回复:7月9日 日志分析 练习10
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{669029EE-81FB-496F-9AC4-FE838B16F231}><C:\WINDOWS\system32\erdznUfbK0ZF.dll> [File is missing]
<{E11FB24A-F766-4D0F-ADF5-237958FFA262}><C:\WINDOWS\fonts\f13ERxR2Urh.fon> [File is missing]
<{4E5CFE74-700B-4A8B-B0BF-A6B47D896C18}><C:\WINDOWS\system32\GrTZqH5SnRhAt.dll> [File is missing]
==================================
服务
<\??\C:\Program Files\360\360Safe\Modules\SupperKiller\BFSDRV.sys><N/A>
==================================
驱动程序
[pnpmem / pnpmem][Stopped/Auto Start]
<\??\C:\WINDOWS\system32\drivers\pnpmem.sys><N/A>
[zx / zx][Stopped/Manual Start]
<\??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~49f7d0.tmp><N/A>