正在运行的进程
[PID: 440][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[PID: 512][\??\C:\WINDOWS\system32\winlogon.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[C:\WINDOWS\System32\NavLogon.dll] [N/A, ]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[PID: 556][C:\WINDOWS\system32\services.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[PID: 568][C:\WINDOWS\system32\lsass.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[PID: 724][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[PID: 768][C:\WINDOWS\system32\svchost.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[PID: 848][C:\WINDOWS\System32\svchost.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[PID: 1320][C:\WINDOWS\Explorer.EXE] [Microsoft Corporation, 6.00.2900.2149 (xpsp_sp2_rc2.040610-1520)]
[C:\WINDOWS\DOWNLO~1\CnsHook.dll] [北京三七二一科技有限公司, 1, 0, 2, 0]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\PROGRA~1\3721\helper.dll] [, 2, 5, 0, 1003]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\PROGRA~1\3721\alrex.dll] [, 2.5.0.1002]
[C:\WINDOWS\System32\mp3infp.dll] [win32lab.com, 2.44.3.0]
[C:\PROGRA~1\3721\autolive.dll] [, 2, 5, 1, 1004]
[C:\PROGRA~1\FLASHGET\jccatch.dll] [Amaze Soft, 1, 1, 4, 0]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[C:\PROGRA~1\3721\Ces\cesweb.dll] [, 1, 0, 1, 4]
[C:\Program Files\WinRAR\rarext.dll] [N/A, ]
[C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll] [Symantec Corporation, 8.1.0.821]
[d:\杀毒软件\瑞星杀毒软件\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
[d:\杀毒软件\瑞星杀毒软件\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[d:\杀毒软件\瑞星杀毒软件\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
[d:\杀毒软件\瑞星杀毒软件\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[d:\杀毒软件\瑞星杀毒软件\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[PID: 1636][C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe] [Symantec Corporation, 8.1.0.821]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Cliscan.dll] [Symantec Corporation, 8.1.0.821]
[C:\PROGRA~1\SYMANT~1\SYMANT~1\NAVNTUTL.DLL] [Symantec/Peter Norton Group, 1, 0, 0, 1]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[C:\PROGRA~1\3721\helper.dll] [, 2, 5, 0, 1003]
[C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Cliproxy.dll] [Symantec Corporation, 8.1.0.821]
[C:\WINDOWS\DOWNLO~1\CnsHook.dll] [北京三七二一科技有限公司, 1, 0, 2, 0]
[PID: 1652][C:\WINDOWS\system32\rundll32.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\PROGRA~1\3721\helper.dll] [, 2, 5, 0, 1003]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[C:\PROGRA~1\3721\helper.dll] [, 2, 5, 0, 1003]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\PROGRA~1\3721\notifier.dll] [, 2.5.0.1002]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 1696][C:\Herosoft\HeroV8\SysExplr.EXE] [N/A, ]
[C:\Herosoft\HeroV8\CoolMenu.dll] [N/A, ]
[C:\Herosoft\HeroV8\AVCDROM.dll] [N/A, ]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\Herosoft\HeroV8\Sys936.DLL] [N/A, ]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\PROGRA~1\3721\helper.dll] [, 2, 5, 0, 1003]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[PID: 1724][C:\WINDOWS\system32\ctfmon.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\PROGRA~1\3721\helper.dll] [, 2, 5, 0, 1003]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[PID: 2168][C:\WINDOWS\system32\wscntfy.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[PID: 2804][C:\WINDOWS\system32\conime.exe] [Microsoft Corporation, 5.1.2600.2149 (xpsp_sp2_rc2.040610-1520)]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[C:\PROGRA~1\3721\helper.dll] [, 2, 5, 0, 1003]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[C:\PROGRA~1\3721\helper.dll] [, 2, 5, 0, 1003]
[C:\PROGRA~1\3721\alrex.dll] [, 2.5.0.1002]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
[C:\PROGRA~1\3721\autolive.dll] [, 2, 5, 1, 1004]
[C:\PROGRA~1\3721\Ces\cesweb.dll] [, 1, 0, 1, 4]
[C:\PROGRA~1\FLASHGET\jccatch.dll] [Amaze Soft, 1, 1, 4, 0]
[C:\WINDOWS\DOWNLO~1\CnsHook.dll] [北京三七二一科技有限公司, 1, 0, 2, 0]
[C:\WINDOWS\System32\macromed\flash\Flash.ocx] [Macromedia, Inc., 7,0,19,0]
[C:\WINDOWS\system32\msacm32.drv] [Microsoft Corporation, 5.1.2600.0 (xpclient.010817-1148)]
[C:\WINDOWS\system32\JPWB.IME] [长江软件工作室, 4.00.950]
[C:\WINDOWS\DOWNLO~1\CnsMinIO.dll] [北京三七二一科技有限公司, 1, 0, 3, 0]
[C:\WINDOWS\DOWNLO~1\cnsio.dll] [北京三七二一科技有限公司, 1, 0, 2, 2]
[PID: 3940][D:\新建文件夹\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\PROGRA~1\3721\Ces\cmail.dll] [3721, 1, 0, 1, 7]
[C:\WINDOWS\DOWNLO~1\CnsMin.dll] [北京三七二一科技有限公司, 1, 5, 0, 4]
[C:\Herosoft\HeroV8\VCvtShell.dll] [herosoft, 1, 0, 0, 1]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]