瑞星卡卡电脑诊断日志 v1.30 (2009-11-1 17:6:3)  北京瑞星信息技术有限公司

注释:	[A]表示该文件存在自启动关联;
	[M]表示该文件在内存中;

+ 注册表自运行项目 
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      MotoConnect Service
        [AM] 1. c:\program files\motorola\motoconnectservice\motoconnectservice.exe
          UPX0,UPX1,UPX2,


      MsDirect
        [AM] 2. c:\windows\system32\msdirect.dll
          .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc,

        [AM] 2. c:\windows\system32\msdirect.dll
          .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc,


      ose
        [A ] 3. c:\program files\common files\microsoft shared\source engine\ose.exe
          Microsoft Corporation
          Office Source Engine
          .text,.data,.rsrc,


      RsRavMon
        [AM] 4. d:\program files\rising\rav\ravmond.exe
          Beijing Rising Information Technology Co., Ltd.
          ravmond
          .text,.rdata,.data,.rsrc,


      RsRFWMon
        [AM] 5. d:\program files\rising\rfw\ravmond.exe
          Beijing Rising Information Technology Co., Ltd.
          ravmond
          .text,.rdata,.data,.rsrc,


      UDisk Monitor
        [AM] 6. c:\documents and settings\gordon chen\application data\ct_ztemt_usb\monserviceudisk.exe
          .text,.rdata,.data,.rsrc,




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      ALCXWDM
        [A ] 7. c:\windows\system32\drivers\alcxwdm.sys
          Realtek Semiconductor Corp.
          Realtek AC'97 Audio Driver (WDM)
          .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc,


      hookcont
        [A ] 8. c:\windows\system32\drivers\hookcont.sys
          Beijing Rising Information Technology Co., Ltd.
          HookCont Driver for x86
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      hooksys
        [A ] 9. c:\windows\system32\drivers\hooksys.sys
          Beijing Rising Information Technology Co., Ltd.
          Hooksys.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      motccgp
        [A ] 10. c:\windows\system32\drivers\motccgp.sys
          Motorola
          Motorola USB Composite Device Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      motccgpfl
        [A ] 11. c:\windows\system32\drivers\motccgpfl.sys
          Motorola
          Motorola USB Composite Filter Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      MotDev
        [A ] 12. c:\windows\system32\drivers\motodrv.sys
          Motorola Inc
          Motorola USB Composite/Flash Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      motmodem
        [A ] 13. c:\windows\system32\drivers\motmodem.sys
          Motorola
          Motorola USB Modem and Ports Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      RFWARP
        [A ] 14. c:\windows\system32\drivers\rfwarp.sys
          Beijing Rising Information Technology Co., Ltd.
          rfwarp.sys
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      RfwBase9
        [A ] 15. c:\windows\system32\drivers\rfwbase.sys
          Beijing Rising Information Technology Co., Ltd.
          rfwbase5.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rfwtdi
        [A ] 16. d:\program files\rising\rfw\rfwtdi.sys
          Beijing Rising Information Technology Co., Ltd.
          rfwtdi.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rsassist
        [A ] 17. c:\windows\system32\drivers\rsassist.sys
          Beijing Rising Information Technology Co., Ltd.
          RsAssist.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rsfwdrv
        [A ] 18. d:\program files\rising\rfw\rsfwdrv.sys
          Beijing Rising Information Technology Co., Ltd.
          rsfwdrv.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RsNTGDI
        [A ] 19. c:\windows\system32\drivers\rsntgdi.sys
          Beijing Rising Information Technology Co., Ltd.
          RsNTGDI
          .text,.rdata,INIT,.rsrc,.reloc,


      Secdrv
        [A ] 20. c:\windows\system32\drivers\secdrv.sys
          Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
          Macrovision SECURITY Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Ser2pl
        [A ] 21. c:\windows\system32\drivers\ser2pl.sys
          Prolific Technology Inc.
          USB-to-Serial Cable Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      SiSkp
        [A ] 22. c:\windows\system32\drivers\srvkp.sys
          Silicon Integrated Systems Corporation
          SiS VGA Driver Manager
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Wdf01000
        [A ] 23. c:\windows\system32\drivers\wdf01000.sys
          Microsoft Corporation
          WDF Dynamic
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      ZSMC301b
        [A ] 24. c:\windows\system32\drivers\usbvm31b.sys
          VM
          Video streaming and Capture Device Driver
          .text,.data,PAGECONS,INIT,.rsrc,.reloc,


      ztemtusbser
        [A ] 25. c:\windows\system32\drivers\ct_ztemt_u_usbser.sys
          ZTEMT Incorporated
          USB Modem/Serial Device Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,




