瑞星卡卡电脑诊断日志 v1.30 (2008-6-8 5:1:51) 北京瑞星科技股份有限公司 注释: [A]表示该文件存在自启动关联; [M]表示该文件在内存中; + 注册表自运行项目 + 系统服务 + HKLM\System\CurrentControlSet\Services ccosm [A ] 1. z:\暴风影音\stormliv.exe 北京暴风网际科技有限公司 暴风影音媒体控制中心 .text,.rdata,.data,.rsrc, NVSvc [A ] 2. c:\windows\system32\nvsvc32.exe NVIDIA Corporation NVIDIA Driver Helper Service, Version 162.50 .text,.rdata,.data,.rsrc, ose [A ] 3. c:\program files\common files\microsoft shared\source engine\ose.exe Microsoft Corporation Office Source Engine .text,.data,.rsrc, RsRavMon [A ] 4. z:\瑞星\rising\rising\rav\ravmond.exe Beijing Rising Technology Co., Ltd. Rising Realtime Moniter .text,.rdata,.data,.rsrc, UMWdf [A ] 5. c:\windows\system32\wdfmgr.exe Microsoft Corporation Windows User Mode Driver Manager .text,.data,.rsrc, + 内核驱动 + HKLM\System\CurrentControlSet\Services HdAudAddService [A ] 6. c:\windows\system32\drivers\hdaudio.sys Windows (R) Server 2003 DDK provider High Definition Audio Function Driver v1.0a .text,CODE,.rdata,.data,PAGE,PAGED,INIT,.rsrc,.reloc, HDAudBus [A ] 7. c:\windows\system32\drivers\hdaudbus.sys Windows (R) Server 2003 DDK provider High Definition Audio Bus Driver v1.0a .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, HookCont [A ] 8. c:\windows\system32\drivers\hookcont.sys Beijing Rising Technology Co., Ltd HookCont .text,.rdata,.data,INIT,.rsrc,.reloc, HookNtos [A ] 9. c:\windows\system32\drivers\hookntos.sys Beijing Rising Technology Co., Ltd HookNtos .text,.rdata,.data,INIT,.rsrc,.reloc, HookReg [A ] 10. c:\windows\system32\drivers\hookreg.sys Beijing Rising Technology Co., Ltd HookReg .text,.rdata,.data,INIT,.rsrc,.reloc, HookSys [A ] 11. c:\windows\system32\drivers\hooksys.sys Beijing Rising Technology Co., Ltd Hooksys .text,.rdata,.data,INIT,.rsrc,.reloc, KAVBootC [A ] 12. c:\windows\system32\drivers\kavbootc.sys Kingsoft Corporation Kingsoft Boot Clean .text,.data,.CRT,INIT,.rsrc,.reloc, KAVSafe [A ] 13. c:\windows\system32\drivers\kavsafe.sys Kingsoft Corporation KAVSafe Application .text,.data,.CRT,INIT,.rsrc,.reloc, LVUSBSta [A ] 14. c:\windows\system32\drivers\lvusbsta.sys Logitech Inc. USB Statistic Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, PID_08A0 [A ] 15. c:\windows\system32\drivers\lv302av.sys Logitech Inc. Logitech QuickCam Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, RfwBase [A ] 16. c:\windows\system32\drivers\rfwbase.sys Beijing Rising Technology Co., Ltd. net base driver .text,.rdata,.data,INIT,.rsrc,.reloc, RsAntiSpyware [A ] 17. c:\windows\system32\drivers\rsboot.sys Beijing Rising Technology Co., Ltd. Anti-RootKit Driver .text,.rdata,.data,INIT,.rsrc,.reloc, RTLE8023xp [A ] 18. c:\windows\system32\drivers\rtenicxp.sys Realtek Semiconductor Corporation Realtek 10/100/1000 NDIS 5.1 Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SafeBoxKrnl [A ] 19. z:\360\360safebox\safeboxkrnl.sys 360安全中心 360安全卫士 - 保险箱 .text,.rdata,.data,INIT,.rsrc,.reloc, Secdrv [A ] 20. c:\windows\system32\drivers\secdrv.sys Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K. Macrovision SECURITY Driver .text,.rdata,.data,PAGE,INIT,.rsrc,.reloc, SiSide [A ] 21. c:\windows\system32\drivers\siside.sys Silicon Integrated Systems Corp. SiS PCI Mini IDE Driver .text,.rdata,INIT,.rsrc,.reloc, TesSafe [A ] 22. c:\windows\system32\tessafe.sys TENCENT TesSafe NT Driver .text,.rdata,.data,INIT,.rsrc,.reloc, ZSMC211 [A ] 23. c:\windows\system32\drivers\zs211.sys ZSMC.Corporation Video and Capture Device Driver .text,.rdata,.data,PAGECONS,INIT,.rsrc,.reloc, + 系统登陆自运行 + HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify WgaLogon [AM] 24. c:\windows\system32\wgalogon.dll Microsoft Corporation Windows 正版增值计划通知 .text,.data,.rsrc,.reloc, + IE浏览器加载模块 + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C} [AM] 25. c:\windows\system32\kakatool.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware Toolbar .text,.rdata,.data,MonitorS,.rsrc,.reloc, + HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks {CFBFAE00-17A6-11D0-99CB-00C04FD64497} [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {01443AEC-0FD1-40fd-9C87-E93D1494C233} [AM] 27. z:\迅雷\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, {889D2FEB-5411-4565-8998-1DD2C5261283} [AM] 28. z:\迅雷\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, {B69F34DD-F0F9-42DC-9EDD-957187DA688D} [AM] 29. z:\360\360safe\safemon\safemon.dll 360.CN 360安全卫士实时保护模块 .text,.rdata,.data,.share,.rsrc,.reloc, {D963BE1A-6B35-47DB-B002-49FAE71D85CC} [AM] 30. z:\金山清理\kingsoft antispy\kasbrowsershield.dll Kingsoft Corporation KASBrowserShield Module .text,.rdata,.data,.rsrc,.reloc, + 资源管理器加载模块 + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter text/xml [A ] 31. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll Microsoft Corporation Microsoft Office XML MIME Filter .text,.data,.cdata,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} [A ] 32. c:\windows\system32\ieudinit.exe Microsoft Corporation IE Per User Active Setup Uninstall Utility .text,.data,.rsrc,.reloc, + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved HyperTerminal Icon Ext [A ] 33. c:\windows\system32\hticons.dll Hilgraeve, Inc. HyperTerminal Applet Library .text,.data,.rsrc,.reloc, IE Search Band [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Shell DocObject Viewer [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, InternetShortcut [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url History Service [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, History [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Temporary Internet Files [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Url Search Hook [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, The Internet [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Internet Name Space [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Portable Media Devices [A ] 34. c:\windows\system32\audiodev.dll Microsoft Corporation 便携媒体设备命令行解释器扩展 .text,.data,.rsrc,.reloc, Portable Media Devices Menu [A ] 34. c:\windows\system32\audiodev.dll Microsoft Corporation 便携媒体设备命令行解释器扩展 .text,.data,.rsrc,.reloc, WinRAR shell extension [A ] 35. c:\program files\winrar\rarext.dll .text,.data,.tls,.idata,.edata,.rsrc,.reloc, Microsoft Office HTML Icon Handler [AM] 36. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, Web Folders [A ] 37. c:\program files\common files\microsoft shared\web folders\msonsext.dll Microsoft Corporation Microsoft Web Folders .text,.data,.rsrc,.reloc, NvCpl DesktopContext Class [A ] 38. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.rdata,.data,CONST,.rsrc,.reloc, Play on my TV helper [A ] 38. c:\windows\system32\nvcpl.dll NVIDIA Corporation NVIDIA Display Properties Extension .text,.rdata,.data,CONST,.rsrc,.reloc, IE Microsoft BrowserBand [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Fade Task [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Desk Bar [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE AutoComplete [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Navigation Bar [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Site [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Menu Band [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft History AutoComplete List [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Tracking Shell Menu [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE IShellFolderBand [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE BandProxy [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE MRU AutoComplete List [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE RSS Feeder Folder [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Shell Folder AutoComplete List [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Microsoft Multiple AutoComplete List Container [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, Microsoft Browser Architecture [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Rebar BandSite [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Shell Band Site Menu [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, &Links [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Registry Tree Options Utility [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE User Assist [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, IE Custom MRU AutoCompleted List [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, + 用户登陆自运行项目 + HKLM\Software\Microsoft\Windows\CurrentVersion\Run 360Safebox [A ] 39. z:\360\360safebox\safeboxtray.exe 360安全中心 360保险箱 .text,.rdata,.data,.rsrc, 360Safetray [A ] 40. z:\360\360safe\safemon\360tray.exe 奇虎网 360安全卫士实时保护模块 .text,.rdata,.data,.rsrc, runeip [A ] 41. z:\瑞星\runiep.exe Beijing Rising Technology Co., Ltd. Rising AntiSpyware Monitor .text,.rdata,.data,.rsrc, RfwMain [A ] 42. z:\瑞星\rising\rfw\rfwmain.exe Beijing Rising Technology Co., Ltd. Rising Personal FireWall Main Program .text,.rdata,.data,.rsrc, + 映像劫持 + HKCR\.html htmlfile\Edit\Command [A ] 43. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + HKCR\.htm htmlfile\Edit\Command [A ] 43. c:\program files\microsoft office\office11\msohtmed.exe Microsoft Corporation Microsoft Office 2003 component .text,.data,.cdata,.rsrc, + 打印机监控 + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors Microsoft Document Imaging Writer Monitor [A ] 44. c:\windows\system32\mdimon.dll Microsoft Corporation Microsoft? Document Imaging .text,.data,.rsrc,.reloc, + 正在运行的进程 + 00000184(388) svchost.exe 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000268(616) smss.exe + 000002dc(732) csrss.exe 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000324(804) winlogon.exe 012D0000[0003B000] [AM] 24. c:\windows\system32\wgalogon.dll Microsoft Corporation Windows 正版增值计划通知 .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 46. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000380(896) services.exe 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 0000038c(908) lsass.exe 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000003dc(988) TXPlatform.exe 00400000[00026000] [ M] 47. z:\qq\txplatform.exe Tencent TM2008 .text,.rdata,.data,.rsrc, 10000000[00028000] [AM] 29. z:\360\360safe\safemon\safemon.dll 360.CN 360安全卫士实时保护模块 .text,.rdata,.data,.share,.rsrc,.reloc, 00BE0000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000454(1108) svchost.exe 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000480(1152) runiep.exe 7C140000[00103000] [ M] 48. z:\瑞星\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 49. z:\瑞星\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 00D70000[00020000] [ M] 50. c:\windows\system32\ieprot.dll Beijing Rising Technology Co., Ltd. IE Protector .text,.rdata,.data,.rsrc,.reloc, 10000000[00028000] [AM] 29. z:\360\360safe\safemon\safemon.dll 360.CN 360安全卫士实时保护模块 .text,.rdata,.data,.share,.rsrc,.reloc, 41D50000[00045000] [ M] 51. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 00FB0000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000004c4(1220) svchost.exe + 0000051c(1308) svchost.exe 015D0000[00009000] [ M] 52. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 41D50000[00045000] [ M] 51. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 000005a0(1440) svchost.exe + 0000062c(1580) svchost.exe + 00000690(1680) conime.exe 10000000[00028000] [AM] 29. z:\360\360safe\safemon\safemon.dll 360.CN 360安全卫士实时保护模块 .text,.rdata,.data,.share,.rsrc,.reloc, 00BA0000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000730(1840) Explorer.EXE 00400000[00009000] [ M] 52. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 41D50000[00045000] [ M] 51. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 422B0000[005CD000] [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 46. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 10000000[00028000] [AM] 29. z:\360\360safe\safemon\safemon.dll 360.CN 360安全卫士实时保护模块 .text,.rdata,.data,.share,.rsrc,.reloc, 01F50000[0002C000] [AM] 27. z:\迅雷\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, 02270000[00031000] [AM] 28. z:\迅雷\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 23CE0000[0000E000] [ M] 53. z:\迅雷\components\resworker\dsbho_01.dll Thunder Networking Technologies,LTD DsBho .text,.rdata,.data,.rsrc,.reloc, 23C90000[0001E000] [ M] 54. z:\迅雷\components\resworker\dataprocessor_01.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, 00DB0000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, + 00000ad8(2776) iexplore.exe 41D50000[00045000] [ M] 51. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 422B0000[005CD000] [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 00AE0000[00028000] [AM] 29. z:\360\360safe\safemon\safemon.dll 360.CN 360安全卫士实时保护模块 .text,.rdata,.data,.share,.rsrc,.reloc, 5DFF0000[0002F000] [ M] 55. c:\windows\system32\ieui.dll Microsoft Corporation Internet Explorer UI Engine .text,.data,.rsrc,.reloc, 325C0000[00012000] [AM] 36. c:\program files\microsoft office\office11\msohev.dll Microsoft Corporation Microsoft Office 2003 component .text,.data,.rsrc,.reloc, 61930000[0004A000] [ M] 56. c:\program files\internet explorer\ieproxy.dll Microsoft Corporation IE ActiveX Interface Marshaling Library .text,.orpc,.data,.rsrc,.reloc, 01AF0000[00009000] [ M] 52. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 02030000[00063000] [AM] 25. c:\windows\system32\kakatool.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware Toolbar .text,.rdata,.data,MonitorS,.rsrc,.reloc, 076E0000[0002C000] [AM] 27. z:\迅雷\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, 07720000[00031000] [AM] 28. z:\迅雷\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 23CE0000[0000E000] [ M] 53. z:\迅雷\components\resworker\dsbho_01.dll Thunder Networking Technologies,LTD DsBho .text,.rdata,.data,.rsrc,.reloc, 23C90000[0001E000] [ M] 54. z:\迅雷\components\resworker\dataprocessor_01.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, 077F0000[00043000] [AM] 30. z:\金山清理\kingsoft antispy\kasbrowsershield.dll Kingsoft Corporation KASBrowserShield Module .text,.rdata,.data,.rsrc,.reloc, 07860000[0003E000] [ M] 57. z:\金山清理\kingsoft antispy\iebuddy.dll Kingsoft Corporation Kingsoft Trojan Webshield .text,.rdata,.data,.rsrc,.reloc, 078C0000[00033000] [ M] 58. z:\金山清理\kingsoft antispy\iebuddyext.dll Kingsoft Corporation Kingsoft IEBuddy Extension .text,.rdata,.data,.rsrc,.reloc, 782E0000[0010F000] [ M] 59. z:\金山清理\kingsoft antispy\mfc80u.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 78130000[0009B000] [ M] 60. z:\金山清理\kingsoft antispy\msvcr80.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C420000[00087000] [ M] 61. z:\金山清理\kingsoft antispy\msvcp80.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 07930000[00024000] [ M] 62. z:\金山清理\kingsoft antispy\kis.dll Kingsoft Corporation Kingsoft Antivirus Common Module .text,.rdata,.data,.rsrc,.reloc, 07980000[00037000] [ M] 63. z:\金山清理\kingsoft antispy\dump.dll Kingsoft Corporation Dump Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 07AD0000[0007E000] [ M] 64. z:\金山清理\kingsoft antispy\kantray.dll Kingsoft Corporation Kingsoft Antispy Systray Module .text,.rdata,.data,.rsrc,.reloc, 07D70000[000D1000] [ M] 65. z:\金山清理\kingsoft antispy\kavafish.dll Kingsoft Corporation KAVAntiFishingEx Module .text,.rdata,.data,.rsrc,.reloc, 42920000[00060000] [ M] 66. c:\windows\system32\ieapfltr.dll Microsoft Corporation Microsoft Phishing Filter .text,.data,.rsrc,.reloc, 72C80000[00008000] [ M] 46. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 30000000[003AF000] [ M] 67. c:\windows\system32\macromed\flash\flash9f.ocx Adobe Systems, Inc. Adobe Flash Player 9.0 r124 .text,.rdata,.data,.rodata,.rsrc,.reloc, 47060000[00021000] [ M] 68. c:\windows\system32\xmllite.dll Microsoft Corporation Microsoft XmlLite Library .text,.data,.rsrc,.reloc, + 00000f4c(3916) Ras.exe 00380000[00009000] [ M] 52. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 41D50000[00045000] [ M] 51. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 7C140000[00103000] [ M] 48. z:\瑞星\mfc71.dll Microsoft Corporation MFCDLL Shared Library - Retail Version .text,.data,.rsrc,.reloc, 7C340000[00056000] [ M] 49. z:\瑞星\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 7C3A0000[0007B000] [ M] 69. z:\瑞星\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 10000000[00013000] [ M] 70. z:\瑞星\topsoft.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware TopSoft .text,.rdata,.data,.rsrc,.reloc, 00390000[00032000] [ M] 71. z:\瑞星\ncomm.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 00F20000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 00F50000[00028000] [AM] 29. z:\360\360safe\safemon\safemon.dll 360.CN 360安全卫士实时保护模块 .text,.rdata,.data,.share,.rsrc,.reloc, 01110000[0014D000] [ M] 72. z:\瑞星\rasgui.dll Beijing Rising Technology Co., Ltd. RasGUI .text,.rdata,.data,.rsrc,.reloc, 23800000[00022000] [ M] 73. z:\瑞星\rsxml.dll Beijing Rising Technology Co., Ltd. RsXML .text,.rdata,.data,.rsrc,.reloc, 422B0000[005CD000] [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 025E0000[00018000] [ M] 74. z:\瑞星\ktrojan.dll Beijing Rising Technology Co., Ltd. Rising AntiSpyware .text,.rdata,.data,.rsrc,.reloc, 02600000[0002F000] [ M] 75. z:\瑞星\engine.dll Beijing Rising Technology Co., Ltd. kaka engine .text,.rdata,.data,.rsrc,.reloc, 02640000[00040000] [ M] 76. z:\瑞星\rsdialog.dll Beijing Rising Technology Co., Ltd. Rsdiaglo DLL .text,.rdata,.data,.rsrc,.reloc, 02690000[00024000] [ M] 77. z:\瑞星\scanunv.dll Beijing Rising Technology Co., Ltd. .text,.rdata,.data,.rsrc,.reloc, 026D0000[0001F000] [ M] 78. z:\瑞星\secscan.dll Copyright(c) 1998-2006 Beijing Rising Technology Corporation Limited SecScan Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 027B0000[00015000] [ M] 79. z:\瑞星\secex.dll Copyright(c) 1998-2006 Beijing Rising Technology Corporation Limited SecScanE Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 02D90000[00012000] [ M] 80. z:\瑞星\zip.dll rising zip UPX0,UPX1,.rsrc, 30000000[003AF000] [ M] 67. c:\windows\system32\macromed\flash\flash9f.ocx Adobe Systems, Inc. Adobe Flash Player 9.0 r124 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 46. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, + 00000f6c(3948) Thunder5.exe 00400000[001CA000] [ M] 81. z:\迅雷\program\thunder5.exe Thunder Networking Technologies,LTD Thunder .text,.rdata,.data,.rsrc, 228C0000[0000C000] [ M] 82. z:\迅雷\program\bugreport.dll Thunder Networking Technologies,LTD BugReport .text,.rdata,.data,.rsrc,.reloc, 00380000[00009000] [ M] 52. c:\windows\system32\normaliz.dll Microsoft Corporation Unicode Normalization DLL .text,.data,.rsrc,.reloc, 41D50000[00045000] [ M] 51. c:\windows\system32\iertutil.dll Microsoft Corporation Run time utility for Internet Explorer .text,.data,.rsrc,.reloc, 10000000[00019000] [ M] 45. c:\documents and settings\老鬼下山\local settings\temp\rsv1c.tmp Beijing Rising Tech. Co., Ltd. Protect ApiHook Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 011F0000[00028000] [AM] 29. z:\360\360safe\safemon\safemon.dll 360.CN 360安全卫士实时保护模块 .text,.rdata,.data,.share,.rsrc,.reloc, 22AD0000[0003C000] [ M] 83. z:\迅雷\program\taskmanager.dll Thunder Networking Technologies,LTD TaskManager DLL .text,.rdata,.data,.rsrc,.reloc, 215E0000[0003D000] [ M] 84. z:\迅雷\program\download_interface.dll Thunder Networking Technologies,LTD Thunder .text,.rdata,.data,.rsrc,.reloc, 21B80000[0007B000] [ M] 85. z:\迅雷\program\msvcp71.dll Microsoft Corporation Microsoft? C++ Runtime Library .text,.rdata,.data,.rsrc,.reloc, 21C90000[00056000] [ M] 86. z:\迅雷\program\msvcr71.dll Microsoft Corporation Microsoft? C Runtime Library .text,.rdata,.data,.rsrc,.reloc, 211D0000[00068000] [ M] 87. z:\迅雷\program\asyn_frame.dll Thunder Networking Technologies,LTD asyn_frame .text,.rdata,.data,.rsrc,.reloc, 212B0000[00019000] [ M] 88. z:\迅雷\program\atl71.dll Microsoft Corporation ATL Module for Windows (Unicode) .text,.rdata,.data,.rsrc,.reloc, 21EA0000[0001C000] [ M] 89. z:\迅雷\program\p2p_upload.dll Thunder Networking Technologies,LTD p2p upload Module .text,.rdata,.data,.rsrc,.reloc, 21B20000[00029000] [ M] 90. z:\迅雷\program\fs.dll Thunder Networking Technologies,LTD file_io_system Module .text,.rdata,.data,.rsrc,.reloc, 22B60000[0001E000] [ M] 91. z:\迅雷\program\xlnet.dll Thunder Networking Technologies,LTD Xunlei internet API .text,.rdata,.data,.rsrc,.reloc, 22120000[000B3000] [ M] 92. z:\迅雷\program\ptl.dll Thunder Networking Technologies,LTD ptl .text,.rdata,.data,.rsrc,.reloc, 21300000[00046000] [ M] 93. z:\迅雷\program\backend_agent.dll Thunder Networking Technologies,LTD backend_agent_plugin Module .text,.rdata,.data,.rsrc,.reloc, 22800000[00026000] [ M] 94. z:\迅雷\program\xl_stat.dll Thunder Networking Technologies,LTD xl_stat Module .text,.rdata,.data,.rsrc,.reloc, 229A0000[0002B000] [ M] 95. z:\迅雷\program\itargetad.dll Thunder Networking Technologies,LTD iTargetAD DLL .text,.rdata,.data,.rsrc,.reloc, 228A0000[0000A000] [ M] 96. z:\迅雷\program\bhostub.dll Thunder Networking Technologies,LTD BHOStub DLL .text,.rdata,.data,.rsrc,.reloc, 23200000[00014000] [ M] 97. z:\迅雷\components\downandplay\downandplay.dll DownAndPlay Module .text,.rdata,.data,.idata,.rsrc,.reloc, 30000000[003AF000] [ M] 67. c:\windows\system32\macromed\flash\flash9f.ocx Adobe Systems, Inc. Adobe Flash Player 9.0 r124 .text,.rdata,.data,.rodata,.rsrc,.reloc, 72C80000[00008000] [ M] 46. c:\windows\system32\msacm32.drv Microsoft Corporation Microsoft Sound Mapper .text,.data,.rsrc,.reloc, 422B0000[005CD000] [AM] 26. c:\windows\system32\ieframe.dll Microsoft Corporation Internet Explorer .text,.data,.rsrc,.reloc, 21D50000[00087000] [ M] 98. z:\迅雷\program\p2p.dll Thunder Networking Technologies,LTD p2p Module .text,.rdata,.data,.rsrc,.reloc, 226F0000[0005C000] [ M] 99. z:\迅雷\program\xldc.dll Thunder Networking Technologies,LTD xldc module .text,.rdata,.data,.rsrc,.reloc, 224D0000[00102000] [ M] 100. z:\迅雷\program\stream.dll Thunder Networking Technologies,LTD Stream Module .text,.rdata,.data,.rsrc,.reloc, 21EF0000[0010E000] [ M] 101. z:\迅雷\program\p2sp.dll Thunder Networking Technologies,LTD p2sp Module .text,.rdata,.data,.rsrc,.reloc, 21670000[00041000] [ M] 102. z:\迅雷\program\down_dispatcher.dll Thunder Networking Technologies,LTD down_dispatcher Module .text,.rdata,.data,.rsrc,.reloc, 23600000[00017000] [ M] 103. z:\迅雷\components\inmedia\iembedshell.dll 　 iEmbedShell .text,.rdata,.data,.rsrc,.reloc, 23550000[0004B000] [ M] 104. z:\迅雷\components\inmedia\iembed17.dll Thunder Networking Technologies,LTD iEmbed Module .text,.rdata,.data,.rsrc,.reloc, 23750000[00043000] [ M] 105. z:\迅雷\components\inmedia\playerhelper.dll thunder PlayerHelper Module .text,.rdata,.data,.rsrc,.reloc, 236D0000[0000E000] [ M] 106. z:\迅雷\components\inmedia\xlipc.dll Thunder Networking Technologies,LTD XLIPC Module .text,.rdata,.data,.rsrc,.reloc, 21E70000[0000E000] [ M] 107. z:\迅雷\program\p2p_local_res.dll Thunder Networking Technologies,LTD p2p_local_res Module .text,.rdata,.data,.rsrc,.reloc, 21150000[0003C000] [ M] 108. z:\迅雷\program\al.dll Thunder Networking Technologies,LTD al Module .text,.rdata,.data,.rsrc,.reloc, 23C40000[0001E000] [ M] 109. z:\迅雷\components\p4pclient\p4pclient.dll Thunder Networking Technologies,LTD Thunder P4P Client .text,.rdata,.data,.rsrc,.reloc, 21AC0000[00021000] [ M] 110. z:\迅雷\program\emule_id.dll Thunder Networking Technologies,LTD emule_id .text,.rdata,.data,.rsrc,.reloc, 22C80000[001DB000] [ M] 111. z:\迅雷\components\community\xlcommunity.dll Thunder Networking Technologies,LTD XLCommunity DLL .text,.rdata,.data,.rsrc,.reloc, 22290000[00040000] [ M] 112. z:\迅雷\program\registerdll.dll Thunder Networking Technologies,LTD .text,.rdata,.data,.rsrc,.reloc, 22A90000[00011000] [ M] 113. z:\迅雷\program\msvcirt.dll Microsoft Corporation Windows NT IOStreams DLL .text,.data,.rsrc,.reloc, 23E60000[00027000] [ M] 114. z:\迅雷\components\security\thundersafe.dll 深圳市迅雷网络技术有限公司 ThunderSafe .text,.rdata,.data,.rsrc,.reloc, 23DF0000[0000C000] [ M] 115. z:\迅雷\components\security\configmanager.dll 深圳市迅雷网络技术有限公司 配置文件管理组件 .text,.rdata,.data,.rsrc,.reloc, 23E20000[00013000] [ M] 116. z:\迅雷\components\security\safemanager.dll 深圳市迅雷网络技术有限公司 SafeManager .text,.rdata,.data,.rsrc,.reloc, 21100000[0001F000] [ M] 117. z:\迅雷\plugins\xlsafehost\xlsafehost.dll 深圳市迅雷网络技术有限公司 XLSafeHost .text,.rdata,.data,.rsrc,.reloc, 09870000[00017000] [ M] 118. z:\迅雷\plugins\xlsafehost\thunderrav\bin\rsscan.dll Beijing Rising Technology Co., Ltd. Plugin Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 23D90000[00022000] [ M] 119. z:\迅雷\components\search\xlsearch.dll Thunder Networking Technologies,LTD XLSearch DLL .text,.rdata,.data,.rsrc,.reloc, 22A00000[0003F000] [ M] 120. z:\迅雷\program\liveupdate.dll Thunder Networking Technologies,LTD LiveUpdate DLL .text,.rdata,.data,.rsrc,.reloc, 23FE0000[00053000] [ M] 121. z:\迅雷\components\xlsoftbase\xlsoftwarebase.dll Thunder Networking Technologies,LTD XLSoftwareBase DLL .text,.rdata,.data,.rsrc,.reloc, 09D90000[00079000] [ M] 122. z:\迅雷\plugins\klscan\pluginklscan.dll Thunder Networking Technologies,LTD XLKLScan Dynamic Link Library .text,.rdata,.data,.rsrc,.reloc, 210D0000[0000A000] [ M] 123. z:\迅雷\plugins\kankantop\kankantop.dll Thunder Networking Technologies,LTD XLKanKanTop DLL .text,.rdata,.data,.rsrc,.reloc, 210A0000[0000A000] [ M] 124. z:\迅雷\plugins\gougoutop\gougoutop.dll Thunder Networking Technologies,LTD XLGouGouTop DLL .text,.rdata,.data,.rsrc,.reloc, 23490000[00010000] [ M] 125. z:\迅雷\components\explorerhelper\explorerhelper.dll Thunder Networking Technologies,LTD ExplorerHelper DLL .text,.rdata,.data,.rsrc,.reloc, 01160000[0001B000] [ M] 126. z:\迅雷\comdlls\thunderagent_now.dll Thunder Networking Technologies,LTD ThunderAgent Module .text,.rdata,.data,.rsrc,.reloc, 09E10000[00031000] [AM] 28. z:\迅雷\comdlls\xunleibho_now.dll Thunder Networking Technologies,LTD XunLeiBHO .text,.rdata,.data,.rsrc,.reloc, 011C0000[0002C000] [AM] 27. z:\迅雷\comdlls\tdatonce_now.dll Thunder Networking Technologies,LTD 迅雷浏览器高级特性支持模块 .text,.rdata,.data,.rsrc,.reloc, 23EC0000[0002F000] [ M] 127. z:\迅雷\components\tips\tipsclient.dll Thunder Networking Technologies,LTD TipsClient Module .text,.rdata,.data,.rsrc,.reloc, 23F90000[0001C000] [ M] 128. z:\迅雷\components\vpshell\vpshell.dll 迅雷网络 VPShell DLL .text,.rdata,.data,.rsrc,.reloc, 23F60000[0000B000] [ M] 129. z:\迅雷\components\userexperience\userexperience.dll Thunder Networking Technologies,LTD UserExperience DLL .text,.rdata,.data,.rsrc,.reloc, 23D10000[0001F000] [ M] 130. z:\迅雷\components\resworker\dsxlcom.dll DsXlCom DLL .text,.rdata,.data,.rsrc,.reloc, 23C90000[0001E000] [ M] 54. z:\迅雷\components\resworker\dataprocessor_01.dll Thunder Networking Technologies,LTD DataProcessor .text,.rdata,.data,.rsrc,.reloc, 23D60000[00008000] [ M] 131. z:\迅雷\components\resworker\mediaworker.dll Thunder Networking Technologies,LTD ExtractMediaTag DLL .text,.rdata,.data,.rsrc,.reloc, 23F30000[0000E000] [ M] 132. z:\迅雷\components\tips\xlipc.dll Thunder Networking Technologies,LTD XLIPC Module .text,.rdata,.data,.rsrc,.reloc, 23450000[00011000] [ M] 133. z:\迅雷\components\downloadstat\downloadstat.dll Thunder Networking Technologies,LTD 下载纠错插件 .text,.rdata,.data,.rsrc,.reloc, 213B0000[00022000] [ M] 134. z:\迅雷\program\bd.dll Thunder Networking Technologies,LTD bd Module .text,.rdata,.data,.rsrc,.reloc, 73900000[0002D000] [ M] 135. c:\windows\system32\jpwb.ime 常诚研制 极品五笔输入法 版本6.8 .text,.data,.sgroup,.ShareDa,.rsrc,.reloc, 61930000[0004A000] [ M] 56. c:\program files\internet explorer\ieproxy.dll Microsoft Corporation IE ActiveX Interface Marshaling Library .text,.orpc,.data,.rsrc,.reloc,