ǿ־ v1.30 (2010-9-3 11:8:56)  Ϣ޹˾

ע:	[A]ʾļ;
	[M]ʾļڴ;

+ עĿ 
  + ϵͳ
    + HKLM\System\CurrentControlSet\Services
      ALG
        [AM] 1. c:\windows\system32\alg.exe
          Microsoft Corporation
          Application Layer Gateway Service
          .text,.data,.rsrc,


      AppMgmt
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 3. c:\windows\system32\appmgmts.dll
          Microsoft Corporation
          Software installation Service
          .text,.data,.rsrc,.reloc,


      AudioSrv
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 4. c:\windows\system32\audiosrv.dll
          Microsoft Corporation
          Windows Audio Service
          .text,.data,.rsrc,.reloc,


      BITS
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 5. c:\windows\system32\qmgr.dll
          Microsoft Corporation
          ̨ܴͷ
          .text,.data,.rsrc,.reloc,


      Browser
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 6. c:\windows\system32\browser.dll
          Microsoft Corporation
          Computer Browser Service DLL
          .text,.data,.rsrc,.reloc,


      ClipSrv
        [A ] 7. c:\windows\system32\clipsrv.exe
          Microsoft Corporation
          Windows NT DDE Server
          .text,.data,.rsrc,


      COMSysApp
        [A ] 8. c:\windows\system32\dllhost.exe
          Microsoft Corporation
          COM Surrogate
          .text,.data,.rsrc,


      CryptSvc
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 9. c:\windows\system32\cryptsvc.dll
          Microsoft Corporation
          Cryptographic Services
          .text,.data,.rsrc,.reloc,


      DcomLaunch
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 10. c:\windows\system32\rpcss.dll
          Microsoft Corporation
          Distributed COM Services
          .text,.data,.rsrc,.reloc,


      Dhcp
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 11. c:\windows\system32\dhcpcsvc.dll
          Microsoft Corporation
          DHCP Client Service
          .text,.data,.rsrc,.reloc,


      dmadmin
        [A ] 12. c:\windows\system32\dmadmin.exe
          Microsoft Corp., Veritas Software
          Logical Disk Manager service process
          .text,.data,.rsrc,


      dmserver
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 13. c:\windows\system32\dmserver.dll
          Microsoft Corp.
          Logical Disk Manager service dll
          .text,.data,.rsrc,.reloc,


      Dnscache
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 14. c:\windows\system32\dnsrslvr.dll
          Microsoft Corporation
          DNS Caching Resolver Service
          .text,.data,.rsrc,.reloc,


      Dot3svc
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 15. c:\windows\system32\dot3svc.dll
          Microsoft Corporation
          Զ÷
          .text,.data,.rsrc,.reloc,

        [A ] 15. c:\windows\system32\dot3svc.dll
          Microsoft Corporation
          Զ÷
          .text,.data,.rsrc,.reloc,


      EapHost
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 16. c:\windows\system32\eapsvc.dll
          Microsoft Corporation
          Microsoft EAPHost 
          .text,.data,.rsrc,.reloc,


      Eventlog
        [AM] 17. c:\windows\system32\services.exe
          Microsoft Corporation
          Services and Controller app
          .text,.data,.rsrc,


      EventSystem
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 18. c:\windows\system32\es.dll
          Microsoft Corporation
          .text,.orpc,.data,.rsrc,.reloc,


      FastUserSwitchingCompatibility
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 19. c:\windows\system32\shsvcs.dll
          Microsoft Corporation
          Windows Shell Services Dll
          .text,.data,.rsrc,.reloc,


      HidServ
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,


      hkmsvc
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 20. c:\windows\system32\kmsvc.dll
          Microsoft Corporation
          Կ
          .text,.orpc,.data,.rsrc,.reloc,


      HTTPFilter
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 21. c:\windows\system32\w3ssl.dll
          Microsoft Corporation
          SSL service for HTTP
          .text,.data,.rsrc,.reloc,


      ImapiService
        [A ] 22. c:\windows\system32\imapi.exe
          Microsoft Corporation
          Image Mastering API
          .text,.data,.rsrc,


      LanmanServer
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 23. c:\windows\system32\srvsvc.dll
          Microsoft Corporation
          Server Service DLL
          .text,.data,.rsrc,.reloc,


      lanmanworkstation
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 24. c:\windows\system32\wkssvc.dll
          Microsoft Corporation
          Workstation Service DLL
          .text,.data,.rsrc,.reloc,

        [AM] 25. c:\windows\system32\ntlanman.dll
          Microsoft Corporation
          Microsoft(R) Lan Manager
          .text,.data,.rsrc,.reloc,


      LmHosts
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 26. c:\windows\system32\lmhsvc.dll
          Microsoft Corporation
          TCPIP NetBios Transport Services DLL
          .text,.data,.rsrc,.reloc,


      Messenger
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 27. c:\windows\system32\msgsvc.dll
          Microsoft Corporation
          NT Messenger Service
          .text,.data,.rsrc,.reloc,


      mnmsrvc
        [A ] 28. c:\windows\system32\mnmsrvc.exe
          Microsoft Corporation
          NetMeeting Remote Desktop Sharing
          .text,.data,.rsrc,


      MSDTC
        [A ] 29. c:\windows\system32\msdtc.exe
          Microsoft Corporation
          MS DTC console program
          .text,.data,.rsrc,


      MSIServer
        [A ] 30. c:\windows\system32\msiexec.exe
          Microsoft Corporation
          Windows? installer
          .text,.data,.rsrc,


      napagent
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 31. c:\windows\system32\qagentrt.dll
          Microsoft Corporation
          ʱ
          .text,.data,.rsrc,.reloc,


      NetDDE
        [A ] 32. c:\windows\system32\netdde.exe
          Microsoft Corporation
          Network DDE - DDE Communication
          .text,.data,.rsrc,


      NetDDEdsdm
        [A ] 32. c:\windows\system32\netdde.exe
          Microsoft Corporation
          Network DDE - DDE Communication
          .text,.data,.rsrc,


      Netlogon
        [AM] 33. c:\windows\system32\lsass.exe
          Microsoft Corporation
          LSA Shell (Export Version)
          .text,.data,.rsrc,


      Netman
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 34. c:\windows\system32\netman.dll
          Microsoft Corporation
          Network Connections Manager
          .text,.data,.rsrc,.reloc,


      Nla
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 35. c:\windows\system32\mswsock.dll
          Microsoft Corporation
          Microsoft Windows Sockets 2.0 Service Provider
          .text,SANONTCP,.data,.rsrc,.reloc,


      NtLmSsp
        [AM] 33. c:\windows\system32\lsass.exe
          Microsoft Corporation
          LSA Shell (Export Version)
          .text,.data,.rsrc,


      PlugPlay
        [AM] 17. c:\windows\system32\services.exe
          Microsoft Corporation
          Services and Controller app
          .text,.data,.rsrc,


      PolicyAgent
        [AM] 33. c:\windows\system32\lsass.exe
          Microsoft Corporation
          LSA Shell (Export Version)
          .text,.data,.rsrc,


      ProtectedStorage
        [AM] 33. c:\windows\system32\lsass.exe
          Microsoft Corporation
          LSA Shell (Export Version)
          .text,.data,.rsrc,


      RasAuto
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 36. c:\windows\system32\rasauto.dll
          Microsoft Corporation
          Remote Access AutoDial Manager
          .text,.data,.rsrc,.reloc,


      RasMan
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 37. c:\windows\system32\rasmans.dll
          Microsoft Corporation
          Remote Access Connection Manager
          .text,.data,.rsrc,.reloc,


      RDSessMgr
        [A ] 38. c:\windows\system32\sessmgr.exe
          Microsoft Corporation
          Microsoft(R) Remote Desktop Help Session Manager
          .text,.data,.rsrc,


      RemoteAccess
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 39. c:\windows\system32\mprdim.dll
          Microsoft Corporation
          Dynamic Interface Manager
          .text,.data,.rsrc,.reloc,


      RemoteRegistry
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 40. c:\windows\system32\regsvc.dll
          Microsoft Corporation
          Remote Registry Service
          .text,.data,.rsrc,.reloc,


      RpcLocator
        [A ] 41. c:\windows\system32\locator.exe
          Microsoft Corporation
          Rpc Locator
          .text,.data,.rsrc,


      RpcSs
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 10. c:\windows\system32\rpcss.dll
          Microsoft Corporation
          Distributed COM Services
          .text,.data,.rsrc,.reloc,

        [AM] 10. c:\windows\system32\rpcss.dll
          Microsoft Corporation
          Distributed COM Services
          .text,.data,.rsrc,.reloc,


      RsMgrSvc
        [AM] 42. c:\program files\rising\rsd\rsmgrsvc.exe
          Beijing Rising Information Technology Co., Ltd.
          RsMgrSvc Application
          .text,.rdata,.data,.rsrc,


      RsRISMon
        [AM] 43. c:\program files\rising\ris\ravmond.exe
          Beijing Rising Information Technology Co., Ltd.
          ravmond
          .text,.rdata,.data,.rsrc,


      RSVP
        [A ] 44. c:\windows\system32\rsvp.exe
          Microsoft Corporation
          Microsoft RSVP
          .text,.data,.rsrc,


      SamSs
        [AM] 33. c:\windows\system32\lsass.exe
          Microsoft Corporation
          LSA Shell (Export Version)
          .text,.data,.rsrc,


      SCardSvr
        [A ] 45. c:\windows\system32\scardsvr.exe
          Microsoft Corporation
          Smart Card Resource Management Server
          .text,.data,.rsrc,


      Schedule
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 46. c:\windows\system32\schedsvc.dll
          Microsoft Corporation
          Task Scheduler Engine
          .text,.data,.rsrc,.reloc,


      seclogon
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 47. c:\windows\system32\seclogon.dll
          Microsoft Corporation
          Secondary Logon Service DLL
          .text,.data,.rsrc,.reloc,


      SENS
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 48. c:\windows\system32\sens.dll
          Microsoft Corporation
          System Event Notification Service (SENS)
          .text,.data,.rsrc,.reloc,


      SharedAccess
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 49. c:\windows\system32\ipnathlp.dll
          Microsoft Corporation
          Microsoft NAT Helper Components
          .text,.data,.rsrc,.reloc,


      ShellHWDetection
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 19. c:\windows\system32\shsvcs.dll
          Microsoft Corporation
          Windows Shell Services Dll
          .text,.data,.rsrc,.reloc,


      Spooler
        [AM] 50. c:\windows\system32\spoolsv.exe
          Microsoft Corporation
          Spooler SubSystem App
          .text,.data,.rsrc,


      srservice
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 51. c:\windows\system32\srsvc.dll
          Microsoft Corporation
          System Restore Service
          .text,.data,.rsrc,.reloc,


      SSDPSRV
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 52. c:\windows\system32\ssdpsrv.dll
          Microsoft Corporation
          SSDP Service DLL
          .text,.data,.rsrc,.reloc,


      stisvc
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 53. c:\windows\system32\wiaservc.dll
          Microsoft Corporation
          Still Image Devices Service
          .text,.data,.rsrc,.reloc,


      SwPrv
        [A ] 8. c:\windows\system32\dllhost.exe
          Microsoft Corporation
          COM Surrogate
          .text,.data,.rsrc,


      SysmonLog
        [A ] 54. c:\windows\system32\smlogsvc.exe
          Microsoft Corporation
          Performance Logs and Alerts Service
          .text,.data,.rsrc,


      TapiSrv
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 55. c:\windows\system32\tapisrv.dll
          Microsoft Corporation
          Microsoft(R) Windows(TM) Telephony Server
          .text,.data,.rsrc,.reloc,


      TermService
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 56. c:\windows\system32\termsrv.dll
          Microsoft Corporation
          Terminal Server Service
          .text,.data,.rsrc,.reloc,


      Themes
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 19. c:\windows\system32\shsvcs.dll
          Microsoft Corporation
          Windows Shell Services Dll
          .text,.data,.rsrc,.reloc,


      TlntSvr
        [A ] 57. c:\windows\system32\tlntsvr.exe
          Microsoft Corporation
          Telnet
          .text,.data,.rsrc,


      TrkWks
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 58. c:\windows\system32\trkwks.dll
          Microsoft Corporation
          Distributed Link Tracking Client
          .text,.data,.rsrc,.reloc,


      UMWdf
        [A ] 59. c:\windows\system32\wdfmgr.exe
          Microsoft Corporation
          Windows User Mode Driver Manager
          .text,.data,.rsrc,


      upnphost
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 60. c:\windows\system32\upnphost.dll
          Microsoft Corporation
          UPnP Device Host
          .text,.orpc,.data,.rsrc,.reloc,


      VBoxService
        [AM] 61. c:\windows\system32\vboxservice.exe
          Oracle Corporation
          VirtualBox Guest Additions Service
          .text,.rdata,.data,.rsrc,


      VSS
        [A ] 62. c:\windows\system32\vssvc.exe
          Microsoft Corporation
          Microsoft(R) Volume Shadow Copy Service
          .text,.data,.rsrc,


      W32Time
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 63. c:\windows\system32\w32time.dll
          Microsoft Corporation
          Windows Time Service
          .text,.data,.rsrc,.reloc,


      WebClient
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 64. c:\windows\system32\webclnt.dll
          Microsoft Corporation
          Web DAV Service DLL
          .text,.data,.rsrc,.reloc,

        [AM] 65. c:\windows\system32\davclnt.dll
          Microsoft Corporation
          Web DAV Client DLL
          .text,.data,.rsrc,.reloc,


      winmgmt
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 66. c:\windows\system32\wbem\wmisvc.dll
          Microsoft Corporation
          WMI
          .text,.data,.rsrc,.reloc,


      WmdmPmSN
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 67. c:\windows\system32\mspmsnsv.dll
          Microsoft Corporation
          Microsoft Media Device Service Provider
          .text,.data,.rsrc,.reloc,


      Wmi
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 68. c:\windows\system32\advapi32.dll
          Microsoft Corporation
          Advanced Windows 32 Base API
          .text,.data,.rsrc,.reloc,


      WmiApSrv
        [A ] 69. c:\windows\system32\wbem\wmiapsrv.exe
          Microsoft Corporation
          WMI Performance Adapter Service
          .text,.data,.rsrc,


      wscsvc
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 70. c:\windows\system32\wscsvc.dll
          Microsoft Corporation
          Windows Security Center Service
          .text,.data,.rsrc,.reloc,


      wuauserv
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 71. c:\windows\system32\wuauserv.dll
          Microsoft Corporation
          Windows Update AutoUpdate Service
          .text,.data,.rsrc,.reloc,


      WZCSVC
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [AM] 72. c:\windows\system32\wzcsvc.dll
          Microsoft Corporation
          Wireless Zero Configuration Service
          .text,.data,.rsrc,.reloc,


      xmlprov
        [AM] 2. c:\windows\system32\svchost.exe
          Microsoft Corporation
          Generic Host Process for Win32 Services
          .text,.data,.rsrc,

        [A ] 73. c:\windows\system32\xmlprov.dll
          Microsoft Corporation
          Network Provisioning Service
          .text,.data,.rsrc,.reloc,




  + ں
    + HKLM\System\CurrentControlSet\Services
      ac97intc
        [A ] 74. c:\windows\system32\drivers\ac97intc.sys
          Intel Corporation
          Intel(r) Integrated Controller Hub Audio Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      ACPI
        [A ] 75. c:\windows\system32\drivers\acpi.sys
          Microsoft Corporation
          ACPI Driver for NT
          .text,.rdata,.data,PAGE,PAGE,INIT,.rsrc,.reloc,


      ACPIEC
        [A ] 76. c:\windows\system32\drivers\acpiec.sys
          Microsoft Corporation
          ACPI Embedded Controller Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      aec
        [A ] 77. c:\windows\system32\drivers\aec.sys
          Microsoft Corporation
          Microsoft Acoustic Echo Canceller
          .text,.rdata,.data,PAGE,PAGEDATA,PAGECONS,INIT,.rsrc,.reloc,


      AFD
        [A ] 78. c:\windows\system32\drivers\afd.sys
          Microsoft Corporation
          Ancillary Function Driver for WinSock
          .text,.rdata,.data,PAGE,PAGEAFD,PAGESAN,INIT,.rsrc,.reloc,


      AsyncMac
        [A ] 79. c:\windows\system32\drivers\asyncmac.sys
          Microsoft Corporation
          MS Remote Access serial network driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      atapi
        [A ] 80. c:\windows\system32\drivers\atapi.sys
          Microsoft Corporation
          IDE/ATAPI Port Driver
          .text,NONPAGE,.rdata,.data,PAGESCAN,PAGE,INIT,.rsrc,.reloc,


      audstub
        [A ] 81. c:\windows\system32\drivers\audstub.sys
          Microsoft Corporation
          AudStub Driver
          .text,.rdata,PAGE,INIT,.rsrc,.reloc,


      Beep
        [A ] 82. c:\windows\system32\drivers\beep.sys
          Microsoft Corporation
          BEEP Driver
          .text,.rdata,INIT,.rsrc,.reloc,


      cbidf2k
        [A ] 83. c:\windows\system32\drivers\cbidf2k.sys
          Microsoft Corporation
          CardBus/PCMCIA IDE Miniport Driver
          .text,.rdata,INIT,.rsrc,.reloc,


      Cdaudio
        [A ] 84. c:\windows\system32\drivers\cdaudio.sys
          Microsoft Corporation
          CD-ROM Audio Filter Driver
          .text,.rdata,PAGECDNC,PAGECDOT,INIT,.rsrc,.reloc,


      Cdrom
        [A ] 85. c:\windows\system32\drivers\cdrom.sys
          Microsoft Corporation
          SCSI CD-ROM Driver
          .text,.rdata,.data,PAGE,PAGEHIT2,PAGEHITA,PAGETOSH,PAGE,INIT,.rsrc,.reloc,


      CmBatt
        [A ] 86. c:\windows\system32\drivers\cmbatt.sys
          Microsoft Corporation
          Control Method Battery Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Compbatt
        [A ] 87. c:\windows\system32\drivers\compbatt.sys
          Microsoft Corporation
          Composite Battery Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Disk
        [A ] 88. c:\windows\system32\drivers\disk.sys
          Microsoft Corporation
          PnP Disk Driver
          .text,.rdata,.data,PAGE,PAGE,INIT,.rsrc,.reloc,


      dmboot
        [A ] 89. c:\windows\system32\drivers\dmboot.sys
          Microsoft Corp., Veritas Software
          NT Disk Manager Startup Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      dmio
        [A ] 90. c:\windows\system32\drivers\dmio.sys
          Microsoft Corp., Veritas Software
          NT Disk Manager I/O Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      dmload
        [A ] 91. c:\windows\system32\drivers\dmload.sys
          Microsoft Corp., Veritas Software.
          NT Disk Manager Startup Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      DMusic
        [A ] 92. c:\windows\system32\drivers\dmusic.sys
          Microsoft Corporation
          Microsoft Kernel DLS Synthesizer
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      drmkaud
        [A ] 93. c:\windows\system32\drivers\drmkaud.sys
          Microsoft Corporation
          Microsoft Kernel DRM Audio Descrambler Filter
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Fdc
        [A ] 94. c:\windows\system32\drivers\fdc.sys
          Microsoft Corporation
          Floppy Disk Controller Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Fips
        [A ] 95. c:\windows\system32\drivers\fips.sys
          Microsoft Corporation
          FIPS Crypto Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Flpydisk
        [A ] 96. c:\windows\system32\drivers\flpydisk.sys
          Microsoft Corporation
          Floppy Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      FsVga
        [A ] 97. c:\windows\system32\drivers\fsvga.sys
          Microsoft Corporation
          Full Screen Video Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Ftdisk
        [A ] 98. c:\windows\system32\drivers\ftdisk.sys
          Microsoft Corporation
          FT Disk Driver
          .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc,


      Gpc
        [A ] 99. c:\windows\system32\drivers\msgpc.sys
          Microsoft Corporation
          MS General Packet Classifier
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      hooksys
        [A ] 100. c:\windows\system32\drivers\hooksys.sys
          Beijing Rising Information Technology Co., Ltd.
          Hooksys.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HookTdi
        [A ] 101. c:\windows\system32\drivers\hooktdi.sys
          Beijing Rising Information Technology Co., Ltd.
          hooktdi.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      HTTP
        [A ] 102. c:\windows\system32\drivers\http.sys
          Microsoft Corporation
          HTTP Protocol Stack
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      HyperVM
        [A ] 103. c:\windows\system32\drivers\hvm.sys
          Beijing Rising Information Technology Co., Ltd.
          VM Monitor
          .text,.bss,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      i8042prt
        [A ] 104. c:\windows\system32\drivers\i8042prt.sys
          Microsoft Corporation
          i8042 Port Driver
          .text,.rdata,.data,PAGE,PAGEMOUC,INIT,.rsrc,.reloc,


      Imapi
        [A ] 105. c:\windows\system32\drivers\imapi.sys
          Microsoft Corporation
          IMAPI Kernel Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      IntelIde
        [A ] 106. c:\windows\system32\drivers\intelide.sys
          Microsoft Corporation
          Intel PCI IDE Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      intelppm
        [A ] 107. c:\windows\system32\drivers\intelppm.sys
          Microsoft Corporation
          Processor Device Driver
          .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc,


      Ip6Fw
        [A ] 108. c:\windows\system32\drivers\ip6fw.sys
          Microsoft Corporation
          IPv6 Windows Firewall Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      IpFilterDriver
        [A ] 109. c:\windows\system32\drivers\ipfltdrv.sys
          Microsoft Corporation
          IP FILTER DRIVER
          .text,.rdata,.data,PAGED,PAGE,INIT,.rsrc,.reloc,


      IpInIp
        [A ] 110. c:\windows\system32\drivers\ipinip.sys
          Microsoft Corporation
          IP in IP Encapsulation Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      IpNat
        [A ] 111. c:\windows\system32\drivers\ipnat.sys
          Microsoft Corporation
          IP Network Address Translator
          .text,.rdata,.data,PAGE,PAGER32C,INIT,.rsrc,.reloc,


      IPSec
        [A ] 112. c:\windows\system32\drivers\ipsec.sys
          Microsoft Corporation
          IPSec Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      IRENUM
        [A ] 113. c:\windows\system32\drivers\irenum.sys
          Microsoft Corporation
          Infra-Red Bus Enumerator
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      isapnp
        [A ] 114. c:\windows\system32\drivers\isapnp.sys
          Microsoft Corporation
          PNP ISA Bus Driver
          .text,.rdata,.data,PAGE,PAGEDATA,INIT,.rsrc,.reloc,


      Kbdclass
        [A ] 115. c:\windows\system32\drivers\kbdclass.sys
          Microsoft Corporation
          Keyboard Class Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      kmixer
        [A ] 116. c:\windows\system32\drivers\kmixer.sys
          Microsoft Corporation
          Kernel Mode Audio Mixer
          .text,.rdata,.data,PAGE,PAGEDATA,PAGECONS,INIT,.rsrc,.reloc,


      KSecDD
        [A ] 117. c:\windows\system32\drivers\ksecdd.sys
          Microsoft Corporation
          Kernel Security Support Provider Interface
          .text,.rdata,.data,PAGE,PAGEMSG,.edata,INIT,.rsrc,.reloc,


      mnmdd
        [A ] 118. c:\windows\system32\drivers\mnmdd.sys
          Microsoft Corporation
          Frame buffer simulator
          .rdata,PAGE,PAGE,INIT,.rsrc,.reloc,


      Modem
        [A ] 119. c:\windows\system32\drivers\modem.sys
          Microsoft Corporation
          Modem Device Driver
          .text,.rdata,.data,PAGE,PAGEUMDM,INIT,.rsrc,.reloc,


      Mouclass
        [A ] 120. c:\windows\system32\drivers\mouclass.sys
          Microsoft Corporation
          Mouse Class Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      MountMgr
        [A ] 121. c:\windows\system32\drivers\mountmgr.sys
          Microsoft Corporation
          Mount Manager
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      MSKSSRV
        [A ] 122. c:\windows\system32\drivers\mskssrv.sys
          Microsoft Corporation
          MS KS Server
          .text,.data,PAGE,INIT,.rsrc,.reloc,


      MSPCLOCK
        [A ] 123. c:\windows\system32\drivers\mspclock.sys
          Microsoft Corporation
          MS Proxy Clock
          .text,.data,PAGE,INIT,.rsrc,.reloc,


      MSPQM
        [A ] 124. c:\windows\system32\drivers\mspqm.sys
          Microsoft Corporation
          MS Proxy Quality Manager
          .data,PAGE,INIT,.rsrc,.reloc,


      mssmbios
        [A ] 125. c:\windows\system32\drivers\mssmbios.sys
          Microsoft Corporation
          System Management BIOS Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      NDIS
        [A ] 126. c:\windows\system32\drivers\ndis.sys
          Microsoft Corporation
          NDIS 5.1 wrapper driver
          .text,.rdata,.data,PAGENPNP,PAGENDSP,PAGENDSM,PAGENDCO,PAGENDSF,PAGENDSE,PAGENDST,PAGENDSA,.edata,PAGE,INIT,.rsrc,.reloc,


      NdisTapi
        [A ] 127. c:\windows\system32\drivers\ndistapi.sys
          Microsoft Corporation
          NDIS 3.0 connection wrapper driver
          .text,.rdata,.data,.edata,INIT,.rsrc,.reloc,


      Ndisuio
        [A ] 128. c:\windows\system32\drivers\ndisuio.sys
          Microsoft Corporation
          NDIS User mode I/O Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      NdisWan
        [A ] 129. c:\windows\system32\drivers\ndiswan.sys
          Microsoft Corporation
          MS PPP Framing Driver (Strong Encryption)
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      NDProxy
        [A ] 130. c:\windows\system32\drivers\ndproxy.sys
          Microsoft Corporation
          NDIS Proxy
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      NetBT
        [A ] 131. c:\windows\system32\drivers\netbt.sys
          Microsoft Corporation
          MBT Transport driver
          .text,.rdata,.data,PAGE,PAGENBT,INIT,.rsrc,.reloc,


      Null
        [A ] 132. c:\windows\system32\drivers\null.sys
          Microsoft Corporation
          NULL Driver
          .rdata,.data,PAGE,INIT,.rsrc,.reloc,


      NwlnkFlt
        [A ] 133. c:\windows\system32\drivers\nwlnkflt.sys
          Microsoft Corporation
          NWLINK2 Traffic Filter Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      NwlnkFwd
        [A ] 134. c:\windows\system32\drivers\nwlnkfwd.sys
          Microsoft Corporation
          NWLINK2 Forwarder Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Parport
        [A ] 135. c:\windows\system32\drivers\parport.sys
          Microsoft Corporation
          Parallel Port Driver
          .text,.rdata,.data,PAGEPARW,INIT,.rsrc,.reloc,


      PartMgr
        [A ] 136. c:\windows\system32\drivers\partmgr.sys
          Microsoft Corporation
          Partition Manager
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      ParVdm
        [A ] 137. c:\windows\system32\drivers\parvdm.sys
          Microsoft Corporation
          VDM Parallel Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      PCI
        [A ] 138. c:\windows\system32\drivers\pci.sys
          Microsoft Corporation
          NT Plug and Play PCI Enumerator
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Pcmcia
        [A ] 139. c:\windows\system32\drivers\pcmcia.sys
          Microsoft Corporation
          PCMCIA Bus Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      PCnet
        [A ] 140. c:\windows\system32\drivers\pcntpci5.sys
          AMD Inc.
          NDIS 5.0 driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      PptpMiniport
        [A ] 141. c:\windows\system32\drivers\raspptp.sys
          Microsoft Corporation
          Peer-to-Peer Tunneling Protocol
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      PSched
        [A ] 142. c:\windows\system32\drivers\psched.sys
          Microsoft Corporation
          MS QoS Packet Scheduler
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      Ptilink
        [A ] 143. c:\windows\system32\drivers\ptilink.sys
          Parallel Technologies, Inc.
          Parallel Technologies DirectParallel IO Library
          .text,.rdata,.data,.edata,INIT,.rsrc,.reloc,


      RasAcd
        [A ] 144. c:\windows\system32\drivers\rasacd.sys
          Microsoft Corporation
          RAS Automatic Connection Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Rasl2tp
        [A ] 145. c:\windows\system32\drivers\rasl2tp.sys
          Microsoft Corporation
          RAS L2TP mini-port/call-manager driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RasPppoe
        [A ] 146. c:\windows\system32\drivers\raspppoe.sys
          Microsoft Corporation
          RAS PPPoE mini-port/call-manager driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Raspti
        [A ] 147. c:\windows\system32\drivers\raspti.sys
          Microsoft Corporation
          PTI DirectParallel(R) mini-port/call-manager driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      RDPCDD
        [A ] 148. c:\windows\system32\drivers\rdpcdd.sys
          Microsoft Corporation
          RDP Miniport
          .rdata,PAGE,PAGE,INIT,.rsrc,.reloc,


      rdpdr
        [A ] 149. c:\windows\system32\drivers\rdpdr.sys
          Microsoft Corporation
          Microsoft RDP Device redirector
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      RDPWD
        [A ] 150. c:\windows\system32\drivers\rdpwd.sys
          Microsoft Corporation
          RDP Terminal Stack Driver (US/Canada Only, Not for Export)
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      redbook
        [A ] 151. c:\windows\system32\drivers\redbook.sys
          Microsoft Corporation
          Redbook Audio Filter Driver
          .text,.rdata,.data,PAGE,PAGERW,PAGECONS,INIT,.rsrc,.reloc,


      RFWARP
        [A ] 152. c:\windows\system32\drivers\rfwarp.sys
          Beijing Rising Information Technology Co., Ltd.
          rfwarp.sys
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      RFWNDIS
        [A ] 153. c:\windows\system32\drivers\rfwndis.sys
          Beijing Rising Information Technology Co., Ltd.
          rfwndis5.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rfwtdi
        [A ] 154. c:\program files\rising\ris\rfwtdi.sys
          Beijing Rising Information Technology Co., Ltd.
          rfwtdi.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      rsfwdrv
        [A ] 155. c:\program files\rising\ris\rsfwdrv.sys
          Beijing Rising Information Technology Co., Ltd.
          rsfwdrv.sys
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Secdrv
        [A ] 156. c:\windows\system32\drivers\secdrv.sys
          Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
          Macrovision SECURITY Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Serial
        [A ] 157. c:\windows\system32\drivers\serial.sys
          Microsoft Corporation
          Serial Device Driver
          .text,.rdata,.data,PAGESRP0,PAGESER,INIT,.rsrc,.reloc,


      Sfloppy
        [A ] 158. c:\windows\system32\drivers\sfloppy.sys
          Microsoft Corporation
          SCSI Floppy Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      splitter
        [A ] 159. c:\windows\system32\drivers\splitter.sys
          Microsoft Corporation
          Microsoft Kernel Audio Splitter
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      swenum
        [A ] 160. c:\windows\system32\drivers\swenum.sys
          Microsoft Corporation
          Plug and Play Software Device Enumerator
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      swmidi
        [A ] 161. c:\windows\system32\drivers\swmidi.sys
          Microsoft Corporation
          Microsoft GS Wavetable Synthesizer
          .text,.rdata,.data,PAGE,PAGEDATA,INIT,.rsrc,.reloc,


      sysaudio
        [A ] 162. c:\windows\system32\drivers\sysaudio.sys
          Microsoft Corporation
          System Audio WDM Filter
          .text,.rdata,.data,PAGE,PAGEDATA,INIT,.rsrc,.reloc,


      Tcpip
        [A ] 163. c:\windows\system32\drivers\tcpip.sys
          Microsoft Corporation
          TCP/IP Protocol Driver
          .text,.rdata,.data,PAGE,PAGELK,PAGEIPMc,.edata,INIT,.rsrc,.reloc,


      TDPIPE
        [A ] 164. c:\windows\system32\drivers\tdpipe.sys
          Microsoft Corporation
          Named Pipe Transport Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TDTCP
        [A ] 165. c:\windows\system32\drivers\tdtcp.sys
          Microsoft Corporation
          TCP Transport Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TermDD
        [A ] 166. c:\windows\system32\drivers\termdd.sys
          Microsoft Corporation
          Terminal Server Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      Update
        [A ] 167. c:\windows\system32\drivers\update.sys
          Microsoft Corporation
          Update Driver
          .text,.rdata,.data,PAGE,PAGECONS,PAGELK,INIT,.rsrc,.reloc,


      usbehci
        [A ] 168. c:\windows\system32\drivers\usbehci.sys
          Microsoft Corporation
          EHCI eUSB Miniport Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      usbhub
        [A ] 169. c:\windows\system32\drivers\usbhub.sys
          Microsoft Corporation
          Default Hub Driver for USB
          .text,.rdata,.data,PAGE,PAGECONS,INIT,.rsrc,.reloc,


      usbohci
        [A ] 170. c:\windows\system32\drivers\usbohci.sys
          Microsoft Corporation
          OHCI USB Miniport Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      VBoxGuest
        [A ] 171. c:\windows\system32\drivers\vboxguest.sys
          Oracle Corporation
          VirtualBox Guest Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      VBoxMouse
        [A ] 172. c:\windows\system32\drivers\vboxmouse.sys
          Oracle Corporation
          VirtualBox Mouse Filter
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      VBoxVideo
        [A ] 173. c:\windows\system32\drivers\vboxvideo.sys
          Oracle Corporation
          VirtualBox Video Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      VgaSave
        [A ] 174. c:\windows\system32\drivers\vga.sys
          Microsoft Corporation
          VGA/Super VGA Video Driver
          .text,.rdata,.data,PAGE,PAGE_DAT,INIT,.rsrc,.reloc,


      VolSnap
        [A ] 175. c:\windows\system32\drivers\volsnap.sys
          Microsoft Corporation
          Volume Shadow Copy Driver
          .text,.rdata,.data,PAGELK,INIT,.rsrc,.reloc,


      Wanarp
        [A ] 176. c:\windows\system32\drivers\wanarp.sys
          Microsoft Corporation
          MS Remote Access and Routing ARP Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      wdmaud
        [A ] 177. c:\windows\system32\drivers\wdmaud.sys
          Microsoft Corporation
          MMSYSTEM Wave/Midi API mapper
          .text,.rdata,.data,PAGE,PAGEDATA,PAGECONS,INIT,.rsrc,.reloc,




  + ļϵͳ
    + HKLM\System\CurrentControlSet\Services
      Cdfs
        [A ] 178. c:\windows\system32\drivers\cdfs.sys
          Microsoft Corporation
          CD-ROM File System Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      exFat
        [A ] 179. c:\windows\system32\drivers\exfat.sys
          Microsoft Corporation
          Microsoft Extended FAT File System
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Fastfat
        [A ] 180. c:\windows\system32\drivers\fastfat.sys
          Microsoft Corporation
          Fast FAT File System Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      FltMgr
        [A ] 181. c:\windows\system32\drivers\fltmgr.sys
          Microsoft Corporation
          Microsoft Filesystem Filter Manager
          .text,.rdata,.data,PAGE,PAGEVRF2,.edata,PAGEDDAT,INIT,.rsrc,.reloc,


      MRxDAV
        [A ] 182. c:\windows\system32\drivers\mrxdav.sys
          Microsoft Corporation
          Windows NT WebDav Minirdr
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      MRxSmb
        [A ] 183. c:\windows\system32\drivers\mrxsmb.sys
          Microsoft Corporation
          Windows NT SMB Minirdr
          .text,SECUR,.rdata,.data,PAGE,PAGE4BRO,PAGE5NET,PAGE,INIT,.rsrc,.reloc,


      Msfs
        [A ] 184. c:\windows\system32\drivers\msfs.sys
          Microsoft Corporation
          Mailslot driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Mup
        [A ] 185. c:\windows\system32\drivers\mup.sys
          Microsoft Corporation
          Multiple UNC Provider driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      NetBIOS
        [A ] 186. c:\windows\system32\drivers\netbios.sys
          Microsoft Corporation
          NetBIOS interface driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Npfs
        [A ] 187. c:\windows\system32\drivers\npfs.sys
          Microsoft Corporation
          NPFS Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Ntfs
        [A ] 188. c:\windows\system32\drivers\ntfs.sys
          Microsoft Corporation
          NT File System Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Rdbss
        [A ] 189. c:\windows\system32\drivers\rdbss.sys
          Microsoft Corporation
          Redirected Drive Buffering SubSystem Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      Sr
        [A ] 190. c:\windows\system32\drivers\sr.sys
          Microsoft Corporation
          System Restore Filesystem Filter Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Srv
        [A ] 191. c:\windows\system32\drivers\srv.sys
          Microsoft Corporation
          Server driver
          .text,.rdata,.data,PAGE,PAGE8FIL,PAGESMBC,PAGESMBD,INIT,.rsrc,.reloc,


      Udfs
        [A ] 192. c:\windows\system32\drivers\udfs.sys
          Microsoft Corporation
          UDF File System Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      VBoxSF
        [A ] 193. c:\windows\system32\drivers\vboxsf.sys
          Oracle Corporation
          VirtualBox Shared Folders Minirdr
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,

        [AM] 194. c:\windows\system32\vboxmrxnp.dll
          Oracle Corporation
          VirtualBox Shared Folders Minirdr NP
          .text,.rdata,.data,.rsrc,.reloc,




  + ϵͳ½
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
      UIHost
        [A ] 195. c:\windows\system32\logonui.exe
          Microsoft Corporation
          Windows Logon UI
          .text,.data,.rsrc,



    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      crypt32chain
        [AM] 196. c:\windows\system32\crypt32.dll
          Microsoft Corporation
          Crypto API32
          .text,.data,.rsrc,.reloc,


      cryptnet
        [A ] 197. c:\windows\system32\cryptnet.dll
          Microsoft Corporation
          Crypto Network Related API
          .text,.data,.rsrc,.reloc,


      cscdll
        [AM] 198. c:\windows\system32\cscdll.dll
          Microsoft Corporation
          Offline Network Agent
          .text,PAGE,.data,.rsrc,.reloc,


      dimsntfy
        [AM] 199. c:\windows\system32\dimsntfy.dll
          Microsoft Corporation
          DIMS Notification Handler
          .text,.data,.rsrc,.reloc,


      ScCertProp
        [AM] 200. c:\windows\system32\wlnotify.dll
          Microsoft Corporation
          Common DLL to receive Winlogon notifications
          .text,.data,.rsrc,.reloc,


      Schedule
        [AM] 200. c:\windows\system32\wlnotify.dll
          Microsoft Corporation
          Common DLL to receive Winlogon notifications
          .text,.data,.rsrc,.reloc,


      sclgntfy
        [A ] 201. c:\windows\system32\sclgntfy.dll
          Microsoft Corporation
          Secondary Logon Service Notification DLL
          .text,.data,.rsrc,.reloc,


      SensLogn
        [AM] 200. c:\windows\system32\wlnotify.dll
          Microsoft Corporation
          Common DLL to receive Winlogon notifications
          .text,.data,.rsrc,.reloc,


      termsrv
        [AM] 200. c:\windows\system32\wlnotify.dll
          Microsoft Corporation
          Common DLL to receive Winlogon notifications
          .text,.data,.rsrc,.reloc,


      wlballoon
        [AM] 200. c:\windows\system32\wlnotify.dll
          Microsoft Corporation
          Common DLL to receive Winlogon notifications
          .text,.data,.rsrc,.reloc,




  + IEģ
    + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
      {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8}
        [A ] 203. c:\windows\system32\urlfilter.dll
          Beijing Rising Information Technology Co., Ltd.
          Rising AntiSpyware UrlFilter Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars
      {4D5C8C25-D075-11d0-B416-00C04FB90376}
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,




  + Դģ
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      Class Install Handler
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      deflate
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      gzip
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      lzdhtml
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      text/webviewhtml
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      about
        [AM] 206. c:\windows\system32\mshtml.dll
          Microsoft Corporation
          Microsoft (R) HTML Viewer
          .text,.data,.rsrc,.reloc,


      cdl
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      dvd
        [A ] 207. c:\windows\system32\msvidctl.dll
          Microsoft Corporation
          ActiveX control for streaming video
          .text,.orpc,.data,.rsrc,.reloc,


      file
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      ftp
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      gopher
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      http
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      https
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      its
        [A ] 208. c:\windows\system32\itss.dll
          Microsoft Corporation
          Microsoft? InfoTech Storage System Library
          .text,.data,.rsrc,.reloc,


      javascript
        [AM] 206. c:\windows\system32\mshtml.dll
          Microsoft Corporation
          Microsoft (R) HTML Viewer
          .text,.data,.rsrc,.reloc,


      local
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      mailto
        [AM] 206. c:\windows\system32\mshtml.dll
          Microsoft Corporation
          Microsoft (R) HTML Viewer
          .text,.data,.rsrc,.reloc,


      mhtml
        [AM] 209. c:\windows\system32\inetcomm.dll
          Microsoft Corporation
          Microsoft Internet Messaging API
          .text,.data,.rsrc,.reloc,


      mk
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      ms-its
        [A ] 208. c:\windows\system32\itss.dll
          Microsoft Corporation
          Microsoft? InfoTech Storage System Library
          .text,.data,.rsrc,.reloc,


      res
        [AM] 206. c:\windows\system32\mshtml.dll
          Microsoft Corporation
          Microsoft (R) HTML Viewer
          .text,.data,.rsrc,.reloc,


      sysimage
        [AM] 206. c:\windows\system32\mshtml.dll
          Microsoft Corporation
          Microsoft (R) HTML Viewer
          .text,.data,.rsrc,.reloc,


      tv
        [A ] 207. c:\windows\system32\msvidctl.dll
          Microsoft Corporation
          ActiveX control for streaming video
          .text,.orpc,.data,.rsrc,.reloc,


      vbscript
        [AM] 206. c:\windows\system32\mshtml.dll
          Microsoft Corporation
          Microsoft (R) HTML Viewer
          .text,.data,.rsrc,.reloc,


      wia
        [A ] 210. c:\windows\system32\wiascr.dll
          Microsoft Corporation
          WIA Scripting Layer
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
      >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
        [A ] 211. c:\windows\inf\unregmp2.exe
          Microsoft Corporation
          Microsoft Windows Media Player װʵó
          .text,.data,.rsrc,


      >{26923b43-4d38-484f-9b9e-de460746276c}
        [A ] 212. c:\windows\system32\shmgrate.exe
          Microsoft Corporation
          Windows NT User Data Migration Tool
          .text,.data,.rsrc,


      >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,


      >{881dd1c5-3dcf-431b-b061-f3f88e8be88a}
        [A ] 212. c:\windows\system32\shmgrate.exe
          Microsoft Corporation
          Windows NT User Data Migration Tool
          .text,.data,.rsrc,


      {2C7339CF-2B09-4501-B3F3-F3508C9228ED}
        [A ] 214. c:\windows\system32\regsvr32.exe
          Microsoft Corporation
          Microsoft(C) Register Server
          .text,.data,.rsrc,

        [AM] 215. c:\windows\system32\themeui.dll
          Microsoft Corporation
          Windows Theme API
          .text,.data,.rsrc,.reloc,


      {44BBA840-CC51-11CF-AAFA-00AA00B6015C}
        [A ] 216. c:\program files\outlook express\setup50.exe
          Microsoft Corporation
          Outlook Express Setup Library
          .text,.data,.rsrc,


      {44BBA842-CC51-11CF-AAFA-00AA00B6015B}
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,


      {6BF52A52-394A-11d3-B153-00C04F79FAA6}
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,


      {7790769C-0471-11d2-AF11-00C04FA35D02}
        [A ] 216. c:\program files\outlook express\setup50.exe
          Microsoft Corporation
          Outlook Express Setup Library
          .text,.data,.rsrc,


      {89820200-ECBD-11cf-8B85-00AA005B4340}
        [A ] 214. c:\windows\system32\regsvr32.exe
          Microsoft Corporation
          Microsoft(C) Register Server
          .text,.data,.rsrc,

        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,


      {89820200-ECBD-11cf-8B85-00AA005B4383}
        [A ] 217. c:\windows\system32\ie4uinit.exe
          Microsoft Corporation
          IE 5.0 Per-User Install Utility
          .text,.data,.rsrc,



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {0D2E74C4-3C34-11d2-A27E-00C04FC30871}
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,


      {24F14F01-7B1C-11d1-838f-0000F80461CF}
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,


      {24F14F02-7B1C-11d1-838f-0000F80461CF}
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,


      {66742402-F9B9-11D1-A202-0000F81FEDEE}
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      Multimedia File Property Sheet
        [A ] 218. c:\windows\system32\mmsys.cpl
          Microsoft Corporation
          Control Panel Drivers Applet
          .text,.data,.rsrc,.reloc,


      ICM ɨǹ
        [A ] 219. c:\windows\system32\icmui.dll
          Microsoft Corporation
          Microsoft Color Matching System User Interface DLL
          .text,.data,.rsrc,.reloc,


      NTFS Security Page
        [A ] 220. c:\windows\system32\rshx32.dll
          Microsoft Corporation
          Security Shell Extension
          .text,.data,.rsrc,.reloc,


      OLE Docfile Property Page
        [A ] 221. c:\windows\system32\docprop.dll
          Microsoft Corporation
          OLE DocFile Property Page
          .text,.data,.rsrc,.reloc,


      Shell extensions for sharing
        [AM] 222. c:\windows\system32\ntshrui.dll
          Microsoft Corporation
          Shell extensions for sharing
          .text,.data,.rsrc,.reloc,


      PlusPack CPL Extension
        [AM] 215. c:\windows\system32\themeui.dll
          Microsoft Corporation
          Windows Theme API
          .text,.data,.rsrc,.reloc,


      Display Adapter CPL Extension
        [A ] 223. c:\windows\system32\deskadp.dll
          Microsoft Corporation
          Advanced display adapter properties
          .text,.data,.rsrc,.reloc,


      Display Monitor CPL Extension
        [A ] 224. c:\windows\system32\deskmon.dll
          Microsoft Corporation
          Advanced display monitor properties
          .text,.data,.rsrc,.reloc,


      DS Security Page
        [A ] 225. c:\windows\system32\dssec.dll
          Microsoft Corporation
          Directory Service Security UI
          .text,.data,.rsrc,.reloc,


      Compatibility Page
        [A ] 226. c:\windows\system32\slayerxp.dll
          Microsoft Corporation
          Compatibility Tab Shell Extension DLL
          .text,.data,.rsrc,.reloc,


      Shell Scrap DataHandler
        [A ] 227. c:\windows\system32\shscrap.dll
          Microsoft Corporation
          Shell scrap object handler
          .text,.data,.rsrc,.reloc,


      Disk Copy Extension
        [A ] 228. c:\windows\system32\diskcopy.dll
          Microsoft Corporation
          Windows DiskCopy
          .text,.data,.rsrc,.reloc,


      Shell extensions for Microsoft Windows Network objects
        [A ] 229. c:\windows\system32\ntlanui2.dll
          Microsoft Corporation
          Network object shell UI
          .text,.data,.rsrc,.reloc,


      ICM 
        [A ] 219. c:\windows\system32\icmui.dll
          Microsoft Corporation
          Microsoft Color Matching System User Interface DLL
          .text,.data,.rsrc,.reloc,


      ICM ӡ
        [A ] 219. c:\windows\system32\icmui.dll
          Microsoft Corporation
          Microsoft Color Matching System User Interface DLL
          .text,.data,.rsrc,.reloc,


      Web Printer Shell Extension
        [A ] 230. c:\windows\system32\printui.dll
          Microsoft Corporation
          Print UI DLL
          .text,.data,.rsrc,.reloc,


      Disk Quota UI
        [A ] 231. c:\windows\system32\dskquoui.dll
          Microsoft Corporation
          Windows Shell Disk Quota UI DLL
          .text,.data,.rsrc,.reloc,


      İ
        [A ] 232. c:\windows\system32\syncui.dll
          Microsoft Corporation
          Windows Briefcase
          .text,.data,.rsrc,.reloc,


      
        [A ] 233. c:\windows\system32\fontext.dll
          Microsoft Corporation
          Windows Font Folder
          .text,.data,.rsrc,.reloc,


      ICC ļ
        [A ] 219. c:\windows\system32\icmui.dll
          Microsoft Corporation
          Microsoft Color Matching System User Interface DLL
          .text,.data,.rsrc,.reloc,


      Printers Security Page
        [A ] 220. c:\windows\system32\rshx32.dll
          Microsoft Corporation
          Security Shell Extension
          .text,.data,.rsrc,.reloc,


      Shell extensions for sharing
        [AM] 222. c:\windows\system32\ntshrui.dll
          Microsoft Corporation
          Shell extensions for sharing
          .text,.data,.rsrc,.reloc,


      Display TroubleShoot CPL Extension
        [A ] 234. c:\windows\system32\deskperf.dll
          Microsoft Corporation
          Advanced display performance properties
          .text,.data,.rsrc,.reloc,


      MMC Icon Handler
        [A ] 235. c:\windows\system32\mmcshext.dll
          Microsoft Corporation
          MMC Shell Extension DLL
          .text,.data,.rsrc,.reloc,


      Shell Search Band
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Crypto PKO Extension
        [A ] 237. c:\windows\system32\cryptext.dll
          Microsoft Corporation
          Crypto Shell Extensions
          .text,.data,.rsrc,.reloc,


      Crypto Sign Extension
        [A ] 237. c:\windows\system32\cryptext.dll
          Microsoft Corporation
          Crypto Shell Extensions
          .text,.data,.rsrc,.reloc,


      
        [AM] 238. c:\windows\system32\netshell.dll
          Microsoft Corporation
          Network Connections Shell
          .text,.orpc,.data,.rsrc,.reloc,


      
        [AM] 238. c:\windows\system32\netshell.dll
          Microsoft Corporation
          Network Connections Shell
          .text,.orpc,.data,.rsrc,.reloc,


      ɨǺ
        [A ] 239. c:\windows\system32\wiashext.dll
          Microsoft Corporation
          Imaging Devices Shell Folder UI
          .text,.data,.rsrc,.reloc,


      ɨǺ
        [A ] 239. c:\windows\system32\wiashext.dll
          Microsoft Corporation
          Imaging Devices Shell Folder UI
          .text,.data,.rsrc,.reloc,


      ɨǺ
        [A ] 239. c:\windows\system32\wiashext.dll
          Microsoft Corporation
          Imaging Devices Shell Folder UI
          .text,.data,.rsrc,.reloc,


      ɨǺ
        [A ] 239. c:\windows\system32\wiashext.dll
          Microsoft Corporation
          Imaging Devices Shell Folder UI
          .text,.data,.rsrc,.reloc,


      ɨǺ
        [A ] 239. c:\windows\system32\wiashext.dll
          Microsoft Corporation
          Imaging Devices Shell Folder UI
          .text,.data,.rsrc,.reloc,


      Remote Sessions CPL Extension
        [A ] 240. c:\windows\system32\remotepg.dll
          Microsoft Corporation
          Remote Sessions CPL Extension
          .text,.data,.rsrc,.reloc,


      Portable Media Devices
        [A ] 241. c:\windows\system32\audiodev.dll
          Microsoft Corporation
          Яý豸нչ
          .text,.data,.rsrc,.reloc,


      Portable Media Devices Menu
        [A ] 241. c:\windows\system32\audiodev.dll
          Microsoft Corporation
          Яý豸нչ
          .text,.data,.rsrc,.reloc,


      Windows Script Host  Shell extensions
        [A ] 242. c:\windows\system32\wshext.dll
          Microsoft Corporation
          Microsoft (R) Shell Extension for Windows Script Host
          .text,.data,.rsrc,.reloc,


      Microsoft 
        [A ] 243. c:\program files\common files\system\ole db\oledb32.dll
          Microsoft Corporation
          Microsoft Data Access - OLE DB Core Services
          .text,.data,.sdbid,.rsrc,.reloc,


      Tasks Folder Icon Handler
        [AM] 244. c:\windows\system32\mstask.dll
          Microsoft Corporation
          Task Scheduler interface DLL
          .text,.data,.rsrc,.reloc,


      Tasks Folder Shell Extension
        [AM] 244. c:\windows\system32\mstask.dll
          Microsoft Corporation
          Task Scheduler interface DLL
          .text,.data,.rsrc,.reloc,


      ƻ
        [AM] 244. c:\windows\system32\mstask.dll
          Microsoft Corporation
          Task Scheduler interface DLL
          .text,.data,.rsrc,.reloc,


      Set Program Access and Defaults
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Auto Update Property Sheet Extension
        [A ] 245. c:\windows\system32\wuaucpl.cpl
          Microsoft Corporation
          Automatic Updates Control Panel
          .text,.data,.rsrc,.reloc,


      
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      ֧
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      ֧
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      ...
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Internet
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      ʼ
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      ǰİ汾ҳ
        [AM] 246. c:\windows\system32\twext.dll
          Microsoft Corporation
          Previous Versions property page
          .text,.data,.rsrc,.reloc,


      ǰİ汾
        [AM] 246. c:\windows\system32\twext.dll
          Microsoft Corporation
          Previous Versions property page
          .text,.data,.rsrc,.reloc,


      Audio Media Properties Handler
        [A ] 247. c:\windows\system32\shmedia.dll
          Microsoft Corporation
          Media File Property Extractor Shell Extension
          .text,.data,.rsrc,.reloc,


      Video Media Properties Handler
        [A ] 247. c:\windows\system32\shmedia.dll
          Microsoft Corporation
          Media File Property Extractor Shell Extension
          .text,.data,.rsrc,.reloc,


      Wav Properties Handler
        [A ] 247. c:\windows\system32\shmedia.dll
          Microsoft Corporation
          Media File Property Extractor Shell Extension
          .text,.data,.rsrc,.reloc,


      Avi Properties Handler
        [A ] 247. c:\windows\system32\shmedia.dll
          Microsoft Corporation
          Media File Property Extractor Shell Extension
          .text,.data,.rsrc,.reloc,


      Midi Properties Handler
        [A ] 247. c:\windows\system32\shmedia.dll
          Microsoft Corporation
          Media File Property Extractor Shell Extension
          .text,.data,.rsrc,.reloc,


      Video Thumbnail Extractor
        [A ] 247. c:\windows\system32\shmedia.dll
          Microsoft Corporation
          Media File Property Extractor Shell Extension
          .text,.data,.rsrc,.reloc,


      Microsoft Internet 
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      ״̬
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      ļ
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      ļ 2
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      BandProxy
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Microsoft BrowserBand
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      е
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      עĿ·ѡʵó
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      ַ(&A)
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      ַ EditBox
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Shell Microsoft AutoComplete
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      MRU Զб
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Զ MRU Զб
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      ɷʵ
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      ٵ
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Microsoft ʷԶб
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Microsoft ļԶб
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Microsoft Զб
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Shell Band Site Menu
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


       DeskBarApp
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


       DeskBar
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


       Rebar BandSite
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      û
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      ȫļ
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      IE Search Band
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      IE Microsoft AutoComplete
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Web 
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      TridentImageExtractor
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      Favorites Band
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      History Band
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Shell Automation Inproc Service
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Microsoft Browser Architecture
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      ISFBand OC
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Search Assistant OC
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Shell DocObject Viewer
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      InternetShortcut
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Microsoft Url History 
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      ʷ¼
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Internet ʱļ
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Internet ʱļ
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Microsoft Url ҽ
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      IE4 ׼ʼĻ
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      CDF Extension Copy Hook
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Internet
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Internet Name Space
        [AM] 202. c:\windows\system32\shdocvw.dll
          Microsoft Corporation
          Shell Doc Object and Control Library
          .text,.data,.rsrc,.reloc,


      Sendmail service
        [A ] 248. c:\windows\system32\sendmail.dll
          Microsoft Corporation
          Send Mail
          .text,.data,.rsrc,.reloc,


      Sendmail service
        [A ] 248. c:\windows\system32\sendmail.dll
          Microsoft Corporation
          Send Mail
          .text,.data,.rsrc,.reloc,


      ActiveX ٻļ
        [A ] 249. c:\windows\system32\occache.dll
          Microsoft Corporation
          Object Control Viewer
          .text,.data,.rsrc,.reloc,


      WebCheck
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      Subscription Mgr
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      Ԥļ
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      WebCheckWebCrawler
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      WebCheckChannelAgent
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      TrayAgent
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      Code Download Agent
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      ConnectionAgent
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      PostAgent
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      WebCheck SyncMgr Handler
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      Shell Application Manager
        [A ] 251. c:\windows\system32\appwiz.cpl
          Microsoft Corporation
          Shell Application Manager
          .text,.data,.rsrc,.reloc,


      Installed Apps Enumerator
        [A ] 251. c:\windows\system32\appwiz.cpl
          Microsoft Corporation
          Shell Application Manager
          .text,.data,.rsrc,.reloc,


      Darwin App Publisher
        [A ] 251. c:\windows\system32\appwiz.cpl
          Microsoft Corporation
          Shell Application Manager
          .text,.data,.rsrc,.reloc,


      Shell Image Verbs
        [A ] 252. c:\windows\system32\shimgvw.dll
          Microsoft Corporation
          Windows ͼƬʹ鿴
          .text,.data,.rsrc,.reloc,


      Shell Image Data Factory
        [A ] 252. c:\windows\system32\shimgvw.dll
          Microsoft Corporation
          Windows ͼƬʹ鿴
          .text,.data,.rsrc,.reloc,


      GDI+ ļͼѹ
        [A ] 252. c:\windows\system32\shimgvw.dll
          Microsoft Corporation
          Windows ͼƬʹ鿴
          .text,.data,.rsrc,.reloc,


      ժҪϢͼ(DOCFILES)
        [A ] 252. c:\windows\system32\shimgvw.dll
          Microsoft Corporation
          Windows ͼƬʹ鿴
          .text,.data,.rsrc,.reloc,


      HTML ͼĽѹ
        [A ] 252. c:\windows\system32\shimgvw.dll
          Microsoft Corporation
          Windows ͼƬʹ鿴
          .text,.data,.rsrc,.reloc,


      Shell Image Property Handler
        [A ] 252. c:\windows\system32\shimgvw.dll
          Microsoft Corporation
          Windows ͼƬʹ鿴
          .text,.data,.rsrc,.reloc,


      
        [A ] 253. c:\windows\system32\netplwiz.dll
          Microsoft Corporation
          Map Network Drives/Network Places Wizard
          .text,.data,.rsrc,.reloc,


      ͨ Web Ƭ
        [A ] 253. c:\windows\system32\netplwiz.dll
          Microsoft Corporation
          Map Network Drives/Network Places Wizard
          .text,.data,.rsrc,.reloc,


      ǳ򵼶
        [A ] 253. c:\windows\system32\netplwiz.dll
          Microsoft Corporation
          Map Network Drives/Network Places Wizard
          .text,.data,.rsrc,.reloc,


      ȡ Passport 
        [A ] 253. c:\windows\system32\netplwiz.dll
          Microsoft Corporation
          Map Network Drives/Network Places Wizard
          .text,.data,.rsrc,.reloc,


      Ƶļ
        [A ] 254. c:\windows\system32\cdfview.dll
          Microsoft Corporation
          Channel Definition File Viewer
          .text,.data,.rsrc,.reloc,


      Ƶݷʽ
        [A ] 254. c:\windows\system32\cdfview.dll
          Microsoft Corporation
          Channel Definition File Viewer
          .text,.data,.rsrc,.reloc,


      Ƶ
        [A ] 254. c:\windows\system32\cdfview.dll
          Microsoft Corporation
          Channel Definition File Viewer
          .text,.data,.rsrc,.reloc,


      Channel Menu
        [A ] 254. c:\windows\system32\cdfview.dll
          Microsoft Corporation
          Channel Definition File Viewer
          .text,.data,.rsrc,.reloc,


      Channel Properties
        [A ] 254. c:\windows\system32\cdfview.dll
          Microsoft Corporation
          Channel Definition File Viewer
          .text,.data,.rsrc,.reloc,


      Extensions Manager Folder
        [A ] 255. c:\windows\system32\extmgr.dll
          Microsoft Corporation
          Extensions Manager
          .text,.data,.rsrc,.reloc,


      FTP Folders Webview
        [A ] 256. c:\windows\system32\msieftp.dll
          Microsoft Corporation
          Microsoft Internet Explorer FTP Folder Shell Extension
          .text,.data,.rsrc,.reloc,


      Microsoft DocProp Shell Ext
        [A ] 257. c:\windows\system32\docprop2.dll
          Microsoft Corporation
          Microsoft DocProp Shell Ext
          .text,.data,.rsrc,.reloc,


      Microsoft DocProp Inplace Edit Box Control
        [A ] 257. c:\windows\system32\docprop2.dll
          Microsoft Corporation
          Microsoft DocProp Shell Ext
          .text,.data,.rsrc,.reloc,


      Microsoft DocProp Inplace ML Edit Box Control
        [A ] 257. c:\windows\system32\docprop2.dll
          Microsoft Corporation
          Microsoft DocProp Shell Ext
          .text,.data,.rsrc,.reloc,


      Microsoft DocProp Inplace Droplist Combo Control
        [A ] 257. c:\windows\system32\docprop2.dll
          Microsoft Corporation
          Microsoft DocProp Shell Ext
          .text,.data,.rsrc,.reloc,


      Microsoft DocProp Inplace Calendar Control
        [A ] 257. c:\windows\system32\docprop2.dll
          Microsoft Corporation
          Microsoft DocProp Shell Ext
          .text,.data,.rsrc,.reloc,


      Microsoft DocProp Inplace Time Control
        [A ] 257. c:\windows\system32\docprop2.dll
          Microsoft Corporation
          Microsoft DocProp Shell Ext
          .text,.data,.rsrc,.reloc,


      Directory Query UI
        [A ] 258. c:\windows\system32\dsquery.dll
          Microsoft Corporation
          Directory Service Find
          .text,.data,.rsrc,.reloc,


      Shell properties for a DS object
        [A ] 258. c:\windows\system32\dsquery.dll
          Microsoft Corporation
          Directory Service Find
          .text,.data,.rsrc,.reloc,


      Directory Object Find
        [A ] 258. c:\windows\system32\dsquery.dll
          Microsoft Corporation
          Directory Service Find
          .text,.data,.rsrc,.reloc,


      Directory Start/Search Find
        [A ] 258. c:\windows\system32\dsquery.dll
          Microsoft Corporation
          Directory Service Find
          .text,.data,.rsrc,.reloc,


      Directory Property UI
        [A ] 259. c:\windows\system32\dsuiext.dll
          Microsoft Corporation
          Directory Service Common UI
          .text,.data,.rsrc,.reloc,


      Directory Context Menu Verbs
        [A ] 259. c:\windows\system32\dsuiext.dll
          Microsoft Corporation
          Directory Service Common UI
          .text,.data,.rsrc,.reloc,


      MyDocs Copy Hook
        [A ] 260. c:\windows\system32\mydocs.dll
          Microsoft Corporation
          My Documents Folder UI
          .text,.data,.rsrc,.reloc,


      MyDocs Drop Target
        [A ] 260. c:\windows\system32\mydocs.dll
          Microsoft Corporation
          My Documents Folder UI
          .text,.data,.rsrc,.reloc,


      MyDocs Properties
        [A ] 260. c:\windows\system32\mydocs.dll
          Microsoft Corporation
          My Documents Folder UI
          .text,.data,.rsrc,.reloc,


      Offline Files Menu
        [AM] 261. c:\windows\system32\cscui.dll
          Microsoft Corporation
          Client Side Caching UI
          .text,.data,.rsrc,.reloc,


      Offline Files Folder Options
        [AM] 261. c:\windows\system32\cscui.dll
          Microsoft Corporation
          Client Side Caching UI
          .text,.data,.rsrc,.reloc,


      ѻļ
        [AM] 261. c:\windows\system32\cscui.dll
          Microsoft Corporation
          Client Side Caching UI
          .text,.data,.rsrc,.reloc,


      Microsoft Agent Character Property Sheet Handler
        [A ] 262. c:\windows\msagent\agentpsh.dll
          Microsoft Corporation
          Microsoft Agent Property Sheet Handler
          .text,.data,.rsrc,.reloc,


      DfsShell
        [A ] 263. c:\windows\system32\dfsshlex.dll
          Microsoft Corporation
          Distributed File System shell extension
          .text,.data,.rsrc,.reloc,


      %DESC_PublishDropTarget%
        [A ] 264. c:\windows\system32\photowiz.dll
          Microsoft Corporation
          Photo Printing Wizard
          .text,.data,.rsrc,.reloc,


      û(&P)...
        [A ] 265. c:\program files\outlook express\wabfind.dll
          Microsoft Corporation
          Find People
          .text,.data,.rsrc,.reloc,


      Windows Media Player Play as Playlist Context Menu Handler
        [A ] 266. c:\windows\system32\wmpshell.dll
          Microsoft Corporation
          Windows Media Player Launcher
          .text,.data,.rsrc,.reloc,


      Windows Media Player Burn Audio CD Context Menu Handler
        [A ] 266. c:\windows\system32\wmpshell.dll
          Microsoft Corporation
          Windows Media Player Launcher
          .text,.data,.rsrc,.reloc,


      Windows Media Player Add to Playlist Context Menu Handler
        [A ] 266. c:\windows\system32\wmpshell.dll
          Microsoft Corporation
          Windows Media Player Launcher
          .text,.data,.rsrc,.reloc,


      WinRAR shell extension
        [AM] 267. c:\program files\winrar\rarext.dll
          .text,.rdata,.data,.rsrc,.reloc,


      Microsoft.XPS.Shell.Metadata.1
        [A ] 268. c:\windows\system32\xpsshhdr.dll
          Microsoft Corporation
          Package Document Shell Extension Handler
          .text,.data,.rsrc,.reloc,


      Microsoft.XPS.Shell.Thumbnail.1
        [A ] 268. c:\windows\system32\xpsshhdr.dll
          Microsoft Corporation
          Package Document Shell Extension Handler
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {AEB6717E-7E19-11d0-97EE-00C04FD91972}
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
      Browseui Ԥس
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,


      𻺴
        [AM] 236. c:\windows\system32\browseui.dll
          Microsoft Corporation
          Shell Browser UI Library
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
      PostBootReminder
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,


      CDBurn
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,


      WebCheck
        [AM] 250. c:\windows\system32\webcheck.dll
          Microsoft Corporation
          Web Site Monitor
          .text,.data,.rsrc,.reloc,


      SysTray
        [AM] 269. c:\windows\system32\stobject.dll
          Microsoft Corporation
          Systray shell service object
          .text,.data,.rsrc,.reloc,




  + û½Ŀ
    + HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds
      StartupPrograms
        [A ] 270. c:\windows\system32\rdpclip.exe
          Microsoft Corporation
          RDP Clip Monitor
          .text,.data,.rsrc,



    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
      Userinit
        [A ] 271. c:\windows\system32\userinit.exe
          Microsoft Corporation
          Userinit Logon Application
          .text,.data,.rsrc,



    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
      Shell
        [AM] 272. c:\windows\explorer.exe
          Microsoft Corporation
          Windows Explorer
          .text,.data,.rsrc,.reloc,



    + HKCU\Software\Microsoft\Windows\CurrentVersion\Run
      ctfmon.exe
        [AM] 273. c:\windows\system32\ctfmon.exe
          Microsoft Corporation
          CTF Loader
          .text,.data,.rsrc,


      ShellRun
        [A ] 274. c:\documents and settings\administrator\my documents\netview.exe
          360.cn
          360Ӳ鿴
          .text,.rdata,.data,.rsrc,