  + 文件系统驱动
    + HKLM\System\CurrentControlSet\Services
      exFat
        [A ] 26. c:\windows\system32\drivers\exfat.sys
          Microsoft Corporation
          Microsoft Extended FAT File System
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [A ] 27. c:\windows\system32\kakatool.dll
          Beijing Rising Information Technology Co., Ltd.
          ToolBar
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
        [A ] 28. c:\windows\system32\urlfilter.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising AntiSpyware UrlFilter Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 29. c:\program files\messenger\msmsgs.exe
          Microsoft Corporation
          Windows Messenger
          .text,.data,.rsrc,




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      application/octet-stream
        [A ] 30. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      application/x-complus
        [A ] 30. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      application/x-msdownload
        [A ] 30. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      text/xml
        [A ] 31. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
          Microsoft Corporation
          Microsoft Office XML MIME Filter
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      mso-offdap11
        [A ] 32. c:\program files\common files\microsoft shared\web components\11\owc11.dll
          Microsoft Corporation
          Microsoft Office Web Components 2003
          .text,.data,.rtext,Shared,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
      <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
        [A ] 33. c:\windows\system32\ieudinit.exe
          Microsoft Corporation
          IE Per User Active Setup Uninstall Utility
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 34. c:\windows\system32\hticons.dll
          Hilgraeve, Inc.
          HyperTerminal Applet Library
          .text,.data,.rsrc,.reloc,


      Web Folders
        [A ] 35. c:\program files\common files\microsoft shared\web folders\msonsext.dll
          Microsoft Corporation
          Microsoft Web Folders
          .text,.data,.rsrc,.reloc,


      Microsoft Office HTML Icon Handler
        [A ] 36. d:\program files\microsoft office\office11\msohev.dll
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,.reloc,


      WinRAR shell extension
        [AM] 37. d:\program files\winrar\rarext.dll
          .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


      Microsoft.XPS.Shell.Metadata.1
        [A ] 38. c:\windows\system32\xpsshhdr.dll
          Microsoft Corporation
          Package Document Shell Extension Handler
          .text,.data,.rsrc,.reloc,


      Microsoft.XPS.Shell.Thumbnail.1
        [A ] 38. c:\windows\system32\xpsshhdr.dll
          Microsoft Corporation
          Package Document Shell Extension Handler
          .text,.data,.rsrc,.reloc,


      RISING
        [AM] 39. c:\windows\system32\ravext.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising Shell Ext Module
          .text,.rdata,.data,.rsrc,.reloc,


      Fusion Cache
        [A ] 30. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      RavTray
        [AM] 40. d:\program files\rising\rav\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising tray framework
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 41. d:\program files\rising\antispyware\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          RSTray
          .text,.rdata,.data,.rsrc,


      RFWTray
        [AM] 42. d:\program files\rising\rfw\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising tray framework
          .text,.rdata,.data,.rsrc,




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 43. c:\windows\system32\bsmain.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising Antivirus 2010
          .text,.rdata,.data,.rsrc,.reloc,




  + 映像劫持
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 44. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 44. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 44. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 44. d:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.mp3
      QQMusic.mp3\open\Command
        [A ] 45. d:\program files\tencent\qqmusic\qqmusic.exe
          Tencent
          QQMusic
          .text,.rdata,.data,.rsrc,


      QQMusic.mp3\QQMusic.2.Add\Command
        [A ] 45. d:\program files\tencent\qqmusic\qqmusic.exe
          Tencent
          QQMusic
          .text,.rdata,.data,.rsrc,




  + 打印机监控
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      EPSON ME 1 32MonitorBP
        [AM] 46. c:\windows\system32\e_flb8wp.dll
          SEIKO EPSON CORPORATION
          EPSON Bi-directional Monitor
          .text,.data,.rsrc,.reloc,


      Microsoft Document Imaging Writer Monitor
        [AM] 47. c:\windows\system32\mdimon.dll
          Microsoft Corporation
          Microsoft? Document Imaging
          .text,.data,.rsrc,.reloc,





+ 其他自启动项目
  + C:\Documents and Settings\Gordon Chen\「开始」菜单\程序\启动
    QQ游戏启动加速程序.lnk
      [AM] 48. d:\program files\tencent\qqgame\accel.exe
        深圳市腾讯计算机系统有限公司
        QQ游戏
        .text,.rdata,.data,.rsrc,




+ 正在运行的进程
  + 000000b8(184) slserv.exe

  + 000000bc(188) Accel.exe
    00400000[0000C000]
      [AM] 48. d:\program files\tencent\qqgame\accel.exe
        深圳市腾讯计算机系统有限公司
        QQ游戏
        .text,.rdata,.data,.rsrc,


    62060000[0001F000]
      [ M] 49. c:\windows\system32\mapi32.dll
        Microsoft Corporation
        Extended MAPI 1.0 for Windows NT
        .text,.data,.rsrc,.reloc,


    00B20000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,


    10000000[00035000]
      [ M] 51. d:\program files\tencent\qqgame\common\utility.dll
        .text,.rdata,.data,.reloc,


