[CODE]

2009-11-22,11:50:57

SysLog Scanner 3.0 - build 20091025
Arswp (http://www.arswp.com)

Windows XP Professional Service Pack 2 (build 2600)


================================================================
注册项


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <FishDesk> <C:\WINDOWS\system32\XPSTYLE_ThemePackage\xdeskshow2\FishDesk.exe> [鱼鱼软件, 2.1.0.709]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    <igfxtray> <C:\WINDOWS\system32\igfxtray.exe> [Intel Corporation, 3.0.0.4543]
    <igfxhkcmd> <C:\WINDOWS\system32\hkcmd.exe> [Intel Corporation, 3.0.0.4543]
    <igfxpers> <C:\WINDOWS\system32\igfxpers.exe> [Intel Corporation, 3.0.0.4543]
    <SynTPEnh> <C:\Program Files\Synaptics\SynTP\SynTPEnh.exe> [(Verified)Synaptics, Inc., 8.3.0 28Apr06]
    <RegNetPass> <C:\WINDOWS\system32\regcsp.exe> [N/A]
    <gemstrmw> <C:\WINDOWS\system32\gemstrmw.exe /r> [Gemplus, 3, 0, 11, 0]
    <runeip> <"C:\Program Files\Rising\AntiSpyware\rstray.exe" /startup> [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.17]
    <BigDog303> <C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)> [Vimicro, 4, 3, 625, 61]
    <HDCSP RegCertTool> <C:\Program Files\95599 Certificate Tools\CIDC\RegCertTool.exe> [CIDC, 1, 0, 0, 12]
    <Adobe Reader Speed Launcher> <"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"> [(Verified)Adobe Systems Incorporated, 8.0.0.0]
    <> <> []
    <RFWTray> <"C:\Program Files\Rising\RFW\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.10]
    <RavTray> <"C:\Program Files\Rising\Rav\RsTray.exe" -system> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.10]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    <KKDelay> <C:\Program Files\Rising\AntiSpyware\RunOnce.exe> [(Verified)Beijing Rising Information Technology Co., Ltd., 19, 0, 0, 3]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    <UIHost> <C:\WINDOWS\system32\XPSTYLE_ThemePackage\Logon\Logonui.exe> [Microsoft Corporation, 6.00.2900.5512 (xpsp.080413-2105)]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    <load> <> []


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]
    <igfxcui> <igfxdev.dll> [Intel Corporation, 3.0.0.4543]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions]
    <{09BA8F6D-CB54-424B-839C-C2A6C8E6B436}> <C:\Program Files\Thunder Network\Thunder\Thunder.exe> [(Verified)Thunder Networking Technologies,LTD, 5,8,10,675]
    <{346ABCF0-1C8F-46e7-A67C-0489DC2159CC}> <www.qupan.com> []
    <{8806E443-0E06-4ed9-86D3-0C2D959F83DD}> <E:\PROGRAM\China Mobile\中国移动手机桌面助理\MDA.exe> [中国移动通信集团公司, 2.1.0.123]
    <{5885C17B-E8C2-4649-941F-1C7FB6F29C03}> <D:\Backup\我的文档\我的网博士\config\ieext\网博士保存网页.htm> []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt]
    <使用MDA发送彩信> <E:\PROGRAM\China Mobile\中国移动手机桌面助理\Html\SendMMS.htm> [N/A]
    <使用MDA发送短信> <E:\PROGRAM\China Mobile\中国移动手机桌面助理\Html\SendSMS.htm> [N/A]
    <使用迅雷下载> <C:\Program Files\Thunder Network\Thunder\Program\geturl.htm> [N/A]
    <使用迅雷下载全部链接> <C:\Program Files\Thunder Network\Thunder\Program\getallurl.htm> [N/A]
    <将链接目标转换为 Adobe PDF> <res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html> []
    <将链接目标追加到现有的 PDF> <res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html> []
    <添加到QQ表情> <E:\PROGRAM\Tencent\QQ\Bin\AddEmotion.htm> [N/A]
    <网博士上次设置快速保存(Ctrl+Shift+D)> <D:\Backup\我的文档\我的网博士\config\ieext\网博士上次设置快速保存.htm> []
    <网博士保存当前图片> <D:\Backup\我的文档\我的网博士\config\ieext\网博士保存当前图片.htm> []
    <网博士保存当前链接> <D:\Backup\我的文档\我的网博士\config\ieext\网博士保存当前链接.htm> []
    <网博士保存网页> <D:\Backup\我的文档\我的网博士\config\ieext\网博士保存网页.htm> []
    <网博士保存选中部分> <D:\Backup\我的文档\我的网博士\config\ieext\网博士保存选中部分.htm> []
    <转换为 Adobe PDF> <res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html> []
    <追加到现有的 PDF> <res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html> []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MenuExt]
    <添加到QQ表情> <E:\PROGRAM\Tencent\QQ\Bin\AddEmotion.htm> [N/A]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Monitors]
    <Adobe PDF Port Monitor> <AdobePDF.dll> [(Verified)Adobe Systems Inc, 9.0.0000.0000]
    <FPP3:> <fppmon3.dll> [FinePrint Software, LLC, 3.35]
    <Microsoft Document Imaging Writer Monitor> <mdimon.dll> [Microsoft Corporation, 11.3.1897.0]

================================================================
启动组

[AvaFind]
    <C:\Documents and Settings\eboy100\「开始」菜单\程序\启动\AvaFind.lnk> <"D:\small\AvaFind\AvaFind.exe"> [http://vip.hanzify.org/yfy/, 1.5.0.218]
[Adobe Gamma Loader]
    <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\Adobe Gamma Loader.lnk> <"C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe"> [Adobe Systems, Inc., 1, 0, 0, 1]

================================================================
任务计划


================================================================
组件


--------------------------------
ShellExecuteHook
    [ShlExecHack Class]
        <{32CD708B-60A7-4C00-9377-D73EAA495F0F}> <C:\WINDOWS\system32\RavExt.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]

