Caption                 CommandLine                                                                                                                                                                                                                                                                                                          ExecutablePath                                                                Handle  
System Idle Process                                                                                                                                                                                                                                                                                                                                                                                                        0       
System                                                                                                                                                                                                                                                                                                                                                                                                                     4       
smss.exe                \SystemRoot\System32\smss.exe                                                                                                                                                                                                                                                                                                                                                                      252     
csrss.exe               %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16                   C:\Windows\system32\csrss.exe                                                 384     
wininit.exe             wininit.exe                                                                                                                                                                                                                                                                                                          C:\Windows\system32\wininit.exe                                               436     
csrss.exe               %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16                   C:\Windows\system32\csrss.exe                                                 468     
services.exe            C:\Windows\system32\services.exe                                                                                                                                                                                                                                                                                     C:\Windows\system32\services.exe                                              516     
winlogon.exe            winlogon.exe                                                                                                                                                                                                                                                                                                         C:\Windows\system32\winlogon.exe                                              532     
lsass.exe               C:\Windows\system32\lsass.exe                                                                                                                                                                                                                                                                                        C:\Windows\system32\lsass.exe                                                 544     
lsm.exe                 C:\Windows\system32\lsm.exe                                                                                                                                                                                                                                                                                          C:\Windows\system32\lsm.exe                                                   552     
svchost.exe             C:\Windows\system32\svchost.exe -k DcomLaunch                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe                                               684     
svchost.exe             C:\Windows\system32\svchost.exe -k RPCSS                                                                                                                                                                                                                                                                             C:\Windows\system32\svchost.exe                                               764     
SuService.exe                                                                                                                                                                                                                                                                                                                                                                                                              784     
RsMgrSvc.exe            "C:\Program Files\Rising\RSD\RsMgrSvc.exe"                                                                                                                                                                                                                                                                           C:\Program Files\Rising\RSD\RsMgrSvc.exe                                      836     
RavMonD.exe             "C:\Program Files\Rising\RIS\RavMonD.exe"                                                                                                                                                                                                                                                                            C:\Program Files\Rising\RIS\RavMonD.exe                                       956     
atiesrxx.exe            C:\Windows\system32\atiesrxx.exe                                                                                                                                                                                                                                                                                     C:\Windows\system32\atiesrxx.exe                                              980     
svchost.exe             C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted                                                                                                                                                                                                                                                     C:\Windows\System32\svchost.exe                                               1012    
svchost.exe             C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted                                                                                                                                                                                                                                                      C:\Windows\System32\svchost.exe                                               1044    
svchost.exe             C:\Windows\system32\svchost.exe -k netsvcs                                                                                                                                                                                                                                                                           C:\Windows\system32\svchost.exe                                               1084    
audiodg.exe                                                                                                                                                                                                                                                                                                                                                                                                                1148    
hpservice.exe           C:\Windows\system32\Hpservice.exe                                                                                                                                                                                                                                                                                    C:\Windows\system32\Hpservice.exe                                             1200    
atieclxx.exe            atieclxx                                                                                                                                                                                                                                                                                                             C:\Windows\system32\atieclxx.exe                                              1212    
svchost.exe             C:\Windows\system32\svchost.exe -k LocalService                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe                                               1336    
svchost.exe             C:\Windows\system32\svchost.exe -k NetworkService                                                                                                                                                                                                                                                                    C:\Windows\system32\svchost.exe                                               1396    
dwm.exe                 "C:\Windows\system32\Dwm.exe"                                                                                                                                                                                                                                                                                        C:\Windows\system32\Dwm.exe                                                   1484    
explorer.exe            C:\Windows\Explorer.EXE                                                                                                                                                                                                                                                                                              C:\Windows\Explorer.EXE                                                       1512    
svchost.exe             C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation                                                                                                                                                                                                                                                    C:\Windows\system32\svchost.exe                                               1580    
svchost.exe             C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork                                                                                                                                                                                                                                                             C:\Windows\system32\svchost.exe                                               1604    
taskhost.exe            "taskhost.exe"                                                                                                                                                                                                                                                                                                       C:\Windows\system32\taskhost.exe                                              1700    
AEADISRV.EXE            C:\Windows\system32\AEADISRV.EXE                                                                                                                                                                                                                                                                                     C:\Windows\system32\AEADISRV.EXE                                              1796    
agrsmsvc.exe            "C:\Program Files\LSI SoftModem\agrsmsvc.exe"                                                                                                                                                                                                                                                                        C:\Program Files\LSI SoftModem\agrsmsvc.exe                                   1824    
spd.exe                 "E:\Program Files\cFosspeed\spd.exe" -service                                                                                                                                                                                                                                                                        E:\Program Files\cFosspeed\spd.exe                                            1844    
HZ_CommSrv.exe          C:\Windows\system32\HZ_CommSrv.exe                                                                                                                                                                                                                                                                                   C:\Windows\system32\HZ_CommSrv.exe                                            1896    
srvany.exe              C:\Windows\system32\srvany.exe                                                                                                                                                                                                                                                                                       C:\Windows\system32\srvany.exe                                                1940    
KMService.exe           C:\Windows\KMService.exe                                                                                                                                                                                                                                                                                             C:\Windows\KMService.exe                                                      1964    
conhost.exe             \??\C:\Windows\system32\conhost.exe                                                                                                                                                                                                                                                                                  C:\Windows\system32\conhost.exe                                               1980    
jfCacheMgr.exe          "C:\pipi\jfCacheMgr.exe" /background                                                                                                                                                                                                                                                                                 C:\pipi\jfCacheMgr.exe                                                        328     
SynTPEnh.exe            "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"                                                                                                                                                                                                                                                                      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe                                 1872    
QLBCtrl.exe             "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe" /Start                                                                                                                                                                                                                                        C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe          1956    
Rainmeter.exe           "C:\Users\xin\Desktop\Rainmeter-1.3-正式版\Rainmeter-1.3-正式版\Rainmeter.exe"                                                                                                                                                                                                                                       C:\Users\xin\Desktop\Rainmeter-1.3-正式版\Rainmeter-1.3-正式版\Rainmeter.exe  1868    
cfosspeed.exe           "E:\Program Files\cFosspeed\cfosspeed.exe"                                                                                                                                                                                                                                                                           E:\Program Files\cFosspeed\cfosspeed.exe                                      1320    
WDKeyMonitorCCB.exe     "C:\Windows\system32\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe"                                                                                                                                                                                                                                           C:\Windows\system32\WatchData\Watchdata CCB CSP v3.2\WDKeyMonitorCCB.exe      924     
WDCertM_CCB.exe         "C:\Windows\System32\WatchData\Watchdata CCB CSP v3.2\WDCertM_CCB.exe"                                                                                                                                                                                                                                               C:\Windows\System32\WatchData\Watchdata CCB CSP v3.2\WDCertM_CCB.exe          948     
USBKeyTools.exe         "C:\Program Files\CCBComponents\HDZB\USBKeyTools.exe"                                                                                                                                                                                                                                                                C:\Program Files\CCBComponents\HDZB\USBKeyTools.exe                           2056    
SynTPHelper.exe         "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"                                                                                                                                                                                                                                                                   C:\Program Files\Synaptics\SynTP\SynTPHelper.exe                              2072    
CCBCertificate.exe      "C:\Program Files\CCBComponents\DMWZ\CCBCertificate.exe"                                                                                                                                                                                                                                                             C:\Program Files\CCBComponents\DMWZ\CCBCertificate.exe                        2188    
RsTray.exe              "C:\Program Files\Rising\RIS\RsTray.exe" -system                                                                                                                                                                                                                                                                     C:\Program Files\Rising\RIS\RsTray.exe                                        2196    
VolCtrl.exe             "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe"                                                                                                                                                                                                                                               C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe          2220    
SearchIndexer.exe       C:\Windows\system32\SearchIndexer.exe /Embedding                                                                                                                                                                                                                                                                     C:\Windows\system32\SearchIndexer.exe                                         3680    
hpqWmiEx.exe            "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe"                                                                                                                                                                                                                                                               C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe                          3864    
alg.exe                 C:\Windows\System32\alg.exe                                                                                                                                                                                                                                                                                          C:\Windows\System32\alg.exe                                                   3920    
WmiPrvSE.exe            C:\Windows\system32\wbem\wmiprvse.exe                                                                                                                                                                                                                                                                                C:\Windows\system32\wbem\wmiprvse.exe                                         3992    
8021x.exe               "C:\Program Files\锐捷网络\Ruijie Supplicant\8021x.exe" -ssbero2008d -user                                                                                                                                                                                                                                           C:\Program Files\锐捷网络\Ruijie Supplicant\8021x.exe                         1976    
SearchProtocolHost.exe  "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"  C:\Windows\system32\SearchProtocolHost.exe                                    2176    
Com4QLBEx.exe           "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe"                                                                                                                                                                                                                                             C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe        1736    
svchost.exe             C:\Windows\System32\svchost.exe -k LocalServicePeerNet                                                                                                                                                                                                                                                               C:\Windows\System32\svchost.exe                                               2896    
sppsvc.exe              C:\Windows\system32\sppsvc.exe                                                                                                                                                                                                                                                                                       C:\Windows\system32\sppsvc.exe                                                2576    
TrustedInstaller.exe    C:\Windows\servicing\TrustedInstaller.exe                                                                                                                                                                                                                                                                            C:\Windows\servicing\TrustedInstaller.exe                                     4656    
7zFM.exe                "E:\Program Files\7-Zip\7zFM.exe" "C:\Users\xin\Desktop\异常信息收集2011.zip"                                                                                                                                                                                                                                        E:\Program Files\7-Zip\7zFM.exe                                               4752    
cmd.exe                 cmd /c ""C:\Users\xin\AppData\Local\Temp\7zO09278D25\异常信息收集2011.bat" "                                                                                                                                                                                                                                         C:\Windows\system32\cmd.exe                                                   4804    
conhost.exe             \??\C:\Windows\system32\conhost.exe                                                                                                                                                                                                                                                                                  C:\Windows\system32\conhost.exe                                               4816    
sogouexplorer.exe       "C:\Program Files\SogouExplorer\sogouexplorer.exe"                                                                                                                                                                                                                                                                   C:\Program Files\SogouExplorer\sogouexplorer.exe                              6004    
sogouexplorer.exe       "C:\Program Files\SogouExplorer\sogouexplorer.exe" -! 2 944883247                                                                                                                                                                                                                                                    C:\Program Files\SogouExplorer\sogouexplorer.exe                              6076    
sogouexplorer.exe       "C:\Program Files\SogouExplorer\sogouexplorer.exe" -! 1 944925192 328502                                                                                                                                                                                                                                             C:\Program Files\SogouExplorer\sogouexplorer.exe                              6084    
sogouexplorer.exe       "C:\Program Files\SogouExplorer\sogouexplorer.exe" -! 1 944949425 0                                                                                                                                                                                                                                                  C:\Program Files\SogouExplorer\sogouexplorer.exe                              6092    
SearchFilterHost.exe    "C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516                                                                                                                                                                                                                                                   C:\Windows\system32\SearchFilterHost.exe                                      2156    
SogouCloud.exe          "C:\Program Files\SogouInput\5.2.0.5225\SogouCloud.exe" -daemon                                                                                                                                                                                                                                                      C:\Program Files\SogouInput\5.2.0.5225\SogouCloud.exe                         3268    
ImeUtil.exe             "C:\Program Files\SogouInput\5.2.0.5225\ImeUtil.exe"  0 -os -f -ri                                                                                                                                                                                                                                                   C:\Program Files\SogouInput\5.2.0.5225\ImeUtil.exe                            672     
WmiPrvSE.exe            C:\Windows\system32\wbem\wmiprvse.exe                                                                                                                                                                                                                                                                                C:\Windows\system32\wbem\wmiprvse.exe                                         4456    
sogouexplorer.exe       "C:\Program Files\SogouExplorer\sogouexplorer.exe" -! 0 1000737161 197424                                                                                                                                                                                                                                            C:\Program Files\SogouExplorer\sogouexplorer.exe                              4956    
WMIC.exe                wmic  process get caption,handle,commandline,executablepath                                                                                                                                                                                                                                                          C:\Windows\System32\Wbem\WMIC.exe                                             5012    
rundll32.exe                                                                                                                                                                                                                                                                                                                                                                                                               5096    
rundll32.exe            "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\WININET.dll",DispatchAPICall 1                                                                                                                                                                                                                               C:\Windows\system32\rundll32.exe                                              5264    