    03BC0000[000AF000]
      [ M] 52. d:\program files\tencent\qqgame\logic\mainlogi.dll
        .text,.rdata,.data,.reloc,


    04150000[00010000]
      [ M] 53. d:\program files\tencent\qqgame\tenio\tenfact.dll
        Tencent
        Tenio for OTOT
        .text,.rdata,.data,.rsrc,.reloc,


    04160000[00094000]
      [ M] 54. d:\program files\tencent\qqgame\tenio\tenhall.dll
        Tencent
        Tenio for OTOT
        .text,.rdata,.data,.rsrc,.reloc,



  + 000000f0(240) wuauclt.exe
    50E60000[0000C000]
      [ M] 55. c:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,



  + 00000264(612) svchost.exe

  + 00000270(624) smss.exe

  + 000002cc(716) csrss.exe

  + 000002e4(740) winlogon.exe
    10000000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 56. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 00000310(784) services.exe

  + 0000031c(796) lsass.exe

  + 000003b8(952) svchost.exe

  + 000003e4(996) svchost.exe

  + 0000042c(1068) MonServiceUDisk.exe
    00400000[00044000]
      [AM] 6. c:\documents and settings\gordon chen\application data\ct_ztemt_usb\monserviceudisk.exe
        .text,.rdata,.data,.rsrc,



  + 00000444(1092) RavMonD.exe
    00400000[0002F000]
      [AM] 4. d:\program files\rising\rav\ravmond.exe
        Beijing Rising Information Technology Co., Ltd.
        ravmond
        .text,.rdata,.data,.rsrc,


    10000000[00032000]
      [ M] 57. d:\program files\rising\rav\combase.dll
        Beijing Rising Information Technology Co., Ltd.
        combase
        .text,.rdata,.data,.rsrc,.reloc,


    00F90000[00086000]
      [ M] 58. d:\program files\rising\rav\cnt09.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt09 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F30000[00019000]
      [ M] 59. d:\program files\rising\rav\moncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        MonComm
        .text,.rdata,.data,.rsrc,.reloc,


    00F60000[0001D000]
      [ M] 60. d:\program files\rising\rav\monbase.dll
        Beijing Rising Information Technology Co., Ltd.
        MonBase
        .text,.rdata,.data,.rsrc,.reloc,


    01330000[00084000]
      [ M] 61. d:\program files\rising\rav\rslog.dll
        Beijing Rising Information Technology Co., Ltd.
        rslog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    013E0000[00018000]
      [ M] 62. d:\program files\rising\rav\mondrv.dll
        Beijing Rising Information Technology Co., Ltd.
        mondrv
        .text,.rdata,.data,.rsrc,.reloc,


    01610000[0002E000]
      [ M] 63. d:\program files\rising\rav\defmon.dll
        Beijing Rising Information Technology Co., Ltd.
        DefMon
        .text,.rdata,.data,.rsrc,.reloc,


    01650000[00010000]
      [ M] 64. d:\program files\rising\rav\moncom08.dll
        Beijing Rising Information Technology Co., Ltd.
        MonCom08
        .text,.rdata,.data,.rsrc,.reloc,


    01670000[0007E000]
      [ M] 65. d:\program files\rising\rav\monrule.dll
        Beijing Rising Information Technology Co., Ltd.
        MonRule
        .text,.rdata,.data,.rsrc,.reloc,


    01720000[00027000]
      [ M] 66. d:\program files\rising\rav\filemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Filemon
        .text,.rdata,.data,.rsrc,.reloc,


    01760000[0002F000]
      [ M] 67. d:\program files\rising\rav\mailmon.dll
        Beijing Rising Information Technology Co., Ltd.
        MailMon
        .text,.rdata,.data,.rsrc,.reloc,


    017A0000[00015000]
      [ M] 68. d:\program files\rising\rav\hookweb.dll
        Beijing Rising Information Technology Co., Ltd.
        hookweb
        .text,.rdata,.data,.rsrc,.reloc,


    017E0000[0008C000]
      [ M] 69. d:\program files\rising\rav\rsindent.dll
        Beijing Rising Information Technology Co., Ltd.
        rsindent
        .text,.rdata,.data,.rsrc,.reloc,


    01870000[00019000]
      [ M] 70. d:\program files\rising\rav\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    018B0000[00017000]
      [ M] 71. d:\program files\rising\rav\taskplug.dll
        Beijing Rising Information Technology Co., Ltd.
        TaskPlug
        .text,.rdata,.data,.rsrc,.reloc,


    018E0000[00012000]
      [ M] 72. d:\program files\rising\rav\scansrvp.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSrvP Module
        .text,.rdata,.data,.rsrc,.reloc,


    01D10000[0001D000]
      [ M] 73. d:\program files\rising\rav\cnt08.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt08 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01E90000[00019000]
      [ M] 74. d:\program files\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01EC0000[0000E000]
      [ M] 75. d:\program files\rising\rav\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    02300000[00044000]
      [ M] 76. d:\program files\rising\rav\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    02440000[0002D000]
      [ M] 77. d:\program files\rising\rav\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    025B0000[00020000]
      [ M] 78. d:\program files\rising\rav\hooksys.dll
        Beijing Rising Information Technology Co., Ltd.
        Hooksys.dll
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    02660000[0001F000]
      [ M] 79. d:\program files\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02680000[00024000]
      [ M] 80. d:\program files\rising\rav\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    028D0000[00013000]
      [ M] 81. d:\program files\rising\rav\hookcont.dll
        Beijing Rising Information Technology Co., Ltd.
        HookCont Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02A10000[0006E000]
      [ M] 82. d:\program files\rising\rav\bacore.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising MBA DLL
        .text,.rdata,.data,.rsrc,.reloc,


    02BA0000[0003B000]
      [ M] 83. d:\program files\rising\rav\recomp.dll
        Beijing Rising Information Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02BF0000[00038000]
      [ M] 84. d:\program files\rising\rav\refs.dll
        Beijing Rising Information Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02E50000[00030000]
      [ M] 85. d:\program files\rising\rav\viruslib.dll
        Beijing Rising Information Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02F90000[00029000]
      [ M] 86. d:\program files\rising\rav\relibldr.dll
        Beijing Rising Information Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03210000[0007E000]
      [ M] 87. d:\program files\rising\rav\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    033C0000[00016000]
      [ M] 88. d:\program files\rising\rav\bawhite.dll
        Beijing Rising Information Technology Co., Ltd.
        bawhite Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    033F0000[0002B000]
      [ M] 89. d:\program files\rising\rav\rsstore.dll
        Beijing Rising Information Technology Co., Ltd.
        RSStore
        .text,.rdata,.data,.rsrc,.reloc,


    038A0000[00040000]
      [ M] 90. d:\program files\rising\rav\scanner.dll
        Beijing Rising Information Technology Co., Ltd.
        RsScanner Module
        .text,.rdata,.data,.rsrc,.reloc,


    03A10000[0001B000]
      [ M] 91. d:\program files\rising\rav\scanadd.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Addon
        .text,.rdata,.data,.rsrc,.reloc,


    04580000[00028000]
      [ M] 92. d:\program files\rising\rav\rstask.dll
        Beijing Rising Information Technology Co., Ltd.
        RsTask Control
        .text,.rdata,.data,.rsrc,.reloc,


    04640000[00018000]
      [ M] 93. d:\program files\rising\rav\rsstub.dll
        Beijing Rising Information Technology Co., Ltd.
        rsstub Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    047C0000[0001A000]
      [ M] 94. d:\program files\rising\rav\scansrv.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSrv Module
        .text,.rdata,.data,.rsrc,.reloc,


    05A30000[0002B000]
      [ M] 95. d:\program files\rising\rav\scanpe.dll
        Beijing Rising Information Technology Co., Ltd.
        scanpe Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    05A70000[00029000]
      [ M] 96. d:\program files\rising\rav\pearc.dll
        Beijing Rising Information Technology Co., Ltd.
        pearchive Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    07A50000[0001B000]
      [ M] 97. d:\program files\rising\rav\ur000.dat
        Beijing Rising Information Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    07A80000[00035000]
      [ M] 98. d:\program files\rising\rav\urutils.dll
        Beijing Rising Information Technology Co., Ltd.
        urutils Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    07FF0000[00032000]
      [ M] 99. d:\program files\rising\rav\ffr.dll
        Beijing Rising Information Technology Co., Ltd.
        ffr Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    08040000[00022000]
      [ M] 100. d:\program files\rising\rav\nvfile.dll
        Beijing Rising Information Technology Co., Ltd.
        NVFile
        .text,.rdata,.data,.rsrc,.reloc,


    13AB0000[00045000]
      [ M] 101. d:\program files\rising\rav\scanexec.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanExec
        .text,.rdata,.data,.rsrc,.reloc,


    08A30000[002DD000]
      [ M] 102. d:\program files\rising\rav\unexe.dll
        Beijing Rising Information Technology Co., Ltd.
        UnExe
        .text,.rdata,.data,.rsrc,.reloc,


    08D10000[000C7000]
      [ M] 103. d:\program files\rising\rav\scanex.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanEx
        .text,.rdata,.data,.rsrc,.reloc,


    080B0000[00011000]
      [ M] 104. d:\program files\rising\rav\scantj.dll
        Beijing Rising Information Technology Co., Ltd.
        scantj Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    0C070000[00085000]
      [ M] 105. d:\program files\rising\rav\methodex.dll
        Beijing Rising Information Technology Co., Ltd.
        MethodEx
        .text,.rdata,.data,.rsrc,.reloc,


