应用控制日志,2008-04-01 21:57:24.859,"已阻止应用程序 'theworld.exe' 改写注册表, HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{7BD29E01-76C1-11CF-9DD0-00A0C9034933} {000214E6-0000-0000-C000-000000000046} 0x401"
应用控制日志,2008-04-01 21:57:24.859,"已阻止应用程序 'theworld.exe' 创建其它进程, child_process_name=C:\windows\system32\verclsid.exe(1580) child_process_commandLine=/S /C {7BD29E01-76C1-11CF-9DD0-00A0C9034933} /I {000214E6-0000-0000-C000-000000000046} /X 0x401"