--------------------------------
Shell Extension
    [Display Panning CPL Extension]
        <{42071714-76d4-11d1-8b24-00a0c9068ff3}> <deskpan.dll> []
    [HyperTerminal Icon Ext]
        <{88895560-9AA2-1069-930E-00AA0030EBC8}> <C:\WINDOWS\system32\hticons.dll> [(Verified)Hilgraeve, Inc., 5.1.2600.0]
    [任务栏和「开始」菜单]
        <{0DF44EAA-FF21-4412-828E-260A8728E7F1}> <> []
    [Synaptics Control Panel]
        <{2F603045-309F-11CF-9774-0020AFD0CFF6}> <C:\Program Files\Synaptics\SynTP\SynTPCpl.dll> [(Verified)Synaptics, Inc., 8.3.0 28Apr06]
    [AutoCAD 数字签名图标覆盖处理程序]
        <{36A21736-36C2-4C11-8ACB-D4136F2B57BD}> <C:\WINDOWS\system32\AcSignIcon.dll> [Autodesk, Inc., 17.2.56.0]
    [Autodesk 图形预览]
        <{AC1DB655-4F9A-4c39-8AD2-A65324A4C446}> <C:\Program Files\Common Files\Autodesk Shared\Thumbnail\AcThumbnail16.dll> [Autodesk, Inc., 17.2.56.0]
    [AutoCAD DWG 列处理程序]
        <{8A0BC933-7552-42E2-A228-3BE055777227}> <C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll> [Autodesk, 17.2.56.0]
    [Autodesk Dgn 文件预览]
        <{ADC46291-D8A1-4486-A24C-86FFB392AEFA}> <C:\Program Files\Common Files\Autodesk Shared\AcDgnCOM17.dll> [Autodesk, 17.2.56.0]
    [NeroCoverEd Live Icons]
        <{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2}> <E:\PROGRAM\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll> [(Verified)Nero AG, 3, 3, 1, 1]
    [Edrawings Document Thumbnail Handler]
        <{21D928D4-4850-45E3-9982-AD57051ECD42}> <C:\Program Files\Common Files\eDrawings2008\edrwthumbnailprovider.dll> [Solidworks, 8.1.0.155]
    [Sorcerer Shell Extension]
        <{BAF55D20-7BC0-4bcc-A91F-A5223FFFDC9D}> <C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HP1005SX.DLL> [Software 2000 Limited, 2.8]
    [WinRAR shell extension]
        <{B41DB860-8EE4-11D2-9906-E49FADC173CA}> <C:\Program Files\WinRAR\rarext.dll> [N/A]
    [UltraISO]
        <{AD392E40-428C-459F-961E-9B147782D099}> <C:\Program Files\UltraISO\isoshell.dll> [EZB Systems, Inc., 1, 0, 0, 2]
    [Ulead UDF Driver]
        <{DBD8E168-244D-448C-9922-25508950D1DC}> <C:\Program Files\Common Files\Ulead Systems\DVD\USIShex.dll> [Ulead Systems, Inc., 1, 1, 1, 21]
    [YouKuDesktop Shell Extension]
        <{20CE0080-7137-41E6-B545-2EAEEEAB6BC9}> <C:\WINDOWS\system32\YouKuDesktopShell.dll> [(Verified)www.youku.com, 1.2.7.1700]
    [Nero Shell Extension Property Sheet]
        <{2E9D3540-211C-11d0-A5F2-00A0248C37BE}> <E:\PROGRAM\Nero\Nero8\neroshx.dll> [Ahead Software AG
im stoeckmaedle 18
76307 karlsbad, germany
Fax: ++49-7248-911-888
e-mail: info@nero.com, 5, 5, 0, 0]
    [xToolsExtension]
        <{B0AA8F05-5A43-411D-8D41-09C3299F0B60}> <D:\small\更名王\SmartRename\xToolsEx.dll> []
    [Adobe.Acrobat.ContextMenu]
        <{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}> <C:\Program Files\Adobe\Acrobat 9.0\Acrobat Elements\ContextMenu.dll> [(Verified)Adobe Systems Inc., 9.0.5.2008061100\0]
    [RISING]
        <{1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}> <C:\WINDOWS\system32\RavExt.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [UnlockerShellExtension]
        <{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}> <D:\small\Unlocker\UnlockerCOM.dll> [N/A]
    [WinMTExt extension]
        <{231B20E6-A4F5-456E-984D-BE082084A168}> <C:\Program Files\WinMount\WinMTExt3.dll> [WinMount International Inc., 3.2.1.9]

--------------------------------
ToolBar
    [Adobe PDF]
        <{47833539-D0C5-4125-9FA8-0819E2EAAC93}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll> [(Verified)Adobe Systems Incorporated, 9.0.0.2008061100]

--------------------------------
Context Menu
    [AcShellExtension.AcContextMenuHandler]
        <{2E7A2C6C-B938-40a4-BA1C-C7EC982DC202}> <C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll> [Autodesk, 17.2.56.0]
    [Adobe.Acrobat.ContextMenu]
        <{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802}> <C:\Program Files\Adobe\Acrobat 9.0\Acrobat Elements\ContextMenu.dll> [(Verified)Adobe Systems Inc., 9.0.5.2008061100\0]
    [Cover Designer]
        <{73FCA462-9BD5-4065-A73F-A8E5F6904EF7}> <E:\PROGRAM\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll> [(Verified)Nero AG, 3, 3, 1, 1]
    [iku]
        <{20CE0080-7137-41E6-B545-2EAEEEAB6BC9}> <C:\WINDOWS\system32\YouKuDesktopShell.dll> [(Verified)www.youku.com, 1.2.7.1700]
    [KDT]
        <> <> []
    [OpenFolder]
        <{0DE1378D-F811-40E6-B60A-1CC56F57D3E9}> <E:\PROGRAM\Alisoft\WangWang\AliIMExt.dll> [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    [QvodMenu]
        <{9F44453E-1E46-4D5C-B57C-112FF2EDAE82}> <D:\small\QvodPlayer\QvodBand.dll> [Shenzhen QVOD Technology Co.,Ltd, 3, 0, 0, 0]
    [RisingKaKaExt]
        <{356B11FA-929F-4eb7-8B26-D7E3184DDD16}> <C:\WINDOWS\system32\kakaext.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [RisingRavExt]
        <{1C7593CB-C1CC-4BA7-BE52-8EEA47F9CB1D}> <C:\WINDOWS\system32\RavExt.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    [ShlExtMenu]
        <{231B20E6-A4F5-456E-984D-BE082084A168}> <C:\Program Files\WinMount\WinMTExt3.dll> [WinMount International Inc., 3.2.1.9]
    [WinRAR]
        <{B41DB860-8EE4-11D2-9906-E49FADC173CA}> <C:\Program Files\WinRAR\rarext.dll> [N/A]
    [UnlockerShellExtension]
        <{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83}> <D:\small\Unlocker\UnlockerCOM.dll> [N/A]
    [UltraISO]
        <{AD392E40-428C-459F-961E-9B147782D099}> <C:\Program Files\UltraISO\isoshell.dll> [EZB Systems, Inc., 1, 0, 0, 2]
    [xToolsExtension]
        <{B0AA8F05-5A43-411D-8D41-09C3299F0B60}> <D:\small\更名王\SmartRename\xToolsEx.dll> []
    [igfxcui]
        <{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}> <C:\WINDOWS\system32\igfxpph.dll> [Intel Corporation, 3.0.0.4543]

--------------------------------
Copy Hook
    [Workslink Shell Extension]
        <{4964DBE3-1CB3-4A19-BA9D-5B629567B457}> <kdtext_1.dll> []

--------------------------------
BrowserHelperObject
    [ThunderAtOnce Class]
        <{01443AEC-0FD1-40fd-9C87-E93D1494C233}> <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34]
    [Adobe PDF Reader Link Helper]
        <{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll> [(Verified)Adobe Systems Incorporated, 9.0.0.2008061100]
    [Adobe PDF Link Helper]
        <{18DF081C-E8AD-4283-A596-FA578C2EBDC3}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll> [(Verified)Adobe Systems Incorporated, 9.0.0.2008061100]
    [EyeOnUrl Class]
        <{201C2207-DB26-411E-B11A-0FECB2B48990}> <C:\Program Files\QuPanJingLing\QupanBho.dll> [成都乾元科技有限责任公司, 1.0.0.2]
    [Thunder Browser Helper]
        <{889D2FEB-5411-4565-8998-1DD2C5261283}> <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    [卡卡上网安全助手]
        <{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}> <C:\WINDOWS\system32\UrlFilter.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15]
    [Adobe PDF Conversion Toolbar Helper]
        <{AE7CD045-E861-484f-8273-0445EE161910}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll> [(Verified)Adobe Systems Incorporated, 9.0.0.2008061100]

