+ 正在运行的进程
+ 00000184(388) conime.exe
25000000[00013000]
[ M] 156. c:\windows\system32\addrgjhelp.dll
00AF0000[00017000]
[ M] 157. c:\windows\system32\addrmshelp.dll
00B60000[0001B000]
[ M] 158. c:\windows\system32\addrmhhelp.dll
00BC0000[00013000]
[ M] 159. c:\program files\netmeeting\ravdh3mon.dat
00C20000[00018000]
[ M] 160. c:\program files\netmeeting\ravdhmon.dat
00AB0000[0001B000]
[ M] 161. c:\windows\system32\yflschmsyek.dll
+ 000001b4(436) smss.exe
+ 000001ec(492) csrss.exe
+ 00000204(516) winlogon.exe
004D0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
72C80000[00008000]
[ M] 162. c:\windows\system32\msacm32.drv
+ 00000234(564) services.exe
003C0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
+ 00000240(576) lsass.exe
003C0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
+ 000002dc(732) svchost.exe
003C0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
+ 00000330(816) svchost.exe
003C0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
00900000[00006000]
[ M] 163. c:\windows\system32\sqmapi32.dll
+ 0000038c(908) svchost.exe
003C0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
+ 000003e4(996) svchost.exe
003C0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
+ 00000510(1296) Explorer.EXE
003D0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
10000000[0001B000]
[AM] 137. c:\windows\system32\ravext.dll
00F70000[0000C000]
[AM] 143. c:\windows\system32\avzxdmn.dll
00F80000[0000C000]
[AM] 140. c:\windows\system32\kafyezy.dll
00F90000[0000C000]
[AM] 146. c:\windows\system32\ratbfpi.dll
00FF0000[0000C000]
[AM] 145. c:\windows\system32\kapjbzy.dll
011C0000[0000C000]
[AM] 144. c:\windows\system32\kaqhfzy.dll
01210000[00008000]
[AM] 138. c:\windows\system32\kvmxema0.dll
01270000[0000C000]
[AM] 141. c:\windows\system32\rsmydpm.dll
013A0000[0000C000]
[AM] 142. c:\windows\system32\rarjbpi.dll
01470000[0000B000]
[ M] 164. c:\windows\system32\ftbqtk59.dll
01AA0000[0000F000]
[AM] 129. c:\program files\media player classic\codecs\mmfinfo.dll
01AB0000[0000B000]
[ M] 165. c:\program files\media player classic\codecs\mkunicode.dll
72C80000[00008000]
[ M] 162. c:\windows\system32\msacm32.drv
25000000[00018000]
[ M] 160. c:\program files\netmeeting\ravdhmon.dat
22E50000[0000D000]
[ M] 166. c:\program files\thunder network\thunder\components\resworker\dsbho_00.dll
22E20000[0000D000]
[ M] 167. c:\program files\thunder network\thunder\components\resworker\dataprocessor_00.dll
23700000[0001A000]
[ M] 168. c:\program files\rising\rav\rscommon.dll
016B0000[00013000]
[ M] 159. c:\program files\netmeeting\ravdh3mon.dat
016A0000[0000C000]
[AM] 148. c:\windows\system32\kawdbzy.dll
01C20000[0000C000]
[AM] 147. c:\windows\system32\avwlbmn.dll
03000000[00007000]
[ M] 169. c:\documents and settings\administrator\local settings\temp\raqjbpi.dll
02FE0000[00006000]
[ M] 170. c:\windows\system32\qdshm.dll
030B0000[0001B000]
[ M] 158. c:\windows\system32\addrmhhelp.dll
031D0000[00017000]
[ M] 157. c:\windows\system32\addrmshelp.dll
03440000[00013000]
[ M] 156. c:\windows\system32\addrgjhelp.dll
00F00000[0001B000]
[ M] 161. c:\windows\system32\yflschmsyek.dll
00DD0000[00006000]
[ M] 163. c:\windows\system32\sqmapi32.dll
018E0000[00013000]
[ M] 171. c:\windows\system32\wlatl.dll
