如图......

怎么办？

用卡卡结束病毒进程,在删去,可能会行.
最好把日志放上来,这样看是很难做的

星卡卡电脑诊断日志 v1.20 (2007-7-12 20:54:15)  北京瑞星科技股份有限公司

注释:[A]表示该文件存在自启动关联;
[M]表示该文件在内存中;

+ 注册表自运行项目
  + Win32 Services
    + HKLM\System\CurrentControlSet\Services
      82485F4E
        [A ] 1. c:\windows\system32\d81e5dba.exe
      IDriverT
        [A ] 2. c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe
      iPodService
        [AM] 3. c:\program files\ipod\bin\ipodservice.exe
      ose
        [A ] 4. c:\program files\common files\microsoft shared\source engine\ose.exe
      P4P Service
        [AM] 5. c:\program files\common files\sogou pxp\p2psvr.exe
      RfwProxySrv
        [A ] 6. c:\program files\rising\rfw\rfwproxy.exe
      RfwService
        [A ] 7. c:\program files\rising\rfw\rfwsrv.exe
      RsCCenter
        [A ] 8. c:\program files\rising\rav\ccenter.exe
      RsRavMon
        [A ] 9. c:\program files\rising\rav\ravmond.exe
      ServiceLayer
        [AM] 10. c:\program files\common files\pcsuite\services\servicelayer.exe
      usnjsvc
        [A ] 11. c:\program files\msn messenger\usnsvc.exe
  + Kernel Drivers
    + HKLM\System\CurrentControlSet\Services
      BaseTDI
        [A ] 12. c:\windows\system32\drivers\basetdi.sys
      EagleNT
        [A ] 13. c:\windows\system32\drivers\eaglent.sys
      ExpScaner
        [A ] 14. c:\program files\rising\rav\expscan.sys
      GEARAspiWDM
        [A ] 15. c:\windows\system32\drivers\gearaspiwdm.sys
      GMSIPCI
        [A ] 16. g:\install\gmsipci.sys
      HOOKAPI
        [A ] 17. c:\program files\rising\rav\hookapi.sys
      HookCont
        [A ] 18. c:\program files\rising\rav\hookcont.sys
      HookReg
        [A ] 19. c:\program files\rising\rav\hookreg.sys
      HookSys
        [A ] 20. c:\program files\rising\rav\hooksys.sys
      HookUrl
        [A ] 21. c:\program files\rising\rfw\hookurl.sys
      kikhlfsd
        [A ] 22. c:\windows\system32\drivers\kikhlfsd.sys
      kmsinput
        [A ] 23. c:\windows\system32\drivers\kmsinput.sys
      MEMSCAN
        [A ] 24. c:\program files\rising\rav\memscan.sys
      mProcRs
        [A ] 25. c:\program files\rising\rfw\mprocrs.sys
      Nokia USB Generic
        [A ] 26. c:\windows\system32\drivers\nmwcdc.sys
      Nokia USB Modem
        [A ] 27. c:\windows\system32\drivers\nmwcdcm.sys
      Nokia USB Phone Parent
        [A ] 28. c:\windows\system32\drivers\nmwcd.sys
      Nokia USB Port
        [A ] 29. c:\windows\system32\drivers\nmwcdcj.sys
      NPF
        [A ] 30. c:\windows\system32\drivers\npf.sys
      npkcrypt
        [A ] 31. d:\游戏\qq2005\npkcrypt.sys
      npkycryp
        [A ] 32. d:\游戏\qq2005\npkycryp.sys
      prodrv06
        [A ] 33. c:\windows\system32\drivers\prodrv06.sys
      prohlp02
        [A ] 34. c:\windows\system32\drivers\prohlp02.sys
      prosync1
        [A ] 35. c:\windows\system32\drivers\prosync1.sys
      RsAntiSpyware
        [A ] 36. c:\windows\system32\drivers\rsboot.sys
      RsFwDrv
        [A ] 37. c:\program files\rising\rfw\rsfwdrv.sys
      RsNTGDI
        [A ] 38. c:\windows\system32\drivers\rsntgdi.sys
      RSPPSYS
        [A ] 39. c:\program files\rising\rav\rsppsys.sys
      Secdrv
        [A ] 40. c:\windows\system32\drivers\secdrv.sys
      sfdrv01
        [A ] 41. c:\windows\system32\drivers\sfdrv01.sys
      sfhlp01
        [A ] 42. c:\windows\system32\drivers\sfhlp01.sys
      sfhlp02
        [A ] 43. c:\windows\system32\drivers\sfhlp02.sys
      sfsync02
        [A ] 44. c:\windows\system32\drivers\sfsync02.sys
      sfsync04
        [A ] 45. c:\windows\system32\drivers\sfsync04.sys
      ssm_bus
        [A ] 46. c:\windows\system32\drivers\ssm_bus.sys
      ssm_mdfl
        [A ] 47. c:\windows\system32\drivers\ssm_mdfl.sys
      ssm_mdm
        [A ] 48. c:\windows\system32\drivers\ssm_mdm.sys
      viaagp1
        [A ] 49. c:\windows\system32\drivers\viaagp1.sys
      VIAudio
        [A ] 50. c:\windows\system32\drivers\vinyl97.sys
  + File System Drivers
    + HKLM\System\CurrentControlSet\Services
      ADProt
        [A ] 51. c:\windows\system32\drivers\adprot.sys
  + Winlogon
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      WgaLogon
        [AM] 52. c:\windows\system32\wgalogon.dll
    + HKCU\Control Panel\Desktop
      Scrnsave.exe
        [A ] 53. c:\windows\fish.scr
  + Internet Explorer
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {BA440AED-8A58-46A3-B8E5-6AEE4D03A7D8}
        [A ] 54. d:\软件\biget\bntoolbar.dll
      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [A ] 55. c:\windows\system32\kakatool.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
        [AM] 56. c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
      {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}
        [AM] 57. c:\program files\flashget\jccatch.dll
      {9394EDE7-C8B5-483E-8773-474BF36AF6E4}
        [AM] 58. c:\program files\msn apps\st\01.02.3000.1001\en-xu\stmain.dll
      {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
        [AM] 59. c:\program files\msn apps\msn toolbar\01.02.5000.1021\zh-cn\msntb.dll
      {F156768E-81EF-470C-9057-481BA8380DBA}
        [AM] 60. c:\program files\flashget\getflash.dll
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 61. c:\program files\thunder network\thunder\thunder.exe
      Exec
        [A ] 62. d:\游戏\浩方对战平台\gameclient.exe
      Exec
        [A ] 63. c:\program files\herosoft\hero 9\sthsdvd.exe
      Exec
        [A ] 64. d:\游戏\qq2005\qq.exe
      Exec
        [A ] 65. c:\program files\flashget\flashget.exe
      Exec
        [A ] 66. c:\program files\messenger\msmsgs.exe
  + Explorer
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [AM] 67. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      livecall
        [A ] 68. c:\program files\msn messenger\msgrapp.8.1.0178.00.dll
      msnim
        [A ] 68. c:\program files\msn messenger\msgrapp.8.1.0178.00.dll
      mso-offdap
        [A ] 69. c:\program files\common files\microsoft shared\web components\10\owc10.dll
      mso-offdap11
        [A ] 70. c:\program files\common files\microsoft shared\web components\11\owc11.dll
    + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
      {81716107-A10D-11cf-64CD-11115FE1CF41}
        [A ] 71. c:\windows\system32\nwizzhuxians.exe
    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {F9DB5320-233E-11D1-9F84-707F02C10627}
        [AM] 72. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 73. c:\windows\system32\hticons.dll
      Web Folders
        [A ] 74. c:\program files\common files\microsoft shared\web folders\msonsext.dll
      Microsoft Office Outlook Desktop Icon Handler
        [A ] 75. d:\软件\office2000\office11\mlshext.dll
      Microsoft Office Outlook Custom Icon Handler
        [A ] 76. d:\软件\office2000\office11\olkfstub.dll
      Microsoft Office HTML Icon Handler
        [AM] 77. d:\软件\office2000\office11\msohev.dll
      RISING
        [AM] 78. c:\windows\system32\ravext.dll
      百纳搜索
        [A ] 54. d:\软件\biget\bntoolbar.dll
      WinRAR shell extension
        [AM] 79. d:\软件\winrar\rarext.dll
      iTunes
        [A ] 80. c:\program files\itunes\itunesminiplayer.dll
      Messenger Sharing Folders
        [A ] 81. c:\program files\msn messenger\fsshext.8.1.0178.00.dll
      PhoneBrowser
        [AM] 82. c:\program files\nokia\nokia pc suite 6\phonebrowser.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 78. c:\windows\system32\ravext.dll
      {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
        [AM] 83. c:\windows\system32\shlhook.dll
  + Logon
    + HKCU\Software\Microsoft\Windows\CurrentVersion\Run
      MsnMsgr
        [A ] 84. c:\program files\msn messenger\msnmsgr.exe
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      RfwMain
        [AM] 85. c:\program files\rising\rfw\rfwmain.exe
      TkBellExe
        [A ] 86. c:\program files\common files\real\update_ob\realsched.exe
      IMSCMig
        [A ] 87. c:\program files\common files\microsoft shared\ime\imsc40a\imscmig.exe
      RavTask
        [A ] 88. c:\program files\rising\rav\ravtask.exe
      iTunesHelper
        [AM] 89. c:\program files\itunes\ituneshelper.exe
      runeip
        [A ] 90. c:\program files\rising\antispyware\runiep.exe
      miniqqlive
        [A ] 91. c:\program files\tencent\qqlive\miniqqlive.exe
      cmdbcs
        [A ] 92. c:\windows\cmdbcs.exe
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
      RavStub
        [AM] 93. c:\program files\rising\rav\ravstub.exe
      KKDelay
        [A ] 94. c:\program files\rising\antispyware\runonce.exe
  + Boot Execute
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 95. c:\windows\system32\bsmain.exe
        [A ] 96. c:\windows\system32\kknative.exe
  + Image Hijacks
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 97. d:\软件\office2000\office11\msohtmed.exe
      htmlfile\open\Command
        [AM] 98. d:\游戏\tt\ttraveler.exe
      htmlfile\Print\Command
        [A ] 97. d:\软件\office2000\office11\msohtmed.exe
      htmlfile\TencentTraveler\Command
        [AM] 98. d:\游戏\tt\ttraveler.exe
    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 97. d:\软件\office2000\office11\msohtmed.exe
      htmlfile\open\Command
        [AM] 98. d:\游戏\tt\ttraveler.exe
      htmlfile\Print\Command
        [A ] 97. d:\软件\office2000\office11\msohtmed.exe
      htmlfile\TencentTraveler\Command
        [AM] 98. d:\游戏\tt\ttraveler.exe
    + HKCR\.mp3
      Winamp.File\Enqueue\Command
        [A ] 99. c:\program files\winamp\winamp.exe
      Winamp.File\ListBookmark\Command
        [A ] 99. c:\program files\winamp\winamp.exe
      Winamp.File\open\Command
        [A ] 99. c:\program files\winamp\winamp.exe
      Winamp.File\Play\Command
        [A ] 99. c:\program files\winamp\winamp.exe
  + Print Monitor
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      Microsoft Document Imaging Writer Monitor
        [AM] 100. c:\windows\system32\mdimon.dll

+ 其他自启动项目
  + C:\Documents and Settings\xt\「开始」菜单\程序\启动
    腾讯QQ.lnk
      [A ] 64. d:\游戏\qq2005\qq.exe
  + C:\Documents and Settings\All Users\「开始」菜单\程序\启动
    Adobe Reader Speed Launch.lnk
      [A ] 101. c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
  + c:\autorun.inf
    open
      [A ] 102. c:\auto.exe
    shellexecute
      [A ] 102. c:\auto.exe
    shell\Auto\command
      [A ] 102. c:\auto.exe
  + d:\autorun.inf
    open
      [A ] 103. d:\auto.exe
    shellexecute
      [A ] 103. d:\auto.exe
    shell\Auto\command
      [A ] 103. d:\auto.exe
  + e:\autorun.inf
    open
      [A ] 104. e:\auto.exe
    shellexecute
      [A ] 104. e:\auto.exe
    shell\Auto\command
      [A ] 104. e:\auto.exe
  + f:\autorun.inf
    open
      [A ] 105. f:\auto.exe
    shellexecute
      [A ] 105. f:\auto.exe
    shell\Auto\command
      [A ] 105. f:\auto.exe

下载 System Repair Engineer，
http://download.kztechs.com/files/sreng2.zip
1 解压缩sreng2.zip
2 运行SREngPS.EXE
3 智能扫描=》扫描=》保存报告
4 把日志中的报告完整拷贝贴上来，不要修改

+ 系统活动模块
  + 000000a0(160) spoolsv.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
    00B00000[00008000]
      [AM] 100. c:\windows\system32\mdimon.dll
    00B10000[00008000]
      [ M] 107. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
    00C30000[00005000]
      [ M] 108. c:\windows\system32\spool\prtprocs\w32x86\vprproc.dll
  + 000000fc(252) ctfmon.exe
    10000000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
  + 00000170(368) RfwMain.exe
    00400000[00073000]
      [AM] 85. c:\program files\rising\rfw\rfwmain.exe
    26600000[0007D000]
      [ M] 110. c:\program files\rising\rfw\rsguilib.dll
    23700000[0001A000]
      [ M] 111. c:\program files\rising\rfw\rscommon.dll
    10000000[0000F000]
      [ M] 112. c:\program files\rising\rfw\rfwctrl.dll
    23800000[0001A000]
      [ M] 113. c:\program files\rising\rfw\rsxml.dll
    23900000[00031000]
      [ M] 114. c:\program files\rising\rfw\pngdll.dll
    01020000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
    00FE0000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
  + 000001dc(476) svchost.exe
  + 00000264(612) iTunesHelper.exe
    00400000[00045000]
      [AM] 89. c:\program files\itunes\ituneshelper.exe
    10000000[0000C000]
      [ M] 115. c:\program files\itunes\ituneshelper.resources\zh_cn.lproj\ituneshelperlocalized.dll
    00A30000[0000B000]
      [ M] 116. c:\program files\itunes\ituneshelper.resources\ituneshelper.dll
    00EC0000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
    00F60000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 000002c8(712) smss.exe
  + 00000324(804) csrss.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 0000033c(828) winlogon.exe
    01300000[0003B000]
      [AM] 52. c:\windows\system32\wgalogon.dll
    72C80000[00008000]
      [ M] 117. c:\windows\system32\msacm32.drv
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 00000368(872) services.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 00000374(884) lsass.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 000003b8(952) p2psvr.exe
    00400000[00016000]
      [AM] 5. c:\program files\common files\sogou pxp\p2psvr.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
    00D70000[00062000]
      [ M] 118. c:\program files\sogou pxp\vodsvr.dll
    65100000[00029000]
      [ M] 119. c:\program files\sogou pxp\pxpnet.dll
    00810000[00040000]
      [ M] 120. c:\program files\sogou pxp\p2pclient.dll
  + 00000410(1040) svchost.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 00000450(1104) svchost.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 000004d8(1240) svchost.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 00000504(1284) svchost.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 00000588(1416) svchost.exe
    10000000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 000006e4(1764) Explorer.EXE
    10000000[0001B000]
      [AM] 78. c:\windows\system32\ravext.dll
    00BD0000[00011000]
      [AM] 83. c:\windows\system32\shlhook.dll
    013B0000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
    01470000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
    00B30000[00006000]
      [ M] 121. c:\windows\system32\nwizwlwzs.dll
    01810000[00005000]
      [ M] 122. c:\windows\system32\mosou.dll
    72C80000[00008000]
      [ M] 117. c:\windows\system32\msacm32.drv
    15000000[00010000]
      [ M] 123. c:\windows\system32\k11842382474.dat
    01D00000[00007000]
      [ M] 124. c:\windows\system32\nwizqjsj.dll
    00FD0000[00006000]
      [ M] 125. c:\windows\system32\nwizzhuxians.dll
    02150000[00007000]
      [ M] 126. c:\windows\system32\msimms32.dll
    02170000[0001C000]
      [AM] 72. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
    23700000[0001A000]
      [ M] 127. c:\program files\rising\rav\rscommon.dll
    7C340000[00056000]
      [ M] 128. c:\windows\system32\msvcr71.dll
    041D0000[0002B000]
      [AM] 79. d:\软件\winrar\rarext.dll
    04A50000[00085000]
      [AM] 82. c:\program files\nokia\nokia pc suite 6\phonebrowser.dll
    04AE0000[0008C000]
      [ M] 129. c:\program files\nokia\nokia pc suite 6\pcscm.dll
    046E0000[0003F000]
      [ M] 130. c:\windows\system32\connapi.dll
    7C3A0000[0007B000]
      [ M] 131. c:\windows\system32\msvcp71.dll
    033D0000[00008000]
      [ M] 132. c:\program files\nokia\nokia pc suite 6\lang\phonebrowser_chi-sc.nlr
    04C70000[0008B000]
      [ M] 133. c:\program files\nokia\nokia pc suite 6\resource\phonebrowser_nokia.ngr
    035F0000[00010000]
      [ M] 134. c:\windows\system32\k11842418664.dat
    01F70000[00008000]
      [ M] 135. c:\windows\system32\cmdbcs.dll
  + 00000798(1944) RavStub.exe
    00400000[00018000]
      [AM] 93. c:\program files\rising\rav\ravstub.exe
    10000000[0001B000]
      [ M] 136. c:\program files\rising\rav\rscommx.dll
    23700000[0001A000]
      [ M] 127. c:\program files\rising\rav\rscommon.dll
    00B70000[00012000]
      [ M] 106. c:\windows\system32\1fa1892.dll
  + 00000844(2116) iexplore.exe
    15000000[00010000]
      [ M] 123. c:\windows\system32\k11842382474.dat
    10000000[00005000]
      [ M] 122. c:\windows\system32\mosou.dll
    01A70000[0000E000]
      [AM] 56. c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
    7C340000[00056000]
      [ M] 128. c:\windows\system32\msvcr71.dll
    01A90000[00011000]
      [AM] 57. c:\program files\flashget\jccatch.dll
    01AB0000[00028000]
      [AM] 58. c:\program files\msn apps\st\01.02.3000.1001\en-xu\stmain.dll
    02020000[00049000]
      [AM] 59. c:\program files\msn apps\msn toolbar\01.02.5000.1021\zh-cn\msntb.dll
    02070000[00043000]
      [ M] 137. c:\program files\msn apps\msn toolbar\01.02.5000.1021\zh-cn\mtbres.dll
    020C0000[00029000]
      [AM] 60. c:\program files\flashget\getflash.dll
    02940000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
    325C0000[00012000]
      [AM] 77. d:\软件\office2000\office11\msohev.dll
    03830000[00019000]
      [ M] 138. c:\program files\rising\rav\ravscrch.dll
    30000000[002EE000]
      [ M] 139. c:\windows\system32\macromed\flash\flash9b.ocx
    72C80000[00008000]
      [ M] 117. c:\windows\system32\msacm32.drv
    05320000[0000B000]
      [AM] 67. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
    02840000[00010000]
      [ M] 134. c:\windows\system32\k11842418664.dat
    02850000[00008000]
      [ M] 135. c:\windows\system32\cmdbcs.dll
    02810000[0001C000]
      [AM] 72. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
  + 00000960(2400) TTraveler.exe
    00400000[002E4000]
      [AM] 98. d:\游戏\tt\ttraveler.exe
    15000000[00010000]
      [ M] 134. c:\windows\system32\k11842418664.dat
    00D00000[00010000]
      [ M] 123. c:\windows\system32\k11842382474.dat
    10000000[00005000]
      [ M] 122. c:\windows\system32\mosou.dll
    01E60000[0002D000]
      [ M] 140. d:\游戏\tt\plugins\qqfloatbar\qqfloatbar4tt2.dll
    01EA0000[0002E000]
      [ M] 141. d:\游戏\tt\plugins\tweather\tweather.dll
    01EF0000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
    025F0000[00013000]
      [ M] 142. d:\游戏\tt\personaldesktop.dll
    02020000[00008000]
      [ M] 135. c:\windows\system32\cmdbcs.dll
    02CB0000[00019000]
      [ M] 138. c:\program files\rising\rav\ravscrch.dll
    72C80000[00008000]
      [ M] 117. c:\windows\system32\msacm32.drv
  + 00000968(2408) WgaTray.exe
    01000000[00052000]
      [ M] 143. c:\windows\system32\wgatray.exe
    10000000[00005000]
      [ M] 122. c:\windows\system32\mosou.dll
    01520000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
  + 00000ab4(2740) Ras.exe
    00400000[0013E000]
      [ M] 144. c:\program files\rising\antispyware\ras.exe
    15000000[00010000]
      [ M] 134. c:\windows\system32\k11842418664.dat
    00C40000[00010000]
      [ M] 123. c:\windows\system32\k11842382474.dat
    10000000[00005000]
      [ M] 122. c:\windows\system32\mosou.dll
    00EB0000[000A3000]
      [ M] 145. c:\program files\rising\antispyware\rasgui.dll
    016A0000[0001B000]
      [AM] 78. c:\windows\system32\ravext.dll
    016D0000[00011000]
      [AM] 83. c:\windows\system32\shlhook.dll
    01740000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
    02080000[00008000]
      [ M] 135. c:\windows\system32\cmdbcs.dll
    02D70000[0002F000]
      [ M] 146. c:\program files\rising\antispyware\engine.dll
    029F0000[00012000]
      [ M] 147. c:\program files\rising\antispyware\zip.dll
  + 00000b60(2912) iPodService.exe
    00400000[00051000]
      [AM] 3. c:\program files\ipod\bin\ipodservice.exe
    10000000[0000C000]
      [ M] 148. c:\program files\ipod\bin\ipodservice.resources\zh_cn.lproj\ipodservicelocalized.dll
    003E0000[0000B000]
      [ M] 149. c:\program files\ipod\bin\ipodservice.resources\ipodservice.dll
  + 00000be8(3048) ServiceLayer.exe
    00400000[0002D000]
      [AM] 10. c:\program files\common files\pcsuite\services\servicelayer.exe
    10000000[00013000]
      [ M] 150. c:\windows\system32\ncltools.dll
    7C3A0000[0007B000]
      [ M] 131. c:\windows\system32\msvcp71.dll
    7C340000[00056000]
      [ M] 128. c:\windows\system32\msvcr71.dll
    7C120000[00019000]
      [ M] 151. c:\windows\system32\atl71.dll
    00E80000[00010000]
      [ M] 152. c:\program files\common files\pcsuite\transports\nclirdamm.dll
    00E90000[00036000]
      [ M] 153. c:\program files\common files\pcsuite\transports\nclrsmm.dll
    00ED0000[00019000]
      [ M] 154. c:\program files\common files\pcsuite\transports\nclusbmm.dll
    00EF0000[00017000]
      [ M] 155. c:\program files\common files\pcsuite\transports\nclmsbtmm.dll
    01B70000[0000D000]
      [ M] 156. c:\program files\common files\pcsuite\services\nclds.dll
  + 00000d84(3460) alg.exe
  + 00000e50(3664) emule.exe
    00400000[0070A000]
      [ M] 157. f:\tpb\emule\emule.exe
    10000000[00005000]
      [ M] 122. c:\windows\system32\mosou.dll
    01280000[0000C000]
      [ M] 158. f:\tpb\emule\lang\zh_cn.dll
    014A0000[0001B000]
      [ M] 109. c:\program files\rising\antispyware\ieprot.dll
    15000000[00010000]
      [ M] 123. c:\windows\system32\k11842382474.dat
    015E0000[00010000]
      [ M] 134. c:\windows\system32\k11842418664.dat
    017D0000[00008000]
      [ M] 135. c:\windows\system32\cmdbcs.dll
  + 00000f50(3920) svchost.exe