1. optimized the detection code of F2, O4, o23, and o24 groups.
2. modified the display of o23 items in the generated log, from:
O23-service: porting (Microsoft device logical)-C:/Windows/system32/svchost.exe-k "porting" | 19:14:14 | MICROSOFT? Windows? Operating System | 5.1.2600.5512 | generic host process for Win32 services |? Microsoft Corporation. All Rights Reserved. | 5.1.2600.5512 (xpsp.080413-2111) | Microsoft Corporation |? | Svchost.exe-> C:/Windows/system32/5b3185. DLL | 11:26:22 | MICROSOFT (r) Windows (r) Operating System | 1, 0, 0, 1 |. net support application | copyright (c) 2008 | 1, 0, 0, 1 | Microsoft Corporation |? | MICROSOFT (r) Windows (r) Operating System | server.exe (automatic)
Changed:
O23-service: porting (Microsoft device logical)-C:/Windows/system32/svchost.exe-k "porting" | 19:14:14 | MICROSOFT? Windows? Operating System | 5.1.2600.5512 | generic host process for Win32 services |? Microsoft Corporation. All Rights Reserved. | 5.1.2600.5512 (xpsp.080413-2111) | Microsoft Corporation |? | Svchost.exe
-> C:/Windows/system32/5b3185. DLL | 11:26:22 | MICROSOFT (r) Windows (r) Operating System | 1, 0, 0, 1 |. net support application | copyright (c) 2008 | 1, 0, 0, 1 | Microsoft Corporation |? | MICROSOFT (r) Windows (r) Operating System | server.exe (automatic)