<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/kingarthurjs</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; kingarthurjs]]></copyright><item><title><![CDATA[ShellServiceObjectDelayLoad中的webcheck疑问]]></title><link>https://blog.youkuaiyun.com/kingarthurjs/article/details/102645945</link><guid>https://blog.youkuaiyun.com/kingarthurjs/article/details/102645945</guid><author>kingarthurjs</author><pubDate>Sun, 20 Oct 2019 09:28:35 +0800</pubDate><description><![CDATA[电脑内存占用持续飙升，检查注册表发现ShellServiceObjectDelayLoad中包含webcheck可疑项目



ShellServiceObjectDelayLoad
ShellServiceObjectDelayLoad是一个未公布的注册表项,可以将组件关联到这个键,这样一来,系统启动时间EXPLORER将自动加载目标组件.
这就是某些病毒将自己注射到EXPLORER的办法.
...]]></description><category></category></item></channel></rss>