瑞星卡卡电脑诊断日志 v1.30 (2010-2-9 16:26:13) 北京瑞星信息技术有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services ias [AM] 1. c:\documents and settings\all users\application data\storm\update\aeruj.hiv Microsoft Corporation Microsoft Sdpblb .text,.rdata,.data,.rsrc,.reloc, ose [A ] 2. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, RsRisMon [AM] 3. c:\rising\ris\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, + 内核驱动 + HKLM\System\CurrentControlSet\Services 1394hub [A ] 4. c:\windows\system32\svchost.exe -k netsvcs Alidevice [A ] 5. c:\windows\system32\drivers\alidevice.sys alipay.com Windows NT alipay kernel module .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, EagleNT [A ] 6. c:\windows\system32\drivers\eaglent.sys HDAudBus [A ] 7. c:\windows\system32\drivers\hdaudbus.sys Windows (R) Server 2003 DDK provider High Definition Audio Bus Driver v1.0a .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, hookcont [A ] 8. c:\windows\system32\drivers\hookcont.sys Beijing Rising Information Technology Co., Ltd. HookCont Driver for x86 .text,.rdata,.data,INIT,.rsrc,.reloc, hooksys [A ] 9. c:\windows\system32\drivers\hooksys.sys Beijing Rising Information Technology Co., Ltd. Hooksys.sys .text,.rdata,.data,INIT,.rsrc,.reloc, hptpro [A ] 10. c:\windows\system32\drivers\hptpro.sys HighPoint Technologies, Inc. Hptpro .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, IntcAzAudAddService [A ] 11. c:\windows\system32\drivers\rtkhdaud.sys Realtek Semiconductor Corp. Realtek(r) High Definition Audio Function Driver .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, RFWARP [A ] 12. c:\windows\system32\drivers\rfwarp.sys Beijing Rising Information Technology Co., Ltd. rfwarp.sys .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, RfwBase9 [A ] 13. c:\windows\system32\drivers\rfwbase.sys Beijing Rising Information Technology Co., Ltd. rfwbase5.sys .text,.rdata,.data,INIT,.rsrc,.reloc, rfwtdi [A ] 14. c:\rising\ris\rfwtdi.sys Beijing Rising Information Technology Co., Ltd. rfwtdi.sys .text,.rdata,.data,INIT,.rsrc,.reloc, RRamdisk [A ] 15. c:\windows\system32\drivers\rramdisk.sys gavotte Ramdisk Driver for win2k & above .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, rsassist [A ] 16. c:\windows\system32\drivers\rsassist.sys Beijing Rising Information Technology Co., Ltd. RsAssist.sys .text,.rdata,.data,INIT,.rsrc,.reloc, rsfwdrv [A ] 17. c:\rising\ris\rsfwdrv.sys Beijing Rising Information Technology Co., Ltd. rsfwdrv.sys .text,.rdata,.data,INIT,.rsrc,.reloc, RsNTGDI [A ] 18. c:\windows\system32\drivers\rsntgdi.sys Beijing Rising Information Technology Co., Ltd. RsNTGDI .text,.rdata,INIT,.rsrc,.reloc, RsProtect [A ] 19. c:\windows\system32\drivers\rsptect.sys Beijing Rising Information Technology Co., Ltd. RsProtect .text,.rdata,.data,INIT,.rsrc,.reloc, Secdrv [A ] 20. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SiFilter [A ] 21. c:\windows\system32\drivers\siwinacc.sys Silicon Image, Inc. Windows Accelerator Driver .text,.rdata,.data,INIT,.rsrc,.reloc, SiRemFil [A ] 22. c:\windows\system32\drivers\siremfil.sys Silicon Image, Inc. Filter driver for Silicon Image SATALink controllers. .text,.rdata,PAGE,INIT,.rsrc,.reloc, TesDrvPt [A ] 23. c:\windows\system32\tesdrvpt.sys TENCENT Kernel helper of the Tencent's game trojan killer .text,.rdata,.data,INIT,.rsrc,.reloc, TesSafe [A ] 24. c:\windows\system32\tessafe.sys TENCENT TesSafe NT Driver .text,.rdata,.data,INIT,.rsrc,.tvm, + 文件系统驱动 + HKLM\System\CurrentControlSet\Services exFat [A ] 25. c:\windows\system32\drivers\exfat.sys Microsoft Corporation Microsoft Extended FAT File System .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} [A ] 26. c:\windows\system32\kakatool.dll Beijing Rising Information Technology Co., Ltd. ToolBar .text,.rdata,.data,.rsrc,.reloc, + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {00000000-0593-4356-9CF7-1D8C2B3343C0} [A ] 28. c:\program files\baidu\addressbar\addressbar.dll AddressSearch Module .text,.rdata,.data,.rsrc,.reloc, {1A3440C6-F123-4CAB-84EE-C814E1AE0D8F} [A ] 29. c:\program files\pipi\jfcheck.dll PIPI Tech. PIPI Helper For Internet Explorer .text,.rdata,.data,.rsrc,.reloc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [A ] 30. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} [A ] 31. c:\windows\system32\ieudinit.exe Microsoft Corporation IE Per User Active Setup Uninstall Utility .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved IE Search Band [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE AutoComplete [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Shell DocObject Viewer [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, InternetShortcut [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url History Service [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, History [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url Search Hook [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, The Internet [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Internet Name Space [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, WinRAR shell extension [A ] 32. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, Microsoft Office HTML Icon Handler [A ] 33. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 34. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, Microsoft.XPS.Shell.Metadata.1 [A ] 35. c:\windows\system32\xpsshhdr.dll Microsoft Corporation Package Document Shell Extension Handler .text,.data,.rsrc,.reloc, Microsoft.XPS.Shell.Thumbnail.1 [A ] 35. c:\windows\system32\xpsshhdr.dll Microsoft Corporation Package Document Shell Extension Handler .text,.data,.rsrc,.reloc, NvCpl DesktopContext Class [A ] 36. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.rdata,.data,.rsrc,.reloc, Desktop Explorer [A ] 37. c:\windows\system32\nvshell.dll NVIDIA Corporation NVIDIA Desktop Explorer, Version 66.93 .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, Desktop Explorer Menu [A ] 37. c:\windows\system32\nvshell.dll NVIDIA Corporation NVIDIA Desktop Explorer, Version 66.93 .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, nView Desktop Context Menu [A ] 37. c:\windows\system32\nvshell.dll NVIDIA Corporation NVIDIA Desktop Explorer, Version 66.93 .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, RISING [A ] 38. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, IE Microsoft BrowserBand [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE History and Feeds Shell Data Source for Windows Search [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Fade Task [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Desk Bar [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Navigation Bar [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Site [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Band [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft History AutoComplete List [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Tracking Shell Menu [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE IShellFolderBand [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE BandProxy [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Web Browser [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE MRU AutoComplete List [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE RSS Feeder Folder [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Shell Folder AutoComplete List [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Multiple AutoComplete List Container [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Rebar BandSite [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Band Site Menu [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, &Links [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Registry Tree Options Utility [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Custom MRU AutoCompleted List [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKCU\Software\Microsoft\Windows\CurrentVersion\Run PPS Accelerator [AM] 39. d:\ppstream\ppsap.exe PPStream Inc PPS 网络加速器 .text,.rdata,.data,.rsrc, + HKLM\Software\Microsoft\Windows\CurrentVersion\Run RTHDCPL [A ] 40. c:\windows\rthdcpl.exe Realtek Semiconductor Corp. Realtek HD Audio Control Panel .text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc, runeip [AM] 41. d:\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, RisTray [AM] 42. c:\rising\ris\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 43. c:\windows\system32\bsmain.exe Beijing Rising Information Technology Co., Ltd. Rising Antivirus 2010 .text,.rdata,.data,.rsrc,.reloc, + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 44. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\Print\Command [A ] 44. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 44. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\Print\Command [A ] 44. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + HKCR\.mp3 kwfile_mp3\open\Command [A ] 45. c:\program files\kwmusic\kwmusic.exe 酷我科技 酷我音乐盒 .text,.rdata,.data,SHARED,.rsrc, kwfile_mp3\openkw\Command [A ] 45. c:\program files\kwmusic\kwmusic.exe 酷我科技 酷我音乐盒 .text,.rdata,.data,SHARED,.rsrc, kwfile_mp3\pipiopen\Command [A ] 46. c:\program files\pipi\pipiplayer.exe 皮皮科技 PIPIPlayer .text,.rdata,.data,.rsrc, kwfile_mp3\playlist\Command [A ] 45. c:\program files\kwmusic\kwmusic.exe 酷我科技 酷我音乐盒 .text,.rdata,.data,SHARED,.rsrc, + 打印机监控 + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors Microsoft Document Imaging Writer Monitor [AM] 47. c:\windows\system32\mdimon.dll Microsoft Corporation Microsoft? Document Imaging .text,.data,.rsrc,.reloc, + 正在运行的进程 + 000000c4(196) Explorer.EXE 00400000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 3E1C0000[00A93000] [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 50. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 000000e0(224) spoolsv.exe 00A00000[00008000] [AM] 47. c:\windows\system32\mdimon.dll Microsoft Corporation Microsoft? Document Imaging .text,.data,.rsrc,.reloc, 00A10000[00008000] [ M] 51. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll Microsoft Corporation Microsoft? Document Imaging .text,.data,.rsrc,.reloc, 3F420000[0001B000] [ M] 52. c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll Microsoft Corporation Print Filter Pipeline Proxy .text,.orpc,.data,.rsrc,.reloc, + 00000158(344) rstray.exe 00400000[00034000] [AM] 41. d:\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, 00390000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[0004C000] [ M] 53. d:\antispyware\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 54. d:\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 55. d:\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 56. d:\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00E00000[00024000] [ M] 57. d:\antispyware\comserv.dll Beijing Rising Information Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 00E30000[00019000] [ M] 58. d:\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 23700000[00026000] [ M] 59. d:\antispyware\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00E70000[0002D000] [ M] 60. d:\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 61. d:\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01080000[00067000] [ M] 62. d:\antispyware\runiep.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware tray .text,.rdata,.data,.rsrc,.reloc, 010F0000[00034000] [ M] 63. d:\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01150000[0001F000] [ M] 64. d:\antispyware\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01170000[00024000] [ M] 65. d:\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, + 0000017c(380) RsTray.exe 00400000[0002C000] [AM] 42. c:\rising\ris\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, 10000000[00031000] [ M] 66. c:\rising\ris\comserv.dll Beijing Rising Information Technology Co., Ltd. Rising tray common service .text,.rdata,.data,.rsrc,.reloc, 23700000[00023000] [ M] 67. c:\rising\ris\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00940000[0002D000] [ M] 68. c:\rising\ris\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00970000[00019000] [ M] 69. c:\rising\ris\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00BC0000[00019000] [ M] 70. c:\rising\ris\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23800000[00039000] [ M] 71. c:\rising\ris\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00F00000[00013000] [ M] 72. c:\rising\ris\monstate.dll Beijing Rising Information Technology Co., Ltd. MonState .text,.rdata,.data,.rsrc,.reloc, 00F30000[00016000] [ M] 73. c:\rising\ris\scanevnt.