0, 4>
[C:\Program Files\rising\Rav\ExtOLE.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 6>
[C:\Program Files\rising\Rav\RsStore.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 5>
[C:\Program Files\rising\Rav\ScanNet.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 5>
[PID: 1168][c:\program files\rising\rfw\rfwsrv.exe] <Beijing Rising Technology Co.,
Ltd.><4, 0, 0, 32>
[c:\program files\rising\rfw\RfwRule.dll] <Beijing Rising Technology Co., Ltd.><4, 0,
0, 13>
[c:\program files\rising\rfw\rfwlog.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0,
6>
[c:\program files\rising\rfw\Rfwdrv.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0,
21>
[c:\program files\rising\rfw\MonDrv.dll] <rs><1, 0, 0, 4>
[c:\program files\rising\rfw\ProcLib.dll] <Beijing Rising Technology Co., Ltd.><4, 0,
0, 9>
[c:\program files\rising\rfw\mPorts.dll] <Beijing Rising Technology Co., Ltd.><4, 0, 0,
3>
[PID: 1312][C:\windows\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696
(xpsp_sp2_gdr.050610-1519)>
[C:\windows\system32\hpzll3xu.dll] <Hewlett-Packard Company><60.051.641.00>
[C:\windows\System32\spool\PRTPROCS\W32X86\hpzpp3xu.dll] <Hewlett-Packard
Corporation><60.051.641.00>
[PID: 1372][C:\windows\System32\SCardSvr.exe] <Microsoft Corporation><5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)>
[PID: 1432][C:\Program Files\rising\Rav\RavStub.exe] <Beijing Rising Technology Co.,
Ltd.><18, 0, 0, 16>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 4>
[PID: 1624][C:\WINDOWS\system32\wdfmgr.exe] <Microsoft Corporation><5.2.3790.1230 built by:
dnsrv(bld4act)>
[PID: 2024][C:\windows\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180
(xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[C:\Program Files\rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 4>
[C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll] <Nero AG><2, 0, 0, 8>
[C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 4>
[PID: 124][c:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co.,
Ltd.><4, 0, 0, 52>
[c:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 23>
[c:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 4>
[c:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 5>
[PID: 208][C:\windows\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)>
[PID: 832][C:\Program Files\rising\Rav\RavTask.exe] <Beijing Rising Technology Co.,
Ltd.><18, 0, 0, 22>
[C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 4>
[C:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 2>
[C:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 11>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 1040][C:\WINDOWS\system32\BHDCRegC.exe] <SHHIC><1.01>
[PID: 1136][E:\木马\Filseclab\Twister\twister.exe] <Filseclab Corporation><6, 0, 2, 18851>
[E:\木马\Filseclab\Twister\Twshlext.DLL] <FILSECLAB Corp.><1, 0, 1, 935>
[E:\木马\Filseclab\Twister\Quarantine.dll] <FILSECLAB Corp.><1, 0, 0, 487>
[E:\木马\Filseclab\Twister\W32Tools.dll] <FILSECLAB Corp.><1, 0, 0, 659>
[E:\木马\Filseclab\Twister\Virsubm.dll] <FILSECLAB Corp.><1, 0, 0, 184>
[E:\木马\Filseclab\Twister\emlib.dll] <FILSECLAB Corp.><1, 0, 0, 718>
[E:\木马\Filseclab\Twister\Regpro.dll] <FILSECLAB Corporation><1, 0, 0, 147>
[E:\木马\Filseclab\Twister\Decexp.dll] <FILSECLAB Corp.><1, 0, 0, 1648>
[E:\木马\Filseclab\Twister\Unchm.dll] <FILSECLAB Corp.><1, 0, 0, 80>
[E:\木马\Filseclab\Twister\unrar.dll] <N/A><N/A>
[E:\木马\Filseclab\Twister\unzip32.dll] <Info-ZIP><5.52>
[E:\木马\Filseclab\Twister\unacev2.dll] <N/A><N/A>
[E:\木马\Filseclab\Twister\plus.dll] <Filseclab Corporation><2.0.502.1050>
[PID: 1144][C:\WINDOWS\system32\ctfmon.exe] <Microsoft Corporation><5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)>
[PID: 1076][C:\Program Files\rising\Rav\Ravmon.exe] <Beijing Rising Technology Co.,
Ltd.><18, 0, 1, 33>
[C:\Program Files\rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 25>
[C:\Program Files\rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 19>
[C:\Program Files\rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 2>
[C:\Program Files\rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 11>
[C:\Program Files\rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 4>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 5>
[PID: 2700][C:\windows\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)>
[PID: 3876][C:\windows\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)>
[PID: 3868][C:\Program Files\Common Files\Filseclab\FilMsg.exe] <费尔安全实验室><3, 1, 0,
927>
[PID: 3520][C:\Program Files\Internet Explorer\iexplore.exe] <Microsoft
Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\Program Files\rising\Rav\RavScrCh.dll] <Beijing Rising Technology Co., Ltd.><18, 0,
0, 4>
[C:\windows\system32\KIme.ime] <金山软件公司><1, 0, 0, 1>
[C:\PROGRA~1\COMMON~1\KingSoft\Extract\KSEngine.dll] <><1, 0, 0, 1>
[C:\PROGRA~1\COMMON~1\KingSoft\Extract\xfile.dll] <N/A><N/A>
[C:\windows\system32\UNISPIM.IME] <北京清华紫光软件股份有限公司><3.0.0.3045>
[C:\windows\system32\upengine.dll] <北京清华紫光软件股份有限公司><3.0.0.3045>
[C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll] <Nero AG><2, 0, 0, 8>
[C:\WINDOWS\System32\macromed\flash\Flash.ocx] <Macromedia, Inc.><7,0,19,0>
[PID: 3068][C:\Program Files\rising\Rav\RsAgent.exe] <Beijing Rising Technology Co.,
Ltd.><18, 0, 0, 12>
[C:\Program Files\rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 3448][C:\WINDOWS\msagent\AgentSvr.exe] <Microsoft Corporation><2.00.0.3422>
[PID: 1488][C:\windows\system32\NOTEPAD.EXE] <Microsoft Corporation><5.1.2600.2180
(xpsp_sp2_rtm.040803-2158)>
[PID: 1868][C:\DOCUME~1\mm\LOCALS~1\Temp\Rar$EX02.531\SREng2\SREng.exe] <Smallfrogs
Studio><2.0.21.505>
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\windows\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS Error. []
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
==================================
