AI找出来的,
恶意注入框架检测工具 (IOC: 2026-09-15 SZ-DV-01 事件 / MemloadX64)
目标机器: SZ-DV-06 时间: 09/16/2026 09:57:20
==========================================================================
[1] 扫描 C:\Users\Public 下的伪造路径树与载荷文件 ...
发现伪造路径树 26 处:
C:\Users\Public\Videos\Globalization
C:\Users\Public\Videos\Common Files\Microsoft Shared\TextConv
C:\Users\Public\Videos\Common Files\Microsoft Shared\MSEnv
C:\Users\Public\Videos\Common Files\Common Files
C:\Users\Public\Videos\Dbg\sym\ntkrnlmp.pdb
C:\Users\Public\Videos\Dolby\DAX2
C:\Users\Public\Videos\Google\Chrome\Application\SetupMetrics
C:\Users\Public\Videos\Kingsoft\KIS\kich7
C:\Users\Public\Videos\Thunder Network\XLLiveUD
C:\Users\Public\Videos\WindowsApp2\WDF
C:\Users\Public\Videos\WindowsAppSvc\Sqm\Upload
C:\Users\Public\Videos\WindowsAssist\WinMSIPC\Server
C:\Users\Public\Videos\WindowsSvc\ClipSVC\Archive\KeyHolder
C:\Users\Public\Pictures\Globalization
C:\Users\Public\Pictures\Common Files\Microsoft Shared\TextConv
C:\Users\Public\Pictures\Common Files\Microsoft Shared\MSEnv
C:\Users\Public\Pictures\Common Files\Common Files
C:\Users\Public\Pictures\Dbg\sym\ntkrnlmp.pdb
C:\Users\Public\Pictures\Dolby\DAX2
C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics
C:\Users\Public\Pictures\Kingsoft\KIS\kich7
C:\Users\Public\Pictures\Thunder Network\XLLiveUD
C:\Users\Public\Pictures\WindowsApp2\WDF
C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload
C:\Users\Public\Pictures\WindowsAssist\WinMSIPC\Server
C:\Users\Public\Pictures\WindowsSvc\ClipSVC\Archive\KeyHolder
可疑载荷文件(特征扩展名或 48640 字节): 78 个
[CONFIRMED] C:\Users\Public\Videos\Common Files\Common Files\Windows\textcov\360CenterX86.cdat 48640B 09/14/2026 05:28:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Common Files\Common Files\Windows\textcov\DefenderCenter64.sgvx 48640B 08/13/2026 14:47:54 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Common Files\Microsoft Shared\MSEnv\360CenterX86.nlxs 48640B 09/14/2026 06:07:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Common Files\Microsoft Shared\TextConv\DefenderCenter64.agvx 48640B 07/29/2026 00:10:00 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Common Files\Microsoft Shared\TextConv\SetupCenteri6.dbx 48640B 06/19/2026 22:47:10 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Common Files\Microsoft Shared\TextConv\WeChatXGoWinX9.sbin 48640B 09/14/2026 06:22:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Dbg\sym\ntkrnlmp.pdb\KingSoftAsX64.sbin 48640B 09/14/2026 06:42:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Dbg\sym\ntkrnlmp.pdb\KingSoftAsX64.sgvx 48640B 09/14/2026 06:24:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Dolby\DAX2\InputCenhelperi4.sbin 48640B 09/14/2026 06:37:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Dolby\DAX2\KingSoftAsX64.sedx 48640B 09/14/2026 06:13:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Dolby\DAX2\SetupCenteri6.sgvx 48640B 09/14/2026 06:38:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Globalization\Sorting\SortDefault\360CenterX86.nlxs 48640B 08/19/2026 23:50:00 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Globalization\Sorting\SortDefault\DefenderCenter64.nlxs 48640B 09/14/2026 05:26:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Globalization\Sorting\SortDefault\QQCenteri4.sedx 48640B 09/13/2026 15:18:04 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Globalization\Sorting\SortDefault\WeChatXGoWinX9.sdat 48640B 09/14/2026 06:26:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Google\Chrome\Application\SetupMetrics\AvastDeHelperX7.outx 48640B 09/14/2026 06:36:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Google\Chrome\Application\SetupMetrics\InputCenhelperi4.dbx 48640B 09/14/2026 06:09:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Kingsoft\KIS\kich7\WeChatXGoWinX9.agvx 48640B 09/14/2026 05:29:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Kingsoft\KIS\kich7\WindowsAsisstX32.sbin 48640B 07/25/2026 16:54:06 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Thunder Network\XLLiveUD\KingSoftAsX64.outx 48640B 08/28/2026 12:30:21 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\Thunder Network\XLLiveUD\KingSoftAsX64.sgvx 48640B 09/14/2026 06:45:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsApp2\WDF\360CenterX86.agvx 48640B 09/14/2026 06:25:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsApp2\WDF\AvastDeHelperX7.sedx 48640B 09/14/2026 06:08:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsAppSvc\Sqm\Upload\DefenderCenter64.nlxs 48640B 09/14/2026 06:12:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsAppSvc\Sqm\Upload\pfDefenderMainX64.sedx 48640B 09/14/2026 06:39:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsAppSvc\Sqm\Upload\QQCenteri4.agvx 48640B 09/14/2026 06:11:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsAppSvc\Sqm\Upload\SetupCenteri6.sbin 48640B 09/14/2026 06:38:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsAssist\WinMSIPC\Server\360CenterX86.dbx 48640B 09/14/2026 06:35:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsAssist\WinMSIPC\Server\AvastDeHelperX7.cdat 48640B 08/19/2026 07:30:03 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsAssist\WinMSIPC\Server\InputCenhelperi4.bocx 48640B 09/14/2026 06:44:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsAssist\WinMSIPC\Server\WindowsAsisstX32.agvx 48640B 09/14/2026 06:09:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsSvc\ClipSVC\Archive\KeyHolder\DefenderCenter64.bocx 