伪msxml恶意程序？

雪孩儿

金山卫士查出来的，360卫士没查出来。

文件路径:
C:\Program Files\Common Files\iso\msxml6.dll

注册表键值:
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\about\{21C0F86B-4348-4C88-AF0C-9149DE70E132}
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\about\{21C0F86B-4348-4C88-AF0C-9149DE70E132} - [CLSID] : ({21C0F86B-4348-4C88-AF0C-9149DE70E132})
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\http\{21C0F86B-4348-4C88-AF0C-9149DE70E132}
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\http\{21C0F86B-4348-4C88-AF0C-9149DE70E132} - [default] : (ms http handle)
HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\http\{21C0F86B-4348-4C88-AF0C-9149DE70E132} - [CLSID] : ({21C0F86B-4348-4C88-AF0C-9149DE70E132})
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132} - [default] : (Windows HttpFilter)
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132} - [AppID] : ({73A7FFA7-AA3A-49E5-A777-713B7DB78E9C})
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\InprocServer32
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\InprocServer32 - [default] : (C:\Program Files\Common Files\iso\msxml6.dll)
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\InprocServer32 - [ThreadingModel] : (Apartment)
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\ProgID
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\ProgID - [default] : (MsHttpApp.HttpFilter.1)
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\Programmable
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\Programmable - [1] : (1)
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\TypeLib
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\TypeLib - [default] : ({04F7BD61-E11D-4BB3-B6FE-B730BCA713D4})
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\VersionIndependentProgID
HKCR\CLSID\{21C0F86B-4348-4C88-AF0C-9149DE70E132}\VersionIndependentProgID - [default] : (MsHttpApp.HttpFilter)

爱卡会员

上报吧!

雪孩儿

就一个人回答啊