hxxp://hi5vendas.com.br/data/upchk.gif

a256886572008

CIMA 沒反應

2011-06-06 17:38:55   C:\WINDOWS\explorer.exe   Create Process, Block File   C:\Documents and Settings\Roger\桌面\VIRUS\up\upchk.exe   

2011-06-06 17:38:59   C:\Documents and Settings\Roger\桌面\VIRUS\up\upchk.exe   Sandboxed As   Partially Limited   

2011-06-06 17:39:05   C:\Documents and Settings\Roger\桌面\VIRUS\up\upchk.exe   Modify Key   HKLM\SOFTWARE\Classes\.key\  

2011-06-06 17:39:05   C:\Documents and Settings\Roger\桌面\VIRUS\up\upchk.exe   Modify Key   HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable   

2011-06-06 17:40:12   C:\Documents and Settings\Roger\桌面\VIRUS\up\upchk.exe   Modify Key   HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\upchk   

訪問網路

wuyongliang

小A拦截  提示特洛伊木马

hx1997

ESET killed
G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.rar > RAR > upchk.exe - Win32/TrojanDownloader.VB.OYW 特洛伊木马

留侯

大蜘蛛；
upchk.exe infected with Trojan.DownLoader3.15275

hx1997

2011-6-6 18:16:50        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\user\current\software\Microsoft\Windows\CurrentVersion\Run\upchk        blocked        0.Samples Testing Mode
2011-6-6 18:16:21        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\machine\system\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable        blocked        0.Samples Testing Mode
2011-6-6 18:16:15        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\user\current\software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable        blocked        0.Samples Testing Mode
2011-6-6 18:16:03        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData        blocked        User rule blocking set value
2011-6-6 18:15:43        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\machine\software\microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common AppData        blocked        0.Samples Testing Mode
2011-6-6 18:15:36        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\History        blocked        0.Samples Testing Mode
2011-6-6 18:15:31        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cookies        blocked        0.Samples Testing Mode
2011-6-6 18:15:26        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache        blocked        0.Samples Testing Mode
2011-6-6 18:15:12        G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\upchk.exe        set value        HKEY_USERS\SANDBOX_HX_VIRUS\machine\software\Classes\.key        blocked        0.Samples Testing Mode

qianyuqx

to rising

hengguoping

毒霸说 不明文件

njjsxy

to kis

歌歌的人

hj5abc

to MSE