\RAV\SCANPE.DLL
C:\PROGRAM FILES\RISING\RAV\PEARC.DLL
C:\PROGRAM FILES\RISING\RAV\UR000.DAT
C:\PROGRAM FILES\RISING\RAV\URUTILS.DLL
C:\PROGRAM FILES\RISING\RAV\FFR.DLL
C:\PROGRAM FILES\RISING\RAV\NVFILE.DLL
C:\PROGRAM FILES\RISING\RAV\SCANEXEC.DLL
C:\PROGRAM FILES\RISING\RAV\UNEXE.DLL
C:\PROGRAM FILES\RISING\RAV\SCANEX.DLL
C:\PROGRAM FILES\RISING\RAV\REVM.DLL
C:\PROGRAM FILES\RISING\RAV\SCANSCT.DLL
C:\PROGRAM FILES\RISING\RAV\SCANTJ.DLL
C:\PROGRAM FILES\RISING\RAV\METHODEX.DLL
C:\PROGRAM FILES\RISING\RAV\HEUREX.DLL
C:\PROGRAM FILES\RISING\RAV\PECOMPD.DLL
C:\PROGRAM FILES\RISING\RAV\SCANRAVT.DLL
C:\PROGRAM FILES\RISING\RAV\SCANBT.DLL
C:\PROGRAM FILES\RISING\RAV\SCANSTUB.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\WLCOMM.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\CONTACT.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\CONPROXY.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\CONSYNC.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\WLDLOG.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\LMCDATA.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\ABSSM.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\TENCENT\QQ\BIN\TXPLATFORM.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\TXPFPROXY.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\360SAFE\DEEPSCAN\ZHUDONGFANGYU.EXE
C:\PROGRAM FILES\360SAFE\DEEPSCAN\CLOUDCOM2.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\360SAFE\SOFTMGR\360SOFTMGRS.DLL
C:\PROGRAM FILES\360SAFE\DEEPSCAN\HEAVYGATE.DLL
C:\PROGRAM FILES\360SAFE\DEEPSCAN\QUTMLOAD.DLL

C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL

C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE
C:\WINDOWS\SYSTEM32\MFC71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RFW\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RFW\RSCOMMX2.DLL
C:\PROGRAM FILES\RISING\RFW\RSAPPMGR.DLL
C:\PROGRAM FILES\RISING\RFW\CFGDLL.DLL
C:\PROGRAM FILES\RISING\RFW\RFWRULE.DLL
C:\PROGRAM FILES\RISING\RFW\RFWLOG.DLL
C:\PROGRAM FILES\RISING\RFW\RFWDRV.DLL
C:\PROGRAM FILES\RISING\RFW\PSAPI.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_CTRL.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\RISING\RFW\UNVDET.DLL
C:\PROGRAM FILES\RISING\RFW\MPORTS.DLL

C:\PROGRAM FILES\TENCENT\QQ\BIN\QQ.EXE
C:\PROGRAM FILES\TENCENT\QQ\BIN\COMMON.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\KERNELUTIL.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\GF.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\APPUTIL.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\MAINFRAME.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\MSVCP60.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\IM.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\TASKTRAY.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\TXPFPROXY.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQSHOW\BIN\FLASHAVATARDLL.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRAM FILES\TENCENT\QQ\BIN\KERNELMISC.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\APPMISC.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\APPCTRL.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\CHATFRAME.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\CONFIGCENTER.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\CUSTOMFACE.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\LONGCNN.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\CONTACTINFOFRAME.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\MSGMGR.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\SKINMGR.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\QINTERLIVE.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\SYSTEMMSG.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.PAIPAI\BIN\PAIPAI.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.AUDIOVIDEO\BIN\AUDIOVIDEO.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.MMOG\BIN\MMOG.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.SOSO\BIN\SOSO.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QZONE\BIN\QZONE.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.WEATHER\BIN\WEATHER.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.SOBAR\BIN\SOBAR.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.PAIPAIGIFT\BIN\PAIPAIGIFT.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQLIVE\BIN\QQLIVE.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQMUSIC\BIN\QQMUSIC.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.TAOTAO\BIN\TAOTAO.DLL
C:\PROGRAM FILES\COMMON FILES\TENCENT\TXSSO\BIN\SSOPLATFORM.DLL
C:\PROGRAM FILES\COMMON FILES\TENCENT\TXSSO\BIN\SSOCOMMON.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\BASICCTRLDLL.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\RICHED20.DLL
C:\WINDOWS\SYSTEM32\IEFRAME.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\GROUPAPP.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.SNSAPP\BIN\SNSAPP.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.PAYCENTER\BIN\PAYCENTER.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QBAR\BIN\QBAR.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQVIPMISC\BIN\QQVIPMISC.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.WENWEN\BIN\WENWEN.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.NETBAR\BIN\NETBAR.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.WIRELESS\BIN\WIRELESS.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQSHOW\BIN\QQSHOW.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.CRM\BIN\CRM.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.VAS\BIN\VAS.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQGAME\BIN\QQGAME.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQPET\BIN\QQPET.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.MAIL\BIN\MAIL.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.MEMO\BIN\MEMO.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.ADVERTISEMENT\BIN\ADVERTISEMENT.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQRING\BIN\QQRING.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQVIP\BIN\QQVIP.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.TODAY\BIN\TODAY.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.QQWEBSITE\BIN\QQWEBSITE.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\INFORMATIONBOX.DLL
C:\PROGRAM FILES\TENCENT\QQ\PLUGIN\COM.TENCENT.FILETRANSFER\BIN\FILETRANSFER.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\VQQSDL.DLL
C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\PROGRAM FILES\TENCENT\QQ\BIN\ADDRSEARCH.DLL

C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWHOST32.EXE
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\UTIL.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\INSTDATA.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWCFGMGR.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\S32PCAG.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWSES32.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWOFRWRK.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWIO.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\DUNDATA.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\POWERMGR.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\PCACMNDG.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWGUI32.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWDS32.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWCM32.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\CRYPTO.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWTIME32.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\PCAIME.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWHXPRB.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWHPROBEDLL.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\TRAYICON.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWDSP32.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWCP.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\IMPLODE.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWHK32.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWRES-ALL.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\EHANDRES.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWRES-HOST.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWIORESOURCES.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWHPILOT.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWLOG32.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\SNMPUTIL.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\LIBSNMP.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWCONN32.DLL
C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AW32TCP.DLL

C:\PROGRAM FILES\COMMON FILES\EPSON\EBAPI\SAGENT2.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\WINDOWS\SYSTEM32\EBAPI2.DLL
C:\PROGRAM FILES\COMMON FILES\EPSON\EBAPI\EBPLPT.DLL

C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\WINDOWS\SYSTEM32\RAVEXT.DLL
C:\WINDOWS\SYSTEM32\IEFRAME.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMDLLS\TDATONCE_NOW.DLL
C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMDLLS\XUNLEIBHO_NOW.DLL
C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMPONENTS\RESWORKER\DSBHO_01.DLL
C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMPONENTS\RESWORKER\DATAPROCESSOR_01.DLL
C:\WINDOWS\SYSTEM32\CONTMENU.DLL
C:\PROGRAM FILES\WINRAR\RAREXT.DLL
C:\PROGRAM FILES\GLOBALSCAPE\CUTEFTP 8 PROFESSIONAL\CUTESHELL.DLL
C:\WINDOWS\SYSTEM32\IGFXPPH.DLL
C:\WINDOWS\SYSTEM32\HCCUTILS.DLL
C:\WINDOWS\SYSTEM32\IGFXRES.DLL
C:\WINDOWS\SYSTEM32\IGFXSRVC.DLL
C:\WINDOWS\SYSTEM32\IGFXDEV.DLL

C:\PROGRAM FILES\RISING\RFW\RFWPROXY.EXE
C:\WINDOWS\SYSTEM32\MFC71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RFW\PSAPI.DLL
C:\PROGRAM FILES\RISING\RFW\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RFW\RSCOMMX2.DLL
C:\PROGRAM FILES\RISING\RFW\RFWRULE.DLL
C:\PROGRAM FILES\RISING\RFW\URLRULE.DLL
C:\PROGRAM FILES\RISING\RFW\MONMID.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\ORAY\PEANUTHULL5\PHCORE.EXE
C:\PROGRAM FILES\ORAY\PEANUTHULL5\ICONV.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\ORAY\PEANUTHULL5\PHALIVE.DLL

C:\WINDOWS\SYSTEM32\WDFMGR.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL

F:\绿色征途\RSDETECT.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL

C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\WINDOWS\SYSTEM32\IEFRAME.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
C:\WINDOWS\SYSTEM32\IEUI.DLL
C:\PROGRAM FILES\INTERNET EXPLORER\IEPROXY.DLL
C:\WINDOWS\SYSTEM32\XMLLITE.DLL
C:\WINDOWS\SYSTEM32\MSFEEDS.DLL

C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\WINDOWS\SYSTEM32\IEFRAME.DLL
C:\PROGRAM FILES\INTERNET EXPLORER\XPSHIMS.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\PROGRAM FILES\INTERNET EXPLORER\IEPROXY.DLL
C:\PROGRAM FILES\WINDOWS LIVE\TOOLBAR\WLTCORE.DLL
C:\PROGRAM FILES\WINDOWS LIVE\TOOLBAR\SQMAPI.DLL
C:\PROGRAM FILES\WINDOWS LIVE\TOOLBAR\MSIDCRL40.DLL
C:\PROGRAM FILES\WINDOWS LIVE\TOOLBAR\ZH-CN\WLTCORE.MARKET.DLL.MUI
C:\PROGRAM FILES\WINDOWS LIVE\TOOLBAR\ZH-CHS\WLTCORE.DLL.MUI
C:\PROGRAM FILES\TENCENT\QQDOWNLOAD\QQIEHELPER01.DLL
C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMDLLS\TDATONCE_NOW.DLL
C:\PROGRAM FILES\REAL\REALPLAYER\RPBROWSERRECORDPLUGIN.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\PROGRAM FILES\REAL\REALPLAYER\LANG\RPBRP_CN.DLL
C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMDLLS\XUNLEIBHO_NOW.DLL
C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMPONENTS\RESWORKER\DSBHO_01.DLL
C:\PROGRAM FILES\THUNDER NETWORK\THUNDER\COMPONENTS\RESWORKER\DATAPROCESSOR_01.DLL
C:\WINDOWS\SYSTEM32\URLFILTER.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\URLRULE.DLL
C:\WINDOWS\SYSTEM32\IEAPFLTR.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRAM FILES\360SAFE\SAFEMON\URLPROC.DLL
C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASH10C.OCX

C:\WINDOWS\SYSTEM32\ALG.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL

C:\PROGRAM FILES\RISING\ANTISPYWARE\RSTRAY.EXE
C:\PROGRAM FILES\RISING\ANTISPYWARE\RSMGINFO.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\RSXML.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\MSVCP71.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\MSVCR71.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMSERV.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\RSCOMMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\PNGDLL.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\RUNIEP.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\NCOMM.DLL
C:\PROGRAM FILES\RISING\RAV\PROCCOM.DLL
C:\PROGRAM FILES\RISING\RAV\RSCOMMX2.DLL

C:\PROGRAM FILES\RISING\RAV\RSTRAY.EXE
C:\PROGRAM FILES\RISING\RAV\COMSERV.DLL
C:\PROGRAM FILES\RISING\RAV\RSLANG.DLL
C:\PROGRAM FILES\RISING\RAV\COMX3.DLL
C:\PROGRAM FILES\RISING\RAV\SYSLAY.DLL
C:\PROGRAM FILES\RISING\RAV\PROCCOMM.DLL
C:\PROGRAM FILES\RISING\RAV\RSXML.DLL
C:\PROGRAM FILES\RISING\RAV\MONSTATE.DLL
C:\PROGRAM FILES\RISING\RAV\SCANEVNT.DLL
C:\PROGRAM FILES\RISING\RAV\RSGUILIB.DLL
C:\PROGRAM FILES\RISING\RAV\RSCONF.DLL
C:\PROGRAM FILES\RISING\RAV\RSPALVD.DLL
C:\PROGRAM FILES\RISING\RAV\RAVBINTL.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RAV\MRULEUI.DLL
C:\PROGRAM FILES\RISING\RAV\MONTRAY.DLL
C:\PROGRAM FILES\RISING\RAV\RAVITRAY.DLL
C:\PROGRAM FILES\RISING\RAV\RSMGINFO.DLL
C:\PROGRAM FILES\RISING\RAV\SCANLEAK.DLL
C:\PROGRAM FILES\RISING\RAV\RAVPPOPS.DLL
C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL
C:\PROGRAM FILES\RISING\RAV\CFGDLL.DLL
C:\PROGRAM FILES\RISING\RAV\PNGDLL.DLL
C:\PROGRAM FILES\RISING\RAV\SCANPRXY.DLL

C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL

C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\UXCORE.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\WLDCORE.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\IPHLPAPI.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSIDCRL40.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\WLDLOG.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\UXCONTACTS.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\UXCALENDAR.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\LIVENATTRAV.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\LIVETRANSPORT.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\CRYPTNET.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\PRESENCEIM.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\IMADDINLIB.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\DETOURED.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSNENCRYPTM.DLL
C:\PROGRAM FILES\MSNSHELL\BIN\SHELLDLL02.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSGSLANG.14.0.8089.0726.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSGSRES.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\SQMAPI.DLL
C:\PROGRAM FILES\MSNSHELL\BIN\SHELLDLL.DLL
C:\PROGRA~1\WINDOW~4\MESSEN~1\VVPLTFRM.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\UCCAPI.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\RTMPLTFM.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSGSWCAM.DLL
C:\WINDOWS\SYSTEM32\SIRENACM.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\CONTACT.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\LMCDATA.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\CONPROXY.DLL
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASH10C.OCX
C:\WINDOWS\SYSTEM32\IEFRAME.DLL
C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL
C:\WINDOWS\SYSTEM32\WINWB86.IME

