瑞星卡卡电脑诊断日志 v1.30 (2012-12-6 20:49:35) 北京瑞星信息技术有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services Adobe LM Service [A ] 1. c:\program files\common files\adobe systems shared\service\adobelmsvc.exe Adobe Systems System Level Service Utility .text,.rdata,.data,.rsrc, AlipaySecSvc [A ] 2. c:\program files\alipay\alieditplus\alipaysecsvc.exe Alipay Inc. Alipay security service .text,.rdata,.data,.rsrc,.reloc, aspnet_state [A ] 3. c:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe Microsoft Corporation Microsoft ASP.NET State Server .text,.data,.rsrc, clr_optimization_v2.0.50727_32 [A ] 4. c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe Microsoft Corporation .NET Runtime Optimization Service .text,.data,.rsrc, Creative Audio Engine Licensing Service [A ] 5. c:\program files\common files\creative labs shared\service\ctaelicensing.exe Creative Labs System Level Service Utility .text,.rdata,.data,.rsrc, CTAudSvcService [AM] 6. c:\program files\creative\shared files\ctaudsvc.exe Creative Technology Ltd Creative Audio Service .text,.rdata,.data,.rsrc, FontCache3.0.0.0 [A ] 7. c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe Microsoft Corporation PresentationFontCache.exe .text,.rsrc,.reloc, ForceWare Intelligent Application Manager (IAM) [A ] 8. c:\program files\nvidia corporation\networkaccessmanager\bin32\nsvcappflt.exe app_filter Module .text,.rdata,.data,.FWLSvcS,.rsrc, FspadSvc [A ] 9. c:\program files\avc finger-sensing pad driver\fspadsvr.exe .text,.data,.tls,.rdata,.idata,.edata,.rsrc,.reloc, gusvc [A ] 10. c:\program files\google\common\google updater\googleupdaterservice.exe Google gusvc .text,.rdata,.data,.rsrc, HZ_CommSrv [A ] 11. c:\windows\system32\hz_commsrv.exe 华大智宝电子系统有限公司 华大智宝USB KEY通讯服务 .data,.rsrc, idsvc [A ] 12. c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe Microsoft Corporation Windows CardSpace .text,.rdata,.data,.rsrc,.reloc, JavaQuickStarterService [A ] 13. c:\program files\java\jre7\bin\jqs.exe Oracle Corporation Java(TM) Quick Starter Service .text,.rdata,.data,.rsrc,.reloc, [A ] 14. c:\program files\java\jre7\lib\deploy\jqs\jqs.conf kaccore [A ] 15. c:\program files\kingsoft\kac\service\kaccore.exe Kingsoft Corporation Kingsoft Basic Service Module .text,.orpc,.rdata,.data,.rsrc, KxEServBeta [A ] 16. c:\program files\common files\kingsoft\commonservice_beta\kxeserv.exe Kingsoft Corporation Kingsoft Antivirus Service Manager .text,.rdata,.data,.rsrc, MozillaMaintenance [A ] 17. c:\program files\mozilla maintenance service\maintenanceservice.exe Mozilla Foundation .text,.rdata,.data,.rsrc,.reloc, NetTcpPortSharing [A ] 18. c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe Microsoft Corporation SMSvcHost.exe .text,.rsrc,.reloc, 文件名和"svchost.exe"类似 npggsvc [A ] 19. c:\windows\system32\gamemon.des INCA Internet Co., Ltd. nProtect Game Monitor Rev 1711 ,.rsrc,.idata , ,hstwkzvp,fstzwlag, 入口点在最后一个节; npkcmsvc [A ] 20. c:\windows\system32\npkcmsvc.exe INCA Internet Co., Ltd. nProtect KeyCrypt Manager Service .text,.rdata,.data,.rsrc, nSvcIp [A ] 21. c:\program files\nvidia corporation\networkaccessmanager\bin32\nsvcip.exe NVIDIA Corporation .text,.rdata,.data,.rsrc, NVSvc [AM] 22. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 86.17 .text,.rdata,.data,.rsrc, ose [A ] 23. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, RsMgrSvc [AM] 24. c:\program files\rising\rsd\rsmgrsvc.exe Beijing Rising Information Technology Co., Ltd. RsMgrSvc Application .text,.rdata,.data,.rsrc, RsRavMon [AM] 25. c:\program files\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, RsSafetyBoxMon [AM] 26. c:\program files\rising\rfb\rssmond.exe Beijing Rising Information Technology Co., Ltd. rssmond .text,.rdata,.data,.rsrc, SbieSvc [A ] 27. c:\program files\360safe\shield\sbiesvc.exe SANDBOXIE L.T.D Sandboxie Service .text,.data,.rsrc, SkypeUpdate [A ] 28. d:\program files\skype\updater\updater.exe Skype Technologies Skype Updater Service UPX0,UPX1,.rsrc, tepsrv [A ] 29. e:\program files\acesoft\tracks eraser pro\tepsrv.exe Acesoft .text,.data,.rsrc, TSUSVC [A ] 30. c:\program files\tencent\qqsoftmgr\1.0.375.203\tencentupdatesvc.exe Tencent Tencent Software Update Service .text,.rdata,.data,.rsrc, WMPNetworkSvc [A ] 31. c:\program files\windows media player\wmpnetwk.exe Microsoft Corporation Windows Media Player 网络共享服务 .text,.data,.rsrc,.reloc, WudfSvc [A ] 32. c:\windows\system32\wudfsvc.dll Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Service .text,.data,.rsrc,.reloc, XLServicePlatform [A ] 33. c:\program files\common files\thunder network\serviceplatform\xlsp.dll 深圳市迅雷网络技术有限公司 XLServicePlatform .text,.rdata,.data,.rsrc,.reloc, + 内核驱动 + HKLM\System\CurrentControlSet\Services 1394hub [A ] 34. c:\windows\system32\svchost.exe -k netsvcs Alidevice [A ] 35. c:\windows\system32\drivers\alidevice.sys alipay.com Windows NT alipay kernel module .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, Ambfilt [A ] 36. c:\windows\system32\drivers\ambfilt.sys Creative Creative WDM 3D Audio Driver .text,page,init,.data,init,_PDATA,INIT,.rsrc,.reloc, AmdK8 [A ] 37. c:\windows\system32\drivers\amdk8.sys Advanced Micro Devices AMD Processor Driver .text,.rdata,.data,PAGE,PAGELK,INIT,.rsrc,.reloc, androidusb [A ] 38. c:\windows\system32\drivers\androidusb.sys HTC, Corporation ADB Interface .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, Aspi32 [A ] 39. c:\windows\system32\drivers\aspi32.sys Adaptec ASPI for WIN32 Kernel Driver .text,.data,INIT,.rsrc,.reloc, coolpadusbser [A ] 40. c:\windows\system32\drivers\cp_brew_usbser.sys Yulong Incorporated USB Modem/Serial Device Driver .text,.rdata,.data,INIT,.rsrc,.reloc, EagleNT [A ] 41. c:\windows\system32\drivers\eaglent.sys EagleXNt [A ] 42. c:\windows\system32\drivers\eaglexnt.sys EncryptedDisk [A ] 43. c:\documents and settings\thtf\application data\kingsoft\klive\bin\encrypteddisk.sys EncryptedDisk Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ENTECH [A ] 44. c:\windows\system32\drivers\entech.sys EnTech Taiwan PowerStrip support NT kernel-mode driver .text,.data,.CRT,PAGE,INIT,.rsrc,.reloc, fspad [A ] 45. c:\windows\system32\drivers\fspad.sys Asia Vital Components Co.,Ltd. AVC Finger-sensing Pad Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, GZSQ [A ] 46. c:\windows\system32\drivers\gzsq.sys Compuware Corporation Sample USB Filter Driver .text,.data,.CRT,.STL,PAGE,INIT,.rsrc,.reloc, HDAudBus [A ] 47. c:\windows\system32\drivers\hdaudbus.sys Windows (R) Server 2003 DDK provider High Definition Audio Bus Driver v1.0a .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, HookNtos [A ] 48. c:\windows\system32\drivers\hookntos.sys HookReg [A ] 49. c:\windows\system32\drivers\hookreg.sys hooksys [A ] 50. c:\windows\system32\drivers\hooksys.sys Beijing Rising Information Technology Co., Ltd. Hooksys.sys .text,.rdata,.data,INIT,.rsrc,.reloc, HookTdi [A ] 51. c:\windows\system32\drivers\hooktdi.sys Beijing Rising Information Technology Co., Ltd. hooktdi.sys .text,.rdata,.data,INIT,.rsrc,.reloc, HookUrl [A ] 52. c:\program files\rising\rfw\hookurl.sys HTCAND32 [A ] 38. c:\windows\system32\drivers\androidusb.sys HTC, Corporation ADB Interface .