它插入Explorer.exe服务启动，并且恢复sst过主动拦截防御。 使用了内核驱动程序，bindshell后门功能，以及下载者功能。 -Insert it into the Explorer.exe service starts, and restored sst active interceptor defense. Using the kernel driver, bindshell backdoor functionality, as well as those who downl