Caption                 CommandLine                                                                                                                                                                                                                                                                                                            ExecutablePath                                                 Handle  
System Idle Process                                                                                                                                                                                                                                                                                                                                                                                           0       
System                                                                                                                                                                                                                                                                                                                                                                                                        4       
smss.exe                \SystemRoot\System32\smss.exe                                                                                                                                                                                                                                                                                                                                                         244     
csrss.exe               %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16                     C:\Windows\system32\csrss.exe                                  388     
csrss.exe               %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16                     C:\Windows\system32\csrss.exe                                  452     
wininit.exe             wininit.exe                                                                                                                                                                                                                                                                                                            C:\Windows\system32\wininit.exe                                460     
services.exe            C:\Windows\system32\services.exe                                                                                                                                                                                                                                                                                       C:\Windows\system32\services.exe                               500     
lsass.exe               C:\Windows\system32\lsass.exe                                                                                                                                                                                                                                                                                          C:\Windows\system32\lsass.exe                                  524     
lsm.exe                 C:\Windows\system32\lsm.exe                                                                                                                                                                                                                                                                                            C:\Windows\system32\lsm.exe                                    532     
winlogon.exe            winlogon.exe                                                                                                                                                                                                                                                                                                           C:\Windows\system32\winlogon.exe                               588     
svchost.exe             C:\Windows\system32\svchost.exe -k DcomLaunch                                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe                                680     
nvvsvc.exe              C:\Windows\system32\nvvsvc.exe                                                                                                                                                                                                                                                                                         C:\Windows\system32\nvvsvc.exe                                 744     
nvSCPAPISvr.exe         "C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"                                                                                                                                                                                                                                                        C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe  768     
svchost.exe             C:\Windows\system32\svchost.exe -k RPCSS                                                                                                                                                                                                                                                                               C:\Windows\system32\svchost.exe                                812     
RsMgrSvc.exe            "C:\Program Files\Rising\RSD\RsMgrSvc.exe"                                                                                                                                                                                                                                                                             C:\Program Files\Rising\RSD\RsMgrSvc.exe                       860     
RavMonD.exe             "C:\Program Files\Rising\RAV\RavMonD.exe"                                                                                                                                                                                                                                                                              C:\Program Files\Rising\RAV\RavMonD.exe                        912     
RavMonD.exe             "C:\Program Files\Rising\RFW\RavMonD.exe"                                                                                                                                                                                                                                                                              C:\Program Files\Rising\RFW\RavMonD.exe                        968     
svchost.exe             C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted                                                                                                                                                                                                                                                       C:\Windows\System32\svchost.exe                                1000    
svchost.exe             C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted                                                                                                                                                                                                                                                        C:\Windows\System32\svchost.exe                                1040    
svchost.exe             C:\Windows\system32\svchost.exe -k netsvcs                                                                                                                                                                                                                                                                             C:\Windows\system32\svchost.exe                                1084    
svchost.exe             C:\Windows\system32\svchost.exe -k LocalService                                                                                                                                                                                                                                                                        C:\Windows\system32\svchost.exe                                1220    
NvXDSync.exe            "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"                                                                                                                                                                                                                                                             C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe       1320    
nvvsvc.exe              C:\Windows\system32\nvvsvc.exe -session -first                                                                                                                                                                                                                                                                         C:\Windows\system32\nvvsvc.exe                                 1332    
svchost.exe             C:\Windows\system32\svchost.exe -k NetworkService                                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe                                1376    
spoolsv.exe             C:\Windows\System32\spoolsv.exe                                                                                                                                                                                                                                                                                        C:\Windows\System32\spoolsv.exe                                1568    
svchost.exe             C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation                                                                                                                                                                                                                                                      C:\Windows\system32\svchost.exe                                1648    
svchost.exe             C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork                                                                                                                                                                                                                                                               C:\Windows\system32\svchost.exe                                1700    
taskhost.exe            "taskhost.exe"                                                                                                                                                                                                                                                                                                         C:\Windows\system32\taskhost.exe                               2032    
svchost.exe             C:\Windows\system32\svchost -k XLServicePlatform                                                                                                                                                                                                                                                                       C:\Windows\system32\svchost.exe                                332     
dwm.exe                 "C:\Windows\system32\Dwm.exe"                                                                                                                                                                                                                                                                                          C:\Windows\system32\Dwm.exe                                    1676    
explorer.exe            C:\Windows\Explorer.EXE                                                                                                                                                                                                                                                                                                C:\Windows\Explorer.EXE                                        1976    
svchost.exe             C:\Windows\System32\svchost.exe -k secsvcs                                                                                                                                                                                                                                                                             C:\Windows\System32\svchost.exe                                2360    
RtHDVCpl.exe            "C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe" -s                                                                                                                                                                                                                                                                   C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe                2616    
nvtray.exe              "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1                                                                                                                                                                                                                                         C:\Program Files\NVIDIA Corporation\Display\nvtray.exe         3020    
SearchIndexer.exe       C:\Windows\system32\SearchIndexer.exe /Embedding                                                                                                                                                                                                                                                                       C:\Windows\system32\SearchIndexer.exe                          3228    
popwndexe.exe           "C:\Program Files\Rising\RSD\popwndexe.exe"                                                                                                                                                                                                                                                                            C:\Program Files\Rising\RSD\popwndexe.exe                      3248    
RsTray.exe              "C:\Program Files\Rising\RAV\RSTRAY.EXE" -system                                                                                                                                                                                                                                                                       C:\Program Files\Rising\RAV\RSTRAY.EXE                         3256    
RsTray.exe              "C:\Program Files\Rising\RFW\RSTRAY.EXE" -system                                                                                                                                                                                                                                                                       C:\Program Files\Rising\RFW\RSTRAY.EXE                         3264    
svchost.exe             C:\Windows\system32\svchost -k DoctorService                                                                                                                                                                                                                                                                           C:\Windows\system32\svchost.exe                                3660    
三国伴侣.exe            "I:\系统软件\QQ\三国伴侣\三国伴侣.exe"                                                                                                                                                                                                                                                                                 I:\系统软件\QQ\三国伴侣\三国伴侣.exe                           4068    
三国伴侣.exe            "I:\系统软件\QQ\三国伴侣\三国伴侣.exe"                                                                                                                                                                                                                                                                                 I:\系统软件\QQ\三国伴侣\三国伴侣.exe                           4080    
svchost.exe             C:\Windows\system32\svchost.exe -k netsvcs                                                                                                                                                                                                                                                                             C:\Windows\system32\svchost.exe                                1880    
audiodg.exe                                                                                                                                                                                                                                                                                                                                                                                                   1912    
QQProtect.exe           "C:\Program Files\Tencent\QQ\Bin\QQProtect.exe"                                                                                                                                                                                                                                                                        C:\Program Files\Tencent\QQ\Bin\QQProtect.exe                  5280    
QQ.exe                  "C:\Program Files\Tencent\QQ\Bin\QQ.exe" /qdwnd=393676   StartQQ                                                                                                                                                                                                                                                       C:\Program Files\Tencent\QQ\Bin\QQ.exe                         3864    
QQ.exe                  "C:\Program Files\Tencent\QQ\Bin\QQ.exe" /qdwnd=393676   StartQQ                                                                                                                                                                                                                                                       C:\Program Files\Tencent\QQ\Bin\QQ.exe                         5240    
TXPlatform.exe          "C:\Program Files\Tencent\QQ\Bin\TXPlatform.exe" -Embedding                                                                                                                                                                                                                                                            C:\Program Files\Tencent\QQ\Bin\TXPlatform.exe                 5396    
zdsj.exe                "C:\Program Files\同花顺\zdsj.exe" 1311184                                                                                                                                                                                                                                                                             C:\Program Files\同花顺\zdsj.exe                               1204    
QQExternal.exe          "C:\Program Files\Tencent\QQ\Bin\QQExternal.exe" /load FlashService.dll                                                                                                                                                                                                                                                C:\Program Files\Tencent\QQ\Bin\QQExternal.exe                 4660    
rsmain.exe              "C:\Program Files\Rising\RAV\rsmain.exe"                                                                                                                                                                                                                                                                               C:\Program Files\Rising\RAV\rsmain.exe                         5428    
iexplore.exe            "C:\Program Files\Internet Explorer\iexplore.exe" -startmediumtab -Embedding                                                                                                                                                                                                                                           C:\Program Files\Internet Explorer\iexplore.exe                3312    
iexplore.exe            "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3312 CREDAT:145409                                                                                                                                                                                                                                            C:\Program Files\Internet Explorer\iexplore.exe                6136    
iexplore.exe            "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3312 CREDAT:145411                                                                                                                                                                                                                                            C:\Program Files\Internet Explorer\iexplore.exe                2068    
cmd.exe                 cmd /c ""D:\我的资料库\Downloads\异常信息收集2011.bat" "                                                                                                                                                                                                                                                               C:\Windows\system32\cmd.exe                                    7948    
conhost.exe             \??\C:\Windows\system32\conhost.exe "-829515004-1997727086-690195547-1901022522-1039716797-2098515443-441767040-140001289                                                                                                                                                                                              C:\Windows\system32\conhost.exe                                7964    
TrustedInstaller.exe    C:\Windows\servicing\TrustedInstaller.exe                                                                                                                                                                                                                                                                              C:\Windows\servicing\TrustedInstaller.exe                      6876    
WmiPrvSE.exe            C:\Windows\system32\wbem\wmiprvse.exe                                                                                                                                                                                                                                                                                  C:\Windows\system32\wbem\wmiprvse.exe                          6664    
SearchProtocolHost.exe  "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe13_ Global\UsGthrCtrlFltPipeMssGthrPipe13 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"  C:\Windows\system32\SearchProtocolHost.exe                     5992    
SearchFilterHost.exe    "C:\Windows\system32\SearchFilterHost.exe" 0 504 508 516 65536 512                                                                                                                                                                                                                                                     C:\Windows\system32\SearchFilterHost.exe                       6704    
WMIC.exe                wmic  process get caption,handle,commandline,executablepath                                                                                                                                                                                                                                                            C:\Windows\System32\Wbem\WMIC.exe                              6972    
