操作                                                            时间                                                            进程名称                                                        操作数据                                                        
修改内核内存数据                                                2009-03-02 21:38:57                                             D:\PROGRAM FILES\KINGSOFT ANTISPY\KASMAIN.EXE                   \Device\PhysicalMemory                                          
修改内核内存数据                                                2009-03-02 21:38:14                                             D:\PROGRAM FILES\KINGSOFT ANTISPY\KASMAIN.EXE                   \Device\PhysicalMemory                                          
修改内核内存数据                                                2009-03-02 21:37:29                                             D:\PROGRAM FILES\KINGSOFT ANTISPY\KASMAIN.EXE                   \Device\PhysicalMemory                                          
修改内核内存数据                                                2009-03-02 21:21:11                                             D:\PROGRAM FILES\KINGSOFT ANTISPY\KSA\KSAMAIN.EXE               \Device\PhysicalMemory                                          
修改内核内存数据                                                2009-03-02 21:21:03                                             D:\PROGRAM FILES\KINGSOFT ANTISPY\KASMAIN.EXE                   \Device\PhysicalMemory                                          
修改内核内存数据                                                2009-03-02 21:16:07                                             D:\PROGRAM FILES\KINGSOFT ANTISPY\KSA\KSAMAIN.EXE               \Device\PhysicalMemory                                          
修改内核内存数据                                                2009-03-02 21:15:46                                             D:\PROGRAM FILES\KINGSOFT ANTISPY\KASMAIN.EXE                   \Device\PhysicalMemory                                          
修改内核内存数据                                                2009-03-02 21:13:27                                             D:\PROGRAM FILES\KINGSOFT ANTISPY\KASMAIN.EXE                   \Device\PhysicalMemory                                          
挂钩子                                                          2009-03-02 19:37:44                                             D:\PROGRAM FILES\TENCENT\QQ2009\BIN\QQ.EXE                      LOW-LEVEL KEYBOARD INPUT