pe_xscan做了幾個改動

1、整理最佳化了F2、O4、O23、O24組的檢測代碼

 

2、修改了產生的LOG中的O23項的顯示，由：

 

O23 - 服務: porting (Microsoft Device Logical) - C:/WINDOWS/System32/svchost.exe -k "porting"|2008-4-13 19:14:14|Microsoft? Windows? Operating System|5.1.2600.5512|Generic Host Process for Win32 Services|? Microsoft Corporation. All rights reserved.|5.1.2600.5512 (xpsp.080413-2111)|Microsoft Corporation|?|svchost.exe|svchost.exe->C:/WINDOWS/system32/5b3185.dll|2009-6-11 11:26:22|Microsoft(R) Windows(R) Operating System|1, 0, 0, 1|.Net support application|Copyright (C) 2008|1, 0, 0, 1|Microsoft Corporation|?|Microsoft(R) Windows(R) Operating System|Server.exe(自動)

 

 

改為：

 

O23 - 服務: porting (Microsoft Device Logical) - C:/WINDOWS/System32/svchost.exe -k "porting" | 2008-4-13 19:14:14|Microsoft? Windows? Operating System|5.1.2600.5512|Generic Host Process for Win32 Services|? Microsoft Corporation. All rights reserved.|5.1.2600.5512 (xpsp.080413-2111)|Microsoft Corporation|?|svchost.exe|svchost.exe
          -> C:/WINDOWS/system32/5b3185.dll |2009-6-11 11:26:22|Microsoft(R) Windows(R) Operating System|1, 0, 0, 1|.Net support application|Copyright (C) 2008|1, 0, 0, 1|Microsoft Corporation|?|Microsoft(R) Windows(R) Operating System|Server.exe(自動)