[C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpwspm30.dll]  <HP><2.233.6.0>
    [C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\hpws2ku0.dll]  <HP><2.233.6.0>
[PID: 1356][C:\Program Files\Rising\Rav\RavStub.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 16>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
[PID: 1624][C:\WINDOWS\Explorer.EXE]  <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
    [C:\WINDOWS\system32\RavExt.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 21>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\WinRAR\rarext.dll]  <N/A><N/A>
    [F:\反间谍专家\新建文件夹\ske\contmenu.dll]  <N/A><N/A>
[PID: 1736][c:\program files\rising\rfw\RfwMain.exe]  <Beijing Rising Technology Co., Ltd.><4, 0, 0, 51>
    [c:\program files\rising\rfw\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 23>
    [c:\program files\rising\rfw\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [c:\program files\rising\rfw\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1808][C:\Program Files\UPHClean\uphclean.exe]  <Microsoft Corporation><1.5.5.21>
[PID: 532][C:\WINDOWS\SOUNDMAN.EXE]  <Realtek Semiconductor Corp.><5.1.0.36>
[PID: 820][C:\Program Files\jmesoft\hotkey.exe]  <JME Co., Ltd.><3.9.0.1112>
[PID: 872][C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\mpm.exe]  <N/A><N/A>
    [C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\HPWSTRE.dll]  <Hewlett-Packard Company><2004.1031.0.0>
[PID: 900][C:\WINDOWS\System32\alg.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 948][C:\Program Files\Rising\Rav\RavTask.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 22>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
[PID: 1084][C:\Program Files\Rising\Rav\Ravmon.exe]  <Beijing Rising Technology Co., Ltd.><18, 0, 1, 26>
    [C:\Program Files\Rising\Rav\RsGuiLib.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 24>
    [C:\Program Files\Rising\Rav\BWList.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 19>
    [C:\Program Files\Rising\Rav\RSAPPMGR.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 2>
    [C:\Program Files\Rising\Rav\CfgDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 10>
    [C:\Program Files\Rising\Rav\RSCOMMON.DLL]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 4>
    [C:\Program Files\Rising\Rav\RsCommX.dll]  <rising><18, 0, 0, 1>
    [C:\Program Files\Rising\Rav\PngDll.dll]  <Beijing Rising Technology Co., Ltd.><18, 0, 0, 5>
[PID: 1500][C:\Program Files\Common Files\Real\Update_OB\realsched.exe]  <RealNetworks, Inc.><0.1.0.3510>
[PID: 1520][C:\PROGRA~1\jmesoft\hkload.exe]  <N/A><N/A>
[PID: 1860][C:\WINDOWS\system32\ctfmon.exe]  <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1800][F:\新建文件夹\MagicSet\SRIECLI.EXE]  <Super Rabbit Soft><7.66>
    [F:\新建文~1\MagicSet\shlobj71.ocx]  <Sky Software (http://www.ssware.com)><7, 1, 0, 0>
[PID: 2248][C:\WINDOWS\system32\wuauclt.exe]  <Microsoft Corporation><5.8.0.2469 built by: lab01_n(wmbla)>
[PID: 3544][F:\反间谍专家\新建文件夹\ske\TrojanAssistant.exe]  <Yahoo! CN><2.1.2.1003>
    [F:\反间谍专家\新建文件夹\ske\fsk.dll]  <3721.com><2, 1, 2, 1030>
    [F:\反间谍专家\新建文件夹\ske\wmpns.dll]  <---><1, 1, 8, 1324>
[PID: 2176][C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\HPWSTBX.exe]  <Hewlett-Packard Company><2004.1031.0.0>
    [C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\HPWSBUS.dll]  <Hewlett-Packard Company><2004.1031.0.0>
    [C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\HPWSC95.dll]  <Hewlett-Packard Company><2004.1031.0.0>
    [C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\HPWSSVC.dll]  <Hewlett-Packard Company><2004.1031.0.0>
    [C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\hpjsnm1.dll]  <Hewlett-Packard><1.00.243>
    [C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\hpjcmn1.dll]  <Hewlett-Packard><1.00.243>
    [C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\hpjpts1.dll]  <Hewlett-Packard><1.00.243>
    [C:\Program Files\Hewlett-Packard\HP Deskjet 1280\Toolbox\HPWSTRE.DLL]  <Hewlett-Packard Company><2004.1031.0.0>
[PID: 3252][C:\Program Files\WinRAR\WinRAR.exe]  <N/A><N/A>
[PID: 2996][C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.843\SREng2\SREng.exe]  <Smallfrogs Studio><2.0.21.505>

==================================
文件关联
.TXT  OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE  OK. ["%1" %*]
.COM  OK. ["%1" %*]
.PIF  OK. ["%1" %*]
.REG  OK. [regedit.exe "%1"]
.BAT  OK. ["%1" %*]
.SCR  OK. ["%1" /S]
.CHM  OK. ["C:\WINDOWS\hh.exe" %1]
.HLP  OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF  OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS  OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK  OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock 提供者