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Event Handler .text,.rdata,.data,.rsrc,.reloc, 26600000[00078000] [ M] 74. c:\rising\ris\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 00F70000[00017000] [ M] 75. c:\rising\ris\rsconf.dll Beijing Rising Information Technology Co., Ltd. rsconf Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00FA0000[0000C000] [ M] 76. c:\rising\ris\rfwrule.dll Beijing Rising Information Technology Co., Ltd. TODO: .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 77. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 78. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00FC0000[00022000] [ M] 79. c:\rising\ris\rspalvd.dll Beijing Rising Information Technology Co., Ltd. rspalvd .text,.rdata,.data,.rsrc,.reloc, 01000000[0007E000] [ M] 80. c:\rising\ris\rsnetsvr.dll Beijing Rising Information Technology Co., Ltd. rsnetsvr .text,.rdata,.data,.rsrc,.reloc, 33000000[00026000] [ M] 81. c:\rising\ris\ravbintl.dll Beijing Rising Information Technology Co., Ltd. ravbintl Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01090000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01320000[0007D000] [ M] 82. c:\rising\ris\mruleui.dll Beijing Rising Information Technology Co., Ltd. mruleui .text,.rdata,.data,.rsrc,.reloc, 013A0000[0007D000] [ M] 83. c:\rising\ris\montray.dll Beijing Rising Information Technology Co., Ltd. Rising AntiVirus 2010 .text,.rdata,.data,.rsrc,.reloc, 34500000[00020000] [ M] 84. c:\rising\ris\ravitray.dll Beijing Rising Information Technology Co., Ltd. ravitray Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01430000[00052000] [ M] 85. c:\rising\ris\rfwtray.dll Beijing Rising Information Technology Co., Ltd. rfwtray Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 014B0000[0004C000] [ M] 86. c:\rising\ris\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 01510000[00013000] [ M] 87. c:\rising\ris\scanleak.dll Beijing Rising Information Technology Co., Ltd. scanleak .text,.rdata,.data,.rsrc,.reloc, 32000000[00088000] [ M] 88. c:\rising\ris\ravppops.dll Beijing Rising Information Technology Co., Ltd. ravppops Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01850000[0000E000] [ M] 89. c:\rising\ris\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 01870000[00044000] [ M] 90. c:\rising\ris\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 91. c:\rising\ris\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 020C0000[00080000] [ M] 92. c:\rising\ris\scanprxy.dll Beijing Rising Information Technology Co., Ltd. ScanPrxy Module .text,.rdata,.data,.rsrc,.reloc, 02270000[00082000] [ M] 93. c:\rising\ris\rfwlog.dll Beijing Rising Information Technology Co., Ltd. rfwlog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000184(388) ctfmon.exe + 00000198(408) ppsap.exe 00400000[00036000] [AM] 39. d:\ppstream\ppsap.exe PPStream Inc PPS 网络加速器 .text,.rdata,.data,.rsrc, 00380000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[00133000] [ M] 94. d:\ppstream\vodnet.dll PPStream Inc. PPS 动态链接库 .text,.rdata,.data,.rsrc,.reloc, 010F0000[00062000] [ M] 95. d:\ppstream\vodres.dll PPStream Inc. PPS 动态链接库 .text,.rdata,.data,.rsrc,.reloc, 017E0000[0004A000] [ M] 96. d:\ppstream\fds.dll PPStream Inc. PPS 动态链接库 .text,.rdata,.data,.rsrc,.reloc, + 0000033c(828) smss.exe + 000003b0(944) csrss.exe + 000003c8(968) winlogon.exe 72C80000[00008000] [ M] 50. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 000003f4(1012) services.exe 46040000[0000F000] [ M] 97. c:\windows\apppatch\acadproc.dll Microsoft Corporation Windows Compatibility DLL .text,.data,.rsrc,.reloc, + 00000400(1024) lsass.exe + 000004a4(1188) svchost.exe + 000004e4(1252) svchost.exe + 00000580(1408) RavMonD.exe 00400000[0002F000] [AM] 3. c:\rising\ris\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, 10000000[00032000] [ M] 98. c:\rising\ris\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 018E0000[00086000] [ M] 99. c:\rising\ris\cnt09.dll Beijing Rising Information Technology Co., Ltd. cnt09 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01040000[00019000] [ M] 100. c:\rising\ris\moncomm.dll Beijing Rising Information Technology Co., Ltd. MonComm .text,.rdata,.data,.rsrc,.reloc, 01970000[0001D000] [ M] 101. c:\rising\ris\monbase.dll Beijing Rising Information Technology Co., Ltd. MonBase .text,.rdata,.data,.rsrc,.reloc, 01990000[00084000] [ M] 102. c:\rising\ris\rslog.dll Beijing Rising Information Technology Co., Ltd. rslog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01A40000[00018000] [ M] 103. c:\rising\ris\mondrv.dll Beijing Rising Information Technology Co., Ltd. mondrv .text,.rdata,.data,.rsrc,.reloc, 01A70000[0002E000] [ M] 104. c:\rising\ris\defmon.dll Beijing Rising Information Technology Co., Ltd. DefMon .text,.rdata,.data,.rsrc,.reloc, 01AB0000[00010000] [ M] 105. c:\rising\ris\moncom08.dll Beijing Rising Information Technology Co., Ltd. MonCom08 .text,.rdata,.data,.rsrc,.reloc, 01AD0000[0007E000] [ M] 106. c:\rising\ris\monrule.dll Beijing Rising Information Technology Co., Ltd. MonRule .text,.rdata,.data,.rsrc,.reloc, 01B80000[00027000] [ M] 107. c:\rising\ris\filemon.dll Beijing Rising Information Technology Co., Ltd. Filemon .text,.rdata,.data,.rsrc,.reloc, 01BC0000[0002F000] [ M] 108. c:\rising\ris\mailmon.dll Beijing Rising Information Technology Co., Ltd. MailMon .text,.rdata,.data,.rsrc,.reloc, 01C00000[00015000] [ M] 109. c:\rising\ris\hookweb.dll Beijing Rising Information Technology Co., Ltd. hookweb .text,.rdata,.data,.rsrc,.reloc, 01C40000[00082000] [ M] 93. c:\rising\ris\rfwlog.dll Beijing Rising Information Technology Co., Ltd. rfwlog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01CF0000[0000C000] [ M] 76. c:\rising\ris\rfwrule.dll Beijing Rising Information Technology Co., Ltd. TODO: .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 77. c:\windows\system32\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 78. c:\windows\system32\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 01D10000[0004A000] [ M] 110. c:\rising\ris\rfwsrv.dll Beijing Rising Information Technology Co., Ltd. Rising Personal FireWall Service .text,.rdata,.data,.rsrc,.reloc, 01D60000[00019000] [ M] 69. c:\rising\ris\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 01DA0000[0001B000] [ M] 111. c:\rising\ris\mports.dll Beijing Rising Information Technology Co., Ltd. get ports list .text,.rdata,.data,.rsrc,.reloc, 01DD0000[00011000] [ M] 112. c:\rising\ris\rfwdrvc.dll Beijing Rising Information Technology Co., Ltd. rfwdrvc Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01E00000[00011000] [ M] 113. c:\rising\ris\rfwdrv.dll Beijing Rising Information Technology Co., Ltd. rfwdrv.dll .text,.rdata,.data,.rsrc,.reloc, 02130000[0007E000] [ M] 80. c:\rising\ris\rsnetsvr.dll Beijing Rising Information Technology Co., Ltd. rsnetsvr .text,.rdata,.data,.rsrc,.reloc, 021C0000[0002D000] [ M] 68. c:\rising\ris\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02330000[00011000] [ M] 114. c:\rising\ris\rfwarp.dll Beijing Rising Information Technology Co., Ltd. rfwarp.dll .text,.rdata,.data,.rsrc,.reloc, 02890000[00014000] [ M] 115. c:\rising\ris\urlrule.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlRule Library .text,.rdata,.data,.rsrc,.reloc, 028B0000[0003B000] [ M] 116. c:\rising\ris\recomp.dll Beijing Rising Information Technology Co., Ltd. component manager Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02900000[00038000] [ M] 117. c:\rising\ris\refs.dll Beijing Rising Information Technology Co., Ltd. filesystem Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02B60000[00030000] [ M] 118. c:\rising\ris\viruslib.dll Beijing Rising Information Technology Co., Ltd. VirusLib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02BA0000[00029000] [ M] 119. c:\rising\ris\relibldr.dll Beijing Rising Information Technology Co., Ltd. libloader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02C20000[0003F000] [ M] 120. c:\rising\ris\rfwproxy.dll Beijing Rising Information Technology Co., Ltd. tcpproxy Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02C60000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 23700000[00023000] [ M] 67. c:\rising\ris\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03450000[0008C000] [ M] 121. c:\rising\ris\rsindent.dll Beijing Rising Information Technology Co., Ltd. rsindent .text,.rdata,.data,.rsrc,.reloc, 034F0000[00018000] [ M] 122. c:\rising\ris\taskplug.dll Beijing Rising Information Technology Co., Ltd. TaskPlug .text,.rdata,.data,.rsrc,.reloc, 03520000[00012000] [ M] 123. c:\rising\ris\scansrvp.dll Beijing Rising Information Technology