--------------------------------
ActiveX Extension
    [ThunderAtOnce Class]
        <{01443AEC-0FD1-40FD-9C87-E93D1494C233}> <C:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 1.0.5.34]
    [Adobe PDF Reader Link Helper]
        <{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll> [(Verified)Adobe Systems Incorporated, 9.0.0.2008061100]
    [GerneralPeerID Class]
        <{0A47E819-F82E-4D5D-B806-6A9EA94D68CD}> <C:\Program Files\Thunder Network\Thunder\Components\InMedia\peerid.dll> []
    [InfosecCertInstall Class]
        <{0EB487C8-E9AC-43A6-8C4C-083999B0622F}> <C:\WINDOWS\system32\certInStall.dll> [Copyright 2002, 1, 0, 0, 1]
    [Adobe PDF Link Helper]
        <{18DF081C-E8AD-4283-A596-FA578C2EBDC3}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll> [(Verified)Adobe Systems Incorporated, 9.0.0.2008061100]
    [GemOCX Control]
        <{1D90741B-F236-4D21-94F6-F70631BF3CA3}> <C:\WINDOWS\system32\GemOCX.ocx> [sinotrans, 1, 0, 0, 2]
    [iTrusPTA Class]
        <{1E0DFFCF-27FF-4574-849B-55007349FEDA}> <C:\WINDOWS\system32\aliedit\pta.dll> [(Verified)Copyright 2001, 2, 5, 1, 509]
    [EyeOnUrl Class]
        <{201C2207-DB26-411E-B11A-0FECB2B48990}> <C:\Program Files\QuPanJingLing\QupanBho.dll> [成都乾元科技有限责任公司, 1.0.0.2]
    [Adobe PDF]
        <{47833539-D0C5-4125-9FA8-0819E2EAAC93}> <C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll> [(Verified)Adobe Systems Incorporated, 9.0.0.2008061100]
    [Thunder Agent Class]
        <{485463B7-8FB2-4B3B-B29B-8B919B0EACCE}> <C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 6, 0, 5, 49]
    [EditCtrl Class]
        <{488A4255-3236-44B3-8F27-FA1AECAA8844}> <C:\WINDOWS\system32\aliedit\aliedit.dll> [(Verified)Copyright 2008, 2, 1, 2, 1]
    [9Box Agent Object]
        <{49484D63-60FB-4E4E-A400-9092F418CB61}> <E:\PROGRAM\Shutter\9box-shutter\NineBoxAgent.dll> [(Verified)N/A]
    [InfoSecNetSign Class]
        <{5CB840B5-A94E-4AD9-B785-4866E3B04476}> <C:\WINDOWS\system32\ICBCNE~1.DLL> [Infosec Technologies Co., Ltd., 1, 0, 0, 1]
    [WangWangX Class]
        <{5D09DD40-CDC4-4C56-B615-0D1E3B357C2B}> <E:\PROGRAM\Alisoft\WangWang\AliIMX.dll> [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    [InfoSecNetSign Class]
        <{62B938C4-4190-4F37-8CF0-A92B0A91CC77}> <C:\WINDOWS\system32\NetSign.dll> [(Verified)Infosec Technologies Co., Ltd., 1, 8, 24, 4]
    [XMP Class]
        <{6483F145-A768-4C41-AACC-52D4D7845851}> <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xplayer.dll_1_work> [Thunder Networking Technologies,LTD, 2, 1, 9, 102]
    [XDRM]
        <{693571CB-54A3-4E90-9D52-EEAE1334E2D3}> <C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xdrm.dll_1_work> [Copyright XunLei 2007, 1, 0, 0, 7]
    [WangWangObj Class]
        <{6E213FC7-DD5A-4115-B7E6-D4C7838C361E}> <E:\PROGRAM\Alisoft\WangWang\WangWangX4.dll> [阿里巴巴软件(上海)有限公司, 1, 0, 0, 1]
    [AxInputControl Class]
        <{73E4740C-08EB-4133-896B-8D0A7C9EE3CD}> <C:\WINDOWS\system32\INPUTC~1.DLL> [Copyright 2003, 1, 0, 0, 12]
    [MediaComm Class]
        <{7670648D-461B-42AF-BDFE-46D26AF5EFF2}> <C:\Program Files\Thunder Network\Thunder\Components\InMedia\MediaAddin19.dll> [(Verified)ShenZhen Thunder Networking Technologies,LTD, 3, 1, 7, 82]
    [Thunder Browser Helper]
        <{889D2FEB-5411-4565-8998-1DD2C5261283}> <C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll> [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    [XML HTTP 4.0]
        <{88D969C5-F192-11D4-A65F-0040963251E5}> <%SystemRoot%\system32\msxml4.dll> [Microsoft Corporation, 4.20.9848.0]
    [AxSubmitControl Class]
        <{8D9E0B29-563C-4226-86C1-5FF2AE77E1D2}> <C:\WINDOWS\system32\SUBMIT~1.DLL> [Copyright 2003, 1, 0, 0, 5]
    [OFrameObject Class]
        <{9701758C-4373-482E-B13C-776C048EC890}> <C:\Program Files\Common Files\Thunder Network\KanKan\DapCtrl.2.3.5814.163.(740).dll> [(Verified)ShenZhen Thunder Networking Technologies Ltd., 2, 3, 5814, 163]
    [卡卡上网安全助手]
        <{98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}> <C:\WINDOWS\system32\UrlFilter.dll> [(Verified)Beijing Rising Information Technology Co., Ltd., 6, 0, 0, 15]
    [Submit Class]
        <{A3CD7F74-93C9-4BC4-B892-CCDF1514F714}> <C:\WINDOWS\system32\safeInput4jh.dll> [Beijing eChannels Century Technology Co.,Ltd, 3, 0, 0, 0]
    [UploadFilePartition Class]
        <{A877BA28-1F7E-4876-B299-50B3199A1A5D}> <C:\WINDOWS\system32\TXGYMailActiveX.dll> [(Verified)Tencent Inc., 1, 0, 1, 31]
    [CCTVUpdateInstall]
        <{AC414988-E5BB-4C2C-873B-EA53D2F3D23A}> <C:\Documents and Settings\eboy100\Application Data\CCTV\tv\CCTVUpdateInstall.dll> [(Verified)CCTV International Networks Co.,Ltd, 1, 0, 0, 9]
    [QQPlayerCtrl Class]
        <{CD108273-D434-43E6-AA90-1469F97EB398}> <E:\PROGRAM\Tencent\QQ\Plugin\Com.Tencent.QQMusic\bin\QQMusic\QzoneMusic.dll> [(Verified)Tencent, 3, 2, 165, 710]
    [Shockwave Flash Object]
        <{D27CDB6E-AE6D-11CF-96B8-444553540000}> <C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx> [(Verified)Adobe Systems, Inc., 10,0,32,18]
    [KuAgent2 Class]
        <{D928E486-C465-4A64-976D-F3B24BBECC69}> <D:\small\iKu\YouKuAgent.dll> [(Verified)www.youku.com, 1.3.6.0]
    [PasswordEditCtrl Class]
        <{E787FD25-8D7C-4693-AE67-9406BC6E22DF}> <C:\Program Files\Common Files\Tencent\Paycenter\qqedit.dll> [(Verified)Tencent, 1, 1, 0, 7]
    [TimwpDll.TimwpCheck]
        <{ED4CA2E5-0EEA-44C1-AD7E-74A07A7507A4}> <E:\PROGRAM\Tencent\QQ\Bin\Timwp.dll> [(Verified)Tencent, 1, 40, 1390, 0]
    [XPPlayer Class]
        <{F3E70CEA-956E-49CC-B444-73AFE593AD7F}> <C:\Program Files\Common Files\Thunder Network\KanKan\PPlayer.2.1.58130.251.(741).dll> [(Verified)ShenZhen Thunder Networking Technologies Ltd., 2, 1, 58130, 251]

================================================================
服务

[Agere Modem Call Progress Audio / AgereModemAudio][Running/Auto Start]
    <C:\WINDOWS\system32\agrsmsvc.exe>  [Agere Systems, 1.0.0.4]
[C-DillaCdaC11BA / C-DillaCdaC11BA][Running/Auto Start]
    <C:\WINDOWS\system32\drivers\CDAC11BA.EXE>  [Macrovision, 4.20.020]
[EQService / EQService][Stopped/Manual Start]
    <C:\Program Files\EQSecurePro\EQService.exe>  [EQSecure, 2008, 11, 30, 26]
[FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start]
    <"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe">  [Macrovision Europe Ltd., 11.5.0.0 build 56285]
[HD_CertService / HD_CertService][Running/Auto Start]
    <C:\Program Files\95599 Certificate Tools\CIDC\HD_CertService.exe>  [版权所有 (C) 2007, 1, 0, 0, 4]
[InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
    <"C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe">  [Macrovision Corporation, 11.00.28844]
[Windows CardSpace / idsvc][/Manual Start]
    <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe">  [Microsoft Corporation, 3.0.4506.30 (WAPRTM.004506-0030)]
[KDTAnywhere Server / kdtanywhere][Stopped/Manual Start]
    <"C:\Program Files\Rising\瑞星专家服务系统-标准版\KDTAnywhereS.exe" -service>  []
[Macromedia Licensing Service / Macromedia Licensing Service][Stopped/Manual Start]
    <"C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe">  [Copyright (c) 1998-2003 Macrovision Corp., 2.42.000]
[Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled]
    <"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe">  [Microsoft Corporation, 3.0.4506.30 (WAPRTM.004506-0030)]
[SolidWorks Licensing Service / SolidWorks Licensing Service][Stopped/Manual Start]
    <"C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe">  [SolidWorks, 2.80.002]

