+ 正在运行的进程
+ 000000f4(244) LHotkey.exe
00400000[0000A000]
[AM] 66. c:\windows\lhotkey.exe
Chicony
LHOTKEY
.text,.rdata,.data,.rsrc,
1C000000[00006000]
[ M] 72. c:\windows\hkntdll.dll
.text,.rdata,.data,Shared,.reloc,
53000000[0000B000]
[ M] 73. c:\program files\yahoo!\assistant\yhelper.dll
Yahoo! China
Helper Module
.text,.rdata,.data,.cnshelp,.rsrc,.reloc,
41000000[0000E000]
[ M] 74. c:\program files\yahoo!\assistant\assist\ykern.dll
Yahoo! China
ypatch
.text,.rdata,.data,.rsrc,.reloc,
10000000[00021000]
[ M] 75. c:\program files\vupc\ihcp.dll
stdstub Module
.text,.rdata,.data,.Shared,.rsrc,.reloc,
00A60000[0001F000]
[ M] 76. c:\program files\vupc\nmhu.dll
stdplay
.text,.rdata,.data,.rsrc,.reloc,
00AA0000[0001B000]
[ M] 77. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 00000190(400) ctfmon.exe
53000000[0000B000]
[ M] 73. c:\program files\yahoo!\assistant\yhelper.dll
Yahoo! China
Helper Module
.text,.rdata,.data,.cnshelp,.rsrc,.reloc,
41000000[0000E000]
[ M] 74. c:\program files\yahoo!\assistant\assist\ykern.dll
Yahoo! China
ypatch
.text,.rdata,.data,.rsrc,.reloc,
10000000[00021000]
[ M] 75. c:\program files\vupc\ihcp.dll
stdstub Module
.text,.rdata,.data,.Shared,.rsrc,.reloc,
00A00000[0001F000]
[ M] 76. c:\program files\vupc\nmhu.dll
stdplay
.text,.rdata,.data,.rsrc,.reloc,
00AA0000[0001B000]
[ M] 77. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
+ 000001e0(480) RavStub.exe
00400000[00018000]
[ M] 78. f:\瑞星\rising\rav\ravstub.exe
Beijing Rising Technology Co., Ltd.
Rising RavStub
.text,.rdata,.data,.rsrc,
10000000[0001B000]
[ M] 79. f:\瑞星\rising\rav\rscommx.dll
rising
RsCommX
.text,.rdata,.data,.rsrc,.reloc,
23700000[0001A000]
[ M] 80. f:\瑞星\rising\rav\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
+ 00000210(528) smss.exe
+ 00000258(600) csrss.exe
+ 00000270(624) winlogon.exe
012A0000[0003B000]
[AM] 41. c:\windows\system32\wgalogon.dll
Microsoft Corporation
Windows 正版增值计划通知
.text,.data,.rsrc,.reloc,
72C80000[00008000]
[ M] 81. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
+ 0000029c(668) services.exe
+ 000002a8(680) lsass.exe
+ 00000338(824) svchost.exe
+ 00000378(888) svchost.exe
+ 000003ac(940) CCenter.exe
00400000[0001E000]
[AM] 8. f:\瑞星\rising\rav\ccenter.exe
Beijing Rising Technology Co., Ltd.
CCenter
.text,.rdata,.data,.rsrc,
+ 000003bc(956) svchost.exe
50E60000[0000C000]
[ M] 82. c:\windows\system32\wups2.dll
Microsoft Corporation
Windows Update client proxy stub 2
.text,.orpc,.data,.rsrc,.reloc,
+ 00000414(1044) svchost.exe
+ 00000474(1140) IEXPLORE.EXE
10000000[00029000]
[ M] 83. c:\windows\downloaded program files\cdfd.dll
TENCENT
.text,.rdata,.data,Shared_T,Shared_H,.rsrc,.reloc,
00A60000[00037000]
[ M] 84. c:\windows\downloaded program files\xrcfym.dll
Tencent
.text,.rdata,.data,.rsrc,.reloc,
53000000[0000B000]
[ M] 73. c:\program files\yahoo!\assistant\yhelper.dll
Yahoo! China
Helper Module
.text,.rdata,.data,.cnshelp,.rsrc,.reloc,
41C00000[0000A000]
[ M] 85. c:\program files\yahoo!\assistant\yscrblock.dll
Yahoo! China
yScrBlock
.text,.rdata,.data,Shared,.rsrc,.reloc,
41000000[0000E000]
[ M] 74. c:\program files\yahoo!\assistant\assist\ykern.dll
Yahoo! China
ypatch
.text,.rdata,.data,.rsrc,.reloc,
00D50000[00021000]
[ M] 75. c:\program files\vupc\ihcp.dll
stdstub Module
.text,.rdata,.data,.Shared,.rsrc,.reloc,
00D90000[0001F000]
[ M] 76. c:\program files\vupc\nmhu.dll
stdplay
.text,.rdata,.data,.rsrc,.reloc,
3C800000[00023000]
[ M] 86. c:\program files\yahoo!\assistant\yalive.dll
yahoo! china
AutoLive Module
.text,.rdata,.data,.ylive_d,.rsrc,.reloc,
00DC0000[0002A000]
[ M] 87. c:\program files\yahoo!\assistant\yalliveex.dll
Yahoo! China
LiveEx
.text,.rdata,.data,.rsrc,.reloc,
01460000[00037000]
[AM] 43. c:\program files\tencent\ssplus\saddr.dll
Tencent
.text,.rdata,.data,.rsrc,.reloc,
016A0000[00025000]
[AM] 44. c:\windows\system32\ssup.dll
TENCENT
SSup
.text,.rdata,.data,.rsrc,.reloc,
023B0000[0001B000]
[ M] 77. c:\program files\rising\antispyware\ieprot.dll
Beijing Rising Technology Co., Ltd.
IE Protector
.text,.rdata,.data,.rsrc,.reloc,
325C0000[00012000]
[AM] 55. c:\program files\microsoft office\office11\msohev.dll
Microsoft Corporation
Microsoft Office 2003 component
.text,.data,.rsrc,.reloc,
02CD0000[00019000]
[ M] 88. f:\瑞星\rising\rav\ravscrch.dll
Beijing Rising Technology Co., Ltd.
RavScrCh Module
.text,.rdata,.data,.rsrc,.reloc,
72C80000[00008000]
[ M] 81. c:\windows\system32\msacm32.drv
Microsoft Corporation
Microsoft Sound Mapper
.text,.data,.rsrc,.reloc,
+ 0000048c(1164) svchost.exe
+ 00000500(1280) Ravmond.exe
00400000[0004F000]
[AM] 9. f:\瑞星\rising\rav\ravmond.exe
Beijing Rising Technology Co., Ltd.
RavMond
.text,.rdata,.data,.rsrc,
10000000[0002E000]
[ M] 89. f:\瑞星\rising\rav\bwlist.dll
Beijing Rising Technology Co., Ltd.
BWList DLL
.text,.rdata,.data,.rsrc,.reloc,
00740000[0001B000]
[ M] 79. f:\瑞星\rising\rav\rscommx.dll
rising
RsCommX
.text,.rdata,.data,.rsrc,.reloc,
00B70000[0000F000]
[ M] 90. f:\瑞星\rising\rav\rfwctrl.dll
Beijing Rising Technology Co., Ltd.
RfwCtrl DLL
.text,.rdata,.data,.rsrc,.reloc,
00B80000[0000D000]
[ M] 91. f:\瑞星\rising\rav\rsppsys.dll
Beijing Rising Technology Co., Ltd.
RSPPSYS Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
00CA0000[0000E000]
[ M] 92. f:\瑞星\rising\rav\rsappmgr.dll
Beijing Rising Technology Co., Ltd.
Rising Application Manager
.text,.rdata,.data,.rsrc,.reloc,
08CC0000[0002F000]
[ M] 93. f:\瑞星\rising\rav\cfgdll.dll
Beijing Rising Technology Co., Ltd.
CfgDll
.text,.rdata,.data,.rsrc,.reloc,
23700000[0001A000]
[ M] 80. f:\瑞星\rising\rav\rscommon.dll
Beijing Rising Technology Co., Ltd.
Rising Common Function Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
08F60000[0000B000]
[ M] 94. f:\瑞星\rising\rav\rslog.dll
Beijing Rising Technology Co., Ltd.
RsLog DLL
.text,.rdata,.data,.rsrc,.reloc,
08F70000[0000D000]
[ M] 95. f:\瑞星\rising\rav\hooksys.dll
Beijing Rising Technology Co., Ltd.
HOOKSYS Dynamic Link Library
.text,.rdata,.data,.rsrc,.reloc,
090A0000[00029000]
[ M] 96. f:\瑞星\rising\rav\scanner.dll
Beijing Rising Technology Co., Ltd.
RsScanner
.text,.rdata,.data,.rsrc,.reloc,
13100000[0002E000]
[ M] 97. f:\瑞星\rising\rav\libload.dll
Beijing Rising Technology Co., Ltd.
LibLoad
.text,.rdata,.data,.rsrc,.reloc,
09200000[0002B000]
[ M] 98. f:\瑞星\rising\rav\viruslib.dll
Beijing Rising Technology Co., Ltd.
VirusLib
.text,.rdata,.data,.rsrc,.reloc,
09340000[00010000]
[ M] 99. f:\瑞星\rising\rav\regmon.dll
Beijing Rising Technology Co., Ltd.
regmon
.text,.rdata,.data,.rsrc,.reloc,
731B0000[0000A000]
[ M] 100. f:\瑞星\rising\rav\psapi.dll
Microsoft Corporation
Process Status Helper
.text,.rdata,.data,.rsrc,.reloc,
09590000[0000D000]
[ M] 101. f:\瑞星\rising\rav\hookweb.dll
Beijing Rising Technology Co., Ltd.
HookWeb
.text,.rdata,.data,.rsrc,.reloc,
096B0000[00014000]
[ M] 102. f:\瑞星\rising\rav\memmon.dll
Beijing Rising Technology Co., Ltd.
MemMon
.text,.rdata,.data,.rsrc,.reloc,
096E0000[0000E000]
[ M] 103. f:\瑞星\rising\rav\expscan.dll
Beijing Rising Technology Co., Ltd.
ExpScan.dll
.text,.rdata,.data,.rsrc,.reloc,
09700000[00012000]
[ M] 104. f:\瑞星\rising\rav\mports.dll
Beijing Rising Technology Co., Ltd.
mPorts.dll
.text,.rdata,.data,.rsrc,.reloc,
