我用procexp扫了一下，但并未发现可疑的进程启动WINDOWS帮助文件，也许还未发作。对了，它发作的时候还有个特征，如果我正打开IE，它就不断启动IE的帮助文件，如果我在调试音量，它就不断启动音量控制的帮助文件，如果我什么都不干，它就不断启动WINDOWS帮助文件。下面是我用procexp扫的日志，麻烦看一看
PID CPU Description Company Name
0x0 29.52 System Idle Process
0xFFFEBB77 CCenter Beijing Rising Technology Co., Ltd.
0xFFFE8ED7 0.69 RavMon Beijing Rising Technology Co., Ltd.
0xFFFEB677 7.31 RavMond Beijing Rising Technology Co., Ltd.
0xFFFB5D23 RavTimer Beijing Rising Technology Co., Ltd.
0xFFFB6ED7 Virtual DAEMON Manager DAEMON'S HOME
0xFFEFB633 Microsoft DirectX Helper Microsoft Corporation
0xFFFD0507 0.30 Windows Explorer Microsoft Corporation
0xFFFD254B HID Audio Service Microsoft Corporation
0xFFF90C1F 51.43 Internet Explorer Microsoft Corporation
0xFFFB1AA7 0.10 Internat Microsoft Corporation
0xFFEFBBE3 0.20 Win32 Kernel core component Microsoft Corporation
0xFFFEC803 Multimedia background task support module Microsoft Corporation
0xFFFFEBF7 WIN32 Network Interface Service Process Microsoft Corporation
0xFFFFFA23 Windows 32-bit VxD Message Server Microsoft Corporation
0xFFFE4F67 Task Scheduler Engine Microsoft Corporation
0xFFFDD2B7 Distributed COM Services Microsoft Corporation
0xFFFB25CF System Tray Applet Microsoft Corporation
0xFFFB2D23 Task Monitor Microsoft Corporation
0xFFFA2903 WMI service exe housing Microsoft Corporation
0xFFFA607F 0.69
0xFFF83D77 9.77 Sysinternals Process Explorer Sysinternals