[Autodesk Licensing Service / Autodesk Licensing Service][Stopped/Manual Start]
    <"C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe">  [(Verified)Autodesk, 2.80.011]
[Capture Device Service / Capture Device Service][Running/Auto Start]
    <"C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe">  [(Verified)InterVideo Inc., 1.0.0.1]
[Contrl Center of Storm Media / ccosm][Running/Auto Start]
    <C:\Program Files\StormII\stormliv.exe /asservice>  [(Verified)北京暴风网际科技有限公司, 3, 9, 5, 22]
[NMIndexingService / NMIndexingService][Stopped/Manual Start]
    <"C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe">  [(Verified)Nero AG, 3.3.3.0]
[Remote Packet Capture Protocol v.0 (experimental) / rpcapd][Stopped/Manual Start]
    <"%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini">  [(Verified)CACE Technologies, Inc., 4.1.0.1237]
[Rav Service / RsRavMon][Running/Auto Start]
    <"C:\Program Files\Rising\Rav\RavMonD.exe">  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
[RFW Service / RsRFWMon][Running/Auto Start]
    <"C:\Program Files\Rising\RFW\RavMonD.exe">  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
[Ulead Burning Helper / UleadBurningHelper][Running/Auto Start]
    <C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe>  [(Verified)Ulead Systems, Inc., 1, 0, 0, 5]

================================================================
驱动

[Agere Systems Soft Modem / AgereSoftModem][Running/Manual Start]
    <system32\DRIVERS\AGRSM.sys>  [Agere Systems, 2.1.75 11/08/2006 16:29:39]
[Atheros Wireless Network Adapter Service / AR5211][Running/Manual Start]
    <system32\DRIVERS\ar5211.sys>  [Atheros Communications, Inc., 5.1.1.9]
[CdaC15BA / CdaC15BA][Running/Auto Start]
    <\??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS>  [Macrovision Europe Ltd, 3.17.000]
[EQSysSecure / EQSysSecure][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\drivers\EQSysSecure.sys>  [EQSecure, 4.32]
[ghostsec / ghostsec][Stopped/Auto Start]
    <\??\D:\small\gss\ghostsec.sys>  []
[Microsoft UAA Bus Driver for High Definition Audio / HDAudBus][Running/Manual Start]
    <system32\DRIVERS\HDAudBus.sys>  [Windows (R) Server 2003 DDK provider, 5.10.01.5013 built by: WinDDK]
[ialm / ialm][Running/Manual Start]
    <system32\DRIVERS\ialmnt5.sys>  [Intel Corporation, 6.14.10.4543]
[Service for Realtek HD Audio (WDM) / IntcAzAudAddService][Running/Manual Start]
    <system32\drivers\RtkHDAud.sys>  [Realtek Semiconductor Corp., 5.10.00.5273 built by: WinDDK]
[NeroCd2k / NeroCd2k][Running/Manual Start]
    <system32\drivers\NeroCd2k.sys>  [Ahead Software AG
im Stoeckmaedle 18
76307 Karlsbad, Germany
Fax: ++49-7248-911-888
e-mail: info@nero.com, 2.0.0.3]
[npkcrypt / npkcrypt][Stopped/Auto Start]
    <\??\E:\PROGRAM\Tencent\QQ2005\npkcrypt.sys>  []
[NSNDIS5 NDIS Protocol Driver / NSNDIS5][Stopped/Manual Start]
    <\??\C:\WINDOWS\system32\NSNDIS5.SYS>  [Printing Communications Assoc., Inc. (PCAUSA), 5.03.16.58]
[PortTalk / PortTalk][Stopped/Manual Start]
    <System32\Drivers\PortTalk.sys>  [Beyond Logic http://www.beyondlogic.org, 5.00.2195.1620]
[SafeReg / SafeReg][Stopped/Manual Start]
    <\??\D:\small\系统安全盾\SafeReg.sys>  [N/A]
[TCP/IP Protocol Driver / Tcpip][Running/System Start]
    <system32\DRIVERS\tcpip.sys>  [Microsoft Corporation, 5.1.2600.3394 (xpsp_sp2_gdr.080620-1245)]
[tifm21 / tifm21][Running/Manual Start]
    <system32\drivers\tifm21.sys>  [Texas Instruments, 2.0.0.2]
[UnlockerDriver5 / UnlockerDriver5][/Boot Start]
    <\??\D:\small\Unlocker\UnlockerDriver5.sys>  [N/A]
[WMDrive / WMDrive][Running/Auto Start]
    <\??\C:\WINDOWS\system32\drivers\WMDrive.sys>  [WinMount International Inc, 3.0 built by: WinDDK]
[海天地摄像头301PLH / ZSMC303][Stopped/Manual Start]
    <System32\Drivers\usbVM303.sys>  [Vimicro Corporation, 4.3.625.61]

[Lenovo USB Still Image driver / BrScnUsb][Stopped/Manual Start]
    <System32\Drivers\BrScnUsb.sys>  [(Verified)Brother Industries Ltd., 1,0,2,1]
[中国华大智能密码钥匙驱动程序 / CIDCUSB][Stopped/Manual Start]
    <System32\Drivers\cidcusb.sys>  [(Verified)CIDC., 1, 0, 4, 4]
[GKeyUSB / GKeyUSB][Stopped/Manual Start]
    <System32\Drivers\GKeyUSB.sys>  [(Verified)Gemplus, 1,0,0,7]
[hookcont / hookcont][Running/System Start]
    <system32\drivers\HookCont.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 1]
[hooksys / hooksys][Running/System Start]
    <system32\drivers\HookSys.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 23]
[Huawei DataCard USB Modem and USB Serial / hwdatacard][Stopped/Manual Start]
    <system32\DRIVERS\ewusbmdm.sys>  [(Verified)Huawei Technologies Co., Ltd., 2. 0. 3. 819]
[LongRADrv / LongRADrv][Running/System Start]
    <\??\D:\small\Cloud\LongRADrv.sys>  [(Verified)long, 9, 9, 9, 28]
[WinPcap Packet Driver (NPF) / NPF][Stopped/Manual Start]
    <system32\drivers\NPF.sys>  [(Verified)CACE Technologies, Inc., 4.1.0.1237]
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
    <system32\DRIVERS\ptilink.sys>  [(Verified)Parallel Technologies, Inc., 1.10 (XPClient.010817-1148)]
[PxHelp20 / PxHelp20][Running/Boot Start]
    <System32\Drivers\PxHelp20.sys>  [(Verified)Sonic Solutions, 3.00.56a]
[Rising RfwARP Driver / RFWARP][Running/Auto Start]
    <system32\DRIVERS\rfwarp.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
[Rising RfwBase Driver / RfwBase9][Running/Manual Start]
    <system32\DRIVERS\rfwbase.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.3]
[rfwtdi / rfwtdi][Running/Auto Start]
    <\??\C:\Program Files\Rising\RFW\rfwtdi.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
[rsassist / rsassist][Running/Auto Start]
    <system32\drivers\rsassist.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 1, 0, 0, 1]
[rsfwdrv / rsfwdrv][Running/System Start]
    <\??\C:\Program Files\Rising\RFW\rsfwdrv.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.34]
[RsNTGDI / RsNTGDI][Running/Boot Start]
    <system32\Drivers\RsNTGdi.sys>  [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
[Secdrv / Secdrv][Stopped/Manual Start]
    <system32\DRIVERS\secdrv.sys>  [(Verified)Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K., 4.03.086]
[Synaptics TouchPad Driver / SynTP][Running/Manual Start]
    <system32\DRIVERS\SynTP.sys>  [(Verified)Synaptics, Inc., 8.3.0 28Apr06]
[NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller / yukonwxp][Running/Manual Start]
    <system32\DRIVERS\yk51x86.sys>  [(Verified)Marvell, 8.61.2.3 built by: WinDDK]

