netfxsl.log

一个比较完整的oa系统

[2006-02-28 00:00:45] 
[2006-02-28 00:00:45] ShadowLaunch started
[2006-02-28 00:00:45] Extracting embedded exe to C:\Documents and Settings\Default User\SL997.tmp
[2006-02-28 00:00:51] User is NT admin; preparing to shadow launch the process.
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_fusion.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_fusion.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorjit.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorjit.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorlib.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorlib.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorsn.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorsn.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorsvr.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorsvr.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorwks.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorwks.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_msvcr71.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_msvcr71.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_PerfCounter.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_PerfCounter.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_CORPerfMonExt.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_CORPerfMonExt.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
[2006-02-28 00:00:51] PrepareShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
[2006-02-28 00:00:51] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_aspnet_isapi.dll
[2006-02-28 00:00:51] copy C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_aspnet_isapi.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
[2006-02-28 00:00:51] 
[2006-02-28 00:00:51] Executing: C:\Documents and Settings\Default User\SL997.tmp /q
[2006-02-28 00:00:51] 
[2006-02-28 00:00:54] Received signal from created process; continuing.
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\fusion.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_fusion.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorjit.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorjit.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorlib.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorlib.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorsn.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorsn.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorsvr.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorsvr.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorwks.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_mscorwks.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\msvcr71.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_msvcr71.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\PerfCounter.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_PerfCounter.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\CORPerfMonExt.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_CORPerfMonExt.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
[2006-02-28 00:00:54] CompleteShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\aspnet_isapi.dll
[2006-02-28 00:00:54] move C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\_aspnet_isapi.dll C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
[2006-02-28 00:01:50] 
[2006-02-28 00:01:50] Process returned: 3010
[2006-02-28 00:01:50] 
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\fusion.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorjit.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorlib.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorsn.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorsvr.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\mscorwks.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\msvcr71.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\PerfCounter.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\CORPerfMonExt.dll
[2006-02-28 00:01:50] CleanupShadowLaunch: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
[2006-02-28 00:01:50] delete C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\SHADOW1868\aspnet_isapi.dll