Caption                   CommandLine                                                                                                                                                                                                                                                                                                                                                                                                           ExecutablePath                                               Handle  
System Idle Process                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          0       
System                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       4       
smss.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     272     
csrss.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    376     
wininit.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  444     
csrss.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    452     
winlogon.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 508     
services.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 544     
lsass.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    560     
lsm.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      568     
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  672     
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  752     
RsMgrSvc.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 812     
RavMonD.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  860     
RavMonD.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  896     
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  920     
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  952     
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  988     
audiodg.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1076    
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1124    
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1248    
spoolsv.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1376    
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1408    
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1460    
IcbcDaemon.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               1584    
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1644    
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2212    
taskhost.exe              "taskhost.exe"                                                                                                                                                                                                                                                                                                                                                                                                        C:\Windows\system32\taskhost.exe                             2300    
dwm.exe                   "C:\Windows\system32\Dwm.exe"                                                                                                                                                                                                                                                                                                                                                                                         C:\Windows\system32\Dwm.exe                                  2444    
explorer.exe              C:\Windows\Explorer.EXE                                                                                                                                                                                                                                                                                                                                                                                               C:\Windows\Explorer.EXE                                      2496    
SetPoint.exe              "C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming                                                                                                                                                                                                                                                                                                                                                      C:\Program Files\Logitech\SetPointP\SetPoint.exe             2612    
KHALMNPR.exe              KHALMNPR.EXE /API                                                                                                                                                                                                                                                                                                                                                                                                     C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE    2768    
RsTray.exe                "C:\Program Files\Rising\RAV\RSTRAY.EXE" -system                                                                                                                                                                                                                                                                                                                                                                      C:\Program Files\Rising\RAV\RSTRAY.EXE                       3196    
RsTray.exe                "C:\Program Files\Rising\RFW\RSTRAY.EXE" -system                                                                                                                                                                                                                                                                                                                                                                      C:\Program Files\Rising\RFW\RSTRAY.EXE                       3204    
popwndexe.exe             "C:\Program Files\Rising\RSD\popwndexe.exe"                                                                                                                                                                                                                                                                                                                                                                           C:\Program Files\Rising\RSD\popwndexe.exe                    3212    
SearchIndexer.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            3244    
wmpnetwk.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 3504    
taskmgr.exe               "C:\Windows\system32\taskmgr.exe" /4                                                                                                                                                                                                                                                                                                                                                                                  C:\Windows\system32\taskmgr.exe                              3996    
perfmon.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  2576    
FlashUtil10t_ActiveX.exe  C:\Windows\system32\Macromed\Flash\FlashUtil10t_ActiveX.exe -Embedding                                                                                                                                                                                                                                                                                                                                                C:\Windows\system32\Macromed\Flash\FlashUtil10t_ActiveX.exe  3560    
iexplore.exe              "C:\Program Files\Internet Explorer\iexplore.exe" http://www.ikaka.com/                                                                                                                                                                                                                                                                                                                                               C:\Program Files\Internet Explorer\iexplore.exe              3004    
iexplore.exe              "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3004 CREDAT:203009                                                                                                                                                                                                                                                                                                                                           C:\Program Files\Internet Explorer\iexplore.exe              2972    
iexplore.exe              "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3004 CREDAT:203010                                                                                                                                                                                                                                                                                                                                           C:\Program Files\Internet Explorer\iexplore.exe              2568    
iexplore.exe              "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:3004 CREDAT:203012                                                                                                                                                                                                                                                                                                                                           C:\Program Files\Internet Explorer\iexplore.exe              1484    
sppsvc.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   1852    
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1680    
cmd.exe                   cmd /c ""C:\Users\huan\AppData\Local\Temp\Temp1_异常信息收集2011.zip\异常信息收集2011.bat" "                                                                                                                                                                                                                                                                                                                          C:\Windows\system32\cmd.exe                                  3112    
conhost.exe               \??\C:\Windows\system32\conhost.exe                                                                                                                                                                                                                                                                                                                                                                                   C:\Windows\system32\conhost.exe                              4088    
TrustedInstaller.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         2460    
svchost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  1596    
SearchProtocolHost.exe    "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-702330513-2892752270-3971076634-10002_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-702330513-2892752270-3971076634-10002 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"  "1"  C:\Windows\system32\SearchProtocolHost.exe                   3888    
ImeUtil.exe               "d:\Program Files\SogouWBInput\2.0.0.1147\ImeUtil.exe"  1 -os -sih -f -usa                                                                                                                                                                                                                                                                                                                                            d:\Program Files\SogouWBInput\2.0.0.1147\ImeUtil.exe         2180    
SearchFilterHost.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         3872    
WmiPrvSE.exe                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 2292    
WMIC.exe                  wmic  process get caption,handle,commandline,executablepath                                                                                                                                                                                                                                                                                                                                                           C:\Windows\System32\Wbem\WMIC.exe                            3728    
