为什么我的RAV突然一天出项这个毛病，怎么都打不开，请问怎么办，急！

【回复“咸鱼阿宝”的帖子】


http://download.rising.com.cn/for_down/kakatool/kakasetupv4.exe下载卡卡上网安全助手4.0
1 运行瑞星卡卡上网安全助手
2 诊断求助=》电脑诊断日志
3 选择"忽略系统文件"、"文件详细信息"、"文件名相似分析"3个选项
4 开始扫描＝》导出信息，导成txt格式（也可以是htm格式方便自己看，不过论坛不能上传htm格式）
5 把日志中的报告完整拷贝贴上来，不要修改（一次发不完请分次发上来）
6 扫日志的时候尽量把不必要的软件关闭 如QQ TM等
7 把扫描出来的可疑文件上传给瑞星http://up.rising.com.cn/webmail/uploadnew.htm

瑞星卡卡电脑诊断日志 v1.20 (2007-7-12 19:23:2)  北京瑞星科技股份有限公司

注释:[A]表示该文件存在自启动关联;
[M]表示该文件在内存中;

+ 注册表自运行项目
  + Win32 Services
    + HKLM\System\CurrentControlSet\Services
      Ip6FwHlp
        [A ] 1. c:\windows\system32\ip6fwhlp.dll
      NVSvc
        [AM] 2. c:\windows\system32\nvsvc32.exe
      ose
        [A ] 3. c:\program files\common files\microsoft shared\source engine\ose.exe
      RfwProxySrv
        [A ] 4. c:\program files\rising\rfw\rfwproxy.exe
      RfwService
        [A ] 5. c:\program files\rising\rfw\rfwsrv.exe
      RsCCenter
        [A ] 6. c:\program files\rising\rav\ccenter.exe
      RsRavMon
        [A ] 7. c:\program files\rising\rav\ravmond.exe
      UMWdf
        [AM] 8. c:\windows\system32\wdfmgr.exe
      usnsvc
        [A ] 9. c:\program files\msn messenger\usnsvc.dll
      WmdmPmSN
        [A ] 10. c:\windows\system32\mspmsnsv.dll
  + Kernel Drivers
    + HKLM\System\CurrentControlSet\Services
      BaseTDI
        [A ] 11. c:\windows\system32\drivers\basetdi.sys
      cdnprot
        [A ] 12. c:\windows\system32\drivers\cdnprot.sys
      ExpScaner
        [A ] 13. c:\program files\rising\rav\expscan.sys
      HookCont
        [A ] 14. c:\program files\rising\rav\hookcont.sys
      HookReg
        [A ] 15. c:\program files\rising\rav\hookreg.sys
      HookSys
        [A ] 16. c:\program files\rising\rav\hooksys.sys
      HookUrl
        [A ] 17. c:\program files\rising\rfw\hookurl.sys
      Ip6Fw
        [A ] 18. c:\windows\system32\drivers\ip6fw.sys
      MEMSCAN
        [A ] 19. c:\program files\rising\rav\memscan.sys
      mProcRs
        [A ] 20. c:\program files\rising\rfw\mprocrs.sys
      npkcrypt
        [A ] 21. c:\program files\tencent\qq\npkcrypt.sys
      RsAntiSpyware
        [A ] 22. c:\windows\system32\drivers\rsboot.sys
      RsFwDrv
        [A ] 23. c:\program files\rising\rfw\rsfwdrv.sys
      RsNTGDI
        [A ] 24. c:\windows\system32\drivers\rsntgdi.sys
      RSPPSYS
        [A ] 25. c:\program files\rising\rav\rsppsys.sys
      Secdrv
        [A ] 26. c:\windows\system32\drivers\secdrv.sys
      usbehci
        [A ] 27. c:\windows\system32\drivers\usbehci.sys
      viaagp1
        [A ] 28. c:\windows\system32\drivers\viaagp1.sys
      VIAudio
        [A ] 29. c:\windows\system32\drivers\viaudio.sys
      vulfnths
        [A ] 30. c:\windows\system32\drivers\vulfnth.sys
      vulfntrs
        [A ] 31. c:\windows\system32\drivers\vulfntr.sys
      WINIO
        [A ] 32. i:\driver\audio\winio.sys
      ZSMC301b
        [A ] 33. c:\windows\system32\drivers\usbvm31b.sys
  + Internet Explorer
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar
      {E0E899AB-F487-11D5-8D29-0050BA6940E3}
        [A ] 34. c:\program files\flashget\fgiebar.dll
      {DB9ECD4F-FB8F-4311-B3CE-90B976C2707C}
        [AM] 35. c:\windows\system32\kakatool.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
      {35980F6E-A137-4E50-953D-813BB8556899}
        [AM] 36. c:\program files\cnnic\cdn\cdniehlp.dll
      {9030D464-4C02-4ABF-8ECC-5164760863C6}
        [AM] 37. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
      {A5366673-E8CA-11D3-9CD9-0090271D075B}
        [AM] 38. c:\program files\flashget\jccatch.dll
    + HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions
      Script
        [A ] 39. c:\windows\web\related.htm
      Exec
        [A ] 40. c:\program files\flashget\flashget.exe
  + Explorer
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Filter
      text/xml
        [AM] 41. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
    + HKLM\SOFTWARE\Classes\PROTOCOLS\Handler
      livecall
        [A ] 42. c:\program files\msn messenger\msgrapp.8.0.0812.00.dll
      msnim
        [A ] 42. c:\program files\msn messenger\msgrapp.8.0.0812.00.dll
      mso-offdap11
        [A ] 43. c:\program files\common files\microsoft shared\web components\11\owc11.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
      HyperTerminal Icon Ext
        [A ] 44. c:\windows\system32\hticons.dll
      Desktop Explorer
        [A ] 45. c:\windows\system32\nvshell.dll
      Desktop Explorer Menu
        [A ] 45. c:\windows\system32\nvshell.dll
      Messenger Sharing Folders
        [A ] 46. c:\program files\msn messenger\fsshext.8.0.0812.00.dll
      Portable Media Devices
        [AM] 47. c:\windows\system32\audiodev.dll
      Portable Media Devices Menu
        [AM] 47. c:\windows\system32\audiodev.dll
      RISING
        [AM] 48. c:\windows\system32\ravext.dll
      Web Folders
        [A ] 49. c:\program files\common files\microsoft shared\web folders\msonsext.dll
      Microsoft Office HTML Icon Handler
        [AM] 50. c:\program files\microsoft office\office11\msohev.dll
      MSNShell
        [AM] 51. c:\windows\system32\contmenu.dll
      PicaView
        [A ] 52. c:\program files\acdsee\picaview.dll
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
      {32CD708B-60A7-4C00-9377-D73EAA495F0F}
        [AM] 48. c:\windows\system32\ravext.dll
      {AC2DC2EF-5165-40A3-8CDF-41DCA1B0901A}
        [AM] 53. c:\windows\system32\shlhook.dll

+ Logon
    + HKCU\Software\Microsoft\Windows\CurrentVersion\Run
      msnmsgr
        [AM] 54. c:\program files\msn messenger\msnmsgr.exe
    + HKLM\Software\Microsoft\Windows\CurrentVersion\Run
      nwiz
        [A ] 55. c:\windows\system32\nwiz.exe
      BigDogPath
        [AM] 56. c:\windows\vm_sti.exe
      RavTask
        [A ] 57. c:\program files\rising\rav\ravtask.exe
      RfwMain
        [AM] 58. c:\program files\rising\rfw\rfwmain.exe
      runeip
        [AM] 59. c:\program files\rising\antispyware\runiep.exe
      IMSCMig
        [A ] 60. c:\program files\common files\microsoft shared\ime\imsc40a\imscmig.exe
      StormCodec_Helper
        [A ] 61. c:\program files\ringz studio\storm codec\stormset.exe
    + HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
      KKDelay
        [A ] 62. c:\program files\rising\antispyware\runonce.exe
  + Boot Execute
    + HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
      BootExecute
        [A ] 63. c:\windows\system32\bsmain.exe
  + Image Hijacks
    + HKCR\.bat
      batfile\edit\Command
        [A ] 64. c:\windows\system32\notepad.exe
      batfile\print\Command
        [A ] 64. c:\windows\system32\notepad.exe
    + HKCR\.html
      htmlfile\Edit\Command
        [A ] 65. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\Print\Command
        [A ] 65. c:\program files\microsoft office\office11\msohtmed.exe
    + HKCR\.htm
      htmlfile\Edit\Command
        [A ] 65. c:\program files\microsoft office\office11\msohtmed.exe
      htmlfile\Print\Command
        [A ] 65. c:\program files\microsoft office\office11\msohtmed.exe
    + HKCR\.log
      txtfile\open\Command
        [A ] 64. c:\windows\system32\notepad.exe
      txtfile\print\Command
        [A ] 64. c:\windows\system32\notepad.exe
      txtfile\printto\Command
        [A ] 64. c:\windows\system32\notepad.exe
    + HKCR\.txt
      txtfile\open\Command
        [A ] 64. c:\windows\system32\notepad.exe
      txtfile\print\Command
        [A ] 64. c:\windows\system32\notepad.exe
      txtfile\printto\Command
        [A ] 64. c:\windows\system32\notepad.exe
    + HKCR\.cmd
      cmdfile\edit\Command
        [A ] 64. c:\windows\system32\notepad.exe
      cmdfile\print\Command
        [A ] 64. c:\windows\system32\notepad.exe
    + HKCR\.reg
      regfile\edit\Command
        [A ] 64. c:\windows\system32\notepad.exe
      regfile\print\Command
        [A ] 64. c:\windows\system32\notepad.exe
    + HKCR\.vbs
      VBSFile\Edit\Command
        [A ] 64. c:\windows\system32\notepad.exe
      VBSFile\Print\Command
        [A ] 64. c:\windows\system32\notepad.exe
    + HKCR\.js
      JSFile\Edit\Command
        [A ] 64. c:\windows\system32\notepad.exe
      JSFile\Print\Command
        [A ] 64. c:\windows\system32\notepad.exe
    + HKCR\.ini
      inifile\open\Command
        [A ] 64. c:\windows\system32\notepad.exe
      inifile\print\Command
        [A ] 64. c:\windows\system32\notepad.exe
    + HKCR\.inf
      inffile\open\Command
        [A ] 64. c:\windows\system32\notepad.exe
      inffile\print\Command
        [A ] 64. c:\windows\system32\notepad.exe
  + Print Monitor
    + HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors
      Microsoft Document Imaging Writer Monitor
        [AM] 66. c:\windows\system32\mdimon.dll

+ 系统活动模块
  + 000001ac(428) smss.exe
  + 000001d4(468) alg.exe
  + 000001f4(500) csrss.exe
  + 0000020c(524) winlogon.exe
    72C90000[00009000]
      [ M] 67. c:\windows\system32\wdmaud.drv
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
  + 00000238(568) services.exe
  + 00000244(580) lsass.exe
  + 000002ec(748) svchost.exe
    10000000[00009000]
      [ M] 69. c:\windows\system32\cdnns.dll
  + 000002f8(760) conime.exe
    10000000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
  + 00000304(772) nvsvc32.exe
    00400000[00011000]
      [AM] 2. c:\windows\system32\nvsvc32.exe
  + 00000330(816) svchost.exe
    10000000[00009000]
      [ M] 69. c:\windows\system32\cdnns.dll
  + 00000364(868) svchost.exe
  + 00000400(1024) svchost.exe
  + 00000450(1104) wdfmgr.exe
    01000000[0000C000]
      [AM] 8. c:\windows\system32\wdfmgr.exe
  + 00000474(1140) Explorer.EXE
    10000000[0001B000]
      [AM] 48. c:\windows\system32\ravext.dll
    015A0000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
    72C90000[00009000]
      [ M] 67. c:\windows\system32\wdmaud.drv
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
    01DE0000[0002C000]
      [AM] 51. c:\windows\system32\contmenu.dll
    02350000[00010000]
      [AM] 38. c:\program files\flashget\jccatch.dll
    23700000[0001A000]
      [ M] 71. c:\program files\rising\rav\rscommon.dll
    096C0000[0007A000]
      [AM] 47. c:\windows\system32\audiodev.dll
    015D0000[00011000]
      [AM] 53. c:\windows\system32\shlhook.dll
    325C0000[00012000]
      [AM] 50. c:\program files\microsoft office\office11\msohev.dll
    01F60000[00019000]
      [ M] 72. c:\program files\rising\rav\ravscrch.dll
  + 0000047c(1148) svchost.exe
  + 0000058c(1420) VM_STI.EXE
    00400000[0000D000]
      [AM] 56. c:\windows\vm_sti.exe
    10000000[00027000]
      [ M] 73. c:\windows\system32\vm31bprp.ax
    00B10000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
  + 000005cc(1484) spoolsv.exe
    008C0000[00008000]
      [AM] 66. c:\windows\system32\mdimon.dll
    00CB0000[00008000]
      [ M] 74. c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
    10000000[00009000]
      [ M] 69. c:\windows\system32\cdnns.dll
  + 00000680(1664) ctfmon.exe
    10000000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
  + 000006cc(1740) Ras.exe
    00400000[0013E000]
      [ M] 75. c:\program files\rising\antispyware\ras.exe
    10000000[000A3000]
      [ M] 76. c:\program files\rising\antispyware\rasgui.dll
    01410000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
    01680000[00009000]
      [ M] 69. c:\windows\system32\cdnns.dll
    02090000[00019000]
      [ M] 72. c:\program files\rising\rav\ravscrch.dll
    72C90000[00009000]
      [ M] 67. c:\windows\system32\wdmaud.drv
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
  + 00000714(1812) QQ.exe
    00400000[00187000]
      [ M] 77. c:\program files\tencent\qq\qq.exe
    10000000[00026000]

[ M] 78. c:\program files\tencent\qq\coralassist.dll
    005A0000[0007D000]
      [ M] 79. c:\program files\tencent\qq\coralqq.dll
    003B0000[0002F000]
      [ M] 80. c:\program files\tencent\qq\kql.dll
    60A10000[000F2000]
      [ M] 81. c:\program files\tencent\qq\mfc42.dll
    003F0000[00007000]
      [ M] 82. c:\program files\tencent\qq\ipsearcher.dll
    61360000[00236000]
      [ M] 83. c:\program files\tencent\qq\qqbaseclassindll.dll
    616B0000[00099000]
      [ M] 84. c:\program files\tencent\qq\qqhelperdll.dll
    60090000[00040000]
      [ M] 85. c:\program files\tencent\qq\basicctrldll.dll
    01A50000[0000B000]
      [ M] 86. c:\program files\tencent\qq\nodisturbfilter.cqx
    01AE0000[00008000]
      [ M] 87. c:\program files\tencent\qq\confighotkey.cqx
    620B0000[00005000]
      [ M] 88. c:\program files\tencent\qq\riched32.dll
    62040000[00068000]
      [ M] 89. c:\program files\tencent\qq\riched20.dll
    612E0000[00038000]
      [ M] 90. c:\program files\tencent\qq\qqapi.dll
    621F0000[00007000]
      [ M] 91. c:\program files\tencent\qq\timproxy.dll
    02290000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
    02420000[00008000]
      [ M] 92. c:\program files\tencent\qq\autoreconnect.cqx
    024D0000[0002F000]
      [ M] 93. c:\program files\tencent\qq\loginctrl.dll
    02500000[00044000]
      [ M] 94. c:\program files\tencent\qq\npkcntc.dll
    02550000[0000E000]
      [ M] 95. c:\program files\tencent\qq\npkpdb.dll
    608B0000[00054000]
      [ M] 96. c:\program files\tencent\qq\loginctrlres.dll
    02AC0000[0041A000]
      [ M] 97. c:\program files\tencent\qq\qqres.dll
    626B0000[00036000]
      [ M] 98. c:\program files\tencent\qq\wizardctrl.dll
    61780000[0008A000]
      [ M] 99. c:\program files\tencent\qq\qqmainframe.dll
    30000000[002DE000]
      [ M] 100. c:\windows\system32\macromed\flash\flash9.ocx
    72C90000[00009000]
      [ M] 67. c:\windows\system32\wdmaud.drv
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
    04CE0000[00009000]
      [ M] 69. c:\windows\system32\cdnns.dll
    601A0000[00119000]
      [ M] 101. c:\program files\tencent\qq\cqqapplication.dll
    60BB0000[0005D000]
      [ M] 102. c:\program files\tencent\qq\newskin.dll
    60680000[000B0000]
      [ M] 103. c:\program files\tencent\qq\hostingmgr.dll
    600F0000[00022000]
      [ M] 104. c:\program files\tencent\qq\cameradll.dll
    609E0000[0002F000]
      [ M] 105. c:\program files\tencent\qq\mailsummary.dll
    05340000[0000F000]
      [ M] 106. c:\program files\tencent\qq\coralhotkey.cqx
    61750000[00015000]
      [ M] 107. c:\program files\tencent\qq\qqknowledgesearch.dll
    61100000[001D3000]
      [ M] 108. c:\program files\tencent\qq\qqallinone.dll
    60640000[00034000]
      [ M] 109. c:\program files\tencent\qq\grouplive.dll
    620D0000[0002A000]
      [ M] 110. c:\program files\tencent\qq\sccore.dll
    60350000[001A3000]
      [ M] 111. c:\program files\tencent\qq\gdiplus.dll
    61EF0000[0001E000]
      [ M] 112. c:\program files\tencent\qq\qqspace.dll
    62240000[00071000]
      [ M] 113. c:\program files\tencent\qq\vbscript.dll
    61640000[0006B000]
      [ M] 114. c:\program files\tencent\qq\qqgroupmng.dll
    62220000[00017000]
      [ M] 115. c:\program files\tencent\qq\userdefinedhead.dll
    61950000[000CE000]
      [ M] 116. c:\program files\tencent\qq\qqplugin.dll
    615A0000[0000C000]
      [ M] 117. c:\program files\tencent\qq\qqconfigplugin.dll
    62020000[00016000]
      [ M] 118. c:\program files\tencent\qq\qringmng.dll
    61320000[00032000]
      [ M] 119. c:\program files\tencent\qq\qqavatar.dll
    60310000[0003E000]
      [ M] 120. c:\program files\tencent\qq\flashavatardll.dll
    60910000[000A6000]
      [ M] 121. c:\program files\tencent\qq\longconnection.dll
    61910000[0002A000]
      [ M] 122. c:\program files\tencent\qq\qqpet.dll
    60D10000[00026000]
      [ M] 123. c:\program files\tencent\qq\phoneapi.dll
    602C0000[0000D000]
      [ M] 124. c:\program files\tencent\qq\dialerallinone.dll
    615B0000[00032000]
      [ M] 125. c:\program files\tencent\qq\qqcustomface.dll
    60730000[0001A000]
      [ M] 126. c:\program files\tencent\qq\imageole.dll
    61E40000[0002D000]
      [ M] 127. c:\program files\tencent\qq\qqscenemng.dll
    600D0000[0001F000]
      [ M] 128. c:\program files\tencent\qq\bqqapplication.dll
    61E70000[00062000]
      [ M] 129. c:\program files\tencent\qq\qqsettingctrl.dll
    06AA0000[00041000]
      [ M] 130. c:\program files\tencent\qq\qqsysmsgmng.dll
    60610000[00024000]
      [ M] 131. c:\program files\tencent\qq\groupconnection.dll
    06650000[00019000]
      [ M] 72. c:\program files\rising\rav\ravscrch.dll
    60120000[0004F000]
      [ M] 132. c:\program files\tencent\qq\commercesmng.dll
    60C90000[0000F000]
      [ M] 133. c:\program files\tencent\qq\personaldesktop.dll
    60E70000[0028B000]
      [ M] 134. c:\program files\tencent\qq\qqaddr.dll
    01E90000[0000B000]
      [AM] 41. c:\program files\common files\microsoft shared\office11\msoxmlmf.dll
    01EA0000[0002A000]
      [ M] 135. c:\program files\tencent\qq\qqphonehelper.dll
  + 00000738(1848) TIMPlatform.exe
    00400000[00013000]
      [ M] 136. c:\program files\tencent\qq\timplatform.exe
    10000000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
    621F0000[00007000]
      [ M] 91. c:\program files\tencent\qq\timproxy.dll
  + 000009ec(2540) RfwMain.exe
    00400000[00073000]
      [AM] 58. c:\program files\rising\rfw\rfwmain.exe
    26600000[0007D000]
      [ M] 137. c:\program files\rising\rfw\rsguilib.dll
    23700000[0001A000]
      [ M] 138. c:\program files\rising\rfw\rscommon.dll
    10000000[0000F000]
      [ M] 139. c:\program files\rising\rfw\rfwctrl.dll
    23800000[0001A000]
      [ M] 140. c:\program files\rising\rfw\rsxml.dll
    23900000[00031000]
      [ M] 141. c:\program files\rising\rfw\pngdll.dll
    010E0000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
    731B0000[0000A000]
      [ M] 142. c:\program files\rising\rfw\psapi.dll
  + 00000a78(2680) msnmsgr.exe
    00400000[0051E000]
      [AM] 54. c:\program files\msn messenger\msnmsgr.exe
    59100000[000E4000]
      [ M] 143. c:\program files\msn messenger\msncore.dll
    27500000[000C9000]
      [ M] 144. c:\program files\msn messenger\msidcrl40.dll
    5A700000[00040000]
      [ M] 145. c:\program files\msn messenger\contactsux.dll
    003B0000[0000C000]
      [ M] 146. c:\program files\msn messenger\cryptnet.dll
    017C0000[00377000]
      [ M] 147. c:\program files\msnshell\bin\shelldll02.dll
    01680000[0000B000]
      [ M] 148. c:\program files\msn messenger\custsat.dll
    10000000[0003F000]
      [ M] 149. c:\program files\msnshell\bin\shelldll.dll
    59300000[00185000]
      [ M] 150. c:\program files\msn messenger\msgslang.dll
    5B200000[0022C000]
      [ M] 151. c:\program files\msn messenger\msgsres.dll
    024D0000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
    59500000[00065000]
      [ M] 152. c:\program files\msn messenger\lmcdata.dll
    02B50000[00009000]
      [ M] 69. c:\windows\system32\cdnns.dll
    59700000[00028000]
      [ M] 153. c:\program files\msn messenger\contact.dll
    5B500000[000A3000]
      [ M] 154. c:\program files\msn messenger\msgswcam.dll
    5A600000[00013000]
      [ M] 155. c:\windows\system32\sirenacm.dll
    59800000[0004E000]
      [ M] 156. c:\program files\msn messenger\abssm.dll
    054F0000[00019000]
      [ M] 72. c:\program files\rising\rav\ravscrch.dll
    30000000[002DE000]
      [ M] 100. c:\windows\system32\macromed\flash\flash9.ocx
    72C90000[00009000]
      [ M] 67. c:\windows\system32\wdmaud.drv
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
  + 00000b88(2952) IEXPLORE.EXE
    10000000[00057000]
      [AM] 35. c:\windows\system32\kakatool.dll
    06900000[00024000]
      [AM] 36. c:\program files\cnnic\cdn\cdniehlp.dll
    29500000[00051000]
      [AM] 37. c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
    06B50000[00010000]
      [AM] 38. c:\program files\flashget\jccatch.dll
    27500000[000C9000]
      [ M] 157. c:\program files\common files\microsoft shared\windows live\msidcrl40.dll
    086F0000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll
    325C0000[00012000]
      [AM] 50. c:\program files\microsoft office\office11\msohev.dll
    07B60000[00019000]
      [ M] 72. c:\program files\rising\rav\ravscrch.dll
    72C90000[00009000]
      [ M] 67. c:\windows\system32\wdmaud.drv
    72C80000[00008000]
      [ M] 68. c:\windows\system32\msacm32.drv
    07910000[00009000]
      [ M] 69. c:\windows\system32\cdnns.dll
    30000000[002DE000]
      [ M] 100. c:\windows\system32\macromed\flash\flash9.ocx
  + 00000cb0(3248) RavStub.exe
    00400000[00018000]
      [ M] 158. c:\program files\rising\rav\ravstub.exe
    10000000[0001B000]
      [ M] 159. c:\program files\rising\rav\rscommx.dll
    23700000[0001A000]
      [ M] 71. c:\program files\rising\rav\rscommon.dll
  + 00000f24(3876) runiep.exe
    00400000[00012000]
      [AM] 59. c:\program files\rising\antispyware\runiep.exe
    00C70000[0001B000]
      [ M] 70. c:\program files\rising\antispyware\ieprot.dll