正在运行的进程
[PID: 548][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 620][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 644][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.1557 (xpsp2_gdr.040517-1325)>
[PID: 688][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 700][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 864][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 976][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1080][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1164][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 1372][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2800.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 5>
[C:\PROGRA~1\3721\Assist\repair.dll] <北京三七二一科技有限公司><1, 0, 2, 1>
[C:\PROGRA~1\3721\Assist\optimum.dll] <N/A><N/A>
[c:\progra~1\3721\assist\adfilter.dll] < ><1, 0, 1, 5>
[C:\PROGRA~1\3721\assist\XPStyle.dll] <N/A><N/A>
[C:\PROGRA~1\3721\assist\assecblk.dll] <3721><1, 0, 0, 8>
[C:\Program Files\3721\Assist\asbar.dll] <3721><1, 0, 1, 1008>
[C:\PROGRA~1\3721\assist\tbwrap.dll] <3721><1, 0, 0, 2>
[C:\PROGRA~1\3721\assist\asnoad.dll] <N/A><1, 0, 0, 5>
[C:\PROGRA~1\3721\assist\aswiper.dll] <3721><1, 0, 0, 1>
[C:\PROGRA~1\3721\assist\asiesec.dll] <yahoo><1, 0, 0, 9>
[C:\WINDOWS\System32\xunleibho_v5.dll] <N/A><4, 3, 3, 30>
[C:\PROGRA~1\yisou\yisoub.dll] <N/A><1, 1, 2, 4>
[PID: 1480][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.0 (XPClient.010817-1148)>
[C:\WINDOWS\System32\spool\PRTPROCS\W32X86\vprproc.dll] <Windows (R) 2000 DDK provider><5.00.2195.1620>
[PID: 1648][C:\WINDOWS\System32\Rundll32.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\downlo~1\CnsMinIO.dll] <北京三七二一科技有限公司><1, 0, 3, 5>
[C:\WINDOWS\downlo~1\cnsio.dll] <北京三七二一科技有限公司><1, 0, 2, 6>
[C:\WINDOWS\downlo~1\CnsMinEx.dll] <国风因特软件(北京)有限公司><1, 0, 2, 4>
[PID: 1700][D:\VIP1\Rfw\Rfw.exe] <Rising tech Co. ltd><15, 0, 0, 16>
[D:\VIP1\Rfw\BmpFace.dll] <N/A><14, 0, 0, 2>
[D:\VIP1\Rfw\MVEngine.dll] <瑞星科技股份有限公司><13, 0, 0, 82>
[D:\VIP1\Rfw\rfw.dll] <N/A><N/A>
[D:\VIP1\Rfw\CHN\rfw.lag] <瑞星科技股份有限公司><15, 0, 0, 3>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 1792][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.3018>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 1800][D:\VIP\RAV\RAVTIMER.EXE] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 39>
[D:\VIP\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
[D:\VIP\RAV\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7>
[D:\VIP\RAV\CfgDll.dll] <rising><17, 0, 0, 60>
[D:\VIP\RAV\RsCommX.dll] <rising><17, 0, 0, 3>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 1812][D:\VIP\RAV\RAVMON.EXE] <Beijing Rising Technology Co., Ltd.><17, 0, 1, 37>
[D:\VIP\RAV\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 40>
[D:\VIP\RAV\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7>
[D:\VIP\RAV\CfgDll.dll] <rising><17, 0, 0, 60>
[D:\VIP\RAV\RsCommX.dll] <rising><17, 0, 0, 3>
[D:\VIP\RAV\PngDll.dll] <Rising><17, 0, 0, 2>
[D:\VIP\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 1828][C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe] <InstallShield Software Corporation><3, 00, 100, 1161>
[PID: 1968][C:\WINDOWS\System32\ctfmon.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 1980][C:\Program Files\Messenger\MSMSGS.EXE] <Microsoft Corporation><4.7.2009>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\System32\msdmo.dll] <N/A><N/A>
[PID: 2012][D:\兔子\SRIECLI.EXE] <Super Rabbit Soft><6.95.0002>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 2020][D:\兔子\srsearch.exe] <><1.1.1.1>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 524][C:\WINDOWS\System32\conime.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 1412][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.1106 (xpsp1.020828-1920)>
[PID: 1564][C:\WINDOWS\System32\nvsvc32.exe] <NVIDIA Corporation><6.14.10.5303>
[PID: 1584][D:\VIP\RAV\CCENTER.EXE] <rising><17, 0, 0, 1>
[PID: 1292][D:\VIP\RAV\Ravmond.exe] <Beijing Rising Technology Co., Ltd.><17, 0, 1, 53>
[D:\VIP\RAV\guidll.dll] <rising><17, 0, 0, 13>
[D:\VIP\RAV\RsCommX.dll] <rising><17, 0, 0, 3>
[D:\VIP\RAV\RSAPPMGR.DLL] <Rising Corp.><17, 0, 0, 7>
[D:\VIP\RAV\CfgDll.dll] <rising><17, 0, 0, 60>
[D:\VIP\Rav\Scanner.dll] <Rising><17, 0, 0, 43>
[D:\VIP\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
[D:\VIP\Rav\libload.dll] <Rising><17, 0, 0, 14>
[D:\VIP\Rav\VirusLib.dll] <Rising><17, 0, 0, 26>
[D:\VIP\RAV\MailMon.dll] < ><17, 0, 0, 9>
[D:\VIP\Rav\SpamEng.dll] <N/A><17, 0, 0, 7>
[D:\VIP\RAV\MemMon.dll] <北京瑞星><17, 8, 0, 0>
[D:\VIP\RAV\expscan.dll] <N/A><17, 0, 0, 6>
[D:\VIP\RAV\mPorts.dll] <Beijing Rising Technology Corporation Limited><3, 0, 0, 3>
[D:\VIP\RAV\regmon.dll] < ><17, 0, 0, 12>
[D:\VIP\RAV\HookWeb.dll] <rising><17, 0, 0, 4>
[D:\VIP\Rav\engine.dll] <rising><17, 0, 0, 37>
[D:\VIP\Rav\UnExe.dll] <Rising><17, 0, 0, 25>
[D:\VIP\Rav\ScanEx.dll] <Rising><17, 0, 0, 33>
[D:\VIP\Rav\PostTrt.dll] <Rising><17, 0, 0, 15>
[D:\VIP\Rav\NvFile.dll] <瑞星><17, 0, 0, 13>
[D:\VIP\Rav\ScanMac.dll] <rising><17, 0, 0, 15>
[D:\VIP\Rav\ScanSct.dll] <rising><17, 0, 0, 27>
[D:\VIP\Rav\ScanExec.dll] <N/A><17, 0, 0, 21>
[D:\VIP\Rav\Unpacker.dll] <rising><17, 0, 0, 19>
[D:\VIP\Rav\ExtOLE.dll] <rising><17, 0, 0, 19>
[PID: 1932][D:\VIP\RAV\RavStub.exe] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 27>
[D:\VIP\RAV\RsCommX.dll] <rising><17, 0, 0, 3>
[D:\VIP\RAV\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><17, 0, 0, 17>
[PID: 424][c:\progra~1\common~1\instal~1\update~1\isuspm.exe] <InstallShield Software Corporation><3, 00, 100, 1131>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\Program Files\Common Files\InstallShield\UpdateService\_ispmres.dll] <InstallShield Software Corporation><3, 00, 100, 1138>
[D:\VIP\Rav\RavScrCh.dll] <N/A><17, 0, 0, 7>
[PID: 2208][C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\agent.exe] <InstallShield Software Corporation><3, 00, 100, 1165>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[PID: 4072][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.0 (xpclient.010817-1148)>
[PID: 3124][D:\TT\TTraveler.exe] <腾讯公司><2, 1, 0, 209>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
[C:\WINDOWS\downlo~1\CnsHook.dll] <北京三七二一科技有限公司><1, 0, 2, 5>
[D:\TT\Plugins\QQFloatBar\QQFloatBar4TT2.dll] <腾讯公司><1, 1, 0, 5>
[D:\TT\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 4>
[D:\VIP\Rav\RavScrCh.dll] <N/A><17, 0, 0, 7>
[PID: 3864][D:\SREng.exe] <Smallfrogs Studio><1.1.0.269>
[C:\WINDOWS\downlo~1\CnsMin.dll] <北京三七二一科技有限公司><1, 5, 1, 3>
==================================
文件关联
.TXT OK. [C:\WINDOWS\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [C:\WINDOWS\System32\winhlp32.exe %1]
.INI OK. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
.INF OK. [C:\WINDOWS\System32\NOTEPAD.EXE %1]
==================================