+ Persistence persistence Module Intel Corporation C:\WINDOWS\SYSTEM32\IGFXPERS.EXE
+ RTHDCPL Realtek HD Audio Control Panel Realtek Semiconductor Corp. C:\WINDOWS\RTHDCPL.EXE
+ RavTRAY Rising tray framework Beijing Rising Information Technology Co., Ltd. C:\PROGRAM FILES\RISING\RAV\RSTRAY.EXE
+ Source About:Home
+ 显示摇曳 CPL 扩展 DESKPAN.DLL
+ Microsoft Agent Character Property Sheet Handler Microsoft Agent Property Sheet Handler Microsoft Corporation C:\WINDOWS\MSAGENT\AGENTPSH.DLL
+ QQCycloneHelper Class E:\QQ\QQDOWNLOAD\QQIEHELPER01.DLL
+ RsMgrSvc RsMgrSvc Application Beijing Rising Information Technology Co., Ltd. C:\PROGRAM FILES\RISING\RSD\RSMGRSVC.EXE
+ RsRavMon ravmond Beijing Rising Information Technology Co., Ltd. C:\PROGRAM FILES\RISING\RAV\RAVMOND.EXE
+ hooksys Hooksys.sys Beijing Rising Information Technology Co., Ltd. C:\WINDOWS\SYSTEM32\DRIVERS\HOOKSYS.SYS
+ HookTdi hooktdi.sys Beijing Rising Information Technology Co., Ltd. C:\WINDOWS\SYSTEM32\DRIVERS\HOOKTDI.SYS
+ HyperVM VM Monitor Beijing Rising Information Technology Co., Ltd. C:\WINDOWS\SYSTEM32\DRIVERS\HVM.SYS
+ ialm Intel Graphics Miniport Driver Intel Corporation C:\WINDOWS\SYSTEM32\DRIVERS\IALMNT5.SYS
+ autocheck autochk * Auto Check Utility Microsoft Corporation C:\WINDOWS\system32\AUTOCHK.EXE
+ bsmain Rising Antivirus 2011 Beijing Rising Information Technology Co., Ltd. C:\WINDOWS\system32\BSMAIN.EXE
+ .exe => exefile HKEY_CLASSES_ROOT\exefile\shell\open\command %1
+ .com => comfile HKEY_CLASSES_ROOT\comfile\shell\open\command %1
+ .bat => batfile HKEY_CLASSES_ROOT\batfile\shell\open\command %1
+ .cmd => cmdfile HKEY_CLASSES_ROOT\cmdfile\shell\open\command %1
+ .scr => scrfile HKEY_CLASSES_ROOT\scrfile\shell\open\command %1
+ .pif => piffile HKEY_CLASSES_ROOT\piffile\shell\open\command %1
+ .reg => regfile HKEY_CLASSES_ROOT\regfile\shell\open\command Microsoft Corporation C:\WINDOWS\REGEDIT.EXE
+ .doc => Word.Document.8 HKEY_CLASSES_ROOT\Word.Document.8\shell\open\command Microsoft Corporation C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE11\WINWORD.EXE