这个程序老是连接网络(c:\windows\system32\rxpmon.exe)



瑞星卡卡电脑诊断日志 v1.30 (2000-11-24 21:3:0)  北京瑞星科技股份有限公司

注释:    [A]表示该文件存在自启动关联;
    [M]表示该文件在内存中;

+ 注册表自运行项目
  + 系统服务
    + HKLM\System\CurrentControlSet\Services
      RfwProxySrv
        [AM] 1. d:\新建文件夹\rising\rfw\rfwproxy.exe


      RfwService
        [AM] 2. d:\新建文件夹\rising\rfw\rfwsrv.exe


      RsCCenter
        [AM] 3. d:\新建文件夹\新建文件夹\rising\rav\ccenter.exe


      RsRavMon
        [AM] 4. d:\新建文件夹\新建文件夹\rising\rav\ravmond.exe


      UMWdf
        [A ] 5. c:\windows\system32\wdfmgr.exe




  + 内核驱动
    + HKLM\System\CurrentControlSet\Services
      A320RAID
        [A ] 6. c:\windows\system32\drivers\a320raid.sys


      ADPU320
        [A ] 7. c:\windows\system32\drivers\adpu320.sys


      ahci8086
        [A ] 8. c:\windows\system32\drivers\ahci8086.sys


      AmdK8
        [A ] 9. c:\windows\system32\drivers\amdk8.sys


      CSB6IDE
        [A ] 10. c:\windows\system32\drivers\csb6ide.sys


      FASTTRAK
        [A ] 11. c:\windows\system32\drivers\fasttrak.sys


      FETNDISB
        [A ] 12. c:\windows\system32\drivers\fetnd5b.sys


      FTSATA2
        [A ] 13. c:\windows\system32\drivers\ftsata2.sys


      HookCont
        [A ] 14. c:\windows\system32\drivers\hookcont.sys


      HookNtos
        [A ] 15. c:\windows\system32\drivers\hookntos.sys


      HookReg
        [A ] 16. c:\windows\system32\drivers\hookreg.sys


      HookSys
        [A ] 17. c:\windows\system32\drivers\hooksys.sys


      HookUrl
        [A ] 18. d:\新建文件夹\rising\rfw\hookurl.sys


      IASTOR
        [A ] 19. c:\windows\system32\drivers\iastor.sys


      ITERAID
        [A ] 20. c:\windows\system32\drivers\iteraid.sys


      JRAID
        [A ] 21. c:\windows\system32\drivers\jraid.sys


      M5228
        [A ] 22. c:\windows\system32\drivers\m5228.sys


      M5281
        [A ] 23. c:\windows\system32\drivers\m5281.sys


      M5289
        [A ] 24. c:\windows\system32\drivers\m5289.sys


      New0
        [A ] 25. c:\windows\system32\new.sys


      npkcrypt
        [A ] 26. c:\program files\tencent\qq\npkcrypt.sys


      NVATABUS
        [A ] 27. c:\windows\system32\drivers\nvatabus.sys


      nvmpu401
        [A ] 28. c:\windows\system32\drivers\nvmpu401.sys


      NVRAID
        [A ] 29. c:\windows\system32\drivers\nvraid.sys


      RfwBase
        [A ] 30. c:\windows\system32\drivers\rfwbase.sys


      RsAntiSpyware
        [A ] 31. c:\windows\system32\drivers\rsboot.sys


      RsFwDrv
        [A ] 32. d:\新建文件夹\rising\rfw\rsfwdrv.sys


      RsNTGDI
        [A ] 33. c:\windows\system32\drivers\rsntgdi.sys


      Secdrv
        [A ] 34. c:\windows\system32\drivers\secdrv.sys


      SI3112R
        [A ] 35. c:\windows\system32\drivers\si3112r.sys


      SI3114R
        [A ] 36. c:\windows\system32\drivers\si3114r.sys


      SI3114R5
        [A ] 37. c:\windows\system32\drivers\si3114r5.sys


      SI3124
        [A ] 38. c:\windows\system32\drivers\si3124.sys


      SI3124R
        [A ] 39. c:\windows\system32\drivers\si3124r.sys


      SI3124R5
        [A ] 40. c:\windows\system32\drivers\si3124r5.sys


      SI3132
        [A ] 41. c:\windows\system32\drivers\si3132.sys


      SI3132R5
        [A ] 42. c:\windows\system32\drivers\si3132r5.sys


      SISRAID2
        [A ] 43. c:\windows\system32\drivers\sisraid2.sys


      SISRAID4
        [A ] 44. c:\windows\system32\drivers\sisraid4.sys


      SYMMPI
        [A ] 45. c:\windows\system32\drivers\symmpi.sys