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, HyperVM [A ] 53. c:\windows\system32\drivers\hvm.sys Beijing Rising Information Technology Co., Ltd. VM Monitor .text,.bss,.rdata,.data,PAGE,INIT,.rsrc,.reloc, IntcAzAudAddService [A ] 54. c:\windows\system32\drivers\rtkhdaud.sys Realtek Semiconductor Corp. Realtek(r) High Definition Audio Function Driver .text,CODE,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc, ksaud [A ] 55. c:\windows\system32\drivers\ksaud.sys Creative Technology Ltd. WDM USB Audio Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ksaudfl [A ] 56. c:\windows\system32\drivers\ksaudfl.sys Creative Creative WDM 3D Audio Driver .text,page,init,.data,init,_PDATA,INIT,.rsrc,.reloc, Monfilt [A ] 57. c:\windows\system32\drivers\monfilt.sys Creative Technology Ltd. Creative WDM Audio Driver (32-bit) .text,page,init,.data,.CRT,init,INIT,.rsrc,.reloc, NPF [A ] 58. c:\windows\system32\drivers\npf.sys Politecnico di Torino NPF Driver - TME extensions .text,.rdata,.data,INIT,.rsrc,.reloc, npkakl [A ] 59. c:\windows\system32\npkakl.sys INCA Internet Co.,Ltd. nProtect KeyCrypt Driver .text,.rdata,.data,INIT,.rsrc,.reloc, npkcrypt [A ] 60. d:\program files\tencent\qq\npkcrypt.sys INCA Internet Co., Ltd. nProtect KeyCrypt Driver .text,.rdata,.data,INIT,.rsrc,.reloc, npkcusb [A ] 61. c:\windows\system32\npkcusb.sys INCA Internet Co., Ltd. nProtect KeyCrypt Driver .text,page,init,.rdata,.data,INIT,.rsrc,.reloc, NPPTNT2 [A ] 62. c:\windows\system32\npptnt2.sys INCA Internet Co., Ltd. nProtect NPSC Kernel Mode Driver for NT .text,.rdata,.data,.rsrc,.reloc, NVENETFD [A ] 63. c:\windows\system32\drivers\nvenetfd.sys NVIDIA Corporation NVIDIA Networking Function Driver. .text,.rdata,.data,INIT,.rsrc,.reloc, nvgts [A ] 64. c:\windows\system32\drivers\nvgts.sys NVIDIA Corporation NVIDIA? nForce(TM) Sata Performance Driver .text,.rdata,.data,INIT,.rsrc,.reloc, nvnetbus [A ] 65. c:\windows\system32\drivers\nvnetbus.sys NVIDIA Corporation NVIDIA Networking Bus Driver. .text,.rdata,.data,INIT,.rsrc,.reloc, nvsmu [A ] 66. c:\windows\system32\drivers\nvsmu.sys NVIDIA Corporation NVIDIA? nForce(TM) SMU Microcontroller Driver .text,.rdata,.data,INIT,.rsrc,.reloc, PCANDIS5 [A ] 67. c:\windows\system32\pcandis5.sys Printing Communications Assoc., Inc. (PCAUSA) PCAUSA NDIS 5.0 Protocol Driver .text,.rdata,.data,INIT,.rsrc,.reloc, PCASp50 [A ] 68. c:\windows\system32\drivers\pcasp50.sys pfc [A ] 69. c:\windows\system32\drivers\pfc.sys Padus, Inc. Padus(R) ASPI Shell .text,.rdata,.data,INIT,.rsrc,.reloc, PnpWmkDrv [A ] 70. c:\windows\system32\drivers\pnpwmkdrv.sys Windows (R) 2000 DDK provider 完美卸载 Driver .text,.rdata,.data,INIT,.rsrc,.reloc, Protector [A ] 71. c:\windows\system32\drivers\protector.sys www.ISRA.org.cn Process driver module .text,.rdata,.data,INIT,.rsrc,.reloc, ProtectorA [A ] 72. c:\windows\system32\drivers\protectora.sys www.ISRA.org.cn KeyboardProtection driver module .text,.rdata,.data,INIT,.rsrc,.reloc, PxHelp20 [A ] 73. c:\windows\system32\drivers\pxhelp20.sys Sonic Solutions Px Engine Device Driver for Windows 2000/XP .text,.rdata,.data,INIT,.rsrc,.reloc, rasuw [A ] 74. c:\windows\system32\drivers\rasuw.sys UTStarcom Inc. UW WAN Virtual Network Driver .text,WORK,.rdata,.data,PAGE,INIT,.rsrc,.reloc, RsAntiSpyware [A ] 75. c:\windows\system32\drivers\rsboot.sys rsdsys [A ] 76. c:\windows\system32\drivers\protreg.sys Beijing Rising Information Technology Co., Ltd. protectreg.sys .text,.rdata,.data,INIT,.rsrc,.reloc, RsProtect5 [A ] 77. c:\windows\system32\drivers\rsprotect.sys Beijing Rising Information Technology Co., Ltd. RsProtect .text,.rdata,.data,INIT,.rsrc,.reloc, RTLWUSB [A ] 78. c:\windows\system32\drivers\rtl8187.sys Realtek Semiconductor Corporation Realtek RTL8187 NDIS Driver .text,.rdata,.data,INIT,.rsrc,.reloc, SbieDrv [A ] 79. c:\program files\360safe\shield\sbiedrv.sys SANDBOXIE L.T.D Sandboxie Kernel Mode Driver .text,.rdata,.data,INIT,.rsrc,.reloc, Secdrv [A ] 80. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, sfdrv01 [A ] 81. c:\windows\system32\drivers\sfdrv01.sys Protection Technology StarForce Protection Environment Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, sfhlp02 [A ] 82. c:\windows\system32\drivers\sfhlp02.sys Protection Technology StarForce Protection Helper Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, sfsync02 [A ] 83. c:\windows\system32\drivers\sfsync02.sys Protection Technology StarForce Protection Synchronization Driver .text,.data,PAGE,INIT,.rsrc,.reloc, smserial [A ] 84. c:\windows\system32\drivers\smserial.sys Motorola Inc. Motorola SM56 Modem WDM Driver .text,page,_LTEXT,_LDATA,.rdata,.data,PAGESRP0,INIT,.rsrc,.reloc, SOFTXG [A ] 85. c:\windows\system32\drivers\sxgxgwdm.sys YAMAHA CORPORATION WDM Driver .text,_LTEXT,_LDATA,.rdata,.data,_LDATA,INIT,.rsrc,.reloc, sptd [A ] 86. c:\windows\system32\drivers\sptd.sys taphss [A ] 87. c:\windows\system32\drivers\taphss.sys AnchorFree Inc TAP-Win32 Virtual Network Driver .text,.rdata,.data,INIT,.rsrc,.reloc, TesDrvPt [A ] 88. c:\windows\system32\tesdrvpt.sys TENCENT Kernel helper of the Tencent's game trojan killer .text,.rdata,.data,INIT,.rsrc,.reloc, TesSafe [A ] 89. c:\windows\system32\tessafe.sys TENCENT TesSafe NT Driver .text,.rdata,.data,INIT,.rsrc,.tvm, Wdf01000 [A ] 90. c:\windows\system32\drivers\wdf01000.sys Microsoft Corporation WDF Dynamic .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, WmRegProDrv [A ] 91. c:\windows\system32\drivers\wmregprodrv.sys WpdUsb [A ] 92. c:\windows\system32\drivers\wpdusb.sys Microsoft Corporation WPD USB Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, WudfPf [A ] 93. c:\windows\system32\drivers\wudfpf.sys Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Platform Driver .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc, WudfRd [A ] 94. c:\windows\system32\drivers\wudfrd.sys Microsoft Corporation Windows Driver Foundation - User-mode Driver Framework Reflector .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, YLMFVDISK [A ] 95. c:\windows\system32\drivers\virtdisk.sys .text,.rdata,.data,INIT,.reloc, + 文件系统驱动 + HKLM\System\CurrentControlSet\Services exFat [A ] 96. c:\windows\system32\drivers\exfat.sys Microsoft Corporation Microsoft Extended FAT File System .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, + 系统登陆自运行 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon UIHost [A ] 97. c:\da\windowsxp桌面主题合集\xplogonchanger\[d.c.ⅱ.初音岛][windows xp登录][宽屏]\[d.c.ⅱ.初音岛][windows xp登陆][宽屏][登陆].exe 叛逆の亡灵 红旅动漫-www.hltm.net .text,.data,.rsrc, + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify WBSrv [AM] 98. c:\program files\stardock\object desktop\windowblinds\wbsrv.dll Stardock Corporation WBSrv.dll .text,.rdata,.data,.rsrc,.reloc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {63485F16-A1A2-4F5C-8F0D-4928A98FF555} [A ] 99. c:\program files\justsystems\atok\ext\atokexie.dll 株式会社ジャストシステム Internet Explorer連携?????? for ATOK .text,.rdata,.data,.rsrc,.reloc, + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {00000000-12C8-4305-82F9-43058F20E8D2} [A ] 101. d:\program files\thunder network\thunder\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, {00000000-12C9-4305-82F9-43058F20E8D2} [A ] 102. d:\program files\tencent\qqdownload2\qqiehelper02.dll Tencent Technology (Shenzhen) Company Limited QQDownload Plugin DLL .text,.rdata,.data,.rsrc,.reloc, {00000ADA-7E0D-47C1-986C-F017D09C4304} [A ] 103. c:\program files\common files\thunder network\kankan\videourlsniffer.2.0.1.99.(955).dll 深圳市迅雷网络技术有限公司 VideoUrlSniffer Module .text,.rdata,.data,.rsrc,.reloc, {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} [A ] 104. c:\program files\common files\adobe\acrobat\activex\acroiehelper.dll Adobe Systems Incorporated Adobe PDF Helper for Internet Explorer .text,.rdata,.data,.rsrc,.reloc, {0A0DDBD3-6641-40B9-873F-BBDD26D6C14E} [A ] 105. f:\program files\emule\modules\ie2em.dll VeryCD.com eMule BHO (电驴浏览器辅助对象) .text,.rdata,.data,.rsrc,.reloc, {0EA37B17-6B8B-4085-8257-F3A4AA69C27A} [A ] 106. d:\program files\thunder network\thunder\bho\xlbrowseraddin1.0.5.64.dll 深圳市迅雷网络技术有限公司 XlBrowserAddin .text,.rdata,.data,.rsrc,.reloc, {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} [A ] 107. e:\program files\bitcomet_1.03\tools\bitcometbho_1.4.1.27.dll BitComet BitCometBHO .text,.rdata,.data,.tls,.rsrc,.reloc, {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} [A ] 108. c:\program files\java\jre7\bin\ssv.dll Oracle Corporation Java(TM) Platform SE binary .text,.rdata,.data,.rsrc,.reloc, {889D2FEB-5411-4565-8998-1DD2C5261283} [A ] 109. d:\program files\thunder network\thunder\bho\xunleibho7.2.3.3254.dll 深圳市迅雷网络技术有限公司 XunleiBHO .text,.rdata,.data,.rsrc,.reloc, {9030D464-4C02-4ABF-8ECC-5164760863C6} [A ] 110. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll Microsoft Corporation WindowsLiveLogin.dll .text,.data,.rsrc,.reloc, {98B7C13A-E9CD-4959-8B46-FBEAB41E42A8} [A ] 111. c:\windows\system32\urlfilter.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware UrlFilter Module .text,.rdata,.data,.rsrc,.reloc, {C37F9D60-975D-41f2-A745-4DC934D319AA} [A ] 112. c:\windows\system32\citicspp.dll www.ISRA.org.cn ProcessProtection module .text,.rdata,.data,.rsrc,.reloc, {C8CBC109-B04A-4dda-956E-BFFE0360DADD} [A ] 113. c:\windows\system32\citicap.dll NITSC anti-Phishing Module .text,.rdata,.data,.rsrc,.reloc, {DBC80044-A445-435b-BC74-9C25C1C588A9} [A ] 114. c:\program files\java\jre7\bin\jp2ssv.dll Oracle Corporation Java(TM) Platform SE binary .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions Script [A ] 115. c:\documents and settings\all users\application data\thunder network\xmp4\core\program\xmpietoolmenu.htm Script [A ] 116. c:\documents and settings\all users\application data\thunder network\xmp4\core\program\xmpietoolbar.htm Exec [A ] 117. c:\program files\pplive\pptv\pplive.exe PPLive Corporation PPTV网络电视 .text,.rdata,.data,.rsrc, Exec [A ] 118. c:\windows\network diagnostic\xpnetdiag.exe Microsoft Corporation Network Diagnostic for Windows XP .text,.data,.rsrc, Exec [A ] 119. c:\program files\messenger\msmsgs.exe Microsoft Corporation Windows Messenger .text,.data,.rsrc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter application/octet-stream [A ] 120. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, application/x-complus [A ] 120. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, application/x-msdownload [A ] 120. c:\windows\system32\mscoree.dll Microsoft Corporation Microsoft .NET Runtime Execution Engine .text,.data,.rsrc,.reloc, text/xml [AM] 121. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler livecall [A ] 122. c:\program files\windows live\messenger\msgrapp.14.0.8089.0726.dll Microsoft Corporation Windows Live Messenger Protocol Handler Module .text,.data,.rsrc,.reloc, ms-itss [A ] 123. c:\program files\common files\microsoft shared\information retrieval\msitss.dll Microsoft Corporation Microsoft? InfoTech Storage System Library .text,.data,.rsrc,.reloc, msnim [A ] 122. c:\program files\windows live\messenger\msgrapp.14.0.8089.0726.dll Microsoft Corporation Windows Live Messenger Protocol Handler Module .text,.data,.rsrc,.reloc, mso-offdap [A ] 124. c:\program files\common files\microsoft shared\web components\10\owc10.dll Microsoft Corporation Microsoft Office XP Web Components .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc, skype4com [A ] 125. c:\program files\common files\skype\skype4com.dll Skype Technologies Skype for COM API .text,.rdata,.data,.rsrc,.reloc, wlmailhtml [A ] 126. c:\program files\windows live\mail\mailcomm.dll Microsoft Corporation Windows Live Mail .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} [A ] 127. c:\windows\system32\ieudinit.exe Microsoft Corporation IE Per User Active Setup Uninstall Utility .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers {F9DB5320-233E-11D1-9F84-707F02C10627} [A ] 128. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll Adobe Systems, Inc. PDF Shell Extension .text,.orpc,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 129. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, IE Search Band [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Shell DocObject Viewer [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, InternetShortcut [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url History Service [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, History [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url Search Hook [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, The Internet [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Internet Name Space [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, NvCpl DesktopContext Class [A ] 130. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.rdata,.data,.rsrc,.reloc, Desktop Explorer [A ] 131. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, Desktop Explorer Menu [A ] 131. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, nView Desktop Context Menu [A ] 131. c:\windows\system32\nvshell.dll .text,.rdata,.data,.idata,.shared,.rsrc,.reloc, Microsoft Office HTML Icon Handler [A ] 132. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 133. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, Shell Extensions for RealOne Player [A ] 134. c:\program files\real\realplayer\rpshell.dll RealNetworks, Inc. RealPlayer Shell Extensions .text,.rdata,.data,.rsrc,.reloc, UltraISO [A ] 135. d:\program files\ultraiso\isoshell.dll EZB Systems, Inc. ISOShell .text,.rdata,.data,.rsrc,.reloc, NeroCoverEd Live Icons [A ] 136. d:\program files\nero 7\nero coverdesigner\coveredextension.dll Nero AG Cover Designer .text,.rdata,.data,.tls,.rsrc,.reloc, EncryptFile [A ] 137. d:\program files\wopti\woptiencryptmodule.dll 共软网络 Wopti 文件加密右键模块 CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc, IE Microsoft BrowserBand [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Fade Task [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Desk Bar [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE AutoComplete [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Navigation Bar [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Site [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Band [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft History AutoComplete List [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Tracking Shell Menu [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE IShellFolderBand [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE BandProxy [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE MRU AutoComplete List [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE RSS Feeder Folder [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Shell Folder AutoComplete List [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Multiple AutoComplete List Container [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Browser Architecture [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Rebar BandSite [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Band Site Menu [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, &Links [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Registry Tree Options Utility [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE User Assist [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Custom MRU AutoCompleted List [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Office Metadata Handler [A ] 138. c:\program files\common files\microsoft shared\office12\msoshext.dll Microsoft Corporation Microsoft Office Shell Extension Handlers .text,.data,.rsrc,.reloc, Microsoft Office Thumbnail Handler [A ] 138. c:\program files\common files\microsoft shared\office12\msoshext.dll Microsoft Corporation Microsoft Office Shell Extension Handlers .text,.data,.rsrc,.reloc, Microsoft.XPS.Shell.Metadata.1 [A ] 139. c:\windows\system32\xpsshhdr.dll Microsoft Corporation Package Document Shell Extension Handler .text,.data,.rsrc,.reloc, Microsoft.XPS.Shell.Thumbnail.1 [A ] 139. c:\windows\system32\xpsshhdr.dll Microsoft Corporation Package Document Shell Extension Handler .text,.data,.rsrc,.reloc, WindowBlinds CPL Extension [A ] 140. c:\program files\stardock\object desktop\windowblinds\wbui.dll Stardock Corporation WindowBlinds 6.01 UI .text,.rdata,.data,.rsrc,.reloc, DllRegShlExt extension [A ] 141. c:\windows\system32\tudouupload.dll www.Tudou.com DLL registration shell extension .text,.rdata,.data,.rsrc,.reloc, WLMD Message Handler [A ] 126. c:\program files\windows live\mail\mailcomm.dll Microsoft Corporation Windows Live Mail .text,.data,.rsrc,.reloc, Shell Icon Handler for Application References [A ] 142. c:\windows\system32\dfshim.dll Microsoft Corporation Application Deployment Support Library .text,.data,.rsrc,.reloc, ShellLink for Application References [A ] 142. c:\windows\system32\dfshim.dll Microsoft Corporation Application Deployment Support Library .text,.data,.rsrc,.reloc, RBContextMenu extension [A ] 143. d:\program files\caihong\rbshell.dll TODO: <公司名> TODO: <文件说明> .text,.rdata,.data,.rsrc,.reloc, IE History and Feeds Shell Data Source for Windows Search [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Web Browser [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Portable Media Devices [A ] 144. c:\windows\system32\audiodev.dll Microsoft Corporation Portable Media Devices Shell Extension .text,.data,.rsrc,.reloc, Portable Devices [A ] 145. c:\windows\system32\wpdshext.dll Microsoft Corporation Portable Devices Shell Extension .text,.data,.rsrc,.reloc, Portable Devices Menu [A ] 145. c:\windows\system32\wpdshext.dll Microsoft Corporation Portable Devices Shell Extension .text,.data,.rsrc,.reloc, Play on my TV helper [A ] 130. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks {32CD708B-60A7-4C00-9377-D73EAA495F0F} [AM] 146. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad WPDShServiceObj [AM] 147. c:\windows\system32\wpdshserviceobj.dll Microsoft Corporation Windows Portable Device Shell Service Object .text,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKCU\Software\Microsoft\Windows\CurrentVersion\Run NVIDIA nTune [A ] 148. c:\program files\nvidia corporation\ntune\ntunecmd.exe NVIDIA NVIDIA nTune Command .text,.rdata,.data,.rsrc, + HKLM\Software\Microsoft\Windows\CurrentVersion\Run FuncKey [AM] 149. c:\program files\hotkey management\funckey.exe Hotkey Application .text,.rdata,.data,.rsrc, runeip [AM] 150. c:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, IME14 CHS WR Setup [A ] 151. c:\program files\common files\microsoft shared\ime14wr\shared\imeklmg.exe Microsoft Corporation Microsoft Office IME 2010 .text,.data,.rsrc,.reloc, USBKeyTools.exe [A ] 152. c:\program files\ccbcomponents\hdzb\usbkeytools.exe 北京华大智宝电子系统有限公司 华大智宝建行网银盾用户管理工具 .text,.rdata,.data,.rsrc, SafetyBox [AM] 153. c:\program files\rising\rfb\safetybox.exe Beijing Rising Information Technology Co., Ltd. 账号保险柜 5.0 .text,.rdata,.data,.rsrc, nwiz [A ] 154. c:\windows\system32\nwiz.exe .text,.rdata,.data,.rsrc, PowerManager [AM] 155. c:\program files\power manager\pm.exe PowerManager Application .text,.rdata,.data,.rsrc, RavTRAY [AM] 156. c:\program files\rising\rav\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, SxgTkBar [AM] 157. c:\windows\system32\sxgtkbar.exe YAMAHA COROPRATION Taskbar application .text,.rdata,.data,.rsrc, Alcmtr [A ] 158. c:\windows\alcmtr.exe Realtek Semiconductor Corp. Realtek Azalia Audio - Event Monitor .text,.rdata,.data,.rsrc, SkyTel [A ] 159. c:\windows\skytel.exe Realtek Semiconductor Corp. Realtek Voice Manager .text,.rdata,.data,.rsrc, + 开机执行 + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order BootExecute [A ] 160. c:\windows\system32\bsmain.exe Beijing Rising Information Technology Co., Ltd. Rising Antivirus 2011 .text,.rdata,.data,.rsrc,.reloc, + 映像劫持 + HKCR\Folder\shell Md5Checker [A ] 161. e:\program files\md5checker\md5checker.exe Md5Checker .text,.rdata,.data,.rsrc, Md5CheckerCheckNewOnly [A ] 161. e:\program files\md5checker\md5checker.exe Md5Checker .text,.rdata,.data,.rsrc, sandbox [A ] 162. c:\program files\360safe\shield\start.exe SANDBOXIE L.T.D Sandboxie Start .text,.data,.rsrc, + HKCR\.html htmlfile\Edit\Command [A ] 163. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\Print\Command [A ] 163. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 163. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, htmlfile\Print\Command [A ] 163. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + HKCR\.mp3 xgfile\open\Command [A ] 164. c:\program files\yamaha\syxg50\xgplayer.exe YAMAHA CORPORATION XGPlayer Application .text,.rdata,.data,.rsrc, + 其他自启动项目 + C:\Documents and Settings\All Users\「开始」菜单\程序\启动 スタートアップツール for ATOK 2010.lnk [A ] 165. c:\program files\justsystems\atok23\atok23pc.exe 株式会社ジャストシステム ATOK スタートアップツール .text,.rdata,.data,.rsrc, + C:\WINDOWS\Tasks Fuuka.job [A ] 166. d:\my program\魔法老师_时钟\fuuka.exe Anime New Power NegiClock .text,.rdata,.data,.rsrc, Nodoka.job [AM] 167. d:\my program\魔法老师_时钟\nodoka.exe Anime New Power NegiClock .text,.rdata,.data,.rsrc, User_Feed_Synchronization-{C376CE09-9555-4474-9280-A36F27F237C3}.job [A ] 168. c:\windows\system32\msfeedssync.exe Microsoft Corporation Microsoft Feeds Synchronization .text,.data,.rsrc,.reloc, WpsUpdateTask_thtf.job [A ] 169. c:\program files\kingsoft\wps office personal\office6\wpsupdate.exe Zhuhai Kingsoft Office-software Co.,Ltd Kingsoft Office Automatic Upgrade UPX0,UPX1,.rsrc, + 正在运行的进程 + 00000280(640) knownsvr.exe 00400000[00072000] [ M] 170. c:\program files\rising\antispyware\knownsvr.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 10000000[00034000] [ M] 171. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 003A0000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00BC0000[0002D000] [ M] 174. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00BF0000[00019000] [ M] 175. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 01430000[00048000] [ M] 178. c:\program files\rising\rav\wbshld.dll Beijing Rising Information Technology Co., Ltd. wbshld DLL .text,.bss,.rdata,.data,.edata,.xdata,Uninstal,.rsrc,.reloc, 015F0000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, + 000002b8(696) Nodoka.exe 00400000[00229000] [AM] 167. d:\my program\魔法老师_时钟\nodoka.exe Anime New Power NegiClock .text,.rdata,.data,.rsrc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, + 000002c0(704) alg.exe + 000002c8(712) smss.exe + 00000394(916) Explorer.EXE 00400000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00043000] [ M] 180. c:\documents and settings\thtf\application data\vdisksyn\bin\cloudboxshellext.dll 微盘工作室 微盘工作室开发 .text,.rdata,.data,.rsrc,.reloc, 01440000[00076000] [ M] 181. c:\documents and settings\thtf\application data\115\box\sync115ext.dll 广东雨林木风计算机科技有限公司 115同步盘Shell扩展 .text,.rdata,.data,.rsrc,.reloc, 01540000[00074000] [ M] 182. c:\documents and settings\thtf\application data\kingsoft\klive\bin\kliveshellext.dll Kingsoft Corp. Ltd. KliveShellExt Module .text,.rdata,.data,.rsrc,.reloc, 3ECA0000[00A9C000] [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 03330000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, 164A0000[00023000] [AM] 147. c:\windows\system32\wpdshserviceobj.dll Microsoft Corporation Windows Portable Device Shell Service Object .text,.data,.rsrc,.reloc, 109C0000[0002C000] [ M] 183. c:\windows\system32\portabledevicetypes.dll Microsoft Corporation Windows Portable Device (Parameter) Types Component .text,.orpc,.data,.rsrc,.reloc, 10930000[00049000] [ M] 184. c:\windows\system32\portabledeviceapi.dll Microsoft Corporation Windows Portable Device API Components .text,.orpc,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 185. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 042A0000[00048000] [ M] 178. c:\program files\rising\rav\wbshld.dll Beijing Rising Information Technology Co., Ltd. wbshld DLL .text,.bss,.rdata,.data,.edata,.xdata,Uninstal,.rsrc,.reloc, 05510000[0004C000] [ M] 186. c:\program files\common files\adobe\acrobat\activex\pdfshell.chs Adobe Systems, Inc. PDF Shell Extension .rsrc,.reloc, + 000003b4(948) csrss.exe + 000003d4(980) winlogon.exe 10000000[0003B000] [AM] 98. c:\program files\stardock\object desktop\windowblinds\wbsrv.dll Stardock Corporation WBSrv.dll .text,.rdata,.data,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 185. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000400(1024) services.exe 46040000[0000F000] [ M] 187. c:\windows\apppatch\acadproc.dll Microsoft Corporation Windows Compatibility DLL .text,.data,.rsrc,.reloc, + 00000414(1044) lsass.exe + 000004c0(1216) svchost.exe + 000004f0(1264) svchost.exe + 00000510(1296) RsMgrSvc.exe 00400000[00024000] [AM] 24. c:\program files\rising\rsd\rsmgrsvc.exe Beijing Rising Information Technology Co., Ltd. RsMgrSvc Application .text,.rdata,.data,.rsrc, 10000000[0002E000] [ M] 188. c:\program files\rising\rsd\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 003E0000[00019000] [ M] 189. c:\program files\rising\rsd\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, + 0000051c(1308) RavMonD.exe 00400000[00029000] [AM] 25. c:\program files\rising\rav\ravmond.exe Beijing Rising Information Technology Co., Ltd. ravmond .text,.rdata,.data,.rsrc, 10000000[0003C000] [ M] 190. c:\program files\rising\rav\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 003E0000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01B70000[0004B000] [ M] 191. c:\program files\rising\rav\rsconf.dll Beijing Rising Information Technology Co., Ltd. rsconf Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 011A0000[00017000] [ M] 192. c:\program files\rising\rav\scansrvp.dll Beijing Rising Information Technology Co., Ltd. ScanSrvP Module .text,.rdata,.data,.rsrc,.reloc, 01BC0000[00086000] [ M] 193. c:\program files\rising\rav\cnt09.dll Beijing Rising Information Technology Co., Ltd. cnt09 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01C60000[00019000] [ M] 194. c:\program files\rising\rav\moncomm.dll Beijing Rising Information Technology Co., Ltd. MonComm .text,.rdata,.data,.rsrc,.reloc, 01C90000[0001C000] [ M] 195. c:\program files\rising\rav\monbase.dll Beijing Rising Information Technology Co., Ltd. MonBase .text,.rdata,.data,.rsrc,.reloc, 01CC0000[00081000] [ M] 196. c:\program files\rising\rav\rslog.dll Beijing Rising Information Technology Co., Ltd. rslog Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01D70000[00029000] [ M] 197. c:\program files\rising\rav\rsstore.dll Beijing Rising Information Technology Co., Ltd. RSStore .text,.rdata,.data,.rsrc,.reloc, 01DB0000[0001A000] [ M] 198. c:\program files\rising\rav\mondrvd.dll Beijing Rising Information Technology Co., Ltd. mondrvd .text,.rdata,.data,.rsrc,.reloc, 01DE0000[00035000] [ M] 199. c:\program files\rising\rav\defmon.dll Beijing Rising Information Technology Co., Ltd. DefMon .text,.rdata,.data,.rsrc,.reloc, 01E30000[00010000] [ M] 200. c:\program files\rising\rav\moncom08.dll Beijing Rising Information Technology Co., Ltd. MonCom08 .text,.rdata,.data,.rsrc,.reloc, 01E50000[00018000] [ M] 201. c:\program files\rising\rav\taskplug.dll Beijing Rising Information Technology Co., Ltd. TaskPlug .text,.rdata,.data,.rsrc,.reloc, 01F80000[00010000] [ M] 202. c:\program files\rising\rav\mondrvm.dll Beijing Rising Information Technology Co., Ltd. mondrvm .text,.rdata,.data,.rsrc,.reloc, 01FA0000[0007F000] [ M] 203. c:\program files\rising\rav\monrule.dll Beijing Rising Information Technology Co., Ltd. MonRule .text,.rdata,.data,.rsrc,.reloc, 02040000[0002B000] [ M] 204. c:\program files\rising\rav\filemon.dll Beijing Rising Information Technology Co., Ltd. Filemon .text,.rdata,.data,.rsrc,.reloc, 02080000[00030000] [ M] 205. c:\program files\rising\rav\mailmon.dll Beijing Rising Information Technology Co., Ltd. MailMon .text,.rdata,.data,.rsrc,.reloc, 020F0000[00084000] [ M] 206. c:\program files\rising\rav\rsindent.dll Beijing Rising Information Technology Co., Ltd. rsindent .text,.rdata,.data,.rsrc,.reloc, 02580000[0001D000] [ M] 207. c:\program files\rising\rav\cnt08.dll Beijing Rising Information Technology Co., Ltd. cnt08 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 027A0000[00019000] [ M] 208. c:\program files\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02CF0000[0002E000] [ M] 209. c:\program files\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02D20000[00019000] [ M] 210. c:\program files\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 02EE0000[00021000] [ M] 211. c:\program files\rising\rav\hooksys.dll Beijing Rising Information Technology Co., Ltd. Hooksys.dll .text,.rdata,.data,.idata,.rsrc,.reloc, 030A0000[0001F000] [ M] 212. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 030C0000[00024000] [ M] 213. c:\program files\rising\rav\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 03410000[0002A000] [ M] 214. c:\program files\rising\rav\rstask.dll Beijing Rising Information Technology Co., Ltd. RsTask Control .text,.rdata,.data,.rsrc,.reloc, 034D0000[00018000] [ M] 215. c:\program files\rising\rav\rsstub.dll Beijing Rising Information Technology Co., Ltd. rsstub Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23700000[00023000] [ M] 216. c:\program files\rising\rav\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 03A70000[0000D000] [ M] 217. c:\program files\rising\rav\hooktdi.dll Beijing Rising Information Technology Co., Ltd. hooktdi.dll .text,.rdata,.data,.rsrc,.reloc, 03BA0000[00096000] [ M] 218. c:\program files\rising\rav\bacore.dll Beijing Rising Information Technology Co., Ltd. Rising MBA DLL .text,.rdata,.data,.rsrc,.reloc, 03C60000[00081000] [ M] 219. c:\program files\rising\rav\rsnetsvr.dll Beijing Rising Information Technology Co., Ltd. rsnetsvr .text,.rdata,.data,.rsrc,.reloc, 04030000[00016000] [ M] 220. c:\program files\rising\rav\bawhite.dll Beijing Rising Information Technology Co., Ltd. bawhite Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04260000[0001C000] [ M] 221. c:\program files\rising\rav\scanadd.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Addon .text,.rdata,.data,.rsrc,.reloc, 04290000[0006F000] [ M] 222. c:\program files\rising\rav\scanner.dll Beijing Rising Information Technology Co., Ltd. RsScanner Module .text,.rdata,.data,.rsrc,.reloc, 04320000[00038000] [ M] 223. c:\program files\rising\rav\recomp.dll Beijing Rising Information Technology Co., Ltd. component manager Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04370000[00036000] [ M] 224. c:\program files\rising\rav\refs.dll Beijing Rising Information Technology Co., Ltd. filesystem Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 043C0000[00034000] [ M] 225. c:\program files\rising\rav\viruslib.dll Beijing Rising Information Technology Co., Ltd. VirusLib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 04410000[0002A000] [ M] 226. c:\program files\rising\rav\relibldr.dll Beijing Rising Information Technology Co., Ltd. libloader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 063C0000[00019000] [ M] 227. c:\program files\rising\rav\scansrv.dll Beijing Rising Information Technology Co., Ltd. ScanSrv Module .text,.rdata,.data,.rsrc,.reloc, + 00000544(1348) svchost.exe 01930000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, + 000005d4(1492) svchost.exe + 000005ec(1516) svchost.exe + 0000063c(1596) SafetyBox.exe 00400000[00088000] [AM] 153. c:\program files\rising\rfb\safetybox.exe Beijing Rising Information Technology Co., Ltd. 