C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\UXCORE.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\WLDCORE.DLL
C:\WINDOWS\SYSTEM32\NORMALIZ.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\IPHLPAPI.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSIDCRL40.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\WLDLOG.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\UXCONTACTS.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\UXCALENDAR.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\LIVENATTRAV.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\LIVETRANSPORT.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\CRYPTNET.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\PRESENCEIM.DLL
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\IMADDINLIB.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\DETOURED.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSNENCRYPTM.DLL
C:\PROGRAM FILES\MSNSHELL\BIN\SHELLDLL02.DLL
C:\PROGRAM FILES\360SAFE\SAFEMON\SAFEMON.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\COMX3.DLL
C:\PROGRAM FILES\RISING\ANTISPYWARE\SYSLAY.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSGSLANG.14.0.8089.0726.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSGSRES.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\SQMAPI.DLL
C:\PROGRAM FILES\MSNSHELL\BIN\SHELLDLL.DLL
C:\PROGRA~1\WINDOW~4\MESSEN~1\VVPLTFRM.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\UCCAPI.DLL
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\RTMPLTFM.DLL
C:\WINDOWS\SYSTEM32\MSACM32.DRV
C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSGSWCAM.DLL
C:\WINDOWS\SYSTEM32\SIRENACM.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\CONTACT.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\LMCDATA.DLL
C:\PROGRAM FILES\WINDOWS LIVE\CONTACTS\CONPROXY.DLL
C:\WINDOWS\SYSTEM32\MACROMED\FLASH\FLASH10C.OCX
C:\WINDOWS\SYSTEM32\IEFRAME.DLL
C:\PROGRAM FILES\RISING\RAV\RAVSCRCH.DLL
C:\WINDOWS\SYSTEM32\MSVCP71.DLL
C:\WINDOWS\SYSTEM32\MSVCR71.DLL

C:\WINDOWS\SYSTEM32\WSCNTFY.EXE
C:\WINDOWS\SYSTEM32\KMON.DLL
C:\WINDOWS\SYSTEM32\IERTUTIL.DLL
C:\PROGRAM FILES\RISING\RFW\IJT_BASE.DLL
C:\PROGRAM FILES\RISING\RFW\OLEMON.DLL


普通自启动项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
IMJPMIG8.1 = "C:\WINDOWS\IME\IMJP8_1\IMJPMIG.EXE" /SPOIL /REMADVDEF /MIGRATION32
PHIME2002ASync = C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE /SYNC
PHIME2002A = C:\WINDOWS\SYSTEM32\IME\TINTLGNT\TINTSETP.EXE /IMENAME
Cmaudio = RUNDLL32 CMICNFG.CPL,CMICTRLWND
360Safetray = "C:\PROGRAM FILES\360SAFE\SAFEMON\360TRAY.EXE" /START
RfwMain = "C:\PROGRAM FILES\RISING\RFW\RFWMAIN.EXE" -STARTUP
360Safebox = "C:\PROGRAM FILES\360SAFEBOX\SAFEBOXTRAY.EXE" /R
runeip = "C:\PROGRAM FILES\RISING\ANTISPYWARE\RSTRAY.EXE" /STARTUP
RavTray = "C:\PROGRAM FILES\RISING\RAV\RSTRAY.EXE" -SYSTEM

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
KKDelay = C:\PROGRAM FILES\RISING\ANTISPYWARE\RUNONCE.EXE

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ctfmon.exe = C:\WINDOWS\SYSTEM32\CTFMON.EXE
msnmsgr = "C:\PROGRAM FILES\WINDOWS LIVE\MESSENGER\MSNMSGR.EXE" /BACKGROUND


系统文件关联
.exe ==> exefile = "%1" %*
.com ==> comfile = "%1" %*
.cmd ==> cmdfile = "%1" %*
.bat ==> batfile = "%1" %*
.txt ==> txtfile = C:\WINDOWS\notepad.exe %1
.scr ==> scrfile = "%1" /S
.reg ==> regfile = regedit.exe "%1"
.doc ==> Word.Document.8 = "C:\Program Files\Microsoft Office\Office\WINWORD.EXE" /n

其它启动项
WIN.INI
无信息

SYSTEM.INI
SHELL = Explorer.exe
SCRNSAVE.EXE = C:\WINDOWS\system32\logon.scr


Winlogon 启动项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
crypt32chain = CRYPT32.DLL
cryptnet = CRYPTNET.DLL
cscdll = CSCDLL.DLL
igfxcui = IGFXSRVC.DLL
PCANotify = PCANOTIFY.DLL
ScCertProp = WLNOTIFY.DLL
Schedule = WLNOTIFY.DLL
sclgntfy = SCLGNTFY.DLL
SensLogn = WLNOTIFY.DLL
termsrv = WLNOTIFY.DLL
wlballoon = WLNOTIFY.DLL

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit = C:\WINDOWS\SYSTEM32\USERINIT.EXE,
shell = EXPLORER.EXE


IE - BHO
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{00000000-12C9-4305-82F9-43058F20E8D2} = C:\Program Files\Tencent\QQDownload\QQIEHelper01.dll
{01443AEC-0FD1-40fd-9C87-E93D1494C233} = C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll
{3049C3E9-B461-4BC5-8870-4C09146192CA} = C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
{889D2FEB-5411-4565-8998-1DD2C5261283} = C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll
{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} = C:\WINDOWS\system32\urlFilter.dll
{B69F34DD-F0F9-42DC-9EDD-957187DA688D} = C:\Program Files\360safe\safemon\safemon.dll
{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} = C:\Program Files\Windows Live\Toolbar\wltcore.dll


