瑞星卡卡电脑诊断日志 v1.30 (2009-12-3 21:57:11) 北京瑞星信息技术有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services Ati HotKey Poller [AM] 1. c:\windows\system32\ati2evxx.exe ATI Technologies Inc. ATI External Event Utility EXE Module .text,.rdata,.data,.rsrc, MDM [AM] 2. c:\program files\common files\microsoft shared\vs7debug\mdm.exe Microsoft Corporation Machine Debug Manager .text,.data,.rsrc, ose [A ] 3. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, RsRisMon [AM] 4. d:\rising\ris\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, + 内核驱动 + HKLM\System\CurrentControlSet\Services Alidevice [A ] 5. c:\windows\system32\drivers\alidevice.sys alipay.com Windows NT alipay kernel module .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, amdide [A ] 6. c:\windows\system32\drivers\amdide.sys Advanced Micro Devices AMD PCI SATA/IDE Bus Driver .text,.rdata,.data,INIT,.rsrc,.reloc, AmdK8 [A ] 7. c:\windows\system32\drivers\amdk8.sys Advanced Micro Devices AMD Processor Driver .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc, AmdLLD [A ] 8. c:\windows\system32\drivers\amdlld.sys AMD, Inc. AMD Low Level Device Driver .text,.rdata,.data,INIT,.rsrc,.reloc, AsIO [A ] 9. c:\windows\system32\drivers\asio.sys .text,.rdata,.data,INIT,.reloc, HDAudBus [A ] 10. c:\windows\system32\drivers\hdaudbus.sys Windows (R) Server 2003 DDK provider High Definition Audio Bus Driver v1.0a .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, hookcont [A ] 11. c:\windows\system32\drivers\hookcont.sys Beijing Rising Information Technology Co., Ltd. HookCont Driver for x86 .text,.rdata,.data,INIT,.rsrc,.reloc, hooksys [A ] 12. c:\windows\system32\drivers\hooksys.sys Beijing Rising Information Technology Co., Ltd. Hooksys.sys .text,.rdata,.data,INIT,.rsrc,.reloc, monfilt [A ] 13. c:\windows\system32\drivers\monfilt.sys Creative Technology Ltd. Creative WDM Audio Driver (32-bit) .text,page,init,.data,.CRT,init,INIT,.rsrc,.reloc, MTsensor [A ] 14. c:\windows\system32\drivers\asacpi.sys ATK0110 ACPI Utility .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, RFWARP [A ] 15. c:\windows\system32\drivers\rfwarp.sys Beijing Rising Information Technology Co., Ltd. rfwarp.sys .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, RfwBase9 [A ] 16. c:\windows\system32\drivers\rfwbase.sys Beijing Rising Information Technology Co., Ltd. rfwbase5.sys .text,.rdata,.data,INIT,.rsrc,.reloc, rfwtdi [A ] 17. d:\rising\ris\rfwtdi.sys Beijing Rising Information Technology Co., Ltd. rfwtdi.sys .text,.rdata,.data,INIT,.rsrc,.reloc, rsassist [A ] 18. c:\windows\system32\drivers\rsassist.sys Beijing Rising Information Technology Co., Ltd. RsAssist.sys .text,.rdata,.data,INIT,.rsrc,.reloc, rsfwdrv [A ] 19. d:\rising\ris\rsfwdrv.sys Beijing Rising Information Technology Co., Ltd. rsfwdrv.sys .text,.rdata,.data,INIT,.rsrc,.reloc, RsNTGDI [A ] 20. c:\windows\system32\drivers\rsntgdi.sys Beijing Rising Information Technology Co., Ltd. RsNTGDI .text,.rdata,INIT,.rsrc,.reloc, RsProtect [A ] 21. c:\windows\system32\drivers\rsptect.sys RTLE8023xp [A ] 22. c:\windows\system32\drivers\rtenicxp.sys Realtek Semiconductor Corporation Realtek 10/100/1000 NDIS 5.1 Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, Secdrv [A ] 23. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SiFilter [A ] 24. c:\windows\system32\drivers\siwinacc.sys Silicon Image, Inc. Windows Accelerator Driver .text,.rdata,.data,INIT,.rsrc,.reloc, Tcpip [A ] 25. c:\windows\system32\drivers\tcpip.sys Microsoft Corporation TCP/IP Protocol Driver .text,.rdata,.data,PAGE,PAGELK,PAGEIPMc,.edata,INIT,.rsrc,.reloc, VIAHdAudAddService [A ] 26. c:\windows\system32\drivers\viahduaa.sys VIA Technologies, Inc. VIA High Definition Audio Function Driver .text,CODE,.rdata,.data,PAGE,INIT,.rsrc,.reloc, vmmouse [A ] 27. c:\windows\system32\drivers\vmmouse.sys VMware, Inc. VMware Pointing Device Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, + 文件系统驱动 + HKLM\System\CurrentControlSet\Services exFat [A ] 28. c:\windows\system32\drivers\exfat.sys Microsoft Corporation Microsoft Extended FAT File System .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, + 系统登陆自运行 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify AtiExtEvent [AM] 29. c:\windows\system32\ati2evxx.dll ATI Technologies Inc. ATI External Event Utility DLL Module .text,.rdata,.data,.rsrc,.reloc, + HKCU\Control Panel\Desktop Scrnsave.exe [A ] 30. c:\windows\system32\ssmypics.scr Microsoft Corporation My Pictures Slideshow Screensaver .text,.data,.rsrc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} [A ] 31. c:\windows\system32\kakatool.dll Beijing Rising Information Technology Co., Ltd. ToolBar .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {01443AEC-0FD1-40fd-9C87-E93D1494C233} [A ] 32. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, {889D2FEB-5411-4565-8998-1DD2C5261283} [A ] 33. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [A ] 34. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [AM] 35. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 36. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, Portable Media Devices [A ] 37. c:\windows\system32\audiodev.dll Microsoft Corporation 便携媒体设备命令行解释器扩展 .text,.data,.rsrc,.reloc, Portable Media Devices Menu [A ] 37. c:\windows\system32\audiodev.dll Microsoft Corporation 便携媒体设备命令行解释器扩展 .text,.data,.rsrc,.reloc, WinRAR shell extension [A ] 38. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, Microsoft Office HTML Icon Handler [A ] 39. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 40. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, Microsoft Office Metadata Handler [A ] 41. c:\program files\common files\microsoft shared\office12\msoshext.dll Microsoft Corporation Microsoft Office Shell Extension Handlers .text,.data,.rsrc,.reloc, Microsoft Office Thumbnail Handler [A ] 41. c:\program files\common files\microsoft shared\office12\msoshext.dll Microsoft Corporation Microsoft Office Shell Extension Handlers .text,.data,.rsrc,.reloc, RISING [A ] 42. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKLM\Software\Microsoft\Windows\CurrentVersion\Run amd_dc_opt [A ] 43. c:\program files\amd\dual-core optimizer\amd_dc_opt.exe AMD AMD Dual-Core Optimizer .text,.rdata,.data,.rsrc, Six Engine [AM] 44. c:\program files\asus\epu-4 engine\fourengine.exe .text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc, RisTray [AM] 45. d:\rising\ris\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, runeip [AM] 46. d:\ files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 47. c:\windows\system32\bsmain.exe Beijing Rising Information Technology Co., Ltd. Rising Antivirus 2010 .text,.rdata,.data,.rsrc,.reloc, + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 48. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\open\Command [A ] 49. d:\常用软件\遨游游览器\maxthon2\maxthon.exe Maxthon International ltd. Maxthon Browser .text,.rdata,.data,.rsrc,.reloc, htmlfile\Print\Command [A ] 48. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\傲游(Maxthon)\Command [A ] 49. d:\常用软件\遨游游览器\maxthon2\maxthon.exe Maxthon International ltd. Maxthon Browser .text,.rdata,.data,.rsrc,.reloc, + HKCR\.htm htmlfile\Edit\Command [A ] 48. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\open\Command [A ] 49. d:\常用软件\遨游游览器\maxthon2\maxthon.exe Maxthon International ltd. Maxthon Browser .text,.rdata,.data,.rsrc,.reloc, htmlfile\Print\Command [A ] 48. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\傲游(Maxthon)\Command [A ] 49. d:\常用软件\遨游游览器\maxthon2\maxthon.exe Maxthon International ltd. Maxthon Browser .text,.rdata,.data,.rsrc,.reloc, + HKCR\.mp3 Audio.MP3\open\Command [A ] 50. c:\program files\ttplayer\ttplayer.exe Alen Soft 千千静听 .text,.rdata,.data,.rsrc, Audio.MP3\PlayList\Command [A ] 50. c:\program files\ttplayer\ttplayer.exe Alen Soft 千千静听 .text,.rdata,.data,.rsrc, + 正在运行的进程 + 000000f8(248) spoolsv.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 000001a4(420) Explorer.EXE 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 52. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 20000000[0007C000] [ M] 53. c:\windows\system32\shdoclc.dll Microsoft Corporation Shell Doc Object and Control Library .rsrc,.reloc, + 0000034c(844) knownsvr.exe 00400000[00072000] [ M] 54. d:\ files\rising\antispyware\knownsvr.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[00034000] [ M] 55. d:\ files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00980000[0002D000] [ M] 56. d:\ files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 009B0000[00019000] [ M] 57. d:\ files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 000003b4(948) smss.exe + 000003c8(968) alg.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 000003d4(980) FourEngine.exe 00400000[0058E000] [AM] 44. c:\program files\asus\epu-4 engine\fourengine.exe .text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc, 10000000[00012000] [ M] 58. c:\program files\asus\epu-4 engine\asacpi.dll ASUS ASUS ACPI Interface .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 01AF0000[00037000] [ M] 59. c:\program files\asus\epu-4 engine\aigear.dll AsusTek Inc. AiGear DLL .text,.rdata,.data,.rsrc,.reloc, 02850000[000C2000] [ M] 60. c:\program files\asus\epu-4 engine\pngio.dll .textbss,.text,.rdata,.data,.idata,.reloc, 02B30000[00007000] [ M] 61. c:\windows\system32\asio.dll AsIO DLL .text,.rdata,.data,.rsrc,.reloc, + 000003e0(992) RsTray.exe 00400000[0002C000] [AM] 45. d:\rising\ris\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 10000000[00031000] [ M] 62. d:\rising\ris\comserv.dll Beijing Rising Information Technology Co., Ltd. Rising tray common service .text,.rdata,.data,.rsrc,.reloc, 23700000[00023000] [ M] 63. d:\rising\ris\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00990000[0002D000] [ M] 64. d:\rising\ris\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 009C0000[00019000] [ M] 65. d:\rising\ris\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00D10000[00019000] [ M] 66. d:\rising\ris\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23800000[00039000] [ M] 67. d:\rising\ris\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00F50000[00013000] [ M] 68. d:\rising\ris\monstate.dll Beijing Rising Information Technology Co., Ltd. MonState .text,.rdata,.data,.rsrc,.reloc, 00F80000[00016000] [ M] 69. d:\rising\ris\scanevnt.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Event Handler .text,.rdata,.data,.rsrc,.reloc, 26600000[00078000] [ M] 70. d:\rising\ris\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 00FC0000[00017000] [ M] 71. d:\rising\ris\rsconf.dll Beijing Rising Information Technology Co., Ltd. rsconf Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00FF0000[0000C000] [ M] 72. d:\rising\ris\rfwrule.dll Beijing Rising Information Technology Co., Ltd. TODO: .