瑞星卡卡安全论坛
翱翔天地 - 2007-8-31 17:30:00
我现在每次一开机，就提示说找不到pptwei26.dll,这严重影响了我机子开机的时间。我到
regedit中的root中找到了他的项，可是却删不了，希望高手帮忙下。
[用户系统信息]Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)
绥江艾雅 - 2007-8-31 17:33:00
如果删除不了，肯定是有其它程序在锁定注册表，你得把这个程序找出来，最简单的就是用个ＳＲ扫个日志来看
翱翔天地 - 2007-8-31 17:39:00
瑞星卡卡电脑诊断日志 v1.30 (2007-8-31 17:21:57) 北京瑞星科技股份有限公司
注释:[A]表示该文件存在自启动关联;
[M]表示该文件在内存中;
+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
GemServ
[AM] 1. c:\program files\amd\cool'n'quiet\gemserv.exe
Advanced Micro Devices
PowerNow! Daemon Launcher Service
.text,.rdata,.data,.rsrc,
IDriverT
[A ] 2. c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe
Macrovision Corporation
IDriverT Module
.text,.rdata,.data,.rsrc,
NVSvc
[AM] 3. c:\windows\system32\nvsvc32.exe
NVIDIA Corporation
NVIDIA Driver Helper Service, Version 71.84
.text,.rdata,.data,.rsrc,
pr2ach4f
[A ] 4. c:\windows\system32\pr2ach4f.exe
SOFTSTAR
Chinese Paladin 4 CN Drivers Auto Removal
.text,.rdata,.data,.rsrc,
RfwProxySrv
[A ] 5. d:\rising\rfw\rfwproxy.exe
Beijing Rising Technology Co., Ltd.
Rising Personal Proxy Service
.text,.rdata,.data,.rsrc,
RfwService
[AM] 6. d:\rising\rfw\rfwsrv.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Service
.text,.rdata,.data,.rsrc,
RsCCenter
[AM] 7. d:\rising\rav\ccenter.exe
Beijing Rising Technology Co., Ltd.
CCenter
.text,.rdata,.data,.rsrc,
RsRavMon
[AM] 8. d:\rising\rav\ravmond.exe
Beijing Rising Technology Co., Ltd.
Rising Realtime Moniter
.text,.rdata,.data,.rsrc,
StarWindServiceAE
[A ] 9. d:\alcohol soft\alcohol 120\starwind\starwindserviceae.exe
Rocket Division Software
StarWind iSCSI Target (Alcohol Edition)
.text,.data,.rsrc,
WMPNetworkSvc
[A ] 10. c:\program files\windows media player\wmpnetwk.exe
Microsoft Corporation
Windows Media Player 网络共享服务
.text,.data,.rsrc,.reloc,
WudfSvc
[A ] 11. c:\windows\system32\wudfsvc.dll
Microsoft Corporation
Windows Driver Foundation - User-mode Driver Framework Service
.text,.data,.rsrc,.reloc,
+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
3noohov5s5
[A ] 12. c:\windows\system32\drivers\3noohov5s5.sys
.text,.data,INIT,.reloc,
ALCXSENS
[A ] 13. c:\windows\system32\drivers\alcxsens.sys
Sensaura
Sensaura WDM 3D Audio Driver
.text,page,init,.data,.CRT,init,INIT,.rsrc,.reloc,
ALCXWDM
[A ] 14. c:\windows\system32\drivers\alcxwdm.sys
Realtek Semiconductor Corp.
Realtek AC'97 Audio Driver (WDM)
.text,.rdata,.data,.CRT,.data1,PAGE,INIT,.rsrc,.reloc,
BaseTDI
[A ] 15. c:\windows\system32\drivers\basetdi.sys
Beijing Rising Technology Co., Ltd.
basetdi
.text,.rdata,.data,INIT,.rsrc,.reloc,
fcdabus
[A ] 16. c:\windows\system32\drivers\fcdabus.sys
FVXSCSI
[A ] 17. c:\windows\system32\drivers\fvxscsi.sys
gemwdm
[A ] 18. c:\windows\system32\drivers\gemwdm.sys
Advanced Micro Devices
PowerNow! Processor Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookCont
[A ] 19. c:\windows\system32\drivers\hookcont.sys
Beijing Rising Technology Co., Ltd
HookCont
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookNtos
[A ] 20. c:\windows\system32\drivers\hookntos.sys
Beijing Rising Technology Co., Ltd
HookNtos
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookReg
[A ] 21. c:\windows\system32\drivers\hookreg.sys
Beijing Rising Technology Co., Ltd
HookReg
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookSys
[A ] 22. c:\windows\system32\drivers\hooksys.sys
Beijing Rising Technology Co., Ltd
Hooksys
.text,.rdata,.data,INIT,.rsrc,.reloc,
HookUrl
[A ] 23. d:\rising\rfw\hookurl.sys
Beijing Rising Technology Co., Ltd.
HookUrl
.text,.rdata,.data,INIT,.rsrc,.reloc,
k7his
[A ] 24. c:\windows\system32\drivers\k7his.sys
.text,.data,INIT,.reloc,
mProcRs
[A ] 25. d:\rising\rfw\mprocrs.sys
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall mprocrs.sys
.text,.rdata,.data,INIT,.rsrc,.reloc,
npkcrypt
[A ] 26. c:\program files\tencent\qq\npkcrypt.sys
pe3ach4f
[A ] 27. c:\windows\system32\drivers\pe3ach4f.sys
SOFTSTAR
Chinese Paladin 4 CN Environment Driver
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
PNDIO
[A ] 28. c:\program files\lenovo\statechange\pndio.sys
pptwei26
[A ] 29. c:\windows\system32\drivers\pptwei26.sys
prodrv06
[A ] 30. c:\windows\system32\drivers\prodrv06.sys
Protection Technology
StarForce Protection Environment Driver
.text,.data,.rsrc,.reloc,
prohlp02
[A ] 31. c:\windows\system32\drivers\prohlp02.sys
Protection Technology
StarForce Protection Helper Driver
.text,.data,.rsrc,.reloc,
prosync1
[A ] 32. c:\windows\system32\drivers\prosync1.sys
Protection Technology
StarForce Protection Synchronization Driver
.text,.data,INIT,.rsrc,.reloc,
ps6ach4f
[A ] 33. c:\windows\system32\drivers\ps6ach4f.sys
SOFTSTAR
Chinese Paladin 4 CN Synchronization Driver
.text,.rdata,.data,.lisign2,PAGEI,PAGE,.xinit,.rsrc,.xreloc,
QKeyService
[A ] 34. c:\windows\system32\keycrypt.sys
Tencent Technology (Shenzhen) Company Limited
KeyCrypt Device Driver
.text,.rdata,.data,.CRT,.STL,INIT,.rsrc,.reloc,
RsAntiSpyware
[A ] 35. c:\windows\system32\drivers\rsboot.sys
Beijing Rising Technology Co., Ltd.
Anti-RootKit Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
RsFwDrv
[A ] 36. d:\rising\rfw\rsfwdrv.sys
Beijing Rising Technology Co., Ltd.
nt_fwdrv
.text,.rdata,.data,INIT,.rsrc,.reloc,
RsNTGDI
[A ] 37. c:\windows\system32\drivers\rsntgdi.sys
Beijing Rising Technology Co., Ltd.
RsNTGDI
.text,.rdata,INIT,.rsrc,.reloc,
Secdrv
[A ] 38. c:\windows\system32\drivers\secdrv.sys
.text,.data,INIT,.reloc,
sfhlp01
[A ] 39. c:\windows\system32\drivers\sfhlp01.sys
Protection Technology
StarForce Protection Helper Driver
.text,.data,PAGE,INIT,.rsrc,.reloc,
Skpskb
[A ] 40. c:\windows\system32\drivers\skpskb.sys
Silitek Corp.
PS/2 Keyboard Filter Driver for Win2000/XP
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
sptd
[A ] 41. c:\windows\system32\drivers\sptd.sys
TesSafe
[A ] 42. c:\windows\system32\tessafe.sys
TENCENT
TesSafe NT Driver
.text,.rdata,.data,INIT,.rsrc,.reloc,
viamraid
[A ] 43. c:\windows\system32\drivers\viamraid.sys
VIA Technologies inc,.ltd
VIA RAID DRIVER FOR WIN 2000/XP/2003IA32
.text,.rdata,.data,INIT,.rsrc,.reloc,
WudfPf
[A ] 44. c:\windows\system32\drivers\wudfpf.sys
Microsoft Corporation
Windows Driver Foundation - User-mode Driver Framework Platform Driver
.text,.rdata,.data,PAGE,.edata,INIT,.rsrc,.reloc,
翱翔天地 - 2007-8-31 17:41:00
WudfRd
[A ] 45. c:\windows\system32\drivers\wudfrd.sys
Microsoft Corporation
Windows Driver Foundation - User-mode Driver Framework Reflector
.text,.rdata,.data,PAGE,INIT,.rsrc,.reloc,
+ 系统登陆自运行
+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
UIHost
[A ] 46. c:\windows\system32\xpstyle_themepackage\logonui.exe
Microsoft Corporation
Windows Logon UI
.text,.data,.rsrc,
+ IE浏览器加载模块
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
{DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
[AM] 47. c:\windows\system32\kakatool.dll
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware Toolbar
.text,.rdata,.data,MonitorS,.rsrc,.reloc,
+ HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[AM] 49. d:\迅雷\comdlls\tdatonce_now.dll
Thunder Networking Technologies,LTD
迅雷浏览器高级特性支持模块
.text,.rdata,.data,.rsrc,.reloc,
{39F7E361-828A-4B5A-BCAF-5B79BFDFEA60}
[AM] 50. d:\迅雷\comdlls\xunleibho_now.dll
Thunder Networking Technologies,LTD
XunLeiBHO
.text,.rdata,.data,.rsrc,.reloc,
{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}
[AM] 51. d:\bitcomet_0.90\tools\bitcometbho_1.1.7.4.dll
BitComet
BitCometBHO
.text,.rdata,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
Exec
[A ] 52. d:\迅雷\thunder.exe
Thunder Networking Technologies,LTD
.text,.rdata,.data,.rsrc,
Exec
[A ] 53. d:\浩方对战平台\gameclient.exe
上海浩方在线信息技术有限公司
浩方对战平台
.text,.rdata,.data,.rsrc,
Exec
[A ] 54. c:\program files\messenger\msmsgs.exe
Microsoft Corporation
Windows Messenger
.text,.data,.rsrc,
+ 资源管理器加载模块
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
ic32pp
[A ] 55. c:\windows\wc98pp.dll
CODE,DATA,BSS,.idata,.edata,.reloc,.rsrc,
+ HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
[A ] 56. c:\windows\system32\ieudinit.exe
Microsoft Corporation
IE Per User Active Setup Uninstall Utility
.text,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 57. c:\windows\system32\hticons.dll
Hilgraeve, Inc.
HyperTerminal Applet Library
.text,.data,.rsrc,.reloc,
IE Search Band
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Shell DocObject Viewer
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
InternetShortcut
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Microsoft Url History Service
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
History
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Temporary Internet Files
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Temporary Internet Files
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Microsoft Url Search Hook
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
The Internet
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Internet Name Space
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
NvCpl DesktopContext Class
[AM] 58. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,.rsrc,.reloc,
Play on my TV helper
[AM] 58. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,.rsrc,.reloc,
Desktop Explorer
[AM] 59. c:\windows\system32\nvshell.dll
NVIDIA Corporation
NVIDIA Desktop Explorer, Version 100.35
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
Desktop Explorer Menu
[AM] 59. c:\windows\system32\nvshell.dll
NVIDIA Corporation
NVIDIA Desktop Explorer, Version 100.35
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
nView Desktop Context Menu
[AM] 59. c:\windows\system32\nvshell.dll
NVIDIA Corporation
NVIDIA Desktop Explorer, Version 100.35
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
Microsoft Outlook Custom Icon Handler
[A ] 60. c:\program files\microsoft office\office\olkfstub.dll
Microsoft Corporation
Microsoft Outlook Shell Hook for Start/Find
.text,.data,.rsrc,.reloc,
WinRAR shell extension
[A ] 61. c:\program files\winrar\rarext.dll
.text,.data,.tls,.idata,.edata,.rsrc,.reloc,
Shell Extensions for RealOne Player
[A ] 62. c:\program files\real\realplayer\rpshell.dll
RealNetworks, Inc.
RealPlayer Shell Extensions
.text,.rdata,.data,.rsrc,.reloc,
IE Microsoft BrowserBand
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Fade Task
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Menu Desk Bar
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE AutoComplete
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Navigation Bar
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Menu Site
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Menu Band
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Microsoft History AutoComplete List
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Tracking Shell Menu
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE IShellFolderBand
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE BandProxy
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE MRU AutoComplete List
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE RSS Feeder Folder
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Microsoft Shell Folder AutoComplete List
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Microsoft Multiple AutoComplete List Container
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Microsoft Browser Architecture
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
翱翔天地 - 2007-8-31 17:42:00
IE Shell Rebar BandSite
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Shell Band Site Menu
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
&Links
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Registry Tree Options Utility
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE User Assist
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
IE Custom MRU AutoCompleted List
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
Portable Media Devices
[A ] 63. c:\windows\system32\audiodev.dll
Microsoft Corporation
Portable Media Devices Shell Extension
.text,.data,.rsrc,.reloc,
Portable Devices
[A ] 64. c:\windows\system32\wpdshext.dll
Microsoft Corporation
Portable Devices Shell Extension
.text,.data,.rsrc,.reloc,
Portable Devices Menu
[A ] 64. c:\windows\system32\wpdshext.dll
Microsoft Corporation
Portable Devices Shell Extension
.text,.data,.rsrc,.reloc,
RISING
[AM] 65. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
{32CD708B-60A7-4C00-9377-D73EAA495F0F}
[AM] 65. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
{AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
[AM] 66. c:\windows\system32\shlhook.dll
Beijing Rising Technology Co., Ltd.
shlhook Module
.text,.rdata,.data,.rsrc,.reloc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
WPDShServiceObj
[AM] 67. c:\windows\system32\wpdshserviceobj.dll
Microsoft Corporation
Windows Portable Device Shell Service Object
.text,.data,.rsrc,.reloc,
+ 用户登陆自运行项目
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
SoundMan
[AM] 68. c:\windows\soundman.exe
Realtek Semiconductor Corp.
Realtek Sound Manager
.text,.rdata,.data,.rsrc,
nwiz
[A ] 69. c:\windows\system32\nwiz.exe
NVIDIA Corporation
NVIDIA nView Wizard, Version 100.35
.text,.rdata,.data,.rsrc,
联想标准功能键盘 Ver1.0.0.3
[AM] 70. c:\program files\联想\联想标准功能键盘\skdaemond.exe
联想
联想标准功能键盘应用程序
.text,.rdata,.data,.rsrc,
TkBellExe
[AM] 71. c:\program files\common files\real\update_ob\realsched.exe
RealNetworks, Inc.
RealNetworks Scheduler
.text,.rdata,.data,.rsrc,
RfwMain
[A ] 72. d:\rising\rfw\rfwmain.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Main Program
.text,.rdata,.data,.rsrc,
ISUSPM Startup
[A ] 73. c:\program files\common files\installshield\updateservice\isuspm.exe
InstallShield Software Corporation
InstallShield Update Service Update Manager
.text,.rdata,.data,.rsrc,
RavTask
[AM] 74. d:\rising\rav\ravtask.exe
Beijing Rising Technology Co., Ltd.
RavTimer
.text,.rdata,.data,.rsrc,
runeip
[A ] 75. d:\rising\antispyware\runiep.exe
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware Monitor
.text,.rdata,.data,.rsrc,
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
KKDelay
[A ] 76. d:\rising\antispyware\runonce.exe
Beijing Rising Technology Co., Ltd.
RunOnce Application
.text,.rdata,.data,.rsrc,
+ 开机执行
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 77. c:\windows\system32\bsmain.exe
Beijing Rising Technology Co., Ltd.
Rising Antivirus 2008
.text,.rdata,.data,.rsrc,.reloc,
[A ] 78. c:\windows\system32\kknative.exe
Beijing Rising Technology Co., Ltd.
NativeAp
.text,.data,.rsrc,.reloc,
+ 映像劫持
+ HKCR\.html
htmlfile\Edit\Command
[A ] 79. c:\program files\microsoft office\office\msohtmed.exe
Microsoft Corporation
Microsoft Office 2000 component
.text,.data,.idata,.rsrc,
htmlfile\Print\Command
[A ] 79. c:\program files\microsoft office\office\msohtmed.exe
Microsoft Corporation
Microsoft Office 2000 component
.text,.data,.idata,.rsrc,
+ HKCR\.htm
htmlfile\Edit\Command
[A ] 79. c:\program files\microsoft office\office\msohtmed.exe
Microsoft Corporation
Microsoft Office 2000 component
.text,.data,.idata,.rsrc,
htmlfile\Print\Command
[A ] 79. c:\program files\microsoft office\office\msohtmed.exe
Microsoft Corporation
Microsoft Office 2000 component
.text,.data,.idata,.rsrc,
+ HKCR\.mp3
RealPlayer.MP3.6\open\Command
[A ] 80. c:\program files\real\realplayer\realplay.exe
RealNetworks, Inc.
RealPlayer
.text,.rdata,.data,.rsrc,
+ 正在运行的进程
+ 00000210(528) smss.exe
+ 00000258(600) csrss.exe
+ 0000025c(604) SOUNDMAN.EXE
00400000[00015000]
[AM] 68. c:\windows\soundman.exe
Realtek Semiconductor Corp.
Realtek Sound Manager
.text,.rdata,.data,.rsrc,
10000000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 00000270(624) winlogon.exe
72C80000[00008000]
[ M] 82. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
+ 0000029c(668) services.exe
+ 000002a8(680) lsass.exe
+ 00000338(824) svchost.exe
+ 00000368(872) svchost.exe
+ 00000394(916) alg.exe
+ 000003ac(940) CCenter.exe
00400000[00028000]
[AM] 7. d:\rising\rav\ccenter.exe
Beijing Rising Technology Co., Ltd.
CCenter
.text,.rdata,.data,.rsrc,
+ 000003bc(956) svchost.exe
00DF0000[00009000]
[ M] 83. c:\windows\system32\normaliz.dll
Microsoft Corporation
Unicode Normalization DLL
.text,.data,.rsrc,.reloc,
5DCA0000[00045000]
[ M] 84. c:\windows\system32\iertutil.dll
Microsoft Corporation
Run time utility for Internet Explorer
.text,.data,.rsrc,.reloc,
+ 000003f8(1016) svchost.exe
+ 00000464(1124) svchost.exe
+ 00000490(1168) Ravmond.exe
00400000[00068000]
[AM] 8. d:\rising\rav\ravmond.exe
Beijing Rising Technology Co., Ltd.
Rising Realtime Moniter
.text,.rdata,.data,.rsrc,
10000000[00042000]
[ M] 85. d:\rising\rav\bwlist.dll
Beijing Rising Technology Co., Ltd.
BWList DLL
.text,.rdata,.data,.rsrc,.reloc,
7C140000[00103000]
[ M] 86. c:\windows\system32\mfc71.dll
Microsoft Corporation
MFCDLL Shared Library - Retail Version
.text,.data,.rsrc,.reloc,
7C340000[00056000]
[ M] 87. c:\windows\system32\msvcr71.dll
Microsoft Corporation
Microsoft? C Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
7C3A0000[0007B000]
[ M] 88. c:\windows\system32\msvcp71.dll
Microsoft Corporation
Microsoft? C++ Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
00D20000[0000E000]
[ M] 89. d:\rising\rav\rsappmgr.dll
Beijing Rising Technology Co., Ltd.
Rising Application Manager
.text,.rdata,.data,.rsrc,.reloc,
00D40000[0002F000]
[ M] 90. d:\rising\rav\cfgdll.dll
Beijing Rising Technology Co., Ltd.
CfgDll
.text,.rdata,.data,.rsrc,.reloc,
00EA0000[00065000]
[ M] 91. d:\rising\rav\rslog.dll
Beijing Rising Technology Co., Ltd.
RsLog DLL
.text,.rdata,.data,.rsrc,.reloc,
00F10000[0001F000]
[ M] 92. d:\rising\rav\proccom.dll
Beijing Rising Technology Co., Ltd.
ProcessC Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00F30000[00024000]
[ M] 93. d:\rising\rav\rscommx2.dll
Beijing Rising Technology Co., Ltd.
RsCommX2
.text,.rdata,.data,.rsrc,.reloc,
00F80000[00075000]
[ M] 94. d:\rising\rav\monrule.dll
Beijing Rising Technology Co., Ltd.
MonRule
.text,.rdata,.data,.rsrc,.reloc,
翱翔天地 - 2007-8-31 17:42:00
01010000[00013000]
[ M] 95. d:\rising\rav\hooksys.dll
Beijing Rising Technology Co., Ltd
Hooksys Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
01170000[00013000]
[ M] 96. d:\rising\rav\hookreg.dll
Beijing Rising Technology Co., Ltd
HookReg Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
011D0000[00013000]
[ M] 97. d:\rising\rav\hookntos.dll
Beijing Rising Technology Co., Ltd
SysMon Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
01230000[0001B000]
[ M] 98. d:\rising\rav\rswalmon.dll
Beijing Rising Technology Co., Ltd.
Rising WAL Monitor DLL
.text,.rdata,.data,.rsrc,.reloc,
02260000[00020000]
[ M] 99. d:\rising\rav\rsstore.dll
Beijing Rising Technology Co., Ltd.
RSStore
.text,.rdata,.data,.rsrc,.reloc,
02490000[00013000]
[ M] 100. d:\rising\rav\hookcont.dll
Beijing Rising Technology Co., Ltd
HookCont Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
024C0000[00027000]
[ M] 101. d:\rising\rav\fakescan.dll
Beijing Rising Technology Co., Ltd.
FakeScan Module
.text,.rdata,.data,.rsrc,.reloc,
02500000[0001D000]
[ M] 102. d:\rising\rav\scanner.dll
Beijing Rising Technology Co., Ltd.
RsScanner Module
.text,.rdata,.data,.rsrc,.reloc,
02520000[00027000]
[ M] 103. d:\rising\rav\recomp.dll
Beijing Rising Technology Co., Ltd.
component manager Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
02560000[0002E000]
[ M] 104. d:\rising\rav\refs.dll
Beijing Rising Technology Co., Ltd.
filesystem Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
025A0000[0002C000]
[ M] 105. d:\rising\rav\viruslib.dll
Beijing Rising Technology Co., Ltd.
VirusLib Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
025E0000[00027000]
[ M] 106. d:\rising\rav\relibldr.dll
Beijing Rising Technology Co., Ltd.
libloader Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
02CD0000[0000D000]
[ M] 107. d:\rising\rav\hookweb.dll
Beijing Rising Technology Co., Ltd.
Rising HookWeb Dll
.text,.rdata,.data,.rsrc,.reloc,
03D30000[0001A000]
[ M] 108. d:\rising\rav\ffr.dll
Beijing Rising Technology Co., Ltd.
ffr Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
03D60000[00020000]
[ M] 109. d:\rising\rav\nvfile.dll
Beijing Rising Technology Co., Ltd.
NVFile
.text,.rdata,.data,.rsrc,.reloc,
13AB0000[00043000]
[ M] 110. d:\rising\rav\scanexec.dll
Beijing Rising Technology Co., Ltd.
ScanExec
.text,.rdata,.data,.rsrc,.reloc,
05140000[002DC000]
[ M] 111. d:\rising\rav\unexe.dll
Beijing Rising Technology Co., Ltd.
UnExe
.text,.rdata,.data,.rsrc,.reloc,
05420000[00045000]
[ M] 112. d:\rising\rav\scanex.dll
Beijing Rising Technology Co., Ltd.
ScanEx
.text,.rdata,.data,.rsrc,.reloc,
05570000[00026000]
[ M] 113. d:\rising\rav\pearc.dll
Beijing Rising Technology Co., Ltd.
pearchive Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
058E0000[00035000]
[ M] 114. d:\rising\rav\scanpack.dll
Beijing Rising Technology Co., Ltd.
Unpack Engine
.text,.rdata,.data,.rsrc,.reloc,
05930000[000B5000]
[ M] 115. d:\rising\rav\revm.dll
Beijing Rising Technology Co., Ltd.
REVM Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
0BE20000[000F1000]
[ M] 116. d:\rising\rav\uroutine.dll
Beijing Rising Technology Co., Ltd.
Unpack Routine
.text,.rdata,.data,.rsrc,.reloc,
02B00000[00022000]
[ M] 117. d:\rising\rav\scansct.dll
Beijing Rising Technology Co., Ltd.
ScanSct Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
03A40000[00037000]
[ M] 118. d:\rising\rav\scriptci.dll
Beijing Rising Technology Co., Ltd.
scriptci Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
+ 000004f0(1264) rfwsrv.exe
00400000[00028000]
[AM] 6. d:\rising\rfw\rfwsrv.exe
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Service
.text,.rdata,.data,.rsrc,
10000000[0000B000]
[ M] 119. d:\rising\rfw\rfwrule.dll
Beijing Rising Technology Co., Ltd.
rule DLL
.text,.rdata,.data,.rsrc,.reloc,
003E0000[00008000]
[ M] 120. d:\rising\rfw\rfwlog.dll
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Logfile DLL
.text,.rdata,.data,.rsrc,.reloc,
00810000[00011000]
[ M] 121. d:\rising\rfw\rfwdrv.dll
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall Driver DLL
.text,.rdata,.data,.rsrc,.reloc,
731B0000[0000A000]
[ M] 122. d:\rising\rfw\psapi.dll
Microsoft Corporation
Process Status Helper
.text,.rdata,.data,.rsrc,.reloc,
00930000[00011000]
[ M] 123. d:\rising\rfw\mondrv.dll
rs
MonDrv
.text,.rdata,.data,.rsrc,.reloc,
00B60000[00010000]
[ M] 124. d:\rising\rfw\proclib.dll
Beijing Rising Technology Co., Ltd.
Rising Personal FireWall ProcLib.dll
.text,.rdata,.data,.rsrc,.reloc,
01550000[00012000]
[ M] 125. d:\rising\rfw\mports.dll
Beijing Rising Technology Co., Ltd.
mPorts.dll
.text,.rdata,.data,.rsrc,.reloc,
+ 000005bc(1468) RavStub.exe
00400000[00022000]
[ M] 126. d:\rising\rav\ravstub.exe
Beijing Rising Technology Co., Ltd.
Rising RavStub
.text,.rdata,.data,.rsrc,
10000000[0001F000]
[ M] 92. d:\rising\rav\proccom.dll
Beijing Rising Technology Co., Ltd.
ProcessC Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00610000[00024000]
[ M] 93. d:\rising\rav\rscommx2.dll
Beijing Rising Technology Co., Ltd.
RsCommX2
.text,.rdata,.data,.rsrc,.reloc,
23700000[00028000]
[ M] 127. d:\rising\rav\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
+ 0000065c(1628) SkDaemond.exe
00400000[00012000]
[AM] 70. c:\program files\联想\联想标准功能键盘\skdaemond.exe
联想
联想标准功能键盘应用程序
.text,.rdata,.data,.rsrc,
10000000[00009000]
[ M] 128. c:\program files\联想\联想标准功能键盘\ctrdev.dll
-
Control Device
.text,.rdata,.data,.rsrc,.reloc,
00370000[0001E000]
[ M] 129. c:\program files\联想\联想标准功能键盘\skutil.dll
Silitek Corp.
General Utility Functions DLL
.text,.rdata,.data,.rsrc,.reloc,
72C80000[00008000]
[ M] 82. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
01260000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 00000674(1652) RUNDLL32.EXE
10000000[00017000]
[ M] 130. c:\windows\system32\nvmctray.dll
NVIDIA Corporation
NVIDIA Media Center Library
.text,.rdata,.data,.shared,.rsrc,.reloc,
00AA0000[00033000]
[ M] 131. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,
00A60000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 00000678(1656) realsched.exe
00400000[0002E000]
[AM] 71. c:\program files\common files\real\update_ob\realsched.exe
RealNetworks, Inc.
RealNetworks Scheduler
.text,.rdata,.data,.rsrc,
10000000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 000006b8(1720) RavMon.exe
00400000[0008B000]
[ M] 132. d:\rising\rav\ravmon.exe
Beijing Rising Technology Co., Ltd.
Rising realtime monitor shell
.text,.rdata,.data,.rsrc,
7C140000[00103000]
[ M] 86. c:\windows\system32\mfc71.dll
Microsoft Corporation
MFCDLL Shared Library - Retail Version
.text,.data,.rsrc,.reloc,
7C340000[00056000]
[ M] 87. c:\windows\system32\msvcr71.dll
Microsoft Corporation
Microsoft? C Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
7C3A0000[0007B000]
[ M] 88. c:\windows\system32\msvcp71.dll
Microsoft Corporation
Microsoft? C++ Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
10000000[0001F000]
[ M] 92. d:\rising\rav\proccom.dll
Beijing Rising Technology Co., Ltd.
ProcessC Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
翱翔天地 - 2007-8-31 17:43:00
00B40000[00024000]
[ M] 93. d:\rising\rav\rscommx2.dll
Beijing Rising Technology Co., Ltd.
RsCommX2
.text,.rdata,.data,.rsrc,.reloc,
23700000[00028000]
[ M] 127. d:\rising\rav\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00D90000[00027000]
[ M] 103. d:\rising\rav\recomp.dll
Beijing Rising Technology Co., Ltd.
component manager Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00DD0000[0002E000]
[ M] 104. d:\rising\rav\refs.dll
Beijing Rising Technology Co., Ltd.
filesystem Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00E10000[0002C000]
[ M] 105. d:\rising\rav\viruslib.dll
Beijing Rising Technology Co., Ltd.
VirusLib Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00E50000[00027000]
[ M] 106. d:\rising\rav\relibldr.dll
Beijing Rising Technology Co., Ltd.
libloader Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00ED0000[0000E000]
[ M] 89. d:\rising\rav\rsappmgr.dll
Beijing Rising Technology Co., Ltd.
Rising Application Manager
.text,.rdata,.data,.rsrc,.reloc,
00EF0000[0002F000]
[ M] 90. d:\rising\rav\cfgdll.dll
Beijing Rising Technology Co., Ltd.
CfgDll
.text,.rdata,.data,.rsrc,.reloc,
01050000[00075000]
[ M] 94. d:\rising\rav\monrule.dll
Beijing Rising Technology Co., Ltd.
MonRule
.text,.rdata,.data,.rsrc,.reloc,
23900000[00040000]
[ M] 133. d:\rising\rav\pngdll.dll
Beijing Rising Technology Co., Ltd.
Rising .Png File Loader Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
26600000[000B4000]
[ M] 134. d:\rising\rav\rsguilib.dll
Beijing Rising Technology Co., Ltd.
Rising GUI Library Loader
.text,.rdata,.data,.rsrc,.reloc,
23800000[00018000]
[ M] 135. d:\rising\rav\rsxml.dll
Beijing Rising Technology Co., Ltd.
RsXML
.text,.rdata,.data,.rsrc,.reloc,
02740000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 00000710(1808) Explorer.EXE
00400000[00009000]
[ M] 83. c:\windows\system32\normaliz.dll
Microsoft Corporation
Unicode Normalization DLL
.text,.data,.rsrc,.reloc,
5DCA0000[00045000]
[ M] 84. c:\windows\system32\iertutil.dll
Microsoft Corporation
Run time utility for Internet Explorer
.text,.data,.rsrc,.reloc,
10000000[00026000]
[AM] 65. c:\windows\system32\ravext.dll
Beijing Rising Technology Co., Ltd.
Rising Shell Ext Module
.text,.rdata,.data,.rsrc,.reloc,
00DB0000[00011000]
[AM] 66. c:\windows\system32\shlhook.dll
Beijing Rising Technology Co., Ltd.
shlhook Module
.text,.rdata,.data,.rsrc,.reloc,
7E1E0000[005C9000]
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
164A0000[00023000]
[AM] 67. c:\windows\system32\wpdshserviceobj.dll
Microsoft Corporation
Windows Portable Device Shell Service Object
.text,.data,.rsrc,.reloc,
109C0000[0002C000]
[ M] 136. c:\windows\system32\portabledevicetypes.dll
Microsoft Corporation
Windows Portable Device (Parameter) Types Component
.text,.orpc,.data,.rsrc,.reloc,
10930000[00049000]
[ M] 137. c:\windows\system32\portabledeviceapi.dll
Microsoft Corporation
Windows Portable Device API Components
.text,.orpc,.data,.rsrc,.reloc,
72C80000[00008000]
[ M] 82. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
00E10000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
02520000[00557000]
[AM] 58. c:\windows\system32\nvcpl.dll
NVIDIA Corporation
NVIDIA Display Properties Extension
.text,.rdata,.data,.rsrc,.reloc,
01600000[00033000]
[ M] 131. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,
02A80000[00073000]
[AM] 59. c:\windows\system32\nvshell.dll
NVIDIA Corporation
NVIDIA Desktop Explorer, Version 100.35
.text,.rdata,.data,.idata,.shared,.rsrc,.reloc,
41F00000[00007000]
[ M] 138. c:\windows\system32\asfsipc.dll
Microsoft Corporation
ASFSipc Object
.text,.data,.rsrc,.reloc,
+ 0000072c(1836) RavTask.exe
00400000[00032000]
[AM] 74. d:\rising\rav\ravtask.exe
Beijing Rising Technology Co., Ltd.
RavTimer
.text,.rdata,.data,.rsrc,
10000000[0001F000]
[ M] 92. d:\rising\rav\proccom.dll
Beijing Rising Technology Co., Ltd.
ProcessC Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00A20000[00024000]
[ M] 93. d:\rising\rav\rscommx2.dll
Beijing Rising Technology Co., Ltd.
RsCommX2
.text,.rdata,.data,.rsrc,.reloc,
23700000[00028000]
[ M] 127. d:\rising\rav\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00C80000[0000E000]
[ M] 89. d:\rising\rav\rsappmgr.dll
Beijing Rising Technology Co., Ltd.
Rising Application Manager
.text,.rdata,.data,.rsrc,.reloc,
08CA0000[0002F000]
[ M] 90. d:\rising\rav\cfgdll.dll
Beijing Rising Technology Co., Ltd.
CfgDll
.text,.rdata,.data,.rsrc,.reloc,
08F80000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 00000740(1856) GemServ.exe
00400000[0000E000]
[AM] 1. c:\program files\amd\cool'n'quiet\gemserv.exe
Advanced Micro Devices
PowerNow! Daemon Launcher Service
.text,.rdata,.data,.rsrc,
+ 00000764(1892) gemback.exe
00400000[0002E000]
[ M] 139. c:\program files\amd\cool'n'quiet\gemback.exe
Advanced Micro Devices
PowerNow! Daemon
.text,.rdata,.data,.rsrc,
+ 0000077c(1916) nvsvc32.exe
00400000[00021000]
[AM] 3. c:\windows\system32\nvsvc32.exe
NVIDIA Corporation
NVIDIA Driver Helper Service, Version 71.84
.text,.rdata,.data,.rsrc,
00F40000[00033000]
[ M] 131. c:\windows\system32\nvrszhc.dll
NVIDIA Corporation
NVIDIA Simplified Chinese language resource library
.rsrc,.reloc,
+ 0000083c(2108) ctfmon.exe
10000000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 00000900(2304) IEXPLORE.EXE
5DCA0000[00045000]
[ M] 84. c:\windows\system32\iertutil.dll
Microsoft Corporation
Run time utility for Internet Explorer
.text,.data,.rsrc,.reloc,
7E1E0000[005C9000]
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
5DFF0000[0002F000]
[ M] 140. c:\windows\system32\ieui.dll
Microsoft Corporation
Internet Explorer UI Engine
.text,.data,.rsrc,.reloc,
47060000[00021000]
[ M] 141. c:\windows\system32\xmllite.dll
Microsoft Corporation
Microsoft XmlLite Library
.text,.data,.rsrc,.reloc,
61930000[0004A000]
[ M] 142. c:\program files\internet explorer\ieproxy.dll
Microsoft Corporation
IE ActiveX Interface Marshaling Library
.text,.orpc,.data,.rsrc,.reloc,
01A40000[00009000]
[ M] 83. c:\windows\system32\normaliz.dll
Microsoft Corporation
Unicode Normalization DLL
.text,.data,.rsrc,.reloc,
10000000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
01D00000[00057000]
[AM] 47. c:\windows\system32\kakatool.dll
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware Toolbar
.text,.rdata,.data,MonitorS,.rsrc,.reloc,
074F0000[00022000]
[AM] 49. d:\迅雷\comdlls\tdatonce_now.dll
Thunder Networking Technologies,LTD
迅雷浏览器高级特性支持模块
.text,.rdata,.data,.rsrc,.reloc,
07520000[00019000]
[AM] 50. d:\迅雷\comdlls\xunleibho_now.dll
Thunder Networking Technologies,LTD
XunLeiBHO
.text,.rdata,.data,.rsrc,.reloc,
223F0000[00009000]
[ M] 143. d:\迅雷\components\resworker\dsbho_01.dll
DsBho
.text,.rdata,.data,.rsrc,.reloc,
223C0000[0000C000]
[ M] 144. d:\迅雷\components\resworker\dataprocessor_01.dll
Thunder Networking Technologies,LTD
DataProcessor
.text,.rdata,.data,.rsrc,.reloc,
07590000[0007E000]
[AM] 51. d:\bitcomet_0.90\tools\bitcometbho_1.1.7.4.dll
BitComet
BitCometBHO
.text,.rdata,.data,.rsrc,.reloc,
72EA0000[00060000]
[ M] 145. c:\windows\system32\ieapfltr.dll
Microsoft Corporation
Microsoft Phishing Filter
.text,.data,.rsrc,.reloc,
097F0000[00028000]
[ M] 146. d:\rising\rav\ravscrch.dll
Beijing Rising Technology Co., Ltd.
RavScrCh Module
.text,.rdata,.data,.rsrc,.reloc,
翱翔天地 - 2007-8-31 17:43:00
30000000[002EF000]
[ M] 147. c:\windows\system32\macromed\flash\flash9c.ocx
Adobe Systems, Inc.
Adobe Flash Player 9.0 r45
.text,.rdata,.data,.rsrc,.reloc,
72C80000[00008000]
[ M] 82. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
73200000[00031000]
[ M] 148. c:\windows\system32\winwb86.ime
Microsoft Corporation
王码五笔型输入法86版
.text,.rdata,.data,.ShareDa,.sgroup,.rsrc,.reloc,
0E200000[007E0000]
[ M] 149. c:\windows\system32\unispim6.ime
北京紫光华宇软件股份有限公司
紫光华宇拼音输入法V6 Beta 3
.text,.rdata,.data,.upim_sh,.rsrc,.reloc,
+ 00000b30(2864) QQ.exe
00400000[001B6000]
[ M] 150. d:\qq2007\qq\qq.exe
TENCENT
QQ
.text,.rdata,.data,.rsrc,
10000000[00022000]
[ M] 151. d:\qq2007\qq\coralassist.dll
Coral Team
珊瑚虫增强包加载库
.text,.rdata,.data,.rsrc,.reloc,
005D0000[0007C000]
[ M] 152. d:\qq2007\qq\coralqq.dll
Coral Team
CoralQQ Core DLL
,,,,.rsrc,,,.data,.adata,
003B0000[0002F000]
[ M] 153. d:\qq2007\qq\kql.dll
Coral Team
Kwafu QQ Library (KQL)
.text,.rsrc,.reloc,
7C420000[00087000]
[ M] 154. d:\qq2007\qq\msvcp80.dll
Microsoft Corporation
Microsoft? C++ Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
78130000[0009B000]
[ M] 155. d:\qq2007\qq\msvcr80.dll
Microsoft Corporation
Microsoft? C Runtime Library
.text,.rdata,.data,.rsrc,.reloc,
60A80000[000F2000]
[ M] 156. d:\qq2007\qq\mfc42.dll
Microsoft Corporation
MFCDLL Shared Library - Retail Version
.text,.rdata,.data,.rsrc,.reloc,
5DCA0000[00045000]
[ M] 84. c:\windows\system32\iertutil.dll
Microsoft Corporation
Run time utility for Internet Explorer
.text,.data,.rsrc,.reloc,
003F0000[0000F000]
[ M] 157. d:\qq2007\qq\ipsearcher.dll
IP 地址查询工具
.text,.rsrc,.reloc,
00650000[00009000]
[ M] 83. c:\windows\system32\normaliz.dll
Microsoft Corporation
Unicode Normalization DLL
.text,.data,.rsrc,.reloc,
00660000[00261000]
[ M] 158. d:\qq2007\qq\qqbaseclassindll.dll
TENCENT
QQBaseClassInDll DLL
.text,.rdata,.data,.rsrc,.reloc,
61740000[000A7000]
[ M] 159. d:\qq2007\qq\qqhelperdll.dll
TENCENT
QQHelperDll DLL
.text,.rdata,.data,.rsrc,.reloc,
600A0000[00072000]
[ M] 160. d:\qq2007\qq\basicctrldll.dll
TENCENT
BasicCtrlDll DLL
.text,.rdata,.data,.rsrc,.reloc,
02570000[00008000]
[ M] 161. d:\qq2007\qq\nodisturbfilter.cqx
Coral Team
拒绝视频打扰的珊瑚虫扩展
.text,.rdata,.data,.rsrc,.reloc,
025F0000[00006000]
[ M] 162. d:\qq2007\qq\confighotkey.cqx
Coral Team
热键激活珊瑚虫参数定制器的扩展
.text,.rdata,.data,.rsrc,.reloc,
621E0000[00005000]
[ M] 163. d:\qq2007\qq\riched32.dll
Microsoft Corporation
Wrapper Dll for Richedit 1.0
.text,.data,.rsrc,.reloc,
62170000[00068000]
[ M] 164. d:\qq2007\qq\riched20.dll
Microsoft Corporation
Rich Text Edit Control, v3.1
.text,.data,.rsrc,.reloc,
61310000[0003A000]
[ M] 165. d:\qq2007\qq\qqapi.dll
TENCENT
ModuleSample DLL
.text,.rdata,.data,.rsrc,.reloc,
62330000[00007000]
[ M] 166. d:\qq2007\qq\timproxy.dll
tencent
TIMProxy
.text,.orpc,.rdata,.data,.rsrc,.reloc,
02D50000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
02EE0000[00006000]
[ M] 167. d:\qq2007\qq\autoreconnect.cqx
Coral Team
掉线后自动重新连接的珊瑚虫扩展
.text,.rdata,.data,.rsrc,.reloc,
60890000[00038000]
[ M] 168. d:\qq2007\qq\loginctrl.dll
TENCENT
NewSkin
.text,.rdata,.data,.rsrc,.reloc,
608D0000[00099000]
[ M] 169. d:\qq2007\qq\loginctrlres.dll
TENCENT
LoginCtrl DLL
.rsrc,.reloc,
03840000[004DE000]
[ M] 170. d:\qq2007\qq\qqres.dll
TENCENT
QQRes
.rsrc,.reloc,
61840000[00093000]
[ M] 171. d:\qq2007\qq\qqmainframe.dll
.text,.rdata,.data,.reloc,
603C0000[001A3000]
[ M] 172. d:\qq2007\qq\gdiplus.dll
Microsoft Corporation
Microsoft GDI+
.text,.data,Shared,.rsrc,.reloc,
046F0000[00123000]
[ M] 173. d:\qq2007\qq\cqqapplication.dll
.text,.rdata,.data,.reloc,
60380000[0003F000]
[ M] 174. d:\qq2007\qq\flashavatardll.dll
FlashAvatarDll DLL
.text,.rdata,.data,.rsrc,.reloc,
60C20000[0005E000]
[ M] 175. d:\qq2007\qq\newskin.dll
TENCENT
NewSkin Module
.text,.rdata,.data,.rsrc,.reloc,
04970000[000BD000]
[ M] 176. d:\qq2007\qq\hostingmgr.dll
TENCENT
HostingMgr DLL
.text,.rdata,.data,.rsrc,.reloc,
60140000[00034000]
[ M] 177. d:\qq2007\qq\cameradll.dll
TENCENT
CameraDll DLL
.text,.rdata,.data,.MYSHARE,.rsrc,.reloc,
60A40000[00032000]
[ M] 178. d:\qq2007\qq\mailsummary.dll
TENCENT
MailSummary DLL
.text,.rdata,.data,.rsrc,.reloc,
04BF0000[0000C000]
[ M] 179. d:\qq2007\qq\coralhotkey.cqx
Coral Team
“老板键”和“一键锁定”珊瑚虫扩展
.text,.rdata,.data,.rsrc,.reloc,
617F0000[00017000]
[ M] 180. d:\qq2007\qq\qqknowledgesearch.dll
TENCENT
QQKnowledgeSearch DLL
.text,.rdata,.data,.rsrc,.reloc,
05160000[001F4000]
[ M] 181. d:\qq2007\qq\qqallinone.dll
TENCENT
NewSkin
.text,.rdata,.data,.rsrc,.reloc,
62280000[0002B000]
[ M] 182. d:\qq2007\qq\sccore.dll
TENCENT
SCCore.dll
.text,.rdata,.data,.shareds,.rsrc,.reloc,
62090000[00024000]
[ M] 183. d:\qq2007\qq\qqspace.dll
TENCENT
QQSpace DLL
.text,.rdata,.data,.rsrc,.reloc,
62380000[00071000]
[ M] 184. d:\qq2007\qq\vbscript.dll
Microsoft Corporation
Microsoft (r) VBScript
.text,.rdata,.data,.rsrc,.reloc,
616C0000[00071000]
[ M] 185. d:\qq2007\qq\qqgroupmng.dll
TENCENT
QQGroupMng DLL
.text,.rdata,.data,.rsrc,.reloc,
03E80000[00017000]
[ M] 186. d:\qq2007\qq\userdefinedhead.dll
TENCENT
UserDefinedHead DLL
.text,.rdata,.data,.rsrc,.reloc,
61A10000[000D7000]
[ M] 187. d:\qq2007\qq\qqplugin.dll
.text,.rdata,.data,.reloc,
620C0000[0003D000]
[ M] 188. d:\qq2007\qq\qqsysmsgmng.dll
.text,.rdata,.data,.reloc,
61600000[0000C000]
[ M] 189. d:\qq2007\qq\qqconfigplugin.dll
TENCENT
QQConfigPlugin DLL
.text,.rdata,.data,.rsrc,.reloc,
61350000[0003D000]
[ M] 190. d:\qq2007\qq\qqavatar.dll
.text,.rdata,.data,.reloc,
04670000[00051000]
[ M] 191. d:\qq2007\qq\qqcustomface.dll
.text,.rdata,.data,.reloc,
7E1E0000[005C9000]
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
03F60000[00016000]
[ M] 192. d:\qq2007\qq\qringmng.dll
.text,.rdata,.data,.reloc,
60970000[000A8000]
[ M] 193. d:\qq2007\qq\longconnection.dll
TENCENT
LongConnection
.text,.rdata,.data,.rsrc,.reloc,
60D20000[00026000]
[ M] 194. d:\qq2007\qq\phoneapi.dll
TENCENT
PhoneAPI DLL
.text,.rdata,.data,.rsrc,.reloc,
60330000[0000D000]
[ M] 195. d:\qq2007\qq\dialerallinone.dll
tencent
DialerAllInOne
.text,.rdata,.data,Shared,.rsrc,.reloc,
72C80000[00008000]
[ M] 82. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
619E0000[0002A000]
[ M] 196. d:\qq2007\qq\qqpet.dll
TENCENT
QQPet DLL
.text,.rdata,.data,.rsrc,.reloc,
60120000[0001F000]
[ M] 197. d:\qq2007\qq\bqqapplication.dll
.text,.rdata,.data,.reloc,
60CA0000[0000F000]
[ M] 198. d:\qq2007\qq\personaldesktop.dll
深圳市腾讯计算机系统公司QQ工作小组
QQ个人桌面
.text,.rdata,.data,.rsrc,.reloc,
60180000[0004F000]
[ M] 199. d:\qq2007\qq\commercesmng.dll
TENCENT
CommercesMng DLL
.text,.rdata,.data,.rsrc,.reloc,
08270000[00286000]
[ M] 200. d:\qq2007\qq\qqaddr.dll
深圳市腾讯计算机系统有限公司
腾讯通讯录
.text,.rdata,.data,.rsrc,.reloc,
翱翔天地 - 2007-8-31 17:44:00
61FD0000[0002C000]
[ M] 201. d:\qq2007\qq\qqscenemng.dll
.text,.rdata,.data,.reloc,
60770000[0001A000]
[ M] 202. d:\qq2007\qq\imageole.dll
TENCENT
TODO: <File description>
.text,.rdata,.data,.rsrc,.reloc,
61810000[00015000]
[ M] 203. d:\qq2007\qq\qqliveqmng.dll
TENCENT
QQLiveQMng DLL
.text,.rdata,.data,.rsrc,.reloc,
06C20000[00028000]
[ M] 146. d:\rising\rav\ravscrch.dll
Beijing Rising Technology Co., Ltd.
RavScrCh Module
.text,.rdata,.data,.rsrc,.reloc,
60680000[00024000]
[ M] 204. d:\qq2007\qq\groupconnection.dll
TENCENT
GroupConnection DLL
.text,.rdata,.data,.rsrc,.reloc,
02B50000[0002B000]
[ M] 205. d:\qq2007\qq\addrsearch.dll
腾讯科技（深圳）有限公司
QQPhoneHelper
UPX0,UPX1,.rsrc,
58050000[0008A000]
[ M] 206. c:\windows\system32\l3codeca.acm
Fraunhofer Institut Integrierte Schaltungen IIS
MPEG Layer-3 Audio Codec for MSACM
.text,.rdata,.data,.rsrc,.reloc,
+ 00000b70(2928) Ras.exe
00400000[0013F000]
[ M] 207. d:\rising\antispyware\ras.exe
Beijing Rising Technology Co., Ltd.
Rising AntiSpyware
.text,.rdata,.data,.rsrc,
00370000[00009000]
[ M] 83. c:\windows\system32\normaliz.dll
Microsoft Corporation
Unicode Normalization DLL
.text,.data,.rsrc,.reloc,
5DCA0000[00045000]
[ M] 84. c:\windows\system32\iertutil.dll
Microsoft Corporation
Run time utility for Internet Explorer
.text,.data,.rsrc,.reloc,
10000000[0001F000]
[ M] 92. d:\rising\rav\proccom.dll
Beijing Rising Technology Co., Ltd.
ProcessC Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
01180000[00024000]
[ M] 93. d:\rising\rav\rscommx2.dll
Beijing Rising Technology Co., Ltd.
RsCommX2
.text,.rdata,.data,.rsrc,.reloc,
012D0000[000A3000]
[ M] 208. d:\rising\antispyware\rasgui.dll
Beijing Rising Technology Co., Ltd.
RasGUI
.text,.rdata,.data,.rsrc,.reloc,
012A0000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
7E1E0000[005C9000]
[AM] 48. c:\windows\system32\ieframe.dll
Microsoft Corporation
Internet Explorer
.text,.data,.rsrc,.reloc,
02410000[00028000]
[ M] 146. d:\rising\rav\ravscrch.dll
Beijing Rising Technology Co., Ltd.
RavScrCh Module
.text,.rdata,.data,.rsrc,.reloc,
+ 00000b74(2932) TIMPlatform.exe
00400000[00013000]
[ M] 209. d:\qq2007\qq\timplatform.exe
TENCENT
TIMPlatform
.text,.rdata,.data,.rsrc,
10000000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
62330000[00007000]
[ M] 166. d:\qq2007\qq\timproxy.dll
tencent
TIMProxy
.text,.orpc,.rdata,.data,.rsrc,.reloc,
+ 00000f60(3936) conime.exe
10000000[0001B000]
[ M] 81. d:\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
菜菜瓜瓜 - 2007-8-31 17:45:00
wa 这 什么日志... 帖 个 SREN 的
tspopo - 2007-8-31 19:13:00
如果使用正常，搜索注册表，删除其中的pptwei26.dll项
1
© 2000 - 2026 Rising Corp. Ltd.