Port\RPC Control\{5BFA7CA4-EF46-4024-B66C-16384922D8CB}-WEBMON
Port\RPC Control\OLED8A973B7AD0D43F3BC89A328DAB2
Port\RPC Control\B3643ACF-FEC6-4f99-8F80-341BAEA5E14E
Section\BaseNamedObjects\RSTABLE-2006-000c-0d000000-12090100-PROID10a00006
Section\BaseNamedObjects\ShimSharedMemory
Section\BaseNamedObjects\RSTABLE-2006-002b-00000000-00000000-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0016-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0017-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0116-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0020-00000001-00000000-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0117-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0120-00000001-00000000-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-001f-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0009-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0002-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0109-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-2002-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0102-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0000-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-2102-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-2000-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0100-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-2100-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSDBMAN-2006-PROID10b00006
Section\BaseNamedObjects\RSTABLE-2006-001f-0c000000-12090100-PROID10b00006
Section\BaseNamedObjects\RSTABLE-2006-0001-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-2001-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0101-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-2101-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\Perflib_Perfdata_4f4
Section\BaseNamedObjects\RSTABLE-2006-000d-0d000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-010d-0d000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-000b-0d000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-010b-0d000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-000a-0d000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-010a-0d000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-010c-0d000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0015-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0110-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0010-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0105-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0005-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSTABLE-2006-0115-0c000000-12090100-PROID10a00006
Section\BaseNamedObjects\RSREGISTRYRav_Formal06
Section\BaseNamedObjects\RSDBMAN-2006-PROID10a00006
Semaphore\BaseNamedObjects\{248073D0-E0D4-4d32-8D15-36086D4BF43D}-0
Semaphore\BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
ThreadRavMonD.exe(1268): 1788
ThreadRavMonD.exe(1268): 1908
ThreadRavMonD.exe(1268): 1996
ThreadRavMonD.exe(1268): 2000
ThreadRavMonD.exe(1268): 2004
ThreadRavMonD.exe(1268): 2008
ThreadRavMonD.exe(1268): 2012
ThreadRavMonD.exe(1268): 2016
ThreadRavMonD.exe(1268): 2040
ThreadRavMonD.exe(1268): 2036
ThreadRavMonD.exe(1268): 2028
ThreadRavMonD.exe(1268): 2008
ThreadRavMonD.exe(1268): 2032
ThreadRavMonD.exe(1268): 1524
ThreadRavMonD.exe(1268): 180
ThreadRavMonD.exe(1268): 220
ThreadRavMonD.exe(1268): 224
ThreadRavMonD.exe(1268): 224
ThreadRavMonD.exe(1268): 2008
ThreadRavMonD.exe(1268): 2000
ThreadRavMonD.exe(1268): 2004
ThreadRavMonD.exe(1268): 1504
ThreadRavMonD.exe(1268): 696
ThreadRavMonD.exe(1268): 240
ThreadRavMonD.exe(1268): 2000
ThreadRavMonD.exe(1268): 2040
ThreadRavMonD.exe(1268): 936
ThreadRavMonD.exe(1268): 936
ThreadRavMonD.exe(1268): 1064
ThreadRavMonD.exe(1268): 3192
ThreadRavMonD.exe(1268): 1272
ThreadRavMonD.exe(1268): 2012
ThreadRavMonD.exe(1268): 3744
ThreadRavMonD.exe(1268): 1292
ThreadRavMonD.exe(1268): 1292
ThreadRavMonD.exe(1268): 1504
ThreadRavMonD.exe(1268): 1508
ThreadRavMonD.exe(1268): 1512
ThreadRavMonD.exe(1268): 1512
ThreadRavMonD.exe(1268): 8680
ThreadRavMonD.exe(1268): 1672
TokenNT AUTHORITY\SYSTEM
WindowStation\Windows\WindowStations\Service-0x0-3e7$
WindowStation\Windows\WindowStations\Service-0x0-3e7$

请保存Autoruns的日志