当前运行的进程：
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Program Files\rising\rfw\rfwsrv.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\rising\rfw\RfwMain.exe
D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\aurons\桌面\超人6[1].1免验证版.rar\superman18.8\ManagerScout.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\aurons\桌面\超人6[1].1免验证版.rar\superman18.8\Mir3SuperMan.exe
C:\Documents and Settings\aurons\桌面\超人6[1].1免验证版.rar\superman18.8\Mir3SuperMan.exe
C:\Documents and Settings\aurons\桌面\超人6[1].1免验证版.rar\superman18.8\Mir3SuperMan.exe
D:\Program Files\rising\Rav\RavTimer.exe
C:\WINDOWS\system32\conime.exe
D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
D:\PROGRAM FILES\RISING\RAV\RavStub.exe
C:\Documents and Settings\aurons\桌面\超人6[1].1免验证版.rar\superman18.8\sm_mon.exe
F:\Program Files\Tencent\QQ\QQ.exe
F:\Program Files\Tencent\QQ\TIMPlatform.exe
D:\Program Files\rising\rav\RavMon.exe
D:\Program Files\rising\rfw\RfwCfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\aurons\桌面\2535952005811174944\HijackThis1991zww.exe
O4 - 启动项HKLM\\Run: [C-Media Mixer] ; Mixer.exe /startup
O4 - 启动项HKLM\\Run: [WinampAgent] ; F:\Program Files\Winamp\winampa.exe
O4 - 启动项HKLM\\Run: [RavTimer] D:\PROGRA~1\RISING\RAV\RAVTIMER.EXE
O4 - 启动项HKLM\\Run: [RavMon] D:\PROGRA~1\RISING\RAV\RAVMON.EXE -SYSTEM
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - IE右键菜单中的新增项目: &使用迅雷下载 - F:\Program Files\Thunder Network\Thunder\geturl.htm
O8 - IE右键菜单中的新增项目: &使用迅雷下载全部链接 - F:\Program Files\Thunder Network\Thunder\getAllurl.htm
O8 - IE右键菜单中的新增项目: 使用Kugoo下载 - F:\PROGRA~1\KUGOO2\KugooDownX.htm
O8 - IE右键菜单中的新增项目: 添加到QQ自定义面板 - F:\Program Files\Tencent\QQ\AddPanel.htm
O8 - IE右键菜单中的新增项目: 添加到QQ表情 - F:\Program Files\Tencent\QQ\AddEmotion.htm
O8 - IE右键菜单中的新增项目: 用QQ彩信发送该图片 - F:\Program Files\Tencent\QQ\SendMMS.htm
O9 - 浏览器额外的按钮: QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的“工具”菜单项: 腾讯QQ - {c95fe080-8f5d-11d2-a20b-00aa003c157b} - F:\Program Files\Tencent\QQ\QQ.EXE
O9 - 浏览器额外的按钮: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - 浏览器额外的“工具”菜单项: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1123633774062
O17 - HKLM\System\CCS\Services\Tcpip\..\{1D8177A4-19FD-4976-A0E8-2D08CB14C7C7}: NameServer = 61.177.7.1 221.228.255.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{1D8177A4-19FD-4976-A0E8-2D08CB14C7C7}: NameServer = 61.177.7.1 221.228.255.1
O23 - NT 服务: Rising Personal Firewall Service (RfwService) - Beijing Rising Technology Corporation Limited - D:\Program Files\rising\rfw\rfwsrv.exe
O23 - NT 服务: Rising Process Communication Center (RsCCenter) - rising - D:\PROGRAM FILES\RISING\RAV\CCENTER.EXE
O23 - NT 服务: RsRavMon Service (RsRavMon) - Beijing Rising Technology Co., Ltd. - D:\PROGRAM FILES\RISING\RAV\Ravmond.exe
