麻烦看看这个软件有哪些行为，谢谢！

显示全部楼层 · 发表于 2015-5-13 15:27:58

Flying_Bird 发表于 2015-5-13 15:24
绿化软件
主要操作是修改注册表，在temp下释放文件后删除

非常感谢！能知道它动了哪些文件和注册表吗？

显示全部楼层 · 发表于 2015-5-13 15:33:11

changchun 发表于 2015-5-13 15:27
非常感谢！能知道它动了哪些文件和注册表吗？

这是注册表部分的行为记录
[mw_shl_code=xml,true]15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00020000 , 0x00000000 [操作成功完成。  ],
15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0xC0000000 , 0x00000000 [操作成功完成。  ],
15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00020000 , 0x00000000 [操作成功完成。  ],
15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0xC0000000 , 0x00000000 [操作成功完成。  ],
15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_getval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, type:0x00000007 datalen:1396 data:'5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 44 00 ' , 0x00000000 [操作成功完成。  ],
15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_setval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, type:0x00000007 datalen:1516 data:'5C 3F 3F 5C 43 3A 5C 44 4F 43 55 4D 45 7E 31 5C ' , 0x00000000 [操作成功完成。  ],
15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00020000 , 0x00000000 [操作成功完成。  ],
15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0xC0000000 , 0x00000000 [操作成功完成。  ],
15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00020000 , 0x00000000 [操作成功完成。  ],
15:19:44:459, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0xC0000000 , 0x00000000 [操作成功完成。  ],
15:19:44:459, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_getval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, type:0x00000007 datalen:1516 data:'5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 44 00 ' , 0x00000000 [操作成功完成。  ],
15:19:44:459, CamtasiaStudiosetup.exe, 1540:624, 1540, REG_setval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, type:0x00000007 datalen:1616 data:'5C 3F 3F 5C 43 3A 5C 44 4F 43 55 4D 45 7E 31 5C ' , 0x00000000 [操作成功完成。  ],
15:20:13:019, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:019, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir, type:0x00000001 datalen:34 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir, type:0x00000001 datalen:60 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir, type:0x00000001 datalen:34 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir, type:0x00000001 datalen:34 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir, type:0x00000001 datalen:60 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir, type:0x00000001 datalen:60 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir, type:0x00000001 datalen:60 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir, type:0x00000001 datalen:60 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir, type:0x00000001 datalen:60 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion, access:0x00020019 , 0x00000000 [操作成功完成。  ],
15:20:13:050, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CommonFilesDir, type:0x00000001 datalen:60 data:'43 00 3A 00 5C 00 50 00 72 00 6F 00 67 00 72 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0, access:0x00000002 , 0xC0000034 [系统找不到指定的文件。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0\Distcode, type:0x00000001 datalen:14 data:'54 53 43 46 54 50 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0\InstallExe, type:0x00000001 datalen:134 data:'43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0\InstallLang, type:0x00000001 datalen:8 data:'65 6E 75 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0\InstallVer, type:0x00000001 datalen:12 data:'38 2E 31 2E 32 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\TechSmith\Camtasia Studio\8.0\InstallVerFull, type:0x00000001 datalen:22 data:'38 2E 31 2E 32 2E 31 33 32 37 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins\CamtasiaOfficeAddin.Connect, access:0x00000002 , 0xC0000034 [系统找不到指定的文件。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins\CamtasiaOfficeAddin.Connect, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins\CamtasiaOfficeAddin.Connect\Description, type:0x00000001 datalen:76 data:'41 64 64 20 43 61 6D 74 61 73 69 61 20 72 65 63 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins\CamtasiaOfficeAddin.Connect, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins\CamtasiaOfficeAddin.Connect\FriendlyName, type:0x00000001 datalen:32 data:'43 61 6D 74 61 73 69 61 20 41 64 64 2D 69 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins\CamtasiaOfficeAddin.Connect, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins\CamtasiaOfficeAddin.Connect\LoadBehavior, type:0x00000004 datalen:4 data:'03 00 00 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc\tsc2_codec32.dll, type:0x00000001 datalen:50 data:'54 65 63 68 53 6D 69 74 68 20 53 63 72 65 65 6E ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc\tsccvid.dll, type:0x00000001 datalen:62 data:'54 65 63 68 53 6D 69 74 68 20 53 63 72 65 65 6E ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\vidc.tsc2, type:0x00000001 datalen:74 data:'43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\vidc.tscc, type:0x00000001 datalen:64 data:'43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\.camproj, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\.camproj\, type:0x00000001 datalen:48 data:'43 61 6D 74 61 73 69 61 53 74 75 64 69 6F 2E 44 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\.camrec, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\.camrec\, type:0x00000001 datalen:52 data:'43 61 6D 74 61 73 69 61 52 65 63 6F 72 64 65 72 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\.cmmp, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\.cmmp\, type:0x00000001 datalen:52 data:'43 61 6D 74 61 73 69 61 4D 65 6E 75 4D 61 6B 65 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\.cmmtpl, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\.cmmtpl\, type:0x00000001 datalen:54 data:'43 61 6D 74 61 73 69 61 4D 65 6E 75 4D 61 6B 65 ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\.libzip, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\.libzip\, type:0x00000001 datalen:58 data:'43 61 6D 74 61 73 69 61 53 74 75 64 69 6F 2E 4C ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\, type:0x00000001 datalen:54 data:'43 61 6D 74 61 73 69 61 20 4D 65 6E 75 4D 61 6B ' , 0x00000000 [操作成功完成。  ],