账号保险柜 5.0 .text,.rdata,.data,.rsrc, 10000000[00025000] [ M] 228. c:\program files\rising\rfb\rsslogvw.dll Beijing Rising Information Technology Co., Ltd. RssLogvw Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00490000[00090000] [ M] 229. c:\program files\rising\rfb\rssdb.dll Beijing Rising Information Technology Co., Ltd. RssDB Dynamic Link Library .text,.rdata,.data,number,.rsrc,.reloc, 23900000[00040000] [ M] 230. c:\program files\rising\rfb\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23700000[00023000] [ M] 231. c:\program files\rising\rfb\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B50000[0002D000] [ M] 232. c:\program files\rising\rfb\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B80000[00019000] [ M] 233. c:\program files\rising\rfb\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00CF0000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, 26600000[00086000] [ M] 234. c:\program files\rising\rfb\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 00D30000[00032000] [ M] 235. c:\program files\rising\rfb\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 23800000[00039000] [ M] 236. c:\program files\rising\rfb\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 016F0000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 021D0000[0000D000] [AM] 121. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, 028F0000[0004F000] [ M] 237. c:\program files\rising\rfb\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, + 00000650(1616) RSTRAY.EXE 00400000[0002C000] [AM] 156. c:\program files\rising\rav\rstray.exe Beijing Rising Information Technology Co., Ltd. Rising tray framework .text,.rdata,.data,.rsrc, 10000000[00037000] [ M] 238. c:\program files\rising\rav\comserv.dll Beijing Rising Information Technology Co., Ltd. Rising tray common service .text,.rdata,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 23700000[00023000] [ M] 216. c:\program files\rising\rav\rslang.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00B70000[0002E000] [ M] 209. c:\program files\rising\rav\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00BA0000[00019000] [ M] 210. c:\program files\rising\rav\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 00D30000[00019000] [ M] 208. c:\program files\rising\rav\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23800000[00039000] [ M] 239. c:\program files\rising\rav\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 00F70000[00014000] [ M] 240. c:\program files\rising\rav\monstate.dll Beijing Rising Information Technology Co., Ltd. MonState .text,.rdata,.data,.rsrc,.reloc, 00FA0000[00016000] [ M] 241. c:\program files\rising\rav\scanevnt.dll Beijing Rising Information Technology Co., Ltd. Rising Scan Service Event Handler .text,.rdata,.data,.rsrc,.reloc, 26600000[0007B000] [ M] 242. c:\program files\rising\rav\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 00FE0000[0004B000] [ M] 191. c:\program files\rising\rav\rsconf.dll Beijing Rising Information Technology Co., Ltd. rsconf Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01040000[00024000] [ M] 243. c:\program files\rising\rav\rspalvd.dll Beijing Rising Information Technology Co., Ltd. rspalvd .text,.rdata,.data,.rsrc,.reloc, 01080000[0007D000] [ M] 244. c:\program files\rising\rav\mruleui.dll Beijing Rising Information Technology Co., Ltd. mruleui .text,.rdata,.data,.rsrc,.reloc, 01110000[000D7000] [ M] 245. c:\program files\rising\rav\montray.dll Beijing Rising Information Technology Co., Ltd. Rising AntiVirus 2011 .text,.rdata,.data,.rsrc,.reloc, 01280000[0004F000] [ M] 246. c:\program files\rising\rav\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 012D0000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 01320000[00013000] [ M] 247. c:\program files\rising\rav\usbserv.dll Beijing Rising Information Technology Co., Ltd. Rising AntiVirus 2011 .text,.rdata,.data,.rsrc,.reloc, 01340000[0003A000] [ M] 248. c:\program files\rising\rav\scantray.dll Beijing Rising Information Technology Co., Ltd. Scan Tray Program .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 249. c:\program files\rising\rav\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01650000[00048000] [ M] 178. c:\program files\rising\rav\wbshld.dll Beijing Rising Information Technology Co., Ltd. wbshld DLL .text,.bss,.rdata,.data,.edata,.xdata,Uninstal,.rsrc,.reloc, 3ECA0000[00A9C000] [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 02620000[000BA000] [ M] 250. c:\program files\rising\rav\dfw.dll Beijing Rising Information Technology Co., Ltd. DFW Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 026F0000[00087000] [ M] 251. c:\program files\rising\rav\scanprxy.dll Beijing Rising Information Technology Co., Ltd. ScanPrxy Module .text,.rdata,.data,.rsrc,.reloc, 02CE0000[00039000] [ M] 252. c:\program files\rising\rav\gcompt.dll Beijing Rising Information Technology Co., Ltd. GeneralC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02D30000[0001F000] [ M] 253. c:\program files\rising\rav\isol.dll Beijing Rising Information Technology Co., Ltd. oIsolati Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02D60000[00029000] [ M] 197. c:\program files\rising\rav\rsstore.dll Beijing Rising Information Technology Co., Ltd. RSStore .text,.rdata,.data,.rsrc,.reloc, + 00000680(1664) FuncKey.exe 00400000[00025000] [AM] 149. c:\program files\hotkey management\funckey.exe Hotkey Application .text,.rdata,.data,.rsrc, 02000000[00006000] [ M] 254. c:\program files\hotkey management\winio.dll http://www.internals.com WinIo .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, + 000006a8(1704) CTAudSvc.exe 00400000[00050000] [AM] 6. c:\program files\creative\shared files\ctaudsvc.exe Creative Technology Ltd Creative Audio Service .text,.rdata,.data,.rsrc, + 000006d4(1748) svchost.exe 00C10000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, + 00000708(1800) rstray.exe 00400000[00026000] [AM] 150. c:\program files\rising\antispyware\rstray.exe Beijing Rising Information Technology Co., Ltd. RSTray .text,.rdata,.data,.rsrc, 10000000[0004C000] [ M] 255. c:\program files\rising\antispyware\rsmginfo.dll Beijing Rising Information Technology Co., Ltd. rsmginfo .text,.rdata,.data,.rsrc,.reloc, 00910000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00C80000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, 00CB0000[00024000] [ M] 256. c:\program files\rising\antispyware\comserv.dll Beijing Rising Information Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 00CE0000[00019000] [ M] 175. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 257. c:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 258. c:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 23800000[00039000] [ M] 259. c:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 23700000[00026000] [ M] 260. c:\program files\rising\antispyware\rscommon.dll Beijing Rising Information Technology Co., Ltd. Rising Common Function Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00D40000[0002D000] [ M] 174. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00EC0000[00022000] [ M] 261. c:\program files\rising\antispyware\rsxml1.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 262. c:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00F80000[00081000] [ M] 263. c:\program files\rising\antispyware\runiep.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware tray .text,.rdata,.data,.rsrc,.reloc, 01010000[00034000] [ M] 171. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01070000[0001F000] [ M] 212. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01090000[00024000] [ M] 264. c:\program files\rising\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, + 00000728(1832) PM.exe 00400000[00028000] [AM] 155. c:\program files\power manager\pm.exe PowerManager Application .text,.rdata,.data,.rsrc, 02000000[00006000] [ M] 265. c:\program files\power manager\winio.dll http://www.internals.com WinIo .