      ULSATA
        [A ] 46. c:\windows\system32\drivers\ulsata.sys


      ULSATA2
        [A ] 47. c:\windows\system32\drivers\ulsata2.sys


      VIAMRAID
        [A ] 48. c:\windows\system32\drivers\viamraid.sys


      vmscsi
        [A ] 49. c:\windows\system32\drivers\vmscsi.sys




  + IE浏览器加载模块
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [A ] 50. c:\windows\system32\kakatool.dll



    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {01443AEC-0FD1-40fd-9C87-E93D1494C233}
        [AM] 51. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll


      {889D2FEB-5411-4565-8998-1DD2C5261283}
        [AM] 52. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll




  + 资源管理器加载模块
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      RISING
        [A ] 53. c:\windows\system32\ravext.dll




  + 用户登陆自运行项目
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      runeip
        [AM] 54. d:\新建文件夹 (2)\runiep.exe


      TkBellExe
        [AM] 55. c:\program files\common files\real\update_ob\realsched.exe


      RavTask
        [AM] 56. d:\新建文件夹\新建文件夹\rising\rav\ravtask.exe


      RfwMain
        [AM] 57. d:\新建文件夹\rising\rfw\rfwmain.exe




  + 开机执行
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 58. c:\windows\system32\bsmain.exe

        [A ] 59. c:\windows\system32\kknative.exe





+ 其他自启动项目
  + C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
    腾讯QQ.lnk
      [AM] 60. f:\qq\qq.exe


[用户系统信息]Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)

正在运行的进程
  + 000001b8(440) smss.exe

  + 00000204(516) csrss.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    03540000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 0000021c(540) winlogon.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    01450000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll


    72C80000[00008000]
      [ M] 63. c:\windows\system32\msacm32.drv



  + 00000248(584) services.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    00D20000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 00000254(596) lsass.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    00DA0000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 000002d8(728) svchost.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    008E0000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 00000320(800) svchost.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    009B0000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 00000348(840) CCenter.exe
    00400000[00028000]
      [AM] 3. d:\新建文件夹\新建文件夹\rising\rav\ccenter.exe


    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    00B70000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 00000358(856) svchost.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    01110000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 0000039c(924) svchost.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    007A0000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 000003e4(996) svchost.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    00820000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 000003f4(1012) Ravmond.exe
    00400000[0006C000]
      [AM] 4. d:\新建文件夹\新建文件夹\rising\rav\ravmond.exe


    10000000[00042000]
      [ M] 64. d:\新建文件夹\新建文件夹\rising\rav\bwlist.dll


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    00B20000[0000E000]
      [ M] 68. d:\新建文件夹\新建文件夹\rising\rav\rsappmgr.dll