Winsock SPI
MSAFD Tcpip [TCP/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD Tcpip [UDP/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD Tcpip [RAW/IP] = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
RSVP UDP Service Provider = C:\WINDOWS\SYSTEM32\RSVPSP.DLL
RSVP TCP Service Provider = C:\WINDOWS\SYSTEM32\RSVPSP.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9DA8042E-1481-4799-A40F-CAE1677043C8}] SEQPACKET 3 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9DA8042E-1481-4799-A40F-CAE1677043C8}] DATAGRAM 3 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{E97A534C-532C-49C6-8C11-5E3E30C533CC}] SEQPACKET 0 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{E97A534C-532C-49C6-8C11-5E3E30C533CC}] DATAGRAM 0 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{C4E3E7F1-8C42-4F07-9068-D427D840DF66}] SEQPACKET 1 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{C4E3E7F1-8C42-4F07-9068-D427D840DF66}] DATAGRAM 1 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9BA1AC23-FAF4-4CC7-A61C-7F838FC80CD6}] SEQPACKET 2 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9BA1AC23-FAF4-4CC7-A61C-7F838FC80CD6}] DATAGRAM 2 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9D9F72C7-9A41-4CE3-B92C-F7E0FE01C796}] SEQPACKET 4 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{9D9F72C7-9A41-4CE3-B92C-F7E0FE01C796}] DATAGRAM 4 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{EEB17E41-7D13-422B-ACCB-4F6E5AB4CF38}] SEQPACKET 5 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL
MSAFD NetBIOS [\Device\NetBT_Tcpip_{EEB17E41-7D13-422B-ACCB-4F6E5AB4CF38}] DATAGRAM 5 = C:\WINDOWS\SYSTEM32\MSWSOCK.DLL

系统服务项
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Adobe LM Service = "C:\PROGRAM FILES\COMMON FILES\ADOBE SYSTEMS SHARED\SERVICE\ADOBELMSVC.EXE"
Alerter = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
ALG = C:\WINDOWS\SYSTEM32\ALG.EXE
AppMgmt = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
aspnet_state = C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\ASPNET_STATE.EXE
AudioSrv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
awhost32 = C:\PROGRAM FILES\SYMANTEC\PCANYWHERE\AWHOST32.EXE
BITS = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Browser = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
CiSvc = C:\WINDOWS\SYSTEM32\CISVC.EXE
ClipSrv = C:\WINDOWS\SYSTEM32\CLIPSRV.EXE
clr_optimization_v2.0.50727_32 = C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\MSCORSVW.EXE
COMSysApp = C:\WINDOWS\SYSTEM32\DLLHOST.EXE /PROCESSID:{02D4B3F1-FD88-11D1-960D-00805FC79235}
CryptSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
DcomLaunch = C:\WINDOWS\SYSTEM32\SVCHOST -K DCOMLAUNCH
Dhcp = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
dmadmin = C:\WINDOWS\SYSTEM32\DMADMIN.EXE /COM
dmserver = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Dnscache = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETWORKSERVICE
EPSONStatusAgent2 = C:\PROGRAM FILES\COMMON FILES\EPSON\EBAPI\SAGENT2.EXE
ERSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Eventlog = C:\WINDOWS\SYSTEM32\SERVICES.EXE
EventSystem = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
FastUserSwitchingCompatibility = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
fsssvc = "C:\PROGRAM FILES\WINDOWS LIVE\FAMILY SAFETY\FSSSVC.EXE"
helpsvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
HidServ = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
HTTPFilter = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K HTTPFILTER
ImapiService = C:\WINDOWS\SYSTEM32\IMAPI.EXE
kaccore = "C:\PROGRAM FILES\KINGSOFT\KAC\SERVICE\KACCORE.EXE"