    0C710000[000B9000]
      [ M] 106. d:\program files\rising\rav\revm.dll
        Beijing Rising Information Technology Co., Ltd.
        REVM Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    0C510000[00039000]
      [ M] 107. d:\program files\rising\rav\heurex.dll
        Beijing Rising Information Technology Co., Ltd.
        HeurEx
        .text,.rdata,.data,.rsrc,.reloc,


    0C560000[00022000]
      [ M] 108. d:\program files\rising\rav\pecompd.dll
        Beijing Rising Information Technology Co., Ltd.
        PeCompdEx
        .text,.rdata,.data,.rsrc,.reloc,


    0D740000[00011000]
      [ M] 109. d:\program files\rising\rav\ur001.dat
        Beijing Rising Information Technology Co., Ltd.
        Unpack Routine
        .text,.rdata,.data,.rsrc,.reloc,


    00E10000[00023000]
      [ M] 110. d:\program files\rising\rav\scansct.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSct Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    14210000[0003A000]
      [ M] 111. d:\program files\rising\rav\extmail.dll
        Beijing Rising Information Technology Co., Ltd.
        ExtMail
        .text,.rdata,.data,.rsrc,.reloc,


    00EB0000[0001C000]
      [ M] 112. d:\program files\rising\rav\scanravt.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanRavT Module
        .text,.rdata,.data,.rsrc,.reloc,


    026D0000[0009A000]
      [ M] 113. d:\program files\rising\rav\scanbt.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanBT Module
        .text,.rdata,.data,.rsrc,.reloc,


    00EF0000[00019000]
      [ M] 114. d:\program files\rising\rav\scanstub.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanStub Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000460(1120) RavMonD.exe
    00400000[0002F000]
      [AM] 5. d:\program files\rising\rfw\ravmond.exe
        Beijing Rising Information Technology Co., Ltd.
        ravmond
        .text,.rdata,.data,.rsrc,


    10000000[0002F000]
      [ M] 115. d:\program files\rising\rfw\combase.dll
        Beijing Rising Information Technology Co., Ltd.
        combase
        .text,.rdata,.data,.rsrc,.reloc,


    00F20000[00027000]
      [ M] 116. d:\program files\rising\rfw\cnt09.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt09 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F60000[0001D000]
      [ M] 117. d:\program files\rising\rfw\monbase.dll
        Beijing Rising Information Technology Co., Ltd.
        MonBase
        .text,.rdata,.data,.rsrc,.reloc,


    00F90000[00019000]
      [ M] 118. d:\program files\rising\rfw\moncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        MonComm
        .text,.rdata,.data,.rsrc,.reloc,


    00FC0000[0006A000]
      [ M] 119. d:\program files\rising\rfw\rfwlog.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwlog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01050000[0000C000]
      [ M] 120. d:\program files\rising\rfw\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        TODO: <File description>
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 121. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 122. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    01070000[0004A000]
      [ M] 123. d:\program files\rising\rfw\rfwsrv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal FireWall Service
        .text,.rdata,.data,.rsrc,.reloc,


    010C0000[00019000]
      [ M] 124. d:\program files\rising\rfw\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    01100000[0001B000]
      [ M] 125. d:\program files\rising\rfw\mports.dll
        Beijing Rising Information Technology Co., Ltd.
        get ports list
        .text,.rdata,.data,.rsrc,.reloc,


    01130000[00011000]
      [ M] 126. d:\program files\rising\rfw\rfwdrvc.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwdrvc Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01160000[00011000]
      [ M] 127. d:\program files\rising\rfw\rfwdrv.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwdrv.dll
        .text,.rdata,.data,.rsrc,.reloc,


    01390000[00067000]
      [ M] 128. d:\program files\rising\rfw\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    01510000[00011000]
      [ M] 129. d:\program files\rising\rfw\rfwarp.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwarp.dll
        .text,.rdata,.data,.rsrc,.reloc,


    01550000[0002D000]
      [ M] 130. d:\program files\rising\rfw\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01990000[00014000]
      [ M] 131. d:\program files\rising\rfw\urlrule.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlRule  Library
        .text,.rdata,.data,.rsrc,.reloc,


    019D0000[0003B000]
      [ M] 132. d:\program files\rising\rfw\recomp.dll
        Beijing Rising Information Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01B40000[00038000]
      [ M] 133. d:\program files\rising\rfw\refs.dll
        Beijing Rising Information Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01DA0000[00030000]
      [ M] 134. d:\program files\rising\rfw\viruslib.dll
        Beijing Rising Information Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01DE0000[00029000]
      [ M] 135. d:\program files\rising\rfw\relibldr.dll
        Beijing Rising Information Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01E60000[00025000]
      [ M] 136. d:\program files\rising\rfw\rfwproxy.dll
        Beijing Rising Information Technology Co., Ltd.
        tcpproxy Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02740000[00076000]
      [ M] 137. d:\program files\rising\rfw\rsindent.dll
        Beijing Rising Information Technology Co., Ltd.
        rsindent
        .text,.rdata,.data,.rsrc,.reloc,


    027D0000[00017000]
      [ M] 138. d:\program files\rising\rfw\taskplug.dll
        Beijing Rising Information Technology Co., Ltd.
        TaskPlug
        .text,.rdata,.data,.rsrc,.reloc,


    02B00000[0000E000]
      [ M] 139. d:\program files\rising\rfw\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    02B20000[00044000]
      [ M] 140. d:\program files\rising\rfw\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    02C50000[00019000]
      [ M] 141. d:\program files\rising\rfw\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    031E0000[0001B000]
      [ M] 142. d:\program files\rising\rfw\ncomm2.dll
        Beijing Rising Information Technology Co., Ltd.
        NComm2 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03990000[00028000]
      [ M] 143. d:\program files\rising\rfw\rstask.dll
        Beijing Rising Information Technology Co., Ltd.
        RsTask Control
        .text,.rdata,.data,.rsrc,.reloc,


    03A50000[00018000]
      [ M] 144. d:\program files\rising\rfw\rsstub.dll
        Beijing Rising Information Technology Co., Ltd.
        rsstub Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01F40000[0000E000]
      [ M] 145. d:\program files\rising\rfw\urllib.dll
        Beijing Rising Information Technology Co., Ltd.
        Urllib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000470(1136) MotoConnectService.exe
    00400000[00039000]
      [AM] 1. c:\program files\motorola\motoconnectservice\motoconnectservice.exe
        UPX0,UPX1,UPX2,



  + 0000049c(1180) svchost.exe
    50E60000[0000C000]
      [ M] 55. c:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,



  + 000004f0(1264) svchost.exe

  + 000005a0(1440) svchost.exe

  + 000005b0(1456) MotoConnect.exe
    00400000[000F8000]
      [ M] 146. c:\program files\motorola\motoconnectservice\motoconnect.exe
        Motorola
        Motorola Phone Service Application
        UPX0,UPX1,.rsrc,


    10000000[00009000]
      [ M] 147. c:\program files\motorola\motoconnectservice\mmdslang\langchn.dll
        MMDService MFC Application
        .rdata,.rsrc,.reloc,


    00D50000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,



  + 00000608(1544) knownsvr.exe
    00400000[00072000]
      [ M] 148. d:\program files\rising\antispyware\knownsvr.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    10000000[00034000]
      [ M] 149. d:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    00A70000[0002D000]
      [ M] 150. d:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00AA0000[00019000]
      [ M] 151. d:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000630(1584) Explorer.EXE
    10000000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 56. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    034E0000[0002B000]
      [AM] 37. d:\program files\winrar\rarext.dll
        .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


    03810000[00024000]
      [AM] 39. c:\windows\system32\ravext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    045F0000[00024000]
      [ M] 152. c:\windows\system32\kakaext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    05150000[00028000]
      [ M] 153. d:\program files\aliwangwang\aliimext.dll
        Alibaba software (Shanghai) Corporation.
        阿里旺旺发送文件辅助模块.
        .text,.rdata,.data,.rsrc,.reloc,



  + 000006ac(1708) spoolsv.exe
    00AF0000[00015000]
      [AM] 46. c:\windows\system32\e_flb8wp.dll
        SEIKO EPSON CORPORATION
        EPSON Bi-directional Monitor
        .text,.data,.rsrc,.reloc,


    00B10000[00008000]
      [AM] 47. c:\windows\system32\mdimon.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    00EA0000[00008000]
      [ M] 154. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    3F420000[0001B000]
      [ M] 155. c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
        Microsoft Corporation
        Print Filter Pipeline Proxy
        .text,.orpc,.data,.rsrc,.reloc,



  + 00000704(1796) conime.exe
    10000000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,



  + 00000740(1856) svchost.exe

  + 00000780(1920) svchost.exe
    00AA0000[00073000]
      [AM] 2. c:\windows\system32\msdirect.dll
        .text,.itext,.data,.bss,.idata,.edata,.reloc,.rsrc,


    10000000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,



  + 000007bc(1980) RsTray.exe
    00400000[0002C000]
      [AM] 40. d:\program files\rising\rav\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising tray framework
        .text,.rdata,.data,.rsrc,


    10000000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,


    01220000[00031000]
      [ M] 156. d:\program files\rising\rav\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising tray common service
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00023000]
      [ M] 157. d:\program files\rising\rav\rslang.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00AD0000[0002D000]
      [ M] 77. d:\program files\rising\rav\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B00000[00019000]
      [ M] 70. d:\program files\rising\rav\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    01280000[00019000]
      [ M] 74. d:\program files\rising\rav\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00039000]
      [ M] 158. d:\program files\rising\rav\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    02AF0000[00013000]
      [ M] 159. d:\program files\rising\rav\monstate.dll
        Beijing Rising Information Technology Co., Ltd.
        MonState
        .text,.rdata,.data,.rsrc,.reloc,


