==================================
正在运行的进程
[PID: 620][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 668][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 692][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\System32\NavLogon.dll] <N/A><N/A>
[PID: 736][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 748][C:\WINDOWS\system32\lsass.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 908][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 984][C:\WINDOWS\system32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1068][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1120][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1260][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1396][C:\WINDOWS\system32\spoolsv.exe] <Microsoft Corporation><5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)>
[C:\WINDOWS\System32\AdobePDF.dll] <Adobe Systems Incorporated.><6.0.000>
[C:\Program Files\Adobe\Acrobat 6.0\Distillr\AdistRes.CHT] <N/A><N/A>
[PID: 1612][C:\Program Files\NavNT\defwatch.exe] <Symantec Corporation><7.61.00.928>
[PID: 1652][C:\WINDOWS\system32\inetsrv\inetinfo.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1684][C:\Program Files\NavNT\rtvscan.exe] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\Dec2.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2ARJ.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2ID.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2LHA.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\SymLHA.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2LZ.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2MIME.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2Zip.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2AMG.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\SYMAMG32.DLL] <Symantec Corporation with portions by FUJITSU DEVICES INC.><2.50.33.56>
[C:\Program Files\NavNT\Dec2UUE.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2SS.dll] <Symantec Corporation><2.50.33.56>
[C:\Program Files\NavNT\Dec2RTF.dll] <Symantec Corporation><2.50.33.56>
[C:\WINDOWS\system32\CBA.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\MsgSys.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\NTS.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\PDS.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\Program Files\NavNT\NAVLU.dll] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\NavNT\i2ldvp3.dll] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\NAVAPI32.DLL] <Symantec Corp.><4.1.0.15>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060830.022\NAVEX32a.DLL] <Symantec Corporation><20061.2.0.26>
[C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20060830.022\NAVENG32.DLL] <Symantec Corporation><20061.2.0.26>
[C:\Program Files\NavNT\NAVAP32.DLL] <Symantec Corporation><5.3.1.39>
[C:\Program Files\NavNT\vpmsece.dll] <Symantec Corporation><7.61.00.928>
[C:\WINDOWS\system32\amslib.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\loc32vc0.dll] <Intel><3, 0, 0, 2>
[PID: 504][C:\WINDOWS\System32\alg.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1180][C:\WINDOWS\system32\MsgSys.EXE] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\NTS.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\CBA.DLL] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\MsgSys.dll] <Intel Corporation><6.0.201.0940 E>
[C:\WINDOWS\system32\PDS.DLL] <Intel Corporation><6.0.201.0940 E>
[PID: 1536][C:\WINDOWS\Explorer.EXE] <Microsoft Corporation><6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[C:\Program Files\SearchNet\SrvNet32.dll] <中搜在线><1, 0, 2, 7>
[C:\WINDOWS\System32\igfxpph.dll] <Intel Corporation><3,0,0,2104>
[C:\WINDOWS\System32\hccutils.DLL] <Intel Corporation><3,0,0,2104>
[C:\WINDOWS\system32\igfxres.dll] <Intel Corporation><3,0,0,2104>
[C:\WINDOWS\System32\igfxsrvc.dll] <Intel Corporation><3,0,0,2104>
[C:\WINDOWS\System32\igfxdev.dll] <Intel Corporation><3,0,0,2104>
[PID: 1876][C:\Program Files\Common Files\Real\Update_OB\realsched.exe] <RealNetworks, Inc.><0.1.0.1622>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 1908][C:\Program Files\MSN Messenger\MsnMsgr.Exe] <Microsoft Corporation><8.0.0792.00>
[C:\WINDOWS\system32\msdmo.dll] <N/A><N/A>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 340][C:\Program Files\NavNT\vptray.exe] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\Cliproxy.dll] <Symantec Corporation><7.61.00.928>
[C:\Program Files\NavNT\NAVNTUTL.DLL] <Symantec/Peter Norton Group><1, 0, 0, 1>
[C:\Program Files\NavNT\Cliscan.dll] <Symantec Corporation><7.61.00.928>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 2660][D:\Wingate4.40\aa\PSTrayFactory.exe] <PS Soft Lab><2.0.0.134>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 3220][C:\WINDOWS\system32\conime.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 1864][C:\WINDOWS\System32\svchost.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 352][C:\Program Files\Maxthon\Maxthon.exe] <Maxthon International Ltd.><1, 5, 6, 42>
[C:\Program Files\Maxthon\maxzlib.dll] < ><1, 0, 0, 2>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[C:\Program Files\RhinoSoft.com\Serv-U\ServUPerfCount.dll] <Rhino Software, Inc. +1(262) 560-9627><6, 3, 0, 0>
[C:\Program Files\Maxthon\Services\RealTime\real_time.dll] <><1, 0, 0, 1>
[C:\WINDOWS\System32\Macromed\Flash\Flash9.ocx] <Adobe Systems, Inc.><9,0,16,0>
[PID: 1224][C:\WINDOWS\system32\NOTEPAD.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 2612][C:\WINDOWS\system32\NOTEPAD.EXE] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[PID: 640][C:\Program Files\金山词霸 2005 专业版\XDICT.EXE] <Kingsoft Co, Ltd.><8, 5, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\DicMngr.dll] <Kingsoft><1, 0, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\doshow.dll] <N/A><N/A>
[C:\Program Files\金山词霸 2005 专业版\ITextOut.dll] <Kingsoft><1, 1, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\KPic10.dll] <N/A><N/A>
[C:\Program Files\金山词霸 2005 专业版\ijl11.dll] <Intel Corporation><1.1.2>
[C:\Program Files\金山词霸 2005 专业版\NormGrab.DLL] <Kingsoft Co, Ltd.><6, 0, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\toTTSEngine50.dll] <Kingsoft Corporation><1, 0, 0, 1>
[C:\Program Files\金山词霸 2005 专业版\xfile.dll] <N/A><N/A>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[C:\Program Files\金山词霸 2005 专业版\DBCore10.dll] <Kingsoft Corp.><1, 0, 0, 0>
[C:\Program Files\金山词霸 2005 专业版\XdictGrb.dll] <Kingsoft Co, Ltd.><8, 5, 0, 0>
[PID: 1608][C:\PROGRA~1\Kingsoft\FASTAI~1\KTEngine.exe] <Kingsoft><1, 0, 0, 0>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
[C:\PROGRA~1\Kingsoft\FASTAI~1\GTS\EnglishSChinese\EngSCh.dll] <N/A><N/A>
[PID: 1940][C:\Documents and Settings\Administrator\桌面\sreng2\SREng2\SREng.exe] <Smallfrogs Studio><2.0.21.505>
[D:\Wingate4.40\aa\HKDll.dll] <N/A><N/A>
==================================
文件关联
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["C:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]