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, + 0000073c(1852) RunDll32.exe 00A00000[00009000] [ M] 266. c:\windows\system32\ksrun.dll Creative Technology Ltd. KSRun Persistence Module .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, 00D30000[00043000] [ M] 267. c:\windows\system32\ksxppi32.dll .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 185. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000790(1936) nvsvc32.exe 00400000[00027000] [AM] 22. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 86.17 .text,.rdata,.data,.rsrc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, + 000007a8(1960) rssmond.exe 00400000[00033000] [AM] 26. c:\program files\rising\rfb\rssmond.exe Beijing Rising Information Technology Co., Ltd. rssmond .text,.rdata,.data,.rsrc, 10000000[00032000] [ M] 235. c:\program files\rising\rfb\combase.dll Beijing Rising Information Technology Co., Ltd. combase .text,.rdata,.data,.rsrc,.reloc, 00F40000[00019000] [ M] 268. c:\program files\rising\rfb\moncomm.dll Beijing Rising Information Technology Co., Ltd. MonComm .text,.rdata,.data,.rsrc,.reloc, 00F80000[0001D000] [ M] 269. c:\program files\rising\rfb\monbase.dll Beijing Rising Information Technology Co., Ltd. MonBase .text,.rdata,.data,.rsrc,.reloc, 010F0000[0001A000] [ M] 270. c:\program files\rising\rfb\rssafetymondriver.dll Beijing Rising Information Technology Co., Ltd. Rssafety 动态链接库 .text,.rdata,.data,.rsrc,.reloc, 01120000[00021000] [ M] 271. c:\program files\rising\rfb\rssafetymon.dll Beijing Rising Information Technology Co., Ltd. Rssafety 动态链接库 .text,.rdata,.data,.rsrc,.reloc, 01180000[00016000] [ M] 272. c:\program files\rising\rfb\rssvirusmon.dll Beijing Rising Information Technology Co., Ltd. Rssafety 动态链接库 .text,.rdata,.data,.rsrc,.reloc, 011B0000[00019000] [ M] 273. c:\program files\rising\rfb\proccomm.dll Beijing Rising Information Technology Co., Ltd. ProcComm Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 011E0000[0002D000] [ M] 232. c:\program files\rising\rfb\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01870000[00019000] [ M] 233. c:\program files\rising\rfb\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 01F50000[00090000] [ M] 229. c:\program files\rising\rfb\rssdb.dll Beijing Rising Information Technology Co., Ltd. RssDB Dynamic Link Library .text,.rdata,.data,number,.rsrc,.reloc, 018F0000[00020000] [ M] 274. c:\program files\rising\rfb\rsprotect.dll Beijing Rising Information Technology Co., Ltd. rsprotect Dynamic Link Library .text,.rdata,.data,.idata,.rsrc,.reloc, + 0000081c(2076) SxgTkBar.exe 00400000[0000E000] [AM] 157. c:\windows\system32\sxgtkbar.exe YAMAHA COROPRATION Taskbar application .text,.rdata,.data,.rsrc, 72C80000[00008000] [ M] 185. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, + 00000848(2120) ctfmon.exe 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, + 00000a68(2664) chrome.exe 00400000[00137000] [ M] 275. f:\program files\google\chrome\application\chrome.exe Google Inc. Google Chrome .text,.rdata,.data,.tls,.rsrc,.reloc, 01C30000[0281C000] [ M] 276. f:\program files\google\chrome\application\23.0.1271.64\chrome.dll Google Inc. Google Chrome .text,.rdata,.data,.tls,.unwante,.rodata,.syzygy,.rsrc,.reloc, 4AD00000[00981000] [ M] 277. f:\program files\google\chrome\application\23.0.1271.64\icudt.dll The ICU Project ICU Data DLL .rdata,.rsrc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00048000] [ M] 178. c:\program files\rising\rav\wbshld.dll Beijing Rising Information Technology Co., Ltd. wbshld DLL .text,.bss,.rdata,.data,.edata,.xdata,Uninstal,.rsrc,.reloc, 04460000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 04610000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, 08C00000[002A6000] [ M] 278. c:\windows\system32\sogoupy.ime Sogou.com Inc. 搜狗拼音输入法 .text,.rdata,.data,.rsrc,.reloc, 080C0000[00073000] [ M] 279. c:\program files\sogouinput\6.1.0.6953\resource.dll Sogou.com Inc. 搜狗拼音输入法 资源 .rsrc, 0E6D0000[00091000] [ M] 280. c:\program files\sogouextension\sogouflash\1.0.0.117\sogouflashdll.dll Sogou.com Inc. 搜狗拼音输入法 - Flash皮肤接口 .text,.rdata,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 185. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 0FF00000[00043000] [ M] 180. c:\documents and settings\thtf\application data\vdisksyn\bin\cloudboxshellext.dll 微盘工作室 微盘工作室开发 .text,.rdata,.data,.rsrc,.reloc, 102B0000[00076000] [ M] 181. c:\documents and settings\thtf\application data\115\box\sync115ext.dll 广东雨林木风计算机科技有限公司 115同步盘Shell扩展 .text,.rdata,.data,.rsrc,.reloc, 10430000[00074000] [ M] 182. c:\documents and settings\thtf\application data\kingsoft\klive\bin\kliveshellext.dll Kingsoft Corp. Ltd. KliveShellExt Module .text,.rdata,.data,.rsrc,.reloc, 108E0000[0003D000] [AM] 146. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + 00000b60(2912) ras.exe 00400000[0001F000] [ M] 281. c:\program files\rising\antispyware\ras.exe Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00048000] [ M] 178. c:\program files\rising\rav\wbshld.dll Beijing Rising Information Technology Co., Ltd. wbshld DLL .text,.bss,.rdata,.data,.edata,.xdata,Uninstal,.rsrc,.reloc, 00CE0000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01090000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, 01100000[00065000] [ M] 282. c:\program files\rising\antispyware\rspalmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 010D0000[0001F000] [ M] 212. c:\program files\rising\rav\proccom.dll Beijing Rising Information Technology Co., Ltd. ProcessC Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01170000[00024000] [ M] 264. c:\program files\rising\antispyware\rscommx2.dll Beijing Rising Information Technology Co., Ltd. RsCommX2 .text,.rdata,.data,.rsrc,.reloc, 012C0000[0002D000] [ M] 174. c:\program files\rising\antispyware\comx3.dll Beijing Rising Information Technology Co., Ltd. comx3 Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 012F0000[00019000] [ M] 175. c:\program files\rising\antispyware\syslay.dll Beijing Rising Information Technology Co., Ltd. Syslay .text,.rdata,.data,.rsrc,.reloc, 01460000[00058000] [ M] 283. c:\program files\rising\antispyware\dbmgr.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 7C140000[00103000] [ M] 284. c:\program files\rising\antispyware\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 258. c:\program files\rising\antispyware\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 261. c:\program files\rising\antispyware\rsxml1.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 257. c:\program files\rising\antispyware\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 01610000[00039000] [ M] 259. c:\program files\rising\antispyware\rsxml.dll Beijing Rising Information Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 26600000[00078000] [ M] 285. c:\program files\rising\antispyware\rsguilib.dll Beijing Rising Information Technology Co., Ltd. Rising GUI Library Loader .text,.rdata,.data,.rsrc,.reloc, 23900000[00040000] [ M] 262. c:\program files\rising\antispyware\pngdll.dll Beijing Rising Information Technology Co., Ltd. Rising .Png File Loader Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01770000[00031000] [ M] 286. c:\program files\rising\antispyware\pweb.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01800000[0002D000] [ M] 287. c:\program files\rising\antispyware\pdefend.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01830000[002A1000] [ M] 288. c:\program files\rising\antispyware\pscan.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01AE0000[00034000] [ M] 171. c:\program files\rising\antispyware\ncomm.