    02B20000[00016000]
      [ M] 160. d:\program files\rising\rav\scanevnt.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Event Handler
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[00078000]
      [ M] 161. d:\program files\rising\rav\rsguilib.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    02B60000[00017000]
      [ M] 162. d:\program files\rising\rav\rsconf.dll
        Beijing Rising Information Technology Co., Ltd.
        rsconf Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02B90000[00022000]
      [ M] 163. d:\program files\rising\rav\rspalvd.dll
        Beijing Rising Information Technology Co., Ltd.
        rspalvd
        .text,.rdata,.data,.rsrc,.reloc,


    33000000[00026000]
      [ M] 164. d:\program files\rising\rav\ravbintl.dll
        Beijing Rising Information Technology Co., Ltd.
        ravbintl Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02BE0000[0007D000]
      [ M] 165. d:\program files\rising\rav\mruleui.dll
        Beijing Rising Information Technology Co., Ltd.
        mruleui
        .text,.rdata,.data,.rsrc,.reloc,


    02C80000[0007D000]
      [ M] 166. d:\program files\rising\rav\montray.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiVirus 2010
        .text,.rdata,.data,.rsrc,.reloc,


    34500000[00020000]
      [ M] 167. d:\program files\rising\rav\ravitray.dll
        Beijing Rising Information Technology Co., Ltd.
        ravitray Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02D20000[00048000]
      [ M] 168. d:\program files\rising\rav\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    02D80000[00012000]
      [ M] 169. d:\program files\rising\rav\scanleak.dll
        Beijing Rising Information Technology Co., Ltd.
        scanleak
        .text,.rdata,.data,.rsrc,.reloc,


    32000000[00088000]
      [ M] 170. d:\program files\rising\rav\ravppops.dll
        Beijing Rising Information Technology Co., Ltd.
        ravppops Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    030C0000[0000E000]
      [ M] 75. d:\program files\rising\rav\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    030E0000[00044000]
      [ M] 76. d:\program files\rising\rav\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 171. d:\program files\rising\rav\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03910000[00080000]
      [ M] 172. d:\program files\rising\rav\scanprxy.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanPrxy Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007c4(1988) rstray.exe
    00400000[00023000]
      [AM] 41. d:\program files\rising\antispyware\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        RSTray
        .text,.rdata,.data,.rsrc,


    10000000[00044000]
      [ M] 173. d:\program files\rising\antispyware\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    00B00000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,


    23800000[00022000]
      [ M] 174. d:\program files\rising\antispyware\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 175. d:\program files\rising\antispyware\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 176. d:\program files\rising\antispyware\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    01CC0000[00024000]
      [ M] 177. d:\program files\rising\antispyware\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    01CF0000[00019000]
      [ M] 151. d:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00026000]
      [ M] 178. d:\program files\rising\antispyware\rscommon.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01D30000[0002D000]
      [ M] 150. d:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 179. d:\program files\rising\antispyware\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03B90000[00067000]
      [ M] 180. d:\program files\rising\antispyware\runiep.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware tray
        .text,.rdata,.data,.rsrc,.reloc,


    03C00000[00034000]
      [ M] 149. d:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    03C60000[0001F000]
      [ M] 79. d:\program files\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03C80000[00024000]
      [ M] 181. d:\program files\rising\antispyware\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007cc(1996) RsTray.exe
    00400000[0002C000]
      [AM] 42. d:\program files\rising\rfw\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising tray framework
        .text,.rdata,.data,.rsrc,


    10000000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,


    01210000[00031000]
      [ M] 182. d:\program files\rising\rfw\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising tray common service
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00023000]
      [ M] 183. d:\program files\rising\rfw\rslang.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00AD0000[0002D000]
      [ M] 130. d:\program files\rising\rfw\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B00000[00019000]
      [ M] 124. d:\program files\rising\rfw\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    01280000[00019000]
      [ M] 141. d:\program files\rising\rfw\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00039000]
      [ M] 184. d:\program files\rising\rfw\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    02BF0000[00013000]
      [ M] 185. d:\program files\rising\rfw\monstate.dll
        Beijing Rising Information Technology Co., Ltd.
        MonState
        .text,.rdata,.data,.rsrc,.reloc,


    02C20000[0000C000]
      [ M] 120. d:\program files\rising\rfw\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        TODO: <File description>
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 121. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 122. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    02C40000[00017000]
      [ M] 186. d:\program files\rising\rfw\rsconf.dll
        Beijing Rising Information Technology Co., Ltd.
        rsconf Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02C70000[00022000]
      [ M] 187. d:\program files\rising\rfw\rspalvd.dll
        Beijing Rising Information Technology Co., Ltd.
        rspalvd
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[00078000]
      [ M] 188. d:\program files\rising\rfw\rsguilib.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    33000000[00026000]
      [ M] 189. d:\program files\rising\rfw\ravbintl.dll
        Beijing Rising Information Technology Co., Ltd.
        ravbintl Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02CD0000[00067000]
      [ M] 128. d:\program files\rising\rfw\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    02D70000[00048000]
      [ M] 190. d:\program files\rising\rfw\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    02DC0000[00052000]
      [ M] 191. d:\program files\rising\rfw\rfwtray.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwtray Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    32000000[00070000]
      [ M] 192. d:\program files\rising\rfw\ravppops.dll
        Beijing Rising Information Technology Co., Ltd.
        ravppops Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02F50000[0000E000]
      [ M] 139. d:\program files\rising\rfw\rsappmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Application Manager
        .text,.rdata,.data,.rsrc,.reloc,


    02F70000[00044000]
      [ M] 140. d:\program files\rising\rfw\cfgdll.dll
        Beijing Rising Information Technology Co., Ltd.
        CfgDll
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 193. d:\program files\rising\rfw\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    03570000[0006A000]
      [ M] 119. d:\program files\rising\rfw\rfwlog.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwlog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007d4(2004) ctfmon.exe
    10000000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,



  + 00000a5c(2652) wscntfy.exe
    10000000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,



  + 00000afc(2812) alg.exe

  + 00000d28(3368) ras.exe
    00400000[0000B000]
      [ M] 194. d:\program files\rising\antispyware\ras.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C140000[00103000]
      [ M] 195. d:\program files\rising\antispyware\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 176. d:\program files\rising\antispyware\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[00047000]
      [ M] 196. d:\program files\rising\antispyware\kakamgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 175. d:\program files\rising\antispyware\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B40000[00019000]
      [ M] 151. d:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    00B70000[0001F000]
      [ M] 79. d:\program files\rising\rav\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B90000[00024000]
      [ M] 181. d:\program files\rising\antispyware\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00CE0000[0002D000]
      [ M] 150. d:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00E50000[00058000]
      [ M] 197. d:\program files\rising\antispyware\dbmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 174. d:\program files\rising\antispyware\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    00FB0000[0002E000]
      [ M] 198. d:\program files\rising\antispyware\pweb.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    00FE0000[000C2000]
      [ M] 199. d:\program files\rising\antispyware\pscan.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    010B0000[00034000]
      [ M] 149. d:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01110000[00070000]
      [ M] 200. d:\program files\rising\antispyware\pset.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    011A0000[00027000]
      [ M] 201. d:\program files\rising\antispyware\pdefend.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    011D0000[000B7000]
      [ M] 202. d:\program files\rising\antispyware\ptools.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01290000[00075000]
      [ M] 203. d:\program files\rising\antispyware\psysinfo.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 179. d:\program files\rising\antispyware\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01660000[011BF000]
      [ M] 50. c:\windows\system32\unispim6.ime
        北京紫光华宇软件股份有限公司
        紫光华宇拼音输入法V6.5
        .text,.rdata,.data,.upim_sh,.rsrc,.reloc,


    06180000[00018000]
      [ M] 204. d:\program files\rising\rav\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    06DA0000[004A3000]
      [ M] 205. c:\windows\system32\macromed\flash\flash10c.ocx
        Adobe Systems, Inc.
        Adobe Flash Player 10.0 r32
        .text,.rdata,.data,.rodata,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 56. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    06850000[00086000]
      [ M] 206. d:\program files\rising\antispyware\kengine.dll
        Beijing Rising Information Technology Co., Ltd.
        KEngine
        .text,.rdata,.data,.rsrc,.reloc,


    06400000[00045000]
      [ M] 207. d:\program files\rising\antispyware\posttrt.dll
        Beijing Rising Information Technology Co., Ltd.
        PostTrt
        .text,.rdata,.data,.rsrc,.reloc,


    068E0000[00010000]
      [ M] 208. d:\program files\rising\antispyware\kscanex.dll
        Beijing Rising Information Technology Co., Ltd.
        KEngine ScanEx
        .text,.rdata,.data,.rsrc,.reloc,


    06900000[0002F000]
      [ M] 209. d:\program files\rising\antispyware\engine.dll
        Beijing Rising Information Technology Co., Ltd.
        kaka engine
        .text,.rdata,.data,.rsrc,.reloc,


    06A50000[00033000]
      [ M] 210. d:\program files\rising\antispyware\rsdialog.dll
        Beijing Rising Information Technology Co., Ltd.
        Rsdiaglo DLL
        .text,.rdata,.data,.rsrc,.reloc,


    06AE0000[0001E000]
      [ M] 211. d:\program files\rising\antispyware\secscan.dll
        Beijing Rising Information Technology Co., Ltd.
        secscan Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    08AD0000[0007F000]
      [ M] 212. d:\program files\rising\antispyware\ntlib.dll
        Beijing Rising Information Technology Co., Ltd.
        Ntlib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    06B00000[00017000]
      [ M] 213. d:\program files\rising\antispyware\secex.dll
        Beijing Rising Information Technology Co., Ltd.
        SecEx Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,