    00B40000[00030000]
      [ M] 69. d:\新建文件夹\新建文件夹\rising\rav\cfgdll.dll


    00EE0000[00066000]
      [ M] 70. d:\新建文件夹\新建文件夹\rising\rav\rslog.dll


    00B80000[0001F000]
      [ M] 71. d:\新建文件夹\新建文件夹\rising\rav\proccom.dll


    00F50000[00024000]
      [ M] 72. d:\新建文件夹\新建文件夹\rising\rav\rscommx2.dll


    00F90000[00075000]
      [ M] 73. d:\新建文件夹\新建文件夹\rising\rav\monrule.dll


    01020000[00013000]
      [ M] 74. d:\新建文件夹\新建文件夹\rising\rav\hooksys.dll


    01180000[00013000]
      [ M] 75. d:\新建文件夹\新建文件夹\rising\rav\hookreg.dll


    011E0000[00013000]
      [ M] 76. d:\新建文件夹\新建文件夹\rising\rav\hookntos.dll


    01240000[0001B000]
      [ M] 77. d:\新建文件夹\新建文件夹\rising\rav\rswalmon.dll


    01380000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    014C0000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll


    023E0000[00020000]
      [ M] 78. d:\新建文件夹\新建文件夹\rising\rav\rsstore.dll


    02610000[00013000]
      [ M] 79. d:\新建文件夹\新建文件夹\rising\rav\hookcont.dll


    02640000[00027000]
      [ M] 80. d:\新建文件夹\新建文件夹\rising\rav\fakescan.dll


    02680000[00021000]
      [ M] 81. d:\新建文件夹\新建文件夹\rising\rav\scanner.dll


    026B0000[00028000]
      [ M] 82. d:\新建文件夹\新建文件夹\rising\rav\recomp.dll


    026F0000[0002E000]
      [ M] 83. d:\新建文件夹\新建文件夹\rising\rav\refs.dll


    02730000[0002C000]
      [ M] 84. d:\新建文件夹\新建文件夹\rising\rav\viruslib.dll


    02870000[00027000]
      [ M] 85. d:\新建文件夹\新建文件夹\rising\rav\relibldr.dll


    02F60000[0000D000]
      [ M] 86. d:\新建文件夹\新建文件夹\rising\rav\hookweb.dll


    03BB0000[0001A000]
      [ M] 87. d:\新建文件夹\新建文件夹\rising\rav\ffr.dll


    03DE0000[00020000]
      [ M] 88. d:\新建文件夹\新建文件夹\rising\rav\nvfile.dll


    13AB0000[00044000]
      [ M] 89. d:\新建文件夹\新建文件夹\rising\rav\scanexec.dll


    05080000[002DC000]
      [ M] 90. d:\新建文件夹\新建文件夹\rising\rav\unexe.dll


    05360000[00046000]
      [ M] 91. d:\新建文件夹\新建文件夹\rising\rav\scanex.dll


    02D60000[00026000]
      [ M] 92. d:\新建文件夹\新建文件夹\rising\rav\pearc.dll


    02E10000[00022000]
      [ M] 93. d:\新建文件夹\新建文件夹\rising\rav\scansct.dll



  + 0000042c(1068) alg.exe

  + 00000438(1080) rfwsrv.exe
    00400000[00035000]
      [AM] 2. d:\新建文件夹\rising\rfw\rfwsrv.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    10000000[0001F000]
      [ M] 94. d:\新建文件夹\rising\rfw\proccom.dll


    00770000[00024000]
      [ M] 95. d:\新建文件夹\rising\rfw\rscommx2.dll


    009B0000[0000E000]
      [ M] 96. d:\新建文件夹\rising\rfw\rsappmgr.dll


    009D0000[00030000]
      [ M] 97. d:\新建文件夹\rising\rfw\cfgdll.dll


    00AE0000[0000F000]
      [ M] 98. d:\新建文件夹\rising\rfw\rfwrule.dll


    00AF0000[0000C000]
      [ M] 99. d:\新建文件夹\rising\rfw\rfwlog.dll


    00B00000[00018000]
      [ M] 100. d:\新建文件夹\rising\rfw\rfwdrv.dll


    731B0000[0000A000]
      [ M] 101. d:\新建文件夹\rising\rfw\psapi.dll


    00C20000[0000E000]
      [ M] 102. d:\新建文件夹\rising\rfw\ijt_ctrl.dll


    00E60000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    00FA0000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll


    00FC0000[00016000]
      [ M] 103. d:\新建文件夹\rising\rfw\unvdet.dll


    01B10000[00013000]
      [ M] 104. d:\新建文件夹\rising\rfw\mports.dll



  + 00000468(1128) rfwproxy.exe
    00400000[00234000]
      [AM] 1. d:\新建文件夹\rising\rfw\rfwproxy.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    731B0000[0000A000]
      [ M] 101. d:\新建文件夹\rising\rfw\psapi.dll


    10000000[0000F000]
      [ M] 98. d:\新建文件夹\rising\rfw\rfwrule.dll


    01090000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    011D0000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll


    00F90000[00016000]
      [ M] 105. d:\新建文件夹\rising\rfw\monmid.dll



  + 000004a0(1184) runiep.exe
    00400000[00016000]
      [AM] 54. d:\新建文件夹 (2)\runiep.exe


    00C60000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll



  + 000004a8(1192) realsched.exe
    00400000[0002F000]
      [AM] 55. c:\program files\common files\real\update_ob\realsched.exe


    10000000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll



  + 00000534(1332) RavTask.exe
    00400000[00034000]
      [AM] 56. d:\新建文件夹\新建文件夹\rising\rav\ravtask.exe


    10000000[0001F000]
      [ M] 71. d:\新建文件夹\新建文件夹\rising\rav\proccom.dll


    00A30000[00024000]
      [ M] 72. d:\新建文件夹\新建文件夹\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 107. d:\新建文件夹\新建文件夹\rising\rav\rscommon.dll


    00C90000[0000E000]
      [ M] 68. d:\新建文件夹\新建文件夹\rising\rav\rsappmgr.dll


    08CB0000[00030000]
      [ M] 69. d:\新建文件夹\新建文件夹\rising\rav\cfgdll.dll


    08FE0000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll



  + 00000554(1364) Explorer.EXE
    10000000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll


    72C80000[00008000]
      [ M] 63. c:\windows\system32\msacm32.drv



  + 00000578(1400) ctfmon.exe
    10000000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll



  + 000005c0(1472) rfwstub.exe
    00400000[00017000]
      [ M] 108. d:\新建文件夹\rising\rfw\rfwstub.exe


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    23700000[00028000]
      [ M] 109. d:\新建文件夹\rising\rfw\rscommon.dll



  + 000006c4(1732) RavStub.exe
    00400000[00021000]
      [ M] 110. d:\新建文件夹\新建文件夹\rising\rav\ravstub.exe


    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    00650000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll


    00680000[0001F000]
      [ M] 71. d:\新建文件夹\新建文件夹\rising\rav\proccom.dll


    007C0000[00024000]
      [ M] 72. d:\新建文件夹\新建文件夹\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 107. d:\新建文件夹\新建文件夹\rising\rav\rscommon.dll



  + 000006f0(1776) spoolsv.exe
    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    00A60000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 00000724(1828) Ravmon.exe
    00400000[00057000]
      [ M] 111. d:\新建文件夹\新建文件夹\rising\rav\ravmon.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    10000000[0001F000]
      [ M] 71. d:\新建文件夹\新建文件夹\rising\rav\proccom.dll