48640B 09/14/2026 06:23:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsSvc\ClipSVC\Archive\KeyHolder\pfDefenderMainX64.dbx 48640B 09/14/2026 06:14:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Videos\WindowsSvc\ClipSVC\Archive\KeyHolder\WindowsAsisstX32.cdat 48640B 09/07/2026 19:47:04 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Common Files\Windows\textcov\KingSoftAsX64.sbin 48640B 09/14/2026 06:45:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Common Files\Windows\textcov\WeChatXGoWinX9.dbx 48640B 09/14/2026 06:12:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Microsoft Shared\MSEnv\360CenterX86.bocx 48640B 09/14/2026 06:42:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Microsoft Shared\MSEnv\DefenderCenter64.sbin 48640B 07/12/2026 14:04:57 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Microsoft Shared\MSEnv\pfDefenderMainX64.agvx 48640B 09/14/2026 06:07:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Microsoft Shared\MSEnv\pfDefenderMainX64.sdat 48640B 09/14/2026 06:42:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Microsoft Shared\TextConv\AvastDeHelperX7.agvx 48640B 09/14/2026 06:22:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Microsoft Shared\TextConv\DefenderCenter64.sdat 48640B 06/05/2026 02:31:29 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Microsoft Shared\TextConv\SetupCenteri6.sedx 48640B 07/14/2026 17:39:21 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Common Files\Microsoft Shared\TextConv\WindowsAsisstX32.outx 48640B 09/14/2026 06:23:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Dbg\sym\ntkrnlmp.pdb\KingSoftAsX64.dbx 48640B 07/02/2026 04:41:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Dbg\sym\ntkrnlmp.pdb\pfDefenderMainX64.nlxs 48640B 09/14/2026 06:14:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Dolby\DAX2\360CenterX86.outx 48640B 09/14/2026 06:14:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin 48640B 09/15/2026 08:18:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Globalization\Sorting\SortDefault\360CenterX86.cdat 48640B 09/14/2026 06:24:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Globalization\Sorting\SortDefault\AvastDeHelperX7.nlxs 48640B 09/14/2026 06:26:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Globalization\Sorting\SortDefault\pfDefenderMainX64.bocx 48640B 09/14/2026 06:25:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\pfDefenderMainX64.nlxs 48640B 09/14/2026 06:36:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx 48640B 09/15/2026 08:18:43 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\WeChatXGoWinX9.dbx 48640B 06/16/2026 01:18:52 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\WindowsAsisstX32.bocx 48640B 09/14/2026 06:37:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Kingsoft\KIS\kich7\AvastDeHelperX7.outx 48640B 08/14/2026 13:38:59 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Thunder Network\XLLiveUD\DefenderCenter64.cdat 48640B 09/14/2026 06:09:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Thunder Network\XLLiveUD\DefenderCenter64.sgvx 48640B 09/14/2026 06:26:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Thunder Network\XLLiveUD\KingSoftAsX64.outx 48640B 09/14/2026 05:52:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\Thunder Network\XLLiveUD\WindowsAsisstX32.sbin 48640B 09/14/2026 06:44:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsApp2\WDF\KingSoftAsX64.sgvx 48640B 06/07/2026 03:15:12 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsApp2\WDF\QQCenteri4.cdat 48640B 09/14/2026 06:25:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\360CenterX86.sgvx 48640B 09/14/2026 06:21:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\AvastDeHelperX7.agvx 48640B 08/18/2026 18:00:46 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx 48640B 09/15/2026 08:19:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.outx 48640B 09/14/2026 06:13:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\KingSoftAsX64.dbx 48640B 09/14/2026 06:38:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\pfDefenderMainX64.cdat 48640B 09/14/2026 06:46:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\SetupCenteri6.cdat 48640B 09/14/2026 06:13:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAssist\WinMSIPC\Server\360CenterX86.sgvx 48640B 09/14/2026 06:43:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAssist\WinMSIPC\Server\DefenderCenter64.sedx 48640B 09/14/2026 06:37:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAssist\WinMSIPC\Server\pfDefenderMainX64.nlxs 48640B 09/10/2026 15:30:04 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAssist\WinMSIPC\Server\QQCenteri4.sbin 48640B 09/14/2026 06:36:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAssist\WinMSIPC\Server\SetupCenteri6.sdat 48640B 09/14/2026 06:45:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsAssist\WinMSIPC\Server\WeChatXGoWinX9.nlxs 48640B 09/15/2026 08:19:05 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsSvc\ClipSVC\Archive\KeyHolder\InputCenhelperi4.sdat 48640B 09/14/2026 06:23:45 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsSvc\ClipSVC\Archive\KeyHolder\QQCenteri4.cdat 48640B 09/14/2026 06:22:25 厂商=Microsoft Corporation
[CONFIRMED] C:\Users\Public\Pictures\WindowsSvc\ClipSVC\Archive\KeyHolder\SetupCenteri6.sbin 48640B 09/14/2026 06:24:25 厂商=Microsoft Corporation
[2] 扫描运行中进程的被注入模块(lsass 等全部进程) ...
