2/21 扫描发现恶意软件 过SSF

saga3721

文件 ID         文件名         大小(字节)         结果
28681400         d0feb2993e38f03de...cf.rar         67.89 KB         OK

以下位置提供了存档中包含的文件及其结果的列表:
文件 ID         文件名         大小(字节)         结果
28681401         d0feb2993e38f03de...cf.exe         89.5 KB         UNDER ANALYSIS

欧阳宣

百度miss

五月大地

这个我会上报的，看看到底怎么处理。

电脑发烧友

2015-12-19 09:02:28        文件保护(删除文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\20DA2BC7\ntf.dat
2015-12-19 09:02:28        文件保护(创建文件)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\桌面\%LOCALAPPDATA%\Packages\windows_ie_ac_001\AC\20DA2BC7\web.dat
2015-12-19 09:02:27        文件保护(创建文件)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\20DA2BC7\bin.exe
2015-12-19 09:02:21        文件保护(删除文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\20DA2BC7\log.dat
2015-12-19 09:02:21        文件保护(创建文件)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\桌面\%LOCALAPPDATA%\Packages\windows_ie_ac_001\AC\20DA2BC7
2015-12-19 09:00:01        注册表保护(创建注册表值)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
注册表名称:20DA2BC7
2015-12-19 09:00:00        应用程序保护(修改其它进程内存)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\WINDOWS\explorer.exe
2015-12-19 09:00:00        应用程序保护(修改其它进程内存)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\WINDOWS\system32\conime.exe
2015-12-19 08:59:59        文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\20DA2BC7\bin.exe
2015-12-19 08:59:57        应用程序保护(修改其它进程内存)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\WINDOWS\system32\wscntfy.exe
2015-12-19 08:59:55        应用程序保护(修改其它进程内存)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\WINDOWS\system32\ctfmon.exe
2015-12-19 08:59:51        文件保护(创建文件)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\桌面\%LOCALAPPDATA%\Packages\windows_ie_ac_001\AC\20DA2BC7
2015-12-19 08:59:50        文件保护(创建文件)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\桌面\%LOCALAPPDATA%\Packages\windows_ie_ac_001\AC\20DA2BC7
2015-12-19 08:59:49        应用程序保护(修改其它进程内存)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\WINDOWS\explorer.exe
2015-12-19 08:59:48        文件保护(创建文件)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\Documents and Settings\Administrator\桌面\%LOCALAPPDATA%\Packages\windows_ie_ac_001\AC\20DA2BC7
2015-12-19 08:59:45        应用程序保护(修改其它进程内存)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\WINDOWS\explorer.exe
2015-12-19 08:59:45        应用程序保护(运行应用程序)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
文件路径:C:\WINDOWS\explorer.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:43        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:42        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:41        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:40        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:37        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:35        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:33        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:30        应用程序保护(修改其它进程内存)     操作:允许
进程路径:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
目标进程:C:\Documents and Settings\Administrator\桌面\d0feb2993e38f03de59387e653847e00484802c70b266c59fc24cf9456373dcf.exe
2015-12-19 08:59:27        文件保护(修改文件)     操作:允许
进程路径:C:\WINDOWS\system32\wuauclt.exe
文件路径:C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb.chk

EQ这回没有漏

Renascence

蓝泽祈 发表于 2015-12-18 22:07
诺顿nis毫无反应，和谐共处

解压秒杀了

nick20010117

欧阳宣 发表于 2015-12-19 04:14
百度miss

大宣不用咖啡了？

欧阳宣

nick20010117 发表于 2015-12-19 12:00
大宣不用咖啡了？

我经常会换的

nick20010117

欧阳宣 发表于 2015-12-19 12:30
我经常会换的

百度国内版?

欧阳宣

nick20010117 发表于 2015-12-19 12:48
百度国内版?

如果不是国内版，名字就叫bav的。。。

nick20010117

欧阳宣 发表于 2015-12-19 12:59
如果不是国内版，名字就叫bav的。。。

好吧(∩_∩)