00000000 0.00000000 [3188] [WSPConnect] Socket ip 211.159.***.***:80
00000001 0.19762495 [3188] [WSPConnect] Socket ip 211.159.***.***:80
00000002 0.31889576 [3188] [SangforNsp] [UnHookNSP] step in...
00000003 0.31902072 [3188] CSProxy refcount 11
00000004 0.31904691 [3188] ==========> ExitInstance :gLayerInfo delete 3974544<==============
00000005 0.31906849 [3188] Unload CSProxy from c:\program files\kingsoft\kingsoft antivirus\kupdata.exe...
00000006 0.91465765 [5844] [ecagent][1324][INFO] [check]user is offline.
00000007 1.01867759 [400] [WSPConnect] Socket ip 114.112.67.213:80
00000008 4.79164076 [5084] [INFO][SangforCore]SetIEProxyInfo IE Proxy Is Not Enable!
00000009 4.79237175 [5084] [WSPConnect] Socket ip 61.***.***.***:4433
00000010 5.19558096 [1148] [ecagent-sp]check if ecagent is running. status : running.
00000011 12.89671230 [3620] CSProxy refcount 12
00000012 12.89673042 [3620] Loading D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000013 12.89702034 [3620] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\emdctl.exe
00000014 12.89708042 [3620] 使用链式SPI
00000015 12.90216064 [3620] [SangforNsp] GetCurrentProcessId=3620
00000016 12.90237999 [3620] [SangforNsp] DetourAttach success!
00000017 12.90242767 [3620] [SangforNsp] DetourAttach success!
00000018 12.90246487 [3620] [SangforNsp] DetourAttach success!
00000019 12.92057323 [3620] [WSPConnect] Socket ip 192.168.0.102:1158
00000020 13.04760551 [3620] [SangforNsp] [UnHookNSP] step in...
00000021 13.04781818 [3620] CSProxy refcount 11
00000022 13.04782677 [3620] ==========> ExitInstance :gLayerInfo delete 4042224<==============
00000023 13.04785252 [3620] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000024 13.39786530 [2824] CSProxy refcount 12
00000025 13.39821434 [2824] Loading D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000026 13.39822483 [2824] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\emdctl.exe
00000027 13.39830685 [2824] 使用链式SPI
00000028 13.40392876 [2824] [SangforNsp] GetCurrentProcessId=2824
00000029 13.40416145 [2824] [SangforNsp] DetourAttach success!
00000030 13.40423870 [2824] [SangforNsp] DetourAttach success!
00000031 13.40428066 [2824] [SangforNsp] DetourAttach success!
00000032 13.42393970 [2824] [WSPConnect] Socket ip 192.168.0.102:3938
00000033 14.48477459 [2824] [SangforNsp] [UnHookNSP] step in...
00000034 14.48499680 [2824] CSProxy refcount 11
00000035 14.48510933 [2824] ==========> ExitInstance :gLayerInfo delete 4042224<==============
00000036 14.48531151 [2824] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000037 30.20281029 [1148] [ecagent-sp]Import Cert and Enable Loopbackexempt.
00000038 30.20501900 [1148] [GetCertName]Cert Name: 某公司
00000039 30.22249222 [1148] [HasSangforSign]IsSangforSign return:1
00000040 30.22270012 [1148] [ecagent-sp]validate session done.
00000041 30.22950554 [1148] [ecagent-sp]Import Cert and Enable Loopbackexempt for NT 5.
00000042 30.23145103 [1148] [GetCertName]Cert Name: 某公司
00000043 30.23149300 [1148] [HasSangforSign]IsSangforSign return:1
00000044 30.23167610 [1148] [ecagent-sp]validate session done.
00000045 30.32839203 [5360] [2018-01-18][15:09:35][5708][ERROR]ecagent is running in default sessions.
00000046 30.33326530 [5360] [ecagent][5708][INFO] found firefox profiles : C:\Documents and
Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\ovhkgffn.default\
00000047 30.34707642 [6084] [2018-01-18][15:09:35][3632][ERROR]ecagent is running in default sessions.
00000048 30.34843826 [6084] [ecagent][3632][INFO] importing cert to sys-db
00000049 30.34852600 [6084] [ecagent][3632][INFO] import_cert_to_sys_db enter.
00000050 30.35580826 [5360] [ecagent][5708][INFO] nss cert exist.
00000051 30.45428658 [6084] [ecagent][3632][INFO] import cert to sys db successfully.
00000052 30.45431328 [6084] [ecagent][3632][INFO] --enable-loopback skip : OS is a earlier version than win8.
00000053 30.96828651 [5844] [ecagent][1324][INFO] [check]user is offline.
00000054 35.07901001 [400] [WSPConnect] Socket ip 122.193.207.31:80
00000055 35.24456024 [1148] [ecagent-sp]ecagent status : exist, gle : 1307
00000056 35.24582291 [1148] [ecagent-sp]check if ecagent is running. status : running.
00000057 36.23175430 [2344] [SangforNsp] [UnHookNSP] step in...
00000058 36.23228073 [2344] CSProxy refcount 10
00000059 36.23231125 [2344] ==========> ExitInstance :gLayerInfo delete 10138648<==============
00000060 36.23233795 [2344] Unload CSProxy from C:\Program Files\Internet Explorer\iexplore.exe...
00000061 37.10969925 [1760] [WSPConnect] Socket ip 192.168.0.102:1158
00000062 44.93853378 [4032] CSProxy refcount 11
00000063 44.93855667 [4032] Loading D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000064 44.93885422 [4032] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\emdctl.exe
00000065 44.93891525 [4032] 使用链式SPI
00000066 44.94385147 [4032] [SangforNsp] GetCurrentProcessId=4032
00000067 44.94403458 [4032] [SangforNsp] DetourAttach success!
00000068 44.94408417 [4032] [SangforNsp] DetourAttach success!
00000069 44.94411850 [4032] [SangforNsp] DetourAttach success!
00000070 44.99424362 [4032] [WSPConnect] Socket ip 192.168.0.102:1158
00000071 45.14075089 [4032] [SangforNsp] [UnHookNSP] step in...
00000072 45.14089203 [4032] CSProxy refcount 10
00000073 45.14091492 [4032] ==========> ExitInstance :gLayerInfo delete 4042224<==============
00000074 45.14093781 [4032] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000075 45.49644089 [2020] CSProxy refcount 11
00000076 45.52014542 [2020] Loading D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000077 45.52759171 [2020] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\emdctl.exe
00000078 45.57390594 [2020] 使用链式SPI
00000079 45.59525299 [2020] [SangforNsp] GetCurrentProcessId=2020
00000080 45.61648560 [2020] [SangforNsp] DetourAttach success!
00000081 45.65290070 [2020] [SangforNsp] DetourAttach success!
00000082 45.65541077 [2020] [SangforNsp] DetourAttach success!
00000083 45.69488525 [2020] [WSPConnect] Socket ip 192.168.0.102:3938
00000084 46.52479553 [2020] [SangforNsp] [UnHookNSP] step in...
00000085 46.52492905 [2020] CSProxy refcount 10
00000086 46.52495575 [2020] ==========> ExitInstance :gLayerInfo delete 4042224<==============
00000087 46.52497482 [2020] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000088 56.17105865 [1760] [WSPConnect] Socket ip 192.168.0.102:1158
00000089 57.51109695 [5396] [SangforNsp] GetCurrentProcessId=5396
00000090 57.51128387 [5396] [SangforNsp] DetourAttach success!
00000091 57.51134109 [5396] [SangforNsp] DetourAttach success!
00000092 57.51137161 [5396] [SangforNsp] DetourAttach success!
00000093 57.54545975 [5396] CSProxy refcount 11
00000094 57.54643250 [5396] Loading D:\oracle\product\10.2.0\db_1\bin\tnsping.exe...
00000095 57.54838562 [5396] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\tnsping.exe
00000096 57.54864502 [5396] 使用链式SPI
00000097 57.55123138 [5396] [WSPConnect] Socket ip 192.168.0.102:1521
00000098 57.64801025 [5396] CSProxy refcount 10
00000099 57.65517807 [5396] ==========> ExitInstance :gLayerInfo delete 26607688<==============
00000100 57.65522003 [5396] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\tnsping.exe...
00000101 57.66717529 [5396] [SangforNsp] [UnHookNSP] step in...
00000102 57.66759872 [5396] WSPCleanup==> D:\oracle\product\10.2.0\db_1\bin\tnsping.exe
00000103 57.66763687 [5396] ==========> WSPCleanup :gLayerInfo delete 0<==============
00000104 58.11473083 [5936] [SangforNsp] GetCurrentProcessId=5936
00000105 58.11493301 [5936] [SangforNsp] DetourAttach success!
00000106 58.11499786 [5936] [SangforNsp] DetourAttach success!
00000107 58.11503983 [5936] [SangforNsp] DetourAttach success!
00000108 58.14271164 [5936] CSProxy refcount 11
00000109 58.14273071 [5936] Loading D:\oracle\product\10.2.0\db_1\bin\LSNRCTL.EXE...
00000110 58.14297104 [5936] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\LSNRCTL.EXE
00000111 58.14303970 [5936] 使用链式SPI
00000112 58.14567184 [5936] [WSPConnect] Socket ip 192.168.0.102:1521
00000113 58.24510574 [5936] CSProxy refcount 10
00000114 58.24518204 [5936] ==========> ExitInstance :gLayerInfo delete 25231432<==============
00000115 58.24553299 [5936] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\LSNRCTL.EXE...
00000116 58.24555206 [5936] [SangforNsp] [UnHookNSP] step in...
00000117 58.24595261 [5936] WSPCleanup==> D:\oracle\product\10.2.0\db_1\bin\LSNRCTL.EXE
00000118 58.24598312 [5936] ==========> WSPCleanup :gLayerInfo delete 0<==============
00000119 60.99386978 [5844] [ecagent][1324][INFO] [check]user is offline.
00000120 65.27328491 [1148] [ecagent-sp]check if ecagent is running. status : running.
00000121 66.47816467 [3652] [SangforNsp] GetCurrentProcessId=3652
00000122 66.47839355 [3652] [SangforNsp] DetourAttach success!
00000123 66.47845459 [3652] [SangforNsp] DetourAttach success!
00000124 66.47850037 [3652] [SangforNsp] DetourAttach success!
00000125 66.52893066 [3652] CSProxy refcount 11
00000126 66.52895355 [3652] Loading D:\oracle\product\10.2.0\db_1\perl\5.8.3\bin\MSWin32-x86-multi-thread\perl.exe...
00000127 66.52922058 [3652] WSPStartup ===> D:\oracle\product\10.2.0\db_1\perl\5.8.3\bin\MSWin32-x86-multi-
thread\perl.exe
00000128 66.52957916 [3652] 使用链式SPI
00000129 66.54962158 [3652] [WSPConnect] Socket ip 192.168.0.102:1521
00000130 67.01879883 [3652] CSProxy refcount 10
00000131 67.01882935 [3652] ==========> ExitInstance :gLayerInfo delete 25358496<==============
00000132 67.01885986 [3652] Unload CSProxy from D:\oracle\product\10.2.0\db_1\perl\5.8.3\bin\MSWin32-x86-multi-
thread\perl.exe...
00000133 67.01929474 [3652] [SangforNsp] [UnHookNSP] step in...
00000134 67.01989746 [3652] WSPCleanup==> D:\oracle\product\10.2.0\db_1\perl\5.8.3\bin\MSWin32-x86-multi-
thread\perl.exe
00000135 67.01992798 [3652] ==========> WSPCleanup :gLayerInfo delete 0<==============
00000136 67.54090881 [4744] CSProxy refcount 11
00000137 67.54096222 [4744] Loading C:\Program Files\某公司\QQLite\Bin\QQ.exe...
00000138 67.54159546 [4744] WSPStartup ===> C:\Program Files\某公司\QQLite\Bin\QQ.exe
00000139 67.54177094 [4744] 使用链式SPI
00000140 76.88488770 [2200] CSProxy refcount 12
00000141 76.88491058 [2200] Loading D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000142 76.88526154 [2200] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\emdctl.exe
00000143 76.88533020 [2200] 使用链式SPI
00000144 76.89026642 [2200] [SangforNsp] GetCurrentProcessId=2200
00000145 76.89044952 [2200] [SangforNsp] DetourAttach success!
00000146 76.89049530 [2200] [SangforNsp] DetourAttach success!
00000147 76.89053345 [2200] [SangforNsp] DetourAttach success!
00000148 76.90758514 [2200] [WSPConnect] Socket ip 192.168.0.102:1158
00000149 77.06724548 [2200] [SangforNsp] [UnHookNSP] step in...
00000150 77.06729889 [2200] CSProxy refcount 11
00000151 77.06732178 [2200] ==========> ExitInstance :gLayerInfo delete 4042224<==============
00000152 77.06735229 [2200] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000153 77.39035797 [5044] CSProxy refcount 12
00000154 77.39038086 [5044] Loading D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000155 77.39066315 [5044] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\emdctl.exe
00000156 77.39073944 [5044] 使用链式SPI
00000157 77.39620972 [5044] [SangforNsp] GetCurrentProcessId=5044
00000158 77.39640045 [5044] [SangforNsp] DetourAttach success!
00000159 77.39646149 [5044] [SangforNsp] DetourAttach success!
00000160 77.39649963 [5044] [SangforNsp] DetourAttach success!
00000161 77.41532135 [5044] [WSPConnect] Socket ip 192.168.0.102:3938
00000162 78.52417755 [5044] [SangforNsp] [UnHookNSP] step in...
00000163 78.52431488 [5044] CSProxy refcount 11
00000164 78.52433777 [5044] ==========> ExitInstance :gLayerInfo delete 4042224<==============
00000165 78.52435303 [5044] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000166 90.27845001 [1148] [ecagent-sp]Import Cert and Enable Loopbackexempt.
00000167 90.28050232 [1148] [GetCertName]Cert Name: 某公司
00000168 90.28053284 [1148] [HasSangforSign]IsSangforSign return:1
00000169 90.28067780 [1148] [ecagent-sp]validate session done.
00000170 90.28718567 [1148] [ecagent-sp]Import Cert and Enable Loopbackexempt for NT 5.
00000171 90.29029083 [1148] [GetCertName]Cert Name: 某公司
00000172 90.29070282 [1148] [HasSangforSign]IsSangforSign return:1
00000173 90.29135132 [1148] [ecagent-sp]validate session done.
00000174 90.41107178 [1528] [2018-01-18][15:10:35][920][ERROR]ecagent is running in default sessions.
00000175 90.41665649 [4272] [2018-01-18][15:10:35][2228][ERROR]ecagent is running in default sessions.
00000176 90.41674805 [4272] [ecagent][2228][INFO] importing cert to sys-db
00000177 90.41889954 [4272] [ecagent][2228][INFO] import_cert_to_sys_db enter.
00000178 90.43145752 [1528] [ecagent][920][INFO] found firefox profiles : C:\Documents and
Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\ovhkgffn.default\
00000179 90.43856812 [1528] [ecagent][920][INFO] nss cert exist.
00000180 90.56451416 [4272] [ecagent][2228][INFO] import cert to sys db successfully.
00000181 90.56455231 [4272] [ecagent][2228][INFO] --enable-loopback skip : OS is a earlier version than win8.
00000182 91.07626343 [5844] [ecagent][1324][INFO] [check]user is offline.
00000183 94.88227844 [5084] [ERR][某公司CORE]HttpSendRequest Fail 12152
00000184 94.88230896 [5084] [INFO][某公司CORE]bIsDomainSSO = 0
00000185 95.29971313 [1148] [ecagent-sp]ecagent status : exist, gle : 1307
00000186 95.30144501 [1148] [ecagent-sp]check if ecagent is running. status : running.
00000187 96.71403503 [980] [SangforNsp] GetCurrentProcessId=980
00000188 96.71423340 [980] [SangforNsp] DetourAttach success!
00000189 96.71428680 [980] [SangforNsp] DetourAttach success!
00000190 96.71431732 [980] [SangforNsp] DetourAttach success!
00000191 96.81518555 [980] [SangforNsp] [UnHookNSP] step in...
00000192 96.92950439 [4804] [SangforNsp] GetCurrentProcessId=4804
00000193 96.92970276 [4804] [SangforNsp] DetourAttach success!
00000194 96.92974854 [4804] [SangforNsp] DetourAttach success!
00000195 96.92978668 [4804] [SangforNsp] DetourAttach success!
00000196 97.07050323 [4804] [SangforNsp] [UnHookNSP] step in...
00000197 97.10575104 [5084] [INFO][SangforCore]SetIEProxyInfo IE Proxy Is Not Enable!
00000198 97.10591125 [5084] [WSPConnect] Socket ip 61.***.***.***:4433
00000199 97.13188934 [5084] GetBeforeLoginConfigEx g_bRndImg 0 g_bAnonymous 0 g_bAutoInstall 1 g_iSoftKey 0
g_bAllowSavePwd 1 g_bAllowAutoLogin 1 g_bEnableDomainSso 0 g_szDomainAddr g_nPublicExponent 65537 g_benableResetPwd 0!
00000200 97.13760376 [5084] [SangforCore][EnumCert] pIssuserName = CN, **, **, **, **, **, ****@***.com
00000201 97.13784027 [5084] Invalid file handle. Error 3.
00000202 97.15141296 [3108] [SangforNsp] GetCurrentProcessId=3108
00000203 97.15161133 [3108] [SangforNsp] DetourAttach success!
00000204 97.15166473 [3108] [SangforNsp] DetourAttach success!
00000205 97.15169525 [3108] [SangforNsp] DetourAttach success!
00000206 97.24148560 [3108] [SangforNsp] [UnHookNSP] step in...
00000207 97.89656067 [6108] [SangforNsp] GetCurrentProcessId=6108
00000208 97.89675903 [6108] [SangforNsp] DetourAttach success!
00000209 97.89681244 [6108] [SangforNsp] DetourAttach success!
00000210 97.89684296 [6108] [SangforNsp] DetourAttach success!
00000211 97.93113708 [6108] CSProxy refcount 12
00000212 97.93115234 [6108] Loading D:\oracle\product\10.2.0\db_1\perl\5.8.3\bin\MSWin32-x86-multi-thread\perl.exe...
00000213 97.93146515 [6108] WSPStartup ===> D:\oracle\product\10.2.0\db_1\perl\5.8.3\bin\MSWin32-x86-multi-
thread\perl.exe
00000214 97.93153381 [6108] 使用链式SPI
00000215 97.93466187 [6108] [WSPConnect] Socket ip 192.168.0.102:1521
00000216 98.36054993 [6108] CSProxy refcount 11
00000217 98.36061096 [6108] ==========> ExitInstance :gLayerInfo delete 28754432<==============
00000218 98.36077881 [6108] Unload CSProxy from D:\oracle\product\10.2.0\db_1\perl\5.8.3\bin\MSWin32-x86-multi-
thread\perl.exe...
00000219 98.36110687 [6108] [SangforNsp] [UnHookNSP] step in...
00000220 98.36192322 [6108] WSPCleanup==> D:\oracle\product\10.2.0\db_1\perl\5.8.3\bin\MSWin32-x86-multi-
thread\perl.exe
00000221 98.36196136 [6108] ==========> WSPCleanup :gLayerInfo delete 0<==============
00000222 99.82753754 [5084] [ProxyIE]Http Srv Stop Listening
00000223 99.82759857 [5084] cslogon manager recv WM_CLOSE msg...
00000224 99.82802582 [5084] cslogon manager recv WM_DESTROY msg...
00000225 99.82815552 [5084] cslogon manager begin to exit...
00000226 99.82820129 [5084] [timer] KillTimer success!
00000227 99.82823181 [5084] closing CSClient_Ready_Event handle
00000228 99.82824707 [5084] [SendSSOConfigToCSClient] begin HandShakeWithCS...
00000229 99.82826233 [5084] [HandShakeWithCS] begin create socket...
00000230 99.82846832 [5084] [HandShakeWithCS] end create socket...
00000231 99.82849884 [5084] [HandShakeWithCS] begin connect...
00000232 99.82947540 [5084] [WSPConnect] Socket ip 127.0.0.1:1872
00000233 99.83010101 [5084] [RecvSSORequestThread] accept, errno=2
00000234 99.83014679 [5084] [HandShakeWithCS] end connect...
00000235 99.83016968 [5084] [SendSSOConfigToCSClient] end HandShakeWithCS...
00000236 99.83024597 [5084] [SendSSOConfigToCSClient] begin send...
00000237 99.83026123 [5084] [SendSSOConfigToCSClient] end send...
00000238 99.83066559 [5084] DealSSO 7
00000239 99.83105469 [5084] [RecvSSORequestThread] run break! g_bRun = 0
00000240 99.83109283 [5084] websyner begin to exit...
00000241 99.83133698 [5084] CWebSyner::FreeAllSession()...
00000242 99.83155823 [5084] websyner exit successfully!
00000243 99.83174896 [5084] job processor exit successfully!
00000244 99.83206177 [5084] cslogon manager exit successfully!
00000245 99.83251190 [5084] [ProxyIE]Http Srv Stop Listening
00000246 100.69583893 [5084] [SangforNsp] [UnHookNSP] step in...
00000247 100.69625854 [5084] CSProxy refcount 10
00000248 100.69759369 [5084] ==========> ExitInstance :gLayerInfo delete 19747264<==============
00000249 100.69766998 [5084] Unload CSProxy from C:\Program Files\Sangfor\SSL\SangforCSClient\SangforCSClient.exe...
00000250 109.46047211 [6056] CSProxy refcount 11
00000251 109.46596527 [6056] Loading D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000252 109.49951172 [6056] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\emdctl.exe
00000253 109.52156067 [6056] 使用链式SPI
00000254 109.55754852 [6056] [SangforNsp] GetCurrentProcessId=6056
00000255 109.95861053 [6056] [SangforNsp] DetourAttach success!
00000256 109.98453522 [6056] [SangforNsp] DetourAttach success!
00000257 110.00481415 [6056] [SangforNsp] DetourAttach success!
00000258 110.45751953 [6056] [WSPConnect] Socket ip 192.168.0.102:1158
00000259 110.46291351 [6056] [SangforNsp] [UnHookNSP] step in...
00000260 110.49875641 [6056] CSProxy refcount 10
00000261 110.51410675 [6056] ==========> ExitInstance :gLayerInfo delete 4042224<==============
00000262 110.55106354 [6056] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000263 110.95845795 [2492] CSProxy refcount 11
00000264 110.97279358 [2492] Loading D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...
00000265 110.98832703 [2492] WSPStartup ===> D:\oracle\product\10.2.0\db_1\bin\emdctl.exe
00000266 110.99430084 [2492] 使用链式SPI
00000267 111.01897430 [2492] [SangforNsp] GetCurrentProcessId=2492
00000268 111.03410339 [2492] [SangforNsp] DetourAttach success!
00000269 111.04797363 [2492] [SangforNsp] DetourAttach success!
00000270 111.08381653 [2492] [SangforNsp] DetourAttach success!
00000271 111.09882355 [2492] [WSPConnect] Socket ip 192.168.0.102:3938
00000272 111.95584869 [2492] [SangforNsp] [UnHookNSP] step in...
00000273 111.96549225 [2492] CSProxy refcount 10
00000274 112.00119019 [2492] ==========> ExitInstance :gLayerInfo delete 4042224<==============
00000275 112.01838684 [2492] Unload CSProxy from D:\oracle\product\10.2.0\db_1\bin\emdctl.exe...