瑞星卡卡安全论坛

首页 » 技术交流区 » 反病毒/反流氓软件论坛 » 自觉上传扫描日志
还是来晚了 - 2005-9-6 17:50:00
Logfile of HijackThis v1.99.1
Scan saved at 17:46:50, on 2005-9-6
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\KAVPFW\KAVPFW.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\WINNT\system32\internat.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\EnterNet.exe
D:\Program Files\腾讯QQ\QQ.exe
C:\Program Files\Symantec AntiVirus\VPC32.EXE
D:\Program Files\MYIE2\MyIE.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\tcl\LOCALS~1\Temp\Rar$EX04.605\HijackThis.exe
C:\WINNT\system32\ms-dos.pif
C:\WINNT\system32\ms-dos.pif

O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iDuba Personal FireWall] C:\KAVPFW\KAVPFW.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [MS-DOS Security Service] ms-dos.pif
O4 - HKLM\..\RunServices: [MS-DOS Security Service] ms-dos.pif
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [iDuba Personal FireWall] C:\KAVPFW\KAVPFW.EXE
O4 - HKCU\..\Run: [MS-DOS Security Service] ms-dos.pif
O4 - HKCU\..\RunServices: [MS-DOS Security Service] ms-dos.pif
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125917831940
O17 - HKLM\System\CCS\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{BE4F532D-502A-4679-8042-2E1AA76DC008}: NameServer = 210.101.224.68,210.101.226.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O17 - HKLM\System\CS2\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - Service: Antiy live update (Alive Auto-Update Service) - Unknown owner - C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

独孤豪侠 - 2005-9-6 17:51:00
C:\WINNT\system32\ms-dos.pif
C:\WINNT\system32\ms-dos.pif
这两个恐怕不是好东西吧
还是来晚了 - 2005-9-6 17:53:00
早知道这二马不对头，可是杀不到它们，四条脚比我两条脚快啊！
还是来晚了 - 2005-9-6 17:54:00
没有做任何操作也会出现DOS的小窗口界面，请教怎么样才能杀马解恨？
还是来晚了 - 2005-9-6 17:55:00
C:\WINNT\system32\MSTask.exe
这是好马吗？
还是来晚了 - 2005-9-6 17:57:00
我在进程里删不掉，注册表里删了，重启又出现，C:\WINNT\system32\里居然找不到这个文件...
还是来晚了 - 2005-9-6 18:13:00
该怎么办啊？教教我
还是来晚了 - 2005-9-7 9:24:00
能教教我吗？
还是来晚了 - 2005-9-7 9:36:00
能不能告诉我这个
C:\WINNT\system32\MSTask.exe
有没有问题啊！
花落花又开 - 2005-9-7 9:42:00
【回复“还是来晚了”的帖子】打开任务管理器，终止ms-dos.pif

运行hijackthis修复：
O4 - HKLM\..\Run: [MS-DOS Security Service] ms-dos.pif
O4 - HKLM\..\RunServices: [MS-DOS Security Service] ms-dos.pif
O4 - HKCU\..\Run: [MS-DOS Security Service] ms-dos.pif
O4 - HKCU\..\RunServices: [MS-DOS Security Service] ms-dos.pif
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

显示隐藏文件，删除文件：

ms-dos.pif（使用开始--搜索功能查找）




花落花又开 - 2005-9-7 9:44:00
引用:
【还是来晚了的贴子】能不能告诉我这个
C:\WINNT\system32\MSTask.exe
有没有问题啊！
...........................

mstask - mstask.exe - 进程信息
进程文件： mstask 或者 mstask.exe
进程名称： Windows Task Scheduler
 
进程名称： mstask.exe是Windows计划任务程序。它用于管理计划任务，包括备份和更新，定时运行。如果你删除该进程，计划任务将无法运行
-------------------

看路径是任务管理器的进程。元凶不是这个。
还是来晚了 - 2005-9-7 9:44:00
谢谢，我去试试！
还是来晚了 - 2005-9-7 9:48:00
我用搜索没有找到ms-dos.pif这个文件，需不需要进安全模式呢？
还是来晚了 - 2005-9-7 10:11:00
Logfile of HijackThis v1.99.1
Scan saved at 10:09:36, on 2005-9-7
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\KAVPFW\KAVPFW.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\WINNT\system32\internat.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\EnterNet.exe
D:\Program Files\MYIE2\MyIE.exe
F:\software\杀毒\首页绑架克星\HijackThis.exe