    00B10000[00024000]
      [ M] 72. d:\新建文件夹\新建文件夹\rising\rav\rscommx2.dll


    23700000[00028000]
      [ M] 107. d:\新建文件夹\新建文件夹\rising\rav\rscommon.dll

00D60000[00028000]
      [ M] 82. d:\新建文件夹\新建文件夹\rising\rav\recomp.dll


    00DA0000[0002E000]
      [ M] 83. d:\新建文件夹\新建文件夹\rising\rav\refs.dll


    00DE0000[0002C000]
      [ M] 84. d:\新建文件夹\新建文件夹\rising\rav\viruslib.dll


    00F20000[00027000]
      [ M] 85. d:\新建文件夹\新建文件夹\rising\rav\relibldr.dll


    00FA0000[0000E000]
      [ M] 68. d:\新建文件夹\新建文件夹\rising\rav\rsappmgr.dll


    00FC0000[00030000]
      [ M] 69. d:\新建文件夹\新建文件夹\rising\rav\cfgdll.dll


    01120000[00075000]
      [ M] 73. d:\新建文件夹\新建文件夹\rising\rav\monrule.dll


    23900000[00040000]
      [ M] 112. d:\新建文件夹\新建文件夹\rising\rav\pngdll.dll


    26600000[000B5000]
      [ M] 113. d:\新建文件夹\新建文件夹\rising\rav\rsguilib.dll


    23800000[00018000]
      [ M] 114. d:\新建文件夹\新建文件夹\rising\rav\rsxml.dll


    02B50000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll



  + 00000760(1888) stormliv.exe
    00400000[0006D000]
      [ M] 115. f:\新建文件夹 (10)\stormliv.exe


    75FF0000[00065000]
      [ M] 116. f:\新建文件夹 (10)\msvcp60.dll


    10000000[00016000]
      [ M] 61. d:\新建文件夹\rising\rfw\ijt_base.dll


    00870000[0000F000]
      [ M] 62. d:\新建文件夹\rising\rfw\olemon.dll



  + 00000768(1896) RfwMain.exe
    00400000[00091000]
      [AM] 57. d:\新建文件夹\rising\rfw\rfwmain.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    26600000[000B5000]
      [ M] 117. d:\新建文件夹\rising\rfw\rsguilib.dll


    10000000[0001F000]
      [ M] 94. d:\新建文件夹\rising\rfw\proccom.dll


    00B50000[00024000]
      [ M] 95. d:\新建文件夹\rising\rfw\rscommx2.dll


    00C90000[0000E000]
      [ M] 96. d:\新建文件夹\rising\rfw\rsappmgr.dll


    00CB0000[00030000]
      [ M] 97. d:\新建文件夹\rising\rfw\cfgdll.dll


    23700000[00028000]
      [ M] 109. d:\新建文件夹\rising\rfw\rscommon.dll


    00EF0000[00014000]
      [ M] 118. d:\新建文件夹\rising\rfw\rfwctrl.dll


    23800000[00018000]
      [ M] 119. d:\新建文件夹\rising\rfw\rsxml.dll


    23900000[00040000]
      [ M] 120. d:\新建文件夹\rising\rfw\pngdll.dll


    01020000[0000F000]
      [ M] 98. d:\新建文件夹\rising\rfw\rfwrule.dll


    02440000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll



  + 00000b64(2916) RfwCfg.exe
    00400000[0015A000]
      [ M] 121. d:\新建文件夹\rising\rfw\rfwcfg.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    26600000[000B5000]
      [ M] 117. d:\新建文件夹\rising\rfw\rsguilib.dll


    10000000[0001F000]
      [ M] 94. d:\新建文件夹\rising\rfw\proccom.dll


    00B10000[00024000]
      [ M] 95. d:\新建文件夹\rising\rfw\rscommx2.dll


    00C60000[0000E000]
      [ M] 96. d:\新建文件夹\rising\rfw\rsappmgr.dll


    00C80000[00030000]
      [ M] 97. d:\新建文件夹\rising\rfw\cfgdll.dll


    23700000[00028000]
      [ M] 109. d:\新建文件夹\rising\rfw\rscommon.dll


    00F60000[00014000]
      [ M] 118. d:\新建文件夹\rising\rfw\rfwctrl.dll


    00F80000[00008000]
      [ M] 122. d:\新建文件夹\rising\rfw\proxyctr.dll


    23800000[00018000]
      [ M] 119. d:\新建文件夹\rising\rfw\rsxml.dll


    23900000[00040000]
      [ M] 120. d:\新建文件夹\rising\rfw\pngdll.dll


    017B0000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll


    015B0000[0000F000]
      [ M] 98. d:\新建文件夹\rising\rfw\rfwrule.dll



  + 00000bb4(2996) Ras.exe
    00400000[00170000]
      [ M] 123. d:\新建文件夹 (2)\ras.exe