注入: lsass(pid 840) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\pfDefenderMainX64.cdat
注入: lsass(pid 840) -> C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx
注入: lsass(pid 840) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: lsass(pid 840) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: mongod(pid 6684) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: mongod(pid 7100) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: mpdwsvc(pid 6108) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: mpdwsvc(pid 6108) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: mpdwsvc(pid 6116) -> C:\Users\Public\Pictures\WindowsAssist\WinMSIPC\Server\WeChatXGoWinX9.nlxs
注入: mpdwsvc(pid 6116) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: snmp(pid 3492) -> C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx
注入: spoolsv(pid 3124) -> C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx
注入: spoolsv(pid 3124) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: SQLAGENT(pid 5416) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: SQLAGENT(pid 5416) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: sqlservr(pid 4008) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: sqlservr(pid 4008) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 500) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 1300) -> C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx
注入: svchost(pid 1300) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: svchost(pid 1324) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: svchost(pid 1324) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 1576) -> C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx
注入: svchost(pid 1576) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: svchost(pid 1576) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 1872) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\pfDefenderMainX64.cdat
注入: svchost(pid 1872) -> C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx
注入: svchost(pid 2436) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 2812) -> C:\Users\Public\Pictures\Dolby\DAX2\WindowsAsisstX32.sbin
注入: svchost(pid 2940) -> C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx
注入: svchost(pid 3244) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 3408) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 3524) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 3624) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: svchost(pid 3876) -> C:\Users\Public\Pictures\Google\Chrome\Application\SetupMetrics\QQCenteri4.dbx
注入: svchost(pid 5780) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
注入: WmiPrvSE(pid 2388) -> C:\Users\Public\Pictures\WindowsAppSvc\Sqm\Upload\InputCenhelperi4.dbx
[3] 检查 ghost 镜像遗留驱动 BAPIDRV(360.cn) ...
未发现 BAPIDRV
[4] 检查 WER 崩溃报告特征(BEX64 + MSCOREE, 近90天) ...
命中 100 份 CLR 启动劫持崩溃报告(DEP@mscoree):
AppCrash_KiteService.exe_c1a9b1d9294c9befe897767a8cf72defa4098db_0413ba1e_1507cf96
AppCrash_RemoteFXvGPUDisa_c45f23edfca17dfe76f48276fef3098a62c9aa9_586b8e06_148a25ae
AppCrash_RemoteFXvGPUDisa_c45f23edfca17dfe76f48276fef3098a62c9aa9_586b8e06_84c0255d
AppCrash_RemoteFXvGPUDisa_c45f23edfca17dfe76f48276fef3098a62c9aa9_586b8e06_f71a798b
AppCrash_RemoteFXvGPUDisa_c45f23edfca17dfe76f48276fef3098a62c9aa9_586b8e06_f760cdc9
AppCrash_ScenarioEngine.e_bf61f53efc82264b724c875a4e896385c3d3e7fc_4ae5e68a_f0153427
AppCrash_ScenarioEngine.e_bf61f53efc82264b724c875a4e896385c3d3e7fc_4ae5e68a_f3e10334
AppCrash_sqlceip.exe_7ec8e3d3cf3d3bd72a6d1f2e04554368914473b_b95463ec_0ad12596
[5] 检查 SQL 工具链 IFEO 防护(仅微软签名映像) ...
未防护: ScenarioEngine.exe
未防护: Microsoft.SqlServer.IntegrationServices.MasterServiceHost.exe
未防护: Microsoft.SqlServer.IntegrationServices.WorkerAgentServiceHost.exe
未防护: sqlceip.exe
未防护: MsDtsSrvr.exe
==========================================================================
判定: CONFIRMED —— 确认中招(铁证 115 条)
==========================================================================
但目前360杀毒装了快速扫描闪退 |
|
|
|
|
|
评论
直达楼层