lanmanserver = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
lanmanworkstation = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
LmHosts = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
Messenger = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
mnmsrvc = C:\WINDOWS\SYSTEM32\MNMSRVC.EXE
MSDTC = C:\WINDOWS\SYSTEM32\MSDTC.EXE
MSIServer = C:\WINDOWS\SYSTEM32\MSIEXEC.EXE /V
NetDDE = C:\WINDOWS\SYSTEM32\NETDDE.EXE
NetDDEdsdm = C:\WINDOWS\SYSTEM32\NETDDE.EXE
Netlogon = C:\WINDOWS\SYSTEM32\LSASS.EXE
Netman = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Nla = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
NtLmSsp = C:\WINDOWS\SYSTEM32\LSASS.EXE
NtmsSvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Peanuthull5Core = C:\PROGRAM FILES\ORAY\PEANUTHULL5\PHCORE.EXE
PlugPlay = C:\WINDOWS\SYSTEM32\SERVICES.EXE
PlugServer = C:\PROGRAM FILES\STARSEC\PLUGSERVER.EXE
PolicyAgent = C:\WINDOWS\SYSTEM32\LSASS.EXE
ProtectedStorage = C:\WINDOWS\SYSTEM32\LSASS.EXE
RasAuto = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RasMan = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RDSessMgr = C:\WINDOWS\SYSTEM32\SESSMGR.EXE
RemoteAccess = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
RemoteRegistry = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
RfwProxySrv = C:\PROGRAM FILES\RISING\RFW\RFWPROXY.EXE
RfwService = C:\PROGRAM FILES\RISING\RFW\RFWSRV.EXE
RpcLocator = C:\WINDOWS\SYSTEM32\LOCATOR.EXE
RpcSs = C:\WINDOWS\SYSTEM32\SVCHOST -K RPCSS
RsRavMon = "C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE"
RSVP = C:\WINDOWS\SYSTEM32\RSVP.EXE
SamSs = C:\WINDOWS\SYSTEM32\LSASS.EXE
SCardSvr = C:\WINDOWS\SYSTEM32\SCARDSVR.EXE
Schedule = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SeaPort = "C:\PROGRAM FILES\MICROSOFT\SEARCH ENHANCEMENT PACK\SEAPORT\SEAPORT.EXE"
seclogon = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SENS = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Serv-U = C:\PROGRAM FILES\RHINOSOFT.COM\SERV-U\SERVUDAEMON.EXE
SharedAccess = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
ShellHWDetection = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Spooler = C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
srservice = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
SSDPSRV = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
stisvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K IMGSVC
SwPrv = C:\WINDOWS\SYSTEM32\DLLHOST.EXE /PROCESSID:{4DC8654D-2CDE-4EDA-8D54-777FE8AA747C}
SysmonLog = C:\WINDOWS\SYSTEM32\SMLOGSVC.EXE
TapiSrv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
TermService = C:\WINDOWS\SYSTEM32\SVCHOST -K DCOMLAUNCH
Themes = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
TlntSvr = C:\WINDOWS\SYSTEM32\TLNTSVR.EXE
TrkWks = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
UMWdf = C:\WINDOWS\SYSTEM32\WDFMGR.EXE
upnphost = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
UPS = C:\WINDOWS\SYSTEM32\UPS.EXE
VSS = C:\WINDOWS\SYSTEM32\VSSVC.EXE
W32Time = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WebClient = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K LOCALSERVICE
winmgmt = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WmdmPmSN = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
Wmi = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WmiApSrv = C:\WINDOWS\SYSTEM32\WBEM\WMIAPSRV.EXE
wscsvc = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
wuauserv = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
WZCSVC = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
xmlprov = C:\WINDOWS\SYSTEM32\SVCHOST.EXE -K NETSVCS
ZhuDongFangYu = "C:\PROGRAM FILES\360SAFE\DEEPSCAN\ZHUDONGFANGYU.EXE"


