上卡卡社区老是没有响应，关一个网站就把所有的网站关完了。呜呜



下列是我扫描的卡卡日志


瑞星卡卡电脑诊断日志 v1.30 (2007-9-29 20:5:20)  北京瑞星科技股份有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      aspnet_state
        [A ] 1. c:\windows\microsoft.net\framework\v1.1.4322\aspnet_state.exe
          Microsoft Corporation
          aspnet_state.exe
          .text,.data,.rsrc,


      Ati HotKey Poller
        [AM] 2. c:\windows\system32\ati2evxx.exe
          ATI Technologies Inc.
          ATI External Event Utility EXE Module
          .text,.rdata,.data,.rsrc,


      C-DillaCdaC11BA
        [AM] 3. c:\windows\system32\drivers\cdac11ba.exe
          Macrovision
          Macrovision RTS Service
          .text,.rdata,.data,.rsrc,


      EvtEng
        [AM] 4. c:\program files\intel\wireless\bin\evteng.exe
          Intel Corporation
          EvtEng Module
          .text,.rdata,.data,.rsrc,


      IBM Rapid Restore Ultra Service
        [AM] 5. c:\program files\ibm\ibm rapid restore ultra\rrpcsb.exe
          rrpcsb Module
          .text,.rdata,.data,.rsrc,


      IBMPMSVC
        [AM] 6. c:\windows\system32\ibmpmsvc.exe
          .text,.rdata,.data,.rsrc,


      IDriverT
        [A ] 7. c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe
          Macrovision Corporation
          IDriverT Module
          .text,.rdata,.data,.rsrc,


      McAfeeFramework
        [AM] 8. c:\program files\network associates\common framework\frameworkservice.exe
          McAfee, Inc.
          Framework Service
          .text,.rdata,.data,.rsrc,


      McShield
        [AM] 9. c:\program files\network associates\virusscan\mcshield.exe
          McAfee, Inc.
          On-Access Scanner service
          .text,.rdata,.data,.tls,.rsrc,


      McTaskManager
        [AM] 10. c:\program files\network associates\virusscan\vstskmgr.exe
          Network Associates, Inc.
          Task Manager : scheduling and OAS alerting service
          .text,.rdata,.data,.rsrc,
          文件名和"taskmgr.exe"类似;


      ose
        [A ] 11. c:\program files\common files\microsoft shared\source engine\ose.exe
          Microsoft Corporation
          Office Source Engine
          .text,.data,.rsrc,


      P4P Service
        [AM] 12. c:\program files\common files\sogou pxp\p2psvr.exe
          Sohu.com Inc.
          Sogou PXP Streaming Service
          .text,.rdata,.data,.rsrc,


      QCONSVC
        [AM] 13. c:\windows\system32\qconsvc.exe
          IBM Corp.
          IBM Access Connections - Service Component.
          .text,.rdata,.data,.rsrc,


      RegSrvc
        [AM] 14. c:\program files\intel\wireless\bin\regsrvc.exe
          Intel Corporation
          RegSrvc Module
          .text,.rdata,.data,.rsrc,


      S24EventMonitor
        [AM] 15. c:\program files\intel\wireless\bin\s24evmon.exe
          Intel Corporation
          Event Monitor - Supports driver extensions to  NIC Driver for wireless adapters.
          .text,.rdata,.data,.rsrc,


      SoundMAX Agent Service (default)
        [AM] 16. c:\program files\analog devices\soundmax\smagent.exe
          Analog Devices, Inc.
          SoundMAX service agent component
          .text,.rdata,.data,.rsrc,


      StarWindService
        [AM] 17. c:\program files\alcohol soft\alcohol 120\starwind\starwindservice.exe
          Rocket Division Software
          StarWind iSCSI Target (Alcohol Edition)
          .text,.data,.rsrc,


      TPHDEXLGSVC
        [AM] 18. c:\windows\system32\tphdexlg.exe
          IBM Corporation
          IBM Active Protection System - HDD Logger Module
          .text,.rdata,.data,.rsrc,


      TpKmpSVC
        [AM] 19. c:\windows\system32\tpkmpsvc.exe
          .text,.rdata,.data,


      usnjsvc
        [A ] 20. c:\program files\msn messenger\usnsvc.exe
          Microsoft Corporation
          Messenger Sharing USN Journal Reader Service
          .text,.data,.rsrc,


      vtserver
        [AM] 21. c:\program files\common files\virtual token\vtserver.exe
          UPEK Inc.
          Passport Server Module
          .text,.rdata,.data,.rsrc,


      WMPNetworkSvc
        [A ] 22. c:\program files\windows media player\wmpnetwk.exe
          Microsoft Corporation
          Windows Media Player Network Sharing Service
          .text,.data,.rsrc,.reloc,

      WudfSvc
        [A ] 23. c:\windows\system32\wudfsvc.dll
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Service
          .text,.data,.rsrc,.reloc,




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      aeaudio
        [A ] 24. c:\windows\system32\drivers\aeaudio.sys
          Andrea Electronics Corporation
          Andrea Audio Noise Cancellation Driver
          .text,.rdata,.data,.data1,PAGE,INIT,.rsrc,.reloc,


      AegisP
        [A ] 25. c:\windows\system32\drivers\aegisp.sys
          Meetinghouse Data Communications
          IEEE 802.1X Protocol Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      ANC
        [A ] 26. c:\windows\system32\drivers\anc.sys
          IBM Corp.
          IBM Access Connections - ANC
          .text,.rdata,INIT,.rsrc,.reloc,


      btaudio
        [A ] 27. c:\windows\system32\drivers\btaudio.sys


      BTDriver
        [A ] 28. c:\windows\system32\drivers\btport.sys


      BTWDNDIS
        [A ] 29. c:\windows\system32\drivers\btwdndis.sys


      BTWUSB
        [A ] 30. c:\windows\system32\drivers\btwusb.sys


      CdaC15BA
        [A ] 31. c:\windows\system32\drivers\cdac15ba.sys
          Macrovision Europe Ltd
          Macrovision SECURITY Driver
          .text,.data,INIT,.rsrc,.reloc,


      DgiVecp
        [A ] 32. c:\windows\system32\drivers\dgivecp.sys
          DeviceGuys, Inc.
          Windows NT 4.0 IEEE-1284 parallel class driver for ECP, Byte, and Nibble modes
          .text,INIT,.rdata,.data,.rsrc,.reloc,


      EGATHDRV
        [A ] 33. c:\windows\system32\egathdrv.sys
          IBM Corporation
          IBM eGatherer Kernel Module
          .text,.rdata,INIT,.rsrc,.reloc,


      EntDrv51
        [A ] 34. c:\windows\system32\drivers\entdrv51.sys
          McAfee, Inc
          EntDrv
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      fcdabus
        [A ] 35. c:\windows\system32\drivers\fcdabus.sys


      fsRamDsk
        [A ] 36. c:\windows\system32\drivers\fsramdsk.sys
          FarStone
          RamDisk
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      FVDSCSI
        [A ] 37. c:\windows\system32\drivers\fvdscsi.sys


      HSFHWICH
        [A ] 38. c:\windows\system32\drivers\hsfhwich.sys
          Conexant Systems, Inc.
          HSFHWICH WDM driver
          .text,GLOBAL_I,.rdata,.data,.CRT,GLOBAL_I,.STL,PAGE,INIT,.rsrc,.reloc,


      HSF_DP
        [A ] 39. c:\windows\system32\drivers\hsf_dp.sys
          Conexant Systems, Inc.
          HSF_DP driver
          .text,_PARA_DA,.rdata,.data,.STL,.CRT,PAGE,INIT,.rsrc,.reloc,


      ibmfilter
        [A ] 40. c:\windows\system32\drivers\ibmfilter.sys
          IBM
          IBM FFE and RRU filter driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      IBMPMDRV
        [A ] 41. c:\windows\system32\drivers\ibmpmdrv.sys
          IBM Corp.
          IBM ThinkPad Power Management Driver
          .text,.rdata,.data,.rsrc,.reloc,


      IBMTPCHK
        [A ] 42. c:\windows\system32\drivers\ibmbldid.sys
          .text,.rdata,INIT,.reloc,


      mdmxsdk
        [A ] 43. c:\windows\system32\drivers\mdmxsdk.sys
          Conexant
          Diagnostic Interface DRIVER
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      NaiAvFilter1
        [A ] 44. c:\windows\system32\drivers\naiavf5x.sys
          McAfee Inc.
          Anti-Virus File System Filter Driver
          .text,.rdata,.data,.CRT,INIT,.rsrc,.reloc,


      NaiAvTdi1
        [A ] 45. c:\windows\system32\drivers\mvstdi5x.sys
          McAfee Inc.
          Anti-Virus Mini-Firewall Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      npkcrypt
        [A ] 46. d:\qq\npkcrypt.sys
          INCA Internet Co., Ltd.
          nProtect KeyCrypt Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      npkycryp
        [A ] 47. d:\qq\npkycryp.sys


      PMEM
        [A ] 48. c:\windows\system32\drivers\pmemnt.sys
          Microsoft Corporation
          Physical Memory Driver
          .text,.edata,INIT,.rsrc,.reloc,


      psadd
        [A ] 49. c:\windows\system32\drivers\psadd.sys
          IBM Corporation
          SMI Driver
          .text,.rdata,.data,PAGE,PAGELOCK,INIT,.rsrc,.reloc,


      PxHelp20
        [A ] 50. c:\windows\system32\drivers\pxhelp20.sys
          Sonic Solutions
          Px Engine Device Driver for Windows 2000/XP
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      QCNDISIF
        [A ] 51. c:\windows\system32\drivers\qcndisif.sys
          IBM Corporation.
          IBM Access Connections - Intermediate Protocol Driver.
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      RsAntiSpyware
        [A ] 52. c:\windows\system32\drivers\rsboot.sys
          Beijing Rising Technology Co., Ltd.
          Anti-RootKit Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      s24trans
        [A ] 53. c:\windows\system32\drivers\s24trans.sys
          Intel Corporation
          Intel WLAN Packet Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      Secdrv
        [A ] 54. c:\windows\system32\drivers\secdrv.sys
          Macrovision Europe Ltd
          Macrovision SECURITY Driver
          .text,.data,INIT,.rsrc,.reloc,


      ShockMgr
        [A ] 55. c:\windows\system32\drivers\shockmgr.sys
          IBM Corporation
          ShockMgr Device Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      Shockprf
        [A ] 56. c:\windows\system32\drivers\shockprf.sys
          IBM Corporation
          Shockproof Disk Driver
          .text,.rdata,.data,PAGE,PAGE_DAT,INIT,.rsrc,.reloc,


      Smapint
        [A ] 57. c:\windows\system32\drivers\smapint.sys
          Microsoft Corporation
          SMAPI I/O
          .text,.rdata,.data,.idata,.rsrc,.reloc,


      SmiHlp
        [A ] 58. c:\program files\ibm fingerprint software\smihlp.sys
          UPEK Inc.
          SMI helper driver
          .text,.rdata,INIT,.rsrc,.reloc,


      smwdm
        [A ] 59. c:\windows\system32\drivers\smwdm.sys
          Analog Devices, Inc.
          SoundMAX Integrated Digital Audio
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,

      SynTP
        [A ] 60. c:\windows\system32\drivers\syntp.sys
          Synaptics, Inc.
          Synaptics Touchpad Driver
          .text,.data,INIT,.rsrc,.reloc,


      TcUsb
        [A ] 61. c:\windows\system32\drivers\tcusb.sys
          UPEK Inc.
          TouchChip USB Kernel Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TDSMAPI
        [A ] 62. c:\windows\system32\drivers\tdsmapi.sys
          .text,.rdata,.data,.reloc,


      TesSafe
        [A ] 63. c:\windows\system32\tessafe.sys
          .text,.rdata,.data,INIT,.reloc,


      TPDiskPM
        [A ] 64. c:\windows\system32\drivers\tpdiskpm.sys
          IBM Corporation
          IBM SATA Power Management Driver
          .text,.rdata,INIT,.rsrc,.reloc,


      TPHKDRV
        [A ] 65. c:\windows\system32\drivers\tphkdrv.sys
          IBM Corporation
          ThinkPad Hotkey Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      TPInput
        [A ] 66. c:\windows\system32\drivers\tpinput.sys
          IBM Corporation
          IBM SATA Power Management Driver
          .text,.rdata,PAGE,INIT,.rsrc,.reloc,


      TPM11
        [A ] 67. c:\windows\system32\drivers\nsctpm11.sys
          National Semiconductor Corp.
          TPM Device Driver
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      TPPWRIF
        [A ] 68. c:\windows\system32\drivers\tppwrif.sys
          .text,.rdata,.data,.reloc,


      TSMAPIP
        [A ] 69. c:\windows\system32\drivers\tsmapip.sys
          .text,.rdata,.data,.reloc,


      vax347b
        [A ] 70. c:\windows\system32\drivers\vax347b.sys
         
          Plug and Play BIOS Extension
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      vax347s
        [A ] 71. c:\windows\system32\drivers\vax347s.sys
         
          SCSI miniport
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      vcddev
        [A ] 72. c:\windows\system32\drivers\vcdvnic.sys
          VNN B.J.
          Virtual Native Network Driver
          .text,.data,INIT,.rsrc,.reloc,


      w29n51
        [A ] 73. c:\windows\system32\drivers\w29n51.sys
          Intel? Corporation
          Intel? Wireless LAN Driver
          .text,.rdata,.data,INIT,.rsrc,.reloc,


      winachsf
        [A ] 74. c:\windows\system32\drivers\hsf_cnxt.sys
          Conexant Systems, Inc.
          HSF_CNXT driver
          .text,_LTEXT,.rdata,.data,_LDATA,PAGESER,INIT,.rsrc,.reloc,


      WudfPf
        [A ] 75. c:\windows\system32\drivers\wudfpf.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Platform Driver
          .text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,


      WudfRd
        [A ] 76. c:\windows\system32\drivers\wudfrd.sys
          Microsoft Corporation
          Windows Driver Foundation - User-mode Driver Framework Reflector
          .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,


      ZSMC0305
        [A ] 77. c:\windows\system32\drivers\usbvm305.sys
          Vimicro Corporation
          Video streaming and Capture Device Driver
          .text,.data,.data1,PAGECONS,INIT,.rsrc,.reloc,




  + 系统登陆自运行
    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
      GinaDLL
        [AM] 78. c:\windows\system32\vrlogon.dll
          UPEK Inc.
          Logon Protector library
          .text,.rdata,.data,.edata,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
      AtiExtEvent
        [AM] 79. c:\windows\system32\ati2evxx.dll
          ATI Technologies Inc.
          ATI External Event Utility DLL Module
          .text,.rdata,.data,.rsrc,.reloc,


      psfus
        [AM] 80. c:\program files\ibm fingerprint software\psfus.dll
          UPEK Inc.
          Fast User Switching library
          .text,.rdata,.data,.rsrc,.reloc,


      QConGina
        [A ] 81. c:\windows\system32\qcongina.dll
          IBM Corp.
          IBM Access Connections - GINA Component.
          .text,.rdata,.data,.QCONGIN,.rsrc,.reloc,


      tphotkey
        [AM] 82. c:\windows\system32\tphklock.dll
          .text,.rdata,.data,.reloc,


      WgaLogon
        [AM] 83. c:\windows\system32\wgalogon.dll
          Microsoft Corporation
          Windows Genuine Advantage Notification
          .text,.data,.rsrc,.reloc,




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {07B18EA9-A523-4961-B6BB-170DE4475CCA}
        [AM] 84. c:\program files\mywebsearch\bar\1.bin\mwsbar.dll
          MyWebSearch.com
          My Web Search Bar
          .text,.rdata,.data,MyWebSea,MyWebSea,.rsrc,.reloc,


      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [A ] 85. c:\windows\system32\kakatool.dll
          Beijing Rising Technology Co., Ltd.
          Rising AntiSpyware Toolbar
          .text,.rdata,.data,MonitorS,.rsrc,.reloc,



    + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
      {00A6FAF6-072E-44cf-8957-5838F569A31D}
        [AM] 86. c:\program files\mywebsearch\srchastt\1.bin\mwssrcas.dll
          MyWebSearch.com
          MyWebSearch Search Assistant
          .text,.rdata,.data,MyWebSea,.rsrc,.reloc,


      {DB8B2393-7A6C-4C76-88CE-6B1F6FF6FFE9}
        [AM] 87. c:\program files\tencent\ssplus\saddr.dll
          Tencent
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {00000000-12C9-4305-82F9-43058F20E8D2}
        [AM] 88. d:\qqdownload\qqiehelper02.dll
          腾讯公司
          超级旋风下载组件
          .text,.rdata,.data,.rsrc,.reloc,


      {00A6FAF1-072E-44cf-8957-5838F569A31D}
        [AM] 86. c:\program files\mywebsearch\srchastt\1.bin\mwssrcas.dll
          MyWebSearch.com
          MyWebSearch Search Assistant
          .text,.rdata,.data,MyWebSea,.rsrc,.reloc,


      {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
        [AM] 89. c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll
          Adobe Systems Incorporated
          Adobe Acrobat IE Helper Version 7.0 for ActiveX
          .text,.rdata,.data,.rsrc,.reloc,


      {07B18EA1-A523-4961-B6BB-170DE4475CCA}
        [AM] 84. c:\program files\mywebsearch\bar\1.bin\mwsbar.dll
          MyWebSearch.com
          My Web Search Bar
          .text,.rdata,.data,MyWebSea,MyWebSea,.rsrc,.reloc,


      {0C7C23EF-A848-485B-873C-0ED954731014}
        [AM] 87. c:\program files\tencent\ssplus\saddr.dll
          Tencent
          .text,.rdata,.data,.rsrc,.reloc,


      {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}
        [AM] 90. d:\others can be deleted late\jccatch.dll
          www.flashget.com
          Flashget CatchUrl Module
          .text,.rdata,.data,.rsrc,.reloc,


      {49E0E0F0-5C30-11D4-945D-000000008811}
        [AM] 91. c:\windows\system32\ieseven.dll
          微软安全Internet Explorer插件
          CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,.aspack,.adata,


      {9030D464-4C02-4ABF-8ECC-5164760863C6}
        [AM] 92. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
          Microsoft Corporation
          WindowsLiveLogin.dll
          .text,.data,.rsrc,.reloc,


      {AA2F655A-7618-499D-B0A5-4F84B91D2C5F}
        [AM] 93. c:\windows\system32\pceggs.dll
          杭州弈天网络技术有限公司
          PC蛋蛋
          .text,.rdata,.data,.rsrc,.reloc,


      {F156768E-81EF-470C-9057-481BA8380DBA}
        [AM] 94. d:\others can be deleted late\getflash.dll
          www.flashget.com
          Flashget GetFlash Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Exec
        [A ] 95. c:\program files\lenovo\pkgmgr\pkgmgr.exe
          Lenovo Group Limited
          Software Installer
          .text,.rdata,.data,.rsrc,


      Exec
        [A ] 96. d:\others can be deleted late\flashget.exe
          FlashGet.com
          FlashGet
          .text,.rdata,.data,.rsrc,


      Exec
        [A ] 97. c:\program files\messenger\msmsgs.exe
          Microsoft Corporation
          Windows Messenger
          .text,.data,.rsrc,



    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars
      {182EC0BE-5110-49C8-A062-BEB1D02A220B}
        [A ] 98. c:\program files\adobe\acrobat 6.0\acrobat\acroiefavclient.dll
          .text,.rdata,.data,.rsrc,.reloc,




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      application/octet-stream
        [A ] 99. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      application/x-complus
        [A ] 99. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      application/x-msdownload
        [A ] 99. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,

      text/xml
        [A ] 100. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
          Microsoft Corporation
          Microsoft Office XML MIME Filter
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      ic32pp
        [A ] 101. c:\windows\wc98pp.dll
          CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,


      livecall
        [A ] 102. c:\program files\msn messenger\msgrapp.8.1.0178.00.dll
          Microsoft Corporation
          MSN Messenger Protocol Handler
          .text,.data,.rsrc,.reloc,


      msnim
        [A ] 102. c:\program files\msn messenger\msgrapp.8.1.0178.00.dll
          Microsoft Corporation
          MSN Messenger Protocol Handler
          .text,.data,.rsrc,.reloc,


      mso-offdap
        [A ] 103. c:\program files\common files\microsoft shared\web components\10\owc10.dll
          Microsoft Corporation
          Microsoft Office XP Web Components
          .text,.data,.rtext,.bootdat,msoconst,Shared,.rsrc,.reloc,


      mso-offdap11
        [A ] 104. c:\program files\common files\microsoft shared\web components\11\owc11.dll
          Microsoft Corporation
          Microsoft Office Web Components 2003
          .text,.data,.rtext,Shared,.cdata,.rsrc,.reloc,


      skype4com
        [A ] 105. c:\program files\common files\skype\skype4com.dll
          Skype Technologies
          Skype for COM API
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
      {4b218e3e-bc98-4770-93d3-2731b9329278}
        [A ] 106. c:\windows\inf\ie.inf



    + HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
      {F9DB5320-233E-11D1-9F84-707F02C10627}
        [AM] 107. c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll
          Adobe Systems, Inc.
          PDF Shell Extension
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 108. c:\windows\system32\hticons.dll
          Hilgraeve, Inc.
          HyperTerminal Applet Library
          .text,.data,.rsrc,.reloc,


      Fusion Cache
        [A ] 99. c:\windows\system32\mscoree.dll
          Microsoft Corporation
          Microsoft .NET Runtime Execution Engine
          .text,.data,.rsrc,.reloc,


      WinRAR shell extension
        [A ] 109. c:\program files\winrar\rarext.dll
          .text,.data,.tls,.idata,.edata,.rsrc,.reloc,


      Web Folders
        [A ] 110. c:\program files\common files\microsoft shared\web folders\msonsext.dll
          Microsoft Corporation
          Microsoft Web Folders
          .text,.data,.rsrc,.reloc,


      PicaView
        [A ] 111. c:\program files\acdsee\picaview.dll
          ACD Systems, Ltd.
          PicaView 系统扩展 DLL
          .text,.rdata,.data,.tls,.rsrc,.reloc,


      Adobe.Acrobat.ContextMenu
        [A ] 112. c:\program files\adobe\acrobat 6.0\acrobat elements\contextmenu.dll
          Adobe Systems Inc.
          Adobe Acrobat Elements
          .text,.rdata,.data,.idata,.rsrc,.reloc,


      AlcoholShellEx
        [A ] 113. c:\program files\alcohol soft\alcohol 120\axshlex.dll
          Alcohol Soft Development Team
          AXShlEx.dll
          UPX0,UPX1,.rsrc,


      Messenger Sharing Folders
        [A ] 114. c:\program files\msn messenger\fsshext.8.1.0178.00.dll
          Microsoft Corporation
          Messenger File Sharing Shell Extensions
          .text,.data,.rsrc,.reloc,


      CuteFTP Shell Extension
        [A ] 115. d:\tools\cuteftp xp v5.0.2 简体中文版\setup\cuteshell.dll
          GlobalSCAPE, Inc.
          .text,.rdata,.data,.rsrc,.reloc,


      Microsoft Office HTML Icon Handler
        [AM] 116. c:\program files\microsoft office\office11\msohev.dll
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,.reloc,


      Portable Media Devices
        [A ] 117. c:\windows\system32\audiodev.dll
          Microsoft Corporation
          Portable Media Devices Shell Extension
          .text,.data,.rsrc,.reloc,


      Portable Devices
        [A ] 118. c:\windows\system32\wpdshext.dll
          Microsoft Corporation
          Portable Devices Shell Extension
          .text,.data,.rsrc,.reloc,


      Portable Devices Menu
        [A ] 118. c:\windows\system32\wpdshext.dll
          Microsoft Corporation
          Portable Devices Shell Extension
          .text,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
        [AM] 119. c:\windows\system32\shlhook.dll
          Beijing Rising Technology Co., Ltd.
          shlhook Module
          .text,.rdata,.data,.rsrc,.reloc,



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
      WPDShServiceObj
        [AM] 120. c:\windows\system32\wpdshserviceobj.dll
          Microsoft Corporation
          Windows Portable Device Shell Service Object
          .text,.data,.rsrc,.reloc,




  + 用户登陆自运行项目
    + HKCU\Software\Microsoft\Windows\CurrentVersion\Run
      MyWebSearch Email Plugin
        [AM] 121. c:\program files\mywebsearch\bar\1.bin\mwsoemon.exe
          MyWebSearch.com
          My Web Search Plugin Loader
          .text,.rdata,.data,.rsrc,


      WMPNSCFG
        [AM] 122. c:\program files\windows media player\wmpnscfg.exe
          Microsoft Corporation
          Windows Media Player Network Sharing Service Configuration Application
          .text,.data,.rsrc,.reloc,


      MsnMsgr
        [AM] 123. c:\program files\msn messenger\msnmsgr.exe
          Microsoft Corporation
          Messenger
          .text,.data,.rsrc,



    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      SynTPLpr
        [AM] 124. c:\program files\synaptics\syntp\syntplpr.exe
          Synaptics, Inc.
          TouchPad Driver Helper Application
          .text,.rdata,.data,.rsrc,


      TpShocks
        [AM] 125. c:\windows\system32\tpshocks.exe
          IBM Corp.
          IBM Active Protection System
          .text,.rdata,.data,.rsrc,


      TPHOTKEY
        [AM] 126. c:\program files\thinkpad\pkgmgr\hotkey\tphkmgr.exe
          .text,.rdata,.data,
          文件名和"taskmgr.exe"类似;


      ControlCenter
        [A ] 127. c:\program files\ibm fingerprint software\ctlcntr.exe
          UPEK Inc.
          PSuite Control Center
          .text,.rdata,.data,.rsrc,


      TP4EX
        [A ] 128. c:\windows\system32\tp4ex.exe
          IBM Corporation
          IBM TrackPoint Accessibility Features
          .text,.rdata,.data,.rsrc,


      EZEJMNAP
        [AM] 129. c:\program files\thinkpad\utilities\ezejmnap.exe
          IBM Corp.
          IBM ThinkPad EasyEject Support Application
          .text,.rdata,.data,.rsrc,


      SoundMAXPnP
        [AM] 130. c:\program files\analog devices\soundmax\smax4pnp.exe
          Analog Devices, Inc.
          SMax4PNP MFC Application
          .text,.rdata,.data,.rsrc,


      UpdateManager
        [A ] 131. c:\program files\common files\sonic\update manager\sgtray.exe
          Sonic Solutions
          Sonic Update Manager
          .text,.rdata,.data,.rsrc,


      IBMPRC
        [AM] 132. c:\ibmtools\utils\ibmprc.exe
          IBM Corp.
          ibmprc Application
          .text,.rdata,.data,.rsrc,


      QCWLICON
        [AM] 133. c:\program files\thinkpad\connectutilities\qcwlicon.exe
          IBM Corp.
          IBM Access Connections - Wireless Status Icon.
          .text,.rdata,.data,.idata,.rsrc,.reloc,


      NeroFilterCheck
        [A ] 134. c:\windows\system32\nerocheck.exe
          Ahead Software Gmbh
          NeroCheck
          .text,.rdata,.data,.rsrc,


      StormCodec_Helper
        [A ] 135. c:\program files\ringz studio\storm codec\stormset.exe
          .text,.rdata,.data,.ndata,.rsrc,


      BigDog305
        [AM] 136. c:\windows\vm305_sti.exe
          Vimicro
          Vimicro
          .text,.rdata,.data,.rsrc,


      McAfeeUpdaterUI
        [AM] 137. c:\program files\network associates\common framework\updaterui.exe
          McAfee, Inc.
          Common User Interface
          .text,.rdata,.data,.rsrc,


      Network Associates Error Reporting Service
        [AM] 138. c:\program files\common files\network associates\talkback\tbmon.exe
          Network Associates, Inc.
          TalkBack Monitor
          .text,.rdata,.data,.rsrc,
          文件名和"ctfmon.exe"类似;


      ShStatEXE
        [AM] 139. c:\program files\network associates\virusscan\shstat.exe
          McAfee, Inc.
          On-access scanner statistics
          .text,.rdata,.data,.rsrc,


      MyWebSearch Email Plugin
        [AM] 121. c:\program files\mywebsearch\bar\1.bin\mwsoemon.exe
          MyWebSearch.com
          My Web Search Plugin Loader
          .text,.rdata,.data,.rsrc,

IMSCMig
        [A ] 140. c:\program files\common files\microsoft shared\ime\imsc40a\imscmig.exe
          Microsoft Corporation
          微软拼音输入法安装工具
          .text,.data,.rsrc,


      Samsung Common SM
        [AM] 141. c:\windows\samsung\comsmmgr\ssmmgr.exe
          Samsung Electronics.
          Samsung Status Monitor Manager
          .text,.rdata,.data,.rsrc,


      runeip
        [AM] 142. f:\ufo771至尊星\新建文件夹\runiep.exe
          Beijing Rising Technology Co., Ltd.
          Rising AntiSpyware Monitor
          .text,.rdata,.data,.rsrc,




  + 映像劫持
    + HKCR\Folder\shell
      Super Rabbit CDROM Eject
        [A ] 143. c:\program files\super rabbit\magicset\srcd2.exe
          Super Rabbit Software
          UPX0,UPX1,.rsrc,



    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 144. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 144. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,



    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 144. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,


      htmlfile\Print\Command
        [A ] 144. c:\program files\microsoft office\office11\msohtmed.exe
          Microsoft Corporation
          Microsoft Office 2003 component
          .text,.data,.rsrc,




  + 打印机监控
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      Adobe PDF Port
        [AM] 145. c:\windows\system32\adobepdf.dll
          Adobe Systems Incorporated.
          Acrobat ? PDF Port
          .text,.data,.edata,.rsrc,.reloc,


      Microsoft Document Imaging Writer Monitor
        [AM] 146. c:\windows\system32\mdimon.dll
          Microsoft Corporation
          Microsoft? Document Imaging
          .text,.data,.rsrc,.reloc,


      SUGS2 Langmon
        [AM] 147. c:\windows\system32\sugs2lmk.dll
          Samsung Electronics.
          Language Monitor for Status Monitor
          .text,.data,.rsrc,.reloc,




  + 安全验证
    + HKLM\SYSTEM\CurrentControlSet\Control\Lsa
      Notification Packages
        [AM] 148. c:\windows\system32\pwdmon.dll
          .text,.rdata,.data,.reloc,

+ 其他自启动项目
  + C:\Documents and Settings\yenki ng\Start Menu\Programs\Startup
    腾讯QQ.lnk
      [A ] 149. d:\qq\qq.exe
        TENCENT
        QQ
        .text,.rdata,.data,.rsrc,



  + C:\Documents and Settings\All Users\Start Menu\Programs\Startup
    Acrobat Assistant.lnk
      [AM] 150. c:\program files\adobe\acrobat 6.0\distillr\acrotray.exe
        Adobe Systems Inc.
        AcroTray
        .text,.rdata,.data,.rsrc,


    Adobe Reader Speed Launch.lnk
      [A ] 151. c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
        Adobe Systems Incorporated
        Adobe Acrobat SpeedLauncher
        .text,.rdata,.data,.rsrc,


    Digital Line Detect.lnk
      [A ] 152. c:\program files\digital line detect\dlg.exe
        BVRP Software
        Digital Line Detection
        .text,.rdata,.data,.rsrc,



  + C:\WINDOWS\Tasks
    PMTask.job
      [A ] 153. c:\program files\thinkpad\utilities\pwmidtsk.exe
        .text,.rdata,.data,




+ 正在运行的进程
  + 000000b0(176) spoolsv.exe
    50400000[00009000]
      [AM] 145. c:\windows\system32\adobepdf.dll
        Adobe Systems Incorporated.
        Acrobat ? PDF Port
        .text,.data,.edata,.rsrc,.reloc,


    65000000[00026000]
      [ M] 154. c:\program files\adobe\acrobat 6.0\distillr\adistres.dll
        Adobe Systems Incorporated.
        Acrobat  Distiller
        .text,.rdata,.data,.rsrc,.reloc,


    00F30000[00008000]
      [AM] 146. c:\windows\system32\mdimon.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,


    00F40000[00009000]
      [AM] 147. c:\windows\system32\sugs2lmk.dll
        Samsung Electronics.
        Language Monitor for Status Monitor
        .text,.data,.rsrc,.reloc,


    00F90000[00008000]
      [ M] 155. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
        Microsoft Corporation
        Microsoft? Document Imaging
        .text,.data,.rsrc,.reloc,



  + 0000011c(284) taskmgr.exe
    10000000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    00C40000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    00D50000[0000A000]
      [ M] 158. c:\program files\mywebsearch\bar\1.bin\mwsoestb.dll
        MyWebSearch.com
        My Web Search Plugin Loader
        .text,.rdata,.data,.rsrc,.reloc,



  + 000001a8(424) SMAgent.exe
    00400000[0000B000]
      [AM] 16. c:\program files\analog devices\soundmax\smagent.exe
        Analog Devices, Inc.
        SoundMAX service agent component
        .text,.rdata,.data,.rsrc,



  + 00000248(584) CDAC11BA.EXE
    00400000[00012000]
      [AM] 3. c:\windows\system32\drivers\cdac11ba.exe
        Macrovision
        Macrovision RTS Service
        .text,.rdata,.data,.rsrc,



  + 00000280(640) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000028c(652) rrpcsb.exe
    00400000[00074000]
      [AM] 5. c:\program files\ibm\ibm rapid restore ultra\rrpcsb.exe
        rrpcsb Module
        .text,.rdata,.data,.rsrc,



  + 000002cc(716) FrameworkService.exe
    00400000[00018000]
      [AM] 8. c:\program files\network associates\common framework\frameworkservice.exe
        McAfee, Inc.
        Framework Service
        .text,.rdata,.data,.rsrc,


    642C0000[00007000]
      [ M] 160. c:\program files\network associates\common framework\nailog.dll
        McAfee, Inc.
        Debug Logging
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 161. c:\program files\network associates\common framework\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    64360000[00036000]
      [ M] 162. c:\program files\network associates\common framework\naxml71.dll
        .text,.rdata,.data,.reloc,


    7C3A0000[0007B000]
      [ M] 163. c:\program files\network associates\common framework\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    64250000[00032000]
      [ M] 164. c:\program files\network associates\common framework\nacmnlib71.dll
        McAfee, Inc.
        Common Library
        .text,.rdata,.data,.rsrc,.reloc,


    64080000[00028000]
      [ M] 165. c:\program files\network associates\common framework\applib.dll
        McAfee, Inc.
        CMA Application Library
        .text,.rdata,.data,.rsrc,.reloc,


    64060000[00019000]
      [ M] 166. c:\program files\network associates\common framework\0409\agentres.dll
        McAfee, Inc.
        Agent Subsystem Resources
        .text,.rdata,.data,.rsrc,.reloc,


    64200000[0000E000]
      [ M] 167. c:\program files\network associates\common framework\logging.dll
        McAfee, Inc.
        Logging Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    64180000[00031000]
      [ M] 168. c:\program files\network associates\common framework\internetmanager.dll
        McAfee, Inc.
        Intennet Manager Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    642D0000[0001F000]
      [ M] 169. c:\program files\network associates\common framework\nainet.dll
        McAfee, Inc.
        Internet Protocol Library
        .text,.rdata,.data,.rsrc,.reloc,


    64540000[00012000]
      [ M] 170. c:\program files\network associates\common framework\userspace.dll
        McAfee, Inc.
        User Space Controller Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    64460000[00010000]
      [ M] 171. c:\program files\network associates\common framework\secureframeworkfactory.dll
        McAfee, Inc.
        Secure Framework Factory
        .text,.rdata,.data,.rsrc,.reloc,


    64210000[00026000]
      [ M] 172. c:\program files\network associates\common framework\management.dll
        McAfee, Inc.
        Management Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    640C0000[0000A000]
      [ M] 173. c:\program files\network associates\common framework\cmalib.dll
        McAfee, Inc.
        CMA Library
        .text,.rdata,.data,.rsrc,.reloc,


    64300000[0001D000]
      [ M] 174. c:\program files\network associates\common framework\napolicymanager.dll
        McAfee, Inc.
        Policy Manager
        .text,.rdata,.data,.rsrc,.reloc,

731B0000[0000A000]
      [ M] 175. c:\program files\network associates\common framework\psapi.dll
        Microsoft Corporation
        Process Status Helper
        .text,.rdata,.data,.rsrc,.reloc,


    64430000[00016000]
      [ M] 176. c:\program files\network associates\common framework\scriptsubsys.dll
        McAfee, Inc.
        McAfee Script Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    644C0000[00041000]
      [ M] 177. c:\program files\network associates\common framework\updatesubsys.dll
        McAfee, Inc.
        McAfee Update Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    643E0000[0004C000]
      [ M] 178. c:\program files\network associates\common framework\scheduler.dll
        McAfee, Inc.
        Scheduler Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    64000000[0003F000]
      [ M] 179. c:\program files\network associates\common framework\agent.dll
        McAfee, Inc.
        Agent Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    64320000[00034000]
      [ M] 180. c:\program files\network associates\common framework\naspipe.dll
        McAfee, Inc.
        Secure Pipe Library
        .text,.rdata,.data,.rsrc,.reloc,


    641C0000[00023000]
      [ M] 181. c:\program files\network associates\common framework\listenserver.dll
        McAfee, Inc.
        Listen Server Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    64480000[00031000]
      [ M] 182. c:\program files\network associates\common framework\tcsubsys.dll
        McAfee, Inc.
        TC Subsystem
        .text,.rdata,.data,.rsrc,.reloc,


    64160000[00016000]
      [ M] 183. c:\program files\network associates\common framework\genevtinf.dll
        McAfee, Inc.
        GenEvtInf Module
        .text,.rdata,.data,.rsrc,.reloc,


    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000304(772) StarWindService.exe
    00400000[0003A000]
      [AM] 17. c:\program files\alcohol soft\alcohol 120\starwind\starwindservice.exe
        Rocket Division Software
        StarWind iSCSI Target (Alcohol Edition)
        .text,.data,.rsrc,



  + 0000031c(796) mcshield.exe
    00400000[00079000]
      [AM] 9. c:\program files\network associates\virusscan\mcshield.exe
        McAfee, Inc.
        On-Access Scanner service
        .text,.rdata,.data,.tls,.rsrc,


    12580000[00005000]
      [ M] 184. c:\program files\network associates\virusscan\res09\mcshield.dll
        Network Associates, Inc.
        English (09) resources for McShield
        .rsrc,.reloc,


    22500000[0000F000]
      [ M] 185. c:\program files\network associates\virusscan\ftl.dll
        Network Associates, Inc.
        File Filter Library
        .text,.rdata,.data,.rsrc,.reloc,


    124D0000[00055000]
      [ M] 186. c:\program files\network associates\virusscan\naiann.dll
        Network Associates, Inc.
        McShield Announcer (VirusScan Enterprise : messages and TaskManager interfaces).
        .text,.rdata,.data,.rsrc,.reloc,



  12400000[00066000]
      [ M] 187. c:\program files\network associates\virusscan\mytilus.dll
        McAfee, Inc.
        Common Shell - Scanners' interface to the engine
        .text,.rdata,.data,.rsrc,.reloc,


    64160000[00016000]
      [ M] 183. c:\program files\network associates\common framework\genevtinf.dll
        McAfee, Inc.
        GenEvtInf Module
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 163. c:\program files\network associates\common framework\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 161. c:\program files\network associates\common framework\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    24700000[0004D000]
      [ M] 188. c:\program files\network associates\virusscan\naeventu.dll
        Network Associates, Inc.
        Client Event Interface DLL
        .text,.rdata,.data,.rsrc,.reloc,


    24800000[00015000]
      [ M] 189. c:\program files\network associates\virusscan\res09\naevtres.dll
        Network Associates, Inc.
        Client Event Interface Resources
        .rsrc,.reloc,


    12550000[00007000]
      [ M] 190. c:\program files\network associates\virusscan\vsidsvr.dll
        Network Associates, Inc.
        Virus Source Information Database.
        .text,.rdata,.data,.rsrc,.reloc,


    12000000[002AF000]
      [ M] 191. c:\program files\common files\network associates\engine\mcscan32.dll
        McAfee, Inc.
        AV Scanning Engine
        .text,.rdata,.data,.rsrc,.reloc,


    39000000[0003A000]
      [ M] 192. c:\program files\network associates\virusscan\entsrv.dll
        McAfee, Inc
        EntSrv
        .text,.rdata,.data,.rsrc,.reloc,


    69B10000[0013C000]
      [ M] 193. c:\windows\system32\msxml4.dll
        Microsoft Corporation
        MSXML 4.0 SP 2
        .text,.data,.rsrc,.reloc,



  + 0000033c(828) smss.exe

  + 00000354(852) naPrdMgr.exe
    00400000[00039000]
      [ M] 194. c:\program files\network associates\common framework\naprdmgr.exe
        McAfee, Inc.
        NAI Product Manager
        .text,.rdata,.data,.rsrc,


    64360000[00036000]
      [ M] 162. c:\program files\network associates\common framework\naxml71.dll
        .text,.rdata,.data,.reloc,


    7C3A0000[0007B000]
      [ M] 163. c:\program files\network associates\common framework\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 161. c:\program files\network associates\common framework\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    642C0000[00007000]
      [ M] 160. c:\program files\network associates\common framework\nailog.dll
        McAfee, Inc.
        Debug Logging
        .text,.rdata,.data,.rsrc,.reloc,


    64250000[00032000]
      [ M] 164. c:\program files\network associates\common framework\nacmnlib71.dll
        McAfee, Inc.
        Common Library
        .text,.rdata,.data,.rsrc,.reloc,


    64080000[00028000]
      [ M] 165. c:\program files\network associates\common framework\applib.dll
        McAfee, Inc.
        CMA Application Library
        .text,.rdata,.data,.rsrc,.reloc,


    64060000[00019000]
      [ M] 166. c:\program files\network associates\common framework\0409\agentres.dll
        McAfee, Inc.
        Agent Subsystem Resources
        .text,.rdata,.data,.rsrc,.reloc,


    64040000[00015000]
      [ M] 195. c:\program files\network associates\common framework\agentplugin.dll
        McAfee, Inc.
        ePO Agent Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    64290000[00023000]
      [ M] 196. c:\program files\network associates\common framework\nagshr32.dll
        McAfee, Inc.
        McAfee ASaP Shared Library
        .text,.rdata,.data,.rsrc,.reloc,


    188C0000[00026000]
      [ M] 197. c:\program files\network associates\virusscan\vsplugin.dll
        McAfee, Inc.
        VirusScan Updater Notification Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000370(880) csrss.exe

  + 00000388(904) winlogon.exe
    10000000[0002C000]
      [AM] 78. c:\windows\system32\vrlogon.dll
        UPEK Inc.
        Logon Protector library
        .text,.rdata,.data,.edata,.rsrc,.reloc,


    00FD0000[00021000]
      [ M] 198. c:\program files\ibm fingerprint software\extvapi.dll
        UPEK Inc.
        Logon Protector Verification Library
        .text,.rdata,.data,.rsrc,.reloc,


    011D0000[0002B000]
      [ M] 199. c:\program files\common files\virtual token\psutil.dll
        UPEK Inc.
        PSuite utility library
        .text,.rdata,.data,.rsrc,.reloc,


    01260000[0000A000]
      [ M] 200. c:\program files\common files\virtual token\resmgr.dll
        UPEK Inc.
        PSuite resource manager
        .text,.rdata,.data,.rsrc,.reloc,


    014B0000[0002C000]
      [ M] 201. c:\program files\common files\virtual token\remote.dll
        UPEK Inc.
        RemoteManager library
        .text,.rdata,.data,.rsrc,.reloc,


    014E0000[0002D000]
      [ M] 202. c:\program files\common files\virtual token\passport.dll
        UPEK Inc.
        Passport Manager Implementation
        .text,.rdata,.data,.rsrc,.reloc,


    01550000[00010000]
      [AM] 79. c:\windows\system32\ati2evxx.dll
        ATI Technologies Inc.
        ATI External Event Utility DLL Module
        .text,.rdata,.data,.rsrc,.reloc,


    01630000[0001D000]
      [AM] 80. c:\program files\ibm fingerprint software\psfus.dll
        UPEK Inc.
        Fast User Switching library
        .text,.rdata,.data,.rsrc,.reloc,


    01660000[00006000]
      [AM] 82. c:\windows\system32\tphklock.dll
        .text,.rdata,.data,.reloc,


    01710000[0003B000]
      [AM] 83. c:\windows\system32\wgalogon.dll
        Microsoft Corporation
        Windows Genuine Advantage Notification
        .text,.data,.rsrc,.reloc,


    016D0000[00019000]
      [ M] 203. c:\program files\common files\virtual token\config.dll
        UPEK Inc.
        Passport configuration manager
        .text,.rdata,.data,.rsrc,.reloc,


    01790000[00049000]
      [ M] 204. c:\program files\common files\virtual token\locpass.dll
        UPEK Inc.
        Local Passport implementation
        .text,.rdata,.data,.rsrc,.reloc,

    017E0000[00049000]
      [ M] 205. c:\program files\common files\virtual token\sbiopass.dll
        UPEK Inc.
        Server Bio Passport implementation
        .text,.rdata,.data,.rsrc,.reloc,


    01920000[00031000]
      [ M] 206. c:\program files\common files\virtual token\psdlg.dll
        UPEK Inc.
        Protector Suite common dialogs
        .text,.rdata,.data,.rsrc,.reloc,


    72D10000[00008000]
      [ M] 207. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,



  + 000003b4(948) services.exe
    47260000[0000F000]
      [ M] 208. c:\windows\apppatch\acadproc.dll
        Microsoft Corporation
        Windows Compatibility DLL
        .text,.data,.rsrc,.reloc,


    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 000003c0(960) lsass.exe
    10000000[0000C000]
      [AM] 148. c:\windows\system32\pwdmon.dll
        .text,.rdata,.data,.reloc,


    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000450(1104) Ras.exe
    00400000[00160000]
      [ M] 209. f:\ufo771至尊星\新建文件夹\ras.exe
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware
        .text,.rdata,.data,.rsrc,


    10000000[00013000]
      [ M] 210. f:\ufo771至尊星\新建文件夹\topsoft.dll
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware TopSoft
        .text,.rdata,.data,.rsrc,.reloc,


    7C140000[00103000]
      [ M] 211. f:\ufo771至尊星\新建文件夹\mfc71.dll
        Microsoft Corporation
        MFCDLL Shared Library - Retail Version
        .text,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 212. f:\ufo771至尊星\新建文件夹\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    7C3A0000[0007B000]
      [ M] 213. f:\ufo771至尊星\新建文件夹\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    5FD00000[00009000]
      [ M] 214. c:\windows\system32\mfc42loc.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    5D360000[0000A000]
      [ M] 215. c:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00DE0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    00E60000[000BD000]
      [ M] 216. f:\ufo771至尊星\新建文件夹\rasgui.dll
        Beijing Rising Technology Co., Ltd.
        RasGUI
        .text,.rdata,.data,.rsrc,.reloc,


    01580000[00011000]
      [AM] 119. c:\windows\system32\shlhook.dll
        Beijing Rising Technology Co., Ltd.
        shlhook Module
        .text,.rdata,.data,.rsrc,.reloc,


    01790000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    01B20000[0000A000]
      [ M] 158. c:\program files\mywebsearch\bar\1.bin\mwsoestb.dll
        MyWebSearch.com
        My Web Search Plugin Loader
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000460(1120) vtserver.exe
    00400000[0000D000]
      [AM] 21. c:\program files\common files\virtual token\vtserver.exe
        UPEK Inc.
        Passport Server Module
        .text,.rdata,.data,.rsrc,


    10000000[0002B000]
      [ M] 199. c:\program files\common files\virtual token\psutil.dll
        UPEK Inc.
        PSuite utility library
        .text,.rdata,.data,.rsrc,.reloc,


    00940000[0001D000]
      [AM] 80. c:\program files\ibm fingerprint software\psfus.dll
        UPEK Inc.
        Fast User Switching library
        .text,.rdata,.data,.rsrc,.reloc,


    00980000[0002D000]
      [ M] 202. c:\program files\common files\virtual token\passport.dll
        UPEK Inc.
        Passport Manager Implementation
        .text,.rdata,.data,.rsrc,.reloc,


    009B0000[0004F000]
      [ M] 217. c:\program files\common files\virtual token\devtc.dll
        UPEK Inc.
        PSuite fingerprint sensor device driver
        .text,.rdata,.data,.rsrc,.reloc,


    00A40000[0001F000]
      [ M] 218. c:\program files\common files\virtual token\btcver.dll
        UPEK Inc.
        PSuite biometric module
        .text,.rdata,.data,.rsrc,.reloc,


    00A60000[0002C000]
      [ M] 201. c:\program files\common files\virtual token\remote.dll
        UPEK Inc.
        RemoteManager library
        .text,.rdata,.data,.rsrc,.reloc,


    00C90000[00019000]
      [ M] 203. c:\program files\common files\virtual token\config.dll
        UPEK Inc.
        Passport configuration manager
        .text,.rdata,.data,.rsrc,.reloc,


    00CB0000[00049000]
      [ M] 204. c:\program files\common files\virtual token\locpass.dll
        UPEK Inc.
        Local Passport implementation
        .text,.rdata,.data,.rsrc,.reloc,


    00D00000[00049000]
      [ M] 205. c:\program files\common files\virtual token\sbiopass.dll
        UPEK Inc.
        Server Bio Passport implementation
        .text,.rdata,.data,.rsrc,.reloc,


    00D50000[0002C000]
      [ M] 219. c:\program files\common files\virtual token\algver.dll
        UPEK Inc.
        PSuite Algorithms driver
        .text,.rdata,.data,.rsrc,.reloc,


    01190000[00031000]
      [ M] 206. c:\program files\common files\virtual token\psdlg.dll
        UPEK Inc.
        Protector Suite common dialogs
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000474(1140) ibmpmsvc.exe
    00400000[0000F000]
      [AM] 6. c:\windows\system32\ibmpmsvc.exe
        .text,.rdata,.data,.rsrc,



  + 00000498(1176) Ati2evxx.exe
    00400000[0005E000]
      [AM] 2. c:\windows\system32\ati2evxx.exe
        ATI Technologies Inc.
        ATI External Event Utility EXE Module
        .text,.rdata,.data,.rsrc,


    003E0000[0000F000]
      [ M] 220. c:\windows\system32\ati2edxx.dll
        ATI Technologies, Inc.
        ati2edxx
        .text,.data,.SHAREDS,.rsrc,.reloc,



  + 000004a4(1188) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 000004f8(1272) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000558(1368) vstskmgr.exe
    00400000[0000B000]
      [AM] 10. c:\program files\network associates\virusscan\vstskmgr.exe
        Network Associates, Inc.
        Task Manager : scheduling and OAS alerting service
        .text,.rdata,.data,.rsrc,
        文件名和"taskmgr.exe"类似;


    18200000[0002A000]
      [ M] 221. c:\program files\network associates\virusscan\shutil.dll
        McAfee, Inc.
        VirusScan Shared Utility Library
        .text,.rdata,.data,.rsrc,.reloc,


    18440000[00006000]
      [ M] 222. c:\program files\network associates\virusscan\naiwmain.dll
        Network Associates, Inc.
        Shared Library
        .text,.rdata,.data,.rsrc,.reloc,


    186C0000[0000F000]
      [ M] 223. c:\program files\network associates\virusscan\naicondl.dll
        Network Associates, Inc.
        VirusScan Console Data Layer
        .text,.rdata,.data,.rsrc,.reloc,


    19340000[00003000]
      [ M] 224. c:\program files\network associates\virusscan\res09\vstskmgr.dll
        Network Associates, Inc.
        English(09) resources for VsTskMgr
        .rsrc,.reloc,


    180F0000[0001B000]
      [ M] 225. c:\program files\network associates\virusscan\bbcpl.dll
        McAfee, Inc.
        Access Protection Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    187F0000[0001F000]
      [ M] 226. c:\program files\network associates\virusscan\coptcpl.dll
        Network Associates, Inc.
        Virus Scan Console Options
        .text,.rdata,.data,.rsrc,.reloc,


    18620000[00017000]
      [ M] 227. c:\program files\network associates\virusscan\emcfgcpl.dll
        McAfee, Inc.
        VirusScan e-mail Scan
        .text,.rdata,.data,.rsrc,.reloc,


    19200000[00009000]
      [ M] 228. c:\program files\network associates\virusscan\res09\semalres.dll
        Network Associates, Inc.
        Resources for VirusScan Mapi Mail Scanner
        .rsrc,.reloc,


    19250000[00004000]
      [ M] 229. c:\program files\network associates\virusscan\res09\product.dll
        Network Associates, Inc.
        English(09) common resources
        .rsrc,.reloc,


    18190000[0000F000]
      [ M] 230. c:\program files\network associates\virusscan\nvpcpl.dll
        Network Associates, Inc.
        VirusScan Unwanted Programs Policy  Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    18300000[0001C000]
      [ M] 231. c:\program files\network associates\virusscan\ftcfg.dll
        Network Associates, Inc.
        Filter Configuration Resource Library
        .text,.rdata,.data,.rsrc,.reloc,


    12400000[00066000]
      [ M] 187. c:\program files\network associates\virusscan\mytilus.dll
        McAfee, Inc.
        Common Shell - Scanners' interface to the engine
        .text,.rdata,.data,.rsrc,.reloc,


    12580000[00005000]
      [ M] 184. c:\program files\network associates\virusscan\res09\mcshield.dll
        Network Associates, Inc.
        English (09) resources for McShield
        .rsrc,.reloc,


    18090000[0000B000]
      [ M] 232. c:\program files\network associates\virusscan\oascpl.dll
        Network Associates, Inc.
        VirusScan On-Access Scanner Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    18480000[00038000]
      [ M] 233. c:\program files\network associates\virusscan\vsodscpl.dll
        McAfee, Inc.
        VirusScan On-Demand Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,

    22500000[0000F000]
      [ M] 185. c:\program files\network associates\virusscan\ftl.dll
        Network Associates, Inc.
        File Filter Library
        .text,.rdata,.data,.rsrc,.reloc,


    18980000[00012000]
      [ M] 234. c:\program files\network associates\virusscan\vsupdcpl.dll
        Network Associates, Inc.
        VirusScan Update Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001D000]
      [ M] 235. c:\program files\network associates\virusscan\midutil.dll
        McAfee, Inc.
        MID Config Applicator
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000588(1416) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,


    50E60000[0000C000]
      [ M] 236. c:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,



  + 000005bc(1468) p2psvr.exe
    00400000[00016000]
      [AM] 12. c:\program files\common files\sogou pxp\p2psvr.exe
        Sohu.com Inc.
        Sogou PXP Streaming Service
        .text,.rdata,.data,.rsrc,


    10000000[00032000]
      [ M] 237. c:\program files\sogou pxp\vodsvr.dll
        Sohu.com Inc.
        Sogou VOD Service Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    00BA0000[00025000]
      [ M] 238. c:\program files\sogou pxp\pxpnet.dll
        Sohu.com Inc.
        Sogou PXP Network Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    00BE0000[00037000]
      [ M] 239. c:\program files\sogou pxp\p2pclient.dll
        Sohu.com Inc.
        P2P Client Plugin
        .text,.rdata,.data,.rsrc,.reloc,



  + 000005dc(1500) EvtEng.exe
    00400000[00016000]
      [AM] 4. c:\program files\intel\wireless\bin\evteng.exe
        Intel Corporation
        EvtEng Module
        .text,.rdata,.data,.rsrc,


    10000000[00030000]
      [ M] 240. c:\program files\intel\wireless\bin\psregapi.dll
        Intel Corporation
        PsRegApi
        .text,.rdata,.data,.rsrc,.reloc,


    00370000[00023000]
      [ M] 241. c:\program files\intel\wireless\bin\traceapi.dll
        Intel Corporation
        TraceAPI Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 000005f0(1520) S24EvMon.exe
    00400000[00063000]
      [AM] 15. c:\program files\intel\wireless\bin\s24evmon.exe
        Intel Corporation
        Event Monitor - Supports driver extensions to  NIC Driver for wireless adapters.
        .text,.rdata,.data,.rsrc,


    10000000[00023000]
      [ M] 241. c:\program files\intel\wireless\bin\traceapi.dll
        Intel Corporation
        TraceAPI Module
        .text,.rdata,.data,.rsrc,.reloc,


    00370000[00030000]
      [ M] 240. c:\program files\intel\wireless\bin\psregapi.dll
        Intel Corporation
        PsRegApi
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000620(1568) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000067c(1660) SynTPLpr.exe
    00400000[0001B000]
      [AM] 124. c:\program files\synaptics\syntp\syntplpr.exe
        Synaptics, Inc.
        TouchPad Driver Helper Application
        .text,.rdata,.data,.rsrc,


    63000000[00014000]
      [ M] 242. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    10000000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    010B0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 00000684(1668) QCONSVC.EXE
    00400000[00015000]
      [AM] 13. c:\windows\system32\qconsvc.exe
        IBM Corp.
        IBM Access Connections - Service Component.
        .text,.rdata,.data,.rsrc,



  + 000006b0(1712) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007c4(1988) RegSrvc.exe
    00400000[00026000]
      [AM] 14. c:\program files\intel\wireless\bin\regsrvc.exe
        Intel Corporation
        RegSrvc Module
        .text,.rdata,.data,.rsrc,



  + 00000808(2056) TpShocks.exe
    00400000[0001C000]
      [AM] 125. c:\windows\system32\tpshocks.exe
        IBM Corp.
        IBM Active Protection System
        .text,.rdata,.data,.rsrc,


    10000000[00015000]
      [ M] 243. c:\program files\thinkpad\tpshocks\mui\0804\tpshocks.dll
        IBM Corp.
        IBM Active Protection System
        .text,.rdata,.data,.rsrc,.reloc,


    00A20000[0000F000]
      [ M] 244. c:\windows\system32\sensor.dll
        IBM Corporation
        IBM Active Protection System - Shock Sensor Module
        .text,.rdata,.data,.rsrc,.reloc,


    00BA0000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    00CF0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 00000818(2072) TPHKMGR.exe
    00400000[00019000]
      [AM] 126. c:\program files\thinkpad\pkgmgr\hotkey\tphkmgr.exe
        .text,.rdata,.data,
        文件名和"taskmgr.exe"类似;


    72D10000[00008000]
      [ M] 207. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    10000000[00006000]
      [ M] 245. c:\program files\thinkpad\pkgmgr\hotkey_2\tphk_2k.dll
        .text,.rdata,.data,.reloc,


    00DF0000[00012000]
      [ M] 246. c:\windows\system32\oemdspif.dll
        ATI Technologies, Inc.
        ATI Driver Interface DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00E20000[00037000]
      [ M] 247. c:\program files\thinkpad\pkgmgr\hotkey\tpfnf7.dll
        .text,.rdata,.data,.rsrc,.reloc,


    01160000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    012B0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 00000864(2148) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000878(2168) TPHDEXLG.EXE
    00400000[0001E000]
      [AM] 18. c:\windows\system32\tphdexlg.exe
        IBM Corporation
        IBM Active Protection System - HDD Logger Module
        .text,.rdata,.data,.rsrc,



  + 000008b8(2232) EzEjMnAp.Exe
    00400000[00039000]
      [AM] 129. c:\program files\thinkpad\utilities\ezejmnap.exe
        IBM Corp.
        IBM ThinkPad EasyEject Support Application
        .text,.rdata,.data,.rsrc,


    10000000[00009000]
      [ M] 248. c:\program files\thinkpad\utilities\us\ezmapres.dll
        .text,.rdata,.data,.rsrc,.reloc,


    00E50000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    00FA0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 000008dc(2268) SMax4PNP.exe
    00400000[00153000]
      [AM] 130. c:\program files\analog devices\soundmax\smax4pnp.exe
        Analog Devices, Inc.
        SMax4PNP MFC Application
        .text,.rdata,.data,.rsrc,


    10000000[0004C000]
      [ M] 249. c:\program files\analog devices\soundmax\smwdmif.dll
        Analog Devices, Inc.
        SMWDM Interface DLL
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    5FD00000[00009000]
      [ M] 214. c:\windows\system32\mfc42loc.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00D30000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    72D10000[00008000]
      [ M] 207. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    01530000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 000008e4(2276) TpKmpSVC.exe
    00400000[0000A000]
      [AM] 19. c:\windows\system32\tpkmpsvc.exe
        .text,.rdata,.data,



  + 000008f4(2292) ibmprc.exe
    00400000[00018000]
      [AM] 132. c:\ibmtools\utils\ibmprc.exe
        IBM Corp.
        ibmprc Application
        .text,.rdata,.data,.rsrc,


    10000000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    00AA0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 000008fc(2300) QCWLICON.EXE
    00400000[00017000]
      [AM] 133. c:\program files\thinkpad\connectutilities\qcwlicon.exe
        IBM Corp.
        IBM Access Connections - Wireless Status Icon.
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    20000000[0011B000]
      [ M] 250. c:\program files\thinkpad\connectutilities\qcon.dll
        IBM Corp.
        IBM Access Connections - Core DLL.
        .text,.rdata,.data,.QconDll,QCWLStat,QCTrayIF,QCState,.rsrc,.reloc,


    10000000[0002B000]
      [ M] 251. c:\program files\thinkpad\connectutilities\merlinc201.dll
        Novatel Wireless Inc.
        MerlinC201
        .text,.rdata,.data,.shared,_TEXT_HA,.rsrc,.reloc,


    5FD00000[00009000]
      [ M] 214. c:\windows\system32\mfc42loc.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00A50000[00006000]
      [ M] 252. c:\program files\thinkpad\connectutilities\res\sc\iconres.dll
        .text,.rdata,.data,.rsrc,.reloc,

01220000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    012A0000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000924(2340) rundll32.exe
    10000000[00024000]
      [ M] 253. c:\program files\thinkpad\utilities\pwrmgrtr.dll
        IBM Corp.
        IBM ThinkPad Power Manager Background Monitor and Tray Battery Gauge
        .text,.rdata,.data,.pm_shar,.rsrc,.reloc,


    5FD00000[00009000]
      [ M] 214. c:\windows\system32\mfc42loc.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


  5D360000[0000A000]
      [ M] 215. c:\windows\system32\mfc71chs.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00DE0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    00E60000[000BD000]
      [ M] 216. f:\ufo771至尊星\新建文件夹\rasgui.dll
        Beijing Rising Technology Co., Ltd.
        RasGUI
        .text,.rdata,.data,.rsrc,.reloc,


    01580000[00011000]
      [AM] 119. c:\windows\system32\shlhook.dll
        Beijing Rising Technology Co., Ltd.
        shlhook Module
        .text,.rdata,.data,.rsrc,.reloc,


    01790000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    01B20000[0000A000]
      [ M] 158. c:\program files\mywebsearch\bar\1.bin\mwsoestb.dll
        MyWebSearch.com
        My Web Search Plugin Loader
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000460(1120) vtserver.exe
    00400000[0000D000]
      [AM] 21. c:\program files\common files\virtual token\vtserver.exe
        UPEK Inc.
        Passport Server Module
        .text,.rdata,.data,.rsrc,


    10000000[0002B000]
      [ M] 199. c:\program files\common files\virtual token\psutil.dll
        UPEK Inc.
        PSuite utility library
        .text,.rdata,.data,.rsrc,.reloc,


    00940000[0001D000]
      [AM] 80. c:\program files\ibm fingerprint software\psfus.dll
        UPEK Inc.
        Fast User Switching library
        .text,.rdata,.data,.rsrc,.reloc,


    00980000[0002D000]
      [ M] 202. c:\program files\common files\virtual token\passport.dll
        UPEK Inc.
        Passport Manager Implementation
        .text,.rdata,.data,.rsrc,.reloc,


    009B0000[0004F000]
      [ M] 217. c:\program files\common files\virtual token\devtc.dll
        UPEK Inc.
        PSuite fingerprint sensor device driver
        .text,.rdata,.data,.rsrc,.reloc,


    00A40000[0001F000]
      [ M] 218. c:\program files\common files\virtual token\btcver.dll
        UPEK Inc.
        PSuite biometric module
        .text,.rdata,.data,.rsrc,.reloc,


    00A60000[0002C000]
      [ M] 201. c:\program files\common files\virtual token\remote.dll
        UPEK Inc.
        RemoteManager library
        .text,.rdata,.data,.rsrc,.reloc,


    00C90000[00019000]
      [ M] 203. c:\program files\common files\virtual token\config.dll
        UPEK Inc.
        Passport configuration manager
        .text,.rdata,.data,.rsrc,.reloc,


    00CB0000[00049000]
      [ M] 204. c:\program files\common files\virtual token\locpass.dll
        UPEK Inc.
        Local Passport implementation
        .text,.rdata,.data,.rsrc,.reloc,


    00D00000[00049000]
      [ M] 205. c:\program files\common files\virtual token\sbiopass.dll
        UPEK Inc.
        Server Bio Passport implementation
        .text,.rdata,.data,.rsrc,.reloc,


    00D50000[0002C000]
      [ M] 219. c:\program files\common files\virtual token\algver.dll
        UPEK Inc.
        PSuite Algorithms driver
        .text,.rdata,.data,.rsrc,.reloc,


    01190000[00031000]
      [ M] 206. c:\program files\common files\virtual token\psdlg.dll
        UPEK Inc.
        Protector Suite common dialogs
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000474(1140) ibmpmsvc.exe
    00400000[0000F000]
      [AM] 6. c:\windows\system32\ibmpmsvc.exe
        .text,.rdata,.data,.rsrc,



  + 00000498(1176) Ati2evxx.exe
    00400000[0005E000]
      [AM] 2. c:\windows\system32\ati2evxx.exe
        ATI Technologies Inc.
        ATI External Event Utility EXE Module
        .text,.rdata,.data,.rsrc,


    003E0000[0000F000]
      [ M] 220. c:\windows\system32\ati2edxx.dll
        ATI Technologies, Inc.
        ati2edxx
        .text,.data,.SHAREDS,.rsrc,.reloc,



  + 000004a4(1188) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 000004f8(1272) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000558(1368) vstskmgr.exe
    00400000[0000B000]
      [AM] 10. c:\program files\network associates\virusscan\vstskmgr.exe
        Network Associates, Inc.
        Task Manager : scheduling and OAS alerting service
        .text,.rdata,.data,.rsrc,
        文件名和"taskmgr.exe"类似;


    18200000[0002A000]
      [ M] 221. c:\program files\network associates\virusscan\shutil.dll
        McAfee, Inc.
        VirusScan Shared Utility Library
        .text,.rdata,.data,.rsrc,.reloc,


    18440000[00006000]
      [ M] 222. c:\program files\network associates\virusscan\naiwmain.dll
        Network Associates, Inc.
        Shared Library
        .text,.rdata,.data,.rsrc,.reloc,


    186C0000[0000F000]
      [ M] 223. c:\program files\network associates\virusscan\naicondl.dll
        Network Associates, Inc.
        VirusScan Console Data Layer
        .text,.rdata,.data,.rsrc,.reloc,


    19340000[00003000]
      [ M] 224. c:\program files\network associates\virusscan\res09\vstskmgr.dll
        Network Associates, Inc.
        English(09) resources for VsTskMgr
        .rsrc,.reloc,


    180F0000[0001B000]
      [ M] 225. c:\program files\network associates\virusscan\bbcpl.dll
        McAfee, Inc.
        Access Protection Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    187F0000[0001F000]
      [ M] 226. c:\program files\network associates\virusscan\coptcpl.dll
        Network Associates, Inc.
        Virus Scan Console Options
        .text,.rdata,.data,.rsrc,.reloc,


    18620000[00017000]
      [ M] 227. c:\program files\network associates\virusscan\emcfgcpl.dll
        McAfee, Inc.
        VirusScan e-mail Scan

.text,.rdata,.data,.rsrc,.reloc,


    19200000[00009000]
      [ M] 228. c:\program files\network associates\virusscan\res09\semalres.dll
        Network Associates, Inc.
        Resources for VirusScan Mapi Mail Scanner
        .rsrc,.reloc,


    19250000[00004000]
      [ M] 229. c:\program files\network associates\virusscan\res09\product.dll
        Network Associates, Inc.
        English(09) common resources
        .rsrc,.reloc,


    18190000[0000F000]
      [ M] 230. c:\program files\network associates\virusscan\nvpcpl.dll
        Network Associates, Inc.
        VirusScan Unwanted Programs Policy  Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    18300000[0001C000]
      [ M] 231. c:\program files\network associates\virusscan\ftcfg.dll
        Network Associates, Inc.
        Filter Configuration Resource Library
        .text,.rdata,.data,.rsrc,.reloc,


    12400000[00066000]
      [ M] 187. c:\program files\network associates\virusscan\mytilus.dll
        McAfee, Inc.
        Common Shell - Scanners' interface to the engine
        .text,.rdata,.data,.rsrc,.reloc,


    12580000[00005000]
      [ M] 184. c:\program files\network associates\virusscan\res09\mcshield.dll
        Network Associates, Inc.
        English (09) resources for McShield
        .rsrc,.reloc,


    18090000[0000B000]
      [ M] 232. c:\program files\network associates\virusscan\oascpl.dll
        Network Associates, Inc.
        VirusScan On-Access Scanner Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    18480000[00038000]
      [ M] 233. c:\program files\network associates\virusscan\vsodscpl.dll
        McAfee, Inc.
        VirusScan On-Demand Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    22500000[0000F000]
      [ M] 185. c:\program files\network associates\virusscan\ftl.dll
        Network Associates, Inc.
        File Filter Library
        .text,.rdata,.data,.rsrc,.reloc,


    18980000[00012000]
      [ M] 234. c:\program files\network associates\virusscan\vsupdcpl.dll
        Network Associates, Inc.
        VirusScan Update Console Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    10000000[0001D000]
      [ M] 235. c:\program files\network associates\virusscan\midutil.dll
        McAfee, Inc.
        MID Config Applicator
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000588(1416) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,


    50E60000[0000C000]
      [ M] 236. c:\windows\system32\wups2.dll
        Microsoft Corporation
        Windows Update client proxy stub 2
        .text,.orpc,.data,.rsrc,.reloc,



  + 000005bc(1468) p2psvr.exe
    00400000[00016000]
      [AM] 12. c:\program files\common files\sogou pxp\p2psvr.exe
        Sohu.com Inc.
        Sogou PXP Streaming Service
        .text,.rdata,.data,.rsrc,


    10000000[00032000]
      [ M] 237. c:\program files\sogou pxp\vodsvr.dll
        Sohu.com Inc.
        Sogou VOD Service Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    00BA0000[00025000]
      [ M] 238. c:\program files\sogou pxp\pxpnet.dll
        Sohu.com Inc.
        Sogou PXP Network Plugin
        .text,.rdata,.data,.rsrc,.reloc,


    00BE0000[00037000]
      [ M] 239. c:\program files\sogou pxp\p2pclient.dll
        Sohu.com Inc.
        P2P Client Plugin
        .text,.rdata,.data,.rsrc,.reloc,



  + 000005dc(1500) EvtEng.exe
    00400000[00016000]
      [AM] 4. c:\program files\intel\wireless\bin\evteng.exe
        Intel Corporation
        EvtEng Module
        .text,.rdata,.data,.rsrc,


    10000000[00030000]
      [ M] 240. c:\program files\intel\wireless\bin\psregapi.dll
        Intel Corporation
        PsRegApi
        .text,.rdata,.data,.rsrc,.reloc,


    00370000[00023000]
      [ M] 241. c:\program files\intel\wireless\bin\traceapi.dll
        Intel Corporation
        TraceAPI Module
        .text,.rdata,.data,.rsrc,.reloc,



  + 000005f0(1520) S24EvMon.exe
    00400000[00063000]
      [AM] 15. c:\program files\intel\wireless\bin\s24evmon.exe
        Intel Corporation
        Event Monitor - Supports driver extensions to  NIC Driver for wireless adapters.
        .text,.rdata,.data,.rsrc,


    10000000[00023000]
      [ M] 241. c:\program files\intel\wireless\bin\traceapi.dll
        Intel Corporation
        TraceAPI Module
        .text,.rdata,.data,.rsrc,.reloc,


    00370000[00030000]
      [ M] 240. c:\program files\intel\wireless\bin\psregapi.dll
        Intel Corporation
        PsRegApi
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000620(1568) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 0000067c(1660) SynTPLpr.exe
    00400000[0001B000]
      [AM] 124. c:\program files\synaptics\syntp\syntplpr.exe
        Synaptics, Inc.
        TouchPad Driver Helper Application
        .text,.rdata,.data,.rsrc,


    63000000[00014000]
      [ M] 242. c:\windows\system32\syntpfcs.dll
        Synaptics, Inc.
        SynTPFcs
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    10000000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    010B0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 00000684(1668) QCONSVC.EXE
    00400000[00015000]
      [AM] 13. c:\windows\system32\qconsvc.exe
        IBM Corp.
        IBM Access Connections - Service Component.
        .text,.rdata,.data,.rsrc,



  + 000006b0(1712) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 000007c4(1988) RegSrvc.exe
    00400000[00026000]
      [AM] 14. c:\program files\intel\wireless\bin\regsrvc.exe
        Intel Corporation
        RegSrvc Module
        .text,.rdata,.data,.rsrc,



  + 00000808(2056) TpShocks.exe
    00400000[0001C000]
      [AM] 125. c:\windows\system32\tpshocks.exe
        IBM Corp.
        IBM Active Protection System
        .text,.rdata,.data,.rsrc,


    10000000[00015000]
      [ M] 243. c:\program files\thinkpad\tpshocks\mui\0804\tpshocks.dll
        IBM Corp.
        IBM Active Protection System
        .text,.rdata,.data,.rsrc,.reloc,


    00A20000[0000F000]
      [ M] 244. c:\windows\system32\sensor.dll
        IBM Corporation
        IBM Active Protection System - Shock Sensor Module
        .text,.rdata,.data,.rsrc,.reloc,


    00BA0000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    00CF0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 00000818(2072) TPHKMGR.exe
    00400000[00019000]
      [AM] 126. c:\program files\thinkpad\pkgmgr\hotkey\tphkmgr.exe
        .text,.rdata,.data,
        文件名和"taskmgr.exe"类似;


    72D10000[00008000]
      [ M] 207. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,

    10000000[00006000]
      [ M] 245. c:\program files\thinkpad\pkgmgr\hotkey_2\tphk_2k.dll
        .text,.rdata,.data,.reloc,


    00DF0000[00012000]
      [ M] 246. c:\windows\system32\oemdspif.dll
        ATI Technologies, Inc.
        ATI Driver Interface DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00E20000[00037000]
      [ M] 247. c:\program files\thinkpad\pkgmgr\hotkey\tpfnf7.dll
        .text,.rdata,.data,.rsrc,.reloc,


    01160000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    012B0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 00000864(2148) svchost.exe
    0A000000[00012000]
      [ M] 159. c:\windows\system32\entapi.dll
        McAfee, Inc
        EntAPI
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000878(2168) TPHDEXLG.EXE
    00400000[0001E000]
      [AM] 18. c:\windows\system32\tphdexlg.exe
        IBM Corporation
        IBM Active Protection System - HDD Logger Module
        .text,.rdata,.data,.rsrc,



  + 000008b8(2232) EzEjMnAp.Exe
    00400000[00039000]
      [AM] 129. c:\program files\thinkpad\utilities\ezejmnap.exe
        IBM Corp.
        IBM ThinkPad EasyEject Support Application
        .text,.rdata,.data,.rsrc,


    10000000[00009000]
      [ M] 248. c:\program files\thinkpad\utilities\us\ezmapres.dll
        .text,.rdata,.data,.rsrc,.reloc,


    00E50000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    00FA0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 000008dc(2268) SMax4PNP.exe
    00400000[00153000]
      [AM] 130. c:\program files\analog devices\soundmax\smax4pnp.exe
        Analog Devices, Inc.
        SMax4PNP MFC Application
        .text,.rdata,.data,.rsrc,


    10000000[0004C000]
      [ M] 249. c:\program files\analog devices\soundmax\smwdmif.dll
        Analog Devices, Inc.
        SMWDM Interface DLL
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    5FD00000[00009000]
      [ M] 214. c:\windows\system32\mfc42loc.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00D30000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    72D10000[00008000]
      [ M] 207. c:\windows\system32\msacm32.drv
        Microsoft Corporation
        Microsoft Sound Mapper
        .text,.data,.rsrc,.reloc,


    01530000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 000008e4(2276) TpKmpSVC.exe
    00400000[0000A000]
      [AM] 19. c:\windows\system32\tpkmpsvc.exe
        .text,.rdata,.data,



  + 000008f4(2292) ibmprc.exe
    00400000[00018000]
      [AM] 132. c:\ibmtools\utils\ibmprc.exe
        IBM Corp.
        ibmprc Application
        .text,.rdata,.data,.rsrc,


    10000000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    00AA0000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 000008fc(2300) QCWLICON.EXE
    00400000[00017000]
      [AM] 133. c:\program files\thinkpad\connectutilities\qcwlicon.exe
        IBM Corp.
        IBM Access Connections - Wireless Status Icon.
        .text,.rdata,.data,.idata,.rsrc,.reloc,


    20000000[0011B000]
      [ M] 250. c:\program files\thinkpad\connectutilities\qcon.dll
        IBM Corp.
        IBM Access Connections - Core DLL.
        .text,.rdata,.data,.QconDll,QCWLStat,QCTrayIF,QCState,.rsrc,.reloc,


    10000000[0002B000]
      [ M] 251. c:\program files\thinkpad\connectutilities\merlinc201.dll
        Novatel Wireless Inc.
        MerlinC201
        .text,.rdata,.data,.shared,_TEXT_HA,.rsrc,.reloc,


    5FD00000[00009000]
      [ M] 214. c:\windows\system32\mfc42loc.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00A50000[00006000]
      [ M] 252. c:\program files\thinkpad\connectutilities\res\sc\iconres.dll
        .text,.rdata,.data,.rsrc,.reloc,


    01220000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    012A0000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000924(2340) rundll32.exe
    10000000[00024000]
      [ M] 253. c:\program files\thinkpad\utilities\pwrmgrtr.dll
        IBM Corp.
        IBM ThinkPad Power Manager Background Monitor and Tray Battery Gauge
        .text,.rdata,.data,.pm_shar,.rsrc,.reloc,


    5FD00000[00009000]
      [ M] 214. c:\windows\system32\mfc42loc.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    00A90000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    00D20000[00008000]
      [ M] 254. c:\program files\thinkpad\utilities\us\pwrmgrrt.dll
        .text,.rdata,.data,.rsrc,.reloc,


    00D30000[00012000]
      [ M] 255. c:\program files\thinkpad\utilities\pwrmgrif.dll
        .text,.rdata,.data,.sh_data,.reloc,


    00E60000[0000F000]
      [ M] 244. c:\windows\system32\sensor.dll
        IBM Corporation
        IBM Active Protection System - Shock Sensor Module
        .text,.rdata,.data,.rsrc,.reloc,


    00E80000[00012000]
      [ M] 246. c:\windows\system32\oemdspif.dll
        ATI Technologies, Inc.
        ATI Driver Interface DLL
        .text,.rdata,.data,.rsrc,.reloc,


    00F50000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 00000970(2416) runiep.exe
    00400000[00013000]
      [AM] 142. f:\ufo771至尊星\新建文件夹\runiep.exe
        Beijing Rising Technology Co., Ltd.
        Rising AntiSpyware Monitor
        .text,.rdata,.data,.rsrc,


    5FD00000[00009000]
      [ M] 214. c:\windows\system32\mfc42loc.dll
        Microsoft Corporation
        MFC Language Specific Resources
        .rsrc,.reloc,


    10000000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,


    00C70000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,



  + 000009d8(2520) VM305_STI.EXE
    00400000[00013000]
      [AM] 136. c:\windows\vm305_sti.exe
        Vimicro
        Vimicro
        .text,.rdata,.data,.rsrc,


    10000000[0001B000]
      [ M] 157. f:\ufo771至尊星\新建文件夹\ieprot.dll
        Beijing Rising Technology Co., Ltd.
        IE Protector
        .text,.rdata,.data,.rsrc,.reloc,


    01070000[00029000]
      [ M] 156. c:\program files\tencent\ssplus\splus.dll
        TENCENT
        .text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,



  + 000009f0(2544) UpdaterUI.exe
    00400000[00021000]
      [AM] 137. c:\program files\network associates\common framework\updaterui.exe
        McAfee, Inc.
        Common User Interface
        .text,.rdata,.data,.rsrc,


    642C0000[00007000]
      [ M] 160. c:\program files\network associates\common framework\nailog.dll
        McAfee, Inc.
        Debug Logging
        .text,.rdata,.data,.rsrc,.reloc,


    7C340000[00056000]
      [ M] 161. c:\program files\network associates\common framework\msvcr71.dll
        Microsoft Corporation
        Microsoft? C Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    64250000[00032000]
      [ M] 164. c:\program files\network associates\common framework\nacmnlib71.dll
        McAfee, Inc.
        Common Library
        .text,.rdata,.data,.rsrc,.reloc,


    64360000[00036000]
      [ M] 162. c:\program files\network associates\common framework\naxml71.dll
        .text,.rdata,.data,.reloc,


    7C3A0000[0007B000]
      [ M] 163. c:\program files\network associates\common framework\msvcp71.dll
        Microsoft Corporation
        Microsoft? C++ Runtime Library
        .text,.rdata,.data,.rsrc,.reloc,


    640C0000[0000A000]
      [ M] 173. c:\program files\network associates\common framework\cmalib.dll
        McAfee, Inc.
        CMA Library
        .text,.rdata,.data,.rsrc,.reloc,