Message-ID: <1446069165.229251.1599810235489.JavaMail.bsafe@test-wiki.qianxin-inc.cn> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_229250_1385473596.1599810235488" ------=_Part_229250_1385473596.1599810235488 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html =E7=BB=88=E7=AB=AF=E9=A9=B1=E5=8A=A8=E8=AF=B4=E6=98=8E

=E7=BB=88=E7=AB=AF=E9=A9=B1=E5=8A=A8=E8=AF=B4=E6=98=8E

=E2=80=A2=E8=8C=83=E5=9B=B4=EF=BC=9A=E6=95=B0=E6=8D=AE=E5=AE=89= =E5=85=A8=E6=A8=A1=E5=9D=97=E7=8B=AC=E6=9C=89=E7=9A=84=E9=A9=B1=E5=8A=A8=E4= =BB=A5=E5=8F=8A=E4=BC=9A=E8=B0=83=E7=94=A8=E7=9A=84=E5=A4=A9=E6=93=8E=E7=9A= =84=E9=A9=B1=E5=8A=A8
=E2=80=A2=E5=8C=85=E5=90=AB=E5=A6=82=E4=B8=8B=E4= =BF=A1=E6=81=AF=EF=BC=9A
=E2=80=A2=E9=A9=B1=E5=8A=A8=E5=8A=9F=E8=83=BD= =E8=AF=B4=E6=98=8E
=E2=80=A2=E9=A9=B1=E5=8A=A8=E5=8F=AF=E8=A2=AB=E6=AD= =A3=E5=B8=B8=E5=AE=89=E8=A3=85=E7=9A=84=E5=89=8D=E7=BD=AE=E6=9D=A1=E4=BB=B6= =EF=BC=9F=E5=AE=89=E8=A3=85=E6=97=B6=E6=98=AF=E5=90=A6=E6=9C=89=E5=AE=8C=E5= =A4=87=E7=9A=84=E6=A3=80=E6=9F=A5=E9=80=BB=E8=BE=91=EF=BC=8C=E7=A1=AE=E4=BF= =9D=E9=A9=B1=E5=8A=A8=E5=8F=AF=E4=BB=A5=E8=A2=AB=E6=AD=A3=E5=B8=B8=E5=AE=89= =E8=A3=85
=E2=80=A2=E9=A9=B1=E5=8A=A8=E5=AE=89=E8=A3=85=E7=9A=84=E6=96= =87=E4=BB=B6=E8=B7=AF=E5=BE=84=E3=80=81=E5=A4=87=E4=BB=BD=E6=96=87=E4=BB=B6= =E8=B7=AF=E5=BE=84
=E2=80=A2=E5=9C=A8=E5=AE=89=E5=85=A8=E6=A8=A1=E5=BC= =8F=E4=B8=8B=E6=98=AF=E5=90=A6=E4=BC=9A=E5=8A=A0=E8=BD=BD
=E2=80=A2=E6= =89=8B=E5=8A=A8=E5=AE=89=E8=A3=85/=E5=8D=B8=E8=BD=BD=E7=9A=84=E6=96=B9=E6= =B3=95
=E2=80=A2=E5=AE=89=E8=A3=85/=E5=8D=B8=E8=BD=BD=E9=A9=B1=E5=8A=A8= =E7=9A=84=E6=97=A5=E5=BF=97=E8=B7=AF=E5=BE=84=E3=80=81=E8=AF=B4=E6=98=8E=E6= =B3=A8=E9=87=8A


=E8=A1=A8=E4=BA=8C=E3=80=81=E9=A9=B1=E5=8A=A8

=E9=A9=B1=E5=8A=A8

=E5=8A=9F=E8=83=BD

=E5=89=8D=E7=BD=AE=E6=9D= =A1=E4=BB=B6 =E5=AE=89=E8=A3=85=E6=96= =87=E4=BB=B6=E8=B7=AF=E5=BE=84 =E5=AE=89=E5=85=A8=E6=A8= =A1=E5=BC=8F=E6=98=AF=E5=90=A6=E4=BC=9A=E5=8A=A0=E8=BD=BD =E6=89=8B=E5=8A=A8=E5=AE= =89=E8=A3=85/=E5=8D=B8=E8=BD=BD =E6=89=8B=E5=8A=A8=E5=90= =AF=E5=8A=A8=E5=92=8C=E5=81=9C=E6=AD=A2 =E5=AE=89=E8=A3=85=E5=92= =8C=E5=8D=B8=E8=BD=BD=E9=A9=B1=E5=8A=A8=E7=9A=84=E6=97=A5=E5=BF=97 =E6=97=A5=E5=BF=97=E8=AF= =B4=E6=98=8E