================================================================
活动进程


[PID: 1316 / SYSTEM]   \??\C:\WINDOWS\system32\winlogon.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 1372 / SYSTEM]   C:\WINDOWS\system32\lsass.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 1528 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 1588 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 1628 / SYSTEM]   C:\Program Files\Rising\Rav\RavMonD.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\combase.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17]
    C:\Program Files\Rising\Rav\cnt09.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\moncomm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\Program Files\Rising\Rav\MonBase.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\Rslog.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.41]
    C:\Program Files\Rising\Rav\mondrv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\defmon.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 44]
    C:\Program Files\Rising\Rav\moncom08.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\MonRule.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10]
    C:\Program Files\Rising\Rav\FileMon.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29]
    C:\Program Files\Rising\Rav\MailMon.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 22]
    C:\Program Files\Rising\Rav\HookWeb.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 12]
    C:\Program Files\Rising\Rav\rsindent.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11]
    C:\Program Files\Rising\Rav\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\Rav\taskplug.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\Program Files\Rising\Rav\scansrvp.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.7]
    C:\Program Files\Rising\Rav\cnt08.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Rising\Rav\proccomm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\RSAPPMGR.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rav\CfgDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rav\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\Rav\Hooksys.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 3]
    C:\Program Files\Rising\Rav\ProcCom.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    C:\Program Files\Rising\Rav\RsCommX2.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    C:\Program Files\Rising\Rav\HookCont.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 24, 0, 0, 1]
    C:\Program Files\Rising\Rav\BACore.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 29]
    C:\Program Files\Rising\Rav\recomp.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\refs.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\viruslib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\relibldr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\rsnetsvr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\bawhite.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\RSStore.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\Scanner.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.17]
    C:\Program Files\Rising\Rav\ScanAdd.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.4]
    C:\Program Files\Rising\Rav\rstask.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\rsstub.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\ScanSrv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.3]
    C:\Program Files\Rising\Rav\scanpe.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 10]
    C:\Program Files\Rising\Rav\pearc.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\ur000.dat   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\urutils.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\ffr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\nvfile.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\scanexec.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\unexe.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\scanex.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 44]
    C:\Program Files\Rising\Rav\scantj.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\methodex.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\revm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\pecompd.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\heurex.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 13]
    C:\Program Files\Rising\Rav\scansct.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\extmail.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\Rav\ScanSimT.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.5]
    C:\Program Files\Rising\Rav\ScanBT.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.18]
    C:\Program Files\Rising\Rav\ScanStub.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\Program Files\Rising\Rav\ur025.dat   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\ur023.dat   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\ur001.dat   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\ScanRavT.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.4]

[PID: 1644 / SYSTEM]   C:\Program Files\Rising\RFW\RavMonD.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\RFW\combase.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 17]
    C:\Program Files\Rising\RFW\cnt09.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\RFW\MonBase.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\RFW\MonComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\Program Files\Rising\RFW\rfwlog.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.14]
    C:\Program Files\Rising\RFW\rfwrule.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Rising\RFW\rfwsrv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.2]
    C:\Program Files\Rising\RFW\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\RFW\mPorts.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\RFW\rfwdrvc.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.1]
    C:\Program Files\Rising\RFW\Rfwdrv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.5]
    C:\Program Files\Rising\RFW\rsnetsvr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\RFW\RfwArp.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.5]
    C:\Program Files\Rising\RFW\urlrule.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\Program Files\Rising\RFW\recomp.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\RFW\refs.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\RFW\viruslib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\RFW\relibldr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\RFW\rfwproxy.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 40]
    C:\Program Files\Rising\RFW\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\RFW\rsindent.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11]
    C:\Program Files\Rising\RFW\taskplug.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 9]
    C:\Program Files\Rising\RFW\RSAPPMGR.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\RFW\CfgDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\RFW\proccomm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\RFW\NComm2.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\RFW\rstask.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 5]
    C:\Program Files\Rising\RFW\rsstub.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Rising\RFW\urllib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\WINDOWS\system32\NpOpenStore.dll   [N/A]
    C:\WINDOWS\system32\NPCard.dll   [N/A]
    C:\WINDOWS\system32\RsaFun.dll   [N/A]
    C:\WINDOWS\system32\GPKPCSC.dll   [N/A]

[PID: 1660 / SYSTEM]   C:\WINDOWS\System32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\System32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 1904 / NETWORK SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 2044 / LOCAL SERVICE]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 620 / SYSTEM]   C:\WINDOWS\system32\spoolsv.exe   [(Verified)Microsoft Corporation, 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\AdobePDF.dll   [(Verified)Adobe Systems Inc, 9.0.0000.0000]
    C:\WINDOWS\system32\fppmon3.dll   [FinePrint Software, LLC, 3.35]
    C:\WINDOWS\system32\fppr332.dll   [FinePrint Software, LLC, 3.35]
    C:\WINDOWS\system32\mdimon.dll   [Microsoft Corporation, 11.3.1897.0]
    C:\WINDOWS\System32\spool\PRTPROCS\W32X86\HP1005S.DLL   [Hewlett-Packard , 1.0.0.3]
    C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll   [Microsoft Corporation, 11.3.1897.0]
    C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll   [Microsoft Corporation, 6.0.5824.16384 (winmain(wmbla).060911-0725)]

[PID: 740 / LOCAL SERVICE]   C:\WINDOWS\System32\SCardSvr.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\System32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 756 / eboy100]   C:\WINDOWS\Explorer.EXE   [(Verified)Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\AcSignIcon.dll   [Autodesk, Inc., 17.2.56.0]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80U.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\MFC80CHS.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\WINDOWS\system32\RavExt.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll   [Autodesk, Inc., 17.2.56.0]
    D:\small\Unlocker\UnlockerCOM.dll   [N/A]
    C:\Program Files\WinRAR\rarext.dll   [N/A]
    C:\Program Files\WinMount\WinMTExt3.dll   [WinMount International Inc., 3.2.1.9]
    C:\Program Files\WinMount\ShlExt\MountExt.dll   [N/A]
    C:\Program Files\WinMount\Lang.dll   [N/A]
    C:\Program Files\WinMount\ShlExt\BrowserExt.dll   [N/A]
    C:\WINDOWS\system32\kakaext.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    D:\small\QvodPlayer\QvodBand.dll   [Shenzhen QVOD Technology Co.,Ltd, 3, 0, 0, 0]
    E:\PROGRAM\Alisoft\WangWang\AliIMExt.dll   [(Verified)Alibaba software (Shanghai) Corporation., 1.0.0.1]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll   [Microsoft Corporation, 5.2.6001.22319 (vistasp1_ldr.081126-1506)]
    C:\WINDOWS\system32\YouKuDesktopShell.dll   [(Verified)www.youku.com, 1.2.7.1700]
    E:\PROGRAM\Nero\Nero8\Nero CoverDesigner\CoverEdExtension.dll   [(Verified)Nero AG, 3, 3, 1, 1]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\Program Files\Adobe\Acrobat 9.0\Acrobat Elements\ContextMenu.dll   [(Verified)Adobe Systems Inc., 9.0.5.2008061100\0]
    C:\Program Files\Adobe\Acrobat 9.0\Acrobat Elements\ContextMenu.chs   [Adobe Systems Inc., 9.0.5.2008061100\0]
    C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll   [Autodesk, 17.2.56.0]
    C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.CHS   [Adobe Systems, Inc., 9.0.0.0]
    C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll   [(Verified)Adobe Systems, Inc., 9.0.0.2008061100]
    C:\WINDOWS\system32\igfxpph.dll   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\hccutils.DLL   [Intel Corporation, 3.0.0.4543]
    C:\Program Files\UltraISO\isoshell.dll   [EZB Systems, Inc., 1, 0, 0, 2]

[PID: 1080 / eboy100]   C:\WINDOWS\system32\igfxtray.exe   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\hccutils.DLL   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\igfxsrvc.dll   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\igfxres.dll   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\igfxress.dll   [Intel Corporation, 3.0.0.4543]