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 73. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 74. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 01010000[00022000] [ M] 75. d:\rising\ris\rspalvd.dll Beijing Rising Information Technology Co., Ltd. rspalvd .text,.rdata,.data,.rsrc,.reloc, 01050000[0007E000] [ M] 76. d:\rising\ris\rsnetsvr.dll Beijing Rising Information Technology Co., Ltd. rsnetsvr .text,.rdata,.data,.rsrc,.reloc, 33000000[00026000] [ M] 77. d:\rising\ris\ravbintl.dll Beijing Rising Information Technology Co., Ltd. ravbintl Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01170000[0007D000] [ M] 78. d:\rising\ris\mruleui.dll Beijing Rising Information Technology Co., Ltd. mruleui .text,.rdata,.data,.rsrc,.reloc, 011F0000[0007D000] [ M] 79. d:\rising\ris\montray.dll Beijing Rising Information Technology Co., Ltd. Rising AntiVirus 2010 .text,.rdata,.data,.rsrc,.reloc, 34500000[00020000] [ M] 80. d:\rising\ris\ravitray.dll Beijing Rising Information Technology Co., Ltd. ravitray Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01270000[00052000] [ M] 81. d:\rising\ris\rfwtray.dll Beijing Rising Information Technology Co., Ltd. rfwtray Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01310000[0004C000] [ M] 82. d:\rising\ris\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 01360000[00013000] [ M] 83. d:\rising\ris\scanleak.dll Beijing Rising Information Technology Co., Ltd. scanleak .text,.rdata,.data,.rsrc,.reloc, 32000000[00088000] [ M] 84. d:\rising\ris\ravppops.dll Beijing Rising Information Technology Co., Ltd. ravppops Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 016A0000[0000E000] [ M] 85. d:\rising\ris\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 016C0000[00044000] [ M] 86. d:\rising\ris\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 87. d:\rising\ris\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01F10000[00080000] [ M] 88. d:\rising\ris\scanprxy.dll Beijing Rising Information Technology Co., Ltd. ScanPrxy Module .text,.rdata,.data,.rsrc,.reloc, 020C0000[00082000] [ M] 89. d:\rising\ris\rfwlog.dll Beijing Rising Information Technology Co., Ltd. rfwlog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000003f4(1012) ctfmon.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 000003fc(1020) csrss.exe + 00000458(1112) winlogon.exe 01000000[0007D000] [ M] 90. c:\windows\system32\winlogon.exe Microsoft Corporation Windows NT Logon Application .text,.data,.rsrc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 10000000[00028000] [AM] 29. c:\windows\system32\ati2evxx.dll ATI Technologies Inc. ATI External Event Utility DLL Module .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 52. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000484(1156) services.exe 46040000[0000F000] [ M] 91. c:\windows\apppatch\acadproc.dll Microsoft Corporation Windows Compatibility DLL .text,.data,.rsrc,.reloc, + 00000490(1168) lsass.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 000004c4(1220) rstray.exe 00400000[00023000] [AM] 46. d:\ files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, 10000000[00044000] [ M] 92. d:\ files\rising\antispyware\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 00B00000[00024000] [ M] 93. d:\ files\rising\antispyware\comserv.dll Beijing Rising Information Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 00990000[00019000] [ M] 57. d:\ files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 94. d:\ files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 95. d:\ files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 23700000[00026000] [ M] 96. d:\ files\rising\antispyware\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B60000[0002D000] [ M] 56. d:\ files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 97. d:\ files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 98. d:\ files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00E70000[00067000] [ M] 99. d:\ files\rising\antispyware\runiep.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware tray .text,.rdata,.data,.rsrc,.reloc, 00EE0000[00034000] [ M] 55. d:\ files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00F40000[0001F000] [ M] 100. d:\ files\rising\antispyware\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00F60000[00024000] [ M] 101. d:\ files\rising\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, + 00000548(1352) Ati2evxx.exe 00400000[00099000] [AM] 1. c:\windows\system32\ati2evxx.exe ATI Technologies Inc. ATI External Event Utility EXE Module .text,.rdata,.data,.rsrc, 00CA0000[00010000] [ M] 102. c:\windows\system32\ati2edxx.dll ATI Technologies, Inc. ati2edxx .text,.data,.SHAREDS,.rsrc,.reloc, 10000000[00034000] [ M] 103. c:\windows\system32\atipdlxx.dll ATI Technologies, Inc. ATI Desktop CWDDEDI DLL .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 0000055c(1372) svchost.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 00000608(1544) svchost.