帮我看看检测报告啊!!! bbs.ikaka.com

我就是法律 - 2008-10-5 11:23:00

机器关机的时候需要3分多钟
尤其到WINDOWS那
还有开始程序里无缘无故多了个rsautorunsdisabled
上网查有说是病毒有说是自动程序
帮我看看啊谢谢各位了

瑞星卡卡电脑诊断日志 v1.30 (2008-10-5 0:42:59) 北京瑞星信息技术有限公司

注释: [A]表示该文件存在自启动关联;
[M]表示该文件在内存中;

+ 注册表自运行项目
+ 系统服务
+ HKLM\System\CurrentControlSet\Services
Apple Mobile Device
[AM] 1. c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe

Bonjour Service
[A ] 2. c:\program files\bonjour\mdnsresponder.exe

iPod Service
[A ] 3. c:\program files\ipod\bin\ipodservice.exe

NBService
[A ] 4. c:\program files\nero\nero 7\nero backitup\nbservice.exe

NMIndexingService
[A ] 5. c:\program files\common files\ahead\lib\nmindexingservice.exe

NVSvc
[AM] 6. c:\windows\system32\nvsvc32.exe

ose
[A ] 7. c:\program files\common files\microsoft shared\source engine\ose.exe

RfwProxySrv
[AM] 8. c:\program files\rising\rfw\rfwproxy.exe

RfwService
[AM] 9. c:\program files\rising\rfw\rfwsrv.exe

RsCCenter
[AM] 10. c:\program files\rising\rav\ccenter.exe

RsRavMon
[AM] 11. c:\program files\rising\rav\ravmond.exe

Sysbak_hotkey_Server
[AM] 12. c:\program files\thunis\emergency center\hotkey.exe

WMPNetworkSvc
[A ] 13. c:\program files\windows media player\wmpnetwk.exe

WudfSvc
[A ] 14. c:\windows\system32\wudfsvc.dll

+ 内核驱动
+ HKLM\System\CurrentControlSet\Services
CA561
[A ] 15. c:\windows\system32\drivers\spca561.sys

GEARAspiWDM
[A ] 16. c:\windows\system32\drivers\gearaspiwdm.sys

HDAudBus
[A ] 17. c:\windows\system32\drivers\hdaudbus.sys

HookCont
[A ] 18. c:\windows\system32\drivers\hookcont.sys

HookNtos
[A ] 19. c:\windows\system32\drivers\hookntos.sys

HookReg
[A ] 20. c:\windows\system32\drivers\hookreg.sys

HookSys
[A ] 21. c:\windows\system32\drivers\hooksys.sys

HookUrl
[A ] 22. c:\program files\rising\rfw\hookurl.sys

IntcAzAudAddService
[A ] 23. c:\windows\system32\drivers\rtkhdaud.sys

k750bus
[A ] 24. c:\windows\system32\drivers\k750bus.sys

npkcrypt
[A ] 25. c:\windows\system32\npkcrypt.sys

npkycryp
[A ] 26. c:\windows\system32\npkycryp.sys

PauseDrv
[A ] 27. c:\windows\system32\drivers\pausedrv.sys

PxHelp20
[A ] 28. c:\windows\system32\drivers\pxhelp20.sys

QKeyService
[A ] 29. c:\windows\system32\keycrypt.sys

RfwBase
[A ] 30. c:\windows\system32\drivers\rfwbase.sys

RsFwDrv
[A ] 31. c:\program files\rising\rfw\rsfwdrv.sys

RsNTGDI
[A ] 32. c:\windows\system32\drivers\rsntgdi.sys

RTLE8023xp
[A ] 33. c:\windows\system32\drivers\rtenicxp.sys

SafeBoxKrnl
[A ] 34. c:\program files\360safebox\safeboxkrnl.sys

Secdrv
[A ] 35. c:\windows\system32\drivers\secdrv.sys

TesSafe
[A ] 36. c:\windows\system32\tessafe.sys

USBAAPL
[A ] 37. c:\windows\system32\drivers\usbaapl.sys

VHDISK
[A ] 38. c:\windows\system32\drivers\vhdisk.sys

VolFlter
[A ] 39. c:\windows\system32\drivers\volflter.sys

WoptiHWDetect
[A ] 40. c:\program files\wopti\woptihwdetect.sys

WudfPf
[A ] 41. c:\windows\system32\drivers\wudfpf.sys

WudfRd
[A ] 42. c:\windows\system32\drivers\wudfrd.sys

+ 文件系统驱动
+ HKLM\System\CurrentControlSet\Services
Mulsys
[A ] 43. c:\windows\system32\drivers\mulsys.sys

yshield
[A ] 44. c:\windows\system32\drivers\yshield.sys

+ IE浏览器加载模块
+ HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks
{CFBFAE00-17A6-11D0-99CB-00C04FD64497}
[AM] 45. c:\windows\system32\ieframe.dll

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{01443AEC-0FD1-40fd-9C87-E93D1494C233}
[A ] 46. c:\program files\thunder\comdlls\tdatonce_now.dll

{889D2FEB-5411-4565-8998-1DD2C5261283}
[AM] 47. c:\program files\thunder\comdlls\xunleibho_now.dll

{B69F34DD-F0F9-42DC-9EDD-957187DA688D}
[AM] 48. c:\program files\360safe\safemon\safemon.dll

+ 资源管理器加载模块
+ HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
text/xml
[AM] 49. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll

+ HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
mso-offdap11
[A ] 50. c:\program files\common files\microsoft shared\web components\11\owc11.dll

+ HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components
<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}
[A ] 51. c:\windows\system32\ieudinit.exe

+ HKLM\SOFTWARE\Classes\Folder\shellex\ColumnHandlers
{0561EC90-CE54-4f0c-9C55-E226110A740C}
[AM] 52. c:\program files\haali\matroskasplitter\mmfinfo.dll

{7D4D6379-F301-4311-BEBA-E26EB0561882}
[AM] 53. c:\program files\common files\ahead\lib\nerodigitalext.dll

{F9DB5320-233E-11D1-9F84-707F02C10627}
[AM] 54. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll

+ HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
HyperTerminal Icon Ext
[A ] 55. c:\windows\system32\hticons.dll

IE Search Band
[AM] 45. c:\windows\system32\ieframe.dll

IE AutoComplete
[AM] 45. c:\windows\system32\ieframe.dll

Shell DocObject Viewer
[AM] 45. c:\windows\system32\ieframe.dll

InternetShortcut
[AM] 45. c:\windows\system32\ieframe.dll

Microsoft Url History Service
[AM] 45. c:\windows\system32\ieframe.dll

History
[AM] 45. c:\windows\system32\ieframe.dll

Temporary Internet Files
[AM] 45. c:\windows\system32\ieframe.dll

Temporary Internet Files
[AM] 45. c:\windows\system32\ieframe.dll

Microsoft Url Search Hook
[AM] 45. c:\windows\system32\ieframe.dll

The Internet
[AM] 45. c:\windows\system32\ieframe.dll

Internet Name Space
[AM] 45. c:\windows\system32\ieframe.dll

NvCpl DesktopContext Class
[AM] 56. c:\windows\system32\nvcpl.dll

Play on my TV helper
[AM] 56. c:\windows\system32\nvcpl.dll

Desktop Explorer
[AM] 57. c:\windows\system32\nvshell.dll

Desktop Explorer Menu
[AM] 57. c:\windows\system32\nvshell.dll

nView Desktop Context Menu
[AM] 57. c:\windows\system32\nvshell.dll

NeroDigitalIconHandler
[AM] 53. c:\program files\common files\ahead\lib\nerodigitalext.dll

NeroDigitalPropSheetHandler
[AM] 53. c:\program files\common files\ahead\lib\nerodigitalext.dll

Web Folders
[A ] 58. c:\program files\common files\microsoft shared\web folders\msonsext.dll

Microsoft Office HTML Icon Handler
[AM] 59. c:\program files\microsoft office\office11\msohev.dll

WinRAR shell extension
[AM] 60. c:\program files\winrar\rarext.dll

IE Microsoft BrowserBand
[AM] 45. c:\windows\system32\ieframe.dll

IE Fade Task
[AM] 45. c:\windows\system32\ieframe.dll

IE Menu Desk Bar
[AM] 45. c:\windows\system32\ieframe.dll

IE Navigation Bar
[AM] 45. c:\windows\system32\ieframe.dll

IE Menu Site
[AM] 45. c:\windows\system32\ieframe.dll

IE Menu Band
[AM] 45. c:\windows\system32\ieframe.dll

IE Microsoft History AutoComplete List
[AM] 45. c:\windows\system32\ieframe.dll

IE Tracking Shell Menu
[AM] 45. c:\windows\system32\ieframe.dll

IE IShellFolderBand
[AM] 45. c:\windows\system32\ieframe.dll

IE BandProxy
[AM] 45. c:\windows\system32\ieframe.dll

IE MRU AutoComplete List
[AM] 45. c:\windows\system32\ieframe.dll

IE RSS Feeder Folder
[AM] 45. c:\windows\system32\ieframe.dll

IE Microsoft Shell Folder AutoComplete List
[AM] 45. c:\windows\system32\ieframe.dll

IE Microsoft Multiple AutoComplete List Container
[AM] 45. c:\windows\system32\ieframe.dll

Microsoft Browser Architecture
[AM] 45. c:\windows\system32\ieframe.dll

IE Shell Rebar BandSite
[AM] 45. c:\windows\system32\ieframe.dll

IE Shell Band Site Menu
[AM] 45. c:\windows\system32\ieframe.dll

&Links
[AM] 45. c:\windows\system32\ieframe.dll

IE Registry Tree Options Utility
[AM] 45. c:\windows\system32\ieframe.dll

IE User Assist
[AM] 45. c:\windows\system32\ieframe.dll

IE Custom MRU AutoCompleted List
[AM] 45. c:\windows\system32\ieframe.dll

Haali Column Provider
[AM] 52. c:\program files\haali\matroskasplitter\mmfinfo.dll

RISING
[A ] 61. c:\windows\system32\ravext.dll

Portable Media Devices
[AM] 62. c:\windows\system32\audiodev.dll

Portable Devices
[AM] 63. c:\windows\system32\wpdshext.dll

Portable Devices Menu
[AM] 63. c:\windows\system32\wpdshext.dll

iTunes
[A ] 64. e:\itunes\itunesminiplayer.dll

EncryptFile
[A ] 65. c:\program files\wopti\woptiencryptmodule.dll

+ 用户登陆自运行项目
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
RfwMain
[AM] 66. c:\program files\rising\rfw\rfwmain.exe

RavTask
[AM] 67. c:\program files\rising\rav\ravtask.exe

runeip
[AM] 68. c:\program files\rising\antispyware\rstray.exe

360Safebox
[A ] 69. c:\program files\360safebox\safeboxtray.exe

+ 开机执行
+ HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
BootExecute
[A ] 70. c:\windows\system32\bsmain.exe

+ 映像劫持
+ HKCR\.html
htmlfile\Edit\Command
[A ] 71. c:\program files\microsoft office\office11\msohtmed.exe

htmlfile\open\Command
[AM] 72. c:\program files\theworld 2.0\theworld.exe

htmlfile\Print\Command
[A ] 71. c:\program files\microsoft office\office11\msohtmed.exe

htmlfile\TheWorld\Command
[AM] 72. c:\program files\theworld 2.0\theworld.exe

+ HKCR\.htm
htmlfile\Edit\Command
[A ] 71. c:\program files\microsoft office\office11\msohtmed.exe

htmlfile\open\Command
[AM] 72. c:\program files\theworld 2.0\theworld.exe

htmlfile\Print\Command
[A ] 71. c:\program files\microsoft office\office11\msohtmed.exe

htmlfile\TheWorld\Command
[AM] 72. c:\program files\theworld 2.0\theworld.exe

+ 程序初始化和已知动态连接库
+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
AppInit_DLLs
[AM] 73. c:\windows\system32\kmon.dll

+ 打印机监控
+ HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
Microsoft Document Imaging Writer Monitor
[AM] 74. c:\windows\system32\mdimon.dll

+ 其他自启动项目
+ C:\WINDOWS\Tasks
AppleSoftwareUpdate.job
[A ] 75. c:\program files\apple software update\softwareupdate.exe

+ 正在运行的进程
+ 0000009c(156) RfwMain.exe
00400000[00092000]
[AM] 66. c:\program files\rising\rfw\rfwmain.exe

7C140000[00103000]
[ M] 76. c:\windows\system32\mfc71.dll

7C340000[00056000]
[ M] 77. c:\windows\system32\msvcr71.dll

7C3A0000[0007B000]
[ M] 78. c:\windows\system32\msvcp71.dll

26600000[000A8000]
[ M] 79. c:\program files\rising\rfw\rsguilib.dll

5D360000[0000A000]
[ M] 80. c:\windows\system32\mfc71chs.dll

10000000[0001F000]
[ M] 81. c:\program files\rising\rfw\proccom.dll

00B10000[00024000]
[ M] 82. c:\program files\rising\rfw\rscommx2.dll

00C50000[0000E000]
[ M] 83. c:\program files\rising\rfw\rsappmgr.dll

00C70000[00030000]
[ M] 84. c:\program files\rising\rfw\cfgdll.dll

23700000[00028000]
[ M] 85. c:\program files\rising\rfw\rscommon.dll

00EC0000[00014000]
[ M] 86. c:\program files\rising\rfw\rfwctrl.dll

23800000[00022000]
[ M] 87. c:\program files\rising\rfw\rsxml.dll

23900000[00040000]
[ M] 88. c:\program files\rising\rfw\pngdll.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

013F0000[0000F000]
[ M] 91. c:\program files\rising\rfw\rfwrule.dll

02C90000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

+ 000000f4(244) spoolsv.exe
70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

00B00000[00008000]
[AM] 74. c:\windows\system32\mdimon.dll

00B10000[00008000]
[ M] 94. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

+ 0000026c(620) smss.exe

+ 00000294(660) TheWorld.exe
00400000[0029D000]
[AM] 72. c:\program files\theworld 2.0\theworld.exe

00390000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00FB0000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

01090000[00029000]
[AM] 48. c:\program files\360safe\safemon\safemon.dll

01250000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

027E0000[0002F000]
[ M] 100. c:\program files\theworld 2.0\languages\chs.dll

422B0000[005CD000]
[AM] 45. c:\windows\system32\ieframe.dll

04280000[0000D000]
[AM] 49. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll

325C0000[00012000]
[AM] 59. c:\program files\microsoft office\office11\msohev.dll

042B0000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

05D50000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

06A50000[00028000]
[ M] 102. c:\program files\rising\rav\ravscrch.dll

30000000[003AF000]
[ M] 103. c:\windows\system32\macromed\flash\flash9f.ocx

72C80000[00008000]
[ M] 104. c:\windows\system32\msacm32.drv

61930000[0004A000]
[ M] 105. c:\program files\internet explorer\ieproxy.dll

+ 000002a4(676) csrss.exe
70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 000002bc(700) winlogon.exe
70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

10000000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

72C80000[00008000]
[ M] 104. c:\windows\system32\msacm32.drv

+ 000002e8(744) services.exe
47260000[0000F000]
[ M] 106. c:\windows\apppatch\acadproc.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 000002f4(756) lsass.exe
70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

10000000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

用户系统信息：Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) )

我就是法律 - 2008-10-5 11:23:00

+ 00000324(804) rstray.exe
00400000[00023000]
[AM] 68. c:\program files\rising\antispyware\rstray.exe

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

10000000[0003C000]
[ M] 107. c:\program files\rising\antispyware\rsmginfo.dll

00A40000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

23800000[00022000]
[ M] 108. c:\program files\rising\antispyware\rsxml.dll

7C3A0000[0007B000]
[ M] 109. c:\program files\rising\antispyware\msvcp71.dll

7C340000[00056000]
[ M] 110. c:\program files\rising\antispyware\msvcr71.dll

00DE0000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

02380000[00024000]
[ M] 111. c:\program files\rising\antispyware\comserv.dll

023B0000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

23700000[00026000]
[ M] 112. c:\program files\rising\antispyware\rscommon.dll

023F0000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

02660000[00029000]
[AM] 48. c:\program files\360safe\safemon\safemon.dll

23900000[00040000]
[ M] 113. c:\program files\rising\antispyware\pngdll.dll

02D40000[00061000]
[ M] 114. c:\program files\rising\antispyware\runiep.dll

02DB0000[0002F000]
[ M] 115. c:\program files\rising\antispyware\ncomm.dll

02E00000[0001F000]
[ M] 116. c:\program files\rising\rav\proccom.dll

02E20000[00024000]
[ M] 117. c:\program files\rising\rav\rscommx2.dll

03F50000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

050B0000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

+ 00000394(916) svchost.exe
70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 000003ac(940) RavTask.exe
00400000[00034000]
[AM] 67. c:\program files\rising\rav\ravtask.exe

10000000[0001F000]
[ M] 116. c:\program files\rising\rav\proccom.dll

00A30000[00024000]
[ M] 117. c:\program files\rising\rav\rscommx2.dll

23700000[00028000]
[ M] 118. c:\program files\rising\rav\rscommon.dll

00C90000[0000E000]
[ M] 119. c:\program files\rising\rav\rsappmgr.dll

08CB0000[00030000]
[ M] 120. c:\program files\rising\rav\cfgdll.dll

08E80000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

+ 000003e0(992) svchost.exe
10000000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 00000440(1088) CCenter.exe
00400000[0002A000]
[AM] 10. c:\program files\rising\rav\ccenter.exe

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 00000450(1104) svchost.exe
10000000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

00D20000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

+ 00000468(1128) Ravmon.exe
00400000[00067000]
[ M] 121. c:\program files\rising\rav\ravmon.exe

7C140000[00103000]
[ M] 76. c:\windows\system32\mfc71.dll

7C340000[00056000]
[ M] 77. c:\windows\system32\msvcr71.dll

7C3A0000[0007B000]
[ M] 78. c:\windows\system32\msvcp71.dll

5D360000[0000A000]
[ M] 80. c:\windows\system32\mfc71chs.dll

10000000[0001F000]
[ M] 116. c:\program files\rising\rav\proccom.dll

00B20000[00024000]
[ M] 117. c:\program files\rising\rav\rscommx2.dll

23700000[00028000]
[ M] 118. c:\program files\rising\rav\rscommon.dll

00D70000[00035000]
[ M] 122. c:\program files\rising\rav\recomp.dll

00DC0000[00036000]
[ M] 123. c:\program files\rising\rav\refs.dll

01020000[0002F000]
[ M] 124. c:\program files\rising\rav\viruslib.dll

01160000[00028000]
[ M] 125. c:\program files\rising\rav\relibldr.dll

011E0000[0000E000]
[ M] 119. c:\program files\rising\rav\rsappmgr.dll

01200000[00030000]
[ M] 120. c:\program files\rising\rav\cfgdll.dll

01360000[00075000]
[ M] 126. c:\program files\rising\rav\monrule.dll

23900000[00040000]
[ M] 127. c:\program files\rising\rav\pngdll.dll

01460000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

26600000[000A8000]
[ M] 128. c:\program files\rising\rav\rsguilib.dll

23800000[00022000]
[ M] 129. c:\program files\rising\rav\rsxml.dll

+ 00000498(1176) ctfmon.exe
60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

10000000[00029000]
[AM] 48. c:\program files\360safe\safemon\safemon.dll

00A80000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

01E70000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

+ 000004b0(1200) svchost.exe
70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

10000000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

+ 000004f4(1268) svchost.exe
70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

008B0000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

10000000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

+ 00000518(1304) ravmond.exe
00400000[00069000]
[AM] 11. c:\program files\rising\rav\ravmond.exe

10000000[00042000]
[ M] 130. c:\program files\rising\rav\bwlist.dll

7C140000[00103000]
[ M] 76. c:\windows\system32\mfc71.dll

7C340000[00056000]
[ M] 77. c:\windows\system32\msvcr71.dll

7C3A0000[0007B000]
[ M] 78. c:\windows\system32\msvcp71.dll

5D360000[0000A000]
[ M] 80. c:\windows\system32\mfc71chs.dll

00B20000[0000E000]
[ M] 119. c:\program files\rising\rav\rsappmgr.dll

00B40000[00030000]
[ M] 120. c:\program files\rising\rav\cfgdll.dll

00DB0000[00067000]
[ M] 131. c:\program files\rising\rav\rslog.dll

00E20000[0001F000]
[ M] 116. c:\program files\rising\rav\proccom.dll

00E40000[00024000]
[ M] 117. c:\program files\rising\rav\rscommx2.dll

00ED0000[00075000]
[ M] 126. c:\program files\rising\rav\monrule.dll

00F60000[00013000]
[ M] 132. c:\program files\rising\rav\hooksys.dll

010C0000[00013000]
[ M] 133. c:\program files\rising\rav\hookreg.dll

01120000[00013000]
[ M] 134. c:\program files\rising\rav\hookntos.dll

01180000[0001D000]
[ M] 135. c:\program files\rising\rav\rswalmon.dll

01FB0000[00035000]
[ M] 122. c:\program files\rising\rav\recomp.dll

02000000[00036000]
[ M] 123. c:\program files\rising\rav\refs.dll

02050000[00022000]
[ M] 136. c:\program files\rising\rav\ffr.dll

02090000[00020000]
[ M] 137. c:\program files\rising\rav\rsstore.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

02460000[000DC000]
[ M] 138. c:\program files\rising\rav\extfile.dll

02100000[00027000]
[ M] 139. c:\program files\rising\rav\pearc.dll

02140000[00013000]
[ M] 140. c:\program files\rising\rav\hookcont.dll

02750000[00028000]
[ M] 141. c:\program files\rising\rav\fakescan.dll

02790000[00022000]
[ M] 142. c:\program files\rising\rav\scanner.dll

028D0000[0002F000]
[ M] 124. c:\program files\rising\rav\viruslib.dll

02A10000[00028000]
[ M] 125. c:\program files\rising\rav\relibldr.dll

02B90000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

03930000[00012000]
[ M] 143. c:\program files\rising\rav\hookweb.dll

035D0000[00021000]
[ M] 144. c:\program files\rising\rav\nvfile.dll

13AB0000[0004A000]
[ M] 145. c:\program files\rising\rav\scanexec.dll

064D0000[002DC000]
[ M] 146. c:\program files\rising\rav\unexe.dll

067C0000[000D4000]
[ M] 147. c:\program files\rising\rav\scanex.dll

06D30000[00036000]
[ M] 148. c:\program files\rising\rav\scanpack.dll

06D80000[000B7000]
[ M] 149. c:\program files\rising\rav\revm.dll

06F70000[00020000]
[ M] 150. c:\program files\rising\rav\urutils.dll

06FA0000[00018000]
[ M] 151. c:\program files\rising\rav\ur000.dat

07600000[00038000]
[ M] 152. c:\program files\rising\rav\scriptci.dll

07650000[0001D000]
[ M] 153. c:\program files\rising\rav\ur001.dat

05CF0000[00017000]
[ M] 154. c:\program files\rising\rav\ur023.dat

060A0000[000F3000]
[ M] 155. c:\program files\rising\rav\uroutine.dll

14210000[00038000]
[ M] 156. c:\program files\rising\rav\extmail.dll

03730000[00023000]
[ M] 157. c:\program files\rising\rav\scansct.dll

+ 00000530(1328) rfwsrv.exe
00400000[00037000]
[AM] 9. c:\program files\rising\rfw\rfwsrv.exe

7C140000[00103000]
[ M] 76. c:\windows\system32\mfc71.dll

7C340000[00056000]
[ M] 77. c:\windows\system32\msvcr71.dll

7C3A0000[0007B000]
[ M] 78. c:\windows\system32\msvcp71.dll

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

5D360000[0000A000]
[ M] 80. c:\windows\system32\mfc71chs.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

10000000[0001F000]
[ M] 81. c:\program files\rising\rfw\proccom.dll

00790000[00024000]
[ M] 82. c:\program files\rising\rfw\rscommx2.dll

009E0000[0000E000]
[ M] 83. c:\program files\rising\rfw\rsappmgr.dll

00A00000[00030000]
[ M] 84. c:\program files\rising\rfw\cfgdll.dll

00B10000[0000F000]
[ M] 91. c:\program files\rising\rfw\rfwrule.dll

00B60000[0000C000]
[ M] 158. c:\program files\rising\rfw\rfwlog.dll

00B70000[00018000]
[ M] 159. c:\program files\rising\rfw\rfwdrv.dll

00B90000[0000E000]
[ M] 160. c:\program files\rising\rfw\ijt_ctrl.dll

00CC0000[00016000]
[ M] 161. c:\program files\rising\rfw\unvdet.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

00BE0000[0001B000]
[ M] 162. c:\program files\rising\rfw\mports.dll

+ 00000650(1616) rfwProxy.exe
00400000[00236000]
[AM] 8. c:\program files\rising\rfw\rfwproxy.exe

7C140000[00103000]
[ M] 76. c:\windows\system32\mfc71.dll

7C340000[00056000]
[ M] 77. c:\windows\system32\msvcr71.dll

5D360000[0000A000]
[ M] 80. c:\windows\system32\mfc71chs.dll

10000000[0001F000]
[ M] 81. c:\program files\rising\rfw\proccom.dll

00A60000[00024000]
[ M] 82. c:\program files\rising\rfw\rscommx2.dll

00B90000[0000F000]
[ M] 91. c:\program files\rising\rfw\rfwrule.dll

00CF0000[00011000]
[ M] 163. c:\program files\rising\rfw\urlrule.dll

01390000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

012A0000[00016000]
[ M] 164. c:\program files\rising\rfw\monmid.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 0000066c(1644) rfwstub.exe
00400000[00017000]
[ M] 165. c:\program files\rising\rfw\rfwstub.exe

7C3A0000[0007B000]
[ M] 78. c:\windows\system32\msvcp71.dll

7C340000[00056000]
[ M] 77. c:\windows\system32\msvcr71.dll

23700000[00028000]
[ M] 85. c:\program files\rising\rfw\rscommon.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 000006ec(1772) ras.exe
00400000[0000B000]
[ M] 166. c:\program files\rising\antispyware\ras.exe

7C140000[00103000]
[ M] 167. c:\program files\rising\antispyware\mfc71.dll

7C340000[00056000]
[ M] 110. c:\program files\rising\antispyware\msvcr71.dll

5D360000[0000A000]
[ M] 80. c:\windows\system32\mfc71chs.dll

10000000[00047000]
[ M] 168. c:\program files\rising\antispyware\kakamgr.dll

7C3A0000[0007B000]
[ M] 109. c:\program files\rising\antispyware\msvcp71.dll

00B00000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

00B70000[0001F000]
[ M] 116. c:\program files\rising\rav\proccom.dll

00B90000[00024000]
[ M] 117. c:\program files\rising\rav\rscommx2.dll

00CE0000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00F50000[00058000]
[ M] 169. c:\program files\rising\antispyware\dbmgr.dll

23800000[00022000]
[ M] 108. c:\program files\rising\antispyware\rsxml.dll

010B0000[0002D000]
[ M] 170. c:\program files\rising\antispyware\pweb.dll

01120000[000C1000]
[ M] 171. c:\program files\rising\antispyware\pscan.dll

011F0000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

01200000[0002F000]
[ M] 115. c:\program files\rising\antispyware\ncomm.dll

01260000[00070000]
[ M] 172. c:\program files\rising\antispyware\pset.dll

012D0000[0002A000]
[ M] 173. c:\program files\rising\antispyware\pdefend.dll

01520000[000B6000]
[ M] 174. c:\program files\rising\antispyware\ptools.dll

016E0000[0008C000]
[ M] 175. c:\program files\rising\antispyware\psysinfo.dll

422B0000[005CD000]
[AM] 45. c:\windows\system32\ieframe.dll

23900000[00040000]
[ M] 113. c:\program files\rising\antispyware\pngdll.dll

019E0000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

04D10000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

05A90000[00028000]
[ M] 102. c:\program files\rising\rav\ravscrch.dll

30000000[003AF000]
[ M] 103. c:\windows\system32\macromed\flash\flash9f.ocx

72C80000[00008000]
[ M] 104. c:\windows\system32\msacm32.drv

07800000[00085000]
[ M] 176. c:\program files\rising\antispyware\kengine.dll

07890000[00045000]
[ M] 177. c:\program files\rising\antispyware\posttrt.dll

02F30000[00010000]
[ M] 178. c:\program files\rising\antispyware\kscanex.dll

07AE0000[0002F000]
[ M] 179. c:\program files\rising\antispyware\engine.dll

07B10000[00033000]
[ M] 180. c:\program files\rising\antispyware\rsdialog.dll

我就是法律 - 2008-10-5 11:24:00

+ 00000738(1848) RavStub.exe
00400000[00021000]
[ M] 181. c:\program files\rising\rav\ravstub.exe

10000000[0001F000]
[ M] 116. c:\program files\rising\rav\proccom.dll

00620000[00024000]
[ M] 117. c:\program files\rising\rav\rscommx2.dll

23700000[00028000]
[ M] 118. c:\program files\rising\rav\rscommon.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 000007d0(2000) alg.exe
60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00700000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

00900000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

+ 000007dc(2012) Explorer.EXE
00400000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

422B0000[005CD000]
[AM] 45. c:\windows\system32\ieframe.dll

021B0000[00029000]
[AM] 48. c:\program files\360safe\safemon\safemon.dll

022C0000[00014000]
[ M] 182. c:\program files\nero\nero 7\nero backitup\nbshell.dll

7C250000[00102000]
[ M] 183. c:\program files\nero\nero 7\nero backitup\mfc71u.dll

023E0000[00056000]
[ M] 184. c:\program files\nero\nero 7\nero backitup\msvcr71.dll

7C3A0000[0007B000]
[ M] 185. c:\program files\nero\nero 7\nero backitup\msvcp71.dll

5D360000[0000A000]
[ M] 80. c:\windows\system32\mfc71chs.dll

022E0000[0002E000]
[AM] 60. c:\program files\winrar\rarext.dll

72C80000[00008000]
[ M] 104. c:\windows\system32\msacm32.drv

04430000[00020000]
[AM] 47. c:\program files\thunder\comdlls\xunleibho_now.dll

04DD0000[0000F000]
[AM] 52. c:\program files\haali\matroskasplitter\mmfinfo.dll

04DE0000[0000B000]
[ M] 186. c:\program files\haali\matroskasplitter\mkunicode.dll

052E0000[0004C000]
[ M] 187. c:\program files\common files\adobe\acrobat\activex\pdfshell.chs

05330000[001B9000]
[AM] 53. c:\program files\common files\ahead\lib\nerodigitalext.dll

7C140000[00103000]
[ M] 188. c:\program files\common files\ahead\lib\mfc71.dll

044E0000[0005B000]
[AM] 54. c:\program files\common files\adobe\acrobat\activex\pdfshell.dll

05C00000[00836000]
[AM] 56. c:\windows\system32\nvcpl.dll

04540000[00037000]
[ M] 189. c:\windows\system32\nvrszhc.dll

04580000[0005A000]
[ M] 190. c:\windows\system32\nvapi.dll

04D40000[00073000]
[AM] 57. c:\windows\system32\nvshell.dll

04E90000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

+ 00000a90(2704) QQ.exe
00400000[00202000]
[ M] 191. c:\program files\tencent\qq.exe

61510000[0034E000]
[ M] 192. c:\program files\tencent\qqbaseclassindll.dll

10000000[000FF000]
[ M] 193. c:\program files\tencent\qqhelperdll.dll

600A0000[00071000]
[ M] 194. c:\program files\tencent\basicctrldll.dll

60B30000[000F2000]
[ M] 195. c:\program files\tencent\mfc42.dll

00390000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

003A0000[0001F000]
[ M] 196. c:\program files\tencent\loginqq.dll

003C0000[0000C000]
[ M] 197. c:\program files\tencent\msimg32.dll

011D0000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

02A90000[000DC000]
[ M] 198. c:\program files\tencent\caihong.dll

608E0000[00043000]
[ M] 199. c:\program files\tencent\loginctrl.dll

60930000[0009D000]
[ M] 200. c:\program files\tencent\loginctrlres.dll

02D90000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

03B90000[0001D000]
[ M] 201. c:\program files\tencent\reporter.dll

62730000[00005000]
[ M] 202. c:\program files\tencent\riched32.dll

626C0000[00068000]
[ M] 203. c:\program files\tencent\riched20.dll

61470000[00041000]
[ M] 204. c:\program files\tencent\qqapi.dll

041D0000[0000A000]
[ M] 205. c:\program files\tencent\txpfproxy.dll

61E70000[0061B000]
[ M] 206. c:\program files\tencent\qqres.dll

62D90000[00021000]
[ M] 207. c:\program files\tencent\wizardctrl.dll

61B00000[000D6000]
[ M] 208. c:\program files\tencent\qqmainframe.dll

60490000[001A3000]
[ M] 209. c:\program files\tencent\gdiplus.dll

628B0000[00022000]
[ M] 210. c:\program files\tencent\unreadmsgmgr.dll

611C0000[002B0000]
[ M] 211. c:\program files\tencent\qqallinone.dll

62750000[0002B000]
[ M] 212. c:\program files\tencent\sccore.dll

60140000[00036000]
[ M] 213. c:\program files\tencent\cameradll.dll

60250000[0019C000]
[ M] 214. c:\program files\tencent\cqqapplication.dll

60440000[00047000]
[ M] 215. c:\program files\tencent\flashavatardll.dll

60CD0000[0005F000]
[ M] 216. c:\program files\tencent\newskin.dll

60AF0000[0003F000]
[ M] 217. c:\program files\tencent\mailsummary.dll

62540000[0002D000]
[ M] 218. c:\program files\tencent\qqspace.dll

05D90000[00031000]
[ M] 219. c:\program files\tencent\vbscript.dll

73460000[0006B000]
[ M] 220. c:\program files\tencent\encode.dll

30000000[003AF000]
[ M] 103. c:\windows\system32\macromed\flash\flash9f.ocx

72C80000[00008000]
[ M] 104. c:\windows\system32\msacm32.drv

422B0000[005CD000]
[AM] 45. c:\windows\system32\ieframe.dll

614C0000[00043000]
[ M] 221. c:\program files\tencent\qqavatar.dll

624C0000[00070000]
[ M] 222. c:\program files\tencent\qqsettingctrl.dll

60D30000[00015000]
[ M] 223. c:\program files\tencent\oemapplication.dll

61AB0000[00018000]
[ M] 224. c:\program files\tencent\qqknowledgesearch.dll

61920000[0008A000]
[ M] 225. c:\program files\tencent\qqgroupmng.dll

61D30000[0013A000]
[ M] 226. c:\program files\tencent\qqplugin.dll

62570000[00051000]
[ M] 227. c:\program files\tencent\qqsysmsgmng.dll

026D0000[0000D000]
[AM] 49. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll

628E0000[0001D000]
[ M] 228. c:\program files\tencent\userdefinedhead.dll

61860000[0000E000]
[ M] 229. c:\program files\tencent\qqconfigplugin.dll

61870000[00056000]
[ M] 230. c:\program files\tencent\qqcustomface.dll

626A0000[00017000]
[ M] 231. c:\program files\tencent\qringmng.dll

61AF0000[00010000]
[ M] 232. c:\program files\tencent\qqmagicface.dll

607C0000[0001A000]
[ M] 233. c:\program files\tencent\imageole.dll

609D0000[000D5000]
[ M] 234. c:\program files\tencent\longconnection.dll

60180000[0004F000]
[ M] 235. c:\program files\tencent\commercesmng.dll

60D50000[0000F000]
[ M] 236. c:\program files\tencent\personaldesktop.dll

09670000[00287000]
[ M] 237. c:\program files\tencent\qqaddr.dll

72C60000[00007000]
[ M] 238. c:\windows\system32\msadp32.acm

62490000[0002D000]
[ M] 239. c:\program files\tencent\qqscenemng.dll

03FD0000[0002A000]
[ M] 240. c:\program files\tencent\groupconnection.dll

618E0000[0002C000]
[ M] 241. c:\program files\tencent\qqfiletransfer.dll

04080000[00037000]
[ M] 242. c:\program files\tencent\addrsearch.dll

+ 00000ac0(2752) WoptiUtilities.exe
00400000[0059C000]
[ M] 243. c:\program files\wopti\woptiutilities.exe

00380000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

00390000[00066000]
[ M] 244. c:\program files\wopti\woptip2p.dll

10000000[000AD000]
[ M] 245. c:\program files\wopti\d3dx81ab.dll

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

01840000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

01880000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

01AC0000[00029000]
[AM] 48. c:\program files\360safe\safemon\safemon.dll

01B70000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

16210000[0027E000]
[AM] 63. c:\windows\system32\wpdshext.dll

10930000[00049000]
[ M] 246. c:\windows\system32\portabledeviceapi.dll

07160000[00046000]
[AM] 62. c:\windows\system32\audiodev.dll

044C0000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

03B10000[0005A000]
[ M] 190. c:\windows\system32\nvapi.dll

72C80000[00008000]
[ M] 104. c:\windows\system32\msacm32.drv

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

05BD0000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

+ 00000ae0(2784) knownsvr.exe
00400000[00072000]
[ M] 247. c:\program files\rising\antispyware\knownsvr.exe

10000000[0002F000]
[ M] 115. c:\program files\rising\antispyware\ncomm.dll

00380000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

00CC0000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00CF0000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

012B0000[00029000]
[AM] 48. c:\program files\360safe\safemon\safemon.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

029A0000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

+ 00000b14(2836) wmiprvse.exe
60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

007D0000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

+ 00000b94(2964) TXPlatform.exe
00400000[00025000]
[ M] 248. c:\program files\tencent2\tm2008\bin\txplatform.exe

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00B10000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

00C80000[00029000]
[AM] 48. c:\program files\360safe\safemon\safemon.dll

01100000[0000A000]
[ M] 205. c:\program files\tencent\txpfproxy.dll

01130000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

+ 00000c38(3128) AppleMobileDeviceService.exe
00400000[0001D000]
[AM] 1. c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

006A0000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

00860000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

+ 00000ca0(3232) stormliv.exe
00400000[00075000]
[ M] 249. c:\program files\stormii\stormliv.exe

75FF0000[00065000]
[ M] 250. c:\program files\stormii\msvcp60.dll

00380000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00AC0000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

00D60000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

+ 00000cb0(3248) TheWorld.exe
00400000[0029D000]
[AM] 72. c:\program files\theworld 2.0\theworld.exe

00390000[00009000]
[ M] 95. c:\windows\system32\normaliz.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00FB0000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

70000000[00019000]
[ M] 89. c:\program files\rising\rfw\ijt_base.dll

75000000[0000F000]
[ M] 90. c:\program files\rising\rfw\olemon.dll

01090000[00029000]
[AM] 48. c:\program files\360safe\safemon\safemon.dll

01250000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

014C0000[0002F000]
[ M] 100. c:\program files\theworld 2.0\languages\chs.dll

422B0000[005CD000]
[AM] 45. c:\windows\system32\ieframe.dll

042A0000[0000D000]
[AM] 49. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll

325C0000[00012000]
[AM] 59. c:\program files\microsoft office\office11\msohev.dll

042D0000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

05D60000[005CF000]
[ M] 92. c:\windows\system32\gamelink.dll

16080000[00025000]
[ M] 93. c:\program files\bonjour\mdnsnsp.dll

06A80000[00028000]
[ M] 102. c:\program files\rising\rav\ravscrch.dll

61930000[0004A000]
[ M] 105. c:\program files\internet explorer\ieproxy.dll

72C80000[00008000]
[ M] 104. c:\windows\system32\msacm32.drv

+ 00000d18(3352) nvsvc32.exe
00400000[0002B000]
[AM] 6. c:\windows\system32\nvsvc32.exe

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00760000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

012E0000[0005A000]
[ M] 190. c:\windows\system32\nvapi.dll

00D80000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

01140000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

+ 00000dd8(3544) svchost.exe

+ 00000e7c(3708) Hotkey.exe
00400000[00022000]
[AM] 12. c:\program files\thunis\emergency center\hotkey.exe

5F400000[000E5000]
[ M] 251. c:\program files\thunis\emergency center\mfc42d.dll

10200000[00060000]
[ M] 252. c:\program files\thunis\emergency center\msvcrtd.dll

10480000[0007E000]
[ M] 253. c:\program files\thunis\emergency center\msvcp60d.dll

60000000[00074000]
[AM] 73. c:\windows\system32\kmon.dll

10000000[0002E000]
[ M] 97. c:\program files\rising\antispyware\comx3.dll

00BC0000[00019000]
[ M] 98. c:\program files\rising\antispyware\syslay.dll

41D50000[00045000]
[ M] 96. c:\windows\system32\iertutil.dll

00E50000[00012000]
[ M] 101. c:\program files\thunis\emergency center\sbhotkey.dll

00FE0000[0014F000]
[ M] 99. c:\windows\system32\sogoupy.ime

晕４ - 2008-10-5 11:25:00

不是有映像挟持项吗？:default2:

aaccbbdd - 2008-10-5 11:26:00

正常吧

楼主描述下情况

我就是法律 - 2008-10-5 13:21:00

机器关机的时候需要3分多钟
尤其到WINDOWS那
还有开始程序里无缘无故多了个rsautorunsdisabled
上网查有说是病毒有说是自动程序

aaccbbdd - 2008-10-5 14:47:00

那卡卡日志日志不清楚

解决问题需要配合

1.扫日志前建议清理助手清理系统
http://www.arswp.com/download.html
升级清理助手，只清理高危险项目

如清理无效
2.扫日志前关闭无用进程，如QQ，迅雷及播放器程序

3.到官方下载SReng
下载地址
http://www.kztechs.com/sreng/download.html
SREng/智能扫描
等扫描完成,保存日志(LOG格式)

PS：如主程序SREng**.exe无法运行,导致无法扫描日志
将主程序改名为小狮子.bat

4.为了对病毒准确定位和判断，找出替换文件的病毒，必须同时上传金山清理专家日志
下载金山清理专家
http://www.duba.net/qing/
金山清理专家-在线系统诊断（隐藏安全项）-导出诊断报告-（全选）-导出报告

5.2份日志/报告以附件上传（点击我回的贴的右下角的“引用”，然后就应该知道怎么以附件发了），贴到反病毒区.已发帖请跟贴，勿另开新帖。

如以上工具不能打开或正常运行，短消息call我

瑞星卡卡安全论坛