Caption               CommandLine                                                                                                                                                                                                                                                                                         ExecutablePath                                                             Handle  
System Idle Process                                                                                                                                                                                                                                                                                                                                                                                  0       
System                                                                                                                                                                                                                                                                                                                                                                                               4       
smss.exe              \SystemRoot\System32\smss.exe                                                                                                                                                                                                                                                                                                                                                  236     
csrss.exe             %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16  C:\Windows\system32\csrss.exe                                              344     
wininit.exe           wininit.exe                                                                                                                                                                                                                                                                                         C:\Windows\system32\wininit.exe                                            408     
csrss.exe             %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16  C:\Windows\system32\csrss.exe                                              416     
services.exe          C:\Windows\system32\services.exe                                                                                                                                                                                                                                                                    C:\Windows\system32\services.exe                                           464     
lsass.exe             C:\Windows\system32\lsass.exe                                                                                                                                                                                                                                                                       C:\Windows\system32\lsass.exe                                              476     
lsm.exe               C:\Windows\system32\lsm.exe                                                                                                                                                                                                                                                                         C:\Windows\system32\lsm.exe                                                488     
svchost.exe           C:\Windows\system32\svchost.exe -k DcomLaunch                                                                                                                                                                                                                                                       C:\Windows\system32\svchost.exe                                            604     
nvvsvc.exe            C:\Windows\system32\nvvsvc.exe                                                                                                                                                                                                                                                                      C:\Windows\system32\nvvsvc.exe                                             672     
QQPCRTP.exe           "C:\Program Files\Tencent\QQPCMgr\4.5.973.201\QQPCRTP.exe" -r                                                                                                                                                                                                                                       C:\Program Files\Tencent\QQPCMgr\4.5.973.201\QQPCRTP.exe                   700     
svchost.exe           C:\Windows\system32\svchost.exe -k RPCSS                                                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe                                            748     
RsMgrSvc.exe          "C:\Program Files\Rising\RSD\RsMgrSvc.exe"                                                                                                                                                                                                                                                          C:\Program Files\Rising\RSD\RsMgrSvc.exe                                   840     
RavMonD.exe           "C:\Program Files\Rising\RAV\RavMonD.exe"                                                                                                                                                                                                                                                           C:\Program Files\Rising\RAV\RavMonD.exe                                    872     
winlogon.exe          winlogon.exe                                                                                                                                                                                                                                                                                        C:\Windows\system32\winlogon.exe                                           1020    
svchost.exe           C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted                                                                                                                                                                                                                                    C:\Windows\System32\svchost.exe                                            1096    
svchost.exe           C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted                                                                                                                                                                                                                                     C:\Windows\System32\svchost.exe                                            1128    
svchost.exe           C:\Windows\system32\svchost.exe -k netsvcs                                                                                                                                                                                                                                                          C:\Windows\system32\svchost.exe                                            1152    
audiodg.exe                                                                                                                                                                                                                                                                                                                                                                                          1248    
svchost.exe           C:\Windows\system32\svchost.exe -k LocalService                                                                                                                                                                                                                                                     C:\Windows\system32\svchost.exe                                            1288    
nvvsvc.exe            C:\Windows\system32\nvvsvc.exe -session -first                                                                                                                                                                                                                                                      C:\Windows\system32\nvvsvc.exe                                             1376    
svchost.exe           C:\Windows\system32\svchost.exe -k NetworkService                                                                                                                                                                                                                                                   C:\Windows\system32\svchost.exe                                            1396    
wlanext.exe           C:\Windows\system32\WLANExt.exe 3013816                                                                                                                                                                                                                                                             C:\Windows\system32\WLANExt.exe                                            1536    
conhost.exe           \??\C:\Windows\system32\conhost.exe                                                                                                                                                                                                                                                                 C:\Windows\system32\conhost.exe                                            1544    
spoolsv.exe           C:\Windows\System32\spoolsv.exe                                                                                                                                                                                                                                                                     C:\Windows\System32\spoolsv.exe                                            1664    
svchost.exe           C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork                                                                                                                                                                                                                                            C:\Windows\system32\svchost.exe                                            1720    
dwm.exe               "C:\Windows\system32\Dwm.exe"                                                                                                                                                                                                                                                                       C:\Windows\system32\Dwm.exe                                                1796    
explorer.exe          C:\Windows\Explorer.EXE                                                                                                                                                                                                                                                                             C:\Windows\Explorer.EXE                                                    1836    
AppleOSSMgr.exe       C:\Windows\system32\AppleOSSMgr.exe                                                                                                                                                                                                                                                                 C:\Windows\system32\AppleOSSMgr.exe                                        1892    
AppleTimeSrv.exe      C:\Windows\system32\AppleTimeSrv.exe                                                                                                                                                                                                                                                                C:\Windows\system32\AppleTimeSrv.exe                                       1936    
DctSer.exe            "C:\Program Files\Thunder Network\Thunder\Program\DctSer.exe"                                                                                                                                                                                                                                       C:\Program Files\Thunder Network\Thunder\Program\DctSer.exe                312     
nSvcIp.exe            "C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe"                                                                                                                                                                                                                         C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe  540     
Bootcamp.exe          "C:\Program Files\Boot Camp\Bootcamp.exe"                                                                                                                                                                                                                                                           C:\Program Files\Boot Camp\Bootcamp.exe                                    2160    
RsTray.exe            "C:\Program Files\Rising\RAV\RsTray.exe" -system                                                                                                                                                                                                                                                    C:\Program Files\Rising\RAV\RsTray.exe                                     2176    
WmiPrvSE.exe          C:\Windows\system32\wbem\wmiprvse.exe                                                                                                                                                                                                                                                               C:\Windows\system32\wbem\wmiprvse.exe                                      2228    
svchost.exe           C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation                                                                                                                                                                                                                                   C:\Windows\system32\svchost.exe                                            2796    
cmd.exe               cmd /c ""C:\Users\lyd\Desktop\异常信息收集2011.bat" "                                                                                                                                                                                                                                               C:\Windows\system32\cmd.exe                                                1700    
conhost.exe           \??\C:\Windows\system32\conhost.exe                                                                                                                                                                                                                                                                 C:\Windows\system32\conhost.exe                                            3148    
TrustedInstaller.exe  C:\Windows\servicing\TrustedInstaller.exe                                                                                                                                                                                                                                                           C:\Windows\servicing\TrustedInstaller.exe                                  1300    
iexplore.exe          "C:\Program Files\Internet Explorer\iexplore.exe"                                                                                                                                                                                                                                                   C:\Program Files\Internet Explorer\iexplore.exe                            596     
iexplore.exe          "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:596 CREDAT:79873                                                                                                                                                                                                                           C:\Program Files\Internet Explorer\iexplore.exe                            3480    
iexplore.exe          "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:596 CREDAT:79874                                                                                                                                                                                                                           C:\Program Files\Internet Explorer\iexplore.exe                            3888    
WmiPrvSE.exe          C:\Windows\system32\wbem\wmiprvse.exe                                                                                                                                                                                                                                                               C:\Windows\system32\wbem\wmiprvse.exe                                      2820    
WMIC.exe              wmic  process get caption,handle,commandline,executablepath                                                                                                                                                                                                                                         C:\Windows\System32\Wbem\WMIC.exe                                          3132    