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 0000063c(1596) MDM.EXE 00400000[0004D000] [AM] 2. c:\program files\common files\microsoft shared\vs7debug\mdm.exe Microsoft Corporation Machine Debug Manager .text,.data,.rsrc, 51810000[00006000] [ M] 104. c:\program files\common files\microsoft shared\vs7debug\2052\mdmui.dll Microsoft Corporation MDM 资源 .rsrc,.reloc, + 00000688(1672) RavMonD.exe 00400000[0002F000] [AM] 4. d:\rising\ris\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, 10000000[00032000] [ M] 105. d:\rising\ris\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 011D0000[00086000] [ M] 106. d:\rising\ris\cnt09.dll Beijing Rising Information Technology Co., Ltd. cnt09 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01040000[00019000] [ M] 107. d:\rising\ris\moncomm.dll Beijing Rising Information Technology Co., Ltd. MonComm .text,.rdata,.data,.rsrc,.reloc, 01260000[0001D000] [ M] 108. d:\rising\ris\monbase.dll Beijing Rising Information Technology Co., Ltd. MonBase .text,.rdata,.data,.rsrc,.reloc, 019D0000[00084000] [ M] 109. d:\rising\ris\rslog.dll Beijing Rising Information Technology Co., Ltd. rslog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01A80000[00018000] [ M] 110. d:\rising\ris\mondrv.dll Beijing Rising Information Technology Co., Ltd. mondrv .text,.rdata,.data,.rsrc,.reloc, 01AB0000[0002E000] [ M] 111. d:\rising\ris\defmon.dll Beijing Rising Information Technology Co., Ltd. DefMon .text,.rdata,.data,.rsrc,.reloc, 01AF0000[00010000] [ M] 112. d:\rising\ris\moncom08.dll Beijing Rising Information Technology Co., Ltd. MonCom08 .text,.rdata,.data,.rsrc,.reloc, 01B10000[0007E000] [ M] 113. d:\rising\ris\monrule.dll Beijing Rising Information Technology Co., Ltd. MonRule .text,.rdata,.data,.rsrc,.reloc, 01BC0000[00027000] [ M] 114. d:\rising\ris\filemon.dll Beijing Rising Information Technology Co., Ltd. Filemon .text,.rdata,.data,.rsrc,.reloc, 01C00000[0002F000] [ M] 115. d:\rising\ris\mailmon.dll Beijing Rising Information Technology Co., Ltd. MailMon .text,.rdata,.data,.rsrc,.reloc, 01C40000[00015000] [ M] 116. d:\rising\ris\hookweb.dll Beijing Rising Information Technology Co., Ltd. hookweb .text,.rdata,.data,.rsrc,.reloc, 01C80000[00082000] [ M] 89. d:\rising\ris\rfwlog.dll Beijing Rising Information Technology Co., Ltd. rfwlog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01D30000[0000C000] [ M] 72. d:\rising\ris\rfwrule.dll Beijing Rising Information Technology Co., Ltd. TODO: .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 73. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 74. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 01D50000[0004A000] [ M] 117. d:\rising\ris\rfwsrv.dll Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Service .text,.rdata,.data,.rsrc,.reloc, 01DA0000[00019000] [ M] 65. d:\rising\ris\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 01DE0000[0001B000] [ M] 118. d:\rising\ris\mports.dll Beijing Rising Information Technology Co., Ltd. get ports list .text,.rdata,.data,.rsrc,.reloc, 01E10000[00011000] [ M] 119. d:\rising\ris\rfwdrvc.dll Beijing Rising Information Technology Co., Ltd. rfwdrvc Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01E40000[00011000] [ M] 120. d:\rising\ris\rfwdrv.dll Beijing Rising Information Technology Co., Ltd. rfwdrv.dll .text,.rdata,.data,.rsrc,.reloc, 02170000[0007E000] [ M] 76. d:\rising\ris\rsnetsvr.dll Beijing Rising Information Technology Co., Ltd. rsnetsvr .text,.rdata,.data,.rsrc,.reloc, 02300000[00011000] [ M] 121. d:\rising\ris\rfwarp.dll Beijing Rising Information Technology Co., Ltd. rfwarp.dll .text,.rdata,.data,.rsrc,.reloc, 02330000[0002D000] [ M] 64. d:\rising\ris\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 027A0000[00014000] [ M] 122. d:\rising\ris\urlrule.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlRule Library .text,.rdata,.data,.rsrc,.reloc, 027F0000[0003B000] [ M] 123. d:\rising\ris\recomp.dll Beijing Rising Information Technology Co., Ltd. component manager Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02940000[00038000] [ M] 124. d:\rising\ris\refs.dll Beijing Rising Information Technology Co., Ltd. filesystem Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02BA0000[00030000] [ M] 125. d:\rising\ris\viruslib.dll Beijing Rising Information Technology Co., Ltd. VirusLib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02BE0000[00029000] [ M] 126. d:\rising\ris\relibldr.dll Beijing Rising Information Technology Co., Ltd. libloader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02C60000[0002B000] [ M] 127. d:\rising\ris\rfwproxy.dll Beijing Rising Information Technology Co., Ltd. tcpproxy Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23700000[00023000] [ M] 63. d:\rising\ris\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03480000[0008C000] [ M] 128. d:\rising\ris\rsindent.dll Beijing Rising Information Technology Co., Ltd. rsindent .text,.rdata,.data,.rsrc,.reloc, 03520000[00018000] [ M] 129. d:\rising\ris\taskplug.dll Beijing Rising Information Technology Co., Ltd. TaskPlug .text,.rdata,.data,.rsrc,.reloc, 03550000[00012000] [ M] 130. d:\rising\ris\scansrvp.dll Beijing Rising Information Technology Co., Ltd. ScanSrvP Module .text,.rdata,.data,.rsrc,.reloc, 03980000[0001D000] [ M] 131. d:\rising\ris\cnt08.dll Beijing Rising Information Technology Co., Ltd. cnt08 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 03C00000[00019000] [ M] 66. d:\rising\ris\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03F30000[0000E000] [ M] 85. d:\rising\ris\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 03F50000[00044000] [ M] 86. d:\rising\ris\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 041D0000[00020000] [ M] 132. d:\rising\ris\hooksys.dll Beijing Rising Information Technology Co., Ltd. Hooksys.dll .text,.rdata,.data,.idata,.rsrc,.reloc, 04280000[0001F000] [ M] 133. d:\rising\ris\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 042A0000[00024000] [ M] 134. d:\rising\ris\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 044F0000[00013000] [ M] 135. d:\rising\ris\hookcont.dll Beijing Rising Information Technology Co., Ltd. HookCont Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04630000[00071000] [ M] 136. d:\rising\ris\bacore.dll Beijing Rising Information Technology Co., Ltd. Rising MBA DLL .text,.rdata,.data,.rsrc,.reloc, 04C20000[00016000] [ M] 137. d:\rising\ris\bawhite.dll Beijing Rising Information Technology Co., Ltd. bawhite Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04E70000[0002B000] [ M] 138. d:\rising\ris\rsstore.dll Beijing Rising Information Technology Co., Ltd. RSStore .text,.rdata,.data,.rsrc,.reloc, 04F40000[00040000] [ M] 139. d:\rising\ris\scanner.dll Beijing Rising Information Technology Co., Ltd. RsScanner Module .text,.rdata,.data,.rsrc,.reloc, 04EE0000[0001B000] [ M] 140. d:\rising\ris\scanadd.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Addon .text,.rdata,.data,.rsrc,.reloc, 05100000[0001B000] [ M] 141. d:\rising\ris\ncomm2.dll Beijing Rising Information Technology Co., Ltd. NComm2 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 05130000[00028000] [ M] 142. d:\rising\ris\rstask.dll Beijing Rising Information Technology Co., Ltd. RsTask Control .text,.rdata,.data,.rsrc,.reloc, 05BF0000[00018000] [ M] 143. d:\rising\ris\rsstub.dll Beijing Rising Information Technology Co., Ltd. rsstub Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 05960000[0001A000] [ M] 144. d:\rising\ris\scansrv.dll Beijing Rising Information Technology Co., Ltd. ScanSrv Module .text,.rdata,.data,.rsrc,.reloc, 05BC0000[0002B000] [ M] 145. d:\rising\ris\scanpe.dll Beijing Rising Information Technology Co., Ltd. scanpe Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 070A0000[00029000] [ M] 146. d:\rising\ris\pearc.dll Beijing Rising Information Technology Co., Ltd. pearchive Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01340000[0001B000] [ M] 147. d:\rising\ris\ur000.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 08390000[00035000] [ M] 148. d:\rising\ris\urutils.dll Beijing Rising Information Technology Co., Ltd. urutils Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 086E0000[00032000] [ M] 149. d:\rising\ris\ffr.dll Beijing Rising Information Technology Co., Ltd. ffr Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 08730000[00022000] [ M] 150. d:\rising\ris\nvfile.dll Beijing Rising Information Technology Co., Ltd. NVFile .text,.rdata,.data,.rsrc,.reloc, 13AB0000[00045000] [ M] 151. d:\rising\ris\scanexec.dll Beijing Rising Information Technology Co., Ltd. ScanExec .text,.rdata,.data,.rsrc,.reloc, 0AE80000[002DD000] [ M] 152. d:\rising\ris\unexe.dll Beijing Rising Information Technology Co., Ltd. UnExe .text,.rdata,.data,.rsrc,.reloc, 0B160000[000CB000] [ M] 153. d:\rising\ris\scanex.dll Beijing Rising Information Technology Co., Ltd. ScanEx .text,.rdata,.data,.rsrc,.reloc, 0B5F0000[00011000] [ M] 154. d:\rising\ris\scantj.dll Beijing Rising Information Technology Co., Ltd. scantj Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 0E8B0000[00085000] [ M] 155. d:\rising\ris\methodex.dll Beijing Rising Information Technology Co., Ltd. MethodEx .text,.rdata,.data,.rsrc,.reloc, 0EBC0000[000B9000] [ M] 156. d:\rising\ris\revm.dll Beijing Rising Information Technology Co., Ltd. REVM Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 0E820000[00022000] [ M] 157. d:\rising\ris\pecompd.dll Beijing Rising Information Technology Co., Ltd. PeCompdEx .text,.rdata,.data,.rsrc,.reloc, 0E860000[00039000] [ M] 158. d:\rising\ris\heurex.dll Beijing Rising Information Technology Co., Ltd. HeurEx .text,.rdata,.data,.rsrc,.reloc, 14210000[0003A000] [ M] 159. d:\rising\ris\extmail.dll Beijing Rising Information Technology Co., Ltd. ExtMail .text,.rdata,.data,.rsrc,.reloc, 01180000[0000E000] [ M] 160. d:\rising\ris\urllib.dll Beijing Rising Information Technology Co., Ltd. Urllib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03C50000[0001D000] [ M] 161. d:\rising\ris\extsfx.dll Beijing Rising Information Technology Co., Ltd. scansfx Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 0AE50000[00011000] [ M] 162. d:\rising\ris\ur001.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 04300000[00023000] [ M] 163. d:\rising\ris\scansct.dll Beijing Rising Information Technology Co., Ltd. ScanSct Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 043B0000[0001C000] [ M] 164. d:\rising\ris\scanravt.dll Beijing Rising Information Technology Co., Ltd. ScanRavT Module .text,.rdata,.data,.rsrc,.reloc, 0A420000[0009A000] [ M] 165. d:\rising\ris\scanbt.dll Beijing Rising Information Technology Co., Ltd. ScanBT Module .text,.rdata,.data,.rsrc,.reloc, 0A4C0000[00019000] [ M] 166. d:\rising\ris\scanstub.dll Beijing Rising Information Technology Co., Ltd. ScanStub Module .text,.rdata,.data,.rsrc,.reloc, + 00000698(1688) svchost.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 0000073c(1852) svchost.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 000007a4(1956) Ati2evxx.exe 00400000[00099000] [AM] 1. c:\windows\system32\ati2evxx.exe ATI Technologies Inc. ATI External Event Utility EXE Module .text,.rdata,.data,.rsrc, 00CA0000[00010000] [ M] 102. c:\windows\system32\ati2edxx.dll ATI Technologies, Inc. ati2edxx .text,.data,.SHAREDS,.rsrc,.reloc, 10000000[00034000] [ M] 103. c:\windows\system32\atipdlxx.dll ATI Technologies, Inc. ATI Desktop CWDDEDI DLL .text,.rdata,.data,.rsrc,.reloc, 00CD0000[00028000] [AM] 29. c:\windows\system32\ati2evxx.dll ATI Technologies Inc. ATI External Event Utility DLL Module .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 000007bc(1980) svchost.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 0000080c(2060) conime.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 00000958(2392) ras.exe 00400000[0000B000] [ M] 167. d:\ files\rising\antispyware\ras.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 168. d:\ files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 95. d:\ files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 10000000[00047000] [ M] 169. d:\ files\rising\antispyware\kakamgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 94. d:\ files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00A50000[00019000] [ M] 57. d:\ files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00A80000[0001F000] [ M] 100. d:\ files\rising\antispyware\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00AA0000[00024000] [ M] 101. d:\ files\rising\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00BF0000[0002D000] [ M] 56. d:\ files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00D60000[00058000] [ M] 170. d:\ files\rising\antispyware\dbmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 97. d:\ files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00EC0000[0002E000] [ M] 171. d:\ files\rising\antispyware\pweb.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00F30000[0010D000] [ M] 172. d:\ files\rising\antispyware\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01040000[00034000] [ M] 55. d:\ files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 010A0000[00070000] [ M] 173. d:\ files\rising\antispyware\pset.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01130000[00027000] [ M] 174. d:\ files\rising\antispyware\pdefend.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01160000[000B7000] [ M] 175. d:\ files\rising\antispyware\ptools.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01370000[00075000] [ M] 176. d:\ files\rising\antispyware\psysinfo.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 98. d:\ files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 20000000[0007C000] [ M] 53. c:\windows\system32\shdoclc.dll Microsoft Corporation Shell Doc Object and Control Library .rsrc,.reloc, 02130000[00018000] [ M] 177. d:\rising\ris\ravscrch.dll Beijing Rising Information Technology Co., Ltd. webmon module .text,.rdata,.data,.rsrc,.reloc, 03810000[004A3000] [ M] 178. c:\windows\system32\macromed\flash\flash10c.ocx Adobe Systems, Inc. Adobe Flash Player 10.0 r32 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 52. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000b60(2912) TXPlatform.exe 00400000[00025000] [ M] 179. d:\backup\qq\txplatform.exe Tencent Tencent Instant Messaging Platform .text,.rdata,.data,.rsrc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 00000c50(3152) QQ.exe 00400000[001EF000] [ M] 180. d:\backup\qq\qq.exe TENCENT QQ .text,.rdata,.data,.rsrc, 61530000[0034E000] [ M] 181. d:\backup\qq\qqbaseclassindll.dll TENCENT QQBaseClassInDll DLL .text,.rdata,.data,.rsrc,.reloc, 619D0000[000FF000] [ M] 182. d:\backup\qq\qqhelperdll.dll TENCENT QQHelperDll DLL .text,.rdata,.data,.rsrc,.reloc, 600A0000[00070000] [ M] 183. d:\backup\qq\basicctrldll.dll TENCENT BasicCtrlDll DLL .text,.rdata,.data,.rsrc,.reloc, 6BC40000[000F2000] [ M] 184. d:\backup\qq\mfc42.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 62750000[00005000] [ M] 185. d:\backup\qq\riched32.dll Microsoft Corporation Wrapper Dll for Richedit 1.0 .text,.data,.rsrc,.reloc, 626E0000[00068000] [ M] 186. d:\backup\qq\riched20.dll Microsoft Corporation Rich Text Edit Control, v3.1 .text,.data,.rsrc,.reloc, 61490000[00041000] [ M] 187. d:\backup\qq\qqapi.dll TENCENT ModuleSample DLL .text,.rdata,.data,.rsrc,.reloc, 60900000[00043000] [ M] 188. d:\backup\qq\loginctrl.dll TENCENT NewSkin .text,.rdata,.data,.rsrc,.reloc, 60950000[0009D000] [ M] 189. d:\backup\qq\loginctrlres.dll TENCENT LoginCtrl DLL .rsrc,.reloc, 10000000[0061A000] [ M] 190. d:\backup\qq\qqres.dll TENCENT QQRes .rsrc,.reloc, 02050000[000D6000] [ M] 191. d:\backup\qq\qqmainframe.dll TENCENT QQMainFrame .text,.rdata,.data,.rsrc,.reloc, 4EC50000[001AB000] [ M] 192. d:\backup\qq\gdiplus.dll Microsoft Corporation Microsoft GDI+ .text,.data,Shared,.rsrc,.reloc, 628D0000[00022000] [ M] 193. d:\backup\qq\unreadmsgmgr.dll TENCENT UnReadMsgMgr .text,.rdata,.data,.rsrc,.reloc, 029B0000[002B0000] [ M] 194. d:\backup\qq\qqallinone.dll TENCENT NewSkin .text,.rdata,.data,.rsrc,.reloc, 62770000[0002B000] [ M] 195. d:\backup\qq\sccore.dll TENCENT SCCore.dll .text,.rdata,.data,.shareds,.rsrc,.reloc, 60140000[00036000] [ M] 196. d:\backup\qq\cameradll.dll TENCENT CameraDll DLL .text,.rdata,.data,.MYSHARE,.rsrc,.reloc, 02CD0000[0019D000] [ M] 197. d:\backup\qq\cqqapplication.dll TENCENT CQQApplication .text,.rdata,.data,.rsrc,.reloc, 60440000[00047000] [ M] 198. d:\backup\qq\flashavatardll.dll FlashAvatar DLL .text,.rdata,.data,.rsrc,.reloc, 60CF0000[0005F000] [ M] 199. d:\backup\qq\newskin.dll TENCENT NewSkin Module .text,.rdata,.data,.rsrc,.reloc, 60B10000[0003F000] [ M] 200. d:\backup\qq\mailsummary.dll TENCENT MailSummary DLL .text,.rdata,.data,.rsrc,.reloc, 62560000[0002D000] [ M] 201. d:\backup\qq\qqspace.dll TENCENT QQSpace DLL .text,.rdata,.data,.rsrc,.reloc, 62920000[00071000] [ M] 202. d:\backup\qq\vbscript.dll Microsoft Corporation Microsoft (r) VBScript .text,.rdata,.data,.rsrc,.reloc, 038E0000[004A3000] [ M] 178. c:\windows\system32\macromed\flash\flash10c.ocx Adobe Systems, Inc. Adobe Flash Player 10.0 r32 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 52. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 614E0000[00043000] [ M] 203. d:\backup\qq\qqavatar.dll TENCENT QQAvatar .text,.rdata,.data,.rsrc,.reloc, 60D50000[00015000] [ M] 204. d:\backup\qq\oemapplication.dll TENCENT OEMApplication DLL .text,.rdata,.data,.rsrc,.reloc, 61AD0000[00018000] [ M] 205. d:\backup\qq\qqknowledgesearch.dll TENCENT QQKnowledgeSearch DLL .text,.rdata,.data,.rsrc,.reloc, 61940000[0008A000] [ M] 206. d:\backup\qq\qqgroupmng.dll TENCENT QQGroupMng DLL .text,.rdata,.data,.rsrc,.reloc, 61D50000[0013A000] [ M] 207. d:\backup\qq\qqplugin.dll TENCENT QQPlugin .text,.rdata,.data,.rsrc,.reloc, 61D20000[0002F000] [ M] 208. d:\backup\qq\qqpet.dll TENCENT QQPet DLL .text,.rdata,.data,.rsrc,.reloc, 62900000[0001D000] [ M] 209. d:\backup\qq\userdefinedhead.dll TENCENT UserDefinedHead DLL .text,.rdata,.data,.rsrc,.reloc, 61880000[0000E000] [ M] 210. d:\backup\qq\qqconfigplugin.dll TENCENT QQConfigPlugin DLL .text,.rdata,.data,.rsrc,.reloc, 61890000[00056000] [ M] 211. d:\backup\qq\qqcustomface.dll TENCENT QQCustomFace .text,.rdata,.data,.rsrc,.reloc, 626C0000[00017000] [ M] 212. d:\backup\qq\qringmng.dll TENCENT QRingMng .text,.rdata,.data,.rsrc,.reloc, 609F0000[000D5000] [ M] 213. d:\backup\qq\longconnection.dll TENCENT LongConnection .text,.rdata,.data,.rsrc,.reloc, 60DF0000[00027000] [ M] 214. d:\backup\qq\phoneapi.dll TENCENT PhoneAPI DLL .text,.rdata,.data,.rsrc,.reloc, 603F0000[0000D000] [ M] 215. d:\backup\qq\dialerallinone.dll tencent DialerAllInOne .text,.rdata,.data,Shared,.rsrc,.reloc, 60110000[00021000] [ M] 216. d:\backup\qq\bqqapplication.dll TENCENT BQQApplication .text,.rdata,.data,.rsrc,.reloc, 01980000[00051000] [ M] 217. d:\backup\qq\qqsysmsgmng.dll TENCENT QQSysMsgMng .text,.rdata,.data,.rsrc,.reloc, 60180000[0004F000] [ M] 218. d:\backup\qq\commercesmng.dll TENCENT CommercesMng DLL .text,.rdata,.data,.rsrc,.reloc, 60D70000[0000F000] [ M] 219. d:\backup\qq\personaldesktop.dll TENCENT QQ个人桌面 .text,.rdata,.data,.rsrc,.reloc, 06AD0000[00287000] [ M] 220. d:\backup\qq\qqaddr.dll 深圳市腾讯计算机系统有限公司 腾讯通讯录 .text,.rdata,.data,.rsrc,.reloc, 624B0000[0002D000] [ M] 221. d:\backup\qq\qqscenemng.dll TENCENT QQSceneMng .text,.rdata,.data,.rsrc,.reloc, 07560000[0014F000] [ M] 222. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 08DB0000[0003A000] [ M] 223. d:\backup\qq\addrsearch.dll Tencent AddrSearch UPX0,UPX1,.rsrc, 73900000[0002E000] [ M] 224. c:\windows\system32\jpwb.ime 日月科技 极品五笔输入法 版本6.9 .text,.data,.sgroup,.ShareDa,.rsrc,.EXCode,.reloc, 61B10000[00010000] [ M] 225. d:\backup\qq\qqmagicface.dll TENCENT QQMagicFace DLL .text,.rdata,.data,.rsrc,.reloc, 607E0000[0001A000] [ M] 226. d:\backup\qq\imageole.dll TENCENT TODO: .text,.rdata,.data,.rsrc,.reloc, 61AF0000[00015000] [ M] 227. d:\backup\qq\qqliveqmng.dll TENCENT QQLiveQMng DLL .text,.rdata,.data,.rsrc,.reloc, 72C60000[00007000] [ M] 228. c:\windows\system32\msadp32.acm Microsoft Corporation Microsoft ADPCM CODEC for MSACM .text,.data,.rsrc,.reloc, 607B0000[0002A000] [ M] 229. d:\backup\qq\groupconnection.dll TENCENT GroupConnection DLL .text,.rdata,.data,.rsrc,.reloc, 01520000[0000D000] [AM] 35. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + 00000c90(3216) wmiprvse.exe 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, + 00000d08(3336) AliIM.exe 00400000[00036000] [ M] 230. d:\aliwangwang\aliim.exe Alibaba software (Shanghai) Corporation. AliWangWang .text,.rdata,.data,.rsrc, 7C630000[0001B000] [ M] 231. d:\aliwangwang\atl80.dll Microsoft Corporation ATL Module for Windows (Unicode) .text,.rdata,.data,.rsrc,.reloc, 7C420000[00087000] [ M] 232. d:\aliwangwang\msvcp80.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 78130000[0009B000] [ M] 233. d:\aliwangwang\msvcr80.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00042000] [ M] 234. d:\aliwangwang\rvcore.dll Alisoft (Shanghai) Co., Ltd. Alisoft RV Core .text,.rdata,.data,.rsrc,.reloc, 4B4F0000[00006000] [ M] 235. c:\windows\system32\odbcbcp.dll Microsoft Corporation Microsoft BCP for ODBC .text,.data,.rsrc,.reloc, 00AD0000[00009000] [ M] 236. d:\aliwangwang\alilog.dll Copyright 2009 阿里软件（上海）有限公司. alilog .text,.rdata,.data,.rsrc,.reloc, 00AF0000[0002B000] [ M] 237. d:\aliwangwang\log4cpp.dll Bastiaan Bakker, LifeLine Networks bv. 阿里软件（上海）有限公司. Log library for C++ DLL .text,.rdata,.data,.rsrc,.reloc, 5ADC0000[00037000] [ M] 51. c:\windows\system32\uxtheme.dll Microsoft Corporation Microsoft UxTheme Library .text,.data,.rsrc,.reloc, 016C0000[0002F000] [ M] 238. d:\aliwangwang\uibrowser.dll TODO: <公司名> TODO: <文件说明> .text,.rdata,.data,.rsrc,.reloc, 016F0000[00083000] [ M] 239. d:\aliwangwang\guibase.dll Alisoft (Shanghai) Co., Ltd. GUIBase .text,.rdata,.data,.rsrc,.reloc, 01780000[0008B000] [ M] 240. d:\aliwangwang\wwutils.dll Alibaba software (Shanghai) Corporation. Utils Module .text,.rdata,.data,.rsrc,.reloc, 01820000[00046000] [ M] 241. d:\aliwangwang\pcre.dll .text,.rdata,.data,.reloc, 01870000[0010A000] [ M] 242. d:\aliwangwang\libeay32.dll The OpenSSL Project, http://www.openssl.org/ OpenSSL Shared Library .text,.rdata,.data,.rsrc,.reloc, 01980000[0002B000] [ M] 243. d:\aliwangwang\wwparams.dll .text,.rdata,.data,.rsrc,.reloc, 01B80000[000E3000] [ M] 244. d:\aliwangwang\wwuiunits.dll .text,.rdata,.data,.reloc, 01C70000[00041000] [ M] 245. d:\aliwangwang\rvnw.dll Alisoft (Shanghai) Co., Ltd. rvnw .text,.rdata,.data,.rsrc,.reloc, 01D40000[00129000] [ M] 246. d:\aliwangwang\rvwindow.dll Alisoft (Shanghai) Co., Ltd. rvwindow .text,.rdata,.data,.rsrc,.reloc, 01A50000[0000E000] [ M] 247. d:\aliwangwang\updateassist.dll .text,.rdata,.data,.rsrc,.reloc, 02570000[00014000] [ M] 248. d:\aliwangwang\xparam.dll Alisoft (Shanghai) Co., Ltd. xparam .text,.rdata,.data,.rsrc,.reloc, 027E0000[001FE000] [ M] 249. d:\aliwangwang\imbiz.dll Alibaba software (Shanghai) Corporation. imbiz Module .text,.rdata,.data,.rsrc,.reloc, 029F0000[000B8000] [ M] 250. d:\aliwangwang\protocol.dll .text,.rdata,.data,.rsrc,.reloc, 02AC0000[00044000] [ M] 251. d:\aliwangwang\imnet.dll Alibaba software (Shanghai) Corporation. imnet Module .text,.rdata,.data,.rsrc,.reloc, 02D20000[0001D000] [ M] 252. d:\aliwangwang\avtransbiz.dll TODO: <公司名> TODO: <文件说明> .text,.rdata,.data,.rsrc,.reloc, 02D50000[0003F000] [ M] 253. d:\aliwangwang\ww_network2.dll Alibaba software (Shanghai) Corporation. 网络传输动态链接库 .text,.rdata,.data,.rsrc,.reloc, 02DA0000[0000F000] [ M] 254. d:\aliwangwang\p2pbiz.dll Alibaba software (Shanghai) Corporation. 网络传输管理动态链接库 .text,.rdata,.data,.rsrc,.reloc, 02DC0000[00040000] [ M] 255. d:\aliwangwang\guicore.dll Alisoft (Shanghai) Co., Ltd. GUICore .text,.rdata,.data,.rsrc,.reloc, 02E30000[0015D000] [ M] 256. d:\aliwangwang\wwapplication.dll Alibaba software (Shanghai) Corporation. TODO: <文件说明> .text,.rdata,.data,.rsrc,.reloc, 02FA0000[0007E000] [ M] 257. d:\aliwangwang\wwsdk.dll Alibaba software (Shanghai) Corporation. WWSDK .text,.rdata,.data,.rsrc,.reloc, 03030000[0007A000] [ M] 258. d:\aliwangwang\imdb.dll Alibaba software (Shanghai) Corporation. imdb Module .text,.rdata,.data,.rsrc,.reloc, 03650000[00068000] [ M] 259. d:\aliwangwang\rvcomlib.dll Alisoft (Shanghai) Co., Ltd. rvcomlib .text,.rdata,.data,.rsrc,.reloc, 037E0000[0016A000] [ M] 260. d:\aliwangwang\wwsdkcom.dll Alibaba software (Shanghai) Corporation. SDK v2 Component .text,.orpc,.rdata,.data,.rsrc,.reloc, 03960000[00086000] [ M] 261. d:\aliwangwang\sdkdb.dll Alibaba software (Shanghai) Corporation. AliSoft SDK DB Component .text,.orpc,.rdata,.data,.rsrc,.reloc, 03A00000[000BC000] [ M] 262. c:\windows\system32\aliedit\aliedit.dll Alipay security control UPX0,UPX1,.rsrc, 03E90000[00029000] [ M] 263. d:\aliwangwang\sysnotify.dll Alibaba software (Shanghai) Corporation. TODO: <文件说明> .text,.rdata,.data,.rsrc,.reloc, 04A60000[00026000] [ M] 264. d:\aliwangwang\useful_services.dll TODO: <公司名> TODO: <文件说明> .text,.rdata,.data,.rsrc,.reloc, 04B90000[00023000] [ M] 265. d:\aliwangwang\alinet.dll Alisoft (Shanghai) Co., Ltd. alinet .text,.rdata,.data,.rsrc,.reloc, 05300000[00022000] [ M] 266. d:\aliwangwang\p2s_service.dll TODO: <公司名> TODO: <文件说明> .text,.rdata,.data,.rsrc,.reloc, 05330000[00050000] [ M] 267. d:\aliwangwang\filetransbiz.dll Alibaba software (Shanghai) Corporation. 文件传输业务层 .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 52. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 06660000[00102000] [ M] 268. d:\aliwangwang\imtribe.dll 阿里巴巴软件(上海)有限公司 .text,.rdata,.data,.rsrc,.reloc, 06770000[00027000] [ M] 269. d:\aliwangwang\emotionconfig.dll Alibaba software (Shanghai) Corporation. 用表情来匹配替换输入字符的组件 .text,.rdata,.data,.rsrc,.reloc, 20000000[0007C000] [ M] 53. c:\windows\system32\shdoclc.dll Microsoft Corporation Shell Doc Object and Control Library .rsrc,.reloc, 06810000[00018000] [ M] 177. d:\rising\ris\ravscrch.dll Beijing Rising Information Technology Co., Ltd. webmon module .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 73. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 74. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 059C0000[0001A000] [ M] 270. d:\aliwangwang\lua51.dll Lua.org Lua Language Run Time .text,.rdata,.data,.rsrc,.reloc, 05A40000[00015000] [ M] 271. d:\aliwangwang\zlibwapi.dll zlib data compression library .text,.rdata,.data,.rsrc,.reloc, 095F0000[0014F000] [ M] 222. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 73900000[0002E000] [ M] 224. c:\windows\system32\jpwb.ime 日月科技 极品五笔输入法 版本6.9 .text,.data,.sgroup,.ShareDa,.rsrc,.EXCode,.reloc, 04A90000[000F4000] [ M] 272. d:\aliwangwang\immessage.dll Alibaba software (Shanghai) Corporation. .text,.rdata,.data,.rsrc,.reloc,