15:20:13:472, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\DefaultIcon, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\DefaultIcon\, type:0x00000001 datalen:136 data:'43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\shell, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\shell\, type:0x00000001 datalen:10 data:'6F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\shell\open, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\shell\open\, type:0x00000001 datalen:10 data:'6F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\shell\open\command, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Project\shell\open\command\, type:0x00000001 datalen:144 data:'22 43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\, type:0x00000001 datalen:56 data:'43 61 6D 74 61 73 69 61 20 4D 65 6E 75 4D 61 6B ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\DefaultIcon, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\DefaultIcon\, type:0x00000001 datalen:136 data:'43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\shell, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\shell\, type:0x00000001 datalen:10 data:'6F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\shell\open, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\shell\open\, type:0x00000001 datalen:10 data:'6F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\shell\open\command, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaMenuMaker.Template\shell\open\command\, type:0x00000001 datalen:144 data:'22 43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\, type:0x00000001 datalen:54 data:'43 61 6D 74 61 73 69 61 20 52 65 63 6F 72 64 65 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\DefaultIcon, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\DefaultIcon\, type:0x00000001 datalen:136 data:'43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\shell, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\shell\, type:0x00000001 datalen:10 data:'6F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\shell\open, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\shell\open\, type:0x00000001 datalen:10 data:'4F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\shell\open\command, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\shell\open\command\, type:0x00000001 datalen:148 data:'22 43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\ShellEx\ContextMenuHandlers\SimpleShlExt, access:0x00000002 , 0xC0000034 [系统找不到指定的文件。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\ShellEx, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\ShellEx\ContextMenuHandlers, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\ShellEx\ContextMenuHandlers\SimpleShlExt, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaRecorder.Document\ShellEx\ContextMenuHandlers\SimpleShlExt\, type:0x00000001 datalen:78 data:'7B 31 38 39 33 35 36 30 30 2D 42 44 31 39 2D 34 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.Document, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\, type:0x00000001 datalen:48 data:'43 61 6D 74 61 73 69 61 20 53 74 75 64 69 6F 20 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\DefaultIcon, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\DefaultIcon\, type:0x00000001 datalen:136 data:'43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\shell, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\shell\, type:0x00000001 datalen:10 data:'6F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\shell\open, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\shell\open\, type:0x00000001 datalen:10 data:'4F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\shell\open\command, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.Document\shell\open\command\, type:0x00000001 datalen:148 data:'22 43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\, type:0x00000001 datalen:62 data:'43 61 6D 74 61 73 69 61 20 53 74 75 64 69 6F 20 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\DefaultIcon, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\DefaultIcon\, type:0x00000001 datalen:138 data:'43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\shell, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\shell\, type:0x00000001 datalen:10 data:'6F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\shell\open, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\shell\open\, type:0x00000001 datalen:10 data:'4F 70 65 6E 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\shell\open\command, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CamtasiaStudio.LibraryAssets\shell\open\command\, type:0x00000001 datalen:148 data:'22 43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\, type:0x00000001 datalen:54 data:'45 64 69 74 6F 72 49 6E 74 65 72 6F 70 2E 54 69 ' , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}, access:0x00000002 , 0xC0000034 [系统找不到指定的文件。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\SOFTWARE, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\Implemented Categories, access:0x02000000 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:487, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}\, type:0x00000001 datalen:2 data:'00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\, type:0x00000001 datalen:24 data:'6D 73 63 6F 72 65 65 2E 64 6C 6C 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\Assembly, type:0x00000001 datalen:138 data:'45 64 69 74 6F 72 49 6E 74 65 72 6F 70 2C 20 56 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\Class, type:0x00000001 datalen:54 data:'45 64 69 74 6F 72 49 6E 74 65 72 6F 70 2E 54 69 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\CodeBase, type:0x00000001 datalen:132 data:'43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\RuntimeVersion, type:0x00000001 datalen:22 data:'76 32 2E 30 2E 35 30 37 32 37 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\ThreadingModel, type:0x00000001 datalen:10 data:'42 6F 74 68 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\0.0.0.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\0.0.0.0\Assembly, type:0x00000001 datalen:138 data:'45 64 69 74 6F 72 49 6E 74 65 72 6F 70 2C 20 56 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\0.0.0.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\0.0.0.0\Class, type:0x00000001 datalen:54 data:'45 64 69 74 6F 72 49 6E 74 65 72 6F 70 2E 54 69 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\0.0.0.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\0.0.0.0\CodeBase, type:0x00000001 datalen:132 data:'43 3A 5C 44 6F 63 75 6D 65 6E 74 73 20 61 6E 64 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\0.0.0.0, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\InprocServer32\0.0.0.0\RuntimeVersion, type:0x00000001 datalen:22 data:'76 32 2E 30 2E 35 30 37 32 37 00 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\ProgID, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\CLSID\{F32FF18A-1543-39C9-9D0C-8835736F9FDA}\ProgID\, type:0x00000001 datalen:54 data:'45 64 69 74 6F 72 49 6E 74 65 72 6F 70 2E 54 69 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\EditorInterop.TimelineGate, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\EditorInterop.TimelineGate\, type:0x00000001 datalen:54 data:'45 64 69 74 6F 72 49 6E 74 65 72 6F 70 2E 54 69 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\EditorInterop.TimelineGate\CLSID, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\EditorInterop.TimelineGate\CLSID\, type:0x00000001 datalen:78 data:'7B 46 33 32 46 46 31 38 41 2D 31 35 34 33 2D 33 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCImg8, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCImg8\Source Filter, type:0x00000001 datalen:78 data:'7B 34 43 46 33 33 44 30 34 2D 35 38 43 41 2D 34 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCMov8, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCMov8\Source Filter, type:0x00000001 datalen:78 data:'7B 34 43 46 33 33 44 31 43 2D 35 38 43 41 2D 34 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCMp48, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCMp48\Source Filter, type:0x00000001 datalen:78 data:'7B 34 43 46 33 33 44 30 30 2D 35 38 43 41 2D 34 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCRec8, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCRec8\Source Filter, type:0x00000001 datalen:78 data:'7B 34 43 46 33 33 44 30 30 2D 35 38 43 41 2D 34 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCTitle8, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\Media Type\Extensions\.TSCTitle8\Source Filter, type:0x00000001 datalen:78 data:'7B 34 43 46 33 33 44 30 35 2D 35 38 43 41 2D 34 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_mkkey, HKEY_CLASSES_ROOT\TSCRec8, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\TSCRec8\Source Filter, type:0x00000001 datalen:78 data:'7B 34 43 46 33 33 44 30 30 2D 35 38 43 41 2D 34 ' , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_CLASSES_ROOT\TSCRec8, access:0x00000002 , 0x00000000 [操作成功完成。  ],
15:20:13:503, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_CLASSES_ROOT\TSCRec8\URL Protocol, type:0x00000001 datalen:2 data:'00 ' , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00020000 , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0xC0000000 , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00020000 , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0xC0000000 , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, type:0x00000007 datalen:1616 data:'5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 44 00 ' , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, type:0x00000007 datalen:1736 data:'5C 3F 3F 5C 43 3A 5C 44 4F 43 55 4D 45 7E 31 5C ' , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00020000 , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0xC0000000 , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0x00020000 , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_openkey, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager, access:0xC0000000 , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_getval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, type:0x00000007 datalen:1736 data:'5C 00 3F 00 3F 00 5C 00 43 00 3A 00 5C 00 44 00 ' , 0x00000000 [操作成功完成。  ],
15:20:14:628, CamtasiaStudiosetup.exe, 2000:1932, 2000, REG_setval, HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations, type:0x00000007 datalen:1836 data:'5C 3F 3F 5C 43 3A 5C 44 4F 43 55 4D 45 7E 31 5C ' , 0x00000000 [操作成功完成。  ],
[/mw_shl_code]

显示全部楼层 · 发表于 2015-5-13 16:10:18

XywCloud 发表于 2015-5-13 15:27
今天事情太多...忙不过来

看来不去购买沙盘真的不行了

显示全部楼层 · 发表于 2015-5-13 16:12:32

jayavira 发表于 2015-5-13 16:10
看来不去购买沙盘真的不行了

沙盘终身版早已入手

显示全部楼层 · 发表于 2015-5-13 16:14:04

XywCloud 发表于 2015-5-13 16:12
沙盘终身版早已入手

嗯嗯
测试病毒没有沙盘还真的不行啊

显示全部楼层 · 发表于 2015-5-13 17:06:48

安全

显示全部楼层 · 发表于 2015-5-13 17:34:26

Flying_Bird 发表于 2015-5-13 15:33
这是注册表部分的行为记录
[mw_shl_code=xml,true]15:19:44:444, CamtasiaStudiosetup.exe, 1540:624, 1 ...

谢谢了！

[其他相关] 麻烦看看这个软件有哪些行为，谢谢！

本帖子中包含更多资源