[MD5: C2121C]

显示全部楼层 · 发表于 2007-9-13 18:06:08

2007-09-13 18:05:45 创建注册表值    操作:阻止
进程路径:F:\病毒样本\tonger2003\top.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
注册表名称:{ACADABAF-1000-0010-8000-10AA006D2EA4}
触发规则:所有程序规则->系统设置->HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

2007-09-13 18:05:46 删除文件    操作:阻止
进程路径:F:\病毒样本\tonger2003\top.exe
文件路径:C:\WINDOWS\system32\verclsid.exe
触发规则:所有程序规则->系统文件->%WinDir%\system32\*.exe

2007-09-13 18:05:48 修改其它进程内存    操作:阻止
进程路径:F:\病毒样本\tonger2003\top.exe
目标进程:C:\WINDOWS\Explorer.EXE
触发规则:所有程序规则->*

显示全部楼层 · 发表于 2007-9-14 10:05:48

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

[病毒样本] [MD5: C2121C]