    780C0000[00061000]
      [ M] 124. d:\新建文件夹 (2)\msvcp60.dll


    10000000[00013000]
      [ M] 125. d:\新建文件夹 (2)\topsoft.dll


    7C140000[00103000]
      [ M] 126. d:\新建文件夹 (2)\mfc71.dll


    7C340000[00056000]
      [ M] 127. d:\新建文件夹 (2)\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 128. d:\新建文件夹 (2)\msvcp71.dll


    00C60000[0001F000]
      [ M] 71. d:\新建文件夹\新建文件夹\rising\rav\proccom.dll


    00E20000[00024000]
      [ M] 72. d:\新建文件夹\新建文件夹\rising\rav\rscommx2.dll


    00F70000[000BD000]
      [ M] 129. d:\新建文件夹 (2)\rasgui.dll


    00F40000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll



  + 00000d58(3416) Thunder5.exe
    00400000[001A0000]
      [ M] 130. c:\program files\thunder network\thunder\program\thunder5.exe


    21D70000[0002F000]
      [ M] 131. c:\program files\thunder network\thunder\program\taskmanager.dll


    21160000[003BA000]
      [ M] 132. c:\program files\thunder network\thunder\program\download_interface.dll


    218E0000[000CB000]
      [ M] 133. c:\program files\thunder network\thunder\program\stlport_vc646.dll


    21110000[0001A000]
      [ M] 134. c:\program files\thunder network\thunder\program\asyn_dns.dll


    21BC0000[0001E000]
      [ M] 135. c:\program files\thunder network\thunder\program\itargetad.dll


    21A90000[0000A000]
      [ M] 136. c:\program files\thunder network\thunder\program\bhostub.dll


    22020000[00013000]
      [ M] 137. c:\program files\thunder network\thunder\components\downandplay\downandplay.dll


    10000000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll


    30000000[002EE000]
      [ M] 138. c:\windows\system32\macromed\flash\flash9b.ocx


    72C80000[00008000]
      [ M] 63. c:\windows\system32\msacm32.drv


    22140000[00017000]
      [ M] 139. c:\program files\thunder network\thunder\components\inmedia\iembedshell.dll


    21E20000[0008B000]
      [ M] 140. c:\program files\thunder network\thunder\components\community\xlcommunity.dll


    22380000[00079000]
      [ M] 141. c:\program files\thunder network\thunder\components\security\thundersafe.dll


    22320000[00021000]
      [ M] 142. c:\program files\thunder network\thunder\components\search\xlsearch.dll


    22210000[0001D000]
      [ M] 143. c:\program files\thunder network\thunder\components\p4pclient\p4pclient.dll


    21C10000[0003F000]
      [ M] 144. c:\program files\thunder network\thunder\program\liveupdate.dll

22060000[00010000]
      [ M] 145. c:\program files\thunder network\thunder\components\explorerhelper\explorerhelper.dll


    04090000[00020000]
      [ M] 146. c:\program files\thunder network\thunder\components\tips\tipsclient.dll


    22670000[00009000]
      [ M] 147. c:\program files\thunder network\thunder\components\vpshell\vpshell.dll


    22560000[0000B000]
      [ M] 148. c:\program files\thunder network\thunder\components\userexperience\userexperience.dll


    222A0000[00013000]
      [ M] 149. c:\program files\thunder network\thunder\components\resworker\dsxlcom.dll


    220B0000[0003F000]
      [ M] 150. c:\program files\thunder network\thunder\components\inmedia\iembed10.dll


    21CE0000[0003E000]
      [ M] 151. c:\program files\thunder network\thunder\program\registerdll.dll


    21CA0000[00011000]
      [ M] 152. c:\program files\thunder network\thunder\program\msvcirt.dll


    21DE0000[00019000]
      [ M] 153. c:\program files\thunder network\thunder\program\xlnet.dll


    21000000[00020000]
      [ M] 154. c:\program files\thunder network\thunder\plugins\bhoadv\bho_adv.dll


    060C0000[0000E000]
      [ M] 155. c:\program files\thunder network\thunder\components\downloadstat\downloadstat.dll


    062D0000[00028000]
      [ M] 156. d:\新建文件夹\新建文件夹\rising\rav\ravscrch.dll


    06510000[00069000]
      [ M] 157. c:\program files\thunder network\thunder\components\downandplay\dapplayer_now.dll


    06B60000[00019000]
      [ M] 158. c:\program files\thunder network\thunder\comdlls\thunderagent_now.dll


    06B90000[00019000]
      [AM] 52. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll


    06C00000[00022000]
      [AM] 51. c:\program files\thunder network\thunder\comdlls\tdatonce_now.dll


    22650000[00009000]
      [ M] 159. c:\program files\thunder network\thunder\components\vpshell\videopicture.dll


    22250000[0000C000]
      [ M] 160. c:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll


    222E0000[00011000]
      [ M] 161. c:\program files\thunder network\thunder\components\resworker\mediaworker.dll


    02800000[0000E000]
      [ M] 162. c:\program files\thunder network\thunder\components\tips\xlipc.dll



  + 00000d88(3464) QQ.exe
    00400000[001C3000]
      [AM] 60. f:\qq\qq.exe


    10000000[00288000]
      [ M] 163. f:\qq\qqbaseclassindll.dll


    005D0000[000C2000]
      [ M] 164. f:\qq\qqhelperdll.dll


    600A0000[0006B000]
      [ M] 165. f:\qq\basicctrldll.dll


    60A80000[000F2000]
      [ M] 166. f:\qq\mfc42.dll


    62410000[00005000]
      [ M] 167. f:\qq\riched32.dll


    623A0000[00068000]
      [ M] 168. f:\qq\riched20.dll


    61350000[0003A000]
      [ M] 169. f:\qq\qqapi.dll


    62560000[00007000]
      [ M] 170. f:\qq\timproxy.dll


    01410000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll


    60890000[0003D000]
      [ M] 171. f:\qq\loginctrl.dll


    608D0000[0009A000]
      [ M] 172. f:\qq\loginctrlres.dll


    61C00000[0058D000]
      [ M] 173. f:\qq\qqres.dll


    618C0000[000A0000]
      [ M] 174. f:\qq\qqmainframe.dll


    60400000[001A3000]
      [ M] 175. f:\qq\gdiplus.dll


    62590000[00020000]
      [ M] 176. f:\qq\unreadmsgmgr.dll


    02960000[00142000]
      [ M] 177. f:\qq\cqqapplication.dll


    603C0000[0003F000]
      [ M] 178. f:\qq\flashavatardll.dll


    60C20000[0005F000]
      [ M] 179. f:\qq\newskin.dll


    60A40000[00032000]
      [ M] 180. f:\qq\mailsummary.dll


    62250000[00026000]
      [ M] 181. f:\qq\qqspace.dll


    625D0000[00071000]
      [ M] 182. f:\qq\vbscript.dll


    61870000[00018000]
      [ M] 183. f:\qq\qqknowledgesearch.dll


    61720000[00071000]
      [ M] 184. f:\qq\qqgroupmng.dll


    61110000[00237000]
      [ M] 185. f:\qq\qqallinone.dll


    62440000[0002B000]
      [ M] 186. f:\qq\sccore.dll


    60130000[00034000]
      [ M] 187. f:\qq\cameradll.dll


    03A90000[0003E000]
      [ M] 188. f:\qq\qqsysmsgmng.dll


    625B0000[00017000]
      [ M] 189. f:\qq\userdefinedhead.dll


    61A90000[00122000]
      [ M] 190. f:\qq\qqplugin.dll


    61660000[0000E000]
      [ M] 191. f:\qq\qqconfigplugin.dll


    61390000[0003D000]
      [ M] 192. f:\qq\qqavatar.dll


    61670000[00055000]
      [ M] 193. f:\qq\qqcustomface.dll


    72C80000[00008000]
      [ M] 63. c:\windows\system32\msacm32.drv


    028C0000[0000B000]
      [ M] 194. f:\qqgame\gamepublic.dll


    028D0000[0002A000]
      [ M] 195. f:\qqgame\common\utility.dll


    02900000[00009000]
      [ M] 196. f:\qqgame\factory.dll


    02910000[0001D000]
      [ M] 197. f:\qqgame\logic\uistyle.dll


    03A70000[00009000]
      [ M] 198. f:\qqgame\prothand\qqprot.dll


    051D0000[0000D000]
      [ M] 199. f:\qqgame\socket\netmod.dll


    60D20000[00026000]
      [ M] 200. f:\qq\phoneapi.dll


    60370000[0000D000]
      [ M] 201. f:\qq\dialerallinone.dll


    05320000[00286000]
      [ M] 202. f:\qq\qqaddr.dll


    62380000[00016000]
      [ M] 203. f:\qq\qringmng.dll


    60970000[000A8000]
      [ M] 204. f:\qq\longconnection.dll


    60770000[0001A000]
      [ M] 205. f:\qq\imageole.dll


    61890000[00015000]
      [ M] 206. f:\qq\qqliveqmng.dll


    62190000[0002D000]
      [ M] 207. f:\qq\qqscenemng.dll


    61A60000[0002B000]
      [ M] 208. f:\qq\qqpet.dll


    60110000[0001F000]
      [ M] 209. f:\qq\bqqapplication.dll


    60170000[0004F000]
      [ M] 210. f:\qq\commercesmng.dll


    60CA0000[0000F000]
      [ M] 211. f:\qq\personaldesktop.dll


    606C0000[00024000]
      [ M] 212. f:\qq\groupconnection.dll


    01220000[0002B000]
      [ M] 213. f:\qq\addrsearch.dll


    01010000[00043000]
      [ M] 214. f:\qq\qqdoctor\tsfscan.dat



  + 00000da8(3496) TIMPlatform.exe
    00400000[00013000]
      [ M] 215. f:\qq\timplatform.exe


    10000000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll


    62560000[00007000]
      [ M] 170. f:\qq\timproxy.dll



  + 00000ee8(3816) iexplore.exe
    10000000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll


    026A0000[00028000]
      [ M] 156. d:\新建文件夹\新建文件夹\rising\rav\ravscrch.dll


    72C80000[00008000]
      [ M] 63. c:\windows\system32\msacm32.drv


    05BD0000[00035000]
      [ M] 216. c:\windows\system32\xpsp3res.dll


    30000000[002EE000]
      [ M] 138. c:\windows\system32\macromed\flash\flash9b.ocx



  + 00000f2c(3884) RsAgent.exe
    00400000[00044000]
      [ M] 217. d:\新建文件夹\新建文件夹\rising\rav\rsagent.exe


    7C140000[00103000]
      [ M] 65. c:\windows\system32\mfc71.dll


    7C340000[00056000]
      [ M] 66. c:\windows\system32\msvcr71.dll


    7C3A0000[0007B000]
      [ M] 67. c:\windows\system32\msvcp71.dll


    10000000[0001F000]
      [ M] 71. d:\新建文件夹\新建文件夹\rising\rav\proccom.dll


    00B90000[00024000]
      [ M] 72. d:\新建文件夹\新建文件夹\rising\rav\rscommx2.dll


    01000000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll



  + 00000f58(3928) AgentSvr.exe
    10000000[0001B000]
      [ M] 106. d:\新建文件夹 (2)\ieprot.dll


    72C80000[00008000]
      [ M] 63. c:\windows\system32\msacm32.drv

卡卡日志不想看、
  请发sreng日志

专杀～