ºô»Ú½×¾Â - ³nÅ餤¤å¤Æ¥æ¬y°Ï - [¨t²Î¤u¨ã] Process Monitor v1.25 (Windows ¶i¶¥ºÊ±±¤u¨ã)
» ¹C«È:  µù¥U | µn¿ý | ·|­û | À°§U
 

§K¶O½u¤W¤p»¡
°Êº©¤ÀÃþ ¡G ³Ì·s¤W¬[ ¡U ¼öªù³s¸ü ¡U ¥þ¥»¤p»¡ ¡U ³Ì·s¤W¬[ ¡U ¥È¤Û©_¤Û ¡U ³£¥«¨¥±¡ ¡U ªZ«L¥P«L ¡U ­x¨Æ¾ú¥v ¡U ºô´åÄv§Þ ¡U ¬ì¤ÛÆF²§ ... §ó¦h¤p»¡

<<  [1] [2] [3]  >>
§@ªÌ:
¼ÐÃD: [¨t²Î¤u¨ã] Process Monitor v1.25 (Windows ¶i¶¥ºÊ±±¤u¨ã) ¤W¤@¥DÃD | ¤U¤@¥DÃD
  yoyo007
  ½×¾Â¶Q»« 
  µÒ¯ó¼µ¦íªº¤é¤l


 
  ¿n¤À 38778
  µo¤å 6170
  µù¥U 2005-9-10
  ¨Ó¦Û ·Àµ´§Æ±æªº¥@¬É
  ª¬ºA Â÷½u
#1  [¨t²Î¤u¨ã] Process Monitor v1.25 (Windows ¶i¶¥ºÊ±±¤u¨ã)

[³nÅé¦WºÙ] Process Monitor v1.25 (Windows ¶i¶¥ºÊ±±¤u¨ã)
[³nÅé»y¨¥] ÁcÅ餤¤å
[Àɮפj¤p] 1.14 MB (1,198,964 ¦ì¤¸²Õ)
[©x¤è¯¸¥x] http://www.microsoft.com/technet ... ProcessMonitor.mspx
[¦s©ñªÅ¶¡] HTTP
[³nÅ鲤¶] §K¦w¸Ë

  Quote:


¤@¡B¤¤¤å¤Æµ§°O¡G

  Quote:
§éÄˤF´X¤é¡A²×©ó§â Process Monitor ªº¤¤¤å¤Æµ¹§¹¦¨¤F¡AªY¼¢¡C

®É¶¡¥D­n¬Oªá¦b«D¼Ð·Ç¸ê·½¦r¦êªºÂ½Ä¶¡A¥H¤Î¦]¬°¹L«×½Ķ¾É­P­«¶}¾÷«á Process Monitor µLªk¸ü¤JÅX°Êµ{¦¡ªº°£¿ù¤W¡F¥Ñ©ó Process Monitor ªº«D¼Ð·Ç¸ê·½¦r¦ê¦ì©ó Unicode¡A·íµM³o¦b½Ķ¤Wµ¹¤F§Ú­Ì·¥¤jªº«K§Q¡A´N¬O¤£¥²¤Ó¥h¦Ò¼{¦r¦êªÅ¶¡¬O§_¨¬°÷ªº°ÝÃD¡A¦ý¤Z¨Æ¦³±o¦³¥¢¡AProcess Monitor ªº Unicode ¦r¦ê¹ê¦b§â§Ú·dªº [¤Ö] ²´©üªá (§ÚÁÙ¦~»´¡A¤£»Ý­n¥Î¨ì [¦Ñ] ³o­Ó¦r)¡A¨Ò¦p¹³¦b½Ķ 010 Editor 2.1.3 ®É©Ò¹J¨ìªº¦r¦êºIÂ_¤è¦¡¡G

An error occured attempting to memory map '
'
The file '
' is not a valid backing file (truncated)
Unable to open '


¦n­ù¨Î¦b¡A¦¹Ãþ¦r¦ê¥u¬O³¡¤À¦Ó¤w¡A¤]¦]¬°³oºØ¦r¦ê§Î¦¡¡A§Ú¨S¤Ó¥h­×¾ã [ ' ] ©Î½Ķ¤§Ãþªº¡F³ÌÆ{¨ò¬O¦w¯à¿ë§Ú¬O»Û¶¯ (¥iĶ»P¤£¥iĶ) ªº¨º¨Ç¡G

RegUnloadKey
RegDeleteKey
DeviceIoControl
SetEAFile
VolumeMount
UnlockFileSingle
more than
is
FILE CORRUPT
THREAD NOT IN PROCESS


®`§Ú³s¿z¿ïÀɳ£¤£´±¥Î¡A²`©È¤@¿z¤U¥h¡A¦^ÀY¸É¿ò¤S­n¤@¬q®É¶¡¤F¡A¥u¦n´N VA ¦r¦ê§ì¤@§ì¡A¤]¨S¨º­Ó¤ß±¡¥h¿z¿ï¡A¤@¦æ¦æÃä¬ÝÃ佡A¤Ï¥¿°µ¦n¤@¦¸¡A¥H«á§ó·s´N»´ÃP¦h¤F¡C²Ä¤@¦¸¡AÃø§K°}µh°Ú !!

µM«á´N¬O³¡¤À¦r¦ê¤£¤¹³\¶ñ¸É 00¡A·|³y¦¨µ{¦¡¥X¿ù¡F¥t¥~¦³¨Ç½Ķ§Ú¬O³sé±a²qªº¡A³o³¡¤À§Æ±æ±M·~ªººô¤Í¯à¤£§[µ¹¤©«ü¥¿¡A¥ýÁÂÁ¤F¡C

À£ÁYÀɪþ±a [¨ø¸ü.reg]¡A¦]¬°µn¿ýÀɧڦ³°Ê¨ì¤@­Ó¦r¦ê¡A¦pªG±z°õ¦æ¹Lª©ªº Process Monitor¡A«Øij±z¦b°õ¦æ¦¹¤¤¤åª©®É¡A¥ýÂù«ö [¨ø¸ü.reg] ¥h±¼µn¿ýÀɤ¤­ì¦³ªº¸ê®Æ¡F²¾°£³nÅé¤]¬OÂù«ö [¨ø¸ü.reg]¡A¦A±Nµ{¦¡¥Ø¿ý§R°£´N¦n¤F¡C

#1 §Ú¦³¾ã²z¤F¤@¨Ç¬ÛÃöªº¨Ï¥Î»¡©ú¡C

¤G¡B³nÅ餶²Ð¡G

  Quote:
Process Monitor ÄÝ©ó Windows ¶i¶¥ºÊ±±¤u¨ã¡A¨ÃÅã¥Ü§Y®ÉÀɮרt²Î¡Bµn¿ý©M³B²z§Ç / °õ¦æºü¬¡°Ê¡C¥¦µ²¦X¤F¨â­Óª© Sysinternals ¤½¥Îµ{¦¡ (§Y Filemon ©M Regmon) ªº¥\¯à¡AÁÙ·s¼W¤F§ó¼sªxªº¼W±j¥\¯à²M³æ¡A¥]¬AÂ×´I©M«D¯}Ãa©Êªº¿z¿ï¥\¯à¡B¸Ô²Óªº¨Æ¥ó¤º®e (¹³¬O¤u§@¶¥¬q ID ©M¨Ï¥ÎªÌ¦WºÙ)¡B¥i¾aªº³B²z§Ç¸ê°T¡B§¹¾ãªº°õ¦æºü°ïÅ|·f°t¨C­Ó§@·~ªº¾ã¦X©Ê²Å¸¹¤ä´©¡B¦P®Éµn¤JÀÉ®× ...µ¥µ¥¡C¥¦¿W¯Sªº±j¤j¥\¯à¡A°w¹ï¨t²ÎºÃÃø±Æ¸Ñ©MÂy¨ú´c·Nµ{¦¡½X¤u¨ã²Õ¨â¤è­±¡A±N Process Monitor ¥´³y¦¨¬°¨ä®Ö¤ß¤½¥Îµ{¦¡¡C

¶W¹L Filemon ©M Regmon ªº Process Monitor ¼W±j¥\¯à

Process Monitor ªº¨Ï¥ÎªÌ¤¶­±¿ï¶µ»P Filemon ©M Regmon ªº¨Ï¥ÎªÌ¤¶­±¿ï¶µ¬Û¦ü¡A¦ý¬O«eªÌ¬O±qµL¨ì¦³©Ò¼¶¼g¡A¦Ó¥BÁÙ¥]§t¤F¥H¤U³\¦h­«­nªº¼W±j¥\¯à¡G

¡E³B²z§ÇªººÊ±±¡B°õ¦æºü±Ò°Ê»Pµ²§ô¡A¥]¬Aµ²§ôª¬ºA½X¡C
¡E¬M¹³ªººÊ±± (DLL ©M®Ö¤ß¼Ò¦¡¸Ë¸mÅX°Êµ{¦¡) ¸ü¤J¡C
¡E°w¹ï§@·~¿é¤J©M¿é¥X°Ñ¼Æªº§ó¦h¸ê®ÆÂ^¨ú¡C
¡E«D¯}Ãa©Ê¿z¿ï¥i¥H¤£·|¥¢¥h¸ê®Æªº±¡ªp¤U¡A³]©w¿z¿ï¾¹¡C
¡E°w¹ï¨C¶µ§@·~¶i¦æ°õ¦æºü°ïÅ|Â^¨ú¡A¨Ã¦b³\¦h±¡ªp¤U¿ëÃѧ@·~ªº®Ú¥»­ì¦]¡C
¡E¥i¾aªº³B²z§Ç¸Ô²Ó¸ê®ÆÂ^¨ú¡A¥]¬A¬M¹³¸ô®|¡B©R¥O¦C¡A»P¨Ï¥ÎªÌ©M¤u§@¶¥¬q ID¡C
¡E¥ô¦ó¨Æ¥óÄݩʪº¥i³]©w»P¥i²¾°Ê¦¡Äæ¦ì¡C
¡E¿z¿ï¾¹¥i¥H¹ï¥ô¤@¸ê®ÆÄæ¦ì¶i¦æ³]©w¡A¨ä¤¤¥]¬A¨Ã«D³]©w¦¨¸ê®Æ¦æªºÄæ¦ì¡C
¡E°w¹ï¼Æ¦Ê¸UÂ^¨úªº¨Æ¥ó©M GB ªº°O¿ý¸ê®Æ¡A¾Ö¦³¶i¶¥ªº°O¿ýµ²ºc³W¼Ò¡C
¡E³B²z§Ç¾ðª¬¤u¨ãÅã¥Ü©Ò¦³°lÂܤ¤ªº°Ñ¦Ò³B²z§Ç¤§¶¡ªºÃö«Y¡C
¡E­ì¥Í°O¿ý®æ¦¡«O¯d¤F¦b¤£¦Pªº Process Monitor °õ¦æ­ÓÅ餤¸ü¤Jªº©Ò¦³¸ê®Æ¡C
¡EProcess ¤u¨ã´£¥Ü´£¨Ñ²©öÀ˵ø³B²z§Ç¬M¹³¸ê°Tªº¥\¯à¡C
¡E¸Ô²Óªº¤u¨ã´£¥Ü¦b¦s¨ú¤£²Å¦XÄæ¦ì¤¤ªº®æ¦¡¤Æ¸ê®Æ®É¡AÅܱo§ó¬°¤è«K¡C
¡E¥i¨ú®ø·j´M¡C
¡E¶}¾÷®É°O¿ý©Ò¦³¨t²Î°Ê§@¡C




ÀɮפU¸ü¡G


MD5¡G

CODE:  [Copy to clipboard]
059C37FDAF6FC8815DFF3925C1B0E85A


½Ð«ö [Copy to clipboard] ½Æ»s¸ÑÀ£½X¡G

CODE:  [Copy to clipboard]

PS. ½Ðª`·N¡G

¦p³nÅé»Ý¯S®í¤å¥ó¡A¦Ó±z¥u¤U¤£¦^ªº¸Ü¡A¨º¤£¦n·N«ä¡A§Y¨Ï±z PM ¦V§Ú¸ß°Ý¡A§Ú¤]·|¾Ç±z·í­Ó¼ç¤ôªÌ¡A¤£¤©¦^À³¡A½Ð§O©Ç§Ú¡A³o¥»¬O§©|©¹¨Ó¡A¤j®a¤¬¬Û¡A©Ò¥H¡A·q½Ð¦U¦ì¤j¤j«O«ù½×¾Âªº¨}¦n­·®ð¡A¾i¦¨¦³¤U¦³¦^ªººô¸ô§»ö¡AÁÂÁ±zªº°t¦X !!




§Ú±q»·¤è¨Ó¡D§A¨ì»·¤è¥h
­·¡C¬ï½£¦Ó¹L
»a¯íªº¤ë¦â¡D¨`¶Ë½Öªº²´²¶¡K
2007-10-9 08:37 AM
¬d¬Ý¸ê®Æ  ³X°Ý¥D­¶  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  yoyo007
  ½×¾Â¶Q»« 
  µÒ¯ó¼µ¦íªº¤é¤l


 
  ¿n¤À 38778
  µo¤å 6170
  µù¥U 2005-9-10
  ¨Ó¦Û ·Àµ´§Æ±æªº¥@¬É
  ª¬ºA Â÷½u
#2  Process Monitor ¬ÛÃö¨Ï¥Î»¡©ú



  Quote:

¦¬¿ý¶i¡G¥Î Process Monitor ¬Ý¬Ýµ{¦¡·d¤°»ò°­ #39




  Quote:
¤@¡B¥Î Process Monitor §ä¥Xµ{¦¡ÄÀ©ñªº»y¨¥ÀÉ














































  Quote:
¤G¡BProcess Monitor °ò¥»¾Þ§@±Ð¾Ç

Âà¸ü¦Û¡Ghttp://blog.darkthread.net...08/18/977.aspx

¡i¯ù¥]®g¤â±MÄæ¡jProcess Monitor °ò¥»¾Þ§@±Ð¾Ç

¦³ºô¤Í¦b°Ý Process Monitor ¦p¦ó¨Ï¥Î¡A§Ú·Q¤F·Q¡A³o¦ì¯ù¥]¤@­ô¦b¥» Blog ¥X¥Í¤J¦º¯}®×µL¼Æ¡A«oÁÙ¯uªº¨S¥¿¦¡¤¶²Ð¹L¥¦ªº¾Þ§@¨Ï¥Î¤è¦¡¡C©Ò¥H¡AProcess Monitor ªºªì¯Å¨Ï¥Î±Ð¾Ç¨Ó¤F!

SysInternals ªº¨â¦ì¤Ñ¤~³Q«õ¥h·L³n«áªº²Ä¤@­Ó¥Nªí§@¡A´N¬O±N­ì¥»ªº File Monitor (FileMon) »P Registry Monitor (RegMon) ¨â®M¤u¨ã¡Aª÷­è¦XÅ馨 Process Monitor¡A³o¯u¬O­Ó¥s¤H·P°Ê¸¨²\ªºÁ|°Ê§r~~~

¥H©¹¦b±Æ°£°ÝÃD®É¡A±`±`­n¦P®É¯d·N File ¤Î Registry ¦s¨úª¬ªp¡A©Ò¥H´N­n¦P®É¶} FileMon¸ò RegMon¡A¬G·NÅý°ÝÃD¦Aµo¥Í¡AµM«á¦P®ÉÃö³¬ FileMon ¤Î RegMon¡A¶}©l¤ñ¹ï¤GªÌªº°O¿ý: §ä¥X FileMon Ū¨ú A Àɪº®ÉÂI¡A¹ï·Ó¨ì RegMon ¬Ý·í®ÉŪ¤F­þ­Ó Registry¡A¦bÁÙ¨S¦³·d¥XÂù¿Ã¹õ¤§«e¡A§ÚÁÙ±`±o§â RegMon ªº°O¿ýÀÉ Copy ¨ì Notebook ¤W¡A¤@²´¬Ý PC¡A¤@²´¬Ý Notebook ¤è«K¤ñ¹ï¡C¹ï¤£°_¡A§Ú¤S¶}©l¸H¸H°á¤F¡A³o¨Ç¦Y¿»Á¦ÅÒªº¦^¾Ð¡AÁÙ¬O¯dµ¹¤¤¦~¤H¿W¦Û«~À|¦n¤F¡CXD

Á`¤§¡AProcMon §â RegMon »P FileMon ªººÊ±±©ñ¦b¤@°_¡A¹ê¦b¬O¦ò¤ß¨ÓµÛ!

­n¥Î ProcMon ªº²Ä¤@¨B·íµM­n¥ý¥h¤U¸ü¡Aºô§}¦b
³o¸Ì¡A§K¦w¸Ë¡A§Ú³£¥u¸Ñ EXE ÀÉ¥X¨Ó©ñ¦b®à­±´N¶}©l·F¬¡¡C




¶}±Ò«á¡A§A·|¬Ý¨ì¦p¤W¹Ïªºµe­±¡A³q±`§Ú³£¥u¥Î¨ì Toolbar ªº¨º¤@±Æ«ö¶s´Nª±±o¤£¥ç¼Ö¥G¡C§Ú¥ÎÃC¦â¼Ð¥X¨Ó´X­Ó­«­n¥\¯à¡A»¡©ú¦p¤U:

1 ¶}±Ò/°±¤î°O¿ý¨Æ¥ó: ¥´ X ®Éªí¥Ü²{¦b°±¤î®·®»¨Æ¥ó

2.¦Û°Ê¤U±²: ¥Ñ©óºÊÅ¥¹Lµ{¤¤¡A²M³æ·|¤£Â_¼Wªø¡A§A¥i¥H¿ï¾Ü ProcMon ¥Ã»·Åã¥Ü²M³æ³Ì¤U¤èªº³Ì·s°O¿ý¡C¤£¹L²M³æ³q±`ªø±o«Ü§Ö¡A·|±²¨ì§A²´ªá¡C

3.²M°£¥Ø«e²M³æ¤¤ªº°O¿ý

4.³]©wFilter: ¶W­«­n! ProcMon¬O¼oÅK©Î¬OÄ_¼C¥þ¬Ý§A·|¤£·|³] Filter¡A«á­±¦A°µ¸Ô²Ó¤¶²Ð

5.«ü©w®à­±µ{¦¡: ³o­Ó¤pºË·Ç¾¹¦b SPY++ ¸Ì«Ü¦³¦W¡C¦pªG§A¤µ¤Ñ·Q­nÆ[¹î¬Y­Ó®à­±µ{¦¡Åª¤F­þ¨Ç Registry¡B¼g¤F­þ´X­Ó File¡A±N¤pºË·Ç¾¹©ì©Ô¨ì¨º­Óµ{¦¡ªº UI ¤W¡AProcMon ´N·|¦b Filter ¤¤¥[¤J­­©w¸Óµ{¦¡ªº±ø¥ó («ü©w Process ID)

6.·j´M: ¦b²{¦³ªº°O¿ý¤¤§ä´M¯S©w¤å¦r

7.¸õ¦ÜRegistry/File: ¯»¤è«Kªº¥\¯à! ¦b°O¿ý¤¤·|¬Ý¨ì¬Y¨Ç Registry ©Î File ªº¦WºÙ¡AÂI¿ï¨º¤@¦C°O¿ý«á«ö¤U¥h¡A­Y¬O Registry °O¿ý´N·|¶} Registry Editor °±¦b¸Ó Registry Key ¤W¡A­Y¬O File ´N·|¶}±Ò FileMonitor °±¦b¸ÓÀɮתº©Ò¦b¥Ø¿ý¤W¡C¦b°O¿ý¤W«ö¥kÁä¤]¦³­Ó Jump To¡A®ÄªG¬Û¦P¡C

8, 9, 10: ¥Î¨Ó«ü©w§A­nºÊÅ¥ªº½d³ò¡A¤À§O¬O Registry¡BFile ¤Î Process ¬¡°Ê¡A¦pªG§A¥uÃö¤ß File ¦s¨ú¡A´N¥u¶}±Ò File¡A¯u¥¿ªº½u¯Á¤~¤£·|³Q®IÂæb¤@¤j°ï¨S¥Îªº Registry °O¿ý¤¤¡C

¦n¤F¡A±µµÛ¨Ó¬Ý ProcMon ¾Þ§@ªººëµØ©Ò¦b¡A³]©w Filter!!




¨C¤@«h Filter ±ø¥ó¤À¬°¤T­Ó³¡¤À¡A²Ä¤@³¡¤À¬OÄæ¦ì¡A¨C¤@µ§°O¿ý¦³«Ü¦hÄæ¦ì¡A§A¥i¥H­­©w¬Y­ÓÄæ¦ì¥²¶·²Å¦X¬Y­Ó±ø¥óªº¨Æ¥ó¤~­n"Åã¥Ü"¡A²Ä¤G³¡¤À¥i«ü©w­nµ¥©ó¡B¥]§tµ¥¹Bºâ¤l¡A²Ä¤T³¡¤À«h¬O¯S©wªº¦r¦ê­È¡A³Ì«á­n«ü©w³o­Ó±ø¥ó­n¥]§t¶i¨ÓÁÙ¬O±Æ°£±¼¡C

ª`·N¨ì¨S¦³¡A§Ú­è¤~»¡ Filter «üªº¬O"Åã¥Ü"±ø¥ó¡A¦Ó¤£¬O"®·®»"±ø¥ó®@! ²Ä¤@±i¹Ïªº Status Bar ¤¤¦³­Ó Showing 11,894 of 39,380¡A·N«ä¬O ProcMon «O¯d¤F¥|¸Uµ§°O¿ý¡A¨Ì²{¦bªº Filter ±ø¥ó¥u Show ¨ä¤¤ªº 30%¡A¥i¥H¨Æ«á¦A­×§ï±ø¥ó¡A¿z¿ï¤£¦Pªº°O¿ý¨Ó¬Ý¡C³o¤S¬O¤@­Ó¥»µÛ¦ò¤ßªº·s³]­p¡A¹L¥h¨Ï¥Î FileMon/RegMon ®É±`µo¥Í¦]±ø¥ó¤ÓÄY¨S§ì¨ìÃöÁä¨Æ¥ó¡A¥u¦n§ï±ø¥ó¦A¨Ó¤@¦¸ªºª¬ªp¡A²{¦b Filter ¥i¥H¨Æ«á¦A Tune¡A¸`¬Ù¤F«Ü¦h­«ÀY¨Ó¹Lªº®É¶¡¡C

¤£¹L­×§ï Filter ªº¾Þ§@¦³ÂI©_¯S¡A¦b¤U¤è²M³æÂI¨â¤U¡A¸Ó±ø¥ó·|±q²M³æ¤¤²¾°£¡A²¾¨ì¤W¤è¡A­×§ï«á­n«ö Add §â¥¦¥[¦^²M³æ¡A¦pªG§A§ï§¹ª½±µ«ö OK¡A±ø¥ó´N®ø¥¢¤F¡A­è¶}©l¥Î­nªáÂI®É¶¡²ßºD¡C

¥Î­Ó¹ê¨Ò¨Ó»¡¡A¦pªG§Ú·Q¦b XP/2003/Vista ¤UÆ[¹î IIS ªº¬¡°Ê¡A¥i¥H³]©w¥H¤Uªº Filter:



Process Name is 'w3wp.exe' ³o¼Ë¤l ProcMon ·|§ì¨ì©Ò¦³ w3wp.exe ¹ï File ¤Î Registry ªº¦s¨ú¡A­Y§Aªº IIS ¦³¦h­Ó Application Pool¡A«h·|¦³¦h­Ó PID ¤£¦Pªº w3wp.exe¡A§A¥i¥H¸ÕµÛ¦A§ä¨ìÃöª`¹ï¶Hªº Process ID¡A¶i¤@¨BÁY¤p½d³ò¡C



«ö¤UàÏ©l®·®»«á¡A·|±o¨ì¦p¤W¹Ïªº¤@¤j¦ê°O¿ý¡A²M³æ¤¤ Operation ¬O RegOpenKey¡BRegCloseKey¡BRegQueryValue ªº¬O Registry °O¿ý¡ACreateFile¡BCloseFile¡BReadFile µ¥«h¬O File ¦s¨ú°O¿ý¡C¦b¨C«h°O¿ý¤W«ö¥kÁäÁÙ¦³¦n´X­Ó¶K¤ßªº¥\¯à¡A§A¥i¥H¥Î Exclude/Include ¥[¤J»P³oµ§°O¿ý¬ÛÃöªº Filter ±ø¥ó«á¥ß§Y¥Í®Ä¡C³o¼Ë§Ú­Ì¥i¥H¥ý³]¸û¼eªº Filter ²Õ¦X¡A¦bÀ˵øµ²ªGªº¦P®É¦A¤@¤@±Æ°£µLÃöªÌ¡A¨³³tÁY¤p½d³ò¡CProperty «h¥i¬Ý¨ì¸Óµ§°O¿ýªº¥þ³¡²Ó¸`¡A¨Ò¦p: µo¥Í Access Denied ®É¡A¬Æ¦ÜÁÙ¥i¥H¬Ý¨ì Impersonate ªº±¡§Î¡C

¤W¹Ï¤¤¨SÅã¥Ü¥X¨Ó¡A¦ý Path «á¤èÁÙ¦³­Ó­«­nÄæ¦ì¥s Result¡A´N¬O³o­Ó°Ê§@ªº°õ¦æµ²ªG¡ANOT FOUND/ACCESS DENIED ¤§Ãþªº¡A³q±`¬O­È±o§Ú­ÌÃöª`ªºµJÂI¡C

¤µ¤Ñªº Process Monitor °ò¥»¨Ï¥Î½Òµ{´NÁ¿¨ì³o¸Ì¡A¤U½Ò!!



  Quote:
¤T¡B¨Ï¥Î ProcMon ¤­¤ÀÄÁ¤º¯}®×ªº¸g¨å®×¨Ò

Âà¸ü¦Û¡Ghttp://blog.darkthread.net/blogs/......10/959.aspx

¡i¯ù¥]®g¤â±MÄæ¡j¨Ï¥Î ProcMon ¤­¤ÀÄÁ¤º¯}®×ªº¸g¨å®×¨Ò

Could not load file or assembly 'System.EnterpriseServices, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a' or one of its dependencies. Access is denied.

¤p²Õ¸Ì¦³¥x"¾x°­"(µù)ªº´ú¸Õ¾÷¾¹¡A¦Ñ·R¥X¨Çµ}©_¥j©Çªº¿ù»~¡C¤µ¤Ñ°õ¦æ¬Y¤ä ASPX ®É¡Aµo¥Í¥H¤W¿ù»~...

¤@¯ë¤H¹J¨ì³oºØª¬ªp¡A°£¤F­«Äé .NET Framework¡B­«Äé IIS¡B­«Äé Windows¡B¥h¦æ¤Ñ®c«ô«ô¸ò§ï¦æ¤£¼gµ{¦¡¤§¥~¡A¦h¥b´N¥u¯à§ô¤âµLµ¦¡C¤£¹L¦pªG¦³ Process Monitor ¦b¤â¡A±¡ªp´N¤£¤@¼Ë¤F¡C

¹J¨ì Access Denied «¬ªº Error ªº¡A§Úªº¤Ï®g°Ê§@´N¬O¶}±Ò Process Monitor¡F¥Ñ©ó³o­Ó¿ù»~°T®§«Üºë½T¦a«ü¥XµLªk¦s¨úªºÀɮ׬O System.EnterpriseServices.dll¡A¦]¦¹¥[­Ó Path Contains "System.EnterpriseServices" ªº Filter¡A¦AÂsÄý¤@¦¸¦³°ÝÃDªº URL¡A¥ß§Y´N§ä¨ì Access Denied ªºÃÒ¾Ú¡C



§Q¥Î Jump To ª½±µ¸õ¦Ü GAC ¤Uªº°ÝÃD Folder¡AÀˬd¤@¤UÅv­­¡AªGµM! ¤£ª¾«ç»ò¦a¡A¸Ó¥Ø¿ý¥u³Ñ¤U SYSTEM ¸ò Administrators ¦³ÅvŪ¨ú¡AÃø©Ç¥Î NETWORK SERVICE °õ¦æªº w3wp.exe ·|¦Y³¬ªùü¡C°Ñ¦Ò¨ä¥LÃþ¦ü¥Ø¿ý¡A¸É¤WÅv­­¡A°ÝÃD´N®ø¥¢¤F! «e«á¥uªá¤F¤£¨ì¤­¤ÀÄÁ¡C



Á¿¨ìSystemInternalsªº³o¨Ç¦n¤u¨ã¡A306´Á iTHome ªº«Ê­±¬G¨Æ­è¦n´N¥H¥¦¬°¥DÃD¡A¦Ó¨â¦ì MVP (¿àºa¼Ï¡B¾G¤læ£) »P§Ú¤]¤À¨É¤F¦Û¤vªº¨Ï¥Î¤ß±o («y... ÁÙ¦³·Ó¤ù®@¡A­nñ¦Wªº¤H½Ð±a¶g¥Z¨p¤U§ä§Ú¡A¥Ø«e¨S¦³¿ìñ®Ñ·|ªº­p¹º)¡A¦³¿³½ìªº¤H¥i¥H¥h§ä¨Ó½½¡C

====== §Ú¬O¤À¹j½u ======

µù: ©Ò¿×"¾x°­"¦³¨âºØ¸ÑÄÀ: ¤@¬O«ü¾÷¾¹¤W±`¥X²{µLªk²z¸Ñªº©Ç²{¶H¡AÅý¤Hª½©I¨£"°­"¤F¡F²Ä¤GºØ¬O¦³µ{¦¡³Â¥Ê¡B¹q¸£¥Õ¥Ø¦b·d"°­"¡A¶i¦æ¦UºØ¤£¥i«äijªº¨t²Î­×§ï»P³]©w¡A¥ô½Ö³£²q¤£¥X°ÝÃD·|¥X¦b³oºØ¦a¤è¡C



  Quote:
¥|¡B¨Ï¥Î Process Monitor + Syscheck ²¾°£¤ì°¨

Âà¸ü¦Û¡Ghttp://hi.baidu.com/drzebra......7ddfbb3fb9569.html


¡uIEHelper_*.dll¡v¤ì°¨²Õ¥óªº§R°£¡Asyscheck ¤Ï¶Â¤u¨ã ¡Ï Process Monitor ²Õ¦X®±¥XÀ»¡I

¤@¡BIEHelper_*.dll ¤ì°¨ªººØÃþ¡A¦s¦b¦ì¸m©M¦M®`

§Ú·j¯Á¤F¤@¤UIEHelper_*.dll¦Ü¤Ö¦³¥H¤U´X­Óª©¥»¡G

IEHelper.dll  
IEHelper_5001.dll   Iehelper_5012.dll  Iehelper_5013.dll
Iehelper_5016.dl    Iehelper_5025.dll  Iehelper_5026.dll   
Iehelper 5048.dll   IEHelper_5058.dll  IEHelper_5066.dll  
Iehelper_5068.dll   Iehelper_5078.dll  IEHelper_5201.dll
IEHelper2006829_4702.dll

¸Ó¤ì°¨¦s¦bªº±`¨£¦ì¸m¬°¡G

%System%\IEHelper.dll
X:\Program Files\BB\IEHelper
X:\Documents and Settings\All Users\Application Data\Microsoft\UserData\IEHelper_*.dll
X:\Documents and Settings\All Users\Application Data\Microsoft\IEHelper_*.dll

¦M®`/¦MÀIµ{«×¡G

1.³o¤ì°¨²Õ¥ó¥Î¨ÓÄdºI«öÁä¡AÄdºIÁä½L«H®§¡CIEHelper.dll ³B²z¦bÂsÄý¾¹¤¤¿é¤J¼Æ¾Ú©Ò¤Þµoªº IE ¨Æ¥ó¡C¨Ã±NÄdºIªº¼Æ¾Ú¤ÎURL¦s©ñ¦b %system%Passlogx.log ¤¤[1]¡C
2.IEHelper ¦p¤£¤Î®É²M°£¡A·|¤Þ¶i¼Æ¤QºØ¤ì°¨¡AÄY­«ªº¾É­P­pºâ¾÷¨t²Î±Y¼ì¡BÂÅ«Ì¡A¸û»´ªº¾É­P¹B¦æ³t«×·¥ºC¡C
3.¼vÅT¨t²Îí©w©Ê¡AIE µLªk¥´¶}¡A¤£©w´Á¸õ¥X¤£©úºô­¶IE¼u¥X¼s§i¡C


¤G¡Bºôµ¸¤Wªº¸Ñ¨M¿ìªk (¨S¦³ÅçÃÒ¡A¤£¤@©w¦³®Ä¡I)

¤èªk1¡G[2]

A.¥ýÃö³¬ IE ÂsÄý¾¹;
B.¦A[¶}©l]->[¹B¦æ]-> regsvr32 /u x:\xx\iehelper_¡Ñ.dll;
C.¨ì IEhelper.dll ªº¦w¸Ë¥Ø¿ý¤U¡Aª½±µ§R°£¥¦;
D.²M²z¤@¤Uµù¥Uªí¡A¹ï¡uIEHelper_¡Ñ.dll¡v°µ¹ý©³²M°£¡C

¤èªk2¡G[3]

A.ª÷¤s¬rÅQ¤¤±a¦³¤å¥ó¯»¸H¾÷³o­Óµ{§Ç¡A§Ú´N¥Î³oµ{§Ç§â¡uIEHelper_5066.dll¡vª½±µ¯»¸H
B.¯»¸H«á¦³·|¥X²{­Ó¡uKKKKKKKKK¡vªº¤å¥ó¡AµM«á¦b§â³o¤å¥ó°Å¶K¨ì¥t¥~¤@­Ó¤å¥ó§¨¤U¡A¤§«á DEL ª½±µ§R°£¡C
C.²M²z¤@¤Uµù¥Uªí¡A¹ï¡uIEHelper_¡Ñ.dll¡v°µ¹ý©³²M°£¡C

¤èªk3¡G ¸Ó¤èªk¦³ÂI·d¯º¡H

A.¥ý§ä¨ì DLL ¤å¥óªº¥Ø¿ý
B.µM«á§â IEHelper_¡Ñ.dll °Å¤Á²¾°Ê¨ì®à­±¤W
C.§R°£³o­Ó DLL ¤å¥óªº¤W¤@¯Å¥Ø¿ý,¦n¹³¬O userdata,
D.µM«á¦^¨ì®à­±,§â¨º­ÓDLL¤å¥óª½±µ©ì¨ì¦^¦¬¯¸¸Ì,³Ì«á²MªÅ¦^¦¬¯¸À³¸Ó´N·d©w¤F.

¤T¡B¥»¯¸´£¨Ñªº¸û¬°±M·~ªº¤â°Ê²M°£¿ìªk

­º¥ý,¤U¸ü¨â­Ó¤u¨ã¡G

1¡Csyscheck ¤Ï¶Â¤u¨ã¡Ghttp://free5.ys168.com/?wangsea
2¡CProcess Monitor ¶iµ{ºÊµø³n¥ó¡G¥»©«¤U¸ü¡C

(¤@) ²©ö¤èªk¡G  °w¹ï IEHelper_X.dll ªºª`¤J iexplore.exe ¶iµ{ªº±¡ªp

A. ¥´¶}¤@­ÓIEÂsÄý¾¹µ¡¤f
B.¡i¹B¦æ syscheck1.0061¡j->¡i¶iµ{ºÞ²z¡j->
C. «ö¤U©³¤U¡i¨¾¤îÅX°Êªý¤î­×´_¡j¡A¦P®É¿ï¨ú¡i¸T¤î¥~³¡½uµ{³Ð«Ø¡j->
D. ¿ï©w¡iiexplore.exe¡j->¬d¬Ý¬É­±¤U¥b³¡¤À¡i¼Ò¶ô«H®§¡j

µù¡G¡i¼Ò¶ô«H®§¡j¤¤¥]§t¤F IE ÂsÄý¾¹¥[¸üªº©Ò¦³ DLL,OCX ¤å¥ó«H®§

E. ¿ï©w¡i¼Ò¶ô«H®§¡j¤¤ªº IEHelper_¡Ñdll ¶µ-> ÂIÀ»¹«¼Ð¥kÁä->¡i¨ø¸ü¼Ò¶ô¨Ã§R°£¤å¥ó¡j
F. µ¥¤W´X¬íÄÁ¡AIEHelper_¡Ñ.dll ´N³Q§¹¥þ§R°£¤F¡C
G. ³Ì«á²M²z¤@¤Uµù¥Uªí¡A·j¯Á¡uIEHelper_¡Ñ.dll¡v¤º®e¡A¹ý©³²M°£¡C

¥Î¥H¤Wªº¤èªk¥i¥H§R°£³Ì¼F®`ªº¯f¬r/¤ì°¨¡A¨S¦³¤£¦¨¥\ªº¡I
IceSworld§R°£¤£¤Fªº¡Asyscheck¤]¥i¥H¨þ¡I
¦A¦¸ÁÂÁ¬õ¸­¤j½¼¡A¶}µo¥X¦p¦¹Àu¨qªº¤Ï¶Â³n¥ó¡I

(¤G)°ª¯Å¤èªk¡G °w¹ï rookit §Þ³Nªº¯f¬r¥Dµ{§ÇÄÀ©ñ¥X/­×´_ IEHelper_¡Ñ.dll ªº±¡ªp

A. Process Monitor ºÊµø¤å¥ó IEHelper_X.dll ªº¬¡°Ê¡AÀˬd¨äª`¤J¨ì­þ­Ó¶iµ{¡A©Î¥Ñ­þ­Ó¯f¬r¥Dµ{§ÇÄÀ©ñ¡C

¡i¹B¦æProcess Monitor 1.0¡j-> ¸õ¥X¡iProcess Monitor Filter¡j¿ï¶µ¡G

          ¡iAuhentication ID¡j¤U©Ô¿ï¤¤ path (¸ô®|)->
          ¡iis¡j¤U©Ô¿ï¤¤ contains (¥]§t)->
          ¡i¡jªÅ¥Õ³B¿é¤J IEHelper->
          ¡iInclude¡j¤£­n§ó§ï->
           ÂIÀ»¡iAdd¡j«ö¶s->
           ÂIÀ»¡iok¡j«ö¶s->


³]¸m¦n¤F¡A±µ¤U¨Ó¡A§A­n­@¤ßµ¥«Ý3¡Ð5¤ÀÄÁ....¡A¦]¬° Process Monitor ±N¹ï©Ò¦³ªº¨t²Î®ø®§ (¦Ü¤Ö40¸U±ø) ¶i¦æ¿z¿ï¡C¥]§t¡iIEHelper¡j¤º®eªº¤å¥óŪ¼g,µù¥Uªí¾Þ§@,½uµ{¶iµ{¬¡°Ê³£·|³Q®·Àò¡A§A¥i¥H¤@ÄýµL¾l¤F¡C

B. ª½±µ¥h IEhelper_*.dll ªº¦w¸Ë¥Ø¿ý¤U,°µ¤@¤U§R°£¾Þ§@

µù¡G·íµM§R¤£±¼ªº°Õ¡A¥u¤£¹L¬O¿E¬¡¤@¤U¤ì°¨¡A¬Ý¬Ý¨ì©³¬O­þ­ÓÁôÂ꺶iµ{¦b«OÅ@¥¦¡C
    ¥u­n¤ì°¨¯f¬r¦³¬¡°Ê¡AProcess Monitor ´N·|±N³o¨Ç¬¡°Ê°O¿ý¦b®×¡A«¢«¢¡I

C. ¦^¨ì Process Monitor ¬É­±¡A¬d¬Ý·s¼W¥[ªº¥]§t IEhelper ªº®ø®§¡C
§A¥u­n¬d§ä path Ä椤§t¦³§Aªº IEhelper_*.dll ªº«H®§¡A¬Ý¬Ý Process Name ¬O½Ö¡H

D. ¦pªGµo²{¬O explorer.exe, svhost.exe,lsass.exe,rundll32 ¤§Ãþªº¨t²Î¶iµ{¡A¨º»¡©ú IEhelper_*.dll ¬Oª`¤J¨ì¨t²Î¶iµ{¤¤¨Óµo´§§@¥Î¡C

¸Ñ¨M¤èªk¨£ (¤@) ²©ö¤èªk.....--->¡i¨ø¸ü¼Ò¶ô¨Ã§R°£¤å¥ó¡j§Y¥i

E. ¦pªGµo²{ Process Name ¬O«D¨t²Î¶iµ{ªº­¯¥Í exe¡A¨º´N¬O¯f¬r¥Dµ{§Ç°Õ¡C
°O¤U¦ì¸m¡A¥H¤Î exe ¤å¥ó¦W¡C

¡i¹B¦æ syscheck1.0061¡j->¨ì¡i¶iµ{ºÞ²z¡j¬Ý¬Ý->¯f¬r¥Dµ{§Ç¬O§_¦b¶iµ{¸Ì->
¦bªº¸ÜÂIÀ»¹«¼Ð¥kÁä->¡i§R°£¶iµ{¨ì¦^¦¬¯¸¡j

©Î

¡i¶Èµ²§ô«ü©w¶iµ{¡j->µM«áÂIÀ» syscheck¡i¤å¥óÂsÄý¡j

->Ãþ¦üwindows¸ê·½ºÞ²z¾¹¾Þ§@¡A¨ì¯f¬r¥Dµ{§Ç©Ò¦b¦ì¸m
(¤U³¡¦³¤@­Ó¡i¶ÈÅã¥Ü¦³ÁôÂÃÄݩʪº¤å¥ó¡j¡A¦³®É¬Ý«DÁôÂÃÄݩʤå¥ó­n¥h±¼«e­±ªº¹_)
->¿ï©w¯f¬r¥Dµ{§Ç->ÂIÀ»¹«¼Ð¥kÁä->¡i§R°£¤å¥ó¡j
(©Î¡i¶Ç°e¨ì¨ä¥¦¤å¥ó§¨¡j¡A§@¬°¯f¬r¼Ë¥»«O¦s)

F. ³q¹L¨BÆJ¡iE¡j¡A¯f¬r¥Dµ{§Ç¤]³Q§Ú­Ì·F±¼¤F¡C¦³®É¯f¬rªº«OÅ@µ{§Ç¤£¤î¤@­Ó¡A¦¹®É°Ñ·Ó¡iU ½L¯f¬rMVS.exe¡AMVH.exe¡AALMV.exe¡ARCS.exe ªº²M°£¡j¾Þ§@¡C

G. ¦¹®Éªº IEhelper_*.dll ¤w¸g¦¨¬°©t®a¹è¤H¡Aª½±µ§R±¼´N¬O¡C
H. ³Ì«á²M²z¤@¤Uµù¥Uªí¡A·j¯Á¡uIEHelper_*.dll¡v¤º®e¡A¹ý©³²M°£¡C

¦pªG¥H¤W¾Þ§@µL»~¡A¨Ã¸Ñ¨M¤F°ÝÃD¡A¦Ó¥B·F±o«Ü§Q¯Á...
®¥³ß¡I§A¤w¸g¨B¤J§R¬r°ª¤â¤§¦C¡C
¥H«á¤°»ò¤ì°¨¯f¬r¡A¨Ì¸¬Äªµe¼Ë²Î²Î³£·d©w!

[ Last edited by yoyo007 on 2007-10-9 at 08:52 AM ]




§Ú±q»·¤è¨Ó¡D§A¨ì»·¤è¥h
­·¡C¬ï½£¦Ó¹L
»a¯íªº¤ë¦â¡D¨`¶Ë½Öªº²´²¶¡K
2007-10-9 08:38 AM
¬d¬Ý¸ê®Æ  ³X°Ý¥D­¶  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  osk
  ª÷¥d·|­û 
  ¤ÆÀsÂà»ñ­w­w¨«


 
  ¿n¤À 21354
  µo¤å 2612
  µù¥U 2005-9-5
  ¨Ó¦Û ¦a²y=¨¾½Ã¶¤
  ª¬ºA Â÷½u
#3  

®¥³ß±z..²×©ó©ñ±¼¤ß¤¤ªº¤@¶ô¤j¥Û..¥i³ß¥i¶P  ^^

Windows ¶i¶¥ºÊ±±¤u¨ã..¬O§_¬O§@·~³nÅé¦Û±aµ{¦¡?
¤U¸üºN¯Á¬Ý¬Ý..
·PÁ ª©¥S µL¨p¤À¨É  ^^

¤U¸ü´ú¸Õ«á..º¡·N«×100%
¦]¦³"¬G¨Æ®Ñ(¹Ï¸Ñ)..¬Ý¹Ï»¡¬G¨Æ..¤@¸ô¶¶ºZ...Æg°Õ!
¦A¦¸·PÁ ±zªº¤À¨É..¥[±z100¤À..«¢..«¢  ^^

[ Last edited by osk on 2007-10-9 at 12:13 PM ]




2007-10-9 08:47 AM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  xp20060726
  ºaÅA·|­û 
  ÀH½t©ñ¤U,»´¦w¦Û¦b.



 
  ¿n¤À 82058
  µo¤å 8761
  µù¥U 2006-7-26
  ¨Ó¦Û µL½t¤j·O,¦PÅé¤j´d.
  ª¬ºA Â÷½u
#4  ·PÁ´£¨Ñ¤À¨É!

²{¦b¤@¨Ç´c©Ê³nÅé¤j³¡¥÷³£¨««áªù¨Ó¶Ã·d,
¥ý«e´¿¤U¸ü"³q°T°ðÅ¥¶E¾¹'©M"ºô¸ô³s½uºÊ±±"
¨â­Ó³nÅé,¥i¬O¦Û¤v¥\¤O¤£¹L,¤£¤Ó·|¨Ï¥Î,
¤µ¤U¸ü頋³nÅé,ª©¥Sªº»¡©ú¤Î¾Þ§@±Ð¾Ç"«Ü²M·¡,
¥i¥H¨Ó¦n¦n¬ã¨s¾Ç¾Ç½u¤WºÊ±±.

·PÁ±z´£¥\ªº§¹¾ã¾Þ§@µ{§Ç¤À¨É!!!


2007-10-9 11:41 AM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  a2213572
  °ª¯Å·|­û 
 



  ¿n¤À 7539
  µo¤å 1477
  µù¥U 2006-5-20
  ª¬ºA Â÷½u
#5  

­ì¨Ó¤j¤j³o´X¤Ñ¬O¦b·d³o­Ó³nÅé.¥ú¬Ý³o¨Ç¦r¦ê´N·w¤F!
·PÁ¤j¤j¤À¨É.


2007-10-9 11:47 AM
¬d¬Ý¸ê®Æ  µo°e¶l¥ó  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  ¤p³Ç¡FJay
  ¤¤¯Å·|­û 
 


  ¿n¤À 1376
  µo¤å 200
  µù¥U 2007-7-4
  ¨Ó¦Û ¡i±¡ºÉ©]¤W®ü¡j
  ª¬ºA Â÷½u
#6  



  Quote:
Originally posted by yoyo007 at 2007-10-9 08:38 AM:









[ Last edited by yoyo007 on 2007-10-9 at 08:52 AM ]

YoYo¥S
±z¯u¥Î¤ß  ÁÙ°µ¬ÛÃö±Ð¾Ç
±z¯u¬O¤@¦ìÀu¨qªºª©¥D©M½Ķ®a




§Úªº³¡¸¨®æ*
http://blog.pixnet.net/Linux99Sun
2007-10-9 02:35 PM
¬d¬Ý¸ê®Æ  µo°e¶l¥ó  ³X°Ý¥D­¶  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  dear168
  °ò¥»·|­û 
 



  ¿n¤À 47
  µo¤å 15
  µù¥U 2007-3-29
  ª¬ºA Â÷½u
#7  

·PÁ°ò¥»±Ð¾Ç¡A¤£¹L³oªù¥\½Ò¦n¹³Ãø­×¡A§V¤O¾Ç¾Ç¬Ý¡C
·P¿E±zªº¤À¨É¡I


2007-10-9 04:43 PM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  soro
  ¶i¶¥·|­û 
 



  ¿n¤À 2891
  µo¤å 724
  µù¥U 2005-9-13
  ª¬ºA Â÷½u
#8  

¤U¸ü¥ô¦ó¤@­Óµ{¦¡³Ì­«­nªº¬O¯à¦³®Äªº¹B¥Î,¨º¤~¦³·N¸q.

¦³¤F yoyo ª©¤jªº°ª¤ô·Ç¤¤Ä¶¥H¤ÎºëÅPªº¨Ï¥Î»¡©ú,·Q¤£¤U¸ü¨Ó¨Ï¥Î

³£«ÜÃøªº.

·PÁ¤j¤jªº¤À¨É!


2007-10-9 05:01 PM
¬d¬Ý¸ê®Æ  µo°e¶l¥ó  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  tenhon
  ¸ê²`·|­û 
 


  ¿n¤À 3760
  µo¤å 632
  µù¥U 2006-11-13
  ª¬ºA Â÷½u
#9  

¦nªF¦è§r¡IÁÙ¦³³o»ò¸ÔºÉªº¸Ñ»¡¡A¯u¬O¨¯­W¤F...
·P¿EYO¤jµL¨pªº¤À¨É....¤£¦^Âйê¦b»¡¤£¹L¥h¡I


2007-10-9 06:13 PM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  ammo
  °ò¥»·|­û 
 



  ¿n¤À 60
  µo¤å 7
  µù¥U 2007-8-5
  ª¬ºA Â÷½u
#10  

yoyo ¤j¹ê¦b¼F®`Ëç

¤¤¤å¤Æ¬O­Ó¦Y¤O¤£°Q¦nªº¤u§@
¤]¬O
¤@±ø§¢©VÃø¨«ªº¸ô
¾a¤@¤v¤§¤O±qµL¨ì¦³
¯uªº³£¬OÂIºw¦b¤ßÀY
¬°ªº¥u¬OÅý¤j®a¯à°÷¥Î¿Ë¤Áªº¨Ï¥Î³nÅé
«Ü¨ØªA³oùئ³¨º»ò¦h¼ö¤ßªº¤j¥JÄ@·N¥I¥X
§ó¨ØªA¯à°÷¤£Âèp
¤£¬¯Ä£ªººë¯«

´Nºâ¤£¤U¸ü¤]­n³»°Õ
¤£³»¤£¬O¤H¼K
¥[ªo³á
­n°í«ù¤U¥h


2007-10-9 07:46 PM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  btsky
  ¤@¯ë·|­û 
 



  ¿n¤À 699
  µo¤å 56
  µù¥U 2005-9-14
  ª¬ºA Â÷½u
#11  

³áMY GOD
¤j¤j §Ú¯uªA¤F§A
³o¤@½g¬O¶WºëµØ ¶WºëµØ ¶WºëµØ

§Ú´N¬O¦b§ä³oºØªF¦è ~ ¤j¤j §A³yºÖ¤F¦n¦h¤Hªü
¦³¤F³o¤@®M³nÅé
°£¤F¤j¤j©Ò»¡±þ¬r ¨¾Àb ¤¤¤å¤Æ..µ¥ ¤§¥~
§ó¯à»´©ö§ä¥X³nÅé°õ¦æ°ÝÃD
¥u­n·f°t¬ÛÃö³nÅé  EX:°tµêÀÀ³nÅé ~~~~¥\¯à¤Ó±j¤j¤F

¬Æ¦Ü©ó
¤@¨Ç¤u·~¥Î³nÅéÀ³¥Î¤W­Y¦³³nÅé/µwÅé°õ¦æµ{§Ç°ÝÃD
¥i¥H³z¹L¥L¨Ó¥[³t§ä¥X°ÝÃDÂI
ÁÙ¦³ ¥i¥HÀ°§U³nÅéÀu¤Æ
³Ì­«­nªº¤@ÂI........................................¥L  ·| Åý  §A
¤µ¤Ñ·|°µ¦n¹Ú

¨¥»yÃø¥H§Î®e
³o¬O­ÓÄ_ªü.·P®¦¤j¤j ¨¯­W ·P®¦©Ò¦³ªO¤j ¤Î¤À¨Éªº¤H
¦p¦PÁ¤Ѥ@·N ..¦]¬°­n­n·PÁªº¤H¤Ó¦h¤F ..©Ò¥H¤@»y±H»a¤Ñ

QQ³Ì«á¨º¤@¥y§Ú§ïªº~.~
·P®¦ªº¤ß ·PÁ¦³§A

[ Last edited by btsky on 2007-10-9 at 08:13 PM ]


2007-10-9 08:08 PM
¬d¬Ý¸ê®Æ  µo°e¶l¥ó  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  benleung
  ¸ê²`·|­û 
 



  ¿n¤À 4188
  µo¤å 605
  µù¥U 2006-5-7
  ª¬ºA Â÷½u
#12  

YOYO¤j³o¶K ¤¤¤å¤Æ©M±Ð¾Ç¦P¼Ëªººë±m,
¦p¨S¦³¤j¤jªº±Ð¾Ç¯uªº«ÜÃø©ú¥Õ¦p¦ó¹B¥Î(²{¤µ¤]¥u¬O©ú¤@³¡¥÷),
¤U¸ü¨Ó¦A²Ó¬Ý°Ñ³z¤@¤U,Á¹L¤j¤j


2007-10-9 09:21 PM
¬d¬Ý¸ê®Æ  µo°e¶l¥ó  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  e722146
  ª÷¥d·|­û 
 


 
  ¿n¤À 17398
  µo¤å 5052
  µù¥U 2006-5-13
  ¨Ó¦Û °ª¶¯
  ª¬ºA Â÷½u
#13  

¦n±j¤jªº¤@´ÚWindows ¶i¶¥ºÊ±±¤u¨ã³á¡I
¥[¤W¤j¤j¼ö¤ß§U¤Hªº¹Ï¸Ñ»¡©ú¡I
Åý¤H¤@¬Ý´Nª¾¹D­n¦p¦ó¾ÞÁa³á¡I
¦hÁµL¨p´£¨Ñ»P¤À¨É³á¡I




2007-10-10 12:27 PM
¬d¬Ý¸ê®Æ  µo°e¶l¥ó  ³X°Ý¥D­¶  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  PLUS+
  ¤¤¯Å·|­û 
 



  ¿n¤À 1044
  µo¤å 226
  µù¥U 2007-8-5
  ¨Ó¦Û ¤£¦s¦bªº¦a¤è
  ª¬ºA Â÷½u
#14  

¬Ý¤F¤¶²Ð..
¥\¯à¯u¬O¦h¦h
ª½±µ¥ÎCyberArticle¥´¥]¦^¥h¬Ý¤F

yoyo¤j¤À¨É¤¤¤å¤Æ¹Lµ{¯u¬O§Ú­Ì³Ì¦nªº¾Ç²ß¹ï¶H
¸Õ¥Î§¹¦A¨Ó»¡»¡·P·Q
·PÁ±z


2007-10-12 01:26 AM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  «n¼Ö
  ¶i¶¥·|­û 
 



  ¿n¤À 1948
  µo¤å 476
  µù¥U 2005-11-17
  ¨Ó¦Û Taiwan
  ª¬ºA Â÷½u
#15  

µ{«×¤£°÷¼Ð·Ç¡AÆ[¬Ý»¡©ú´N²´ªá¼º¶Ã¡A¥ý¤U¸ü¡A¦³ªÅ¦bºCºC¬ã¨s¡A¦³ª©¥D¦p¦¹¦³­@¤ßªº¦n¦Ñ®v¡A©w·|ºCºCÁA¸Ñ¡AµL³Ó·P¿E¡AÁÂÁ¡C

2007-10-12 01:57 PM
¬d¬Ý¸ê®Æ  µo°e¶l¥ó  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  pjabc
  °ò¥»·|­û 
 



  ¿n¤À 4
  µo¤å 2
  µù¥U 2007-10-5
  ª¬ºA Â÷½u
#16  

³o½g¹ê¦b¤Ó¹ê¥Î¡A§Ô¤£¦í­n¨Ó¦^À³¤@¤U ^^  :XD

2007-10-15 11:38 AM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  ¹Ú¿ò¯«µ£
  °ò¥»·|­û 
 



  ¿n¤À 38
  µo¤å 12
  µù¥U 2007-4-21
  ¨Ó¦Û ¤j³±¸¦°ê
  ª¬ºA Â÷½u
#17  

§Ú»¡yoyoªü~
§A³o¨ÇÁ|°Ê...
Åý§Ú«Ü·Q¨è¤@¶ô°ÐÃBµ¹§A­C!


2007-10-17 12:11 AM
¬d¬Ý¸ê®Æ  µo°e¶l¥ó  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  yoyo007
  ½×¾Â¶Q»« 
  µÒ¯ó¼µ¦íªº¤é¤l


 
  ¿n¤À 38778
  µo¤å 6170
  µù¥U 2005-9-10
  ¨Ó¦Û ·Àµ´§Æ±æªº¥@¬É
  ª¬ºA Â÷½u
#18  



  Quote:
Originally posted by ¹Ú¿ò¯«µ£ at 2007-10-17 00:11:
§Ú»¡yoyoªü~
§A³o¨ÇÁ|°Ê...
Åý§Ú«Ü·Q¨è¤@¶ô°ÐÃBµ¹§A­C!

²ö«D¬O¶Ç»¡¤¤ªº... ­µ®e [­b] ¦b !!




§Ú±q»·¤è¨Ó¡D§A¨ì»·¤è¥h
­·¡C¬ï½£¦Ó¹L
»a¯íªº¤ë¦â¡D¨`¶Ë½Öªº²´²¶¡K
2007-10-17 10:13 AM
¬d¬Ý¸ê®Æ  ³X°Ý¥D­¶  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  mm2
  ¤¤¯Å·|­û 
 



  ¿n¤À 841
  µo¤å 238
  µù¥U 2007-2-14
  ª¬ºA Â÷½u
#19  

Process Monitor v1.25 (¶i¶¥ºÊ±±¤u¨ã),
¦³§¹¾ã»¡©ú¾Þ§@¤èªk,·PÁ¤À¨É¬ÛÃö±Ð¾Ç.
¥ý¤U¸ü¨Ï¥Î¬Ý¬Ý,·PÁ¦A·PÁÂ.


2007-10-17 11:31 AM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
  lin5105
  °ª¯Å·|­û 
 


  ¿n¤À 6290
  µo¤å 1433
  µù¥U 2006-8-13
  ª¬ºA Â÷½u
#20  

«z!³o¤@´Ú°÷±M·~!!
§Ú¤@ª½³£¬O¥ÎDTaskManager¨Ó¬Ý¨t²Î¹B§@ª¬ºA,¦ý¤ñ°_Process Monitor¦³Ãþ¦ü¬ö¿ýlogªº¥\¯à´N»¹¦â³\¦h!!
»°§Ö¨Ó¾Ç¾Ç,§Æ±æ§Ú¤]¯à¦³©Ò¤ß±o!!
Thnaks~~


2007-10-17 11:08 PM
¬d¬Ý¸ê®Æ  µoµu®ø®§   ½s¿è¤å³¹  ¤Þ¥Î¦^ÂÐ
<<  [1] [2] [3]  >>

¥i¥´¦Lª©¥» | ±ÀÂ˵¹ªB¤Í | ­q¾\¥DÃD | ¦¬ÂÃ¥DÃD

½×¾Â¸õÂà¿ï³æ¡G