O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iDuba Personal FireWall] C:\KAVPFW\KAVPFW.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [iDuba Personal FireWall] C:\KAVPFW\KAVPFW.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125917831940
O17 - HKLM\System\CCS\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{BE4F532D-502A-4679-8042-2E1AA76DC008}: NameServer = 210.101.224.68,210.101.226.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O17 - HKLM\System\CS2\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - Service: Antiy live update (Alive Auto-Update Service) - Unknown owner - C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

谢谢
花落花又开 - 2005-9-7 10:12:00
【回复“还是来晚了”的帖子】log没问题了，请放心。
还是来晚了 - 2005-9-7 10:19:00
谢谢你
还是来晚了 - 2005-9-7 10:40:00
不行，又开始了，这次是MSTask跳出来了。

附件: 577643200597104055.jpg
还是来晚了 - 2005-9-7 10:44:00
两分钟跳出来一次

附件: 577643200597104415.jpg
还是来晚了 - 2005-9-7 10:46:00
Logfile of HijackThis v1.99.1
Scan saved at 10:44:53, on 2005-9-7
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\KAVPFW\KAVPFW.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~2\VPTray.exe
C:\WINNT\system32\internat.exe
C:\PROGRA~1\EFFICI~1\ENTERN~1\app\EnterNet.exe
D:\Program Files\MYIE2\MyIE.exe
D:\Program Files\腾讯QQ\QQ.exe
C:\WINNT\system32\ms-dos.pif
C:\WINNT\system32\ms-dos.pif
F:\software\杀毒\首页绑架克星\HijackThis.exe

O3 - Toolbar: 电台(&R) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [iDuba Personal FireWall] C:\KAVPFW\KAVPFW.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe
O4 - HKLM\..\Run: [MS-DOS Security Service] ms-dos.pif
O4 - HKLM\..\RunServices: [MS-DOS Security Service] ms-dos.pif
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [iDuba Personal FireWall] C:\KAVPFW\KAVPFW.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125917831940
O17 - HKLM\System\CCS\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{BE4F532D-502A-4679-8042-2E1AA76DC008}: NameServer = 210.101.224.68,210.101.226.68
O17 - HKLM\System\CS1\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O17 - HKLM\System\CS2\Services\Tcpip\..\{31C763DF-C168-4008-B8DA-ED5E90375775}: NameServer = 202.101.224.68,202.101.226.68
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - Service: Antiy live update (Alive Auto-Update Service) - Unknown owner - C:\Program Files\Antiy Labs\Alive\AliveCenter.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

什么情况 - 2005-9-7 10:51:00
终止进程
C:\WINNT\system32\ms-dos.pif
C:\WINNT\system32\ms-dos.pif

修复
O4 - HKLM\..\Run: [MS-DOS Security Service] ms-dos.pif
O4 - HKLM\..\RunServices: [MS-DOS Security Service] ms-dos.pif

关闭系统还原，在安全模式下，显示所有文件和隐藏的系统文件

删除ms-dos.pif
花落花又开 - 2005-9-7 10:51:00
【回复“还是来晚了”的帖子】

着msdos.pif进程用任务管理器结束不了，必须禁止进程创建。

请参考一下baohe版主关于此问题的解决贴。

http://forum.ikaka.com/topic.asp?board=28&artid=7114763
还是来晚了 - 2005-9-7 11:02:00
请问，“关闭系统还原”是什么意思？
ppdog - 2005-9-7 11:19:00
右键-〉我的电脑-〉属性-〉系统还原
还是来晚了 - 2005-9-7 11:36:00
右键-〉我的电脑-〉属性-〉
后面有五项：常规、网络标识、硬件、用户配置文件、高级，就是没有“系统还原”
还是来晚了 - 2005-9-7 12:08:00
是不是这些DOS都要删？

附件: 577643200597120856.jpg
还是来晚了 - 2005-9-7 12:39:00
谁能帮我看看吗？我不敢轻意删，而且用了ICESWORD禁止创建进程后，连网页都不能刷新，是这样的吗？
还是来晚了 - 2005-9-7 13:44:00
谁能告诉我是不是那九个DOS图标的文件（快捷方式）都要删啊？
还是来晚了 - 2005-9-8 9:27:00
怎么没人回答呢，我还想知道如果病毒清除了，以后该怎么防？
还是来晚了 - 2005-9-8 9:47:00
我用ICESWORD禁止了创建进程后，就不能进行任何操作了，大家用ICESWORD都是这样的吗？
baohe - 2005-9-9 10:53:00
【回复“还是来晚了”的帖子】
把24楼图中的任何一个ms-dos.pif打包,发到:baohelin@yahoo.com.cn

帮你看看怎么回事
12
查看完整版本: 自觉上传扫描日志
© 2000 - 2026 Rising Corp. Ltd.