| Server IP : 123.56.80.60 / Your IP : 216.73.216.33 Web Server : Apache/2.4.54 (Win32) OpenSSL/1.1.1s PHP/7.4.33 mod_fcgid/2.3.10-dev System : Windows NT iZhx3sob14hnz7Z 10.0 build 14393 (Windows Server 2016) i586 User : SYSTEM ( 0) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Program Files (x86)/Alibaba/Aegis/AliSecCheckTmp/data/ |
Upload File : |
2026-03-19 11:16:03,750 [windows-autorun-item-check.py][INFO] PythonLoader pid is 4608
2026-03-19 11:16:09,887 [windows-autorun-item-check.py][INFO] get reg key[Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad][{E6FB5E20-DE35-11CF-9C87-00AA005127ED}]
2026-03-19 11:16:10,091 [windows-autorun-item-check.py][INFO] get reg key[Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad][{E6FB5E20-DE35-11CF-9C87-00AA005127ED}]
2026-03-19 11:16:12,555 [windows-autorun-item-check.py][INFO] get reg autorun [4]
2026-03-19 11:16:12,555 [windows-autorun-item-check.py][INFO] get autorun [{E6FB5E20-DE35-11CF-9C87-00AA005127ED}]
2026-03-19 11:16:12,555 [windows-autorun-item-check.py][INFO] get autorun [autocheck autochk /q /v *]
2026-03-19 11:16:12,555 [windows-autorun-item-check.py][INFO] get autorun [C:\Windows\system32\userinit.exe,]
2026-03-19 11:16:12,555 [windows-autorun-item-check.py][INFO] get autorun [explorer.exe]
2026-03-19 11:16:12,915 [windows-autorun-item-check.py][INFO] get lnk path size[1]
2026-03-19 11:16:12,963 [windows-autorun-item-check.py][INFO] get lnk path size[1]
2026-03-19 11:16:12,964 [windows-autorun-item-check.py][INFO] get start up autorun [0]
2026-03-19 11:16:12,964 [windows-autorun-item-check.py][INFO] get autorun path exists[C:\Windows\system32\userinit.exe]
2026-03-19 11:16:13,470 [windows-autorun-item-check.py][INFO] get not except execresult[1]