Co., Ltd. ScanSrvP Module .text,.rdata,.data,.rsrc,.reloc, 03A50000[0001D000] [ M] 124. c:\rising\ris\cnt08.dll Beijing Rising Information Technology Co., Ltd. cnt08 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03C80000[00019000] [ M] 70. c:\rising\ris\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 040B0000[0000E000] [ M] 89. c:\rising\ris\rsappmgr.dll Beijing Rising Information Technology Co., Ltd. Rising Application Manager .text,.rdata,.data,.rsrc,.reloc, 040D0000[00044000] [ M] 90. c:\rising\ris\cfgdll.dll Beijing Rising Information Technology Co., Ltd. CfgDll .text,.rdata,.data,.rsrc,.reloc, 04350000[00020000] [ M] 125. c:\rising\ris\hooksys.dll Beijing Rising Information Technology Co., Ltd. Hooksys.dll .text,.rdata,.data,.idata,.rsrc,.reloc, 04400000[0001F000] [ M] 126. c:\rising\ris\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04420000[00024000] [ M] 127. c:\rising\ris\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 04670000[00013000] [ M] 128. c:\rising\ris\hookcont.dll Beijing Rising Information Technology Co., Ltd. HookCont Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 047B0000[00077000] [ M] 129. c:\rising\ris\bacore.dll Beijing Rising Information Technology Co., Ltd. Rising MBA DLL .text,.rdata,.data,.rsrc,.reloc, 04DA0000[00016000] [ M] 130. c:\rising\ris\bawhite.dll Beijing Rising Information Technology Co., Ltd. bawhite Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04FD0000[0002B000] [ M] 131. c:\rising\ris\rsstore.dll Beijing Rising Information Technology Co., Ltd. RSStore .text,.rdata,.data,.rsrc,.reloc, 05050000[00043000] [ M] 132. c:\rising\ris\scanner.dll Beijing Rising Information Technology Co., Ltd. RsScanner Module .text,.rdata,.data,.rsrc,.reloc, 05210000[0001B000] [ M] 133. c:\rising\ris\scanadd.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Addon .text,.rdata,.data,.rsrc,.reloc, 05010000[0001C000] [ M] 134. c:\rising\ris\ncomm2.dll Beijing Rising Information Technology Co., Ltd. NComm2 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 05DC0000[00028000] [ M] 135. c:\rising\ris\rstask.dll Beijing Rising Information Technology Co., Ltd. RsTask Control .text,.rdata,.data,.rsrc,.reloc, 05E20000[00018000] [ M] 136. c:\rising\ris\rsstub.dll Beijing Rising Information Technology Co., Ltd. rsstub Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 05DF0000[0001A000] [ M] 137. c:\rising\ris\scansrv.dll Beijing Rising Information Technology Co., Ltd. ScanSrv Module .text,.rdata,.data,.rsrc,.reloc, 063D0000[0002B000] [ M] 138. c:\rising\ris\scanpe.dll Beijing Rising Information Technology Co., Ltd. scanpe Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 06410000[00029000] [ M] 139. c:\rising\ris\pearc.dll Beijing Rising Information Technology Co., Ltd. pearchive Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 08500000[0001B000] [ M] 140. c:\rising\ris\ur000.dat Beijing Rising Information Technology Co., Ltd. Unpack Routine .text,.rdata,.data,.rsrc,.reloc, 08530000[00035000] [ M] 141. c:\rising\ris\urutils.dll Beijing Rising Information Technology Co., Ltd. urutils Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 088A0000[00032000] [ M] 142. c:\rising\ris\ffr.dll Beijing Rising Information Technology Co., Ltd. ffr Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 088F0000[00022000] [ M] 143. c:\rising\ris\nvfile.dll Beijing Rising Information Technology Co., Ltd. NVFile .text,.rdata,.data,.rsrc,.reloc, 13AB0000[00045000] [ M] 144. c:\rising\ris\scanexec.dll Beijing Rising Information Technology Co., Ltd. ScanExec .text,.rdata,.data,.rsrc,.reloc, 096F0000[002DD000] [ M] 145. c:\rising\ris\unexe.dll Beijing Rising Information Technology Co., Ltd. UnExe .text,.rdata,.data,.rsrc,.reloc, 099D0000[000E0000] [ M] 146. c:\rising\ris\scanex.dll Beijing Rising Information Technology Co., Ltd. ScanEx .text,.rdata,.data,.rsrc,.reloc, 08960000[00011000] [ M] 147. c:\rising\ris\scantj.dll Beijing Rising Information Technology Co., Ltd. scantj Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 0EBF0000[00085000] [ M] 148. c:\rising\ris\methodex.dll Beijing Rising Information Technology Co., Ltd. MethodEx .text,.rdata,.data,.rsrc,.reloc, 0F760000[000B9000] [ M] 149. c:\rising\ris\revm.dll Beijing Rising Information Technology Co., Ltd. REVM Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 0F180000[0003E000] [ M] 150. c:\rising\ris\heurex.dll Beijing Rising Information Technology Co., Ltd. HeurEx .text,.rdata,.data,.rsrc,.reloc, 0F1D0000[00022000] [ M] 151. c:\rising\ris\pecompd.dll Beijing Rising Information Technology Co., Ltd. PeCompdEx .text,.rdata,.data,.rsrc,.reloc, 01090000[0000E000] [ M] 152. c:\rising\ris\urllib.dll Beijing Rising Information Technology Co., Ltd. Urllib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 010E0000[00023000] [ M] 153. c:\rising\ris\scansct.dll Beijing Rising Information Technology Co., Ltd. ScanSct Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 018B0000[0001D000] [ M] 154. c:\rising\ris\extsfx.dll Beijing Rising Information Technology Co., Ltd. scansfx Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 14210000[0003A000] [ M] 155. c:\rising\ris\extmail.dll Beijing Rising Information Technology Co., Ltd. ExtMail .text,.rdata,.data,.rsrc,.reloc, + 000005a0(1440) svchost.exe 00FE0000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[00027000] [AM] 1. c:\documents and settings\all users\application data\storm\update\aeruj.hiv Microsoft Corporation Microsoft Sdpblb .text,.rdata,.data,.rsrc,.reloc, + 000005c4(1476) svchost.exe 006C0000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, + 000005dc(1500) svchost.exe + 0000060c(1548) svchost.exe + 000008e0(2272) alg.exe + 00000bf4(3060) knownsvr.exe 00400000[00072000] [ M] 156. d:\antispyware\knownsvr.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[00034000] [ M] 63. d:\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00390000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00BC0000[0002D000] [ M] 60. d:\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00BF0000[00019000] [ M] 58. d:\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, + 00000c5c(3164) ras.exe 00400000[0000B000] [ M] 157. d:\antispyware\ras.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 7C140000[00103000] [ M] 158. d:\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 56. d:\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00047000] [ M] 159. d:\antispyware\kakamgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 55. d:\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00A00000[00019000] [ M] 58. d:\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00A30000[0001F000] [ M] 64. d:\antispyware\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00A50000[00024000] [ M] 65. d:\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 00BA0000[0002D000] [ M] 60. d:\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00D10000[00058000] [ M] 160. d:\antispyware\dbmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 54. d:\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00E70000[0002E000] [ M] 161. d:\antispyware\pweb.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00EA0000[0010D000] [ M] 162. d:\antispyware\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00FB0000[00009000] [ M] 48. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3DFD0000[001E8000] [ M] 49. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00FC0000[00034000] [ M] 63. d:\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01160000[00070000] [ M] 163. d:\antispyware\pset.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 011D0000[00027000] [ M] 164. d:\antispyware\pdefend.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01320000[000B7000] [ M] 165. d:\antispyware\ptools.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 014E0000[00075000] [ M] 166. d:\antispyware\psysinfo.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 3E1C0000[00A93000] [AM] 27. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 23900000[00040000] [ M] 61. d:\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02E90000[00018000] [ M] 167. c:\rising\ris\ravscrch.dll Beijing Rising Information Technology Co., Ltd. webmon module .text,.rdata,.data,.rsrc,.reloc, 03770000[00488000] [ M] 168. c:\windows\system32\macromed\flash\flash10b.ocx Adobe Systems, Inc. Adobe Flash Player 10.0 r22 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 50. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc,