皓峰 - 2008-8-7 14:18:00
每次开机
360安全卫士都提示：
一个未知的系统启动项正在被修改
名称：AppInit_DLLs
路径：kmon*dll
出品公司：
行为描述：篡改系统启动项
位置:HKEY_LOCAL_MACHINE\SOFTWARE
还有一个提示：
一个未知的系统启动项正在被修改
名称：AppInit_DLLs
路径：kmon.dll
出品公司：Beijing Rising Information
Technology Co.,Ltd
行为描述：篡改系统启动项
位置:HKEY_LOCAL_MACHINE\SOFTWARE
这两个提示都是360的错误提示还是病毒？两个不完全相同，一个是360对卡卡的提示，那另一个呢？？？我都糊涂了。
用户系统信息：Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; WPS)
byxxdrls - 2008-8-7 14:23:00
放行不就得了。前面一个似乎也是瑞星的，不知怎么取了这么个怪模怪样的名称。
天仁 - 2008-8-7 14:29:00
kmon*dll
呵呵，不是kmon.dll，这是什么东东，哈哈
LZ不放心，可以上传sreng日志
riversking - 2008-8-7 14:40:00
晕，那个是卡卡的东西。。。
皓峰 - 2008-8-7 14:52:00
瑞星卡卡电脑诊断日志 v1.30 (2008-8-7 9:36:26) 北京瑞星信息技术有限公司
注释: [A]表示该文件存在自启动关联;
[M]表示该文件在内存中;
+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
Adobe LM Service
[A ] 1. c:\program files\common files\adobe systems shared\service\adobelmsvc.exe
Ati HotKey Poller
[AM] 2. c:\windows\system32\ati2evxx.exe
ATI Smart
[A ] 3. c:\windows\system32\ati2sgag.exe
ccosm
[A ] 4. e:\常用软件，勿删\暴影音风\新建文件夹\stormliv.exe
gusvc
[A ] 5. c:\program files\google\common\google updater\googleupdaterservice.exe
RfwProxySrv
[AM] 6. e:\program files\rising\rfw\rfwproxy.exe
RfwService
[AM] 7. e:\program files\rising\rfw\rfwsrv.exe
RsCCenter
[AM] 8. c:\program files\rising\rav\ccenter.exe
RsRavMon
[AM] 9. c:\program files\rising\rav\ravmond.exe
SoundMAX Agent Service (default)
[AM] 10. c:\program files\analog devices\soundmax\smagent.exe
UMWdf
[A ] 11. c:\windows\system32\wdfmgr.exe
+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
aeaudio
[A ] 12. c:\windows\system32\drivers\aeaudio.sys
HookCont
[A ] 13. c:\windows\system32\drivers\hookcont.sys
HookNtos
[A ] 14. c:\windows\system32\drivers\hookntos.sys
HookReg
[A ] 15. c:\windows\system32\drivers\hookreg.sys
HookSys
[A ] 16. c:\windows\system32\drivers\hooksys.sys
HookUrl
[A ] 17. e:\program files\rising\rfw\hookurl.sys
MidiSyn
[A ] 18. c:\windows\system32\drivers\midisyn.sys
RfwBase
[A ] 19. c:\windows\system32\drivers\rfwbase.sys
RsFwDrv
[A ] 20. e:\program files\rising\rfw\rsfwdrv.sys
RsNTGDI
[A ] 21. c:\windows\system32\drivers\rsntgdi.sys
SafeBoxKrnl
[A ] 22. c:\program files\360safebox\safeboxkrnl.sys
Secdrv
[A ] 23. c:\windows\system32\drivers\secdrv.sys
sf
[A ] 24. c:\windows\system32\drivers\sf.sys
SMBios
[A ] 25. c:\windows\system32\drivers\smbios.sys
smwdm
[A ] 26. c:\windows\system32\drivers\smwdm.sys
+ 系统登陆自运行
+ HKCU\Control Panel\Desktop
Scrnsave.exe
[A ] 27. c:\windows\aquareal.scr
+ IE浏览器加载模块
+ HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
{2318C2B1-4965-11d4-9B18-009027A5CD4F}
[AM] 28. c:\program files\google\googletoolbar2.dll
+ HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
[AM] 29. c:\windows\system32\ieframe.dll
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[AM] 30. e:\常用软件，勿删\迅雷\xunle5\comdlls\tdatonce_now.dll
{889D2FEB-5411-4565-8998-1DD2C5261283}
[AM] 31. e:\常用软件，勿删\迅雷\xunle5\comdlls\xunleibho_now.dll
{AA58ED58-01DD-4d91-8333-CF10577473F7}
[AM] 28. c:\program files\google\googletoolbar2.dll
{B69F34DD-F0F9-42DC-9EDD-957187DA688D}
[AM] 32. e:\常用软件，勿删\安全卫士\360safe\safemon\safemon.dll
+ 资源管理器加载模块
+ HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
[A ] 33. c:\windows\system32\ieudinit.exe
+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Portable Media Devices
[A ] 34. c:\windows\system32\audiodev.dll
Portable Media Devices Menu
[A ] 34. c:\windows\system32\audiodev.dll
IE Search Band
[AM] 29. c:\windows\system32\ieframe.dll
IE AutoComplete
[AM] 29. c:\windows\system32\ieframe.dll
Shell DocObject Viewer
[AM] 29. c:\windows\system32\ieframe.dll
InternetShortcut
[AM] 29. c:\windows\system32\ieframe.dll
Microsoft Url History Service
[AM] 29. c:\windows\system32\ieframe.dll
History
[AM] 29. c:\windows\system32\ieframe.dll
Temporary Internet Files
[AM] 29. c:\windows\system32\ieframe.dll
Temporary Internet Files
[AM] 29. c:\windows\system32\ieframe.dll
Microsoft Url Search Hook
[AM] 29. c:\windows\system32\ieframe.dll
The Internet
[AM] 29. c:\windows\system32\ieframe.dll
Internet Name Space
[AM] 29. c:\windows\system32\ieframe.dll
WinRAR shell extension
[AM] 35. c:\program files\winrar\rarext.dll
RISING
[A ] 36. c:\windows\system32\ravext.dll
IE Microsoft BrowserBand
[AM] 29. c:\windows\system32\ieframe.dll
IE Fade Task
[AM] 29. c:\windows\system32\ieframe.dll
IE Menu Desk Bar
[AM] 29. c:\windows\system32\ieframe.dll
IE Navigation Bar
[AM] 29. c:\windows\system32\ieframe.dll
IE Menu Site
[AM] 29. c:\windows\system32\ieframe.dll
IE Menu Band
[AM] 29. c:\windows\system32\ieframe.dll
IE Microsoft History AutoComplete List
[AM] 29. c:\windows\system32\ieframe.dll
IE Tracking Shell Menu
[AM] 29. c:\windows\system32\ieframe.dll
IE IShellFolderBand
[AM] 29. c:\windows\system32\ieframe.dll
IE BandProxy
[AM] 29. c:\windows\system32\ieframe.dll
IE MRU AutoComplete List
[AM] 29. c:\windows\system32\ieframe.dll
IE RSS Feeder Folder
[AM] 29. c:\windows\system32\ieframe.dll
IE Microsoft Shell Folder AutoComplete List
[AM] 29. c:\windows\system32\ieframe.dll
IE Microsoft Multiple AutoComplete List Container
[AM] 29. c:\windows\system32\ieframe.dll
IE Shell Rebar BandSite
[AM] 29. c:\windows\system32\ieframe.dll
IE Shell Band Site Menu
[AM] 29. c:\windows\system32\ieframe.dll
&Links
[AM] 29. c:\windows\system32\ieframe.dll
IE Registry Tree Options Utility
[AM] 29. c:\windows\system32\ieframe.dll
IE Custom MRU AutoCompleted List
[AM] 29. c:\windows\system32\ieframe.dll
+ 用户登陆自运行项目
+ HKCU\Software\Microsoft\Windows\CurrentVersion\Run
swg
[AM] 37. c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
SoundMAXPnP
[AM] 38. c:\program files\analog devices\soundmax\smax4pnp.exe
ATIPTA
[AM] 39. c:\program files\ati technologies\ati control panel\atiptaxx.exe
Google IME Autoupdater
[AM] 40. e:\常用软件，勿删\谷歌输入法\google pinyin\googlepinyindaemon.exe
RavTask
[AM] 41. c:\program files\rising\rav\ravtask.exe
runeip
[AM] 42. e:\常用软件，勿删\瑞星卡卡\卡卡6\rstray.exe
RfwMain
[AM] 43. e:\program files\rising\rfw\rfwmain.exe
+ 开机执行
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 44. c:\windows\system32\bsmain.exe
+ 映像劫持
+ HKCR\Folder\shell
Super Rabbit CDROM Eject
[A ] 45. e:\常用软件，勿删\优化大师\魔法兔子\magicset\srcd2.exe
+ 程序初始化和已知动态连接库
+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs
[AM] 46. c:\windows\system32\kmon.dll
+ 正在运行的进程
+ 000001bc(444) smss.exe
+ 000001f4(500) csrss.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 0000020c(524) winlogon.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
72C80000[00008000]
[ M] 49. c:\windows\system32\msacm32.drv
+ 00000238(568) services.exe
46040000[0000F000]
[ M] 50. c:\windows\apppatch\acadproc.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 00000244(580) lsass.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 000002e8(744) Ati2evxx.exe
00400000[0005B000]
[AM] 2. c:\windows\system32\ati2evxx.exe
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
00B80000[0000F000]
[ M] 52. c:\windows\system32\ati2edxx.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 00000308(776) svchost.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 00000360(864) svchost.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 000003a4(932) CCenter.exe
00400000[0002A000]
[AM] 8. c:\program files\rising\rav\ccenter.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 000003b4(948) svchost.exe
01970000[00009000]
[ M] 53. c:\windows\system32\normaliz.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
50E60000[0000C000]
[ M] 54. c:\windows\system32\wups2.dll
+ 000003e8(1000) svchost.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 00000464(1124) svchost.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
00D10000[00009000]
[ M] 53. c:\windows\system32\normaliz.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
+ 0000049c(1180) ravmond.exe
00400000[00069000]
[AM] 9. c:\program files\rising\rav\ravmond.exe
10000000[00042000]
[ M] 55. c:\program files\rising\rav\bwlist.dll
7C140000[00103000]
[ M] 56. c:\windows\system32\mfc71.dll
7C340000[00056000]
[ M] 57. c:\windows\system32\msvcr71.dll
7C3A0000[0007B000]
[ M] 58. c:\windows\system32\msvcp71.dll
00A70000[0000E000]
[ M] 59. c:\program files\rising\rav\rsappmgr.dll
00A90000[00030000]
[ M] 60. c:\program files\rising\rav\cfgdll.dll
00D00000[00067000]
[ M] 61. c:\program files\rising\rav\rslog.dll
00D70000[0001F000]
[ M] 62. c:\program files\rising\rav\proccom.dll
00D90000[00024000]
[ M] 63. c:\program files\rising\rav\rscommx2.dll
00DE0000[00075000]
[ M] 64. c:\program files\rising\rav\monrule.dll
00E70000[00013000]
[ M] 65. c:\program files\rising\rav\hooksys.dll
00FD0000[00013000]
[ M] 66. c:\program files\rising\rav\hookreg.dll
01030000[00013000]
[ M] 67. c:\program files\rising\rav\hookntos.dll
01090000[0001D000]
[ M] 68. c:\program files\rising\rav\rswalmon.dll
01EC0000[00035000]
[ M] 69. c:\program files\rising\rav\recomp.dll
01F10000[00036000]
[ M] 70. c:\program files\rising\rav\refs.dll
01F60000[00023000]
[ M] 71. c:\program files\rising\rav\ffr.dll
01FA0000[00020000]
[ M] 72. c:\program files\rising\rav\rsstore.dll
01FD0000[00013000]
[ M] 73. c:\program files\rising\rav\hookcont.dll
02000000[00028000]
[ M] 74. c:\program files\rising\rav\fakescan.dll
02040000[00022000]
[ M] 75. c:\program files\rising\rav\scanner.dll
皓峰 - 2008-8-7 14:54:00
02680000[0002F000]
[ M] 76. c:\program files\rising\rav\viruslib.dll
027C0000[00028000]
[ M] 77. c:\program files\rising\rav\relibldr.dll
02DF0000[00012000]
[ M] 78. c:\program files\rising\rav\hookweb.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
035A0000[00021000]
[ M] 79. c:\program files\rising\rav\nvfile.dll
13AB0000[0004A000]
[ M] 80. c:\program files\rising\rav\scanexec.dll
05F10000[002DC000]
[ M] 81. c:\program files\rising\rav\unexe.dll
06200000[000D3000]
[ M] 82. c:\program files\rising\rav\scanex.dll
06660000[00027000]
[ M] 83. c:\program files\rising\rav\pearc.dll
04EF0000[000DC000]
[ M] 84. c:\program files\rising\rav\extfile.dll
05200000[00036000]
[ M] 85. c:\program files\rising\rav\scanpack.dll
05250000[000B7000]
[ M] 86. c:\program files\rising\rav\revm.dll
05550000[00020000]
[ M] 87. c:\program files\rising\rav\urutils.dll
05580000[00018000]
[ M] 88. c:\program files\rising\rav\ur000.dat
02F50000[00023000]
[ M] 89. c:\program files\rising\rav\scansct.dll
+ 000004ac(1196) rfwsrv.exe
00400000[00037000]
[AM] 7. e:\program files\rising\rfw\rfwsrv.exe
7C140000[00103000]
[ M] 56. c:\windows\system32\mfc71.dll
7C340000[00056000]
[ M] 57. c:\windows\system32\msvcr71.dll
7C3A0000[0007B000]
[ M] 58. c:\windows\system32\msvcp71.dll
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
10000000[0001F000]
[ M] 90. e:\program files\rising\rfw\proccom.dll
007E0000[00024000]
[ M] 91. e:\program files\rising\rfw\rscommx2.dll
00A30000[0000E000]
[ M] 92. e:\program files\rising\rfw\rsappmgr.dll
00A50000[00030000]
[ M] 93. e:\program files\rising\rfw\cfgdll.dll
00B60000[0000F000]
[ M] 94. e:\program files\rising\rfw\rfwrule.dll
00B70000[0000C000]
[ M] 95. e:\program files\rising\rfw\rfwlog.dll
00B80000[00018000]
[ M] 96. e:\program files\rising\rfw\rfwdrv.dll
00BA0000[0000E000]
[ M] 97. e:\program files\rising\rfw\ijt_ctrl.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
00BD0000[00016000]
[ M] 98. e:\program files\rising\rfw\unvdet.dll
00C20000[0001B000]
[ M] 99. e:\program files\rising\rfw\mports.dll
+ 0000052c(1324) Explorer.EXE
00400000[00009000]
[ M] 53. c:\windows\system32\normaliz.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
422B0000[005CD000]
[AM] 29. c:\windows\system32\ieframe.dll
72C80000[00008000]
[ M] 49. c:\windows\system32\msacm32.drv
10000000[0002C000]
[AM] 30. e:\常用软件，勿删\迅雷\xunle5\comdlls\tdatonce_now.dll
03040000[00031000]
[AM] 31. e:\常用软件，勿删\迅雷\xunle5\comdlls\xunleibho_now.dll
24050000[0000E000]
[ M] 100. e:\常用软件，勿删\迅雷\xunle5\components\resworker\dsbho_01.dll
24000000[0001E000]
[ M] 101. e:\常用软件，勿删\迅雷\xunle5\components\resworker\dataprocessor_01.dll
031F0000[00029000]
[AM] 32. e:\常用软件，勿删\安全卫士\360safe\safemon\safemon.dll
23700000[00028000]
[ M] 102. c:\program files\rising\rav\rscommon.dll
03540000[0002E000]
[AM] 35. c:\program files\winrar\rarext.dll
+ 00000574(1396) rfwProxy.exe
00400000[00236000]
[AM] 6. e:\program files\rising\rfw\rfwproxy.exe
7C140000[00103000]
[ M] 56. c:\windows\system32\mfc71.dll
7C340000[00056000]
[ M] 57. c:\windows\system32\msvcr71.dll
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
10000000[0001F000]
[ M] 90. e:\program files\rising\rfw\proccom.dll
009F0000[00024000]
[ M] 91. e:\program files\rising\rfw\rscommx2.dll
00C30000[0000F000]
[ M] 94. e:\program files\rising\rfw\rfwrule.dll
00C40000[00011000]
[ M] 103. e:\program files\rising\rfw\urlrule.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
011D0000[00016000]
[ M] 104. e:\program files\rising\rfw\monmid.dll
+ 000006b4(1716) RavStub.exe
00400000[00021000]
[ M] 105. c:\program files\rising\rav\ravstub.exe
10000000[0001F000]
[ M] 62. c:\program files\rising\rav\proccom.dll
00620000[00024000]
[ M] 63. c:\program files\rising\rav\rscommx2.dll
23700000[00028000]
[ M] 102. c:\program files\rising\rav\rscommon.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 000006d4(1748) rfwstub.exe
00400000[00017000]
[ M] 106. e:\program files\rising\rfw\rfwstub.exe
7C3A0000[0007B000]
[ M] 58. c:\windows\system32\msvcp71.dll
7C340000[00056000]
[ M] 57. c:\windows\system32\msvcr71.dll
23700000[00028000]
[ M] 107. e:\program files\rising\rfw\rscommon.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 00000770(1904) RfwMain.exe
00400000[00092000]
[AM] 43. e:\program files\rising\rfw\rfwmain.exe
7C140000[00103000]
[ M] 56. c:\windows\system32\mfc71.dll
7C340000[00056000]
[ M] 57. c:\windows\system32\msvcr71.dll
7C3A0000[0007B000]
[ M] 58. c:\windows\system32\msvcp71.dll
26600000[000A8000]
[ M] 108. e:\program files\rising\rfw\rsguilib.dll
10000000[0001F000]
[ M] 90. e:\program files\rising\rfw\proccom.dll
00A60000[00024000]
[ M] 91. e:\program files\rising\rfw\rscommx2.dll
00BA0000[0000E000]
[ M] 92. e:\program files\rising\rfw\rsappmgr.dll
00BC0000[00030000]
[ M] 93. e:\program files\rising\rfw\cfgdll.dll
23700000[00028000]
[ M] 107. e:\program files\rising\rfw\rscommon.dll
00E10000[00014000]
[ M] 109. e:\program files\rising\rfw\rfwctrl.dll
23800000[00022000]
[ M] 110. e:\program files\rising\rfw\rsxml.dll
23900000[00040000]
[ M] 111. e:\program files\rising\rfw\pngdll.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
01300000[0000F000]
[ M] 94. e:\program files\rising\rfw\rfwrule.dll
+ 00000794(1940) SMAgent.exe
00400000[0000B000]
[AM] 10. c:\program files\analog devices\soundmax\smagent.exe
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
+ 000007b8(1976) spoolsv.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 00000860(2144) SMax4PNP.exe
00400000[000C1000]
[AM] 38. c:\program files\analog devices\soundmax\smax4pnp.exe
10000000[00028000]
[ M] 112. c:\program files\analog devices\soundmax\smwdmif.dll
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
72C80000[00008000]
[ M] 49. c:\windows\system32\msacm32.drv
+ 0000086c(2156) atiptaxx.exe
00400000[00054000]
[AM] 39. c:\program files\ati technologies\ati control panel\atiptaxx.exe
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
10000000[00041000]
[ M] 113. c:\program files\ati technologies\ati control panel\atipdsxx.dll
00B60000[0001A000]
[ M] 114. c:\program files\ati technologies\ati control panel\atrpuixx.chs
00C90000[00013000]
[ M] 115. c:\program files\ati technologies\ati control panel\atipdxxx.dll
+ 00000874(2164) alg.exe
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
+ 00000894(2196) GooglePinyinDaemon.exe
00400000[0003F000]
[AM] 40. e:\常用软件，勿删\谷歌输入法\google pinyin\googlepinyindaemon.exe
003A0000[00009000]
[ M] 53. c:\windows\system32\normaliz.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 000008b8(2232) RavTask.exe
00400000[00034000]
[AM] 41. c:\program files\rising\rav\ravtask.exe
10000000[0001F000]
[ M] 62. c:\program files\rising\rav\proccom.dll
00940000[00024000]
[ M] 63. c:\program files\rising\rav\rscommx2.dll
23700000[00028000]
[ M] 102. c:\program files\rising\rav\rscommon.dll
00BA0000[0000E000]
[ M] 59. c:\program files\rising\rav\rsappmgr.dll
08BC0000[00030000]
[ M] 60. c:\program files\rising\rav\cfgdll.dll
+ 000008d4(2260) Ravmon.exe
00400000[00067000]
[ M] 116. c:\program files\rising\rav\ravmon.exe
7C140000[00103000]
[ M] 56. c:\windows\system32\mfc71.dll
7C340000[00056000]
[ M] 57. c:\windows\system32\msvcr71.dll
7C3A0000[0007B000]
[ M] 58. c:\windows\system32\msvcp71.dll
10000000[0001F000]
[ M] 62. c:\program files\rising\rav\proccom.dll
00A30000[00024000]
[ M] 63. c:\program files\rising\rav\rscommx2.dll
23700000[00028000]
[ M] 102. c:\program files\rising\rav\rscommon.dll
00C80000[00035000]
[ M] 69. c:\program files\rising\rav\recomp.dll
00CD0000[00036000]
[ M] 70. c:\program files\rising\rav\refs.dll
00F30000[0002F000]
[ M] 76. c:\program files\rising\rav\viruslib.dll
01070000[00028000]
[ M] 77. c:\program files\rising\rav\relibldr.dll
010F0000[0000E000]
[ M] 59. c:\program files\rising\rav\rsappmgr.dll
01110000[00030000]
[ M] 60. c:\program files\rising\rav\cfgdll.dll
01270000[00075000]
[ M] 64. c:\program files\rising\rav\monrule.dll
23900000[00040000]
[ M] 117. c:\program files\rising\rav\pngdll.dll
26600000[000A8000]
[ M] 118. c:\program files\rising\rav\rsguilib.dll
23800000[00022000]
[ M] 119. c:\program files\rising\rav\rsxml.dll
+ 000008e0(2272) rstray.exe
00400000[00023000]
[AM] 42. e:\常用软件，勿删\瑞星卡卡\卡卡6\rstray.exe
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
10000000[0003C000]
[ M] 120. e:\常用软件，勿删\瑞星卡卡\卡卡6\rsmginfo.dll
00950000[00009000]
[ M] 53. c:\windows\system32\normaliz.dll
23800000[00022000]
[ M] 121. e:\常用软件，勿删\瑞星卡卡\卡卡6\rsxml.dll
7C3A0000[0007B000]
[ M] 122. e:\常用软件，勿删\瑞星卡卡\卡卡6\msvcp71.dll
7C340000[00056000]
[ M] 123. e:\常用软件，勿删\瑞星卡卡\卡卡6\msvcr71.dll
00D40000[00024000]
[ M] 124. e:\常用软件，勿删\瑞星卡卡\卡卡6\comserv.dll
00D70000[00019000]
[ M] 125. e:\常用软件，勿删\瑞星卡卡\卡卡6\syslay.dll
23700000[00026000]
[ M] 126. e:\常用软件，勿删\瑞星卡卡\卡卡6\rscommon.dll
00DB0000[0002E000]
[ M] 127. e:\常用软件，勿删\瑞星卡卡\卡卡6\comx3.dll
23900000[00040000]
[ M] 128. e:\常用软件，勿删\瑞星卡卡\卡卡6\pngdll.dll
011E0000[0005C000]
[ M] 129. e:\常用软件，勿删\瑞星卡卡\卡卡6\runiep.dll
01240000[0001F000]
[ M] 62. c:\program files\rising\rav\proccom.dll
01260000[00024000]
[ M] 63. c:\program files\rising\rav\rscommx2.dll
+ 000008fc(2300) ctfmon.exe
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
+ 00000904(2308) GoogleToolbarNotifier.exe
00400000[00013000]
[AM] 37. c:\program files\google\googletoolbarnotifier\googletoolbarnotifier.exe
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
10000000[0002E000]
[ M] 130. c:\program files\google\googletoolbarnotifier\2.0.301.7164\gtn.dll
00970000[00009000]
[ M] 53. c:\windows\system32\normaliz.dll
00D20000[0000E000]
[ M] 131. c:\program files\google\googletoolbarnotifier\2.0.301.7164\res_zh-cn.dll
00D30000[00054000]
[ M] 132. c:\program files\google\googletoolbarnotifier\2.0.301.7164\swg.dll
+ 00000ba8(2984) ras.exe
00400000[0000B000]
[ M] 133. e:\常用软件，勿删\瑞星卡卡\卡卡6\ras.exe
7C140000[00103000]
[ M] 134. e:\常用软件，勿删\瑞星卡卡\卡卡6\mfc71.dll
7C340000[00056000]
[ M] 123. e:\常用软件，勿删\瑞星卡卡\卡卡6\msvcr71.dll
10000000[00047000]
[ M] 135. e:\常用软件，勿删\瑞星卡卡\卡卡6\kakamgr.dll
7C3A0000[0007B000]
[ M] 122. e:\常用软件，勿删\瑞星卡卡\卡卡6\msvcp71.dll
00A50000[00019000]
[ M] 125. e:\常用软件，勿删\瑞星卡卡\卡卡6\syslay.dll
00A80000[0001F000]
[ M] 62. c:\program files\rising\rav\proccom.dll
00AA0000[00024000]
[ M] 63. c:\program files\rising\rav\rscommx2.dll
00BF0000[0002E000]
[ M] 127. e:\常用软件，勿删\瑞星卡卡\卡卡6\comx3.dll
00E60000[00058000]
[ M] 136. e:\常用软件，勿删\瑞星卡卡\卡卡6\dbmgr.dll
23800000[00022000]
[ M] 121. e:\常用软件，勿删\瑞星卡卡\卡卡6\rsxml.dll
00FC0000[0002D000]
[ M] 137. e:\常用软件，勿删\瑞星卡卡\卡卡6\pweb.dll
01030000[000C1000]
[ M] 138. e:\常用软件，勿删\瑞星卡卡\卡卡6\pscan.dll
01100000[00009000]
[ M] 53. c:\windows\system32\normaliz.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
01110000[0002F000]
[ M] 139. e:\常用软件，勿删\瑞星卡卡\卡卡6\ncomm.dll
01380000[00070000]
[ M] 140. e:\常用软件，勿删\瑞星卡卡\卡卡6\pset.dll
013F0000[0002A000]
[ M] 141. e:\常用软件，勿删\瑞星卡卡\卡卡6\pdefend.dll
01420000[000B6000]
[ M] 142. e:\常用软件，勿删\瑞星卡卡\卡卡6\ptools.dll
015E0000[0008C000]
[ M] 143. e:\常用软件，勿删\瑞星卡卡\卡卡6\psysinfo.dll
422B0000[005CD000]
[AM] 29. c:\windows\system32\ieframe.dll
23900000[00040000]
[ M] 128. e:\常用软件，勿删\瑞星卡卡\卡卡6\pngdll.dll
30000000[003AF000]
[ M] 144. c:\windows\system32\macromed\flash\flash9f.ocx
72C80000[00008000]
[ M] 49. c:\windows\system32\msacm32.drv
61930000[0004A000]
[ M] 145. c:\program files\internet explorer\ieproxy.dll
049D0000[00085000]
[ M] 146. e:\常用软件，勿删\瑞星卡卡\卡卡6\kengine.dll
04A60000[00045000]
[ M] 147. e:\常用软件，勿删\瑞星卡卡\卡卡6\posttrt.dll
025E0000[00010000]
[ M] 148. e:\常用软件，勿删\瑞星卡卡\卡卡6\kscanex.dll
04CB0000[0002F000]
[ M] 149. e:\常用软件，勿删\瑞星卡卡\卡卡6\engine.dll
04CE0000[00033000]
[ M] 150. e:\常用软件，勿删\瑞星卡卡\卡卡6\rsdialog.dll
+ 00000d84(3460) knownsvr.exe
00400000[00072000]
[ M] 151. e:\常用软件，勿删\瑞星卡卡\卡卡6\knownsvr.exe
10000000[0002F000]
[ M] 139. e:\常用软件，勿删\瑞星卡卡\卡卡6\ncomm.dll
00390000[00009000]
[ M] 53. c:\windows\system32\normaliz.dll
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
00BD0000[0002E000]
[ M] 127. e:\常用软件，勿删\瑞星卡卡\卡卡6\comx3.dll
00C00000[00019000]
[ M] 125. e:\常用软件，勿删\瑞星卡卡\卡卡6\syslay.dll
+ 00000e0c(3596) svchost.exe
+ 00000fd4(4052) IEXPLORE.EXE
41D50000[00045000]
[ M] 51. c:\windows\system32\iertutil.dll
60000000[00074000]
[AM] 46. c:\windows\system32\kmon.dll
10000000[0002E000]
[ M] 127. e:\常用软件，勿删\瑞星卡卡\卡卡6\comx3.dll
009D0000[00019000]
[ M] 125. e:\常用软件，勿删\瑞星卡卡\卡卡6\syslay.dll
70000000[00019000]
[ M] 47. e:\program files\rising\rfw\ijt_base.dll
75000000[0000F000]
[ M] 48. e:\program files\rising\rfw\olemon.dll
422B0000[005CD000]
[AM] 29. c:\windows\system32\ieframe.dll
5DFF0000[0002F000]
[ M] 152. c:\windows\system32\ieui.dll
47060000[00021000]
[ M] 153. c:\windows\system32\xmllite.dll
61930000[0004A000]
aaccbbdd - 2008-8-7 18:50:00
原帖由 皓峰 于 2008-8-7 14:47:00 发表
两个都是吗？
[attach]421630[/attach]
是的
komn.dll就是
© 2000 - 2026 Rising Corp. Ltd.