12.exe--你报了没？

显示全部楼层 · 发表于 2012-2-28 23:32:14

本帖最后由 hx1997 于 2012-2-28 23:32 编辑

也没看出神马啊，就是个有界面的下载器不知道下载了神马东东。

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> \\.\PIPE\lsarpc]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> \\.\PIPE\lsarpc]

Adjust Privileges [C:\Documents and Settings\Administrator\桌面\12.exe ]

Adjust Privileges [C:\Documents and Settings\Administrator\桌面\12.exe ]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\01net\01NET.com.exe]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data0]

Write process memory [C:\Documents and Settings\Administrator\桌面\12.exe (1144) -> \Device\HarddiskVolume1\WINDOWS\system32\ctfmon.exe (1740)]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\01net\01NET.com.exe]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data0]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\01net\.GetRight]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\01net\.GetRight]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> \\.\PIPE\srvsvc]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\All Users\Lb\Finish Downloading PhotoFiltre - Telechargement 01Net.lnk]

Duplicate handle [C:\Documents and Settings\Administrator\桌面\12.exe (1144) <- \Device\HarddiskVolume1\WINDOWS\explorer.exe (1000)]

Duplicate handle [C:\Documents and Settings\Administrator\桌面\12.exe (1144) <- \Device\HarddiskVolume1\WINDOWS\explorer.exe (1000)]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> \\.\PIPE\wkssvc]

Duplicate handle [C:\Documents and Settings\Administrator\桌面\12.exe (1144) <- \Device\HarddiskVolume1\WINDOWS\explorer.exe (1000)]

Duplicate handle [C:\Documents and Settings\Administrator\桌面\12.exe (1144) <- \Device\HarddiskVolume1\WINDOWS\explorer.exe (1000)]

Duplicate handle [C:\Documents and Settings\Administrator\桌面\12.exe (1144) <- \Device\HarddiskVolume1\WINDOWS\explorer.exe (1000)]

Duplicate handle [C:\Documents and Settings\Administrator\桌面\12.exe (1144) <- \Device\HarddiskVolume1\WINDOWS\explorer.exe (1000)]

Duplicate handle [C:\Documents and Settings\Administrator\桌面\12.exe (1144) <- \Device\HarddiskVolume1\WINDOWS\explorer.exe (1000)]

Duplicate handle [C:\Documents and Settings\Administrator\桌面\12.exe (1144) <- \Device\HarddiskVolume1\WINDOWS\explorer.exe (1000)]

Write to file [C:\Documents and Settings\Administrator\桌面\12.exe -> C:\Documents and Settings\Administrator\Application Data\GetRightToGo\12.data0]

Process C:\Documents and Settings\Administrator\桌面\12.exe has terminated.

显示全部楼层 · 发表于 2012-2-29 00:05:36

熊猫云proMISS

显示全部楼层 · 发表于 2012-2-29 08:30:08

金山，avg安全

显示全部楼层 · 发表于 2012-2-29 08:30:26

显示全部楼层 · 发表于 2012-2-29 12:12:17

微点，回复了，非病毒。。

[误报文件] 12.exe--你报了没？

本帖子中包含更多资源

本帖子中包含更多资源