windows7爱好者 发表于 2013-7-15 21:58 
把费尔关了,实机开,绝对死不了我拿人头担保
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:0, 3048, EXEC_create, I:\Users\鹏飞\Desktop\rec188\crack\wincopydvd.3.5x-patch.exe, parent_pid:1920 cmdline:'"I:\Users\鹏飞\Desktop\rec188\crack\wincopydvd.3.5x-patch.exe" ' image_base:0x00400000 image_size:0x00006100 , 0x00000000 [操作成功完成。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server, access:0x00020019 , 0x00000000 [操作成功完成。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_getval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\TSUserEnabled, type:0x00000004 datalen:4 data:'00 00 00 00 ' , 0x00000000 [操作成功完成。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option, access:0x00000003 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Srp\GP\DLL, access:0x00020019 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers, access:0x00000001 , 0x00000000 [操作成功完成。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers, access:0x00000001 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\apphelp.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\apphelp.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\DbgLog, access:0x00000101 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\DbgLog, access:0x00000101 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags, access:0x00000101 , 0x00000000 [操作成功完成。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\apppatch\AcGenral.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:124, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\apppatch\AcGenral.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\sechost.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\sechost.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00000001 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\SSPICLI.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\sspicli.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\sspicli.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\UXTHEME.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\uxtheme.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\uxtheme.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\WINMM.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\winmm.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\winmm.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\SAMCLI.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\samcli.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\samcli.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\MSACM32.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\msacm32.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\msacm32.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\VERSION.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\version.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\version.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\USERENV.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\userenv.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\userenv.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\DWMAPI.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\dwmapi.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\dwmapi.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\WINSPOOL.DRV, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\winspool.drv, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\winspool.drv, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\MPR.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\mpr.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:171, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\mpr.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\WINMMBASE.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\winmmbase.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\winmmbase.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\combase.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\combase.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\PROFAPI.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\profapi.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\profapi.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\apppatch\AcLayers.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\apppatch\AcLayers.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\SFC.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\sfc.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\sfc.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Users\鹏飞\Desktop\rec188\crack\SFC_OS.DLL, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\sfc_os.dll, access:0x00000080 alloc_size:0 attrib:0x00000000 share_access:0x00000007 disposition:0x00000001 options:0x00200000 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\sfc_os.dll, access:0x00100021 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:186, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Disable8And16BitMitigation, access:0x80000100 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:202, wincopydvd.3.5x-patch.exe, 3048:964, 3048, FILE_open, I:\Windows\System32\WerFault.exe, access:0x001000A1 alloc_size:0 attrib:0x00000000 share_access:0x00000005 disposition:0x00000001 options:0x00000060 , 0x00000000 [操作成功完成。 ],
22:00:27:202, wincopydvd.3.5x-patch.exe, 3048:964, 3048, PROC_open, , target_pid:56 access:0x00000400 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, PROC_open, , target_pid:56 access:0x00000400 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, PROC_open, , target_pid:56 access:0x00000400 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, PROC_exec, I:\Windows\System32\WerFault.exe, target_pid:56 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\AppCertDlls, access:0x00000001 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option, access:0x00000003 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option, access:0x00000001 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\AppCompatibility, access:0x00000001 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat, access:0x00000001 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion, access:0x00000008 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers, access:0x00000101 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags, access:0x00000008 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\WerFault.exe, access:0x00000101 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders, access:0x00000001 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_getval, HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache, type:0x00000001 datalen:34 data:'5A 00 3A 00 5C 00 49 00 6E 00 74 00 65 00 72 00 ' , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers, access:0x80000100 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers, access:0x80000100 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\WerFault.exe, access:0x80000100 , 0xC0000034 [系统找不到指定的文件。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide, access:0x00020019 , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, PROC_writevm, I:\Windows\System32\WerFault.exe, target_pid:56 base:0x00380000 bytes_written:0x00001248 datalen:0x00001248 data:'49 00 3A 00 5C 00 57 00 69 00 6E 00 64 00 6F 00 ' , 0x00000000 [操作成功完成。 ],
22:00:27:217, wincopydvd.3.5x-patch.exe, 3048:964, 3048, PROC_writevm, I:\Windows\System32\WerFault.exe, target_pid:56 base:0x7F17B1E8 bytes_written:0x00000004 datalen:0x00000004 data:'00 00 38 00 ' , 0x00000000 [操作成功完成。 ],
22:00:27:233, wincopydvd.3.5x-patch.exe, 3048:964, 3048, THRD_resume, I:\Windows\System32\WerFault.exe, target_pid:56 target_tid:2416 , 0x00000000 [操作成功完成。 ],
22:00:29:546, wincopydvd.3.5x-patch.exe, 3048:0, 3048, EXEC_destroy, I:\Users\鹏飞\Desktop\rec188\crack\wincopydvd.3.5x-patch.exe, parent_pid:1920 cmdline:'"I:\Users\鹏飞\Desktop\rec188\crack\wincopydvd.3.5x-patch.exe" ' , 0x00000000 [操作成功完成。 ],
好多行为 ,没危险的 |