1分钟前的样本4DEAED

qwerasdf123

2007-08-07 14:31:02    Create Files      Action:Block
Application Path:C:\New Folder\hip.exe
File Path:C:\WINDOWS\system32\B0B0111C.EXE
Rules:All Application Rules->Îļþ¹æÔò->%systemdrive%\*.exe


2007-08-07 14:31:02    Create Files      Action:Block
Application Path:C:\New Folder\hip.exe
File Path:C:\WINDOWS\system32\B0B0111C.EXE
Rules:All Application Rules->Îļþ¹æÔò->%systemdrive%\*.exe


2007-08-07 14:31:02    Create Files      Action:Block
Application Path:C:\New Folder\hip.exe
File Path:C:\WINDOWS\system32\B0B0111C.EXE
Rules:All Application Rules->Îļþ¹æÔò->%systemdrive%\*.exe


2007-08-07 14:31:02    Setup Services or Drives      Action:Block
Application Path:C:\WINDOWS\system32\services.exe
File Path:C:\WINDOWS\system32\B0B0111C.EXE -d
Rules:All Application Rules->*


2007-08-07 14:31:02    Setup Services or Drives      Action:Block
Application Path:C:\New Folder\hip.exe
File Path:C:\WINDOWS\system32\B0B0111C.EXE -d
Rules:All Application Rules->*


2007-08-07 14:31:02    Create Files      Action:Block
Application Path:C:\New Folder\hip.exe
File Path:C:\WINDOWS\system32\delmep.bat
Rules:All Application Rules->Îļþ¹æÔò->%systemdrive%\*.bat