求行为分析

显示全部楼层 · 发表于 2012-3-17 18:01:17

sandboxie正常运行的啊

Executing: c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe
LoadLibrary(rasapi32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(rasman.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(ws2_32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(nsi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(winmm.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(winspool.drv) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(shell32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(shlwapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(ole32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(oleaut32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(comctl32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(oledlg.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(wininet.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(normaliz.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(iertutil.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(urlmon.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(comdlg32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(lz32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(KERNEL32.DLL) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(KERNELBASE.DLL) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(LPK.DLL) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(KERNEL32) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(lz32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(c:\windows\system32\uxtheme.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(uxtheme.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
IsDebuggerPresent() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(user32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
SetWindowsHookEx() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(dwmapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(clbcatq.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(msscript.ocx) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(ole32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(sxs.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(jscript.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(version.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(cryptsp.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(rsaenh.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
OpenProcessToken(C:\Users\Shamrock\Desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(rpcrtremote.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
BitBlt() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(LPK) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(winhlp32.exe) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(advapi32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(oleaccrc.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(ieframe.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(psapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(oleacc.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(msimg32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(msvfw32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(dciman32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateDC(Display,(null),(null)) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(USER32) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetKeyState() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(c:\windows\syswow64\msctf.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(apphelp.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(secur32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(ntmarta.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(wldap32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(profapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateFile(C:\Users\Shamrock\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateFile(C:\Users\Shamrock\AppData\Roaming\Microsoft\Windows\Cookies\index.dat) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateFile(C:\Users\Shamrock\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(dnsapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(iphlpapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(winnsi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(shlwapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
RasEnumEntries() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(rtutils.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
OpenService(rasman) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
OpenService(Sens) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(sensapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
InternetGetConnectedState() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
InternetOpen() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(mswsock.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(wshtcpip.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(ws2_32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
bind(port=0) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
connect( 127.0.0.1:62054 ) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
InternetConnect(zhujizz.com) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
HttpOpenRequest(/update.html) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(nlaapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateMutex(Local\!PrivacIE!SharedMemory!Mutex) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(mshtml.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(rasadhlp.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(wship6.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(fwpuclnt.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
connect( 199.83.94.100:80 ) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(mlang.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetUserName() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(EXPLORER.EXE) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(IEXPLORE.EXE) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
FindWindow(MS_AutodialMonitor,(null)) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
FindWindow(MS_WebCheckMonitor,(null)) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
InternetConnect(js.tongji.linezing.com) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
HttpOpenRequest(/2801713/tongji.js) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(msimtf.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(msls31.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(api-ms-win-core-localregistry-l1-1-0.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(setupapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(cfgmgr32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(devobj.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(d2d1.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(dwrite.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
OpenService(FontCache) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
StartService() [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(dxgi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateDC(\\.\DISPLAY1,\\.\DISPLAY1,(null)) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(wintrust.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(crypt32.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(msasn1.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(d3d10_1.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(d3d10_1core.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(d3d10warp.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
connect( 222.186.49.250:80 ) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateMutex(Local\IESQMMUTEX_0_274) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(nvd3dum.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(WKSCAL.EXE) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(jscript9.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(c:\windows\syswow64\urlmon.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateMutex(Local\DirectSound DllMain mutex (0x000001D8)) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(flash11e.ocx) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(dsound.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(powrprof.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(d3d9.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(d3d8thk.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(mscms.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(userenv.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateMutex({1B655094-FE2A-433c-A877-FF9793445069}) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetVolumeInformation(C:\) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateMutex(Local\__DDrawExclMode__) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateMutex(Local\__DDrawCheckExclMode__) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateDC((null),\\.\DISPLAY1,(null)) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateFile(C:\ProgramData\NVIDIA Corporation\Drs\nvdrssel.bin) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(mmdevapi.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
LoadLibrary(propsys.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
OpenService(AudioSrv) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
InternetConnect(dt.tongji.linezing.com) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
HttpOpenRequest(/tongji.do?unit_id=2801713&uv_id=17098920521164272833&uv_new=1&cna=&cg=&mid=&mmland=&ade=&adtm=&sttm=&cpa=&ss_id=1312272771&ss_no=0&ec=1&ref=&url=http%3A//zhujizz.com/update.html&title=&charset=gb2312&domain=zhujizz.com&hashval=1163&filtered=0&app=Microsoft%20Internet%20Explorer&agent=Mozilla/4.0%20%28compatible%3B%20MSIE%207.0%3B%20Windows%20NT%206.1%3B%20WOW64%3B%20Trident/5.0%3B%20SLCC2%3B%20.NET%20CLR%202.0.50727%3B%20.NET%20CLR%203.5.30729%3B%20.NET%20CLR%203.0.30729%3B%20Media%20Center%20PC%206.0%3B%20.NET4.0C%29&color=32-bit&screen=1440x900&lg=zh-cn&je=1&fv=10.0&st=1331976159&vc=eaf46a26&ut=0&url_id=0&cnu=0.18940374862319736) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(C:\Windows\system32\Msimtf.dll) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateMutex(MSIMGSIZECacheMutex) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
CreateFile(C:\Users\Shamrock\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
connect( 119.42.227.250:80 ) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]
GetModuleHandle(OLEAUT32) [c:\users\shamrock\desktop\主机正宗静态整站生成器1.0\静态整站生成器.exe]

显示全部楼层 · 发表于 2012-3-17 18:36:20

金山杀。。

显示全部楼层 · 发表于 2012-3-17 18:38:20

zmzcy 发表于 2012-3-17 16:54

瑞星的查杀不怎么样，但是主防不错啊！不愧是山寨的

显示全部楼层 · 发表于 2012-3-17 19:36:57

DPT1 发表于 2012-3-17 18:38
瑞星的查杀不怎么样，但是主防不错啊！不愧是山寨的

汗瑞星山寨谁了

显示全部楼层 · 发表于 2012-3-17 19:41:31

假死？解压炸弹？360未知

显示全部楼层 · 发表于 2012-3-17 19:45:47

360沙箱运行没有假死

显示全部楼层 · 发表于 2012-3-18 07:53:18

zmzcy 发表于 2012-3-17 19:36
汗瑞星山寨谁了

微点事件啊！（点到为止，免得被扣分）

显示全部楼层 · 发表于 2012-3-18 14:31:42

貌似安全

显示全部楼层 · 发表于 2012-3-18 14:37:39

zmzcy 发表于 2012-3-17 16:54

你的瑞星全功能是什么版本？

显示全部楼层 · 发表于 2012-3-18 14:38:13

蓝天二号发表于 2012-3-18 14:37
你的瑞星全功能是什么版本？

2011

[可疑文件] 求行为分析

本帖子中包含更多资源

本帖子中包含更多资源