文件驱动
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
FltMgr = C:\WINDOWS\SYSTEM32\DRIVERS\FLTMGR.SYS
MRxDAV = C:\WINDOWS\SYSTEM32\DRIVERS\MRXDAV.SYS
MRxSmb = C:\WINDOWS\SYSTEM32\DRIVERS\MRXSMB.SYS
NetBIOS = C:\WINDOWS\SYSTEM32\DRIVERS\NETBIOS.SYS
Rdbss = C:\WINDOWS\SYSTEM32\DRIVERS\RDBSS.SYS
sr = C:\WINDOWS\SYSTEM32\DRIVERS\SR.SYS
Srv = C:\WINDOWS\SYSTEM32\DRIVERS\SRV.SYS


系统驱动项
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
360AntiArp = C:\WINDOWS\SYSTEM32\DRIVERS\360ANTIARP.SYS
360SelfProtection = C:\WINDOWS\SYSTEM32\DRIVERS\360SELFPROTECTION.SYS
ACPI = C:\WINDOWS\SYSTEM32\DRIVERS\ACPI.SYS
aec = C:\WINDOWS\SYSTEM32\DRIVERS\AEC.SYS
AFD = C:\WINDOWS\SYSTEM32\DRIVERS\AFD.SYS
AsyncMac = C:\WINDOWS\SYSTEM32\DRIVERS\ASYNCMAC.SYS
atapi = C:\WINDOWS\SYSTEM32\DRIVERS\ATAPI.SYS
Atmarpc = C:\WINDOWS\SYSTEM32\DRIVERS\ATMARPC.SYS
audstub = C:\WINDOWS\SYSTEM32\DRIVERS\AUDSTUB.SYS
AW_HOST = C:\WINDOWS\SYSTEM32\DRIVERS\AW_HOST5.SYS
BFSDRV = C:\WINDOWS\SYSTEM32\DRIVERS\BFSDRV.SYS
BREGDRV = C:\WINDOWS\SYSTEM32\DRIVERS\BREGDRV.SYS
Cdrom = C:\WINDOWS\SYSTEM32\DRIVERS\CDROM.SYS
cmuda = C:\WINDOWS\SYSTEM32\DRIVERS\CMUDA.SYS
Disk = C:\WINDOWS\SYSTEM32\DRIVERS\DISK.SYS
dmboot = C:\WINDOWS\SYSTEM32\DRIVERS\DMBOOT.SYS
dmio = C:\WINDOWS\SYSTEM32\DRIVERS\DMIO.SYS
dmload = C:\WINDOWS\SYSTEM32\DRIVERS\DMLOAD.SYS
DMusic = C:\WINDOWS\SYSTEM32\DRIVERS\DMUSIC.SYS
drmkaud = C:\WINDOWS\SYSTEM32\DRIVERS\DRMKAUD.SYS
EfiMon = C:\WINDOWS\SYSTEM32\DRIVERS\EFIMON.SYS
Fdc = C:\WINDOWS\SYSTEM32\DRIVERS\FDC.SYS
FETNDISB = C:\WINDOWS\SYSTEM32\DRIVERS\FETND5B.SYS
fssfltr = C:\WINDOWS\SYSTEM32\DRIVERS\FSSFLTR_TDI.SYS
FsVga = C:\WINDOWS\SYSTEM32\DRIVERS\FSVGA.SYS
Ftdisk = C:\WINDOWS\SYSTEM32\DRIVERS\FTDISK.SYS
gameenum = C:\WINDOWS\SYSTEM32\DRIVERS\GAMEENUM.SYS
Gpc = C:\WINDOWS\SYSTEM32\DRIVERS\MSGPC.SYS
HidUsb = C:\WINDOWS\SYSTEM32\DRIVERS\HIDUSB.SYS
hookcont = C:\WINDOWS\SYSTEM32\DRIVERS\HOOKCONT.SYS
HookPort = C:\WINDOWS\SYSTEM32\DRIVERS\HOOKPORT.SYS
hooksys = C:\WINDOWS\SYSTEM32\DRIVERS\HOOKSYS.SYS
HookUrl = C:\PROGRAM FILES\RISING\RFW\HOOKURL.SYS
HTTP = C:\WINDOWS\SYSTEM32\DRIVERS\HTTP.SYS
i8042prt = C:\WINDOWS\SYSTEM32\DRIVERS\I8042PRT.SYS
ialm = C:\WINDOWS\SYSTEM32\DRIVERS\IALMNT5.SYS
Imapi = C:\WINDOWS\SYSTEM32\DRIVERS\IMAPI.SYS
IntelIde = C:\WINDOWS\SYSTEM32\DRIVERS\INTELIDE.SYS
intelppm = C:\WINDOWS\SYSTEM32\DRIVERS\INTELPPM.SYS
Ip6Fw = C:\WINDOWS\SYSTEM32\DRIVERS\IP6FW.SYS
IpFilterDriver = C:\WINDOWS\SYSTEM32\DRIVERS\IPFLTDRV.SYS
IpInIp = C:\WINDOWS\SYSTEM32\DRIVERS\IPINIP.SYS
IpNat = C:\WINDOWS\SYSTEM32\DRIVERS\IPNAT.SYS
IPSec = C:\WINDOWS\SYSTEM32\DRIVERS\IPSEC.SYS
IRENUM = C:\WINDOWS\SYSTEM32\DRIVERS\IRENUM.SYS
isapnp = C:\WINDOWS\SYSTEM32\DRIVERS\ISAPNP.SYS
Kbdclass = C:\WINDOWS\SYSTEM32\DRIVERS\KBDCLASS.SYS
kmixer = C:\WINDOWS\SYSTEM32\DRIVERS\KMIXER.SYS
Mouclass = C:\WINDOWS\SYSTEM32\DRIVERS\MOUCLASS.SYS
MSKSSRV = C:\WINDOWS\SYSTEM32\DRIVERS\MSKSSRV.SYS