[PID: 1088 / eboy100]   C:\WINDOWS\system32\hkcmd.exe   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\hccutils.DLL   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\igfxsrvc.dll   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\igfxres.dll   [Intel Corporation, 3.0.0.4543]

[PID: 1100 / eboy100]   C:\WINDOWS\system32\igfxpers.exe   [Intel Corporation, 3.0.0.4543]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\igfxsrvc.dll   [Intel Corporation, 3.0.0.4543]

[PID: 1136 / eboy100]   C:\Program Files\Synaptics\SynTP\SynTPEnh.exe   [(Verified)Synaptics, Inc., 8.3.0 28Apr06]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\SynCOM.dll   [(Verified)Synaptics, Inc., 8.3.0 28Apr06]
    C:\WINDOWS\system32\SynTPAPI.dll   [(Verified)Synaptics, Inc., 8.3.0 28Apr06]

[PID: 1208 / eboy100]   C:\Program Files\Rising\AntiSpyware\rstray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.17]
    C:\Program Files\Rising\AntiSpyware\rsmginfo.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 11]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Rising\AntiSpyware\RsXML.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 2]
    C:\Program Files\Rising\AntiSpyware\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\Program Files\Rising\AntiSpyware\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Rising\AntiSpyware\ComServ.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.31]
    C:\Program Files\Rising\AntiSpyware\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\AntiSpyware\rscommon.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20.0.1.1]
    C:\Program Files\Rising\AntiSpyware\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\AntiSpyware\pngdll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 5]
    C:\Program Files\Rising\AntiSpyware\runiep.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.44]
    C:\Program Files\Rising\AntiSpyware\NComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 6.0.0.11]
    C:\Program Files\Rising\Rav\ProcCom.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]
    C:\Program Files\Rising\AntiSpyware\RsCommX2.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 20, 0, 0, 20]

[PID: 1224 / eboy100]   C:\WINDOWS\VM303_STI.EXE   [Vimicro, 4, 3, 625, 61]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]

[PID: 1240 / eboy100]   C:\Program Files\95599 Certificate Tools\CIDC\RegCertTool.exe   [CIDC, 1, 0, 0, 12]
    C:\WINDOWS\system32\HDIFD20B.dll   [CIDC., 1, 0, 17, 29]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 1756 / eboy100]   C:\Program Files\Rising\RFW\RsTray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.10]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Rising\RFW\comserv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.15]
    C:\Program Files\Rising\RFW\rslang.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\RFW\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\RFW\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\RFW\ProcComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\RFW\rsxml.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\RFW\MonState.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\RFW\rfwrule.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Rising\RFW\rsconf.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\Program Files\Rising\RFW\rspalvd.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.6]
    C:\Program Files\Rising\RFW\rsguilib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55]
    C:\Program Files\Rising\RFW\ravbintl.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21]
    C:\Program Files\Rising\RFW\rsnetsvr.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\RFW\rsmginfo.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\RFW\rfwtray.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 38]
    C:\Program Files\Rising\RFW\ravppops.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21]
    C:\Program Files\Rising\RFW\RSAPPMGR.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\RFW\CfgDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\RFW\PngDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    C:\Program Files\Rising\RFW\rfwlog.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.14]

[PID: 1776 / eboy100]   C:\Program Files\Rising\Rav\RsTray.exe   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.10]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Rising\Rav\comserv.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.15]
    C:\Program Files\Rising\Rav\rslang.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 1]
    C:\Program Files\Rising\Rav\comx3.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.37]
    C:\Program Files\Rising\Rav\Syslay.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21.0.0.6]
    C:\Program Files\Rising\Rav\ProcComm.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 4]
    C:\Program Files\Rising\Rav\rsxml.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\MonState.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 2]
    C:\Program Files\Rising\Rav\ScanEvnt.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.3]
    C:\Program Files\Rising\Rav\rsguilib.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 55]
    C:\Program Files\Rising\Rav\rsconf.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]
    C:\Program Files\Rising\Rav\rspalvd.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.6]
    C:\Program Files\Rising\Rav\ravbintl.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21]
    C:\Program Files\Rising\Rav\mruleui.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 7]
    C:\Program Files\Rising\Rav\MonTray.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.72]
    C:\Program Files\Rising\Rav\RavITray.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\rsmginfo.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 3]
    C:\Program Files\Rising\Rav\scanleak.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 6]
    C:\Program Files\Rising\Rav\ravppops.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 21]
    C:\Program Files\Rising\Rav\RSAPPMGR.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rav\CfgDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.0]
    C:\Program Files\Rising\Rav\PngDll.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 21, 0, 0, 4]
    C:\Program Files\Rising\Rav\ScanPrxy.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.4]

[PID: 1832 / eboy100]   C:\WINDOWS\system32\ctfmon.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 1880 / eboy100]   C:\WINDOWS\system32\XPSTYLE_ThemePackage\xdeskshow2\FishDesk.exe   [鱼鱼软件, 2.1.0.709]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll   [Microsoft Corporation, 5.2.6001.22319 (vistasp1_ldr.081126-1506)]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Rising\Rav\RavScrCh.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\WINDOWS\system32\msxml4.dll   [Microsoft Corporation, 4.20.9848.0]
    C:\WINDOWS\system32\XPSTYLE_ThemePackage\xdeskshow2\Res\dll\XDeskScripter.dll   [鱼鱼软件 cfishsoft, 2.3.1.0]
    C:\WINDOWS\system32\RavExt.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22.0.0.1]

[PID: 1992 / eboy100]   D:\small\AvaFind\AvaFind.exe   [http://vip.hanzify.org/yfy/, 1.5.0.218]
    D:\small\AvaFind\dbghelp.dll   [Microsoft Corporation, 6.2.0013.1 (DbgBuild.030619-2209)]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\AcSignIcon.dll   [Autodesk, Inc., 17.2.56.0]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80U.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\MFC80CHS.DLL   [Microsoft Corporation, 8.00.50727.4053]

[PID: 336 / SYSTEM]   C:\WINDOWS\system32\agrsmsvc.exe   [Agere Systems, 1.0.0.4]

[PID: 648 / SYSTEM]   C:\WINDOWS\system32\drivers\CDAC11BA.EXE   [Macrovision, 4.20.020]

[PID: 144 / SYSTEM]   C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe   [(Verified)InterVideo Inc., 1.0.0.1]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_473666fd\ATL80.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 1708 / SYSTEM]   C:\Program Files\StormII\stormliv.exe   [(Verified)北京暴风网际科技有限公司, 3, 9, 5, 22]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\StormII\bfoptdll.dll   [北京暴风网际科技有限公司, 3, 8, 7, 16]
    C:\Program Files\StormII\box\BoxLog.dll   [(Verified)北京暴风网际科技有限公司, 3, 9, 6, 27]

[PID: 2092 / SYSTEM]   C:\Program Files\95599 Certificate Tools\CIDC\HD_CertService.exe   [版权所有 (C) 2007, 1, 0, 0, 4]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 2156 / SYSTEM]   C:\WINDOWS\system32\svchost.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 2228 / SYSTEM]   C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe   [(Verified)Ulead Systems, Inc., 1, 0, 0, 5]

