2007-11-30
Continue to improve o14, o15, and o18 by referring to the information displayed by Kaka Security Assistant.
At the same time, add the coloring function in the log analysis tool to highlight malicious projects in the log, such:
C:/Windows/system32/ctfmon.exe * 2660 | 0:52:30 | MICROSOFT? Windows? Operating System | 5.1.2600.2180 | CTF loader |? Microsoft Corporation. All Rights Reserved. | 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Microsoft Corporation |? | Ctfmon. exe
C:/progra ~ 1/3721/helper. dll | 15:14:54 | surfing the Internet in Chinese | 2.5.0.1001 | helperup | copyright (c) 2007 | 2.5.4.1007 | Guofeng inte software (Beijing) Co., Ltd. | helperup | helper. dll
C:/progra ~ 1/Yahoo! /Assist ~ 1/yhelper. dll | 17:10:16 | helper module | 3, 1, 5, 1033 | helper module | copyright 2005 Yahoo! China | 3, 1, 5, 1033 | Yahoo! China | helper. dll
C:/Windows/downlo ~ 1/cnsmin. dll | 17:59:22 | Chinese surfing | 2.5.0.1001 | cnsmin | copyright (c) 2007 | 2.5.1.2 | Guofeng inte software (Beijing) Co., Ltd. | cnsmin. dll
C:/Windows/system32/dh3oor0. dll | 0:52:32
C:/Windows/system32/55551.dll | 0:52:32