backdoor，hxxp://accrisa.info/main.php?page=d95614c587a4fc2c

will

1x to avira

hx1997

2011-9-30 20:10:48        C:\Documents and Settings\Administrator\桌面\0.30706168462871186.exe        修改注册表        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Administrator\桌面\0.30706168462871186.exe        已阻止        038.HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\*       

2011-9-30 20:10:48        C:\Documents and Settings\Administrator\桌面\0.30706168462871186.exe        启动新应用程序        C:\WINDOWS\Debug\vglhw.exe        已阻止        004.Deny from Running & Deny Hooking / Loading Drivers       

2011-9-30 20:10:48        C:\Documents and Settings\Administrator\桌面\0.30706168462871186.exe        修改注册表        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Desktop        已阻止        038.HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\       

2011-9-30 20:10:48        C:\Documents and Settings\Administrator\桌面\0.30706168462871186.exe        修改注册表        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Documents        已阻止        038.HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\       

2011-9-30 20:10:47        C:\Documents and Settings\Administrator\桌面\0.30706168462871186.exe        启动新应用程序        C:\WINDOWS\system32\sc.exe        已阻止        002.Scripts       

XMonster