[PID: 2304 / SYSTEM]   C:\WINDOWS\system32\fxssvc.exe   [(Verified)Microsoft Corporation, 5.2.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 2888 / eboy100]   C:\WINDOWS\system32\wscntfy.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 2984 / LOCAL SERVICE]   C:\WINDOWS\System32\alg.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\System32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 3348 / eboy100]   C:\Program Files\Maxthon2\Maxthon.exe   [(Verified)Maxthon International ltd., 2, 5, 5, 308]
    C:\Program Files\Maxthon2\MxPp.dll   [(Verified)Maxthon International ltd., 1, 0, 0, 295]
    C:\Program Files\Maxthon2\MxSk.dll   [(Verified)Maxthon, 1, 0, 0, 475]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll   [Microsoft Corporation, 5.2.6001.22319 (vistasp1_ldr.081126-1506)]
    C:\Program Files\Maxthon2\MxProxy2.dll   [(Verified)Maxthon International ltd., 1, 0, 0, 4254]
    C:\Program Files\Maxthon2\MxUI.dll   [(Verified)Maxthon International Ltd., 3, 3, 1, 8]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Maxthon2\mxtool2.dll   [(Verified)Copyright 2005, 1, 0, 0, 1]
    C:\Program Files\Maxthon2\maxzlib.dll   [(Verified)(C) 1995-2004 Jean-loup Gailly & Mark Adler, 1.2.3]
    C:\WINDOWS\system32\AcSignIcon.dll   [Autodesk, Inc., 17.2.56.0]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80U.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\MFC80CHS.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\Program Files\Maxthon2\Modules\MxWebBoost\MxWebBoost.dll   [(Verified)Maxthon, 1,0,2,1269]
    C:\Program Files\Maxthon2\mxdb.dll   [(Verified)Max, 3, 5, 3, 125]
    C:\Program Files\Maxthon2\Modules\MxHistory\MxHistory.dll   [(Verified)Maxthon International ltd., 1, 0, 0, 302]
    C:\Program Files\Maxthon2\Modules\MxPageSearch\MxPageSearch.dll   [(Verified)Maxthon International ltd., 1,0,0,1892]
    C:\Program Files\Maxthon2\MxFav.dll   [(Verified)Maxthon International ltd., 2, 0, 0, 98]
    C:\Program Files\Rising\Rav\RavScrCh.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]
    C:\WINDOWS\system32\UNISPIM6.IME   [(Verified)北京紫光华宇软件股份有限公司, 6.2.0.7]
    C:\WINDOWS\system32\rmoc3260.dll   [(Verified)RealNetworks, Inc., 6.0.9.2568]
    C:\WINDOWS\system32\PNCRT.dll   [Real Networks, Inc, 6.0.0.0]
    C:\Program Files\Common Files\Real\Common\pnrs3260.dll   [RealNetworks, Inc., 6.0.9.4317]
    C:\Documents and Settings\All Users\Application Data\Thunder Network\KanKan\xmvsource.dll_1_work   [XunLei, 1, 0, 0, 5]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]
    C:\Program Files\StormII\Codec\ffdshow.ax   [Copyright © 2002-2008, 3.8.10.27]
    C:\WINDOWS\system32\empgdmx.ax   [Elecard Ltd., 1, 0, 19, 51017]
    C:\Program Files\Thunder Network\Thunder\ComDlls\xunleiBHO_Now.dll   [(Verified)Thunder Networking Technologies,LTD, 5, 0, 8, 120]
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\UNIDRVUI.DLL   [Microsoft Corporation, 6.0.6000.20691 (vista_ldr.071001-1600)]
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\UNIDRV.DLL   [Microsoft Corporation, 6.0.6001.22116 (vistasp1_ldr.080215-1730)]
    C:\Program Files\Common Files\Autodesk Shared\AcSignCore16.dll   [Autodesk, Inc., 17.2.56.0]
    C:\WINDOWS\system32\l3codeca.acm   [(Verified)Fraunhofer Institut Integrierte Schaltungen IIS, 1, 9, 0, 0305]
    C:\Program Files\Thunder Network\Thunder\ComDlls\ThunderAgent_Now.dll   [(Verified)Thunder Networking Technologies,LTD, 6, 0, 5, 49]
    C:\WINDOWS\system32\JPWB.IME   [常诚研制, 4.00.950]

[PID: 3152 / eboy100]   C:\Program Files\Thunder Network\Thunder\Program\Thunder5.exe   [(Verified)Thunder Networking Technologies,LTD, 5.8.10.675]
    C:\Program Files\Thunder Network\Thunder\Program\BugReport.dll   [Thunder Networking Technologies,LTD, 1, 4, 1, 20]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Thunder Network\Thunder\Program\TaskManager.dll   [Thunder Networking Technologies,LTD, 1, 3, 10, 74]
    C:\Program Files\Thunder Network\Thunder\Program\download_interface.dll   [Thunder Networking Technologies,LTD, 3, 4, 2, 333]
    C:\Program Files\Thunder Network\Thunder\Program\mp.dll   [Thunder Networking Technologies,LTD, 1, 0, 2, 5]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\Program Files\Thunder Network\Thunder\Program\asyn_frame.dll   [Thunder Networking Technologies,LTD, 1, 3, 2, 32]
    C:\Program Files\Thunder Network\Thunder\Program\ATL71.DLL   [Microsoft Corporation, 7.10.3077.0]
    C:\Program Files\Thunder Network\Thunder\Program\XLNet.Dll   [Thunder Networking Technologies,LTD, 1, 5, 2, 25]
    C:\Program Files\Thunder Network\Thunder\Program\BHOStub.dll   [Thunder Networking Technologies,LTD, 1, 1, 1, 13]
    C:\Program Files\Thunder Network\Thunder\Components\DownAndPlay\DownAndPlay.dll   [Thunder Networking Technologies,LTD, 1, 0, 12, 30]
    C:\Program Files\Thunder Network\Thunder\Program\backend_agent.dll   [Thunder Networking Technologies,LTD, 1, 1, 2, 27]
    C:\Program Files\Thunder Network\Thunder\Program\zlib1.dll   [(C) 1995-2004 Jean-loup Gailly & Mark Adler, 1.2.3]
    C:\Program Files\Thunder Network\Thunder\Program\emule.dll   [Thunder Networking Technologies,LTD, 1, 1, 2, 48]
    C:\Program Files\Thunder Network\Thunder\Program\fs.dll   [Thunder Networking Technologies,LTD, 1, 1, 2, 17]
    C:\Program Files\Thunder Network\Thunder\Program\down_dispatcher.dll   [Thunder Networking Technologies,LTD, 1, 0, 2, 44]
    C:\Program Files\Thunder Network\Thunder\Program\ptl.dll   [Thunder Networking Technologies,LTD, 3, 2, 2, 55]
    C:\Program Files\Thunder Network\Thunder\Program\dl_peer_id.dll   [Thunder Networking Technologies,LTD, 3, 1, 2, 4]
    C:\Program Files\Thunder Network\Thunder\Program\xl_stat.dll   [Thunder Networking Technologies,LTD, 1, 0, 2, 7]
    C:\Program Files\Thunder Network\Thunder\Program\p2p_upload.dll   [Thunder Networking Technologies,LTD, 1,1,2,13]
    C:\Program Files\Thunder Network\Thunder\Program\p2p.dll   [Thunder Networking Technologies,LTD, 1,1,2,48]
    C:\Program Files\Thunder Network\Thunder\Program\xldc.dll   [Thunder Networking Technologies,LTD, 4, 0, 2, 28]
    C:\Program Files\Thunder Network\Thunder\Program\stream.dll   [ShenZhen Thunder Networking Technologies,Ltd., 2, 1, 2, 1045]
    C:\Program Files\Thunder Network\Thunder\Program\p2sp.dll   [Thunder Networking Technologies,LTD, 1, 1, 2, 59]
    C:\Program Files\Thunder Network\Thunder\Program\p2p_local_res.dll   [Thunder Networking Technologies,LTD, 1,1,2,18]
    C:\Program Files\Thunder Network\Thunder\Program\p2sp_pd.dll   [Thunder Networking Technologies,LTD, 1, 0, 2, 5]
    C:\Program Files\Thunder Network\Thunder\Program\al.dll   [Thunder Networking Technologies,LTD, 1,1,2,31]
    C:\Program Files\Thunder Network\Thunder\Program\media_data.dll   [Thunder Networking Technologies,LTD, 1, 0, 2, 7]
    C:\Program Files\Thunder Network\Thunder\Program\sl.dll   [Thunder Networking Technologies,LTD, 1.0.2.2]
    C:\Program Files\Thunder Network\Thunder\Program\iTargetAD.dll   [Thunder Networking Technologies,LTD, 1, 0, 4, 35]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]
    C:\Program Files\Thunder Network\Thunder\Components\youyou\Youyou.dll   [Thunder Networking Technologies,LTD, 1.1.0.2]
    C:\WINDOWS\system32\AcSignIcon.dll   [Autodesk, Inc., 17.2.56.0]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80U.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\MFC80CHS.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\Program Files\Rising\Rav\RavScrCh.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11]
    C:\Program Files\Thunder Network\Thunder\Program\xldcsubtask.dll   [Thunder Networking Technologies,LTD, 1, 0, 2, 13]
    C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbedShell.dll   [ShenZhen Thunder Networking Technologies,LTD, 3, 4, 12, 125]
    C:\Program Files\Thunder Network\Thunder\Components\InMedia\iEmbed22.dll   [ShenZhen Thunder Networking Technologies,LTD, 3, 4, 12, 125]
    C:\Program Files\Thunder Network\Thunder\Components\InMedia\XLIPC.DLL   [ShenZhen Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    C:\Program Files\Thunder Network\Thunder\Components\Community\XLCommunity.dll   [Thunder Networking Technologies,LTD, 2, 6, 0, 106]
    C:\Program Files\Thunder Network\Thunder\Program\RegisterDll.dll   [Thunder Networking Technologies,LTD, 2, 17, 0, 67]
    C:\Program Files\Thunder Network\Thunder\Program\MSVCIRT.dll   [Microsoft Corporation, 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\Program Files\Thunder Network\Thunder\Program\emule_id.dll   [Thunder Networking Technologies,LTD, 1, 0, 2, 12]
    C:\Program Files\Thunder Network\Thunder\Program\XLNetU.Dll   [Thunder Networking Technologies,LTD, 1, 5, 1, 24]
    C:\Program Files\Thunder Network\Thunder\Program\imdt.dll   [Thunder Networking Technologies,LTD, 1.2.0.21]
    C:\Program Files\Thunder Network\Thunder\Components\Security\ThunderSafe.dll   [Thunder Networking Technologies,LTD, 2, 1, 8, 108]
    C:\Program Files\Thunder Network\Thunder\Components\Security\ConfigManager.dll   [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    C:\Program Files\Thunder Network\Thunder\Components\Security\SafeManager.dll   [Thunder Networking Technologies,LTD, 1, 0, 6, 21]
    C:\Program Files\Thunder Network\Thunder\Components\Security\SafeStatistic.dll   [Thunder Networking Technologies,LTD, 1, 0, 0, 1]
    C:\Program Files\Thunder Network\Thunder\Plugins\XLSafeHost\XLSafeHost.dll   [深圳市迅雷网络技术有限公司, 1, 2, 19, 106]
    C:\Program Files\Thunder Network\Thunder\Components\Search\XLSearch.dll   [Thunder Networking Technologies,LTD, 1, 1, 7, 25]
    C:\Program Files\Thunder Network\Thunder\Program\LiveUpdate.dll   [Thunder Networking Technologies,LTD, 1, 2, 4, 26]
    C:\Program Files\Thunder Network\Thunder\Components\ExplorerHelper\ExplorerHelper.dll   [Thunder Networking Technologies,LTD, 1, 0, 4, 26]
    C:\Program Files\Thunder Network\Thunder\Components\Tips\TipsClient.dll   [Thunder Networking Technologies,LTD, 3, 0, 2, 131]
    C:\Program Files\Thunder Network\Thunder\Components\Tips\XLSkin.dll   [Thunder Networking Technologies,LTD, 1, 0, 0, 2]
    C:\Program Files\Thunder Network\Thunder\Components\VPSHELL\VPSHELL.dll   [Thunder Networking Technologies,LTD, 4, 0, 0, 38]
    C:\Program Files\Thunder Network\Thunder\Components\UserExperience\UserExperience.dll   [Thunder Networking Technologies,LTD, 1, 0, 3, 5]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DsXlCom.dll   [Thunder Networking Technologies,LTD, 1, 0, 0, 30]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\DataProcessor_00.dll   [Thunder Networking Technologies,LTD, 1, 0, 0, 16]
    C:\Program Files\Thunder Network\Thunder\Components\ResWorker\MediaWorker.dll   [Thunder Networking Technologies,LTD, 1, 2, 0, 22]
    C:\Program Files\Thunder Network\Thunder\Components\DownloadStat\DownloadStat.dll   [Thunder Networking Technologies,LTD, 1, 4, 1, 6]
    C:\Program Files\Thunder Network\Thunder\Program\bd.dll   [Thunder Networking Technologies,LTD, 1, 0, 2, 20]
    C:\Program Files\Thunder Network\Thunder\Program\FloatBar.dll   [Thunder Networking Technologies,LTD, 1, 0, 0, 2]

[PID: 3632 / eboy100]   D:\small\KWMUSIC\KwMusic.exe   [酷我科技, 2, 4, 2, 3]
    D:\small\KWMUSIC\http.dll   [N/A]
    D:\small\KWMUSIC\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    D:\small\KWMUSIC\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    D:\small\KWMUSIC\zlib.dll   [N/A]
    D:\small\KWMUSIC\dotag.dll   [N/A]
    D:\small\KWMUSIC\player.dll   [N/A]
    D:\small\KWMUSIC\KwLogSvr.dll   [N/A]
    D:\small\KWMUSIC\Mplayer.dll   [酷我科技, 2.0.0.2]
    D:\small\KWMUSIC\MFC71.DLL   [Microsoft Corporation, 7.10.3077.0]
    D:\small\KWMUSIC\pd.dll   [N/A]
    D:\small\KWMUSIC\FZip.dll   [N/A]
    D:\small\KWMUSIC\Reco.dll   [N/A]
    D:\small\KWMUSIC\CM.dll   [N/A]
    D:\small\KWMUSIC\ex_dll.dll   [N/A]
    D:\small\KWMUSIC\LocalServer.dll   [N/A]
    C:\WINDOWS\system32\MFC71CHS.DLL   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll   [Microsoft Corporation, 5.2.6001.22319 (vistasp1_ldr.081126-1506)]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]
    C:\Program Files\Rising\Rav\RavScrCh.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11]
    C:\WINDOWS\system32\msdmo.dll   [(Verified)N/A]

[PID: 3596 / eboy100]   D:\small\KWMUSIC\kwmv.exe   [N/A]
    D:\small\KWMUSIC\KwLogSvr.dll   [N/A]
    D:\small\KWMUSIC\http.dll   [N/A]
    D:\small\KWMUSIC\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    D:\small\KWMUSIC\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    D:\small\KWMUSIC\zlib.dll   [N/A]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    D:\small\KWMUSIC\lidx.dll   [N/A]

[PID: 300 / eboy100]   C:\WINDOWS\regedit.exe   [(Verified)Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\UxTheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]

[PID: 3880 / eboy100]   D:\small\arswp3\arswp3.exe   [(Verified)Windows 清 理 助 手, 3.0.10.1105]
    C:\WINDOWS\system32\uxtheme.dll   [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
    C:\WINDOWS\system32\NpOpenStore.dll   [N/A]
    C:\WINDOWS\system32\NPCard.dll   [N/A]
    C:\WINDOWS\system32\RsaFun.dll   [N/A]
    C:\WINDOWS\system32\GPKPCSC.dll   [N/A]
    C:\WINDOWS\system32\AcSignIcon.dll   [Autodesk, Inc., 17.2.56.0]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\MFC80U.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\MFC80CHS.DLL   [Microsoft Corporation, 8.00.50727.4053]
    C:\Program Files\Rising\Rav\RavScrCh.dll   [(Verified)Beijing Rising Information Technology Co., Ltd., 22, 0, 0, 11]
    C:\WINDOWS\system32\MSVCP71.dll   [Microsoft Corporation, 7.10.3077.0]
    C:\WINDOWS\system32\MSVCR71.dll   [Microsoft Corporation, 7.10.3052.4]
    C:\WINDOWS\system32\Macromed\Flash\Flash10c.ocx   [(Verified)Adobe Systems, Inc., 10,0,32,18]

================================================================
文件关联

[.chm] <"hh.exe" %1> [Microsoft Corporation, 4.73.8412]
[.chm] <"hh.exe" %1> [Microsoft Corporation, 4.73.8412]

================================================================
Autorun.Inf

================================================================
Winsock提供者


================================================================
隐藏进程


================================================================
可疑文件


================================================================
HOSTS

    127.0.0.1 localhost


[/CODE]
