log.kuwo.cn

显示全部楼层 · 发表于 2019-8-24 20:21:54

Willy19928 发表于 2019-8-24 18:30
大神不可以推托呦

那你procmon一份几百GB的日志上来，我十年以后给你结果好不好。

显示全部楼层 · 发表于 2019-8-24 20:27:34

ELOHIM 发表于 2019-8-24 20:21
那你procmon一份几百GB的日志上来，我十年以后给你结果好不好。

这还能站这么大的空间

所以这东西好用吗

https://www.definitivetechnology.com/products/promonitor-800

显示全部楼层 · 发表于 2019-8-24 20:28:39

Willy19928 发表于 2019-8-24 20:27
这还能站这么大的空间
所以这东西好用吗
https://www.definitivetechnology.com/produ ...

不玩小号啦？

这货跟微软工具包没半毛钱关系。

显示全部楼层 · 发表于 2019-8-24 20:30:24

ELOHIM 发表于 2019-8-24 20:28
不玩小号啦？

这货跟微软工具包没半毛钱关系。

你在消息里说用promoniter

显示全部楼层 · 发表于 2019-8-24 20:31:46

Willy19928 发表于 2019-8-24 20:30
你在消息里说用promoniter

想到什么就说什么啦。。没有必要刻意的去说准确，又不是打官司。哈哈

显示全部楼层 · 发表于 2019-8-24 20:34:49

ELOHIM 发表于 2019-8-24 20:31
想到什么就说什么啦。。没有必要刻意的去说准确，又不是打官司。哈哈

有了水楼的感觉

显示全部楼层 · 发表于 2019-10-26 17:27:42

风之咩~ 发表于 2019-8-4 21:52
看这情况应该是的特别是全家桶那种估计有残存的

虽然这问题很久了，但我还是要问一下

我发现我开新的一个沙盘，然后开档案总管，每次都会连结到log.kuwo.cn

不知道SBIE的监测记录能看出甚么

(Drive) \Device\CdRom0
(Drive) \Device\HarddiskVolume1
(Drive) \Device\HarddiskVolume3
(Drive) \Device\HarddiskVolume5
(Drive) \Device\HarddiskVolume6
Clsid -------------------------------
Clsid {9E175B6D-F52A-11D8-B9A5-505054503030} Search Gatherer Notification
Clsid {DCB00C01-570F-4A9B-8D69-199FDBA5723B} NetworkListManager
File/Key -------------------------------
Image -------------------------------
Ipc -------------------------------
Ipc \BaseNamedObjects\[CoreUI]-PID(42888)-TID(44992) 2c9ff0b9-823c-4e6b-9229-1b69c923e2d7
Ipc \BaseNamedObjects\__ComCatalogCache__
Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001e.db
Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
Ipc \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc \BaseNamedObjects\F932B6C7-3A20-46A0-B8A0-8894AA421973
Ipc \BaseNamedObjects\KwShellExt_CoredllExitEvent_20150504
Ipc \BaseNamedObjects\KwShellExt_CoredllMutex_20150414
Ipc \BaseNamedObjects\KwShellExt_Mutex_20150402
Ipc \BaseNamedObjects\windows_shell_global_counters
Ipc \RPC Control\epmapper
Ipc \RPC Control\keysvc
Ipc \RPC Control\LRPC-715a3447925fcbe2c7
Ipc \RPC Control\OLEBAADDF14C40897032CB90F79906E
Ipc \Sessions\1\BaseNamedObjects\__ComCatalogCache__
Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x000000000000001e.db
Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db
Ipc \Sessions\1\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro
Ipc \Sessions\1\BaseNamedObjects\C:*Users******AppData*Local*Microsoft*Windows*Caches*{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000062.db
Ipc \Sessions\1\BaseNamedObjects\C:*Users******AppData*Local*Microsoft*Windows*Caches*cversions.1.ro
Ipc \Sessions\1\BaseNamedObjects\Hid5eImeTC_15.0_MutextCfgPersist
Ipc \Sessions\1\BaseNamedObjects\KwMusicTips_Mutex_1011
Ipc \Sessions\1\BaseNamedObjects\KwMusicTips_Mutex_1012
Ipc \Sessions\1\BaseNamedObjects\KwShellExt_CoredllExitEvent_20150504
Ipc \Sessions\1\BaseNamedObjects\KwShellExt_CoredllMutex_20150414
Ipc \Sessions\1\BaseNamedObjects\KwShellExt_Mutex_1010
Ipc \Sessions\1\BaseNamedObjects\KwShellExt_Mutex_20150402
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_22532
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_67936
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_71152
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_75324
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_86828
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_DummyEvent_87992
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_cryptsvc
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_DcomLaunch
Ipc \Sessions\1\BaseNamedObjects\SBIE_BOXED_ServiceInitComplete_RpcSs
Ipc \Sessions\1\BaseNamedObjects\SboxSession
Ipc \Sessions\1\BaseNamedObjects\SM0:22532:168:WilStaging_02
Ipc \Sessions\1\BaseNamedObjects\SM0:22532:168:WilStaging_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:22532:64:WilError_02
Ipc \Sessions\1\BaseNamedObjects\SM0:22532:64:WilError_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:67936:168:WilStaging_02
Ipc \Sessions\1\BaseNamedObjects\SM0:67936:168:WilStaging_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:67936:64:WilError_02
Ipc \Sessions\1\BaseNamedObjects\SM0:67936:64:WilError_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:71152:168:WilStaging_02
Ipc \Sessions\1\BaseNamedObjects\SM0:71152:168:WilStaging_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:71152:64:WilError_02
Ipc \Sessions\1\BaseNamedObjects\SM0:71152:64:WilError_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:75324:168:WilStaging_02
Ipc \Sessions\1\BaseNamedObjects\SM0:75324:168:WilStaging_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:75324:64:WilError_02
Ipc \Sessions\1\BaseNamedObjects\SM0:75324:64:WilError_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:86828:168:WilStaging_02
Ipc \Sessions\1\BaseNamedObjects\SM0:86828:168:WilStaging_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:86828:64:WilError_02
Ipc \Sessions\1\BaseNamedObjects\SM0:86828:64:WilError_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:87992:168:WilStaging_02
Ipc \Sessions\1\BaseNamedObjects\SM0:87992:168:WilStaging_02_p0
Ipc \Sessions\1\BaseNamedObjects\SM0:87992:64:WilError_02
Ipc \Sessions\1\BaseNamedObjects\SM0:87992:64:WilError_02_p0
Ipc \Sessions\1\BaseNamedObjects\SyncRootManager
Ipc \Sessions\1\BaseNamedObjects\UrlZonesSM_****
Ipc \Sessions\1\BaseNamedObjects\windows_shell_global_counters
Ipc \Sessions\1\BaseNamedObjects\ZonesCacheCounterMutex
Ipc \Sessions\1\BaseNamedObjects\ZonesLockedCacheCounterMutex
Ipc O \KernelObjects\MaximumCommitCondition
Ipc O \KnownDlls\kernel32.dll
Ipc O \KnownDlls\NSI.dll
Ipc O \KnownDlls\user32.dll
Ipc O \KnownDlls\wow64.dll
Ipc O \KnownDlls\wow64cpu.dll
Ipc O \KnownDlls\wow64win.dll
Ipc O \KnownDlls32\advapi32.dll
Ipc O \KnownDlls32\bcrypt.dll
Ipc O \KnownDlls32\bcryptPrimitives.dll
Ipc O \KnownDlls32\cfgmgr32.dll
Ipc O \KnownDlls32\clbcatq.dll
Ipc O \KnownDlls32\combase.dll
Ipc O \KnownDlls32\CRYPTBASE.dll
Ipc O \KnownDlls32\cryptsp.dll
Ipc O \KnownDlls32\gdi32.dll
Ipc O \KnownDlls32\gdi32full.dll
Ipc O \KnownDlls32\IMAGEHLP.dll
Ipc O \KnownDlls32\IMM32.dll
Ipc O \KnownDlls32\kernel.appcore.dll
Ipc O \KnownDlls32\kernel32.dll
Ipc O \KnownDlls32\kernelbase.dll
Ipc O \KnownDlls32\MSCTF.dll
Ipc O \KnownDlls32\msvcp_win.dll
Ipc O \KnownDlls32\MSVCRT.dll
Ipc O \KnownDlls32\NSI.dll
Ipc O \KnownDlls32\ole32.dll
Ipc O \KnownDlls32\OLEAUT32.dll
Ipc O \KnownDlls32\powrprof.dll
Ipc O \KnownDlls32\profapi.dll
Ipc O \KnownDlls32\PSAPI.DLL
Ipc O \KnownDlls32\rpcrt4.dll
Ipc O \KnownDlls32\sechost.dll
Ipc O \KnownDlls32\Setupapi.dll
Ipc O \KnownDlls32\SHCORE.dll
Ipc O \KnownDlls32\SHELL32.dll
Ipc O \KnownDlls32\SHLWAPI.dll
Ipc O \KnownDlls32\SspiCli.dll
Ipc O \KnownDlls32\ucrtbase.dll
Ipc O \KnownDlls32\UMPDC.dll
Ipc O \KnownDlls32\user32.dll
Ipc O \KnownDlls32\win32u.dll
Ipc O \KnownDlls32\windows.storage.dll
Ipc O \KnownDlls32\WS2_32.dll
Ipc O \RPC Control\dhcpcsvc
Ipc O \RPC Control\dhcpcsvc6
Ipc O \RPC Control\LRPC-715a3447925fcbe2c7
Ipc O \RPC Control\lsapolicylookup
Ipc O \RPC Control\LSARPC_ENDPOINT
Ipc O \RPC Control\lsasspirpc
Ipc O \RPC Control\SbieSvcPort
Ipc O \RPC Control\webcache_{031b98cf-4a69-4c31-ab42-fd9b3c199407}_S-1-5-21-2580902143-4230214736-3867923513-1001
Ipc O \RPC Control\webcache_{7329ea82-0845-4e4c-bd18-02b67ac065cc}_S-1-5-21-2580902143-4230214736-3867923513-1001
Ipc O \Security\LSA_AUTHENTICATION_INITIALIZED
Ipc O \Sessions\1\BaseNamedObjects\DBWinMutex
Ipc O \Sessions\1\Windows\ApiPort
Ipc O \Sessions\1\Windows\SharedSection
Ipc O \Sessions\1\Windows\Theme1800116866
Ipc O \Sessions\1\Windows\ThemeSection
Ipc O \ThemeApiPort
Ipc O \Windows\Theme1501378913
Pipe -------------------------------
Pipe ?
Pipe \Device\0000003c
Pipe \Device\CNG
Pipe \Device\HarddiskVolume1
Pipe \Device\HarddiskVolume3
Pipe \Device\HarddiskVolume4
Pipe \Device\HarddiskVolume5
Pipe \Device\HarddiskVolume6
Pipe \Device\HarddiskVolume7
Pipe \Device\hmpalert
Pipe \Device\IDMWFP
Pipe \Device\KsecDD
Pipe \Device\MountPointManager
Pipe \device\namedpipe\hmpalert
Pipe O \Device\Afd
Pipe O \Device\NetBT_Tcpip_{3AEE762B-A690-4DB3-9781-0206275D1C94}
Pipe O \Device\NetBT_Tcpip_{50310C4A-04AE-48F0-82F2-C605C50404F1}
Pipe O \Device\NetBT_Tcpip_{736AAE12-A7CC-4219-B1C7-FD2BA1A8B531}
Pipe O \Device\NetBT_Tcpip_{8AE68402-1BD2-4F80-BF94-C18CF8C5C8FB}
Pipe O \Device\NetBT_Tcpip_{A54AE51A-3071-45A5-814B-1D10ABEDFCEB}
Pipe O \Device\NetBT_Tcpip_{BF2C337E-77F2-4372-81AC-121BC21FF29A}
Pipe O \Device\NetBT_Tcpip_{F8B4C3DD-145D-4361-A6DE-E7689FCB406D}
Pipe O \Device\Nsi
WinCls -------------------------------
WinCls O Shell_TrayWnd
WinCls X Chrome_WidgetWin_1
WinCls X cminidlg
WinCls X DV2ControlHost
WinCls X kugou_ui
WinCls X kwmusicmaindlg
WinCls X OrpheusBrowserHost
WinCls X Progman
WinCls X QQMusic_Daemon_Wnd
WinCls X QWidget
WinCls X Windows.UI.Core.CoreWindow

复制代码

显示全部楼层 · 发表于 2019-10-26 18:02:32

Willy19928 发表于 2019-10-26 17:27
虽然这问题很久了，但我还是要问一下
我发现我开新的一个沙盘，然后开档案总管，每次都会连结到lo ...

果断重装

显示全部楼层 · 发表于 2019-10-26 18:54:36

Willy19928 发表于 2019-10-26 17:27
虽然这问题很久了，但我还是要问一下
我发现我开新的一个沙盘，然后开档案总管，每次都会连结到lo ...

档案总管指的是explorer么应该是被dll注入了

显示全部楼层 · 发表于 2019-10-26 19:06:36

风之咩~ 发表于 2019-10-26 18:54
档案总管指的是explorer么应该是被dll注入了

是呀，那要怎么弄

[系统] log.kuwo.cn

评分