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01B40000[00071000] [ M] 289. c:\program files\rising\antispyware\pset.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01BC0000[000B8000] [ M] 290. c:\program files\rising\antispyware\ptools.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01C80000[00077000] [ M] 291. c:\program files\rising\antispyware\psysinfo.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 01D00000[00086000] [ M] 292. c:\program files\rising\antispyware\kengine.dll Beijing Rising Information Technology Co., Ltd. KEngine .text,.rdata,.data,.rsrc,.reloc, 01D90000[00045000] [ M] 293. c:\program files\rising\antispyware\posttrt.dll Beijing Rising Information Technology Co., Ltd. PostTrt .text,.rdata,.data,.rsrc,.reloc, 01DF0000[00010000] [ M] 294. c:\program files\rising\antispyware\kscanex.dll Beijing Rising Information Technology Co., Ltd. KEngine ScanEx .text,.rdata,.data,.rsrc,.reloc, 01E10000[0002F000] [ M] 295. c:\program files\rising\antispyware\engine.dll Beijing Rising Information Technology Co., Ltd. kaka engine .text,.rdata,.data,.rsrc,.reloc, 01E50000[00033000] [ M] 296. c:\program files\rising\antispyware\rsdialog.dll Beijing Rising Information Technology Co., Ltd. Rsdiaglo DLL .text,.rdata,.data,.rsrc,.reloc, 01EA0000[00022000] [ M] 297. c:\program files\rising\antispyware\secscan.dll Beijing Rising Information Technology Co., Ltd. secscan Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01EE0000[00087000] [ M] 298. c:\program files\rising\antispyware\ntlib.dll Beijing Rising Information Technology Co., Ltd. Ntlib Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 01F80000[00017000] [ M] 299. c:\program files\rising\antispyware\secex.dll Beijing Rising Information Technology Co., Ltd. SecEx Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 3ECA0000[00A9C000] [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 023F0000[0003D000] [AM] 146. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, 04AF0000[00EC6000] [ M] 300. c:\windows\system32\macromed\flash\flash32_11_5_502_110.ocx Adobe Systems, Inc. Adobe Flash Player 11.5 r502 .text,.rodata,.rdata,.data,.rodata,.rsrc,.reloc, 061F0000[00043000] [ M] 180. c:\documents and settings\thtf\application data\vdisksyn\bin\cloudboxshellext.dll 微盘工作室 微盘工作室开发 .text,.rdata,.data,.rsrc,.reloc, 06240000[00076000] [ M] 181. c:\documents and settings\thtf\application data\115\box\sync115ext.dll 广东雨林木风计算机科技有限公司 115同步盘Shell扩展 .text,.rdata,.data,.rsrc,.reloc, 06510000[00074000] [ M] 182. c:\documents and settings\thtf\application data\kingsoft\klive\bin\kliveshellext.dll Kingsoft Corp. Ltd. KliveShellExt Module .text,.rdata,.data,.rsrc,.reloc, + 00000d10(3344) chrome.exe 00400000[00137000] [ M] 275. f:\program files\google\chrome\application\chrome.exe Google Inc. Google Chrome .text,.rdata,.data,.tls,.rsrc,.reloc, 01C30000[0281C000] [ M] 276. f:\program files\google\chrome\application\23.0.1271.64\chrome.dll Google Inc. Google Chrome .text,.rdata,.data,.tls,.unwante,.rodata,.syzygy,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 4AD00000[00981000] [ M] 277. f:\program files\google\chrome\application\23.0.1271.64\icudt.dll The ICU Project ICU Data DLL .rdata,.rsrc, 10000000[003EE000] [ M] 301. f:\program files\google\chrome\application\23.0.1271.64\pdf.dll Chrome PDF Viewer .text,.rdata,.data,.tls,.rsrc,.reloc, 01B40000[00076000] [ M] 302. f:\program files\google\chrome\application\23.0.1271.64\ppgooglenaclpluginchrome.dll .text,.rdata,.data,.rsrc,.reloc, 6A0C0000[0033F000] [ M] 303. f:\program files\google\chrome\application\23.0.1271.64\avcodec-54.dll .text,.data,.rdata,.rodata,/4,.bss,.edata,.idata,.CRT,.tls,.reloc, 68B80000[0002F000] [ M] 304. f:\program files\google\chrome\application\23.0.1271.64\avutil-51.dll .text,.data,.rdata,/4,.bss,.edata,.idata,.CRT,.tls,.reloc, 69900000[00049000] [ M] 305. f:\program files\google\chrome\application\23.0.1271.64\avformat-54.dll .text,.data,.rdata,/4,.bss,.edata,.idata,.CRT,.tls,.reloc, + 00000d24(3364) chrome.exe 00400000[00137000] [ M] 275. f:\program files\google\chrome\application\chrome.exe Google Inc. Google Chrome .text,.rdata,.data,.tls,.rsrc,.reloc, 01C30000[0281C000] [ M] 276. f:\program files\google\chrome\application\23.0.1271.64\chrome.dll Google Inc. Google Chrome .text,.rdata,.data,.tls,.unwante,.rodata,.syzygy,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 4AD00000[00981000] [ M] 277. f:\program files\google\chrome\application\23.0.1271.64\icudt.dll The ICU Project ICU Data DLL .rdata,.rsrc, 10000000[00CCB000] [ M] 306. f:\program files\google\chrome\application\23.0.1271.64\pepperflash\pepflashplayer.dll .text,.rodata,.rdata,.data,.rodata,.tls,.rsrc,.reloc, + 00000e68(3688) chrome.exe 00400000[00137000] [ M] 275. f:\program files\google\chrome\application\chrome.exe Google Inc. Google Chrome .text,.rdata,.data,.tls,.rsrc,.reloc, 01C30000[0281C000] [ M] 276. f:\program files\google\chrome\application\23.0.1271.64\chrome.dll Google Inc. Google Chrome .text,.rdata,.data,.tls,.unwante,.rodata,.syzygy,.rsrc,.reloc, 4AD00000[00981000] [ M] 277. f:\program files\google\chrome\application\23.0.1271.64\icudt.dll The ICU Project ICU Data DLL .rdata,.rsrc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00048000] [ M] 178. c:\program files\rising\rav\wbshld.dll Beijing Rising Information Technology Co., Ltd. wbshld DLL .text,.bss,.rdata,.data,.edata,.xdata,Uninstal,.rsrc,.reloc, 01BB0000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01C10000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, 047A0000[00028000] [ M] 307. d:\program files\mozilla firefox\plugins\np-mswmp.dll Microsoft Corporation np-mswmp .text,.data,.rsrc,.reloc, 0BEF0000[00037000] [ M] 308. c:\windows\system32\mfplat.dll Microsoft Corporation Media Foundation Platform DLL .text,.data,.rsrc,.reloc, 3ECA0000[00A9C000] [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 06090000[0003D000] [AM] 146. c:\windows\system32\ravext.dll Beijing Rising Information Technology Co., Ltd. Rising Shell Ext Module .text,.rdata,.data,.rsrc,.reloc, + 00000f38(3896) autorunschs.exe 00400000[000A3000] [ M] 309. c:\documents and settings\thtf\my documents\downloads\autoruns_v11.34h\autorunschs\autorunschs.exe Sysinternals - www.sysinternals.com 自动运行程序查看器 .text,.rdata,.data,.rsrc,.reloc, 66000000[00090000] [ M] 176. c:\program files\stardock\object desktop\windowblinds\wblind.dll Stardock Corporation WindowBlinds (32 bit XP) .text,.sdata,.rdata,.data,.rsrc,.reloc, 66600000[00017000] [ M] 177. c:\program files\stardock\object desktop\windowblinds\wbhelp.dll Stardock.Net, Inc WindowBlinds Helper DLL .sdata,.rdata,.data,.rsrc,.reloc, 10000000[00048000] [ M] 178. c:\program files\rising\rav\wbshld.dll Beijing Rising Information Technology Co., Ltd. wbshld DLL .text,.bss,.rdata,.data,.edata,.xdata,Uninstal,.rsrc,.reloc, 00D80000[00009000] [ M] 172. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 3EAB0000[001EB000] [ M] 173. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 01130000[00014000] [ M] 179. c:\program files\rising\antispyware\regcall.dll Beijing Rising Information Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,YCIShare,.rsrc,.reloc, 02380000[00043000] [ M] 180. c:\documents and settings\thtf\application data\vdisksyn\bin\cloudboxshellext.dll 微盘工作室 微盘工作室开发 .text,.rdata,.data,.rsrc,.reloc, 02A30000[00076000] [ M] 181. c:\documents and settings\thtf\application data\115\box\sync115ext.dll 广东雨林木风计算机科技有限公司 115同步盘Shell扩展 .text,.rdata,.data,.rsrc,.reloc, 02BB0000[00074000] [ M] 182. c:\documents and settings\thtf\application data\kingsoft\klive\bin\kliveshellext.dll Kingsoft Corp. Ltd. KliveShellExt Module .text,.rdata,.data,.rsrc,.reloc, 3ECA0000[00A9C000] [AM] 100. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc,