BlackHole v2.0 exploit kit

firefox3

COMODO Firewall 日志  
    表 : Defense+ 事件
    日期创建 : 2013-01-18 21:52:38
    记录数 : 223
日期 应用程序 行为 目标
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:22   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:16   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:10   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:52:04   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:58   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:51   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\180B4F34767D9AA99137F0C912C74859   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:42   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\SystemCertificates\My   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   访问COM接口   C:\Windows\System32\svchost.exe   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:37   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections   
2013-01-18 21:51:32   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改文件   C:\Users\Firefox3\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5   
2013-01-18 21:51:20   C:\Program Files\Java\jre7\bin\java.exe   创建进程   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   
2013-01-18 21:51:20   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib   
2013-01-18 21:51:15   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib   
2013-01-18 21:51:15   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib   
2013-01-18 21:51:15   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib   
2013-01-18 21:51:15   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   修改注册表项   HKUS\S-1-5-21-4192450202-281903818-1567422371-1000\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib   
2013-01-18 21:51:01   C:\Program Files\Java\jre7\bin\java.exe   创建进程   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   
2013-01-18 21:51:00   c:\users\firefox3\wgsdgsdgdsgsd.exe   Sandbox中运行   Partially Limited   
2013-01-18 21:50:29   C:\Program Files\Java\jre7\bin\java.exe   创建进程   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   
2013-01-18 21:50:28   C:\Users\Firefox3\wgsdgsdgdsgsd.exe   Sandbox中运行   Partially Limited   
报告结束  

3801187

wjcharles

win8 x64实机，不更新java，firefox进毒网

NIS2013：

类别： 入侵防护
日期和时间,风险,活动,状态,推荐的操作,IPS 警报名称,默认操作,采取的操作,攻击电脑,攻击者网址,目标地址,源地址,通信说明,类别

2013/1/18 22:30:34,高,阻止了 94.127.71.55 的入侵企图,已阻止,不需要操作,Web Attack: Java JMX RCE CVE-2013-0422 2,不需要操作,不需要操作,"94.127.71.55, 80",94.127.71.55/closest/98yf8913fjipgjialhg8239jgighnjh4i6k5o.php?fhh=itscmkd&faiclrlv=mrjv,"-PC (..18.112, 9360)",94.127.71.55,"TCP, www-http",

2013/1/18 22:30:32,高,阻止了 94.127.71.55 的入侵企图,已阻止,不需要操作,Web Attack: Java JMX RCE CVE-2013-0422 2,不需要操作,不需要操作,"94.127.71.55, 80",94.127.71.55/closest/98yf8913fjipgjialhg8239jgighnjh4i6k5o.php?fhh=itscmkd&faiclrlv=mrjv,"-PC (..18.112, 9359)",94.127.71.55,"TCP, www-http",

2013/1/18 22:30:31,高,阻止了 94.127.71.55 的入侵企图,已阻止,不需要操作,Web Attack: Java JMX RCE CVE-2013-0422 2,不需要操作,不需要操作,"94.127.71.55, 80",94.127.71.55/closest/98yf8913fjipgjialhg8239jgighnjh4i6k5o.php?fhh=itscmkd&faiclrlv=mrjv,"-PC (..18.112, 9357)",94.127.71.55,"TCP, www-http",

2013/1/18 22:30:29,高,阻止了 94.127.71.55 的入侵企图,已阻止,不需要操作,Web Attack: Java JMX RCE CVE-2013-0422 2,不需要操作,不需要操作,"94.127.71.55, 80",94.127.71.55/closest/98yf8913fjipgjialhg8239jgighnjh4i6k5o.php?fhh=itscmkd&faiclrlv=mrjv,"-PC (..18.112, 9356)",94.127.71.55,"TCP, www-http",

zst470396853

网站被阻止！

G Data 互联网安全套装 2013已阻止访问此网站。
该站点包含被感染的代码：Trojan.Generic.KD.833520 (引擎A).

网站被阻止！

G Data 互联网安全套装 2013已阻止访问此网站。
该站点包含被感染的代码：Trojan.Generic.KD.833520 (引擎A).

龙套传说

下载后手动扫描报毒。FSCS

留侯

过大蜘蛛，已上报

214615406

zxy_001

趋势科技,未经授权的更改
名称:        wgsdgsdgdsgsd.exe
来源:        未知
检测到的资源或进程 ID:HKCU\Software\Microsoft\Windows\CurrentVersion\Run\qefiklixubib
处理措施:        已终止

已移除文件
威胁名称:        0
类型:        威胁
受感染文件:C:\Users\***\qefiklixubib.exe
处理措施:        已移除
检测方式:        关联扫描

消停

wjcharles 发表于 2013-1-18 22:35
win8 x64实机，不更新java，firefox进毒网

NIS2013：

附件两个样本直接启发！

K7200000

警告
为保证您的安全，将不会访问此网页
在请求的页面的 HTTP 数据中发现病毒或恶意程序。
请求的 URL：
https://att.kafan.cn/forum.php?mod=attachment&aid=MTk4MjY3OHw4OTk3ZWM0Y3wxMzU4NTcxMDIyfDgxNTk1OXwxNDUxMDM0
信息：
是 TR/Agent.77824.2 特洛伊木马