正在运行的进程
[PID: 152][\SystemRoot\System32\smss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 176][\??\C:\WINNT\system32\csrss.exe] [Microsoft Corporation, 5.00.2195.6601]
[PID: 1152][C:\WINNT\Explorer.EXE] [Microsoft Corporation, 5.00.3700.6690]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[C:\WINNT\mui\fallback\0804\msctf.dll.mui] [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[E:\Program Files\Rising\Rav\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[C:\WINNT\system32\igfxpph.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\hccutils.DLL] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxres.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxdev.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\RavExt.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 9]
[E:\PROGRA~1\FLASHGET\jccatch.dll] [FlashGet, 1, 1, 5, 0]
[PID: 1200][e:\program files\rising\rfw\RfwMain.exe] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 70]
[C:\WINNT\system32\MSVCP60.dll] [Microsoft Corporation, 6.00.8168.0]
[e:\program files\rising\rfw\RsGuiLib.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 33]
[e:\program files\rising\rfw\RSCOMMON.DLL] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 5]
[e:\program files\rising\rfw\RfwCtrl.dll] [Beijing Rising Technology Co., Ltd., 5, 0, 0, 11]
[e:\program files\rising\rfw\RsXML.dll] [Beijing Rising Technology Co., Ltd., 19, 0, 0, 2]
[e:\program files\rising\rfw\PngDll.dll] [Beijing Rising Technology Co., Ltd., 18, 0, 0, 5]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[C:\WINNT\mui\fallback\0804\msctf.dll.mui] [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 988][C:\WINNT\SOUNDMAN.EXE] [Realtek Semiconductor Corp., 5.1.0.30]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[PID: 952][C:\WINNT\system32\igfxtray.exe] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\hccutils.DLL] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxdev.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxres.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxress.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[PID: 1240][C:\WINNT\system32\hkcmd.exe] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\hccutils.DLL] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxdev.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxsrvc.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxhk.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\igfxres.dll] [Intel Corporation, 3.0.0.2350]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[PID: 1244][C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe] [Google Inc., 1, 0, 720, 3640]
[C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\res_zh-CN.dll] [Google Inc., 1, 0, 720, 3640]
[C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\swg.dll] [Google Inc., 1, 0, 720, 3640]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[PID: 1284][C:\WINNT\system32\ctfmon.exe] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[C:\WINNT\system32\MSUTB.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[C:\WINNT\mui\fallback\0804\msutb.dll.mui] [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[C:\WINNT\mui\fallback\0804\msctf.dll.mui] [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1464][E:\Program Files\ADSL拨号王\HNMainUI.exe] [, 2, 3, 0, 1]
[E:\Program Files\ADSL拨号王\HNKernel.dll] [HelloNet, 2.2.0.1]
[E:\Program Files\ADSL拨号王\HNUtils.dll] [, 2, 2, 0, 1]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[E:\Program Files\ADSL拨号王\HNRes_0804.dll] [, 2, 2, 0, 1]
[E:\Program Files\ADSL拨号王\plugins\Diagnose.dll] [HelloNet, 2.2.0.1]
[C:\WINNT\mui\fallback\0804\msctf.dll.mui] [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
[PID: 1612][C:\WINNT\system32\conime.exe] [Microsoft Corporation, 5.00.2195.6655]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[PID: 1292][D:\下载文件\拨号\sreng2\SREng.EXE] [Smallfrogs Studio, 2.4.12.806]
[C:\WINNT\system32\MSCTF.dll] [Microsoft Corporation, 1.00.2409.34 built by: Lab06_N]
[C:\WINNT\mui\fallback\0804\msctf.dll.mui] [Microsoft Corporation, 1.00.2409.7 built by: Lab06_N]
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINNT\hh.exe" %1]
.HLP OK. [%SystemRoot%\system32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]
==================================
Winsock 提供者
N/A
==================================
Autorun.inf
N/A
==================================
HOSTS 文件
N/A
==================================
API HOOK
N/A
==================================
隐藏进程
N/A
==================================
[/CODE]