正在运行的进程
[PID: 172][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 196][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 192][\??\C:\WINNT\system32\winlogon.exe] [Microsoft Corporation, 5.00.2195.6714]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[C:\WINNT\system32\Ati2evxx.dll] [ATI Technologies Inc., 6.14.10.4116]
[PID: 244][C:\WINNT\system32\services.exe] [Microsoft Corporation, 5.00.2195.6700]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[C:\WINNT\system32\dmserver.dll] [VERITAS Software Corp., 2195.6605.297.3]
[PID: 256][C:\WINNT\system32\lsass.exe] [Microsoft Corporation, 5.00.2195.6695]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[PID: 420][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[PID: 448][F:\rising\Rav\CCenter.exe] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 3]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[PID: 508][C:\WINNT\system32\spoolsv.exe] [Microsoft Corporation, 5.00.2195.6659]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[PID: 572][C:\WINNT\System32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[C:\WINNT\System32\APIHookDll.dll] [N/A, N/A]
[PID: 616][C:\WINNT\system32\MSTask.exe] [Microsoft Corporation, 4.71.2195.6704]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[PID: 704][C:\Program Files\WinPoET\WrOS.EXE] [iVasion, a Routerware Company, 1, 1, 2, 0]
[C:\Program Files\WinPoET\WrOSControl.dll] [N/A, N/A]
[C:\Program Files\WinPoET\WrFCUtil.dll] [N/A, N/A]
[C:\Program Files\WinPoET\WrEventLog.dll] [N/A, N/A]
[C:\Program Files\WinPoET\WrRTUtil.dll] [N/A, N/A]
[C:\Program Files\WinPoET\WrInterfaceManager.dll] [N/A, N/A]
[C:\Program Files\WinPoET\WrConfig.dll] [N/A, N/A]
[C:\Program Files\WinPoET\WrNetworkDriver.dll] [N/A, N/A]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[C:\Program Files\WinPoET\Wr_Mac_Frames.DLL] [N/A, N/A]
[C:\Program Files\WinPoET\WrPoetDriver.DLL] [N/A, N/A]
[C:\Program Files\WinPoET\WrPacketSock.dll] [N/A, N/A]
[PID: 748][C:\WINNT\system32\svchost.exe] [Microsoft Corporation, 5.00.2134.1]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[PID: 824][F:\rising\Rav\RavStub.exe] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 4]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[F:\rising\Rav\RsCommX.dll] [rising, 18, 0, 0, 1]
[F:\rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[PID: 972][C:\WINNT\Explorer.EXE] [Microsoft Corporation, 5.00.3700.6690]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[C:\Program Files\TENCENT\Adplus\Adplus.dll] [Tencent, 4, 4, 2, 30]
[F:\Rising\KakaToolBar\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[C:\WINNT\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 7]
[C:\Program Files\TENCENT\Adplus\SSAddr.dll] [Tencent, 4, 4, 2, 22]
[F:\FLASHGET\jccatch.dll] [FlashGet, 1, 1, 5, 0]
[PID: 1012][C:\WINNT\system32\4E426388.exe] [N/A, N/A]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[C:\Program Files\TENCENT\Adplus\Adplus.dll] [Tencent, 4, 4, 2, 30]
[F:\Rising\KakaToolBar\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1060][C:\WINNT\SOUNDMAN.EXE] [Avance Logic, Inc., 5.0.02]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[F:\Rising\KakaToolBar\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[C:\Program Files\TENCENT\Adplus\Adplus.dll] [Tencent, 4, 4, 2, 30]
[PID: 1168][C:\WINNT\system32\internat.exe] [Microsoft Corporation, 5.00.2920.0000]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[C:\Program Files\TENCENT\Adplus\Adplus.dll] [Tencent, 4, 4, 2, 30]
[F:\Rising\KakaToolBar\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
[PID: 1400][C:\Documents and Settings\Glacier\桌面\sreng2\SREng\SREng.exe] [Smallfrogs Studio, 2.2.6.605]
[C:\WINNT\system32\APIHookDll.dll] [N/A, N/A]
[C:\Program Files\TENCENT\Adplus\Adplus.dll] [Tencent, 4, 4, 2, 30]
[F:\Rising\KakaToolBar\ieprot.dll] [Beijing Rising Technology Co., Ltd., 1, 0, 0, 8]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
