c:\program files\rising\rfw\RfwMain.exe
C:\WINNT\system32\Internat.exe
C:\WINNT\msagent\AgentSvr.exe
C:\Program Files\rising\Rav\CCenter.exe
C:\Program Files\rising\Rav\RAVTASK.EXE
C:\Program Files\rising\Rav\RAV.EXE
C:\Program Files\rising\Rav\Ravmond.exe
C:\Program Files\rising\Rav\RsAgent.exe
C:\Program Files\rising\Rav\RAVMON.EXE
C:\Program Files\rising\Rav\RavStub.exe
C:\WINNT\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
D:\downloads\HijackThis.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@2052,电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon