[PID: 564][C:\WINNT\System32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 600][C:\PROGRA~1\ADSL\ADSL拨~1\app\pppoeservice.exe] <N/A><N/A>
[PID: 656][C:\WINNT\system32\regsvc.exe] <Microsoft Corporation><5.00.2195.3649>
[PID: 672][C:\WINNT\system32\MSTask.exe] <Microsoft Corporation><4.71.2195.6920>
[PID: 724][C:\WINNT\System32\WBEM\WinMgmt.exe] <Microsoft Corporation><1.50.1085.0070>
[PID: 756][C:\WINNT\system32\svchost.exe] <Microsoft Corporation><5.00.2134.1>
[PID: 812][C:\Program Files\Rising\Rav\RavStub.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1024][C:\WINNT\Explorer.EXE] <Microsoft Corporation><5.00.3502.5321>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[PID: 1056][c:\program files\rising\rfw\RfwMain.exe] <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
[c:\program files\rising\rfw\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
[c:\program files\rising\rfw\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[c:\program files\rising\rfw\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1144][C:\WINNT\System32\igfxtray.exe] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\hccutils.DLL] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\igfxdev.dll] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\igfxsrvc.dll] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\igfxres.dll] <Intel Corporation><3,0,0,1064>
[PID: 1160][C:\WINNT\System32\hkcmd.exe] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\hccutils.DLL] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\igfxdev.dll] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\igfxsrvc.dll] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\igfxhk.dll] <Intel Corporation><3,0,0,1064>
[C:\WINNT\System32\igfxres.dll] <Intel Corporation><3,0,0,1064>
[PID: 1176][C:\WINNT\SOUNDMAN.EXE] <Realtek Semiconductor Corp.><5.1.00>
[PID: 1196][C:\Program Files\Rising\Rav\RavTask.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[PID: 1244][C:\WINNT\system32\internat.exe] <Microsoft Corporation><5.00.2920.0000>
[PID: 1272][C:\Program Files\Rising\Rav\Ravmon.exe] <Beijing Rising Technology Co., Ltd.><18, 0, 1, 28>
[C:\Program Files\Rising\Rav\RsGuiLib.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
[C:\Program Files\Rising\Rav\BWList.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
[C:\Program Files\Rising\Rav\RSAPPMGR.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
[C:\Program Files\Rising\Rav\CfgDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
[C:\Program Files\Rising\Rav\RSCOMMON.DLL] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[C:\Program Files\Rising\Rav\RsCommX.dll] <rising><18, 0, 0, 1>
[C:\Program Files\Rising\Rav\PngDll.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1220][C:\PROGRA~1\ADSL\ADSL拨~1\app\EnterNet.exe] <N/A><N/A>
[C:\PROGRA~1\ADSL\ADSL拨~1\app\PacketLog.dll] <Efficient Networks, Inc.><1, 5, 0, 21>
[C:\PROGRA~1\ADSL\ADSL拨~1\app\DSLAPI32.dll] <Efficient Networks Inc.><1, 5, 0, 19>
[C:\PROGRA~1\ADSL\ADSL拨~1\app\ResMsgENU.dll] < ><1, 5, 0, 17>
[C:\PROGRA~1\ADSL\ADSL拨~1\app\ResENU.dll] < ><1, 5, 0, 18>
[PID: 988][D:\qq\QQ.exe] <TENCENT><0, 0, 0, 0>
[D:\qq\QQBaseClassInDll.dll] <><1, 0, 0, 1>
[D:\qq\QQHelperDll.dll] <><1, 0, 0, 1>
[D:\qq\BasicCtrlDll.dll] <Tencent><5, 0, 200, 160>
[D:\qq\QQAPI.dll] <><1, 0, 0, 1>
[D:\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[D:\qq\LoginCtrl.dll] <><1, 0, 0, 1>
[D:\qq\npkcntc.dll] <INCA Internet Co., Ltd.><2006, 3, 2, 1>
[D:\qq\npkpdb.dll] <INCA Internet Co., Ltd.><2003, 10, 1, 1>
[D:\qq\QQRes.dll] <tencent><1, 0, 0, 1>
[D:\qq\QQMainFrame.dll] <N/A><N/A>
[D:\qq\CQQApplication.dll] <N/A><N/A>
[D:\qq\NewSkin.dll] <><1, 0, 0, 1>
[D:\qq\HostingMgr.dll] <><1, 0, 0, 1>
[D:\qq\CameraDll.dll] <><1, 0, 0, 1>
[D:\qq\MailSummary.dll] <><1, 0, 0, 1>
[D:\qq\QQSpace.dll] <><1, 0, 0, 1>
[D:\qq\QQAllInOne.dll] <N/A><N/A>
[D:\qq\GroupLive.dll] <N/A><N/A>
[D:\qq\SCCore.dll] <N/A><N/A>
[C:\WINNT\System32\devenum.dll] <N/A><N/A>
[D:\qq\QQGroupMng.dll] <><1, 0, 0, 1>
[D:\qq\LongConnection.dll] <tencent><5, 0, 200, 160>
[D:\qq\QQPlugin.dll] <N/A><N/A>
[D:\qq\ShareFiles.dll] <N/A><N/A>
[D:\qq\QQZip.dll] <tencent><0, 3, 2, 4>
[D:\qq\QQSysMsgMng.dll] <N/A><N/A>
[D:\qq\UserDefinedHead.dll] <><1, 0, 0, 1>
[D:\qq\QQConfigPlugin.dll] <><1, 0, 0, 1>
[D:\qq\QRingMng.dll] <N/A><N/A>
[D:\qq\PhoneAPI.dll] <><1, 0, 0, 1>
[D:\qq\DialerAllinOne.dll] <tencent><1, 4, 0, 0>
[D:\qq\QQAvatar.dll] <N/A><N/A>
[D:\qq\FlashAvatarDll.dll] <><1, 4, 0, 1>
[D:\qq\QQPet.dll] <><1, 0, 0, 1>
[D:\qq\BQQApplication.dll] <N/A><N/A>
[C:\WINNT\system32\RavExt.dll] <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
[D:\qq\CommercesMng.dll] <><1, 0, 0, 1>
[D:\qq\PersonalDesktop.dll] <深圳市腾讯计算机系统公司QQ工作小组><1, 0, 0, 2>
[D:\qq\QQAddr.dll] <深圳市腾讯计算机系统有限公司><5, 0, 101, 200>
[D:\qq\QQSceneMng.dll] <N/A><N/A>
[D:\qq\QQPhoneHelper.dll] <腾讯科技(深圳)有限公司><2, 0, 4, 40>
[PID: 852][D:\qq\TIMPlatform.exe] <tencent><0, 3, 1, 8>
[D:\qq\TIMProxy.dll] <tencent><0, 3, 2, 4>
[PID: 1452][D:\智能扫描\SREng.exe] <Smallfrogs Studio><2.0.12.350>
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]