02190000[00011000]
[ M] 172. c:\windows\system32\cqatl.dll
00CC0000[0000C000]
[AM] 149. c:\windows\system32\kvdxcma.dll
00DE0000[00029000]
[AM] 126. c:\program files\thunder network\thunder\comdlls\xunleibho_now.dll
034A0000[00019000]
[ M] 173. c:\program files\rising\rav\ravscrch.dll
03710000[0002B000]
[AM] 131. c:\program files\winrar\rarext.dll
+ 000005dc(1500) svchost.exe
003C0000[0000C000]
[AM] 142. c:\windows\system32\rarjbpi.dll
+ 00000624(1572) wdfmgr.exe
01000000[0000C000]
[AM] 5. c:\windows\system32\wdfmgr.exe
00560000[0000C000]
[AM] 142. c:\windows\system32\rarjbpi.dll
+ 00000714(1812) ctfmon.exe
003D0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
25000000[00013000]
[ M] 156. c:\windows\system32\addrgjhelp.dll
00AE0000[00017000]
[ M] 157. c:\windows\system32\addrmshelp.dll
00B40000[0001B000]
[ M] 158. c:\windows\system32\addrmhhelp.dll
00BA0000[00013000]
[ M] 159. c:\program files\netmeeting\ravdh3mon.dat
00AA0000[00018000]
[ M] 160. c:\program files\netmeeting\ravdhmon.dat
00B00000[0001B000]
[ M] 161. c:\windows\system32\yflschmsyek.dll
+ 00000734(1844) alg.exe
+ 00000c9c(3228) Ras.exe
00400000[00160000]
[ M] 174. c:\program files\rising\kakatoolbar\ras.exe
10000000[00013000]
[ M] 175. c:\program files\rising\kakatoolbar\topsoft.dll
7C140000[00103000]
[ M] 176. c:\program files\rising\kakatoolbar\mfc71.dll
7C340000[00056000]
[ M] 177. c:\program files\rising\kakatoolbar\msvcr71.dll
7C3A0000[0007B000]
[ M] 178. c:\program files\rising\kakatoolbar\msvcp71.dll
003D0000[0000C000]
[AM] 143. c:\windows\system32\avzxdmn.dll
25000000[00011000]
[ M] 172. c:\windows\system32\cqatl.dll
00D50000[00013000]
[ M] 171. c:\windows\system32\wlatl.dll
010E0000[00013000]
[ M] 156. c:\windows\system32\addrgjhelp.dll
00EE0000[00017000]
[ M] 157. c:\windows\system32\addrmshelp.dll
01000000[0001B000]
[ M] 158. c:\windows\system32\addrmhhelp.dll
00F00000[00013000]
[ M] 159. c:\program files\netmeeting\ravdh3mon.dat
00F20000[00018000]
[ M] 160. c:\program files\netmeeting\ravdhmon.dat
00F90000[0001B000]
[ M] 161. c:\windows\system32\yflschmsyek.dll
01020000[000BD000]
[ M] 179. c:\program files\rising\kakatoolbar\rasgui.dll
01940000[0000C000]
[AM] 149. c:\windows\system32\kvdxcma.dll
01A50000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
01B60000[0000C000]
[AM] 146. c:\windows\system32\ratbfpi.dll
01E90000[00006000]
[ M] 163. c:\windows\system32\sqmapi32.dll
033D0000[00019000]
[ M] 173. c:\program files\rising\rav\ravscrch.dll
72C80000[00008000]
[ M] 162. c:\windows\system32\msacm32.drv
01840000[0000C000]
[AM] 147. c:\windows\system32\avwlbmn.dll
03480000[0000C000]
[AM] 148. c:\windows\system32\kawdbzy.dll
034A0000[0000C000]
[AM] 142. c:\windows\system32\rarjbpi.dll
034B0000[0000C000]
[AM] 141. c:\windows\system32\rsmydpm.dll
034C0000[00008000]
[AM] 138. c:\windows\system32\kvmxema0.dll
047A0000[0000C000]
[AM] 144. c:\windows\system32\kaqhfzy.dll
048B0000[0000C000]
[AM] 145. c:\windows\system32\kapjbzy.dll
049C0000[0000C000]
[AM] 140. c:\windows\system32\kafyezy.dll
+ 00000d3c(3388) logogo.exe
00400000[00020000]
[AM] 152. c:\windows\system\logogo.exe
003C0000[0000C000]
[AM] 139. c:\windows\system32\rsztcpm.dll
00A40000[0001B000]
[ M] 161. c:\windows\system32\yflschmsyek.dll
