刚装的系统就杀了好多毒，用瑞星杀不出来，但用ewido却能杀很多，求助！
2006-06-07,09:21:42

System Repair Engineer 2.0.12.350 (2.0 RC 1)
    Windows 2000 Server Service Pack 4 - 管理权限用户 - 完整功能

以下内容被选中：
    所有的启动项目（包括注册表、启动文件夹、服务等）
    浏览器加载项
    正在运行的进程（包括进程模块信息）
    文件关联


启动项目
注册表
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
  <Internat.exe><internat.exe>
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <load><>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RavTray><C:\Program Files\Rising\Rav\RavTray.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RavTimer><C:\Program Files\Rising\Rav\RavTimer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <RavMon><C:\Program Files\Rising\Rav\RavMon.exe -system>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  <WebEasyMail><D:\WEBEAS~1\easymail.exe -src>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <shell><Explorer.exe>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
  <Userinit><C:\WINNT\system32\userinit.exe,>
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
  <AppInit_DLLs><apihookdll.dll>

==================================
启动文件夹
[U8加密服务]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\U8加密服务.lnk><N>
[U8定时任务管理器]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\U8定时任务管理器.lnk><N>
[U8预警服务]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\U8预警服务.lnk><N>
[服务管理器]
  <C:\Documents and Settings\All Users\「开始」菜单\程序\启动\服务管理器.lnk><N>
[快捷方式 WinVNC]
  <C:\Documents and Settings\Administrator\「开始」菜单\程序\启动\快捷方式 WinVNC.lnk><N>

==================================
服务
[Logical Disk Manager Administrative Service / dmadmin]
  <C:\WINNT\System32\dmadmin.exe /com><VERITAS Software Corp.>
[EasyMail NT Service / EasyMail]
  <D:\WEBEAS~1\EMSVR.EXE><Ma Jian>
[Rav Net Agent / RavAgent]
  <"C:\PROGRAM FILES\RISING\RAV\RavAgent.exe"><北京瑞星科技股份有限公司>
[Rav Net Alert / RavAlert]
  <C:\PROGRAM FILES\RISING\RAV\RavAlert.exe><北京瑞星科技股份有限公司>
[RavService / RavService]
  <"C:\Program Files\Rising\Rav\RavService.exe" /service><Beijing Rising Technology Co., Ltd.>
[RavUpdate / RavUpdate]
  <"C:\PROGRAM FILES\RISING\RAV\RavUpdate.exe" ><Beijing Rising Technology Co., Ltd.>
[Rising Process Communication Center / RsCCenter]
  <C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE><Beijing Rising Technology Co., Ltd.>
[RsRavMon Service / RsRavMon]
  <C:\PROGRAM FILES\RISING\RAV\Ravmond.exe><Beijing Rising Technology Co., Ltd.>
[QoS Provider / System Event]
  <"C:\WINNT\system32\explorer.exe" -netsvcs><N/A>
[U8BackupService / U8BackupService]
  <C:\WINNT\system32\U8BackupService.exe><N/A>
[U8TaskService / U8TaskService]
  <C:\WINNT\system32\U8TaskService.exe><N/A>
[用友U8预警调度服务 / UFALERTSERVICE]
  <C:\WINNT\system32\AlertService.exe><N/A>
[UfAutoLoadService / UfAutoLoadService]
  <C:\WINNT\system32\UfAutoLoadService.exe><>
[UfMsgGhost / UfMsgGhost]
  <C:\WINNT\system32\MsgGhost.exe><>
[U8管理软件 / UFNet]
  <C:\WINNT\system32\ServerNT.exe><N/A>
[用友U8任务调度服务 / UFTASKSCHEDULESERVICE]
  <C:\WINNT\system32\U8TaskScheduleService.exe><ufsoft>

==================================
浏览器加载项
[@msdxmLC.dll,-1@2052,电台(&R)]
  {8E718888-423F-11D2-876E-00A0C9082467} <C:\WINNT\System32\msdxm.ocx, Microsoft Corporation>
[百度-搜索MP3]
  <res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUMP3.HTM, N/A>
[百度-搜索图片]
  <res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUIMG.HTM, N/A>
[百度-搜索新闻]
  <res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUNEWS.HTM, N/A>
[百度-搜索歌词]
  <res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDULYRIC.HTM, N/A>
[百度-搜索网页]
  <res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUSEARCH.HTM, N/A>
[百度-搜索贴吧]
  <res://C:\WINNT\DOWNLO~1\BaiduBar.dll/BAIDUPOST.HTM, N/A>

==================================
正在运行的进程
[PID: 172][\SystemRoot\System32\smss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 200][\??\C:\WINNT\system32\csrss.exe]  <Microsoft Corporation><5.00.2195.6601>
[PID: 196][\??\C:\WINNT\system32\winlogon.exe]  <Microsoft Corporation><5.00.2195.6714>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 248][C:\WINNT\system32\services.exe]  <Microsoft Corporation><5.00.2195.6700>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\dmserver.dll]  <VERITAS Software Corp.><2195.6605.297.3>
[PID: 260][C:\WINNT\system32\lsass.exe]  <Microsoft Corporation><5.00.2195.6695>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 468][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 496][C:\WINNT\system32\spoolsv.exe]  <Microsoft Corporation><5.00.2195.6659>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 532][C:\WINNT\System32\msdtc.exe]  <Microsoft Corporation><1999.9.3421.3>
    [C:\WINNT\System32\apihookdll.dll]  <N/A><N/A>
[PID: 708][D:\WEBEAS~1\EMSVR.EXE]  <Ma Jian><3.5.2.1>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 720][C:\WINNT\System32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\System32\apihookdll.dll]  <N/A><N/A>
[PID: 732][C:\WINNT\system32\hidserv.exe]  <Microsoft Corporation><5.00.2195.6655>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 768][C:\WINNT\System32\llssrv.exe]  <Microsoft Corporation><5.00.2195.6697>
    [C:\WINNT\System32\apihookdll.dll]  <N/A><N/A>
[PID: 800][d:\PROGRA~1\MICROS~1\MSSQL\binn\sqlservr.exe]  <Microsoft Corporation><2000.080.0760.00>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 908][C:\PROGRAM FILES\RISING\RAV\RavAgent.exe]  <北京瑞星科技股份有限公司><17, 0, 0, 32>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\Strategy.dll]  <><17, 0, 0, 6>
    [C:\Program Files\Rising\Rav\RsCommx.dll]  <rising><17, 0, 0, 3>
    [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL]  <Rising Corp.><17, 0, 0, 7>
    [C:\PROGRAM FILES\RISING\RAV\CfgDll.dll]  <Rising Corp.><17, 0, 1, 71>
[PID: 1024][C:\PROGRAM FILES\RISING\RAV\RavAlert.exe]  <北京瑞星科技股份有限公司><17, 0, 0, 37>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\RsCommx.dll]  <rising><17, 0, 0, 3>
    [C:\Program Files\Rising\Rav\PlugIn\RptMC.dll]  <><17, 0, 0, 12>
    [C:\Program Files\Rising\Rav\PlugIn\AlrtPlgInRes936.dll]  <><17, 0, 0, 13>
    [C:\Program Files\Rising\Rav\PlugIn\MalAlrt.dll]  <><17, 0, 0, 10>
    [C:\Program Files\Rising\Rav\PlugIn\TrpPlgIn.dll]  <><17, 0, 0, 11>
    [C:\PROGRAM FILES\RISING\RAV\RsSnmp.dll]  <><17, 0, 0, 0>
    [C:\Program Files\Rising\Rav\PlugIn\MBPlgIn.dll]  <><17, 0, 0, 10>
    [C:\Program Files\Rising\Rav\PlugIn\NLPlgIn.dll]  <><17, 0, 0, 11>
    [C:\Program Files\Rising\Rav\PlugIn\RptUpCT.dll]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 2>
[PID: 1160][C:\PROGRAM FILES\RISING\RAV\RavUpdate.exe]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 38>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll]  <rising><17, 0, 0, 3>
[PID: 1224][C:\PROGRAM FILES\RISING\RAV\CCENTER.EXE]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 6>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 1268][C:\WINNT\system32\MSTask.exe]  <Microsoft Corporation><4.71.2195.6704>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 1972][C:\WINNT\system32\U8BackupService.exe]  <N/A><N/A>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\SecuComm.dll]  <N/A><N/A>
    [C:\WINNT\system32\UFCOMSQL\UFBackPlan.dll]  <用友软件股份有限公司><8.61.0038>
[PID: 1988][C:\WINNT\system32\U8TaskService.exe]  <N/A><N/A>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\UFCOMSQL\U8TaskPro.dll]  <用友软件股份有限公司><8.61.0001>
    [C:\WINNT\system32\Client.DLL]  <><1, 0, 0, 1>
    [C:\WINNT\system32\UMIscell.dll]  <><1, 0, 0, 1>
    [C:\WINNT\system32\M80SGV.dll]  <><8, 2, 0, 0>
[PID: 2016][C:\WINNT\system32\AlertService.exe]  <N/A><N/A>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\AlertDispatcher.dll]  <><1, 0, 0, 1>
[PID: 2028][C:\WINNT\system32\MsgGhost.exe]  <><1, 0, 0, 1>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 2092][C:\WINNT\system32\ServerNT.exe]  <N/A><N/A>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\UMiscell.dll]  <><1, 0, 0, 1>
    [C:\WINNT\system32\M80SGV.dll]  <><8, 2, 0, 0>
    [C:\WINNT\system32\SecuComm.dll]  <N/A><N/A>
[PID: 2112][C:\WINNT\system32\U8TaskScheduleService.exe]  <ufsoft><1, 0, 0, 1>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\TaskDispatcher.dll]  <><1, 0, 0, 1>
[PID: 2128][C:\WINNT\System32\WBEM\WinMgmt.exe]  <Microsoft Corporation><1.50.1085.0100>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 2156][C:\WINNT\system32\svchost.exe]  <Microsoft Corporation><5.00.2134.1>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 2172][C:\WINNT\system32\Dfssvc.exe]  <Microsoft Corporation><5.00.2195.6664>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 2192][C:\WINNT\System32\inetsrv\inetinfo.exe]  <Microsoft Corporation><5.00.0984>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 2204][C:\Program Files\Common Files\System\MSSearch\Bin\mssearch.exe]  <Microsoft Corporation><9.107.5512.0>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 2544][C:\WINNT\system32\dllhost.exe]  <Microsoft Corporation><5.00.2195.6692>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 2624][C:\WINNT\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe]  <Microsoft Corporation><1.1.4322.2032>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [c:\winnt\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_38b4b80e\mscorlib.dll]  <N/A><N/A>
    [c:\winnt\assembly\gac\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll]  < ><7.10.3052.4>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\ba02f675\00710297_e246c501\activeup.webcontrols.htmltextbox.dll]  <Active Up S.P.R.L.><2.1.1188.22068>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\018230e1\008b8f70_e76bc501\adodb.dll]  < ><2.6.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\4e77b8fd\00a8dce1_b085c501\aspnetpager.dll]  <Webdiyer><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\3c050527\0071d66b_6341c401\ufsoft.u8.framework.invokeservice.serversink.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\d436378f\0034445a_0f8ec501\assistedsolutions.slickupload.dll]  < ><1.0.2028.26438>
    [c:\winnt\assembly\gac\ufsoft.u8.framework.invokeservice\1.0.860.0__27100cfe39774293\ufsoft.u8.framework.invokeservice.dll]  <UFSoft Corporation><1.0.860.0>
    [c:\winnt\assembly\gac\ufsoft.u8.framework.bizbase\1.0.0.0__79a4e7ad54eeabca\ufsoft.u8.framework.bizbase.dll]  < ><1.0.0.0>
    [c:\winnt\assembly\gac\ufsoft.u8.framework.log\1.0.0.0__9445a96dcd94733f\ufsoft.u8.framework.log.dll]  <UFSoft Stock Corp, Ltd.><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\997dc9f9\00c0c7d7_fc86c501\bpmrainbowplugin.dll]  < ><1.0.2019.34398>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\7299b752\0081c968_9b9fc401\icsharpcode.sharpziplib.dll]  < ><0.5.0.0>
    [c:\winnt\assembly\gac\ufsoft.u8.framework.logincontext\1.0.0.0__90e57cffdf9d854d\ufsoft.u8.framework.logincontext.dll]  < ><1.0.0.0>
    [c:\winnt\assembly\gac\ufsoft.u8.framework.error\1.0.0.0__abe02929a274df6b\ufsoft.u8.framework.error.dll]  < ><1.0.0.0>
    [c:\winnt\assembly\gac\log4net\1.2.0.30714__b32731d11ce58905\log4net.dll]  <Neoworks Limited><1.2.0.30714>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\0c314b14\00710297_e246c501\datetextboxcontrols.dll]  <PeterBlum.com><1.0.8.42693>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\69d6f152\009c36f4_4c4dc501\si_ufsoft.u8.framework.login.bo.dll]  < ><0.0.0.0>

[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\30aef1a1\00710297_e246c501\datetextboxwebforms.dll]  <Peter L. Blum><1.0.7.42696>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\75e1a053\006f05f3_4c4dc501\i_ufsoft.u8.framework.login.bo.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\98b66ec1\004bf8d8_ba3dc601\ufsoft.u8.framework.login.bo.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\da1d8f63\00710297_e246c501\devsolution.portal.dll]  <DevSolution><1.0.1263.40256>

[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\5df177b3\00b55e1d_ca9cc501\securityandcreditidentity.dll]  < ><1.0.0.0>
    [c:\winnt\assembly\gac\ufsoft.u8.framework.servicemarkable\1.0.860.0__b30940874b271bd0\ufsoft.u8.framework.servicemarkable.dll]  <UFSoft Corporation><1.0.860.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\77cfb209\00e28f1e_ca9cc501\ufsoft.u8.framework.keymanage.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\901b80f3\00710297_e246c501\duemetri.rainbow.ecommerce.bankgateway.dll]  <DUEMETRI><1.2.950.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\1da68eab\00e28f1e_ca9cc501\tokenmanage.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\fef899fc\009e3398_e246c501\duemetri.ui.webcontrols.hwmenu.dll]  <DUEMETRI><1.0.0.1335>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\0c8aab68\003c1330_cb26c401\ufsoft.u8.framework.cryptographyservice.bf.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\5998f5fc\00492290_7e91c501\ufsoft.u8.framework.datasourceconfig.bo.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\da320c1f\009e3398_e246c501\duemetri.ui.webcontrols.panes.dll]  <DUEMETRI><1.0.0.1330>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\df7badee\00eedcfe_a4b6c401\securitylib.dll]  < ><1.0.0.0>
    [c:\winnt\assembly\gac\ufsoft.u8.framework.resource\1.0.0.0__710ba790827d5bc0\ufsoft.u8.framework.resource.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\fa0f7bc2\009e3398_e246c501\flashmovie.dll]  < ><1.0.1587.40940>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\d7dffd29\009e3398_e246c501\flashwebcontrol.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\ed28112a\009e3398_e246c501\fredck.fckeditor.dll]  <http://www.fredck.com><0.9.0.28344>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\cc86660d\004f3f8e_0f99c501\fredck.fckeditorv2.dll]  < ><2.1.1887.26124>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\c58a2619\009e3398_e246c501\freetextbox.dll]  < ><3.0.3300.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\419ce35a\005fc36d_e194c501\getalertmessage.dll]  < ><1.0.2037.29560>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\e7770ccc\009e3398_e246c501\gotdotnet.applicationblocks.data.dll]  < ><3.1.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\f5fc4dda\0081c968_9b9fc401\icsharpcode.sharpziplib.dll]  < ><0.5.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\8fe35206\0059dc31_337bc501\infragistics.webui.shared.v2.1.dll]  <Infragistics, Inc><2.1.20042.26>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\7badf79c\0059dc31_337bc501\infragistics.webui.ultrawebtab.v3.dll]  <Infragistics, Inc.><3.0.20042.26>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\cf8c325b\00befaff_b8d8c201\interop.adodb.dll]  < ><2.7.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\6b50e48b\0099ba66_b398c501\interop.mnusrv.dll]  < ><7.4.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\baaf0561\0095b45e_c692c501\interop.multilangpkg.dll]  < ><3.9.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\b1f6398f\0084b3e7_e425c501\interop.u8login.dll]  < ><1.13.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\1ffb7d64\00696484_7b8ac401\i_ufsoft.u8.framework.keymanage.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\f27358a3\009c36f4_4c4dc501\i_ufsoft.u8.framework.login.bo.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\af8599a2\009c36f4_4c4dc501\ufsoft.u8.framework.login.bo.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\a3bda40b\00b55e1d_ca9cc501\securityandcreditidentity.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\2707d0f5\003cf220_ca9cc501\ufsoft.u8.framework.login.ui.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\2547639c\00b9cf0a_a597c401\ufsoft.u8.framework.keymanage.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\eb1e8bbe\00e9a6c2_4582c501\jmailtomb.dll]  <UFIDA U8 OA><1.0.1994.15104>
    [C:\WINNT\system32\Client.DLL]  <><1, 0, 0, 1>
    [C:\WINNT\system32\UMIscell.dll]  <><1, 0, 0, 1>
    [C:\WINNT\system32\M80SGV.dll]  <><8, 2, 0, 0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\b89d18f7\00db2b6b_9b9fc401\log4net.dll]  <Neoworks Limited><1.2.0.30714>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\764112ef\00cb6499_e246c501\metabuilders.webcontrols.updown.dll]  <MetaBuilders><1.0.1034.33427>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\69ae02e3\00cb6499_e246c501\microsoft.applicationblocks.data.dll]  < ><3.1.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\60db9f56\00cb6499_e246c501\novell.directory.ldap.dll]  <Novell, Inc>< >
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\9aaa2d59\00aaf422_4243c601\oacontextclient.dll]  < ><1.0.2259.25937>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\588a295e\00045725_4243c601\oacontextserver.dll]  < ><1.0.2259.25939>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\b19ea57d\00cb6499_e246c501\oacrypt.dll]  < ><1.0.1725.34521>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\6702e96f\001a1857_da3dc601\oamodules.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\ec313ed3\00cb6499_e246c501\opensmtp.dll]  <OpenSmtp><1.9.6.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\b9fe96ab\008097d6_1747c501\radtreeview.dll]  <telerik><2.1.1.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\d5637211\00cb6499_e246c501\rainbowscheduler.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\506557eb\00cb6499_e246c501\rewrite.net.dll]  < ><1.0.1828.32898>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\ce9c7e3b\00cb6499_e246c501\rewriterules.rainbow.dll]  < ><1.0.1291.19609>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\0aa01252\00cb6499_e246c501\rewriterules.u8portal.dll]  < ><1.0.1828.32896>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\862b11aa\00cb6499_e246c501\rulesengine.dll]  < ><1.0.1828.32891>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\b1ae270d\00cb6499_e246c501\solpartwebcontrols.dll]  <Solution Partners, Inc.><1.4.0.2>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\bcbb1142\00cb6499_e246c501\staticdust.web.ui.controls.uploaddialog.dll]  <StaticDust><1.2.5.34822>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\4c49e225\00cb6499_e246c501\system.configuration.provider.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\cae0164a\00cb6499_e246c501\tripleasp.tableeditor.dll]  <TripleASP.Net><0.9.1103.35121>

[c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\bc7f784f\006dfe38_4266c501\u8esperantus.dll]  <UFSOFT><1.0.4.1610>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\5cbf814f\000e7f8c_0532c601\u8portal.dll]  <UFSOFT><1.3.0.1760>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\ad02b546\0025c79b_e246c501\u8portal.provider.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\ff1a4b91\0025c79b_e246c501\u8portal.provider.implementation.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\4d341eb6\0061755b_0f8ec501\u8portal.settings.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\09751ef6\00498730_6b90c501\ufmail8config.net.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\c00a1b75\00b8c0e6_e5b7c401\ufsoft.u8.framework.bizbase.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\0e4dbd21\00168473_9b9fc401\ufsoft.u8.framework.bizentity.dll]  < ><1.0.0.0>
    [d:\u8soft\u8portal\framework\ufsoft.u8.framework.memento.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\e29302cb\0043b574_9b9fc401\ufsoft.u8.framework.common.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\5f67fce9\00b8c0e6_e5b7c401\ufsoft.u8.framework.error.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\159fefb9\0025c79b_e246c501\ufsoft.u8.framework.httpmodule.dll]  < ><1.0.1890.25199>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\d462548c\00490d41_e5b7c401\ufsoft.u8.framework.invokeservice.clientsink.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\e4b34e97\00cc7532_0e1bc501\ufsoft.u8.framework.invokeservice.dll]  <UFSoft Corporation><1.0.860.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\e2a2e091\00e5f1e7_e5b7c401\ufsoft.u8.framework.log.dll]  <UFSoft Stock Corp, Ltd.><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\d18447b4\00e28f1e_ca9cc501\ufsoft.u8.framework.logincontext.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\8c0ddb0f\00802218_1794c501\ufsoft.u8.framework.resource.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\5427cf71\00ca4878_9b9fc401\ufsoft.u8.framework.servicemarkable.dll]  <UFSoft Corporation><1.0.860.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\5b451fdd\00072c07_809cc501\ufsoft.u8.hr.common.dll]  < ><1.0.0.1>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\a480dee6\00345d08_809cc501\ufsoft.u8.hr.performance.bl.dll]  < ><1.0.0.1>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\cbd0459e\00dafa05_809cc501\ufsoft.u8.hr.performance.tableschema.dll]  < ><1.0.0.1>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\1d79350f\00618e09_809cc501\ufsoft.u8.hr.performance.pl.dll]  < ><1.0.2047.16708>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\87f92802\00345d08_809cc501\ufsoft.u8.hr.performance.web.bl.dll]  < ><1.0.2047.16707>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\a4105563\00345d08_809cc501\ufsoft.u8.hr.webcontrols.dll]  < ><1.0.2047.16707>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\cdca0753\0025c79b_e246c501\ufsoft.u8.portal.security.dll]  < ><1.0.1916.20234>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\5ca9e21d\0025c79b_e246c501\ufsoft.u8.portal.service.dll]  < ><1.0.1897.25178>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\cvtzuwv2.dll]  < ><0.0.0.0>
    [C:\WINNT\system32\UFCOMSQL\MultiLangPkg.dll]  <北京用友软件股份有限公司><8.61>
    [C:\WINNT\system32\UFCOMSQL\MnuSrv.dll]  <北京用友软件股份有限公司><8.61>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\0ddpk0ts.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\vokl7oxw.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\cpxcg9kk.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\he1vgn_j.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\pp-wcxkq.dll]  <N/A><N/A>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\0g3i4ht7.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\v1invm-k.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\assembly\dl2\0121f201\00d70402_fa3cc601\u8portal.resources.dll]  < ><1.3.0.1760>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\cno4uxbb.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\6toypakb.dll]  <N/A><N/A>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\4xveqxs5.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8portal\3846c1eb\873bad3f\us6x9ltr.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\ac90f26a\00314184_2841c601\si_ufsoft.u8.bas.bf.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\13a00361\00314184_2841c601\i_ufsoft.u8.bas.bf.dll]  < ><0.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\c9633e92\00cc7366_2841c601\ufsoft.u8.bas.bf.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\c0dc5e37\0043b574_9b9fc401\ufsoft.u8.framework.common.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\07e98f2d\00a33e91_469dc501\ufsoft.u8.u8m.bf.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\3cc24be5\009f4265_2841c601\ufsoft.u8.bas.bo.dll]  < ><1.0.0.0>
    [c:\winnt\assembly\gac\ufsoft.u8.u8m.common\1.0.0.0__79a4e7ad54eeabca\ufsoft.u8.u8m.common.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\0b5db975\00a87628_2841c601\ufsoft.u8.u8m.doschema.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\cbd85c7f\00760d90_469dc501\ufsoft.u8.u8m.bo.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\6940d833\004620a3_469dc501\ufsoft.u8.u8m.log.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\e8283831\00cdb3a6_469dc501\ufsoft.u8.framework.exceptions.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\19f9ed22\00cdb3a6_469dc501\ufsoft.u8.framework.contextsrv.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\f801b79a\00721164_2841c601\ufsoft.u8.bas.dac.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\6552a9aa\003d3133_2841c601\ufsoft.u8.u8m.bfdispatcher.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\7c468ac7\00626eb1_469dc501\ufsoft.u8.u8m.u8com.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\66b85544\001cab8d_469dc501\ufsoft.u8.u8m.dac.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\1bbcd542\003cf220_ca9cc501\ufsoft.u8.framework.login.ui.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\867eab37\00c21813_58e9c401\ufsoft.u8.u8m.bill.dll]  < ><8.2.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\8e87f873\00fcb785_9857c501\ufsoft.u8.dataaccessmodel.provider.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\9461a93b\00652a9d_469dc501\ufsoft.u8.u8m.exceptions.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\9cbb2a51\00a33e91_469dc501\ufsoft.u8.u8m.authsrv.dll]  < ><1.0.0.0>
    [c:\winnt\microsoft.net\framework\v1.1.4322\temporary asp.net files\u8application\13a1376a\85c8280c\assembly\dl2\b0fafa20\000fc11f_ca9cc501\ufsoft.u8.framework.logincontrollib.dll]  < ><1.0.0.0>

[C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Rising Corp.><17, 0, 0, 7>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Rising Corp.><17, 0, 1, 71>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><17, 0, 0, 3>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 2824][C:\WINNT\system32\internat.exe]  <Microsoft Corporation><5.00.2920.0000>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 2844][C:\WINNT\system32\UfAuthSvrMgr.exe]  <用友软件公司><1, 0, 0, 1>
    [C:\WINNT\system32\MultiLang.dll]  <UFIDA><8, 61, 0, 0>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [d:\U8SOFT\Resources\UfAuthSvrMgrzh-CN.dll]  <用友软件公司><1, 0, 0, 1>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 2760][C:\WINNT\system32\UfTaskSvrMgr.exe]  <用友软件公司><1, 0, 0, 1>
    [C:\WINNT\system32\MultiLang.dll]  <UFIDA><8, 61, 0, 0>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [d:\U8SOFT\Resources\UfTaskSvrMgrzh-CN.dll]  <用友软件公司><1, 0, 0, 1>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 3112][C:\WINNT\system32\UfAlertSvrMgr.exe]  <用友软件公司><1, 0, 0, 1>
    [C:\WINNT\system32\MultiLang.dll]  <UFIDA><8, 61, 0, 0>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [d:\U8SOFT\Resources\UfAlertSvrMgrzh-CN.dll]  <用友软件公司><1, 0, 0, 1>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 3120][C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe]  <Microsoft Corporation><2000.080.0760.00>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 3128][E:\tool\UltraVNC\UltraVNC\WinVNC.exe]  <UltraVNC><1, 0, 0, 11>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
[PID: 3080][C:\WINNT\system32\dllhost.exe]  <Microsoft Corporation><5.00.2195.6692>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 3328][C:\WINNT\System32\mdm.exe]  <Microsoft Corporation><6.00.8424>
    [C:\WINNT\System32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 3800][D:\Program Files\Iparmor\Iparmor.exe]  <N/A><N/A>
    [D:\Program Files\Iparmor\GetPortListxp.Dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\SocketInit.dll]  <N/A><N/A>
    [D:\Program Files\Iparmor\hookhookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 4040][C:\WINNT\system32\conime.exe]  <Microsoft Corporation><5.00.2195.6655>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 4924][C:\WINNT\system32\cmd.exe]  <Microsoft Corporation><5.00.2195.6656>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 30272][d:\Program Files\ewido\security suite\ewidoctrl.exe]  <ewido networks><3, 0, 0, 1>
    [d:\Program Files\ewido\security suite\lang.dll]  <privat><1, 0, 0, 1>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
[PID: 7056][D:\WebEasyMail\easymail.exe]  <Ma Jian><3.5.2.1>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 6636][C:\Program Files\Rising\Rav\RsAgent.exe]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 27>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><17, 0, 0, 3>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 6620][C:\WINNT\msagent\AgentSvr.exe]  <Microsoft Corporation><2.00.0.3422>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 32268][C:\PROGRAM FILES\RISING\RAV\Ravmond.exe]  <Beijing Rising Technology Co., Ltd.><17, 0, 1, 58>
    [C:\PROGRAM FILES\RISING\RAV\guidll.dll]  <rising><17, 0, 0, 13>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll]  <rising><17, 0, 0, 3>
    [C:\PROGRAM FILES\RISING\RAV\RSAPPMGR.DLL]  <Rising Corp.><17, 0, 0, 7>

[C:\PROGRAM FILES\RISING\RAV\CfgDll.dll]  <Rising Corp.><17, 0, 1, 71>
    [C:\Program Files\Rising\Rav\Scanner.dll]  <Rising><17, 0, 0, 43>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
    [C:\Program Files\Rising\Rav\libload.dll]  <Rising><17, 0, 0, 14>
    [C:\Program Files\Rising\Rav\VirusLib.dll]  <Rising><17, 0, 0, 26>
    [C:\PROGRAM FILES\RISING\RAV\MailMon.dll]  < ><17, 0, 0, 9>
    [C:\Program Files\Rising\Rav\engine.dll]  <rising><17, 0, 0, 43>
    [C:\Program Files\Rising\Rav\UnExe.dll]  <Rising><17, 0, 0, 31>
    [C:\Program Files\Rising\Rav\ScanEx.dll]  <Rising><17, 0, 0, 39>
    [C:\Program Files\Rising\Rav\PostTrt.dll]  <Rising><17, 0, 0, 21>
    [C:\Program Files\Rising\Rav\NvFile.dll]  <瑞星><17, 0, 0, 13>
    [C:\Program Files\Rising\Rav\ScanMac.dll]  <rising><17, 0, 0, 20>
    [C:\Program Files\Rising\Rav\ScanSct.dll]  <rising><17, 0, 0, 37>
    [C:\Program Files\Rising\Rav\ScanExec.dll]  <N/A><17, 0, 0, 23>
    [C:\Program Files\Rising\Rav\SpamEng.dll]  <N/A><17, 0, 0, 7>
    [C:\PROGRAM FILES\RISING\RAV\MemMon.dll]  <北京瑞星><17, 8, 0, 0>
    [C:\PROGRAM FILES\RISING\RAV\expscan.dll]  <N/A><17, 0, 0, 6>
    [C:\PROGRAM FILES\RISING\RAV\mPorts.dll]  <Beijing Rising Technology Corporation Limited><3, 0, 0, 3>
    [C:\Program Files\Rising\Rav\Unpacker.dll]  <rising><17, 0, 0, 19>
    [C:\Program Files\Rising\Rav\ExtMail.dll]  <瑞星><17, 0, 0, 17>
[PID: 32200][C:\PROGRAM FILES\RISING\RAV\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 27>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\PROGRAM FILES\RISING\RAV\RsCommX.dll]  <rising><17, 0, 0, 3>
    [C:\PROGRAM FILES\RISING\RAV\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
[PID: 32928][c:\program files\rising\rav\RAVMON.EXE]  <Beijing Rising Technology Co., Ltd.><17, 0, 1, 39>
    [c:\program files\rising\rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 40>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [c:\program files\rising\rav\RSAPPMGR.DLL]  <Rising Corp.><17, 0, 0, 7>
    [c:\program files\rising\rav\CfgDll.dll]  <Rising Corp.><17, 0, 1, 71>
    [c:\program files\rising\rav\RsCommX.dll]  <rising><17, 0, 0, 3>
    [c:\program files\rising\rav\PngDll.dll]  <Rising><17, 0, 0, 2>
[PID: 32884][C:\Program Files\Rising\Rav\RAVTRAY.EXE]  <Rising><17, 0, 0, 32>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\RAVTRAY936.dll]  <Rising><17, 0, 0, 28>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RsCommx.dll]  <rising><17, 0, 0, 3>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 436][C:\Program Files\Rising\Rav\RavService.exe]  <Beijing Rising Technology Co., Ltd.><17, 0, 0, 73>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><17, 0, 0, 3>
[PID: 30252][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>
[PID: 32604][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.016\SREng.exe]  <Smallfrogs Studio><2.0.12.350>
    [C:\WINNT\system32\apihookdll.dll]  <N/A><N/A>
    [D:\Program Files\Iparmor\iparmor1.dll]  <N/A><N/A>
    [C:\WINNT\system32\MsgBoxHook.dll]  <><1, 0, 0, 1>
    [E:\tool\UltraVNC\UltraVNC\VNCHooks.dll]  <UltraVNC><3, 3, 6, 0>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINNT\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者

==================================

http://bbs.hzva.org/viewthread.php?tid=13297&fpage=1
看这里就知道为什么了