瑞星卡卡电脑诊断日志 v1.30 (2009-12-25 20:34:18) 北京瑞星信息技术有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services Adobe LM Service [A ] 1. c:\program files\common files\adobe systems shared\service\adobelmsvc.exe Adobe Systems System Level Service Utility .text,.rdata,.data,.rsrc, aspnet_state [A ] 2. c:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe Microsoft Corporation Microsoft ASP.NET State Server .text,.data,.rsrc, clr_optimization_v2.0.50727_32 [A ] 3. c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe Microsoft Corporation .NET Runtime Optimization Service .text,.data,.rsrc, FontCache3.0.0.0 [A ] 4. c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe Microsoft Corporation PresentationFontCache.exe .text,.rsrc,.reloc, FspadSvc [A ] 5. c:\program files\avc finger-sensing pad driver\fspadsvr.exe .text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc, idsvc [A ] 6. c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe Microsoft Corporation Windows CardSpace .text,.rdata,.data,.rsrc,.reloc, JavaQuickStarterService [AM] 7. c:\program files\java\jre6\bin\jqs.exe Sun Microsystems, Inc. Java(TM) Quick Starter Service .text,.rdata,.data,.rsrc, [A ] 8. c:\program files\java\jre6\lib\deploy\jqs\jqs.conf kaccore [A ] 9. c:\program files\kingsoft\kac\service\kaccore.exe Kingsoft Corporation Kingsoft Basic Service Module .text,.orpc,.rdata,.data,.rsrc, NetTcpPortSharing [A ] 10. c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe Microsoft Corporation SMSvcHost.exe .text,.rsrc,.reloc, 文件名和"svchost.exe"类似 npkcmsvc [AM] 11. c:\windows\system32\npkcmsvc.exe INCA Internet Co., Ltd. nProtect KeyCrypt Manager Service .text,.rdata,.data,.rsrc, NVSvc [A ] 12. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 174.31 .text,.rdata,.data,.rsrc, ose [A ] 13. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, PnpWMmng [A ] 14. d:\program files\完美卸载v2007 完整版\pnpwmmng.exe 完美卸载 完美卸载防毒服务 .text,.rdata,.data,.rsrc, RsRavMon [AM] 15. c:\program files\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, UMWdf [A ] 16. c:\windows\system32\wdfmgr.exe Microsoft Corporation Windows User Mode Driver Manager .text,.data,.rsrc, + 内核驱动 + HKLM\System\CurrentControlSet\Services 1394hub [A ] 17. c:\windows\system32\svchost.exe -k netsvcs Alidevice [A ] 18. c:\windows\system32\drivers\alidevice.sys alipay.com Windows NT alipay kernel module .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, AmdK8 [A ] 19. c:\windows\system32\drivers\amdk8.sys Advanced Micro Devices AMD Processor Driver .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc, Aspi32 [A ] 20. c:\windows\system32\drivers\aspi32.sys Adaptec ASPI for WIN32 Kernel Driver .text,.data,INIT,.rsrc,.reloc, EfiMon [A ] 21. c:\windows\system32\drivers\efimon.sys 奇虎网 360Efimon Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ENTECH [A ] 22. c:\windows\system32\drivers\entech.sys EnTech Taiwan PowerStrip support NT kernel-mode driver .text,.data,.CRT,PAGE,INIT,.rsrc,.reloc, fspad [A ] 23. c:\windows\system32\drivers\fspad.sys Asia Vital Components Co.,Ltd. AVC Finger-sensing Pad Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, HDAudBus [A ] 24. c:\windows\system32\drivers\hdaudbus.sys Windows (R) Server 2003 DDK provider High Definition Audio Bus Driver v1.0a .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, hookcont [A ] 25. c:\windows\system32\drivers\hookcont.sys Beijing Rising Information Technology Co., Ltd. HookCont Driver for x86 .text,.rdata,.data,INIT,.rsrc,.reloc, HookNtos [A ] 26. c:\windows\system32\drivers\hookntos.sys HookPort [A ] 27. c:\windows\system32\drivers\hookport.sys 360安全中心 360安全卫士 - HookPort .text,.rdata,.data,INIT,.rsrc,.reloc, HookReg [A ] 28. c:\windows\system32\drivers\hookreg.sys hooksys [A ] 29. c:\windows\system32\drivers\hooksys.sys Beijing Rising Information Technology Co., Ltd. Hooksys.sys .text,.rdata,.data,INIT,.rsrc,.reloc, HookUrl [A ] 30. c:\program files\rising\rfw\hookurl.sys IntcAzAudAddService [A ] 31. c:\windows\system32\drivers\rtkhdaud.sys Realtek Semiconductor Corp. Realtek(r) High Definition Audio Function Driver .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, NPF [A ] 32. c:\windows\system32\drivers\npf.sys Politecnico di Torino NPF Driver - TME extensions .text,.rdata,.data,INIT,.rsrc,.reloc, npkakl [A ] 33. c:\windows\system32\npkakl.sys INCA Internet Co.,Ltd. nProtect KeyCrypt Driver .text,.rdata,.data,INIT,.rsrc,.reloc, npkcrypt [A ] 34. d:\program files\tencent\qq\npkcrypt.sys INCA Internet Co., Ltd. nProtect KeyCrypt Driver .text,.rdata,.data,INIT,.rsrc,.reloc, npkcusb [A ] 35. c:\windows\system32\npkcusb.sys INCA Internet Co., Ltd. nProtect KeyCrypt Driver .text,page,init,.rdata,.data,INIT,.rsrc,.reloc, NVENETFD [A ] 36. c:\windows\system32\drivers\nvenetfd.sys NVIDIA Corporation NVIDIA Networking Function Driver. .text,.rdata,.data,INIT,.rsrc,.reloc, nvnetbus [A ] 37. c:\windows\system32\drivers\nvnetbus.sys NVIDIA Corporation NVIDIA Networking Bus Driver. .text,.rdata,.data,INIT,.rsrc,.reloc, nvsmu [A ] 38. c:\windows\system32\drivers\nvsmu.sys NVIDIA Corporation NVIDIA? nForce(TM) SMU Microcontroller Driver .text,.rdata,.data,INIT,.rsrc,.reloc, PCANDIS5 [A ] 39. c:\windows\system32\pcandis5.sys Printing Communications Assoc., Inc. (PCAUSA) PCAUSA NDIS 5.0 Protocol Driver .text,.rdata,.data,INIT,.rsrc,.reloc, PCASp50 [A ] 40. c:\windows\system32\drivers\pcasp50.sys Printing Communications Assoc., Inc. (PCAUSA) PCAUSA NDIS 5.0 SPR Protocol Driver .text,.rdata,.data,INIT,.rsrc,.reloc, pfc [A ] 41. c:\windows\system32\drivers\pfc.sys Padus, Inc. Padus(R) ASPI Shell .text,.rdata,.data,INIT,.rsrc,.reloc, PnpWmkDrv [A ] 42. c:\windows\system32\drivers\pnpwmkdrv.sys Windows (R) 2000 DDK provider 完美卸载 Driver .text,.rdata,.data,INIT,.rsrc,.reloc, PxHelp20 [A ] 43. c:\windows\system32\drivers\pxhelp20.sys Sonic Solutions Px Engine Device Driver for Windows 2000/XP .text,.rdata,.data,INIT,.rsrc,.reloc, RsAntiSpyware [A ] 44. c:\windows\system32\drivers\rsboot.sys rsassist [A ] 45. c:\windows\system32\drivers\rsassist.sys Beijing Rising Information Technology Co., Ltd. RsAssist.sys .text,.rdata,.data,INIT,.rsrc,.reloc, RsNTGDI [A ] 46. c:\windows\system32\drivers\rsntgdi.sys Beijing Rising Information Technology Co., Ltd. RsNTGDI .text,.rdata,INIT,.rsrc,.reloc, RsProtect [A ] 47. c:\windows\system32\drivers\rsptect.sys Beijing Rising Information Technology Co., Ltd. RsProtect .text,.rdata,.data,INIT,.rsrc,.reloc, RTLWUSB [A ] 48. c:\windows\system32\drivers\rtl8187.sys Realtek Semiconductor Corporation Realtek RTL8187 NDIS Driver .text,.rdata,.data,INIT,.rsrc,.reloc, SafeBoxKrnl [A ] 49. c:\windows\system32\drivers\safeboxkrnl.sys 360安全中心 360安全卫士 - 保险箱 .text,.rdata,.data,INIT,.rsrc,.reloc, Secdrv [A ] 50. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, sfdrv01 [A ] 51. c:\windows\system32\drivers\sfdrv01.sys Protection Technology StarForce Protection Environment Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, sfhlp02 [A ] 52. c:\windows\system32\drivers\sfhlp02.sys Protection Technology StarForce Protection Helper Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, sfsync02 [A ] 53. c:\windows\system32\drivers\sfsync02.sys Protection Technology StarForce Protection Synchronization Driver .text,.data,PAGE,INIT,.rsrc,.reloc, smserial [A ] 54. c:\windows\system32\drivers\smserial.sys Motorola Inc. Motorola SM56 Modem WDM Driver .text,page,_LTEXT,_LDATA,.rdata,.data,PAGESRP0,INIT,.rsrc,.reloc, sptd [A ] 55. c:\windows\system32\drivers\sptd.sys TesDrvPt [A ] 56. c:\windows\system32\tesdrvpt.sys TENCENT Kernel helper of the Tencent's game trojan killer .text,.rdata,.data,INIT,.rsrc,.reloc, TesSafe [A ] 57. c:\windows\system32\tessafe.sys TENCENT TesSafe NT Driver .text,.rdata,.data,INIT,.rsrc,.v-lizer, WmRegProDrv [A ] 58. c:\windows\system32\drivers\wmregprodrv.sys Windows (R) 2000 DDK provider 完美卸载 保护驱动 .text,.rdata,.data,INIT,.rsrc,.reloc, + 系统登陆自运行 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon UIHost [A ] 59. c:\da\windowsxp桌面主题合集\xplogonchanger\东方登录界面\东方登录2.exe .text,.data,.rsrc, + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify WBSrv [AM] 60. c:\program files\stardock\object desktop\windowblinds\wbsrv.dll Stardock Corporation WBSrv.dll .text,.rdata,.data,.rsrc,.reloc, + IE浏览器加载模块 + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {00000000-12C9-4305-82F9-43058F20E8D2} [AM] 62. d:\program files\tencent\qqdownload2\qqiehelper01.dll Tencent Technology (Shenzhen) Company Limited 超级旋风下载组件 .text,.rdata,.data,.rsrc,.reloc, {01443AEC-0FD1-40fd-9C87-E93D1494C233} [A ] 63. d:\program files\thunder network\thunder\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} [AM] 64. f:\program files\emule\modules\ie2em.dll VeryCD.com eMule BHO (电驴浏览器辅助对象) .text,.rdata,.data,.rsrc,.reloc, {889D2FEB-5411-4565-8998-1DD2C5261283} [AM] 65. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, {9030D464-4C02-4ABF-8ECC-5164760863C6} [AM] 66. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll Microsoft Corporation WindowsLiveLogin.dll .text,.data,.rsrc,.reloc, {98B7C139-E9CD-4959-8B46-FBEAB41E42A8} [AM] 65. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [AM] 67. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, {A986E409-30CC-4185-89BB-AB212C104524} [AM] 68. c:\program files\ppliveva\downloadermanager.dll Synacast PP加速器感知下载特性支持模块 .text,.orpc,.rdata,.data,Shared1,.rsrc,.reloc, {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} [AM] 69. c:\documents and settings\thtf\application data\flashgetbho\flashgetbho31.dll Trend Media Group FlashGet 浏览器帮助对象 .text,.orpc,.rdata,.data,DLLShare,.rsrc,.reloc, {DBC80044-A445-435b-BC74-9C25C1C588A9} [AM] 70. c:\program files\java\jre6\bin\jp2ssv.dll Sun Microsystems, Inc. Java(TM) Platform SE binary .text,.rdata,.data,.rsrc,.reloc, {E7E6F031-17CE-4C07-BC86-EABFE594F69C} [AM] 71. c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll Sun Microsystems, Inc. Java(TM) Quick Starter binary .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Exec [A ] 72. d:\program files\thunder network\thunder\thunder.exe Thunder Networking Technologies,LTD .text,.rdata,.data,.rsrc, Exec [A ] 73. d:\program files\pplive\pplive.exe PPLive .text,.rdata,.data,.rsrc, Exec [A ] 74. c:\program files\messenger\msmsgs.exe Microsoft Corporation Windows Messenger .text,.data,.rsrc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter application/octet-stream [AM] 75. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, application/x-complus [AM] 75. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, application/x-msdownload [AM] 75. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, text/xml [A ] 76. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler livecall [A ] 77. c:\program files\windows live\messenger\msgrapp.14.0.8089.0726.dll Microsoft Corporation Windows Live Messenger Protocol Handler Module .text,.data,.rsrc,.reloc, ms-itss [A ] 78. c:\program files\common files\microsoft shared\information retrieval\msitss.dll Microsoft Corporation Microsoft? InfoTech Storage System Library .text,.data,.rsrc,.reloc, msnim [A ] 77. c:\program files\windows live\messenger\msgrapp.14.0.8089.0726.dll Microsoft Corporation Windows Live Messenger Protocol Handler Module .text,.data,.rsrc,.reloc, mso-offdap [A ] 79. c:\program files\common files\microsoft shared\web components\10\owc10.dll Microsoft Corporation Microsoft Office XP Web Components .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc, wlmailhtml [A ] 80. c:\program files\windows live\mail\mailcomm.dll Microsoft Corporation Windows Live Mail .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} [A ] 81. c:\windows\system32\ieudinit.exe Microsoft Corporation IE Per User Active Setup Uninstall Utility .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 82. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, IE Search Band [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Shell DocObject Viewer [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, InternetShortcut [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url History Service [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, History [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url Search Hook [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, The Internet [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Internet Name Space [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, NvCpl DesktopContext Class [A ] 83. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.orpc,.rdata,.data,CONST,.rsrc,.reloc, Desktop Explorer [A ] 84. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, Desktop Explorer Menu [A ] 84. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, nView Desktop Context Menu [A ] 84. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, Microsoft Office HTML Icon Handler [AM] 85. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 86. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, Shell Extensions for RealOne Player [A ] 87. c:\program files\real\realplayer\rpshell.dll RealNetworks, Inc. RealPlayer Shell Extensions .text,.rdata,.data,.rsrc,.reloc, UltraISO [AM] 88. d:\program files\ultraiso\isoshell.dll EZB Systems, Inc. ISOShell .text,.rdata,.data,.rsrc,.reloc, NeroCoverEd Live Icons [A ] 89. d:\program files\nero 7\nero coverdesigner\coveredextension.dll Nero AG Cover Designer .text,.rdata,.data,.tls,.rsrc,.reloc, ShellLink for Application References [AM] 90. c:\windows\system32\dfshim.dll Microsoft Corporation Application Deployment Support Library .text,.data,.rsrc,.reloc, Shell Icon Handler for Application References [AM] 90. c:\windows\system32\dfshim.dll Microsoft Corporation Application Deployment Support Library .text,.data,.rsrc,.reloc, EncryptFile [A ] 91. d:\program files\wopti\woptiencryptmodule.dll 共软网络 Wopti 文件加密右键模块 CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, IE Microsoft BrowserBand [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Fade Task [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Desk Bar [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE AutoComplete [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Navigation Bar [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Site [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Band [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft History AutoComplete List [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Tracking Shell Menu [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE IShellFolderBand [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE BandProxy [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE MRU AutoComplete List [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE RSS Feeder Folder [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Shell Folder AutoComplete List [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Multiple AutoComplete List Container [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Browser Architecture [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Rebar BandSite [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Band Site Menu [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, &Links [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Registry Tree Options Utility [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE User Assist [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Custom MRU AutoCompleted List [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Office Metadata Handler [A ] 92. c:\program files\common files\microsoft shared\office12\msoshext.dll Microsoft Corporation Microsoft Office Shell Extension Handlers .text,.data,.rsrc,.reloc, Microsoft Office Thumbnail Handler [A ] 92. c:\program files\common files\microsoft shared\office12\msoshext.dll Microsoft Corporation Microsoft Office Shell Extension Handlers .text,.data,.rsrc,.reloc, Microsoft.XPS.Shell.Metadata.1 [A ] 93. c:\windows\system32\xpsshhdr.dll Microsoft Corporation Package Document Shell Extension Handler .text,.data,.rsrc,.reloc, Microsoft.XPS.Shell.Thumbnail.1 [A ] 93. c:\windows\system32\xpsshhdr.dll Microsoft Corporation Package Document Shell Extension Handler .text,.data,.rsrc,.reloc, WindowBlinds CPL Extension [A ] 94. c:\program files\stardock\object desktop\windowblinds\wbui.dll Stardock Corporation WindowBlinds 6.01 UI .text,.rdata,.data,.rsrc,.reloc, RISING [AM] 95. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, DllRegShlExt extension [A ] 96. c:\windows\system32\tudouupload.dll www.Tudou.com DLL registration shell extension .text,.rdata,.data,.rsrc,.reloc, WLMD Message Handler [A ] 80. c:\program files\windows live\mail\mailcomm.dll Microsoft Corporation Windows Live Mail .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {32CD708B-60A7-4C00-9377-D73EAA495F0F} [AM] 95. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKCU\Software\Microsoft\Windows\CurrentVersion\Run NVIDIA nTune [A ] 97. c:\program files\nvidia corporation\ntune\ntunecmd.exe NVIDIA NVIDIA nTune Command .text,.rdata,.data,.rsrc, + HKLM\Software\Microsoft\Windows\CurrentVersion\Run nwiz [A ] 98. c:\windows\system32\nwiz.exe .text,.rdata,.data,.rsrc, RTHDCPL [AM] 99. c:\windows\rthdcpl.exe Realtek Semiconductor Corp. Realtek HD Audio Control Panel .text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc, FuncKey [AM] 100. c:\program files\hotkey management\funckey.exe Hotkey Application .text,.rdata,.data,.rsrc, runeip [AM] 101. c:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, RavTray [AM] 102. c:\program files\rising\rav\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, IME JPN 2007 Migration [A ] 103. c:\program files\common files\microsoft shared\ime12\imejp\imjpklmg.exe Microsoft Corporation Microsoft Office IME 2007 .text,.data,.rsrc,.reloc, IME14 CHS WR Setup [A ] 104. c:\program files\common files\microsoft shared\ime14wr\shared\imeklmg.exe Microsoft Corporation Microsoft Office IME 2010 .text,.data,.rsrc,.reloc, SunJavaUpdateSched [AM] 105. c:\program files\java\jre6\bin\jusched.exe Sun Microsystems, Inc. Java(TM) Platform SE binary .text,.rdata,.data,.rsrc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce KKDelay [A ] 106. c:\program files\rising\antispyware\runonce.exe Beijing Rising Information Technology Co., Ltd. RunOnce Application .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 107. c:\windows\system32\bsmain.exe Beijing Rising Information Technology Co., Ltd. Rising Antivirus 2010 .text,.rdata,.data,.rsrc,.reloc, + 映像劫持 + HKCR\Folder\shell Md5Checker [A ] 108. e:\program files\md5checker\md5checker.exe Md5Checker .text,.rdata,.data,.rsrc, Md5CheckerCheckNewOnly [A ] 108. e:\program files\md5checker\md5checker.exe Md5Checker .text,.rdata,.data,.rsrc, + HKCR\.html htmlfile\Edit\Command [A ] 109. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\Print\Command [A ] 109. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 109. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\Print\Command [A ] 109. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + HKCR\.mp3 RealPlayer.MP3.6\ACDPrint\Command [A ] 110. c:\program files\acd systems\acdsee\6.0\acdsee6.exe ACD Systems Ltd. ACDSee 6.0 Application .text,.rdata,.data,.tls,.rsrc, RealPlayer.MP3.6\ACDView\Command [A ] 110. c:\program files\acd systems\acdsee\6.0\acdsee6.exe ACD Systems Ltd. ACDSee 6.0 Application .text,.rdata,.data,.tls,.rsrc, RealPlayer.MP3.6\FotoCanvasEdit\Command [A ] 111. c:\program files\acd systems\fotocanvas\3.0\fotocanvas3.exe ACD Systems, Ltd. FotoCanvas .text,.rdata,.data,.tls,.rsrc, RealPlayer.MP3.6\open\Command [A ] 112. c:\program files\real\realplayer\realplay.exe RealNetworks, Inc. RealPlayer .text,.rdata,.data,.rsrc, + 其他自启动项目 + C:\WINDOWS\Tasks Fuuka.job [A ] 113. d:\my program\魔法老师_时钟\fuuka.exe Anime New Power NegiClock .text,.rdata,.data,.rsrc, Nodoka.job [AM] 114. d:\my program\魔法老师_时钟\nodoka.exe Anime New Power NegiClock .text,.rdata,.data,.rsrc, SogouImeMgr.job [A ] 115. c:\program files\sogouinput\4.2.3.2813\pinyinrepair.exe Sogou.com Inc. 搜狗拼音输入法 输入法修复程序 .text,.rdata,.data,.rsrc, + 正在运行的进程 + 000000e0(224) alg.exe 10000000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 00000178(376) RTHDCPL.EXE 00400000[01059000] [AM] 99. c:\windows\rthdcpl.exe Realtek Semiconductor Corp. Realtek HD Audio Control Panel .text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 119. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 0000018c(396) FuncKey.exe 00400000[00025000] [AM] 100. c:\program files\hotkey management\funckey.exe Hotkey Application .text,.rdata,.data,.rsrc, 02000000[00006000] [ M] 120. c:\program files\hotkey management\winio.dll http://www.internals.com WinIo .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, + 0000022c(556) rstray.exe 00400000[00033000] [AM] 101. c:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, 00390000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[0004C000] [ M] 123. c:\program files\rising\antispyware\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 124. c:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 125. c:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 126. c:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00D60000[00024000] [ M] 127. c:\program files\rising\antispyware\comserv.dll Beijing Rising Information Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 00D90000[00019000] [ M] 128. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 23700000[00026000] [ M] 129. c:\program files\rising\antispyware\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00DD0000[0002D000] [ M] 130. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 131. c:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01030000[00067000] [ M] 132. c:\program files\rising\antispyware\runiep.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware tray .text,.rdata,.data,.rsrc,.reloc, 010A0000[00034000] [ M] 133. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01100000[0001F000] [ M] 134. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01120000[00024000] [ M] 135. c:\program files\rising\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00B20000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 000002c4(708) smss.exe + 00000304(772) jusched.exe 00400000[00025000] [AM] 105. c:\program files\java\jre6\bin\jusched.exe Sun Microsystems, Inc. Java(TM) Platform SE binary .text,.rdata,.data,.rsrc, 00390000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 00000308(776) csrss.exe + 00000330(816) winlogon.exe 10000000[0003B000] [AM] 60. c:\program files\stardock\object desktop\windowblinds\wbsrv.dll Stardock Corporation WBSrv.dll .text,.rdata,.data,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 119. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 0000035c(860) services.exe + 00000370(880) lsass.exe 10000000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 00000420(1056) svchost.exe + 00000428(1064) ctfmon.exe 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, + 00000450(1104) svchost.exe 10000000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 000004b8(1208) svchost.exe 00DF0000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 00000528(1320) svchost.exe 10000000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 00000564(1380) svchost.exe + 0000065c(1628) jqs.exe 00400000[00024000] [AM] 7. c:\program files\java\jre6\bin\jqs.exe Sun Microsystems, Inc. Java(TM) Quick Starter Service .text,.rdata,.data,.rsrc, 7C340000[00056000] [ M] 136. c:\program files\java\jre6\bin\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 4B4F0000[00006000] [ M] 137. c:\windows\system32\odbcbcp.dll Microsoft Corporation Microsoft BCP for ODBC .text,.data,.rsrc,.reloc, 10000000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 00000674(1652) SuperOPTI.exe 00400000[002D3000] [ M] 138. c:\program files\完美优化大师\superopti.exe 完美优化大师 .text,.rdata,.data,.rsrc, 10000000[000C6000] [ M] 139. c:\program files\完美优化大师\skinplusplus.dll http://www.killsoft.cn 完美卸载图形模块 .text,.rdata,.data,.rsrc,.reloc, 75FF0000[00065000] [ M] 140. c:\program files\完美优化大师\msvcp60.dll Microsoft Corporation Microsoft (R) C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00390000[00009000] [ M] 141. c:\program files\完美优化大师\activedll.dll 完美通用模块 .text,.rdata,.data,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 01BB0000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 03150000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, 3E1C0000[005CD000] [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 119. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 03F10000[00018000] [ M] 142. c:\program files\rising\rav\ravscrch.dll Beijing Rising Information Technology Co., Ltd. webmon module .text,.rdata,.data,.rsrc,.reloc, 7C3C0000[0007C000] [ M] 143. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C360000[00056000] [ M] 144. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, + 0000069c(1692) npkcmsvc.exe 00400000[00034000] [AM] 11. c:\windows\system32\npkcmsvc.exe INCA Internet Co., Ltd. nProtect KeyCrypt Manager Service .text,.rdata,.data,.rsrc, + 00000704(1796) Nodoka.exe 00400000[00229000] [AM] 114. d:\my program\魔法老师_时钟\nodoka.exe Anime New Power NegiClock .text,.rdata,.data,.rsrc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, + 00000720(1824) wmiprvse.exe 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, + 00000748(1864) Explorer.EXE 00400000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00024000] [AM] 95. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, 3E1C0000[005CD000] [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 60510000[00019000] [AM] 90. c:\windows\system32\dfshim.dll Microsoft Corporation Application Deployment Support Library .text,.data,.rsrc,.reloc, 79000000[00046000] [AM] 75. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, 79E70000[00590000] [ M] 145. c:\windows\microsoft.net\framework\v2.0.50727\mscorwks.dll Microsoft Corporation Microsoft .NET Runtime Common Language Runtime - WorkStation .text,.CLR_UEF,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 119. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 014B0000[00019000] [ M] 146. d:\program files\nero 7\nero backitup\nbshell.dll Nero AG Nero BackItUp .text,.rdata,.data,.rsrc,.reloc, 7C250000[00102000] [ M] 147. d:\program files\nero 7\nero backitup\mfc71u.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 03820000[00056000] [ M] 148. d:\program files\nero 7\nero backitup\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 149. d:\program files\nero 7\nero backitup\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 01390000[0000E000] [AM] 88. d:\program files\ultraiso\isoshell.dll EZB Systems, Inc. ISOShell .text,.rdata,.data,.rsrc,.reloc, 01F80000[00024000] [ M] 150. c:\windows\system32\kakaext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + 000008d8(2264) IEXPLORE.EXE 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 3E1C0000[005CD000] [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 5DFF0000[0002F000] [ M] 151. c:\windows\system32\ieui.dll Microsoft Corporation Internet Explorer UI Engine .text,.data,.rsrc,.reloc, 47060000[00021000] [ M] 152. c:\windows\system32\xmllite.dll Microsoft Corporation Microsoft XmlLite Library .text,.data,.rsrc,.reloc, 325C0000[00012000] [AM] 85. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, 61930000[0004A000] [ M] 153. c:\program files\internet explorer\ieproxy.dll Microsoft Corporation IE ActiveX Interface Marshaling Library .text,.orpc,.data,.rsrc,.reloc, 01420000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 10000000[00037000] [AM] 62. d:\program files\tencent\qqdownload2\qqiehelper01.dll Tencent Technology (Shenzhen) Company Limited 超级旋风下载组件 .text,.rdata,.data,.rsrc,.reloc, 01530000[00024000] [AM] 64. f:\program files\emule\modules\ie2em.dll VeryCD.com eMule BHO (电驴浏览器辅助对象) .text,.rdata,.data,.rsrc,.reloc, 29500000[00067000] [AM] 66. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll Microsoft Corporation WindowsLiveLogin.dll .text,.data,.rsrc,.reloc, 27500000[0011A000] [ M] 154. c:\program files\common files\microsoft shared\windows live\msidcrl40.dll Microsoft Corporation IDCRL Dynamic Link Library .text,.data,.rsrc,.reloc, 01610000[0001A000] [AM] 65. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 22110000[00009000] [ M] 155. d:\program files\thunder network\thunder\components\resworker\dsbho_00.dll DsBho .text,.rdata,.data,.rsrc,.reloc, 220F0000[0000C000] [ M] 156. d:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, 01980000[00018000] [AM] 67. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, 02D90000[00011000] [ M] 157. c:\program files\rising\antispyware\urlrule.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlRule Library .text,.rdata,.data,.rsrc,.reloc, 02ED0000[0007B000] [AM] 68. c:\program files\ppliveva\downloadermanager.dll Synacast PP加速器感知下载特性支持模块 .text,.orpc,.rdata,.data,Shared1,.rsrc,.reloc, 03360000[00027000] [AM] 69. c:\documents and settings\thtf\application data\flashgetbho\flashgetbho31.dll Trend Media Group FlashGet 浏览器帮助对象 .text,.orpc,.rdata,.data,DLLShare,.rsrc,.reloc, 03390000[0004C000] [ M] 158. c:\documents and settings\thtf\application data\flashgetbho\flashgethook.dll Trend Media Group FlashGet 浏览器帮助对象 .text,.orpc,.rdata,.data,.rsrc,.reloc, 6D440000[0000C000] [AM] 70. c:\program files\java\jre6\bin\jp2ssv.dll Sun Microsystems, Inc. Java(TM) Platform SE binary .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 136. c:\program files\java\jre6\bin\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 6DAE0000[00012000] [AM] 71. c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll Sun Microsystems, Inc. Java(TM) Quick Starter binary .text,.rdata,.data,.rsrc,.reloc, 02B60000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, 42F90000[00060000] [ M] 159. c:\windows\system32\ieapfltr.dll Microsoft Corporation Microsoft Phishing Filter .text,.data,.rsrc,.reloc, 04F90000[00018000] [ M] 142. c:\program files\rising\rav\ravscrch.dll Beijing Rising Information Technology Co., Ltd. webmon module .text,.rdata,.data,.rsrc,.reloc, 7C3C0000[0007C000] [ M] 143. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 06AF0000[004A4000] [ M] 160. c:\windows\system32\macromed\flash\flash10d.ocx Adobe Systems, Inc. Adobe Flash Player 10.0 r42 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 119. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 0AB40000[0020C000] [ M] 161. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 0A480000[00032000] [ M] 162. c:\program files\sogouinput\4.2.3.2813\resource.dll Sogou.com Inc. 搜狗拼音输入法 .rsrc,.reloc, + 00000950(2384) RavMonD.exe 00400000[0002F000] [AM] 15. c:\program files\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, 10000000[00032000] [ M] 163. c:\program files\rising\rav\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 01130000[00086000] [ M] 164. c:\program files\rising\rav\cnt09.dll Beijing Rising Information Technology Co., Ltd. cnt09 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01310000[00019000] [ M] 165. c:\program files\rising\rav\moncomm.dll Beijing Rising Information Technology Co., Ltd. MonComm .text,.rdata,.data,.rsrc,.reloc, 01340000[0001D000] [ M] 166. c:\program files\rising\rav\monbase.dll Beijing Rising Information Technology Co., Ltd. MonBase .text,.rdata,.data,.rsrc,.reloc, 01370000[00084000] [ M] 167. c:\program files\rising\rav\rslog.dll Beijing Rising Information Technology Co., Ltd. rslog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01420000[00018000] [ M] 168. c:\program files\rising\rav\mondrv.dll Beijing Rising Information Technology Co., Ltd. mondrv .text,.rdata,.data,.rsrc,.reloc, 01450000[0002E000] [ M] 169. c:\program files\rising\rav\defmon.dll Beijing Rising Information Technology Co., Ltd. DefMon .text,.rdata,.data,.rsrc,.reloc, 01690000[00010000] [ M] 170. c:\program files\rising\rav\moncom08.dll Beijing Rising Information Technology Co., Ltd. MonCom08 .text,.rdata,.data,.rsrc,.reloc, 016B0000[0007E000] [ M] 171. c:\program files\rising\rav\monrule.dll Beijing Rising Information Technology Co., Ltd. MonRule .text,.rdata,.data,.rsrc,.reloc, 01760000[00027000] [ M] 172. c:\program files\rising\rav\filemon.dll Beijing Rising Information Technology Co., Ltd. Filemon .text,.rdata,.data,.rsrc,.reloc, 017A0000[0002F000] [ M] 173. c:\program files\rising\rav\mailmon.dll Beijing Rising Information Technology Co., Ltd. MailMon .text,.rdata,.data,.rsrc,.reloc, 017E0000[00015000] [ M] 174. c:\program files\rising\rav\hookweb.dll Beijing Rising Information Technology Co., Ltd. hookweb .text,.rdata,.data,.rsrc,.reloc, 01820000[0008C000] [ M] 175. c:\program files\rising\rav\rsindent.dll Beijing Rising Information Technology Co., Ltd. rsindent .text,.rdata,.data,.rsrc,.reloc, 018B0000[00019000] [ M] 176. c:\program files\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 018F0000[00018000] [ M] 177. c:\program files\rising\rav\taskplug.dll Beijing Rising Information Technology Co., Ltd. TaskPlug .text,.rdata,.data,.rsrc,.reloc, 00E10000[00012000] [ M] 178. c:\program files\rising\rav\scansrvp.dll Beijing Rising Information Technology Co., Ltd. ScanSrvP Module .text,.rdata,.data,.rsrc,.reloc, 00E40000[0001D000] [ M] 179. c:\program files\rising\rav\cnt08.dll Beijing Rising Information Technology Co., Ltd. cnt08 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00E70000[00019000] [ M] 180. c:\program files\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00EA0000[0000E000] [ M] 181. c:\program files\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 00EC0000[00044000] [ M] 182. c:\program files\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 02430000[0002D000] [ M] 183. c:\program files\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 025A0000[00020000] [ M] 184. c:\program files\rising\rav\hooksys.dll Beijing Rising Information Technology Co., Ltd. Hooksys.dll .text,.rdata,.data,.idata,.rsrc,.reloc, 02650000[0001F000] [ M] 134. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02670000[00024000] [ M] 185. c:\program files\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 028C0000[00013000] [ M] 186. c:\program files\rising\rav\hookcont.dll Beijing Rising Information Technology Co., Ltd. HookCont Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02A00000[00072000] [ M] 187. c:\program files\rising\rav\bacore.dll Beijing Rising Information Technology Co., Ltd. Rising MBA DLL .text,.rdata,.data,.rsrc,.reloc, 02BA0000[0003B000] [ M] 188. c:\program files\rising\rav\recomp.dll Beijing Rising Information Technology Co., Ltd. component manager Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02BF0000[00038000] [ M] 189. c:\program files\rising\rav\refs.dll Beijing Rising Information Technology Co., Ltd. filesystem Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02E50000[00030000] [ M] 190. c:\program files\rising\rav\viruslib.dll Beijing Rising Information Technology Co., Ltd. VirusLib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02F90000[00029000] [ M] 191. c:\program files\rising\rav\relibldr.dll Beijing Rising Information Technology Co., Ltd. libloader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03210000[0007E000] [ M] 192. c:\program files\rising\rav\rsnetsvr.dll Beijing Rising Information Technology Co., Ltd. rsnetsvr .text,.rdata,.data,.rsrc,.reloc, 034D0000[00016000] [ M] 193. c:\program files\rising\rav\bawhite.dll Beijing Rising Information Technology Co., Ltd. bawhite Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03700000[0002B000] [ M] 194. c:\program files\rising\rav\rsstore.dll Beijing Rising Information Technology Co., Ltd. RSStore .text,.rdata,.data,.rsrc,.reloc, 03740000[00043000] [ M] 195. c:\program files\rising\rav\scanner.dll Beijing Rising Information Technology Co., Ltd. RsScanner Module .text,.rdata,.data,.rsrc,.reloc, 03920000[0001B000] [ M] 196. c:\program files\rising\rav\scanadd.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Addon .text,.rdata,.data,.rsrc,.reloc, 03B90000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, 03640000[0001C000] [ M] 197. c:\program files\rising\rav\ncomm2.dll Beijing Rising Information Technology Co., Ltd. NComm2 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03660000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 03690000[00028000] [ M] 198. c:\program files\rising\rav\rstask.dll Beijing Rising Information Technology Co., Ltd. RsTask Control .text,.rdata,.data,.rsrc,.reloc, 036D0000[0001A000] [ M] 199. c:\program files\rising\rav\scansrv.dll Beijing Rising Information Technology Co., Ltd. ScanSrv Module .text,.rdata,.data,.rsrc,.reloc, 04070000[0002B000] [ M] 200. c:\program files\rising\rav\scanpe.dll Beijing Rising Information Technology Co., Ltd. scanpe Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 040A0000[00029000] [ M] 201. c:\program files\rising\rav\pearc.dll Beijing Rising Information Technology Co., Ltd. pearchive Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 06100000[0001B000] [ M] 202. c:\program files\rising\rav\ur000.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 06130000[00035000] [ M] 203. c:\program files\rising\rav\urutils.dll Beijing Rising Information Technology Co., Ltd. urutils Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 083E0000[00032000] [ M] 204. c:\program files\rising\rav\ffr.dll Beijing Rising Information Technology Co., Ltd. ffr Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 08430000[00022000] [ M] 205. c:\program files\rising\rav\nvfile.dll Beijing Rising Information Technology Co., Ltd. NVFile .text,.rdata,.data,.rsrc,.reloc, 13AB0000[00045000] [ M] 206. c:\program files\rising\rav\scanexec.dll Beijing Rising Information Technology Co., Ltd. ScanExec .text,.rdata,.data,.rsrc,.reloc, 09100000[002DD000] [ M] 207. c:\program files\rising\rav\unexe.dll Beijing Rising Information Technology Co., Ltd. UnExe .text,.rdata,.data,.rsrc,.reloc, 093E0000[000CE000] [ M] 208. c:\program files\rising\rav\scanex.dll Beijing Rising Information Technology Co., Ltd. ScanEx .text,.rdata,.data,.rsrc,.reloc, 09960000[00011000] [ M] 209. c:\program files\rising\rav\scantj.dll Beijing Rising Information Technology Co., Ltd. scantj Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 0C8E0000[00085000] [ M] 210. c:\program files\rising\rav\methodex.dll Beijing Rising Information Technology Co., Ltd. MethodEx .text,.rdata,.data,.rsrc,.reloc, 0CB00000[000B9000] [ M] 211. c:\program files\rising\rav\revm.dll Beijing Rising Information Technology Co., Ltd. REVM Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 0C850000[00022000] [ M] 212. c:\program files\rising\rav\pecompd.dll Beijing Rising Information Technology Co., Ltd. PeCompdEx .text,.rdata,.data,.rsrc,.reloc, 0C890000[0003C000] [ M] 213. c:\program files\rising\rav\heurex.dll Beijing Rising Information Technology Co., Ltd. HeurEx .text,.rdata,.data,.rsrc,.reloc, 14210000[0003A000] [ M] 214. c:\program files\rising\rav\extmail.dll Beijing Rising Information Technology Co., Ltd. ExtMail .text,.rdata,.data,.rsrc,.reloc, 0D730000[00011000] [ M] 215. c:\program files\rising\rav\ur001.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 01B20000[00023000] [ M] 216. c:\program files\rising\rav\scansct.dll Beijing Rising Information Technology Co., Ltd. ScanSct Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000b84(2948) ras.exe 00400000[0000B000] [ M] 217. c:\program files\rising\antispyware\ras.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 218. c:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 126. c:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00047000] [ M] 219. c:\program files\rising\antispyware\kakamgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 125. c:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00E50000[00019000] [ M] 128. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00E80000[0001F000] [ M] 134. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00EA0000[00024000] [ M] 135. c:\program files\rising\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00FF0000[0002D000] [ M] 130. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01160000[00058000] [ M] 220. c:\program files\rising\antispyware\dbmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 124. c:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 012C0000[0002E000] [ M] 221. c:\program files\rising\antispyware\pweb.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01330000[0010D000] [ M] 222. c:\program files\rising\antispyware\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01440000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01450000[00034000] [ M] 133. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 016C0000[00070000] [ M] 223. c:\program files\rising\antispyware\pset.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01730000[00027000] [ M] 224. c:\program files\rising\antispyware\pdefend.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01760000[000B7000] [ M] 225. c:\program files\rising\antispyware\ptools.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01920000[00075000] [ M] 226. c:\program files\rising\antispyware\psysinfo.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 3E1C0000[005CD000] [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 019C0000[00024000] [AM] 95. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 131. c:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03070000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, 030C0000[00018000] [ M] 142. c:\program files\rising\rav\ravscrch.dll Beijing Rising Information Technology Co., Ltd. webmon module .text,.rdata,.data,.rsrc,.reloc, 04570000[004A4000] [ M] 160. c:\windows\system32\macromed\flash\flash10d.ocx Adobe Systems, Inc. Adobe Flash Player 10.0 r42 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 119. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000b98(2968) QQ.exe 00400000[00023000] [ M] 227. d:\program files\tencent\qq\bin\qq.exe Tencent QQ2009 .text,.rdata,.data,.rsrc, 30000000[00211000] [ M] 228. d:\program files\tencent\qq\bin\common.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 003A0000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 31800000[0008E000] [ M] 229. d:\program files\tencent\qq\bin\kernelutil.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 30800000[002AA000] [ M] 230. d:\program files\tencent\qq\bin\gf.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 10000000[0000B000] [ M] 231. d:\program files\tencent\qq\bin\xgraphic32.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61210000[001E9000] [ M] 232. d:\program files\tencent\qq\bin\apputil.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61C00000[0021A000] [ M] 233. d:\program files\tencent\qq\bin\mainframe.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 02910000[004A4000] [ M] 160. c:\windows\system32\macromed\flash\flash10d.ocx Adobe Systems, Inc. Adobe Flash Player 10.0 r42 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 119. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 60B30000[00061000] [ M] 234. d:\program files\tencent\qq\bin\msvcp60.dll Microsoft Corporation Microsoft (R) C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 31000000[0036B000] [ M] 235. d:\program files\tencent\qq\bin\im.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61FE0000[00040000] [ M] 236. d:\program files\tencent\qq\bin\tasktray.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 32000000[0000A000] [ M] 237. d:\program files\tencent\qq\bin\txpfproxy.dll Tencent QQ2009 .text,.orpc,.rdata,.data,.rsrc,.reloc, 04AA0000[00057000] [ M] 238. d:\program files\tencent\qq\plugin\com.tencent.qqshow\bin\flashavatardll.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 31400000[0004D000] [ M] 239. d:\program files\tencent\qq\bin\kernelmisc.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 04B00000[00189000] [ M] 240. d:\program files\tencent\qq\bin\appmisc.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61030000[00075000] [ M] 241. d:\program files\tencent\qq\bin\appctrl.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61500000[0014C000] [ M] 242. d:\program files\tencent\qq\bin\chatframe.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61700000[000B3000] [ M] 243. d:\program files\tencent\qq\bin\configcenter.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61A00000[00085000] [ M] 244. d:\program files\tencent\qq\bin\customface.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 31C00000[000E7000] [ M] 245. d:\program files\tencent\qq\bin\longcnn.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61900000[000CB000] [ M] 246. d:\program files\tencent\qq\bin\contactinfoframe.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 65000000[000E3000] [ M] 247. d:\program files\tencent\qq\bin\msgmgr.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61F20000[0003E000] [ M] 248. d:\program files\tencent\qq\bin\skinmgr.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 61F00000[0001A000] [ M] 249. d:\program files\tencent\qq\bin\qinterlive.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 65100000[00088000] [ M] 250. d:\program files\tencent\qq\bin\systemmsg.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 62E00000[000FC000] [ M] 251. d:\program files\tencent\qq\plugin\com.tencent.paipai\bin\paipai.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 62100000[00139000] [ M] 252. d:\program files\tencent\qq\plugin\com.tencent.audiovideo\bin\audiovideo.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 62A00000[00049000] [ M] 253. d:\program files\tencent\qq\plugin\com.tencent.mmog\bin\mmog.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 64100000[00055000] [ M] 254. d:\program files\tencent\qq\plugin\com.tencent.soso\bin\soso.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63D00000[000A9000] [ M] 255. d:\program files\tencent\qq\plugin\com.tencent.qzone\bin\qzone.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 64700000[00031000] [ M] 256. d:\program files\tencent\qq\plugin\com.tencent.weather\bin\weather.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 64000000[00018000] [ M] 257. d:\program files\tencent\qq\plugin\com.tencent.sobar\bin\sobar.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 62F00000[00048000] [ M] 258. d:\program files\tencent\qq\plugin\com.tencent.paipaigift\bin\paipaigift.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63500000[00019000] [ M] 259. d:\program files\tencent\qq\plugin\com.tencent.qqlive\bin\qqlive.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63600000[00053000] [ M] 260. d:\program files\tencent\qq\plugin\com.tencent.qqmusic\bin\qqmusic.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 64300000[0001B000] [ M] 261. d:\program files\tencent\qq\plugin\com.tencent.taotao\bin\taotao.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 04E70000[0008C000] [ M] 262. c:\program files\common files\tencent\txsso\bin\ssoplatform.dll Tencent Tencent SSO Platform DLL .text,.rdata,.data,.rsrc,.reloc, 04F00000[0016A000] [ M] 263. c:\program files\common files\tencent\txsso\bin\ssocommon.dll Tencent Tencent SSO Common DLL .text,.rdata,.data,.rsrc,.reloc, 05470000[00070000] [ M] 264. d:\program files\tencent\qq\bin\basicctrldll.dll TENCENT BasicCtrlDll DLL .text,.rdata,.data,.rsrc,.reloc, 04E30000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, 39700000[000EB000] [ M] 265. d:\program files\tencent\qq\bin\riched20.dll Microsoft Corporation Rich Text Edit Control, v5.0 .text,.rdata,.data,.rsrc,.reloc, 06E40000[000FD000] [ M] 266. d:\program files\tencent\qq\bin\groupapp.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 3E1C0000[005CD000] [AM] 61. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 63F00000[0003C000] [ M] 267. d:\program files\tencent\qq\plugin\com.tencent.snsapp\bin\snsapp.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63000000[0003B000] [ M] 268. d:\program files\tencent\qq\plugin\com.tencent.paycenter\bin\paycenter.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63100000[00022000] [ M] 269. d:\program files\tencent\qq\plugin\com.tencent.qbar\bin\qbar.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63B00000[00027000] [ M] 270. d:\program files\tencent\qq\plugin\com.tencent.qqvipmisc\bin\qqvipmisc.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 64800000[0003C000] [ M] 271. d:\program files\tencent\qq\plugin\com.tencent.wenwen\bin\wenwen.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 62B00000[00016000] [ M] 272. d:\program files\tencent\qq\plugin\com.tencent.netbar\bin\netbar.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 64A00000[0007E000] [ M] 273. d:\program files\tencent\qq\plugin\com.tencent.wireless\bin\wireless.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63900000[000BD000] [ M] 274. d:\program files\tencent\qq\plugin\com.tencent.qqshow\bin\qqshow.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 64600000[00020000] [ M] 275. d:\program files\tencent\qq\plugin\com.tencent.vas\bin\vas.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 07FC0000[00093000] [ M] 276. d:\program files\tencent\qq\bin\informationbox.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 62300000[00035000] [ M] 277. d:\program files\tencent\qq\plugin\com.tencent.crm\bin\crm.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63A00000[0001D000] [ M] 278. d:\program files\tencent\qq\plugin\com.tencent.qqvip\bin\qqvip.dll Tencent QQ2009 .text,.rdata,.data,TipsStyl,.rsrc,.reloc, 62400000[000C4000] [ M] 279. d:\program files\tencent\qq\plugin\com.tencent.filetransfer\bin\filetransfer.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 62900000[0005A000] [ M] 280. d:\program files\tencent\qq\plugin\com.tencent.memo\bin\memo.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63700000[00037000] [ M] 281. d:\program files\tencent\qq\plugin\com.tencent.qqpet\bin\qqpet.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 03DF0000[00066000] [ M] 282. d:\program files\tencent\qq\plugin\com.tencent.advertisement\bin\advertisement.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 64400000[0001D000] [ M] 283. d:\program files\tencent\qq\plugin\com.tencent.today\bin\today.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 03F60000[00024000] [AM] 95. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, 63300000[0006A000] [ M] 284. d:\program files\tencent\qq\plugin\com.tencent.qqgame\bin\qqgame.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63800000[0003C000] [ M] 285. d:\program files\tencent\qq\plugin\com.tencent.qqring\bin\qqring.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 62700000[00031000] [ M] 286. d:\program files\tencent\qq\plugin\com.tencent.mail\bin\mail.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 63C00000[0002B000] [ M] 287. d:\program files\tencent\qq\plugin\com.tencent.qqwebsite\bin\qqwebsite.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 01FC0000[0005F000] [ M] 288. d:\program files\tencent\qq\bin\vqqsdl.dll Tencent VqqSpeedDl Module .text,.rdata,.data,.rsrc,.reloc, 62500000[0003A000] [ M] 289. d:\program files\tencent\qq\plugin\com.tencent.gamelife\bin\gamelife.dll Tencent QQ2009 .text,.rdata,.data,.rsrc,.reloc, 0A650000[00018000] [ M] 142. c:\program files\rising\rav\ravscrch.dll Beijing Rising Information Technology Co., Ltd. webmon module .text,.rdata,.data,.rsrc,.reloc, 0A670000[0007C000] [ M] 143. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C360000[00056000] [ M] 144. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 0C3A0000[0020C000] [ M] 161. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 UPX0,UPX1,.rsrc, 0B7D0000[00032000] [ M] 162. c:\program files\sogouinput\4.2.3.2813\resource.dll Sogou.com Inc. 搜狗拼音输入法 .rsrc,.reloc, 0E070000[00039000] [ M] 290. d:\program files\tencent\qq\bin\addrsearch.dll Tencent AddrSearch UPX0,UPX1,.rsrc, + 00000c1c(3100) RsTray.exe 00400000[0002C000] [AM] 102. c:\program files\rising\rav\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, 10000000[00031000] [ M] 291. c:\program files\rising\rav\comserv.dll Beijing Rising Information Technology Co., Ltd. Rising tray common service .text,.rdata,.data,.rsrc,.reloc, 23700000[00023000] [ M] 292. c:\program files\rising\rav\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00A80000[0002D000] [ M] 183. c:\program files\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00AB0000[00019000] [ M] 176. c:\program files\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00CB0000[00019000] [ M] 180. c:\program files\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23800000[00039000] [ M] 293. c:\program files\rising\rav\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00EF0000[00013000] [ M] 294. c:\program files\rising\rav\monstate.dll Beijing Rising Information Technology Co., Ltd. MonState .text,.rdata,.data,.rsrc,.reloc, 00F20000[00016000] [ M] 295. c:\program files\rising\rav\scanevnt.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Event Handler .text,.rdata,.data,.rsrc,.reloc, 26600000[00078000] [ M] 296. c:\program files\rising\rav\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 00F60000[00017000] [ M] 297. c:\program files\rising\rav\rsconf.dll Beijing Rising Information Technology Co., Ltd. rsconf Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00F90000[00022000] [ M] 298. c:\program files\rising\rav\rspalvd.dll Beijing Rising Information Technology Co., Ltd. rspalvd .text,.rdata,.data,.rsrc,.reloc, 33000000[00026000] [ M] 299. c:\program files\rising\rav\ravbintl.dll Beijing Rising Information Technology Co., Ltd. ravbintl Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00FD0000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01260000[0007D000] [ M] 300. c:\program files\rising\rav\mruleui.dll Beijing Rising Information Technology Co., Ltd. mruleui .text,.rdata,.data,.rsrc,.reloc, 012E0000[0007D000] [ M] 301. c:\program files\rising\rav\montray.dll Beijing Rising Information Technology Co., Ltd. Rising AntiVirus 2010 .text,.rdata,.data,.rsrc,.reloc, 34500000[00020000] [ M] 302. c:\program files\rising\rav\ravitray.dll Beijing Rising Information Technology Co., Ltd. ravitray Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01360000[0004C000] [ M] 303. c:\program files\rising\rav\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 013B0000[00013000] [ M] 304. c:\program files\rising\rav\scanleak.dll Beijing Rising Information Technology Co., Ltd. scanleak .text,.rdata,.data,.rsrc,.reloc, 32000000[00088000] [ M] 305. c:\program files\rising\rav\ravppops.dll Beijing Rising Information Technology Co., Ltd. ravppops Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 016E0000[0000E000] [ M] 181. c:\program files\rising\rav\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 01700000[00044000] [ M] 182. c:\program files\rising\rav\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 306. c:\program files\rising\rav\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02030000[00080000] [ M] 307. c:\program files\rising\rav\scanprxy.dll Beijing Rising Information Technology Co., Ltd. ScanPrxy Module .text,.rdata,.data,.rsrc,.reloc, 03170000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc, + 00000f84(3972) TXPlatform.exe 00400000[00025000] [ M] 308. d:\program files\tencent\qq\bin\txplatform.exe Tencent QQ2009 .text,.rdata,.data,.rsrc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 32000000[0000A000] [ M] 237. d:\program files\tencent\qq\bin\txpfproxy.dll Tencent QQ2009 .text,.orpc,.rdata,.data,.rsrc,.reloc, + 00000fa4(4004) knownsvr.exe 00400000[00072000] [ M] 309. c:\program files\rising\antispyware\knownsvr.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[00034000] [ M] 133. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00390000[00009000] [ M] 121. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[00045000] [ M] 122. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00C80000[0002D000] [ M] 130. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00CB0000[00019000] [ M] 128. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 66000000[00090000] [ M] 117. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 118. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 026D0000[00021000] [ M] 116. c:\windows\system32\espi11.dll DYWT ESPI .text,.rdata,.data,.inidata,.rsrc,.reloc,