    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      VBoxTray
        [AM] 275. c:\windows\system32\vboxtray.exe
          Oracle Corporation
          VirtualBox Guest Additions Tray Application
          .text,.rdata,.data,.rsrc,


      RISTray
        [AM] 276. c:\program files\rising\ris\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising tray framework
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 277. c:\program files\rising\antispyware\rstray.exe
          Beijing Rising Information Technology Co., Ltd.
          RSTray
          .text,.rdata,.data,.rsrc,




  + ִ
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 278. c:\windows\system32\autochk.exe
          Microsoft Corporation
          Auto Check Utility
          .text,.data,.rsrc,.reloc,

        [A ] 279. c:\windows\system32\bsmain.exe
          Beijing Rising Information Technology Co., Ltd.
          Rising Antivirus 2011
          .text,.rdata,.data,.rsrc,.reloc,




  + ӳٳ
    + HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
      Your Image File Name Here without a path
        [A ] 280. c:\windows\system32\ntsd.exe
          Microsoft Corporation
          Symbolic Debugger for Windows 2000
          .text,.data,.rsrc,



    + HKCR\Folder\shell
      explore
        [AM] 272. c:\windows\explorer.exe
          Microsoft Corporation
          Windows Explorer
          .text,.data,.rsrc,.reloc,


      open
        [AM] 272. c:\windows\explorer.exe
          Microsoft Corporation
          Windows Explorer
          .text,.data,.rsrc,.reloc,



    + HKCR\.bat
      batfile\edit\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      batfile\print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,



    + HKCR\.html
      htmlfile\open\Command
        [A ] 282. c:\program files\internet explorer\iexplore.exe
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,


      htmlfile\opennew\Command
        [A ] 282. c:\program files\internet explorer\iexplore.exe
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,


      htmlfile\print\Command
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,


      htmlfile\printto\Command
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,



    + HKCR\.htm
      htmlfile\open\Command
        [A ] 282. c:\program files\internet explorer\iexplore.exe
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,


      htmlfile\opennew\Command
        [A ] 282. c:\program files\internet explorer\iexplore.exe
          Microsoft Corporation
          Internet Explorer
          .text,.data,.rsrc,


      htmlfile\print\Command
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,


      htmlfile\printto\Command
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,



    + HKCR\.log
      txtfile\open\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      txtfile\print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      txtfile\printto\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,



    + HKCR\.txt
      txtfile\open\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      txtfile\print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      txtfile\printto\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,



    + HKCR\.cmd
      cmdfile\edit\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      cmdfile\print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,



    + HKCR\.scr
      scrfile\install\Command
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,



    + HKCR\.reg
      regfile\edit\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      regfile\open\Command
        [A ] 283. c:\windows\regedit.exe
          Microsoft Corporation
          Registry Editor
          .text,.data,.rsrc,


      regfile\print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,



    + HKCR\.vbs
      VBSFile\Edit\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      VBSFile\Open\Command
        [A ] 284. c:\windows\system32\wscript.exe
          Microsoft Corporation
          Microsoft (R) Windows Based Script Host
          .text,.data,.rsrc,.reloc,


      VBSFile\Open2\Command
        [A ] 285. c:\windows\system32\cscript.exe
          Microsoft Corporation
          Microsoft (R) Console Based Script Host
          .text,.data,.rsrc,.reloc,


      VBSFile\Print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,



    + HKCR\.js
      JSFile\Edit\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      JSFile\Open\Command
        [A ] 284. c:\windows\system32\wscript.exe
          Microsoft Corporation
          Microsoft (R) Windows Based Script Host
          .text,.data,.rsrc,.reloc,


      JSFile\Open2\Command
        [A ] 285. c:\windows\system32\cscript.exe
          Microsoft Corporation
          Microsoft (R) Console Based Script Host
          .text,.data,.rsrc,.reloc,


      JSFile\Print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,



    + HKCR\.mp3
      mp3file\open\Command
        [A ] 286. c:\program files\windows media player\wmplayer.exe
          Microsoft Corporation
          Windows Media Player
          .text,.data,.rsrc,


      mp3file\play\Command
        [A ] 286. c:\program files\windows media player\wmplayer.exe
          Microsoft Corporation
          Windows Media Player
          .text,.data,.rsrc,



    + HKCR\.ini
      inifile\open\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      inifile\print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,



    + HKCR\.inf
      inffile\Install\Command
        [A ] 213. c:\windows\system32\rundll32.exe
          Microsoft Corporation
          Run a DLL as an App
          .text,.data,.rsrc,


      inffile\open\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,


      inffile\print\Command
        [A ] 281. c:\windows\system32\notepad.exe
          Microsoft Corporation
          ±
          .text,.data,.rsrc,




  + ʼ֪̬ӿ
    + HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs
      advapi32
        [AM] 68. c:\windows\system32\advapi32.dll
          Microsoft Corporation
          Advanced Windows 32 Base API
          .text,.data,.rsrc,.reloc,


      comdlg32
        [AM] 287. c:\windows\system32\comdlg32.dll
          Microsoft Corporation
          Common Dialogs DLL
          .text,.data,.rsrc,.reloc,


      gdi32
        [AM] 288. c:\windows\system32\gdi32.dll
          Microsoft Corporation
          GDI Client DLL
          .text,.data,.rsrc,.reloc,


      imagehlp
        [AM] 289. c:\windows\system32\imagehlp.dll
          Microsoft Corporation
          Windows NT Image Helper
          .text,.data,.rsrc,.reloc,


      kernel32
        [AM] 290. c:\windows\system32\kernel32.dll
          Microsoft Corporation
          Windows NT BASE API Client DLL
          .text,.data,.rsrc,.reloc,


      lz32
        [A ] 291. c:\windows\system32\lz32.dll
          Microsoft Corporation
          LZ Expand/Compress API DLL
          .text,.rsrc,


      ole32
        [AM] 292. c:\windows\system32\ole32.dll
          Microsoft Corporation
          Microsoft OLE for Windows
          .text,.orpc,.data,.rsrc,.reloc,


      oleaut32
        [AM] 293. c:\windows\system32\oleaut32.dll
          Microsoft Corporation
          .text,.orpc,.data,.rsrc,.reloc,


      olecli32
        [A ] 294. c:\windows\system32\olecli32.dll
          Microsoft Corporation
          Object Linking and Embedding Client Library
          .text,.data,.rsrc,.reloc,


      olecnv32
        [A ] 295. c:\windows\system32\olecnv32.dll
          Microsoft Corporation
          Microsoft OLE for Windows
          .text,.data,.rsrc,.reloc,


      olesvr32
        [A ] 296. c:\windows\system32\olesvr32.dll
          Microsoft Corporation
          Object Linking and Embedding Server Library
          .text,.data,.rsrc,.reloc,


      olethk32
        [A ] 297. c:\windows\system32\olethk32.dll
          Microsoft Corporation
          Microsoft OLE for Windows
          .text,.data,.rsrc,.reloc,


      rpcrt4
        [AM] 298. c:\windows\system32\rpcrt4.dll
          Microsoft Corporation
          Remote Procedure Call Runtime
          .text,.orpc,.data,.rsrc,.reloc,


      shell32
        [AM] 205. c:\windows\system32\shell32.dll
          Microsoft Corporation
          Windows Shell Common Dll
          .text,.data,.rsrc,.reloc,


      url
        [A ] 299. c:\windows\system32\url.dll
          Microsoft Corporation
          Internet Shortcut Shell Extension DLL
          .text,.data,.rsrc,.reloc,


      urlmon
        [AM] 204. c:\windows\system32\urlmon.dll
          Microsoft Corporation
          OLE32 Extensions for Win32
          .text,.orpc,.data,.rsrc,.reloc,


      user32
        [AM] 300. c:\windows\system32\user32.dll
          Microsoft Corporation
          Windows XP USER API Client DLL
          .text,.data,.rsrc,.reloc,


      version
        [AM] 301. c:\windows\system32\version.dll
          Microsoft Corporation
          Version Checking and File Installation Libraries
          .text,.data,.rsrc,.reloc,


      wininet
        [AM] 302. c:\windows\system32\wininet.dll
          Microsoft Corporation
          Internet Extensions for Win32
          .text,.data,.rsrc,.reloc,


      wldap32
        [AM] 303. c:\windows\system32\wldap32.dll
          Microsoft Corporation
          Win32 LDAP API DLL
          .text,.data,.rsrc,.reloc,




  + ӡ
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      Local Port
        [AM] 304. c:\windows\system32\localspl.dll
          Microsoft Corporation
          Local Spooler DLL
          .text,.data,.rsrc,.reloc,


      Standard TCP/IP Port
        [AM] 305. c:\windows\system32\tcpmon.dll
          Microsoft Corporation
          Standard TCP/IP Port Monitor DLL
          .text,.data,.rsrc,.reloc,


      USB Monitor
        [AM] 306. c:\windows\system32\usbmon.dll
          Microsoft Corporation
          Standard Dynamic Printing Port Monitor DLL
          .text,.data,.rsrc,.reloc,




  + ȫ֤
    + HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders
      SecurityProviders
        [A ] 307. c:\windows\system32\msapsspc.dll
          Microsoft Corporation
          DPA Client for 32 bit platforms
          .text,.data,.rsrc,.reloc,

        [AM] 308. c:\windows\system32\schannel.dll
          Microsoft Corporation
          TLS / SSL Security Provider
          .text,.data,.rsrc,.reloc,

        [A ] 309. c:\windows\system32\digest.dll
          Microsoft Corporation
          Digest SSPI Authentication Package
          .text,.data,.rsrc,.reloc,

        [A ] 310. c:\windows\system32\msnsspc.dll
          Microsoft Corporation
          MSN Internet Access
          .text,.data,.rsrc,.reloc,



    + HKLM\SYSTEM\CurrentControlSet\Control\Lsa
      Authentication Packages
        [AM] 311. c:\windows\system32\msv1_0.dll
          Microsoft Corporation
          Microsoft Authentication Package v1.0
          .text,.data,.rsrc,.reloc,


      Notification Packages
        [AM] 312. c:\windows\system32\scecli.dll
          Microsoft Corporation
          Windows Security Configuration Editor Client Engine
          .text,.data,.rsrc,.reloc,


      Security Packages
        [AM] 313. c:\windows\system32\kerberos.dll
          Microsoft Corporation
          Kerberos Security Package
          .text,.data,.rsrc,.reloc,

        [AM] 311. c:\windows\system32\msv1_0.dll
          Microsoft Corporation
          Microsoft Authentication Package v1.0
          .text,.data,.rsrc,.reloc,

        [AM] 308. c:\windows\system32\schannel.dll
          Microsoft Corporation
          TLS / SSL Security Provider
          .text,.data,.rsrc,.reloc,

        [AM] 314. c:\windows\system32\wdigest.dll
          Microsoft Corporation
          Microsoft Digest Access
          .text,.data,.rsrc,.reloc,





+ Ŀ
  + C:\Documents and Settings\Administrator\ʼ˵\\
    office.exe
      [A ] 315. c:\documents and settings\administrator\ʼ˵\\\office.exe
        CODE,DATA,BSS,.idata,.tls,.rdata,.reloc,.rsrc,




+ еĽ
  + 00000184(388) Explorer.EXE
    01000000[000F1000]
      [AM] 272. c:\windows\explorer.exe
        Microsoft Corporation
        Windows Explorer
        .text,.data,.rsrc,.reloc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    75EF0000[000FD000]
      [AM] 236. c:\windows\system32\browseui.dll
        Microsoft Corporation
        Shell Browser UI Library
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    7E550000[00173000]
      [AM] 202. c:\windows\system32\shdocvw.dll
        Microsoft Corporation
        Shell Doc Object and Control Library
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    75430000[00071000]
      [ M] 321. c:\windows\system32\cryptui.dll
        Microsoft Corporation
        Microsoft Trust UI Provider
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    76C00000[0002E000]
      [ M] 323. c:\windows\system32\wintrust.dll
        Microsoft Corporation
        Microsoft Trust Verification APIs
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    71A40000[0000B000]
      [ M] 336. c:\windows\system32\wsock32.dll
        Microsoft Corporation
        Windows Socket 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    73640000[0002E000]
      [ M] 337. c:\windows\system32\msctfime.ime
        Microsoft Corporation
        Microsoft Text Frame Work Service IME
        .text,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,


    76D70000[00022000]
      [ M] 340. c:\windows\system32\apphelp.dll
        Microsoft Corporation
        Application Compatibility Client Library
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    76590000[0004E000]
      [AM] 261. c:\windows\system32\cscui.dll
        Microsoft Corporation
        Client Side Caching UI
        .text,.data,.rsrc,.reloc,


    76570000[0001C000]
      [AM] 198. c:\windows\system32\cscdll.dll
        Microsoft Corporation
        Offline Network Agent
        .text,PAGE,.data,.rsrc,.reloc,


    5B680000[0006E000]
      [AM] 215. c:\windows\system32\themeui.dll
        Microsoft Corporation
        Windows Theme API
        .text,.data,.rsrc,.reloc,


    762F0000[00005000]
      [ M] 343. c:\windows\system32\msimg32.dll
        Microsoft Corporation
        GDIEXT Client DLL
        .text,.data,.rsrc,.reloc,


    01100000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    5FE40000[00031000]
      [ M] 345. c:\windows\system32\msutb.dll
        Microsoft Corporation
        MSUTB Server DLL
        .text,.data,.rsrc,.reloc,


    74680000[0004C000]
      [ M] 346. c:\windows\system32\msctf.dll
        Microsoft Corporation
        MSCTF Server DLL
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    76060000[00156000]
      [ M] 348. c:\windows\system32\setupapi.dll
        Microsoft Corporation
        Windows Setup API
        .text,.data,.rsrc,.reloc,


    76950000[00008000]
      [ M] 349. c:\windows\system32\linkinfo.dll
        Microsoft Corporation
        Windows Volume Tracking
        .text,.data,.rsrc,.reloc,


    76960000[00024000]
      [AM] 222. c:\windows\system32\ntshrui.dll
        Microsoft Corporation
        Shell extensions for sharing
        .text,.data,.rsrc,.reloc,


    76AF0000[00011000]
      [ M] 350. c:\windows\system32\atl.dll
        Microsoft Corporation
        ATL Module for Windows XP (Unicode)
        .text,.data,.rsrc,.reloc,


    7EAE0000[000A1000]
      [AM] 204. c:\windows\system32\urlmon.dll
        Microsoft Corporation
        OLE32 Extensions for Win32
        .text,.orpc,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    74A90000[00044000]
      [AM] 250. c:\windows\system32\webcheck.dll
        Microsoft Corporation
        Web Site Monitor
        .text,.data,.rsrc,.reloc,


    74A60000[00020000]
      [AM] 269. c:\windows\system32\stobject.dll
        Microsoft Corporation
        Systray shell service object
        .text,.data,.rsrc,.reloc,


    74A50000[0000A000]
      [ M] 352. c:\windows\system32\batmeter.dll
        Microsoft Corporation
        Battery Meter Helper DLL
        .text,.data,.rsrc,.reloc,


    74A30000[00008000]
      [ M] 353. c:\windows\system32\powrprof.dll
        Microsoft Corporation
        Power Profile Helper DLL
        .text,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    10000000[00089000]
      [ M] 355. c:\documents and settings\administrator\my documents\shells.dll
        .text,.rdata,.data,.reloc,


    74BE0000[0002C000]
      [ M] 356. c:\windows\system32\oleacc.dll
        Microsoft Corporation
        Active Accessibility Core Component
        .text,.orpc,.data,.rsrc,.reloc,


    75FF0000[00065000]
      [ M] 357. c:\windows\system32\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    72C90000[00009000]
      [ M] 358. c:\windows\system32\wdmaud.drv
        Microsoft Corporation
        WDM Audio driver mapper
        .text,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 359. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    77BA0000[00007000]
      [ M] 360. c:\windows\system32\midimap.dll
        Microsoft Corporation
        Microsoft MIDI Mapper
        .text,.data,.rsrc,.reloc,


    7DE40000[00199000]
      [AM] 238. c:\windows\system32\netshell.dll
        Microsoft Corporation
        Network Connections Shell
        .text,.orpc,.data,.rsrc,.reloc,


    76BD0000[0002D000]
      [ M] 361. c:\windows\system32\credui.dll
        Microsoft Corporation
        Credential Manager User Interface
        .text,.data,.rsrc,.reloc,


    42E00000[0000A000]
      [ M] 362. c:\windows\system32\dot3api.dll
        Microsoft Corporation
        802.3 Զ API
        .text,.data,.rsrc,.reloc,


    76E50000[0000E000]
      [ M] 363. c:\windows\system32\rtutils.dll
        Microsoft Corporation
        Routing Utilities
        .text,.data,.rsrc,.reloc,


    4A5C0000[00006000]
      [ M] 364. c:\windows\system32\dot3dlg.dll
        Microsoft Corporation
        802.3 UI 
        .text,.data,.rsrc,.reloc,


    5A990000[00028000]
      [ M] 365. c:\windows\system32\onex.dll
        Microsoft Corporation
        IEEE 802.1X 󷽿
        .text,.data,.rsrc,.reloc,


    4A820000[00022000]
      [ M] 366. c:\windows\system32\eappcfg.dll
        Microsoft Corporation
        EAP Ե
        .text,.data,.rsrc,.reloc,


    582E0000[0000E000]
      [ M] 367. c:\windows\system32\eappprxy.dll
        Microsoft Corporation
        Microsoft EAPHost Peer Client DLL
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    75E00000[000AE000]
      [ M] 369. c:\windows\system32\sxs.dll
        Microsoft Corporation
        Fusion 2.5
        .text,.data,.rsrc,.reloc,


    01990000[0002D000]
      [AM] 267. c:\program files\winrar\rarext.dll
        .text,.rdata,.data,.rsrc,.reloc,


    0C110000[00024000]
      [ M] 370. c:\windows\system32\ravext.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Shell Ext Module
        .text,.rdata,.data,.rsrc,.reloc,


    0C200000[00029000]
      [ M] 371. c:\windows\system32\xpsp1res.dll
        Microsoft Corporation
        Service Pack 1 Messages
        .rsrc,


    68000000[00036000]
      [ M] 372. c:\windows\system32\rsaenh.dll
        Microsoft Corporation
        Microsoft Enhanced Cryptographic Provider
        .text,.data,.rsrc,.reloc,


    73250000[00005000]
      [ M] 373. c:\windows\system32\riched32.dll
        Microsoft Corporation
        Wrapper Dll for Richedit 1.0
        .text,.data,.rsrc,.reloc,


    74D90000[0006D000]
      [ M] 374. c:\windows\system32\riched20.dll
        Microsoft Corporation
        Rich Text Edit Control, v3.0
        .text,.data,.rsrc,.reloc,


    71600000[0000F000]
      [ M] 375. c:\windows\system32\browselc.dll
        Microsoft Corporation
        Shell Browser UI Library
        .rsrc,.reloc,


    71A90000[00012000]
      [ M] 376. c:\windows\system32\mpr.dll
        Microsoft Corporation
        Multiple Provider Router DLL
        .text,.data,.rsrc,.reloc,


    6C520000[0004D000]
      [ M] 377. c:\windows\system32\duser.dll
        Microsoft Corporation
        Windows DirectUser Engine
        .text,.data,.rsrc,.reloc,


    74CF0000[00091000]
      [ M] 378. c:\windows\system32\mlang.dll
        Microsoft Corporation
        Multi Language Support DLL
        .text,.data,.rsrc,.reloc,


    416C0000[00011000]
      [AM] 246. c:\windows\system32\twext.dll
        Microsoft Corporation
        Previous Versions property page
        .text,.data,.rsrc,.reloc,


    77C90000[00032000]
      [ M] 379. c:\windows\system32\activeds.dll
        Microsoft Corporation
        ADs Router Layer DLL
        .text,.data,.rsrc,.reloc,


    76DE0000[00025000]
      [ M] 380. c:\windows\system32\adsldpc.dll
        Microsoft Corporation
        ADs LDAP Provider C DLL
        .text,.data,.rsrc,.reloc,


    0CDE0000[000AF000]
      [AM] 194. c:\windows\system32\vboxmrxnp.dll
        Oracle Corporation
        VirtualBox Shared Folders Minirdr NP
        .text,.rdata,.data,.rsrc,.reloc,


    75ED0000[00007000]
      [ M] 381. c:\windows\system32\drprov.dll
        Microsoft Corporation
        Microsoft Terminal Server Network Provider
        .text,.data,.rsrc,.reloc,


    71B90000[0000E000]
      [AM] 25. c:\windows\system32\ntlanman.dll
        Microsoft Corporation
        Microsoft(R) Lan Manager
        .text,.data,.rsrc,.reloc,


    71C50000[00015000]
      [ M] 382. c:\windows\system32\netui0.dll
        Microsoft Corporation
        NT LM UI Common Code - GUI Classes
        .text,.data,.rsrc,.reloc,


    71C10000[00040000]
      [ M] 383. c:\windows\system32\netui1.dll
        Microsoft Corporation
        NT LM UI Common Code - Networking classes
        .text,.data,.rsrc,.reloc,


    71C00000[00007000]
      [ M] 384. c:\windows\system32\netrap.dll
        Microsoft Corporation
        Net Remote Admin Protocol DLL
        .text,.data,.rsrc,.reloc,


    75EE0000[0000A000]
      [AM] 65. c:\windows\system32\davclnt.dll
        Microsoft Corporation
        Web DAV Client DLL
        .text,.data,.rsrc,.reloc,


    71CC0000[0001B000]
      [ M] 385. c:\windows\system32\actxprxy.dll
        Microsoft Corporation
        ActiveX Interface Marshaling Library
        .text,.orpc,.data,.rsrc,.reloc,


    00E10000[00014000]
      [ M] 386. c:\program files\rising\antispyware\regcall.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,YCIShare,.rsrc,.reloc,



  + 000001f8(504) GoogleUpdateBeta.exe
    00400000[0000B000]
      [ M] 387. c:\documents and settings\networkservice\local settings\application data\google\update\googleupdatebeta.exe
        Google Inc
        Google Installer
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    75FF0000[00065000]
      [ M] 357. c:\windows\system32\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    7EAE0000[000A1000]
      [AM] 204. c:\windows\system32\urlmon.dll
        Microsoft Corporation
        OLE32 Extensions for Win32
        .text,.orpc,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    76F80000[00008000]
      [ M] 389. c:\windows\system32\winrnr.dll
        Microsoft Corporation
        LDAP RnR Provider DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    76F90000[00006000]
      [ M] 390. c:\windows\system32\rasadhlp.dll
        Microsoft Corporation
        Remote Access AutoDial Helper
        .text,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,



  + 00000308(776) VBoxTray.exe
    00400000[000DC000]
      [AM] 275. c:\windows\system32\vboxtray.exe
        Oracle Corporation
        VirtualBox Guest Additions Tray Application
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    73640000[0002E000]
      [ M] 337. c:\windows\system32\msctfime.ime
        Microsoft Corporation
        Microsoft Text Frame Work Service IME
        .text,.data,.rsrc,.reloc,


    10000000[00013000]
      [ M] 391. c:\windows\system32\vboxhook.dll
        Oracle Corporation
        VirtualBox Hook Driver
        .text,.rdata,.data,SHARED,.rsrc,.reloc,


    74680000[0004C000]
      [ M] 346. c:\windows\system32\msctf.dll
        Microsoft Corporation
        MSCTF Server DLL
        .text,.data,.rsrc,.reloc,



  + 00000310(784) RsTray.exe
    00400000[0002C000]
      [AM] 276. c:\program files\rising\ris\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising tray framework
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    74680000[0004C000]
      [ M] 346. c:\windows\system32\msctf.dll
        Microsoft Corporation
        MSCTF Server DLL
        .text,.data,.rsrc,.reloc,


    10000000[00037000]
      [ M] 392. c:\program files\rising\ris\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising tray common service
        .text,.rdata,.data,.rsrc,.reloc,


    7EAE0000[000A1000]
      [AM] 204. c:\windows\system32\urlmon.dll
        Microsoft Corporation
        OLE32 Extensions for Win32
        .text,.orpc,.data,.rsrc,.reloc,


    23700000[00023000]
      [ M] 393. c:\program files\rising\ris\rslang.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B00000[0002E000]
      [ M] 394. c:\program files\rising\ris\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B30000[00019000]
      [ M] 395. c:\program files\rising\ris\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    00DD0000[00019000]
      [ M] 396. c:\program files\rising\ris\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00039000]
      [ M] 397. c:\program files\rising\ris\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    01010000[00014000]
      [ M] 398. c:\program files\rising\ris\monstate.dll
        Beijing Rising Information Technology Co., Ltd.
        MonState
        .text,.rdata,.data,.rsrc,.reloc,


    01040000[00016000]
      [ M] 399. c:\program files\rising\ris\scanevnt.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Event Handler
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[00079000]
      [ M] 400. c:\program files\rising\ris\rsguilib.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    01080000[0004A000]
      [ M] 401. c:\program files\rising\ris\rsconf.dll
        Beijing Rising Information Technology Co., Ltd.
        rsconf Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    010E0000[0000C000]
      [ M] 402. c:\program files\rising\ris\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 403. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 404. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    01120000[00024000]
      [ M] 405. c:\program files\rising\ris\rspalvd.dll
        Beijing Rising Information Technology Co., Ltd.
        rspalvd
        .text,.rdata,.data,.rsrc,.reloc,


    01150000[00083000]
      [ M] 406. c:\program files\rising\ris\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    011F0000[0007D000]
      [ M] 407. c:\program files\rising\ris\mruleui.dll
        Beijing Rising Information Technology Co., Ltd.
        mruleui
        .text,.rdata,.data,.rsrc,.reloc,


    01280000[0006F000]
      [ M] 408. c:\program files\rising\ris\montray.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiVirus 2011
        .text,.rdata,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    01380000[0006E000]
      [ M] 409. c:\program files\rising\ris\rfwtray.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwtray Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    01450000[0004C000]
      [ M] 410. c:\program files\rising\ris\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    014B0000[00013000]
      [ M] 411. c:\program files\rising\ris\usbserv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiVirus 2011
        .text,.rdata,.data,.rsrc,.reloc,


    014E0000[00039000]
      [ M] 412. c:\program files\rising\ris\scantray.dll
        Beijing Rising Information Technology Co., Ltd.
        Scan Tray Program
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 413. c:\program files\rising\ris\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    7E550000[00173000]
      [AM] 202. c:\windows\system32\shdocvw.dll
        Microsoft Corporation
        Shell Doc Object and Control Library
        .text,.data,.rsrc,.reloc,


    75430000[00071000]
      [ M] 321. c:\windows\system32\cryptui.dll
        Microsoft Corporation
        Microsoft Trust UI Provider
        .text,.data,.rsrc,.reloc,


    76C00000[0002E000]
      [ M] 323. c:\windows\system32\wintrust.dll
        Microsoft Corporation
        Microsoft Trust Verification APIs
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    76D70000[00022000]
      [ M] 340. c:\windows\system32\apphelp.dll
        Microsoft Corporation
        Application Compatibility Client Library
        .text,.data,.rsrc,.reloc,


    71800000[0007C000]
      [ M] 414. c:\windows\system32\shdoclc.dll
        Microsoft Corporation
        Shell Doc Object and Control Library
        .rsrc,.reloc,


    01F60000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    74CF0000[00091000]
      [ M] 378. c:\windows\system32\mlang.dll
        Microsoft Corporation
        Multi Language Support DLL
        .text,.data,.rsrc,.reloc,


    71A40000[0000B000]
      [ M] 336. c:\windows\system32\wsock32.dll
        Microsoft Corporation
        Windows Socket 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,


    76060000[00156000]
      [ M] 348. c:\windows\system32\setupapi.dll
        Microsoft Corporation
        Windows Setup API
        .text,.data,.rsrc,.reloc,


    7E210000[002F9000]
      [AM] 206. c:\windows\system32\mshtml.dll
        Microsoft Corporation
        Microsoft (R) HTML Viewer
        .text,.data,.rsrc,.reloc,


    74620000[00027000]
      [ M] 415. c:\windows\system32\msls31.dll
        Microsoft Corporation
        Microsoft Line Services library file
        .text,.data,.rsrc,.reloc,


    76BC0000[0000B000]
      [ M] 416. c:\windows\system32\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.data,.rsrc,.reloc,


    02AC0000[000B9000]
      [ M] 417. c:\program files\rising\ris\dfw.dll
        Beijing Rising Information Technology Co., Ltd.
        DFW Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02B90000[00086000]
      [ M] 418. c:\program files\rising\ris\scanprxy.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanPrxy Module
        .text,.rdata,.data,.rsrc,.reloc,


    02F40000[0002A000]
      [ M] 419. c:\program files\rising\ris\gcompt.dll
        Beijing Rising Information Technology Co., Ltd.
        GeneralC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    031B0000[00085000]
      [ M] 420. c:\program files\rising\ris\rfwlog.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwlog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    74650000[0002A000]
      [ M] 421. c:\windows\system32\msimtf.dll
        Microsoft Corporation
        Active IMM Server DLL
        .text,.data,.rsrc,.reloc,


    03290000[00019000]
      [ M] 422. c:\program files\rising\ris\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    75BC0000[0007D000]
      [ M] 423. c:\windows\system32\jscript.dll
        Microsoft Corporation
        Microsoft (R) JScript
        .text,.data,.rsrc,.reloc,


    73270000[00069000]
      [ M] 424. c:\windows\system32\vbscript.dll
        Microsoft Corporation
        Microsoft (R) VBScript
        .text,.data,.rsrc,.reloc,


    76D10000[00018000]
      [ M] 425. c:\windows\system32\mprapi.dll
        Microsoft Corporation
        Windows NT MP Router Administration DLL
        .text,.data,.rsrc,.reloc,


    77C90000[00032000]
      [ M] 379. c:\windows\system32\activeds.dll
        Microsoft Corporation
        ADs Router Layer DLL
        .text,.data,.rsrc,.reloc,


    76DE0000[00025000]
      [ M] 380. c:\windows\system32\adsldpc.dll
        Microsoft Corporation
        ADs LDAP Provider C DLL
        .text,.data,.rsrc,.reloc,


    76AF0000[00011000]
      [ M] 350. c:\windows\system32\atl.dll
        Microsoft Corporation
        ATL Module for Windows XP (Unicode)
        .text,.data,.rsrc,.reloc,


    76E50000[0000E000]
      [ M] 363. c:\windows\system32\rtutils.dll
        Microsoft Corporation
        Routing Utilities
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    75E00000[000AE000]
      [ M] 369. c:\windows\system32\sxs.dll
        Microsoft Corporation
        Fusion 2.5
        .text,.data,.rsrc,.reloc,


    66B50000[0000C000]
      [ M] 426. c:\windows\system32\imgutil.dll
        Microsoft Corporation
        IE plugin image decoder support DLL
        .text,.data,.rsrc,.reloc,


    5E400000[0000C000]
      [ M] 427. c:\windows\system32\pngfilt.dll
        Microsoft Corporation
        IE PNG plugin image decoder
        .text,.data,.rsrc,.reloc,


    6C140000[00036000]
      [ M] 428. c:\windows\system32\dxtrans.dll
        Microsoft Corporation
        DirectX Media -- DirectX Transform Core
        .text,.data,.rsrc,.reloc,


    6D7C0000[0000A000]
      [ M] 429. c:\windows\system32\ddrawex.dll
        Microsoft Corporation
        Direct Draw Ex
        .text,.data,.rsrc,.reloc,


    736D0000[0004B000]
      [ M] 430. c:\windows\system32\ddraw.dll
        Microsoft Corporation
        Microsoft DirectDraw
        .text,.data,.rsrc,.reloc,


    73B30000[00006000]
      [ M] 431. c:\windows\system32\dciman32.dll
        Microsoft Corporation
        DCI Manager
        .text,.data,.rsrc,.reloc,


    6C180000[0005A000]
      [ M] 432. c:\windows\system32\dxtmsft.dll
        Microsoft Corporation
        DirectX Media -- Image DirectX Transforms
        .text,.data,.rsrc,.reloc,


    76EB0000[0003C000]
      [ M] 433. c:\windows\system32\rasapi32.dll
        Microsoft Corporation
        Remote Access API
        .text,.data,.rsrc,.reloc,


    76E60000[00012000]
      [ M] 434. c:\windows\system32\rasman.dll
        Microsoft Corporation
        Remote Access Connection Manager
        .text,.data,.rsrc,.reloc,


    76E80000[0002F000]
      [ M] 435. c:\windows\system32\tapi32.dll
        Microsoft Corporation
        Microsoft(R) Windows(TM) Telephony API Client DLL
        .text,.data,.rsrc,.reloc,


    72240000[00005000]
      [ M] 436. c:\windows\system32\sensapi.dll
        Microsoft Corporation
        SENS Connectivity API DLL
        .text,.data,.rsrc,.reloc,


    76F90000[00006000]
      [ M] 390. c:\windows\system32\rasadhlp.dll
        Microsoft Corporation
        Remote Access AutoDial Helper
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    76F80000[00008000]
      [ M] 389. c:\windows\system32\winrnr.dll
        Microsoft Corporation
        LDAP RnR Provider DLL
        .text,.data,.rsrc,.reloc,


    65D50000[00007000]
      [ M] 437. c:\windows\system32\jsproxy.dll
        Microsoft Corporation
        JScript Proxy Auto-Configuration
        .text,.data,.rsrc,.reloc,



  + 0000031c(796) ctfmon.exe
    00400000[00006000]
      [AM] 273. c:\windows\system32\ctfmon.exe
        Microsoft Corporation
        CTF Loader
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    74680000[0004C000]
      [ M] 346. c:\windows\system32\msctf.dll
        Microsoft Corporation
        MSCTF Server DLL
        .text,.data,.rsrc,.reloc,


    5FE40000[00031000]
      [ M] 345. c:\windows\system32\msutb.dll
        Microsoft Corporation
        MSUTB Server DLL
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    73640000[0002E000]
      [ M] 337. c:\windows\system32\msctfime.ime
        Microsoft Corporation
        Microsoft Text Frame Work Service IME
        .text,.data,.rsrc,.reloc,



  + 00000320(800) smss.exe
    48580000[0000F000]
      [ M] 438. c:\windows\system32\smss.exe
        Microsoft Corporation
        Windows NT Session Manager
        .text,.data,.rsrc,.reloc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,



  + 00000360(864) csrss.exe
    4A680000[00005000]
      [ M] 439. c:\windows\system32\csrss.exe
        Microsoft Corporation
        Client Server Runtime Process
        .text,.data,.rsrc,.reloc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    75AA0000[0000B000]
      [ M] 440. c:\windows\system32\csrsrv.dll
        Microsoft Corporation
        Client Server Runtime Process
        .text,.data,.rsrc,.reloc,


    75AB0000[00010000]
      [ M] 441. c:\windows\system32\basesrv.dll
        Microsoft Corporation
        Windows NT BASE API Server DLL
        .text,.data,.rsrc,.reloc,


    764E0000[00054000]
      [ M] 442. c:\windows\system32\winsrv.dll
        Microsoft Corporation
        Windows Server DLL
        .text,FE_TEXT,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    75E00000[000AE000]
      [ M] 369. c:\windows\system32\sxs.dll
        Microsoft Corporation
        Fusion 2.5
        .text,.data,.rsrc,.reloc,



  + 00000378(888) winlogon.exe
    01000000[0007D000]
      [ M] 443. c:\windows\system32\winlogon.exe
        Microsoft Corporation
        Windows NT Logon Application
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    77FE0000[00012000]
      [ M] 444. c:\windows\system32\authz.dll
        Microsoft Corporation
        Authorization Framework
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    758A0000[00008000]
      [ M] 445. c:\windows\system32\nddeapi.dll
        Microsoft Corporation
        Network DDE Share Management APIs
        .text,.data,.rsrc,.reloc,


    75890000[0000A000]
      [ M] 446. c:\windows\system32\profmap.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    76BC0000[0000B000]
      [ M] 416. c:\windows\system32\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.data,.rsrc,.reloc,


    76B90000[0000F000]
      [ M] 447. c:\windows\system32\regapi.dll
        Microsoft Corporation
        Registry Configuration APIs
        .text,.data,.rsrc,.reloc,


    76060000[00156000]
      [ M] 348. c:\windows\system32\setupapi.dll
        Microsoft Corporation
        Windows Setup API
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    76C00000[0002E000]
      [ M] 323. c:\windows\system32\wintrust.dll
        Microsoft Corporation
        Microsoft Trust Verification APIs
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    758D0000[000F1000]
      [ M] 448. c:\windows\system32\msgina.dll
        Microsoft Corporation
        Windows NT Logon GINA DLL
        .text,.data,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    73540000[0003D000]
      [ M] 449. c:\windows\system32\odbc32.dll
        Microsoft Corporation
        Microsoft Data Access - ODBC Driver Manager
        .text,.data,.sdbid,.rsrc,.reloc,


    76320000[00047000]
      [AM] 287. c:\windows\system32\comdlg32.dll
        Microsoft Corporation
        Common Dialogs DLL
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    1F840000[00017000]
      [ M] 450. c:\windows\system32\odbcint.dll
        Microsoft Corporation
        Microsoft Data Access - ODBC Resources
        .rsrc,.reloc,


    76E10000[00023000]
      [AM] 19. c:\windows\system32\shsvcs.dll
        Microsoft Corporation
        Windows Shell Services Dll
        .text,.data,.rsrc,.reloc,


    76B80000[00005000]
      [ M] 451. c:\windows\system32\sfc.dll
        Microsoft Corporation
        Windows File Protection
        .text,.data,.rsrc,.reloc,


    76C30000[00028000]
      [ M] 452. c:\windows\system32\sfc_os.dll
        Microsoft Corporation
        Windows ļ
        .text,.data,.rsrc,.reloc,


    76D70000[00022000]
      [ M] 340. c:\windows\system32\apphelp.dll
        Microsoft Corporation
        Application Compatibility Client Library
        .text,.data,.rsrc,.reloc,


    73640000[0002E000]
      [ M] 337. c:\windows\system32\msctfime.ime
        Microsoft Corporation
        Microsoft Text Frame Work Service IME
        .text,.data,.rsrc,.reloc,


    72360000[0001A000]
      [ M] 453. c:\windows\system32\winscard.dll
        Microsoft Corporation
        Microsoft Smart Card API
        .text,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76570000[0001C000]
      [AM] 198. c:\windows\system32\cscdll.dll
        Microsoft Corporation
        Offline Network Agent
        .text,PAGE,.data,.rsrc,.reloc,


    45D20000[00008000]
      [AM] 199. c:\windows\system32\dimsntfy.dll
        Microsoft Corporation
        DIMS Notification Handler
        .text,.data,.rsrc,.reloc,


    758B0000[0001A000]
      [AM] 200. c:\windows\system32\wlnotify.dll
        Microsoft Corporation
        Common DLL to receive Winlogon notifications
        .text,.data,.rsrc,.reloc,


    71A90000[00012000]
      [ M] 376. c:\windows\system32\mpr.dll
        Microsoft Corporation
        Multiple Provider Router DLL
        .text,.data,.rsrc,.reloc,


    72F70000[00026000]
      [ M] 454. c:\windows\system32\winspool.drv
        Microsoft Corporation
        Windows Spooler Driver
        .text,.data,.rsrc,.reloc,


    68000000[00036000]
      [ M] 372. c:\windows\system32\rsaenh.dll
        Microsoft Corporation
        Microsoft Enhanced Cryptographic Provider
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    77C40000[00025000]
      [AM] 311. c:\windows\system32\msv1_0.dll
        Microsoft Corporation
        Microsoft Authentication Package v1.0
        .text,.data,.rsrc,.reloc,


    76760000[0000C000]
      [ M] 455. c:\windows\system32\cryptdll.dll
        Microsoft Corporation
        Cryptography Manager
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    76590000[0004E000]
      [AM] 261. c:\windows\system32\cscui.dll
        Microsoft Corporation
        Client Side Caching UI
        .text,.data,.rsrc,.reloc,


    10000000[000AF000]
      [AM] 194. c:\windows\system32\vboxmrxnp.dll
        Oracle Corporation
        VirtualBox Shared Folders Minirdr NP
        .text,.rdata,.data,.rsrc,.reloc,


    75ED0000[00007000]
      [ M] 381. c:\windows\system32\drprov.dll
        Microsoft Corporation
        Microsoft Terminal Server Network Provider
        .text,.data,.rsrc,.reloc,


    71B90000[0000E000]
      [AM] 25. c:\windows\system32\ntlanman.dll
        Microsoft Corporation
        Microsoft(R) Lan Manager
        .text,.data,.rsrc,.reloc,


    71C50000[00015000]
      [ M] 382. c:\windows\system32\netui0.dll
        Microsoft Corporation
        NT LM UI Common Code - GUI Classes
        .text,.data,.rsrc,.reloc,


    71C10000[00040000]
      [ M] 383. c:\windows\system32\netui1.dll
        Microsoft Corporation
        NT LM UI Common Code - Networking classes
        .text,.data,.rsrc,.reloc,


    71C00000[00007000]
      [ M] 384. c:\windows\system32\netrap.dll
        Microsoft Corporation
        Net Remote Admin Protocol DLL
        .text,.data,.rsrc,.reloc,


    75EE0000[0000A000]
      [AM] 65. c:\windows\system32\davclnt.dll
        Microsoft Corporation
        Web DAV Client DLL
        .text,.data,.rsrc,.reloc,


    71A70000[0000F000]
      [ M] 456. c:\windows\system32\mprui.dll
        Microsoft Corporation
        Multiple Provider
        .text,.data,.rsrc,.reloc,


    71B20000[0004E000]
      [ M] 457. c:\windows\system32\netui2.dll
        Microsoft Corporation
        NT LM UI Common Code - GUI Classes
        .text,.data,.rsrc,.reloc,


    71AB0000[0003E000]
      [ M] 458. c:\windows\system32\netmsg.dll
        Microsoft Corporation
        Net Messages DLL
        .rsrc,.reloc,


    76CB0000[00020000]
      [ M] 459. c:\windows\system32\ntmarta.dll
        Microsoft Corporation
        Windows NT MARTA provider
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    72C90000[00009000]
      [ M] 358. c:\windows\system32\wdmaud.drv
        Microsoft Corporation
        WDM Audio driver mapper
        .text,.data,.rsrc,.reloc,


    72C80000[00008000]
      [ M] 359. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BA0000[00007000]
      [ M] 360. c:\windows\system32\midimap.dll
        Microsoft Corporation
        Microsoft MIDI Mapper
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    013F0000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,



  + 000003a4(932) services.exe
    01000000[0001D000]
      [AM] 17. c:\windows\system32\services.exe
        Microsoft Corporation
        Services and Controller app
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    5F9A0000[0000C000]
      [ M] 460. c:\windows\system32\ncobjapi.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    75FF0000[00065000]
      [ M] 357. c:\windows\system32\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    75840000[0004B000]
      [ M] 461. c:\windows\system32\scesrv.dll
        Microsoft Corporation
        Windows Security Configuration Editor Engine
        .text,.data,.tls,.rsrc,.reloc,


    77FE0000[00012000]
      [ M] 444. c:\windows\system32\authz.dll
        Microsoft Corporation
        Authorization Framework
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    7E1E0000[00020000]
      [ M] 462. c:\windows\system32\umpnpmgr.dll
        Microsoft Corporation
        User-mode Plug-and-Play Service
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    46040000[0000F000]
      [ M] 463. c:\windows\apppatch\acadproc.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    76D70000[00022000]
      [ M] 340. c:\windows\system32\apphelp.dll
        Microsoft Corporation
        Application Compatibility Client Library
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    76CE0000[00011000]
      [ M] 464. c:\windows\system32\eventlog.dll
        Microsoft Corporation
        Event Logging Service
        .text,.data,.rsrc,.reloc,


    76BC0000[0000B000]
      [ M] 416. c:\windows\system32\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,



  + 000003b0(944) lsass.exe
    01000000[00006000]
      [AM] 33. c:\windows\system32\lsass.exe
        Microsoft Corporation
        LSA Shell (Export Version)
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    74480000[000AF000]
      [ M] 465. c:\windows\system32\lsasrv.dll
        Microsoft Corporation
        LSA Server DLL
        .text,.data,.rsrc,.reloc,


    71A90000[00012000]
      [ M] 376. c:\windows\system32\mpr.dll
        Microsoft Corporation
        Multiple Provider Router DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    76770000[00013000]
      [ M] 466. c:\windows\system32\ntdsapi.dll
        Microsoft Corporation
        NT5DS
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    743A0000[00068000]
      [ M] 467. c:\windows\system32\samsrv.dll
        Microsoft Corporation
        SAM Server DLL
        .text,.data,.rsrc,.reloc,


    76760000[0000C000]
      [ M] 455. c:\windows\system32\cryptdll.dll
        Microsoft Corporation
        Cryptography Manager
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    4D200000[0000E000]
      [ M] 468. c:\windows\system32\msprivs.dll
        Microsoft Corporation
        Microsoft Privilege Translations
        .rsrc,.reloc,


    71C70000[0004C000]
      [AM] 313. c:\windows\system32\kerberos.dll
        Microsoft Corporation
        Kerberos Security Package
        .text,.data,.rsrc,.reloc,


    77C40000[00025000]
      [AM] 311. c:\windows\system32\msv1_0.dll
        Microsoft Corporation
        Microsoft Authentication Package v1.0
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    74410000[00065000]
      [ M] 469. c:\windows\system32\netlogon.dll
        Microsoft Corporation
        Net Logon Services DLL
        .text,.data,.rsrc,.reloc,


    76790000[0002E000]
      [AM] 63. c:\windows\system32\w32time.dll
        Microsoft Corporation
        Windows Time Service
        .text,.data,.rsrc,.reloc,


    75FF0000[00065000]
      [ M] 357. c:\windows\system32\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    767C0000[00028000]
      [AM] 308. c:\windows\system32\schannel.dll
        Microsoft Corporation
        TLS / SSL Security Provider
        .text,.data,.rsrc,.reloc,


    7EAC0000[00011000]
      [AM] 314. c:\windows\system32\wdigest.dll
        Microsoft Corporation
        Microsoft Digest Access
        .text,.data,.rsrc,.reloc,


    68000000[00036000]
      [ M] 372. c:\windows\system32\rsaenh.dll
        Microsoft Corporation
        Microsoft Enhanced Cryptographic Provider
        .text,.data,.rsrc,.reloc,


    76060000[00156000]
      [ M] 348. c:\windows\system32\setupapi.dll
        Microsoft Corporation
        Windows Setup API
        .text,.data,.rsrc,.reloc,


    74370000[0002D000]
      [AM] 312. c:\windows\system32\scecli.dll
        Microsoft Corporation
        Windows Security Configuration Editor Client Engine
        .text,.data,.rsrc,.reloc,


    74300000[0000B000]
      [ M] 470. c:\windows\system32\pstorsvc.dll
        Microsoft Corporation
        Protected storage server
        .text,.data,.rsrc,.reloc,


    74320000[0001A000]
      [ M] 471. c:\windows\system32\psbase.dll
        Microsoft Corporation
        Protected Storage default provider
        .text,.data,.rsrc,.reloc,



  + 0000042c(1068) alg.exe
    01000000[0000D000]
      [AM] 1. c:\windows\system32\alg.exe
        Microsoft Corporation
        Application Layer Gateway Service
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    76AF0000[00011000]
      [ M] 350. c:\windows\system32\atl.dll
        Microsoft Corporation
        ATL Module for Windows XP (Unicode)
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    71A40000[0000B000]
      [ M] 336. c:\windows\system32\wsock32.dll
        Microsoft Corporation
        Windows Socket 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    008F0000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,



  + 00000434(1076) caluecc.exe
    00400000[00065000]
      [ M] 472. c:\windows\caluecc.exe
        CODE,DATA,BSS,.idata,.tls,.rdata,.reloc,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    74680000[0004C000]
      [ M] 346. c:\windows\system32\msctf.dll
        Microsoft Corporation
        MSCTF Server DLL
        .text,.data,.rsrc,.reloc,


    73640000[0002E000]
      [ M] 337. c:\windows\system32\msctfime.ime
        Microsoft Corporation
        Microsoft Text Frame Work Service IME
        .text,.data,.rsrc,.reloc,


    10000000[00014000]
      [ M] 386. c:\program files\rising\antispyware\regcall.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,YCIShare,.rsrc,.reloc,



  + 00000454(1108) VBoxService.exe
    00400000[000F2000]
      [AM] 61. c:\windows\system32\vboxservice.exe
        Oracle Corporation
        VirtualBox Guest Additions Service
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    76BC0000[0000B000]
      [ M] 416. c:\windows\system32\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    76CB0000[00020000]
      [ M] 459. c:\windows\system32\ntmarta.dll
        Microsoft Corporation
        Windows NT MARTA provider
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,



  + 00000484(1156) svchost.exe
    01000000[00006000]
      [AM] 2. c:\windows\system32\svchost.exe
        Microsoft Corporation
        Generic Host Process for Win32 Services
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    76CB0000[00020000]
      [ M] 459. c:\windows\system32\ntmarta.dll
        Microsoft Corporation
        Windows NT MARTA provider
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    76230000[00064000]
      [AM] 10. c:\windows\system32\rpcss.dll
        Microsoft Corporation
        Distributed COM Services
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    00870000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    761C0000[00051000]
      [AM] 56. c:\windows\system32\termsrv.dll
        Microsoft Corporation
        Terminal Server Service
        .text,.data,.rsrc,.reloc,


    74ED0000[00006000]
      [ M] 473. c:\windows\system32\icaapi.dll
        Microsoft Corporation
        DLL Interface to TermDD Device Driver
        .text,.data,.rsrc,.reloc,


    76060000[00156000]
      [ M] 348. c:\windows\system32\setupapi.dll
        Microsoft Corporation
        Windows Setup API
        .text,.data,.rsrc,.reloc,


    76C00000[0002E000]
      [ M] 323. c:\windows\system32\wintrust.dll
        Microsoft Corporation
        Microsoft Trust Verification APIs
        .text,.data,.rsrc,.reloc,


    77FE0000[00012000]
      [ M] 444. c:\windows\system32\authz.dll
        Microsoft Corporation
        Authorization Framework
        .text,.data,.rsrc,.reloc,


    75070000[0001F000]
      [ M] 474. c:\windows\system32\mstlsapi.dll
        Microsoft Corporation
        Microsoft? Terminal Server Licensing
        .text,.data,.rsrc,.reloc,


    77C90000[00032000]
      [ M] 379. c:\windows\system32\activeds.dll
        Microsoft Corporation
        ADs Router Layer DLL
        .text,.data,.rsrc,.reloc,


    76DE0000[00025000]
      [ M] 380. c:\windows\system32\adsldpc.dll
        Microsoft Corporation
        ADs LDAP Provider C DLL
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    76AF0000[00011000]
      [ M] 350. c:\windows\system32\atl.dll
        Microsoft Corporation
        ATL Module for Windows XP (Unicode)
        .text,.data,.rsrc,.reloc,


    76B90000[0000F000]
      [ M] 447. c:\windows\system32\regapi.dll
        Microsoft Corporation
        Registry Configuration APIs
        .text,.data,.rsrc,.reloc,


    68000000[00036000]
      [ M] 372. c:\windows\system32\rsaenh.dll
        Microsoft Corporation
        Microsoft Enhanced Cryptographic Provider
        .text,.data,.rsrc,.reloc,


    76D70000[00022000]
      [ M] 340. c:\windows\system32\apphelp.dll
        Microsoft Corporation
        Application Compatibility Client Library
        .text,.data,.rsrc,.reloc,



  + 000004e4(1252) svchost.exe
    01000000[00006000]
      [AM] 2. c:\windows\system32\svchost.exe
        Microsoft Corporation
        Generic Host Process for Win32 Services
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    76230000[00064000]
      [AM] 10. c:\windows\system32\rpcss.dll
        Microsoft Corporation
        Distributed COM Services
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    00870000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    68000000[00036000]
      [ M] 372. c:\windows\system32\rsaenh.dll
        Microsoft Corporation
        Microsoft Enhanced Cryptographic Provider
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    76F80000[00008000]
      [ M] 389. c:\windows\system32\winrnr.dll
        Microsoft Corporation
        LDAP RnR Provider DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    76F90000[00006000]
      [ M] 390. c:\windows\system32\rasadhlp.dll
        Microsoft Corporation
        Remote Access AutoDial Helper
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,



  + 00000574(1396) RsMgrSvc.exe
    00400000[00014000]
      [AM] 42. c:\program files\rising\rsd\rsmgrsvc.exe
        Beijing Rising Information Technology Co., Ltd.
        RsMgrSvc Application
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    10000000[0002E000]
      [ M] 475. c:\program files\rising\rsd\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00A20000[00019000]
      [ M] 476. c:\program files\rising\rsd\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,



  + 00000580(1408) RavMonD.exe
    00400000[00029000]
      [AM] 43. c:\program files\rising\ris\ravmond.exe
        Beijing Rising Information Technology Co., Ltd.
        ravmond
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    10000000[00035000]
      [ M] 477. c:\program files\rising\ris\combase.dll
        Beijing Rising Information Technology Co., Ltd.
        combase
        .text,.rdata,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    01300000[0004A000]
      [ M] 401. c:\program files\rising\ris\rsconf.dll
        Beijing Rising Information Technology Co., Ltd.
        rsconf Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00A60000[00017000]
      [ M] 478. c:\program files\rising\ris\scansrvp.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSrvP Module
        .text,.rdata,.data,.rsrc,.reloc,


    01350000[00086000]
      [ M] 479. c:\program files\rising\ris\cnt09.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt09 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    013E0000[00019000]
      [ M] 480. c:\program files\rising\ris\moncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        MonComm
        .text,.rdata,.data,.rsrc,.reloc,


    01410000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    01960000[0001C000]
      [ M] 481. c:\program files\rising\ris\monbase.dll
        Beijing Rising Information Technology Co., Ltd.
        MonBase
        .text,.rdata,.data,.rsrc,.reloc,


    01990000[00081000]
      [ M] 482. c:\program files\rising\ris\rslog.dll
        Beijing Rising Information Technology Co., Ltd.
        rslog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01A40000[00028000]
      [ M] 483. c:\program files\rising\ris\rsstore.dll
        Beijing Rising Information Technology Co., Ltd.
        RSStore
        .text,.rdata,.data,.rsrc,.reloc,


    01C90000[0001C000]
      [ M] 484. c:\program files\rising\ris\mondrvd.dll
        Beijing Rising Information Technology Co., Ltd.
        mondrvd
        .text,.rdata,.data,.rsrc,.reloc,


    01CB0000[00037000]
      [ M] 485. c:\program files\rising\ris\defmon.dll
        Beijing Rising Information Technology Co., Ltd.
        DefMon
        .text,.rdata,.data,.rsrc,.reloc,


    76BC0000[0000B000]
      [ M] 416. c:\windows\system32\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.data,.rsrc,.reloc,


    01D00000[00010000]
      [ M] 486. c:\program files\rising\ris\moncom08.dll
        Beijing Rising Information Technology Co., Ltd.
        MonCom08
        .text,.rdata,.data,.rsrc,.reloc,


    01D20000[00018000]
      [ M] 487. c:\program files\rising\ris\taskplug.dll
        Beijing Rising Information Technology Co., Ltd.
        TaskPlug
        .text,.rdata,.data,.rsrc,.reloc,


    01E50000[00010000]
      [ M] 488. c:\program files\rising\ris\mondrvm.dll
        Beijing Rising Information Technology Co., Ltd.
        mondrvm
        .text,.rdata,.data,.rsrc,.reloc,


    01E70000[0007F000]
      [ M] 489. c:\program files\rising\ris\monrule.dll
        Beijing Rising Information Technology Co., Ltd.
        MonRule
        .text,.rdata,.data,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    01F10000[0002A000]
      [ M] 490. c:\program files\rising\ris\filemon.dll
        Beijing Rising Information Technology Co., Ltd.
        Filemon
        .text,.rdata,.data,.rsrc,.reloc,


    01F50000[00032000]
      [ M] 491. c:\program files\rising\ris\mailmon.dll
        Beijing Rising Information Technology Co., Ltd.
        MailMon
        .text,.rdata,.data,.rsrc,.reloc,


    01FC0000[00085000]
      [ M] 420. c:\program files\rising\ris\rfwlog.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwlog Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02060000[0000C000]
      [ M] 402. c:\program files\rising\ris\rfwrule.dll
        Beijing Rising Information Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 403. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 404. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    02080000[0005B000]
      [ M] 492. c:\program files\rising\ris\rfwsrv.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Personal FireWall Service
        .text,.rdata,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    020E0000[00019000]
      [ M] 395. c:\program files\rising\ris\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    669A0000[0000B000]
      [ M] 493. c:\windows\system32\inetmib1.dll
        Microsoft Corporation
        Microsoft MIB-II subagent
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    71EE0000[00008000]
      [ M] 494. c:\windows\system32\snmpapi.dll
        Microsoft Corporation
        SNMP Utility Library
        .text,.data,.rsrc,.reloc,


    71A40000[0000B000]
      [ M] 336. c:\windows\system32\wsock32.dll
        Microsoft Corporation
        Windows Socket 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    021C0000[0001B000]
      [ M] 495. c:\program files\rising\ris\mports.dll
        Beijing Rising Information Technology Co., Ltd.
        get ports list
        .text,.rdata,.data,.rsrc,.reloc,


    021F0000[00011000]
      [ M] 496. c:\program files\rising\ris\rfwdrvc.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwdrvc Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02720000[00014000]
      [ M] 497. c:\program files\rising\ris\urlrule.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware UrlRule  Library
        .text,.rdata,.data,.rsrc,.reloc,


    02750000[0003A000]
      [ M] 498. c:\program files\rising\ris\recomp.dll
        Beijing Rising Information Technology Co., Ltd.
        component manager Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    027A0000[00083000]
      [ M] 406. c:\program files\rising\ris\rsnetsvr.dll
        Beijing Rising Information Technology Co., Ltd.
        rsnetsvr
        .text,.rdata,.data,.rsrc,.reloc,


    02890000[0002E000]
      [ M] 394. c:\program files\rising\ris\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02840000[00039000]
      [ M] 499. c:\program files\rising\ris\refs.dll
        Beijing Rising Information Technology Co., Ltd.
        filesystem Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02B10000[00033000]
      [ M] 500. c:\program files\rising\ris\viruslib.dll
        Beijing Rising Information Technology Co., Ltd.
        VirusLib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    02C80000[00029000]
      [ M] 501. c:\program files\rising\ris\relibldr.dll
        Beijing Rising Information Technology Co., Ltd.
        libloader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    02D00000[0004D000]
      [ M] 502. c:\program files\rising\ris\rfwproxy.dll
        Beijing Rising Information Technology Co., Ltd.
        tcpproxy Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,


    23700000[00023000]
      [ M] 393. c:\program files\rising\ris\rslang.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    039A0000[00084000]
      [ M] 503. c:\program files\rising\ris\rsindent.dll
        Beijing Rising Information Technology Co., Ltd.
        rsindent
        .text,.rdata,.data,.rsrc,.reloc,


    03E40000[0001D000]
      [ M] 504. c:\program files\rising\ris\cnt08.dll
        Beijing Rising Information Technology Co., Ltd.
        cnt08 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    041C0000[00019000]
      [ M] 396. c:\program files\rising\ris\proccomm.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcComm Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    04820000[00020000]
      [ M] 505. c:\program files\rising\ris\hooksys.dll
        Beijing Rising Information Technology Co., Ltd.
        Hooksys.dll
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    048D0000[0001F000]
      [ M] 506. c:\program files\rising\ris\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    048F0000[00024000]
      [ M] 507. c:\program files\rising\ris\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    04C40000[0002A000]
      [ M] 508. c:\program files\rising\ris\rstask.dll
        Beijing Rising Information Technology Co., Ltd.
        RsTask Control
        .text,.rdata,.data,.rsrc,.reloc,


    04C80000[00018000]
      [ M] 509. c:\program files\rising\ris\rsstub.dll
        Beijing Rising Information Technology Co., Ltd.
        rsstub Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    05520000[0000D000]
      [ M] 510. c:\program files\rising\ris\hooktdi.dll
        Beijing Rising Information Technology Co., Ltd.
        hooktdi.dll
        .text,.rdata,.data,.rsrc,.reloc,


    05650000[00091000]
      [ M] 511. c:\program files\rising\ris\bacore.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising MBA DLL
        .text,.rdata,.data,.rsrc,.reloc,


    05E70000[00016000]
      [ M] 512. c:\program files\rising\ris\bawhite.dll
        Beijing Rising Information Technology Co., Ltd.
        bawhite Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    06090000[0001C000]
      [ M] 513. c:\program files\rising\ris\scanadd.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Scan Service Addon
        .text,.rdata,.data,.rsrc,.reloc,


    064E0000[00046000]
      [ M] 514. c:\program files\rising\ris\scanner.dll
        Beijing Rising Information Technology Co., Ltd.
        RsScanner Module
        .text,.rdata,.data,.rsrc,.reloc,


    07A60000[00012000]
      [ M] 515. c:\program files\rising\ris\rfwdrv.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwdrv.dll
        .text,.rdata,.data,.rsrc,.reloc,


    07CC0000[00011000]
      [ M] 516. c:\program files\rising\ris\rfwarp.dll
        Beijing Rising Information Technology Co., Ltd.
        rfwarp.dll
        .text,.rdata,.data,.rsrc,.reloc,


    082F0000[0001B000]
      [ M] 517. c:\program files\rising\ris\scansrv.dll
        Beijing Rising Information Technology Co., Ltd.
        ScanSrv Module
        .text,.rdata,.data,.rsrc,.reloc,


    09D70000[0006E000]
      [ M] 518. c:\program files\rising\ris\scanpe.dll
        Beijing Rising Information Technology Co., Ltd.
        PEEngine Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    68000000[00036000]
      [ M] 372. c:\windows\system32\rsaenh.dll
        Microsoft Corporation
        Microsoft Enhanced Cryptographic Provider
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    00ED0000[0002D000]
      [ M] 519. c:\program files\rising\ris\pearc.dll
        Beijing Rising Information Technology Co., Ltd.
        pearchive Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00F60000[00043000]
      [ M] 520. c:\program files\rising\ris\engext.dll
        Beijing Rising Information Technology Co., Ltd.
        engpe
        .text,.rdata,.data,.rsrc,.reloc,


    76D10000[00018000]
      [ M] 425. c:\windows\system32\mprapi.dll
        Microsoft Corporation
        Windows NT MP Router Administration DLL
        .text,.data,.rsrc,.reloc,


    77C90000[00032000]
      [ M] 379. c:\windows\system32\activeds.dll
        Microsoft Corporation
        ADs Router Layer DLL
        .text,.data,.rsrc,.reloc,


    76DE0000[00025000]
      [ M] 380. c:\windows\system32\adsldpc.dll
        Microsoft Corporation
        ADs LDAP Provider C DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    76AF0000[00011000]
      [ M] 350. c:\windows\system32\atl.dll
        Microsoft Corporation
        ATL Module for Windows XP (Unicode)
        .text,.data,.rsrc,.reloc,


    76E50000[0000E000]
      [ M] 363. c:\windows\system32\rtutils.dll
        Microsoft Corporation
        Routing Utilities
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    76060000[00156000]
      [ M] 348. c:\windows\system32\setupapi.dll
        Microsoft Corporation
        Windows Setup API
        .text,.data,.rsrc,.reloc,


    00A40000[0000E000]
      [ M] 521. c:\program files\rising\ris\urllib.dll
        Beijing Rising Information Technology Co., Ltd.
        Urllib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    76C00000[0002E000]
      [ M] 323. c:\windows\system32\wintrust.dll
        Microsoft Corporation
        Microsoft Trust Verification APIs
        .text,.data,.rsrc,.reloc,



  + 00000594(1428) svchost.exe
    01000000[00006000]
      [AM] 2. c:\windows\system32\svchost.exe
        Microsoft Corporation
        Generic Host Process for Win32 Services
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    71A40000[0000B000]
      [ M] 336. c:\windows\system32\wsock32.dll
        Microsoft Corporation
        Windows Socket 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    76CB0000[00020000]
      [ M] 459. c:\windows\system32\ntmarta.dll
        Microsoft Corporation
        Windows NT MARTA provider
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    00A90000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    76E10000[00023000]
      [AM] 19. c:\windows\system32\shsvcs.dll
        Microsoft Corporation
        Windows Shell Services Dll
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    7CC90000[00021000]
      [AM] 11. c:\windows\system32\dhcpcsvc.dll
        Microsoft Corporation
        DHCP Client Service
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,


    76AF0000[00011000]
      [ M] 350. c:\windows\system32\atl.dll
        Microsoft Corporation
        ATL Module for Windows XP (Unicode)
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    76B40000[00032000]
      [AM] 46. c:\windows\system32\schedsvc.dll
        Microsoft Corporation
        Task Scheduler Engine
        .text,.data,.rsrc,.reloc,


    76770000[00013000]
      [ M] 466. c:\windows\system32\ntdsapi.dll
        Microsoft Corporation
        NT5DS
        .text,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    76060000[00156000]
      [ M] 348. c:\windows\system32\setupapi.dll
        Microsoft Corporation
        Windows Setup API
        .text,.data,.rsrc,.reloc,


    77C40000[00025000]
      [AM] 311. c:\windows\system32\msv1_0.dll
        Microsoft Corporation
        Microsoft Authentication Package v1.0
        .text,.data,.rsrc,.reloc,


    76760000[0000C000]
      [ M] 455. c:\windows\system32\cryptdll.dll
        Microsoft Corporation
        Cryptography Manager
        .text,.data,.rsrc,.reloc,


    76C00000[0002E000]
      [ M] 323. c:\windows\system32\wintrust.dll
        Microsoft Corporation
        Microsoft Trust Verification APIs
        .text,.data,.rsrc,.reloc,


    74EB0000[00005000]
      [ M] 522. c:\windows\system32\msidle.dll
        Microsoft Corporation
        User Idle Monitor
        .text,.data,.rsrc,.reloc,


    70DE0000[0000D000]
      [AM] 4. c:\windows\system32\audiosrv.dll
        Microsoft Corporation
        Windows Audio Service
        .text,.data,.rsrc,.reloc,


    76850000[00023000]
      [AM] 24. c:\windows\system32\wkssvc.dll
        Microsoft Corporation
        Workstation Service DLL
        .text,.data,.rsrc,.reloc,


    75EB0000[00012000]
      [AM] 9. c:\windows\system32\cryptsvc.dll
        Microsoft Corporation
        Cryptographic Services
        .text,.data,.rsrc,.reloc,


    752B0000[00030000]
      [ M] 523. c:\windows\system32\certcli.dll
        Microsoft Corporation
        Microsoft(R) Certificate Services Client
        .text,.orpc,.data,.rsrc,.reloc,


    75430000[00071000]
      [ M] 321. c:\windows\system32\cryptui.dll
        Microsoft Corporation
        Microsoft Trust UI Provider
        .text,.data,.rsrc,.reloc,


    5DF20000[00106000]
      [ M] 524. c:\windows\system32\esent.dll
        Microsoft Corporation
        ݿ洢
        .text,.data,cachelin,.rsrc,.reloc,


    768A0000[00044000]
      [AM] 18. c:\windows\system32\es.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    68000000[00036000]
      [ M] 372. c:\windows\system32\rsaenh.dll
        Microsoft Corporation
        Microsoft Enhanced Cryptographic Provider
        .text,.data,.rsrc,.reloc,


    74FF0000[0001A000]
      [AM] 23. c:\windows\system32\srvsvc.dll
        Microsoft Corporation
        Server Service DLL
        .text,.data,.rsrc,.reloc,


    77CD0000[00033000]
      [AM] 34. c:\windows\system32\netman.dll
        Microsoft Corporation
        Network Connections Manager
        .text,.data,.rsrc,.reloc,


    76D10000[00018000]
      [ M] 425. c:\windows\system32\mprapi.dll
        Microsoft Corporation
        Windows NT MP Router Administration DLL
        .text,.data,.rsrc,.reloc,


    77C90000[00032000]
      [ M] 379. c:\windows\system32\activeds.dll
        Microsoft Corporation
        ADs Router Layer DLL
        .text,.data,.rsrc,.reloc,


    76DE0000[00025000]
      [ M] 380. c:\windows\system32\adsldpc.dll
        Microsoft Corporation
        ADs LDAP Provider C DLL
        .text,.data,.rsrc,.reloc,


    76E50000[0000E000]
      [ M] 363. c:\windows\system32\rtutils.dll
        Microsoft Corporation
        Routing Utilities
        .text,.data,.rsrc,.reloc,


    7DE40000[00199000]
      [AM] 238. c:\windows\system32\netshell.dll
        Microsoft Corporation
        Network Connections Shell
        .text,.orpc,.data,.rsrc,.reloc,


    76BD0000[0002D000]
      [ M] 361. c:\windows\system32\credui.dll
        Microsoft Corporation
        Credential Manager User Interface
        .text,.data,.rsrc,.reloc,


    42E00000[0000A000]
      [ M] 362. c:\windows\system32\dot3api.dll
        Microsoft Corporation
        802.3 Զ API
        .text,.data,.rsrc,.reloc,


    4A5C0000[00006000]
      [ M] 364. c:\windows\system32\dot3dlg.dll
        Microsoft Corporation
        802.3 UI 
        .text,.data,.rsrc,.reloc,


    5A990000[00028000]
      [ M] 365. c:\windows\system32\onex.dll
        Microsoft Corporation
        IEEE 802.1X 󷽿
        .text,.data,.rsrc,.reloc,


    4A820000[00022000]
      [ M] 366. c:\windows\system32\eappcfg.dll
        Microsoft Corporation
        EAP Ե
        .text,.data,.rsrc,.reloc,


    75FF0000[00065000]
      [ M] 357. c:\windows\system32\msvcp60.dll
        Microsoft Corporation
        Microsoft (R) C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    582E0000[0000E000]
      [ M] 367. c:\windows\system32\eappprxy.dll
        Microsoft Corporation
        Microsoft EAPHost Peer Client DLL
        .text,.data,.rsrc,.reloc,


    76EB0000[0003C000]
      [ M] 433. c:\windows\system32\rasapi32.dll
        Microsoft Corporation
        Remote Access API
        .text,.data,.rsrc,.reloc,


    76E60000[00012000]
      [ M] 434. c:\windows\system32\rasman.dll
        Microsoft Corporation
        Remote Access Connection Manager
        .text,.data,.rsrc,.reloc,


    76E80000[0002F000]
      [ M] 435. c:\windows\system32\tapi32.dll
        Microsoft Corporation
        Microsoft(R) Windows(TM) Telephony API Client DLL
        .text,.data,.rsrc,.reloc,


    72FA0000[00010000]
      [ M] 525. c:\windows\system32\wzcsapi.dll
        Microsoft Corporation
        Wireless Zero Configuration service API
        .text,.data,.rsrc,.reloc,


    7DDB0000[0008C000]
      [AM] 72. c:\windows\system32\wzcsvc.dll
        Microsoft Corporation
        Wireless Zero Configuration Service
        .text,.data,.rsrc,.reloc,


    76D00000[00004000]
      [ M] 526. c:\windows\system32\wmi.dll
        Microsoft Corporation
        WMI DC and DP functionality
        .text,.rsrc,.reloc,


    4A340000[0000B000]
      [ M] 527. c:\windows\system32\eapolqec.dll
        Microsoft Corporation
        Microsoft EAPOL NAP ǿƿͻ
        .text,.data,.rsrc,.reloc,


    4A5A0000[00016000]
      [ M] 528. c:\windows\system32\qutil.dll
        Microsoft Corporation
        ʵù
        .text,.orpc,.data,.rsrc,.reloc,


    72260000[0000D000]
      [AM] 48. c:\windows\system32\sens.dll
        Microsoft Corporation
        System Event Notification Service (SENS)
        .text,.data,.rsrc,.reloc,


    67180000[00028000]
      [AM] 66. c:\windows\system32\wbem\wmisvc.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    75340000[0006D000]
      [ M] 529. c:\windows\system32\vssapi.dll
        Microsoft Corporation
        Microsoft? Volume Shadow Copy Requestor/Writer Services API DLL
        .text,.data,.rsrc,.reloc,


    75E00000[000AE000]
      [ M] 369. c:\windows\system32\sxs.dll
        Microsoft Corporation
        Fusion 2.5
        .text,.data,.rsrc,.reloc,


    75690000[0013C000]
      [ M] 530. c:\windows\system32\comsvcs.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    75090000[00014000]
      [ M] 531. c:\windows\system32\colbact.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    75050000[00013000]
      [ M] 532. c:\windows\system32\mtxclu.dll
        Microsoft Corporation
        MS DTC amd MTS clustering support DLL
        .text,.data,.rsrc,.reloc,


    762A0000[00012000]
      [ M] 533. c:\windows\system32\clusapi.dll
        Microsoft Corporation
        Cluster API Library
        .text,.data,.rsrc,.reloc,


    75010000[00012000]
      [ M] 534. c:\windows\system32\resutils.dll
        Microsoft Corporation
        Microsoft Cluster Resource Utility DLL
        .text,.data,.rsrc,.reloc,


    75030000[00019000]
      [ M] 535. c:\windows\system32\mtxoci.dll
        Microsoft Corporation
        Microsoft database support DLL for Oracle
        .text,.data,.rsrc,.reloc,


    76BA0000[00016000]
      [AM] 6. c:\windows\system32\browser.dll
        Microsoft Corporation
        Computer Browser Service DLL
        .text,.data,.rsrc,.reloc,


    66700000[00052000]
      [AM] 49. c:\windows\system32\ipnathlp.dll
        Microsoft Corporation
        Microsoft NAT Helper Components
        .text,.data,.rsrc,.reloc,


    77FE0000[00012000]
      [ M] 444. c:\windows\system32\authz.dll
        Microsoft Corporation
        Authorization Framework
        .text,.data,.rsrc,.reloc,


    75D00000[00085000]
      [ M] 536. c:\windows\system32\wbem\wbemcore.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    75270000[0003F000]
      [ M] 537. c:\windows\system32\wbem\esscli.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    751F0000[00037000]
      [ M] 538. c:\windows\system32\wbem\wbemcomn.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    755F0000[00076000]
      [ M] 539. c:\windows\system32\wbem\fastprox.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    76F90000[00006000]
      [ M] 390. c:\windows\system32\rasadhlp.dll
        Microsoft Corporation
        Remote Access AutoDial Helper
        .text,.data,.rsrc,.reloc,


    74F80000[00019000]
      [ M] 540. c:\windows\system32\wbem\wmiutils.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    75160000[0002F000]
      [ M] 541. c:\windows\system32\wbem\repdrvfs.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    3FCC0000[00072000]
      [ M] 542. c:\windows\system32\wbem\wmiprvsd.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    5F9A0000[0000C000]
      [ M] 460. c:\windows\system32\ncobjapi.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    752F0000[00046000]
      [ M] 543. c:\windows\system32\wbem\wbemess.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,


    754B0000[00096000]
      [ M] 544. c:\windows\system32\rasdlg.dll
        Microsoft Corporation
        Remote Access Common Dialog API
        .text,.data,.rsrc,.reloc,


    5F970000[0000E000]
      [ M] 545. c:\windows\system32\wbem\ncprov.dll
        Microsoft Corporation
        Non-COM WMI Event Provision APIs
        .text,.data,.rsrc,.reloc,


    76D70000[00022000]
      [ M] 340. c:\windows\system32\apphelp.dll
        Microsoft Corporation
        Application Compatibility Client Library
        .text,.data,.rsrc,.reloc,


    74E30000[0000E000]
      [ M] 546. c:\windows\system32\wbem\wbemsvc.dll
        Microsoft Corporation
        WMI
        .text,.orpc,.data,.rsrc,.reloc,


    7E550000[00173000]
      [AM] 202. c:\windows\system32\shdocvw.dll
        Microsoft Corporation
        Shell Doc Object and Control Library
        .text,.data,.rsrc,.reloc,


    7EAE0000[000A1000]
      [AM] 204. c:\windows\system32\urlmon.dll
        Microsoft Corporation
        OLE32 Extensions for Win32
        .text,.orpc,.data,.rsrc,.reloc,


    71800000[0007C000]
      [ M] 414. c:\windows\system32\shdoclc.dll
        Microsoft Corporation
        Shell Doc Object and Control Library
        .rsrc,.reloc,


    74CF0000[00091000]
      [ M] 378. c:\windows\system32\mlang.dll
        Microsoft Corporation
        Multi Language Support DLL
        .text,.data,.rsrc,.reloc,


    72240000[00005000]
      [ M] 436. c:\windows\system32\sensapi.dll
        Microsoft Corporation
        SENS Connectivity API DLL
        .text,.data,.rsrc,.reloc,


    76F80000[00008000]
      [ M] 389. c:\windows\system32\winrnr.dll
        Microsoft Corporation
        LDAP RnR Provider DLL
        .text,.data,.rsrc,.reloc,


    65D50000[00007000]
      [ M] 437. c:\windows\system32\jsproxy.dll
        Microsoft Corporation
        JScript Proxy Auto-Configuration
        .text,.data,.rsrc,.reloc,


    10000000[00019000]
      [ M] 422. c:\program files\rising\ris\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 403. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 404. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    75BC0000[0007D000]
      [ M] 423. c:\windows\system32\jscript.dll
        Microsoft Corporation
        Microsoft (R) JScript
        .text,.data,.rsrc,.reloc,


    73270000[00069000]
      [ M] 424. c:\windows\system32\vbscript.dll
        Microsoft Corporation
        Microsoft (R) VBScript
        .text,.data,.rsrc,.reloc,


    7E210000[002F9000]
      [AM] 206. c:\windows\system32\mshtml.dll
        Microsoft Corporation
        Microsoft (R) HTML Viewer
        .text,.data,.rsrc,.reloc,


    74620000[00027000]
      [ M] 415. c:\windows\system32\msls31.dll
        Microsoft Corporation
        Microsoft Line Services library file
        .text,.data,.rsrc,.reloc,


    76BC0000[0000B000]
      [ M] 416. c:\windows\system32\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.data,.rsrc,.reloc,


    74E50000[00008000]
      [ M] 547. c:\windows\system32\wbem\wbemprox.dll
        Microsoft Corporation
        WMI
        .text,.data,.rsrc,.reloc,



  + 00000610(1552) svchost.exe
    01000000[00006000]
      [AM] 2. c:\windows\system32\svchost.exe
        Microsoft Corporation
        Generic Host Process for Win32 Services
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    76740000[0000D000]
      [AM] 14. c:\windows\system32\dnsrslvr.dll
        Microsoft Corporation
        DNS Caching Resolver Service
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    68000000[00036000]
      [ M] 372. c:\windows\system32\rsaenh.dll
        Microsoft Corporation
        Microsoft Enhanced Cryptographic Provider
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,



  + 000006f0(1776) svchost.exe
    01000000[00006000]
      [AM] 2. c:\windows\system32\svchost.exe
        Microsoft Corporation
        Generic Host Process for Win32 Services
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    76CB0000[00020000]
      [ M] 459. c:\windows\system32\ntmarta.dll
        Microsoft Corporation
        Windows NT MARTA provider
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    00870000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    74BA0000[00006000]
      [AM] 26. c:\windows\system32\lmhsvc.dll
        Microsoft Corporation
        TCPIP NetBios Transport Services DLL
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,



  + 000007a4(1956) spoolsv.exe
    01000000[00010000]
      [AM] 50. c:\windows\system32\spoolsv.exe
        Microsoft Corporation
        Spooler SubSystem App
        .text,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    5CC30000[00026000]
      [ M] 325. c:\windows\system32\shimeng.dll
        Microsoft Corporation
        Shim Engine DLL
        .text,.data,.rsrc,.reloc,


    58FB0000[001CA000]
      [ M] 326. c:\windows\apppatch\acgenral.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77BB0000[00015000]
      [ M] 328. c:\windows\system32\msacm32.dll
        Microsoft Corporation
        Microsoft ACM Audio Filter
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    5D170000[0009A000]
      [ M] 333. c:\windows\system32\comctl32.dll
        Microsoft Corporation
        Common Controls Library
        .text,.data,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    74240000[00015000]
      [ M] 548. c:\windows\system32\spoolss.dll
        Microsoft Corporation
        Spooler SubSystem DLL
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    76F90000[00006000]
      [ M] 390. c:\windows\system32\rasadhlp.dll
        Microsoft Corporation
        Remote Access AutoDial Helper
        .text,.data,.rsrc,.reloc,


    74C10000[00056000]
      [AM] 304. c:\windows\system32\localspl.dll
        Microsoft Corporation
        Local Spooler DLL
        .text,.data,.rsrc,.reloc,


    76C30000[00028000]
      [ M] 452. c:\windows\system32\sfc_os.dll
        Microsoft Corporation
        Windows ļ
        .text,.data,.rsrc,.reloc,


    76C00000[0002E000]
      [ M] 323. c:\windows\system32\wintrust.dll
        Microsoft Corporation
        Microsoft Trust Verification APIs
        .text,.data,.rsrc,.reloc,


    72F70000[00026000]
      [ M] 454. c:\windows\system32\winspool.drv
        Microsoft Corporation
        Windows Spooler Driver
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    72390000[0000E000]
      [AM] 305. c:\windows\system32\tcpmon.dll
        Microsoft Corporation
        Standard TCP/IP Port Monitor DLL
        .text,.data,.rsrc,.reloc,


    72380000[00007000]
      [AM] 306. c:\windows\system32\usbmon.dll
        Microsoft Corporation
        Standard Dynamic Printing Port Monitor DLL
        .text,.data,.rsrc,.reloc,


    3F420000[0001B000]
      [ M] 549. c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
        Microsoft Corporation
        Print Filter Pipeline Proxy
        .text,.orpc,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    76F80000[00008000]
      [ M] 389. c:\windows\system32\winrnr.dll
        Microsoft Corporation
        LDAP RnR Provider DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    75AC0000[00024000]
      [ M] 550. c:\windows\system32\win32spl.dll
        Microsoft Corporation
        32-bit Spooler API DLL
        .text,.data,.rsrc,.reloc,


    71C00000[00007000]
      [ M] 384. c:\windows\system32\netrap.dll
        Microsoft Corporation
        Net Remote Admin Protocol DLL
        .text,.data,.rsrc,.reloc,


    76770000[00013000]
      [ M] 466. c:\windows\system32\ntdsapi.dll
        Microsoft Corporation
        NT5DS
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    74260000[00015000]
      [ M] 551. c:\windows\system32\inetpp.dll
        Microsoft Corporation
        Internet Print Provider DLL
        .text,.data,.rsrc,.reloc,


    01010000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,



  + 00000e60(3680) rstray.exe
    00400000[00034000]
      [AM] 277. c:\program files\rising\antispyware\rstray.exe
        Beijing Rising Information Technology Co., Ltd.
        RSTray
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    10000000[0004C000]
      [ M] 552. c:\program files\rising\antispyware\rsmginfo.dll
        Beijing Rising Information Technology Co., Ltd.
        rsmginfo
        .text,.rdata,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    74680000[0004C000]
      [ M] 346. c:\windows\system32\msctf.dll
        Microsoft Corporation
        MSCTF Server DLL
        .text,.data,.rsrc,.reloc,


    73640000[0002E000]
      [ M] 337. c:\windows\system32\msctfime.ime
        Microsoft Corporation
        Microsoft Text Frame Work Service IME
        .text,.data,.rsrc,.reloc,


    76AF0000[00011000]
      [ M] 350. c:\windows\system32\atl.dll
        Microsoft Corporation
        ATL Module for Windows XP (Unicode)
        .text,.data,.rsrc,.reloc,


    00D00000[00014000]
      [ M] 386. c:\program files\rising\antispyware\regcall.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,YCIShare,.rsrc,.reloc,


    23800000[00039000]
      [ M] 553. c:\program files\rising\antispyware\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    00D40000[00024000]
      [ M] 554. c:\program files\rising\antispyware\comserv.dll
        Beijing Rising Information Technology Co., Ltd.
        .text,.rdata,.data,.rsrc,.reloc,


    00D70000[00019000]
      [ M] 555. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 556. c:\program files\rising\antispyware\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 557. c:\program files\rising\antispyware\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    23700000[00026000]
      [ M] 558. c:\program files\rising\antispyware\rscommon.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising Common Function Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    00DC0000[0002D000]
      [ M] 559. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    010C0000[00022000]
      [ M] 560. c:\program files\rising\antispyware\rsxml1.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 561. c:\program files\rising\antispyware\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01130000[00078000]
      [ M] 562. c:\program files\rising\antispyware\runiep.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware tray
        .text,.rdata,.data,.rsrc,.reloc,


    011B0000[00034000]
      [ M] 563. c:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    011F0000[0001F000]
      [ M] 564. c:\program files\rising\antispyware\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01210000[00024000]
      [ M] 565. c:\program files\rising\antispyware\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    71A40000[0000B000]
      [ M] 336. c:\windows\system32\wsock32.dll
        Microsoft Corporation
        Windows Socket 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    76EB0000[0003C000]
      [ M] 433. c:\windows\system32\rasapi32.dll
        Microsoft Corporation
        Remote Access API
        .text,.data,.rsrc,.reloc,


    76E60000[00012000]
      [ M] 434. c:\windows\system32\rasman.dll
        Microsoft Corporation
        Remote Access Connection Manager
        .text,.data,.rsrc,.reloc,


    76E80000[0002F000]
      [ M] 435. c:\windows\system32\tapi32.dll
        Microsoft Corporation
        Microsoft(R) Windows(TM) Telephony API Client DLL
        .text,.data,.rsrc,.reloc,


    76E50000[0000E000]
      [ M] 363. c:\windows\system32\rtutils.dll
        Microsoft Corporation
        Routing Utilities
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    72240000[00005000]
      [ M] 436. c:\windows\system32\sensapi.dll
        Microsoft Corporation
        SENS Connectivity API DLL
        .text,.data,.rsrc,.reloc,


    76D70000[00022000]
      [ M] 340. c:\windows\system32\apphelp.dll
        Microsoft Corporation
        Application Compatibility Client Library
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    76F90000[00006000]
      [ M] 390. c:\windows\system32\rasadhlp.dll
        Microsoft Corporation
        Remote Access AutoDial Helper
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    76F80000[00008000]
      [ M] 389. c:\windows\system32\winrnr.dll
        Microsoft Corporation
        LDAP RnR Provider DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    7EAE0000[000A1000]
      [AM] 204. c:\windows\system32\urlmon.dll
        Microsoft Corporation
        OLE32 Extensions for Win32
        .text,.orpc,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,


    65D50000[00007000]
      [ M] 437. c:\windows\system32\jsproxy.dll
        Microsoft Corporation
        JScript Proxy Auto-Configuration
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    02830000[00019000]
      [ M] 422. c:\program files\rising\ris\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    75BC0000[0007D000]
      [ M] 423. c:\windows\system32\jscript.dll
        Microsoft Corporation
        Microsoft (R) JScript
        .text,.data,.rsrc,.reloc,


    73270000[00069000]
      [ M] 424. c:\windows\system32\vbscript.dll
        Microsoft Corporation
        Microsoft (R) VBScript
        .text,.data,.rsrc,.reloc,


    028C0000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,



  + 00000ee8(3816) ras.exe
    00400000[0001F000]
      [ M] 566. c:\program files\rising\antispyware\ras.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    10000000[00014000]
      [ M] 386. c:\program files\rising\antispyware\regcall.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,YCIShare,.rsrc,.reloc,


    74680000[0004C000]
      [ M] 346. c:\windows\system32\msctf.dll
        Microsoft Corporation
        MSCTF Server DLL
        .text,.data,.rsrc,.reloc,


    00AD0000[00065000]
      [ M] 567. c:\program files\rising\antispyware\rspalmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    00B50000[0001F000]
      [ M] 564. c:\program files\rising\antispyware\proccom.dll
        Beijing Rising Information Technology Co., Ltd.
        ProcessC Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00B70000[00024000]
      [ M] 565. c:\program files\rising\antispyware\rscommx2.dll
        Beijing Rising Information Technology Co., Ltd.
        RsCommX2
        .text,.rdata,.data,.rsrc,.reloc,


    00CC0000[0002D000]
      [ M] 559. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    00CF0000[00019000]
      [ M] 555. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    00E60000[00058000]
      [ M] 568. c:\program files\rising\antispyware\dbmgr.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    7C140000[00103000]
      [ M] 569. c:\program files\rising\antispyware\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 557. c:\program files\rising\antispyware\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    23800000[00022000]
      [ M] 560. c:\program files\rising\antispyware\rsxml1.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 556. c:\program files\rising\antispyware\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    01090000[00039000]
      [ M] 553. c:\program files\rising\antispyware\rsxml.dll
        Beijing Rising Information Technology Co., Ltd.
        RsXML
        .text,.rdata,.data,.rsrc,.reloc,


    26600000[00078000]
      [ M] 570. c:\program files\rising\antispyware\rsguilib.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising GUI Library Loader
        .text,.rdata,.data,.rsrc,.reloc,


    23900000[00040000]
      [ M] 561. c:\program files\rising\antispyware\pngdll.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising .Png File Loader Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    011F0000[00031000]
      [ M] 571. c:\program files\rising\antispyware\pweb.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    74D90000[0006D000]
      [ M] 374. c:\windows\system32\riched20.dll
        Microsoft Corporation
        Rich Text Edit Control, v3.0
        .text,.data,.rsrc,.reloc,


    01280000[0002D000]
      [ M] 572. c:\program files\rising\antispyware\pdefend.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01340000[00225000]
      [ M] 573. c:\program files\rising\antispyware\pscan.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    76D30000[00018000]
      [ M] 368. c:\windows\system32\iphlpapi.dll
        Microsoft Corporation
        IP Helper API
        .text,.data,.rsrc,.reloc,


    012B0000[00034000]
      [ M] 563. c:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01570000[00071000]
      [ M] 574. c:\program files\rising\antispyware\pset.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    015F0000[000B8000]
      [ M] 575. c:\program files\rising\antispyware\ptools.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    76320000[00047000]
      [AM] 287. c:\windows\system32\comdlg32.dll
        Microsoft Corporation
        Common Dialogs DLL
        .text,.data,.rsrc,.reloc,


    016B0000[00077000]
      [ M] 576. c:\program files\rising\antispyware\psysinfo.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    01730000[00086000]
      [ M] 577. c:\program files\rising\antispyware\kengine.dll
        Beijing Rising Information Technology Co., Ltd.
        KEngine
        .text,.rdata,.data,.rsrc,.reloc,


    017C0000[00045000]
      [ M] 578. c:\program files\rising\antispyware\posttrt.dll
        Beijing Rising Information Technology Co., Ltd.
        PostTrt
        .text,.rdata,.data,.rsrc,.reloc,


    01320000[00010000]
      [ M] 579. c:\program files\rising\antispyware\kscanex.dll
        Beijing Rising Information Technology Co., Ltd.
        KEngine ScanEx
        .text,.rdata,.data,.rsrc,.reloc,


    01820000[0002F000]
      [ M] 580. c:\program files\rising\antispyware\engine.dll
        Beijing Rising Information Technology Co., Ltd.
        kaka engine
        .text,.rdata,.data,.rsrc,.reloc,


    01860000[00033000]
      [ M] 581. c:\program files\rising\antispyware\rsdialog.dll
        Beijing Rising Information Technology Co., Ltd.
        Rsdiaglo DLL
        .text,.rdata,.data,.rsrc,.reloc,


    018B0000[0001E000]
      [ M] 582. c:\program files\rising\antispyware\secscan.dll
        Beijing Rising Information Technology Co., Ltd.
        secscan Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    018E0000[0007F000]
      [ M] 583. c:\program files\rising\antispyware\ntlib.dll
        Beijing Rising Information Technology Co., Ltd.
        Ntlib Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    01970000[00017000]
      [ M] 584. c:\program files\rising\antispyware\secex.dll
        Beijing Rising Information Technology Co., Ltd.
        SecEx Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    76D70000[00022000]
      [ M] 340. c:\windows\system32\apphelp.dll
        Microsoft Corporation
        Application Compatibility Client Library
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    7E550000[00173000]
      [AM] 202. c:\windows\system32\shdocvw.dll
        Microsoft Corporation
        Shell Doc Object and Control Library
        .text,.data,.rsrc,.reloc,


    75430000[00071000]
      [ M] 321. c:\windows\system32\cryptui.dll
        Microsoft Corporation
        Microsoft Trust UI Provider
        .text,.data,.rsrc,.reloc,


    76C00000[0002E000]
      [ M] 323. c:\windows\system32\wintrust.dll
        Microsoft Corporation
        Microsoft Trust Verification APIs
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    7EAE0000[000A1000]
      [AM] 204. c:\windows\system32\urlmon.dll
        Microsoft Corporation
        OLE32 Extensions for Win32
        .text,.orpc,.data,.rsrc,.reloc,


    76060000[00156000]
      [ M] 348. c:\windows\system32\setupapi.dll
        Microsoft Corporation
        Windows Setup API
        .text,.data,.rsrc,.reloc,


    76B80000[00005000]
      [ M] 451. c:\windows\system32\sfc.dll
        Microsoft Corporation
        Windows File Protection
        .text,.data,.rsrc,.reloc,


    76C30000[00028000]
      [ M] 452. c:\windows\system32\sfc_os.dll
        Microsoft Corporation
        Windows ļ
        .text,.data,.rsrc,.reloc,


    73640000[0002E000]
      [ M] 337. c:\windows\system32\msctfime.ime
        Microsoft Corporation
        Microsoft Text Frame Work Service IME
        .text,.data,.rsrc,.reloc,


    75E00000[000AE000]
      [ M] 369. c:\windows\system32\sxs.dll
        Microsoft Corporation
        Fusion 2.5
        .text,.data,.rsrc,.reloc,


    71800000[0007C000]
      [ M] 414. c:\windows\system32\shdoclc.dll
        Microsoft Corporation
        Shell Doc Object and Control Library
        .rsrc,.reloc,


    02880000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,


    74CF0000[00091000]
      [ M] 378. c:\windows\system32\mlang.dll
        Microsoft Corporation
        Multi Language Support DLL
        .text,.data,.rsrc,.reloc,


    7E210000[002F9000]
      [AM] 206. c:\windows\system32\mshtml.dll
        Microsoft Corporation
        Microsoft (R) HTML Viewer
        .text,.data,.rsrc,.reloc,


    74620000[00027000]
      [ M] 415. c:\windows\system32\msls31.dll
        Microsoft Corporation
        Microsoft Line Services library file
        .text,.data,.rsrc,.reloc,


    76BC0000[0000B000]
      [ M] 416. c:\windows\system32\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.data,.rsrc,.reloc,


    74910000[000AE000]
      [AM] 209. c:\windows\system32\inetcomm.dll
        Microsoft Corporation
        Microsoft Internet Messaging API
        .text,.data,.rsrc,.reloc,


    75B20000[00022000]
      [ M] 585. c:\windows\system32\msoert2.dll
        Microsoft Corporation
        Microsoft Outlook Express RT Lib
        .text,.data,.rsrc,.reloc,


    022D0000[0000C000]
      [ M] 586. c:\windows\system32\inetres.dll
        Microsoft Corporation
        Microsoft Internet Messaging API Resources
        .rsrc,.reloc,


    74650000[0002A000]
      [ M] 421. c:\windows\system32\msimtf.dll
        Microsoft Corporation
        Active IMM Server DLL
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    76F90000[00006000]
      [ M] 390. c:\windows\system32\rasadhlp.dll
        Microsoft Corporation
        Remote Access AutoDial Helper
        .text,.data,.rsrc,.reloc,


    76AF0000[00011000]
      [ M] 350. c:\windows\system32\atl.dll
        Microsoft Corporation
        ATL Module for Windows XP (Unicode)
        .text,.data,.rsrc,.reloc,


    76CB0000[00020000]
      [ M] 459. c:\windows\system32\ntmarta.dll
        Microsoft Corporation
        Windows NT MARTA provider
        .text,.data,.rsrc,.reloc,


    71B70000[00013000]
      [ M] 347. c:\windows\system32\samlib.dll
        Microsoft Corporation
        SAM Library DLL
        .text,.data,.rsrc,.reloc,


    76950000[00008000]
      [ M] 349. c:\windows\system32\linkinfo.dll
        Microsoft Corporation
        Windows Volume Tracking
        .text,.data,.rsrc,.reloc,


    76960000[00024000]
      [AM] 222. c:\windows\system32\ntshrui.dll
        Microsoft Corporation
        Shell extensions for sharing
        .text,.data,.rsrc,.reloc,


    5DD50000[00123000]
      [ M] 587. c:\windows\system32\msxml3.dll
        Microsoft Corporation
        MSXML 3.0 SP10
        .text,.data,.rsrc,.reloc,


    71A40000[0000B000]
      [ M] 336. c:\windows\system32\wsock32.dll
        Microsoft Corporation
        Windows Socket 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    76EB0000[0003C000]
      [ M] 433. c:\windows\system32\rasapi32.dll
        Microsoft Corporation
        Remote Access API
        .text,.data,.rsrc,.reloc,


    76E60000[00012000]
      [ M] 434. c:\windows\system32\rasman.dll
        Microsoft Corporation
        Remote Access Connection Manager
        .text,.data,.rsrc,.reloc,


    76E80000[0002F000]
      [ M] 435. c:\windows\system32\tapi32.dll
        Microsoft Corporation
        Microsoft(R) Windows(TM) Telephony API Client DLL
        .text,.data,.rsrc,.reloc,


    76E50000[0000E000]
      [ M] 363. c:\windows\system32\rtutils.dll
        Microsoft Corporation
        Routing Utilities
        .text,.data,.rsrc,.reloc,


    72240000[00005000]
      [ M] 436. c:\windows\system32\sensapi.dll
        Microsoft Corporation
        SENS Connectivity API DLL
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    76F80000[00008000]
      [ M] 389. c:\windows\system32\winrnr.dll
        Microsoft Corporation
        LDAP RnR Provider DLL
        .text,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,


    65D50000[00007000]
      [ M] 437. c:\windows\system32\jsproxy.dll
        Microsoft Corporation
        JScript Proxy Auto-Configuration
        .text,.data,.rsrc,.reloc,


    042B0000[00019000]
      [ M] 422. c:\program files\rising\ris\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    75BC0000[0007D000]
      [ M] 423. c:\windows\system32\jscript.dll
        Microsoft Corporation
        Microsoft (R) JScript
        .text,.data,.rsrc,.reloc,


    73270000[00069000]
      [ M] 424. c:\windows\system32\vbscript.dll
        Microsoft Corporation
        Microsoft (R) VBScript
        .text,.data,.rsrc,.reloc,


    03A60000[0000F000]
      [ M] 588. c:\program files\rising\antispyware\zip.dll
        Beijing Rising Information Technology Co., Ltd.
        zip
        .text,.rdata,.data,.rsrc,.reloc,


    76590000[0004E000]
      [AM] 261. c:\windows\system32\cscui.dll
        Microsoft Corporation
        Client Side Caching UI
        .text,.data,.rsrc,.reloc,


    76570000[0001C000]
      [AM] 198. c:\windows\system32\cscdll.dll
        Microsoft Corporation
        Offline Network Agent
        .text,PAGE,.data,.rsrc,.reloc,


    746D0000[00042000]
      [AM] 244. c:\windows\system32\mstask.dll
        Microsoft Corporation
        Task Scheduler interface DLL
        .text,.data,.rsrc,.reloc,


    71A90000[00012000]
      [ M] 376. c:\windows\system32\mpr.dll
        Microsoft Corporation
        Multiple Provider Router DLL
        .text,.data,.rsrc,.reloc,


    76770000[00013000]
      [ M] 466. c:\windows\system32\ntdsapi.dll
        Microsoft Corporation
        NT5DS
        .text,.data,.rsrc,.reloc,


    05170000[000AF000]
      [AM] 194. c:\windows\system32\vboxmrxnp.dll
        Oracle Corporation
        VirtualBox Shared Folders Minirdr NP
        .text,.rdata,.data,.rsrc,.reloc,


    75ED0000[00007000]
      [ M] 381. c:\windows\system32\drprov.dll
        Microsoft Corporation
        Microsoft Terminal Server Network Provider
        .text,.data,.rsrc,.reloc,


    71B90000[0000E000]
      [AM] 25. c:\windows\system32\ntlanman.dll
        Microsoft Corporation
        Microsoft(R) Lan Manager
        .text,.data,.rsrc,.reloc,


    71C50000[00015000]
      [ M] 382. c:\windows\system32\netui0.dll
        Microsoft Corporation
        NT LM UI Common Code - GUI Classes
        .text,.data,.rsrc,.reloc,


    71C10000[00040000]
      [ M] 383. c:\windows\system32\netui1.dll
        Microsoft Corporation
        NT LM UI Common Code - Networking classes
        .text,.data,.rsrc,.reloc,


    71C00000[00007000]
      [ M] 384. c:\windows\system32\netrap.dll
        Microsoft Corporation
        Net Remote Admin Protocol DLL
        .text,.data,.rsrc,.reloc,


    75EE0000[0000A000]
      [AM] 65. c:\windows\system32\davclnt.dll
        Microsoft Corporation
        Web DAV Client DLL
        .text,.data,.rsrc,.reloc,



  + 00000f50(3920) knownsvr.exe
    00400000[00072000]
      [ M] 589. c:\program files\rising\antispyware\knownsvr.exe
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    7C920000[00096000]
      [ M] 316. c:\windows\system32\ntdll.dll
        Microsoft Corporation
        NT Layer DLL
        .text,.data,.rsrc,.reloc,


    7C800000[0011E000]
      [AM] 290. c:\windows\system32\kernel32.dll
        Microsoft Corporation
        Windows NT BASE API Client DLL
        .text,.data,.rsrc,.reloc,


    77D10000[00090000]
      [AM] 300. c:\windows\system32\user32.dll
        Microsoft Corporation
        Windows XP USER API Client DLL
        .text,.data,.rsrc,.reloc,


    77EF0000[00049000]
      [AM] 288. c:\windows\system32\gdi32.dll
        Microsoft Corporation
        GDI Client DLL
        .text,.data,.rsrc,.reloc,


    77DA0000[000A9000]
      [AM] 68. c:\windows\system32\advapi32.dll
        Microsoft Corporation
        Advanced Windows 32 Base API
        .text,.data,.rsrc,.reloc,


    77E50000[00092000]
      [AM] 298. c:\windows\system32\rpcrt4.dll
        Microsoft Corporation
        Remote Procedure Call Runtime
        .text,.orpc,.data,.rsrc,.reloc,


    77FC0000[00011000]
      [ M] 317. c:\windows\system32\secur32.dll
        Microsoft Corporation
        Security Support Provider Interface
        .text,.data,.rsrc,.reloc,


    10000000[00034000]
      [ M] 563. c:\program files\rising\antispyware\ncomm.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,.reloc,


    76990000[0013D000]
      [AM] 292. c:\windows\system32\ole32.dll
        Microsoft Corporation
        Microsoft OLE for Windows
        .text,.orpc,.data,.rsrc,.reloc,


    77BE0000[00058000]
      [ M] 318. c:\windows\system32\msvcrt.dll
        Microsoft Corporation
        Windows NT CRT DLL
        .text,.data,.rsrc,.reloc,


    770F0000[0008B000]
      [AM] 293. c:\windows\system32\oleaut32.dll
        Microsoft Corporation
        .text,.orpc,.data,.rsrc,.reloc,


    76680000[000A6000]
      [AM] 302. c:\windows\system32\wininet.dll
        Microsoft Corporation
        Internet Extensions for Win32
        .text,.data,.rsrc,.reloc,


    765E0000[00093000]
      [AM] 196. c:\windows\system32\crypt32.dll
        Microsoft Corporation
        Crypto API32
        .text,.data,.rsrc,.reloc,


    76DB0000[00012000]
      [ M] 320. c:\windows\system32\msasn1.dll
        Microsoft Corporation
        ASN.1 Runtime APIs
        .text,.data,.rsrc,.reloc,


    77F40000[00076000]
      [ M] 319. c:\windows\system32\shlwapi.dll
        Microsoft Corporation
        Shell Light-weight Utility Library
        .text,.data,.rsrc,.reloc,


    77BD0000[00008000]
      [AM] 301. c:\windows\system32\version.dll
        Microsoft Corporation
        Version Checking and File Installation Libraries
        .text,.data,.rsrc,.reloc,


    76300000[0001D000]
      [ M] 330. c:\windows\system32\imm32.dll
        Microsoft Corporation
        Windows XP IMM32 API Client DLL
        .text,.data,.rsrc,.reloc,


    62C20000[00009000]
      [ M] 331. c:\windows\system32\lpk.dll
        Microsoft Corporation
        Language Pack
        .text,.data,.rsrc,.reloc,


    73FA0000[0006B000]
      [ M] 332. c:\windows\system32\usp10.dll
        Microsoft Corporation
        Uniscribe Unicode script processor
        .text,.data,Shared,.rsrc,.reloc,


    76C60000[00028000]
      [AM] 289. c:\windows\system32\imagehlp.dll
        Microsoft Corporation
        Windows NT Image Helper
        .text,.data,.rsrc,.reloc,


    00990000[0002D000]
      [ M] 559. c:\program files\rising\antispyware\comx3.dll
        Beijing Rising Information Technology Co., Ltd.
        comx3 Dynamic Link Library
        .text,.rdata,.data,.rsrc,.reloc,


    009C0000[00019000]
      [ M] 555. c:\program files\rising\antispyware\syslay.dll
        Beijing Rising Information Technology Co., Ltd.
        Syslay
        .text,.rdata,.data,.rsrc,.reloc,


    76F20000[00008000]
      [ M] 354. c:\windows\system32\wtsapi32.dll
        Microsoft Corporation
        Windows Terminal Server SDK APIs
        .text,.data,.rsrc,.reloc,


    762D0000[00010000]
      [ M] 351. c:\windows\system32\winsta.dll
        Microsoft Corporation
        Winstation Library
        .text,.data,.rsrc,.reloc,


    5FDD0000[00055000]
      [ M] 322. c:\windows\system32\netapi32.dll
        Microsoft Corporation
        Net Win32 API DLL
        .text,.data,.rsrc,.reloc,


    5ADC0000[00037000]
      [ M] 324. c:\windows\system32\uxtheme.dll
        Microsoft Corporation
        Microsoft UxTheme Library
        .text,.data,.rsrc,.reloc,


    00F90000[00014000]
      [ M] 386. c:\program files\rising\antispyware\regcall.dll
        Beijing Rising Information Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,YCIShare,.rsrc,.reloc,


    74680000[0004C000]
      [ M] 346. c:\windows\system32\msctf.dll
        Microsoft Corporation
        MSCTF Server DLL
        .text,.data,.rsrc,.reloc,


    76FA0000[0007F000]
      [ M] 341. c:\windows\system32\clbcatq.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    77020000[0009A000]
      [ M] 342. c:\windows\system32\comres.dll
        Microsoft Corporation
        .text,.data,.rsrc,.reloc,


    5DD50000[00123000]
      [ M] 587. c:\windows\system32\msxml3.dll
        Microsoft Corporation
        MSXML 3.0 SP10
        .text,.data,.rsrc,.reloc,


    7D590000[007F4000]
      [AM] 205. c:\windows\system32\shell32.dll
        Microsoft Corporation
        Windows Shell Common Dll
        .text,.data,.rsrc,.reloc,


    71A40000[0000B000]
      [ M] 336. c:\windows\system32\wsock32.dll
        Microsoft Corporation
        Windows Socket 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A20000[00017000]
      [ M] 334. c:\windows\system32\ws2_32.dll
        Microsoft Corporation
        Windows Socket 2.0 32-Bit DLL
        .text,.data,.rsrc,.reloc,


    71A10000[00008000]
      [ M] 335. c:\windows\system32\ws2help.dll
        Microsoft Corporation
        Windows Socket 2.0 Helper for Windows NT
        .text,.data,.rsrc,.reloc,


    76EB0000[0003C000]
      [ M] 433. c:\windows\system32\rasapi32.dll
        Microsoft Corporation
        Remote Access API
        .text,.data,.rsrc,.reloc,


    76E60000[00012000]
      [ M] 434. c:\windows\system32\rasman.dll
        Microsoft Corporation
        Remote Access Connection Manager
        .text,.data,.rsrc,.reloc,


    76E80000[0002F000]
      [ M] 435. c:\windows\system32\tapi32.dll
        Microsoft Corporation
        Microsoft(R) Windows(TM) Telephony API Client DLL
        .text,.data,.rsrc,.reloc,


    76E50000[0000E000]
      [ M] 363. c:\windows\system32\rtutils.dll
        Microsoft Corporation
        Routing Utilities
        .text,.data,.rsrc,.reloc,


    76B10000[0002A000]
      [ M] 327. c:\windows\system32\winmm.dll
        Microsoft Corporation
        MCI API DLL
        .text,.data,.rsrc,.reloc,


    72240000[00005000]
      [ M] 436. c:\windows\system32\sensapi.dll
        Microsoft Corporation
        SENS Connectivity API DLL
        .text,.data,.rsrc,.reloc,


    759D0000[000AF000]
      [ M] 329. c:\windows\system32\userenv.dll
        Microsoft Corporation
        Userenv
        .text,.data,.rsrc,.reloc,


    719C0000[0003E000]
      [AM] 35. c:\windows\system32\mswsock.dll
        Microsoft Corporation
        Microsoft Windows Sockets 2.0 Service Provider
        .text,SANONTCP,.data,.rsrc,.reloc,


    76F90000[00006000]
      [ M] 390. c:\windows\system32\rasadhlp.dll
        Microsoft Corporation
        Remote Access AutoDial Helper
        .text,.data,.rsrc,.reloc,


    76EF0000[00027000]
      [ M] 388. c:\windows\system32\dnsapi.dll
        Microsoft Corporation
        DNS Client API DLL
        .text,.data,.rsrc,.reloc,


    76F80000[00008000]
      [ M] 389. c:\windows\system32\winrnr.dll
        Microsoft Corporation
        LDAP RnR Provider DLL
        .text,.data,.rsrc,.reloc,


    76F30000[0002C000]
      [AM] 303. c:\windows\system32\wldap32.dll
        Microsoft Corporation
        Win32 LDAP API DLL
        .text,.data,.rsrc,.reloc,


    7EAE0000[000A1000]
      [AM] 204. c:\windows\system32\urlmon.dll
        Microsoft Corporation
        OLE32 Extensions for Win32
        .text,.orpc,.data,.rsrc,.reloc,


    60FD0000[00055000]
      [ M] 338. c:\windows\system32\hnetcfg.dll
        Microsoft Corporation
        Home Networking Configuration Manager
        .text,.orpc,.data,.rsrc,.reloc,


    71A00000[00008000]
      [ M] 339. c:\windows\system32\wshtcpip.dll
        Microsoft Corporation
        Windows Sockets Helper DLL
        .text,.data,.rsrc,.reloc,


    65D50000[00007000]
      [ M] 437. c:\windows\system32\jsproxy.dll
        Microsoft Corporation
        JScript Proxy Auto-Configuration
        .text,.data,.rsrc,.reloc,


    018D0000[00019000]
      [ M] 422. c:\program files\rising\ris\ravscrch.dll
        Beijing Rising Information Technology Co., Ltd.
        webmon module
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 403. c:\windows\system32\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 404. c:\windows\system32\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    75BC0000[0007D000]
      [ M] 423. c:\windows\system32\jscript.dll
        Microsoft Corporation
        Microsoft (R) JScript
        .text,.data,.rsrc,.reloc,


    73270000[00069000]
      [ M] 424. c:\windows\system32\vbscript.dll
        Microsoft Corporation
        Microsoft (R) VBScript
        .text,.data,.rsrc,.reloc,


    01D70000[00549000]
      [ M] 344. c:\windows\system32\xpsp2res.dll
        Microsoft Corporation
        Service Pack 2 Messages
        .rsrc,