Qmghcore

=E9=92=A9=E5=AD=90=E6=B3=A8=E5=85=A5<= /p>

=E6=97=A0
=E5=90=A6 =E6=97=A0

%allusersprofile%\360sk= ylar6\

BaseInstall.dll-360EntClient.exe-PID-Log.log


Qminspec

DLP=E4=B8=9A=E5=8A=A1=E7=A8=8B=E5=BA= =8F=EF=BC=8C=E8=B4=9F=E8=B4=A3=E7=BD=91=E7=BB=9C=E5=85=B1=E4=BA=AB=E3=80=81= =E7=A7=BB=E5=8A=A8=E5=AD=98=E5=82=A8=E3=80=81=E5=85=89=E7=9B=98=E6=8E=A7=E5= =88=B6

=E6=97=A0
=E5=90=A6

=E6=97=A0

=E7=AE=A1=E7=90=86=E5= =91=98=E6=9D=83=E9=99=90

=E5=90=AF=E5=8A=A8

fltmc load qminspec=

=E5=81=9C=E6=AD=A2

fltmc unload qminspec

=E5=A6=82=E6=9E= =9C=E5=81=9C=E6=AD=A2=E5=A4=B1=E8=B4=A5=EF=BC=8C=E5=8F=AF=E5=86=8D=E8=BF=90= =E8=A1=8C=E4=B8=80=E6=AC=A1

%allusersprofile%\360sk= ylar6\

DlpInstall.dll-360EntClient.exe-PID-Log.log


QmWlfs

DLP=E4=B8=9A=E5=8A=A1=E6=9C=8D=E5=8A= =A1=EF=BC=8C=E8=B4=9F=E8=B4=A3=E6=96=87=E4=BB=B6=E7=B3=BB=E7=BB=9F=E3=80=81= =E7=BD=91=E7=BB=9C=E6=9C=8D=E5=8A=A1=E3=80=81=E5=8A=A0=E8=A7=A3=E5=AF=86=E4= =B8=9A=E5=8A=A1=E7=9A=84=E5=88=9D=E5=A7=8B=E5=8C=96=E5=92=8C=E6=8E=A7=E5=88= =B6

=E6=97=A0
=E5=90=A6 =E6=97=A0

%allusersprofile%\360sk= ylar6\

WlfsInstall.dll-360EntClient.exe-PID-Log.log


Qmnetmonw

Win7  http/https=E3=80=81ftp=E3= =80=81smtp

=E6=97=A0
=E5=90=A6 =E6=97=A0

%allusersprofile%\360sk= ylar6\

BaseInstall.dll-360EntClient.exe-PID-Log.log


Qmnetmon

Win7 =E8=93=9D=E7=89=99=E6=88=96xp=E4= =B8=8A http/https=E3=80=81ftp=E3=80=81smtp=E3=80=81=E8=93=9D=E7=89=99=E4=B8= =9A=E5=8A=A1

=E6=97=A0
=E5=90=A6 =E6=97=A0

%allusersprofile%\360sk= ylar6\

BaseInstall.dll-360EntClient.exe-PID-Log.log


qmwpdmtp.dll =E7=9B=91=E6=8E=A7=E6=89= =8B=E6=9C=BAwpd=E4=B8=9A=E5=8A=A1 =E6=97=A0
=E5=90=A6

=E5=91=BD=E4=BB=A4=E8= =A1=8C

=E8=A7=81=E4=B8=8B=E6=96=B9=E6=97=A5=E5=BF=97=E4=B8=AD


%allusersprofile%\360sk= ylar6\

DlpInstall.dll-360EntClient.exe-PID-Log.log


qmghcore=E5=AE=89=E8=A3=85=E6=97=A5= =E5=BF=97

2019-06-17 10:20:17 C:\Windows\system32\drivers\ghcore.sys
2019-06-17= 10:20:17 C:\Program Files (x86)\360\360Safe\Dlp\Base\x64\drivers\GHCORE.sy= s
2019-06-17 10:20:17 ExistFile GetFileVersion fail, return true.
201= 9-06-17 10:20:17 =E5=AE=89=E8=A3=85=E6=97=B6=E6=96=87=E4=BB=B6=E7=9B=AE=E6= =A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\Windows\system32\drivers\ghc= ore.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D
2019-06-17 10:20:17= Copy source file :"C:\Program Files (x86)\360\360Safe\Dlp\Base\x64\drivers= \GHCORE.sys" ,To dest file : "C:\Windows\system32\drivers\ghcore.sys"


=E5=90=AF=E5=8A=A8=E6=97=A5=E5=BF=97

2019-06-17 10:20:29 Driver QMGHCore start
2019-06-17 10:20:29 Install= SUC


QmNetmonw=E5=92=8Cqmnetmon=E5=AE=89=E8=A3=85=E6=97=A5=E5=BF=97

2019-06-17 10:20:18 C:\Program Files (x86)\360\360Safe\Dlp\Base\x64\driv= ers\qmnetmonw7.sys
2019-06-17 10:20:18 ExistFile GetFileVersion fail, re= turn true.
2019-06-17 10:20:18 =E5=AE=89=E8=A3=85=E6=97=B6=E6=96=87=E4= =BB=B6=E7=9B=AE=E6=A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\Windows\sy= stem32\drivers\qmnetmon.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D2019-06-17 10:20:18 Copy source file :"C:\Program Files (x86)\360\360Safe\= Dlp\Base\x64\drivers\qmnetmonw7.sys" ,To dest file : "C:\Windows\system32\d= rivers\qmnetmon.sys"
2019-06-17 10:20:18 C:\Windows\system32\drivers\qm= netmonw.sys
2019-06-17 10:20:18 C:\Program Files (x86)\360\360Safe\Dlp\B= ase\x64\drivers\qmnetmonw8.sys
2019-06-17 10:20:18 ExistFile GetFileVers= ion fail, return true.
2019-06-17 10:20:18 =E5=AE=89=E8=A3=85=E6=97=B6= =E6=96=87=E4=BB=B6=E7=9B=AE=E6=A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C= :\Windows\system32\drivers\qmnetmonw.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B= =B7=E8=B4=9D
2019-06-17 10:20:18 Copy source file :"C:\Program Files (x8= 6)\360\360Safe\Dlp\Base\x64\drivers\qmnetmonw8.sys" ,To dest file : "C:\Win= dows\system32\drivers\qmnetmonw.sys"

qmnetmon(w)=E5=90=AF=E5=8A=A8=E6=97=A5=E5=BF=97

2019-06-17 10:20:24 intsall DlpDrivers
2019-06-17 10:20:24 RunSpecExe= Cmd file : C:\Program Files (x86)\360\360Safe\Dlp\Base\x86\nfregdrv.exe ,co= mmond : qmnetmonw
2019-06-17 10:20:24 RunSpecExeCmd file : "C:\Program F= iles (x86)\360\360Safe\Dlp\Base\x86\nfregdrv.exe" qmnetmonw ,processid :528= 0
2019-06-17 10:20:24 RunSpecExeCmd file : "C:\Program Files (x86)\360\= 360Safe\Dlp\Base\x86\nfregdrv.exe" qmnetmonw ,ret : 1 ,error : 122
2019= -06-17 10:20:24 RunSpecExeCmd file : C:\Program Files (x86)\360\360Safe\Dlp= \Base\x86\nfregdrv.exe ,commond : qmnetmon
2019-06-17 10:20:24 RunSpecEx= eCmd file : "C:\Program Files (x86)\360\360Safe\Dlp\Base\x86\nfregdrv.exe" = qmnetmon ,processid :5496
2019-06-17 10:20:24 RunSpecExeCmd file : "C:\= Program Files (x86)\360\360Safe\Dlp\Base\x86\nfregdrv.exe" qmnetmon ,ret : = 1 ,error : 122
2019-06-17 10:20:29 Start DlpDrivers

qmnetmon=E5=8D=B8=E8=BD=BD

2019-06-14 16:46:32 RunSpecExeCmd file : C:\Program Files (x86)\360\360S= afe\Dlp\Base\x86\nfregdrv.exe ,commond : -u qmnetmonw
2019-06-14 16:46:3= 2 RunSpecExeCmd file : "C:\Program Files (x86)\360\360Safe\Dlp\Base\x86\nfr= egdrv.exe" -u qmnetmonw ,ret : 0 ,error : 2
2019-06-14 16:46:32 RunSpec= ExeCmd file : C:\Program Files (x86)\360\360Safe\Dlp\Base\x86\nfregdrv.exe = ,commond : -u qmnetmon
2019-06-14 16:46:32 RunSpecExeCmd file : "C:\Prog= ram Files (x86)\360\360Safe\Dlp\Base\x86\nfregdrv.exe" -u qmnetmon ,ret : 0= ,error : 2
2019-06-14 16:46:33 =E6=9B=B4=E5=90=8D=E6=88=90=E5=8A=9F=E7= =A0=81=EF=BC=9A2 C:\Windows\system32\drivers\qmnetmon.sys
2019-06-14 16:= 46:33 =E5=AE=89=E8=A3=85=E6=97=B6=E6=96=87=E4=BB=B6=E7=9B=AE=E6=A0=87=E4=B8= =8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\Windows\system32\drivers\qmnetmonw7.sys= =EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D
2019-06-14 16:46:33 =E5=AE= =89=E8=A3=85=E6=97=B6=E6=96=87=E4=BB=B6=E7=9B=AE=E6=A0=87=E4=B8=8D=E5=AD=98= =E5=9C=A8=EF=BC=9A2 C:\Windows\system32\drivers\qmnetmonw8.sys=EF=BC=8C=E9= =9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D
2019-06-14 16:46:33 =E5=AE=89=E8=A3=85= =E6=97=B6=E6=96=87=E4=BB=B6=E7=9B=AE=E6=A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF= =BC=9A2 C:\Windows\system32\drivers\qmnetmonw10.sys=EF=BC=8C=E9=9C=80=E8=A6= =81=E6=8B=B7=E8=B4=9D
2019-06-14 16:46:34 =E5=AE=89=E8=A3=85=E6=97=B6=E6= =96=87=E4=BB=B6=E7=9B=AE=E6=A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\W= indows\system32\drivers\qmnetmon.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8= =B4=9D
2019-06-14 16:46:34 =E5=AE=89=E8=A3=85=E6=97=B6=E6=96=87=E4=BB=B6= =E7=9B=AE=E6=A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\Windows\system32= \drivers\qmnetmonw7.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D
201= 9-06-14 16:46:34 =E5=AE=89=E8=A3=85=E6=97=B6=E6=96=87=E4=BB=B6=E7=9B=AE=E6= =A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\Windows\system32\drivers\qmn= etmonw8.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D
2019-06-14 16:4= 6:34 =E6=9B=B4=E5=90=8D=E6=88=90=E5=8A=9F=E7=A0=81=EF=BC=9A2 C:\Windows\sys= tem32\drivers\qmnetmonw.sys
2019-06-14 16:46:34 =E5=AE=89=E8=A3=85=E6=97= =B6=E6=96=87=E4=BB=B6=E7=9B=AE=E6=A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A= 2 C:\Windows\system32\drivers\qmnetmonw10.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6= =8B=B7=E8=B4=9D
2019-06-14 16:46:34 =E5=AE=89=E8=A3=85=E6=97=B6=E6=96=87= =E4=BB=B6=E7=9B=AE=E6=A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\Windows= \system32\drivers\qmnetmon.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D=
2019-06-14 16:46:35 SHDeleteKey QMnetmon status : 0
2019-06-14 16:4= 6:35 SHDeleteKey QMnetmonw status : 0


qmwlfs=E5=AE=89=E8=A3=85=E6=97=A5=E5=BF=97

2019-06-17 10:21:52 C:\Windows\system32\drivers\qmwlfs.sys
2019-06-17= 10:21:53 C:\Program Files (x86)\360\360Safe\Dlp\Wlfs\x64\drivers\QMWLFS.sy= s
2019-06-17 10:21:53 ExistFile GetFileVersion fail, return true.
201= 9-06-17 10:21:53 =E5=AE=89=E8=A3=85=E6=97=B6=E6=96=87=E4=BB=B6=E7=9B=AE=E6= =A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\Windows\system32\drivers\qmw= lfs.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D
2019-06-17 10:21:53= Copy source file :"C:\Program Files (x86)\360\360Safe\Dlp\Wlfs\x64\drivers= \QMWLFS.sys" ,To dest file : "C:\Windows\system32\drivers\qmwlfs.sys"

qmwlfs=E5=90=AF=E5=8A=A8=E6=97=A5=E5=BF=97

2019-06-17 10:21:59 Driver QMwlfs start
2019-06-17 10:21:59 Install S= UC

qmwlfs=E5=8D=B8=E8=BD=BD=E6=97=A5=E5=BF=97

2019-06-14 16:52:48 =E6=9B=B4=E5=90=8D=E6=88=90=E5=8A=9F=E7=A0=81=EF=BC= =9A2 C:\Windows\system32\drivers\qmwlfs.sys

2019-06-14 16:52:48 SHDeleteKey QMWLFS status : 0


qminspec=E5=AE=89=E8=A3=85=E6=97=A5=E5=BF=97

2019-06-17 10:21:24 C:\Windows\system32\drivers\qminspec.sys
2019-06-= 17 10:21:24 C:\Program Files (x86)\360\360Safe\Dlp\Func\x64\drivers\qminspe= c.sys
2019-06-17 10:21:24 ExistFile GetFileVersion fail, return true.2019-06-17 10:21:25 =E5=AE=89=E8=A3=85=E6=97=B6=E6=96=87=E4=BB=B6=E7=9B=AE= =E6=A0=87=E4=B8=8D=E5=AD=98=E5=9C=A8=EF=BC=9A2 C:\Windows\system32\drivers\= qminspec.sys=EF=BC=8C=E9=9C=80=E8=A6=81=E6=8B=B7=E8=B4=9D
2019-06-17 10:= 21:25 Copy source file :"C:\Program Files (x86)\360\360Safe\Dlp\Func\x64\dr= ivers\qminspec.sys" ,To dest file : "C:\Windows\system32\drivers\qminspec.s= ys"
qminspec=E5=90=AF=E5=8A=A8=E6=97=A5=E5=BF=97

2019-06-17 10:21:34 Driver  qminspec start

qminspec=E5=8D=B8=E8=BD=BD=E6=97=A5=E5=BF=97

2019-06-14 16:48:36 unload qminspec
2019-06-14 16:48:36 RunSpecExeCm= d file : C:\Windows\system32\fltmc.exe ,commond : unload qminspec
2019-0= 6-14 16:48:37 RunSpecExeCmd file : "C:\Windows\system32\fltmc.exe" unload q= minspec ,processid :11628
2019-06-14 16:48:37 RunSpecExeCmd file : "C:\= Windows\system32\fltmc.exe" unload qminspec ,ret : 1 ,error : 0
2019-06= -14 16:48:38 RunSpecExeCmd file : C:\Windows\system32\fltmc.exe ,commond : = unload qminspec
2019-06-14 16:48:39 RunSpecExeCmd file : "C:\Windows\sys= tem32\fltmc.exe" unload qminspec ,processid :7872
2019-06-14 16:48:39 R= unSpecExeCmd file : "C:\Windows\system32\fltmc.exe" unload qminspec ,ret : = 1 ,error : 0


qmwpdmtp.dll=E5=AE=89=E8=A3=85=E6=97=A5=E5=BF=97

2019-06-17 10:21:33 RunSpecExeCmd file : C:\Program Files (x86)\360\360S= afe\Dlp\Func\x86\inst\QMWtpInstx64.exe ,commond : /i "C:\Program Files (x86= )\360\360Safe\Dlp\Func\qmwpdmtp\qmwpdmtp.inf"
2019-06-17 10:21:34 RunSpe= cExeCmd file : "C:\Program Files (x86)\360\360Safe\Dlp\Func\x86\inst\QMWtpI= nstx64.exe" /i "C:\Program Files (x86)\360\360Safe\Dlp\Func\qmwpdmtp\qmwpdm= tp.inf" ,processid :4176
2019-06-17 10:21:34 RunSpecExeCmd file : "C:\P= rogram Files (x86)\360\360Safe\Dlp\Func\x86\inst\QMWtpInstx64.exe" /i "C:\P= rogram Files (x86)\360\360Safe\Dlp\Func\qmwpdmtp\qmwpdmtp.inf" ,ret : 1 ,er= ror : 0


qmwpdmtp.dll=E5=8D=B8=E8=BD=BD=E6=97=A5=E5=BF=97

2019-06-14 16:48:39 RunSpecExeCmd file : C:\Program Files (x86)\360\360S= afe\Dlp\Func\x86\inst\QMWtpInstX64.exe ,commond : /u "C:\Program Files (x86= )\360\360Safe\Dlp\Func\qmwpdmtp\qmwpdmtp.inf"
2019-06-14 16:48:40 RunSpe= cExeCmd file : "C:\Program Files (x86)\360\360Safe\Dlp\Func\x86\inst\QMWtpI= nstX64.exe" /u "C:\Program Files (x86)\360\360Safe\Dlp\Func\qmwpdmtp\qmwpdm= tp.inf" ,processid :10072
2019-06-14 16:48:40 RunSpecExeCmd file : "C:\= Program Files (x86)\360\360Safe\Dlp\Func\x86\inst\QMWtpInstX64.exe" /u "C:\= Program Files (x86)\360\360Safe\Dlp\Func\qmwpdmtp\qmwpdmtp.inf" ,ret : 1 ,e= rror : 0



------=_Part_229250_1385473596.1599810235488--