MSPCLOCK = C:\WINDOWS\SYSTEM32\DRIVERS\MSPCLOCK.SYS
MSPQM = C:\WINDOWS\SYSTEM32\DRIVERS\MSPQM.SYS
mssmbios = C:\WINDOWS\SYSTEM32\DRIVERS\MSSMBIOS.SYS
ms_mpu401 = C:\WINDOWS\SYSTEM32\DRIVERS\MSMPU401.SYS
NdisTapi = C:\WINDOWS\SYSTEM32\DRIVERS\NDISTAPI.SYS
Ndisuio = C:\WINDOWS\SYSTEM32\DRIVERS\NDISUIO.SYS
NdisWan = C:\WINDOWS\SYSTEM32\DRIVERS\NDISWAN.SYS
NetBT = C:\WINDOWS\SYSTEM32\DRIVERS\NETBT.SYS
npkcrypt = C:\WINDOWS\SYSTEM32\NPKCRYPT.SYS
npkycryp = C:\WINDOWS\SYSTEM32\NPKYCRYP.SYS
NTSIM = C:\WINDOWS\SYSTEM32\NTSIM.SYS
NwlnkFlt = C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKFLT.SYS
NwlnkFwd = C:\WINDOWS\SYSTEM32\DRIVERS\NWLNKFWD.SYS
Packet = C:\WINDOWS\SYSTEM32\DRIVERS\PROTODRV.SYS
Parport = C:\WINDOWS\SYSTEM32\DRIVERS\PARPORT.SYS
PCI = C:\WINDOWS\SYSTEM32\DRIVERS\PCI.SYS
PCIIde = C:\WINDOWS\SYSTEM32\DRIVERS\PCIIDE.SYS
PptpMiniport = C:\WINDOWS\SYSTEM32\DRIVERS\RASPPTP.SYS
PSched = C:\WINDOWS\SYSTEM32\DRIVERS\PSCHED.SYS
Ptilink = C:\WINDOWS\SYSTEM32\DRIVERS\PTILINK.SYS
QKeyService = C:\WINDOWS\SYSTEM32\KEYCRYPT.SYS
qutmdserv = C:\WINDOWS\SYSTEM32\DRIVERS\QUTMDRV.SYS
RasAcd = C:\WINDOWS\SYSTEM32\DRIVERS\RASACD.SYS
Rasl2tp = C:\WINDOWS\SYSTEM32\DRIVERS\RASL2TP.SYS
RasPppoe = C:\WINDOWS\SYSTEM32\DRIVERS\RASPPPOE.SYS
Raspti = C:\WINDOWS\SYSTEM32\DRIVERS\RASPTI.SYS
RDPCDD = C:\WINDOWS\SYSTEM32\DRIVERS\RDPCDD.SYS
rdpdr = C:\WINDOWS\SYSTEM32\DRIVERS\RDPDR.SYS
redbook = C:\WINDOWS\SYSTEM32\DRIVERS\REDBOOK.SYS
RfwBase = C:\WINDOWS\SYSTEM32\DRIVERS\RFWBASE.SYS
rsassist = C:\WINDOWS\SYSTEM32\DRIVERS\RSASSIST.SYS
RsFwDrv = C:\PROGRAM FILES\RISING\RFW\RSFWDRV.SYS
RsNTGDI = C:\WINDOWS\SYSTEM32\DRIVERS\RSNTGDI.SYS
rtl8139 = C:\WINDOWS\SYSTEM32\DRIVERS\R8139N51.SYS
SafeBoxKrnl = C:\WINDOWS\SYSTEM32\DRIVERS\SAFEBOXKRNL.SYS
Secdrv = C:\WINDOWS\SYSTEM32\DRIVERS\SECDRV.SYS
serenum = C:\WINDOWS\SYSTEM32\DRIVERS\SERENUM.SYS
Serial = C:\WINDOWS\SYSTEM32\DRIVERS\SERIAL.SYS
SetupNT = C:\WINDOWS\SYSTEM32\SETUPNT.SYS
splitter = C:\WINDOWS\SYSTEM32\DRIVERS\SPLITTER.SYS
swenum = C:\WINDOWS\SYSTEM32\DRIVERS\SWENUM.SYS
swmidi = C:\WINDOWS\SYSTEM32\DRIVERS\SWMIDI.SYS
SymEvent = C:\PROGRAM FILES\SYMANTEC\SYMEVENT.SYS
sysaudio = C:\WINDOWS\SYSTEM32\DRIVERS\SYSAUDIO.SYS
Tcpip = C:\WINDOWS\SYSTEM32\DRIVERS\TCPIP.SYS
TermDD = C:\WINDOWS\SYSTEM32\DRIVERS\TERMDD.SYS
TesSafe = C:\WINDOWS\SYSTEM32\TESSAFE.SYS
Update = C:\WINDOWS\SYSTEM32\DRIVERS\UPDATE.SYS
usbehci = C:\WINDOWS\SYSTEM32\DRIVERS\USBEHCI.SYS
usbhub = C:\WINDOWS\SYSTEM32\DRIVERS\USBHUB.SYS
usbprint = C:\WINDOWS\SYSTEM32\DRIVERS\USBPRINT.SYS
USBSTOR = C:\WINDOWS\SYSTEM32\DRIVERS\USBSTOR.SYS
usbuhci = C:\WINDOWS\SYSTEM32\DRIVERS\USBUHCI.SYS
VgaSave = C:\WINDOWS\SYSTEM32\DRIVERS\VGA.SYS
Wanarp = C:\WINDOWS\SYSTEM32\DRIVERS\WANARP.SYS
wdmaud = C:\WINDOWS\SYSTEM32\DRIVERS\WDMAUD.SYS
{6080A529-897E-4629-A488-ABA0C29B635E} = C:\WINDOWS\SYSTEM32\DRIVERS\IALMSBW.SYS
{D31A0762-0CEB-444e-ACFF-B049A1F6FE91} = C:\WINDOWS\SYSTEM32\DRIVERS\IALMKCHW.SYS