貌似是微软windows update搞得，以前单纯怀疑wp
类别： 诺顿社区防卫
日期和时间,风险,活动,状态,推荐的操作,更新日期,提交者,说明,提交详细信息
2016/1/21 星期四 17:51:31,信息,IPS 检测统计提交,已提交,不需要操作,2016/1/21 星期四 17:51:33,Norton Internet Security,IPS 检测统计提交,"Signature ID: 23318 <br>Local or Remote Attacker: 1 <br>Remote Port: 8198 <br>Local Port: 80 <br>Protocol: 6 <br>Signature Set Version: 20160119.001 <br>Application Name: \DEVICE\HARDDISKVOLUME5\WINDOWS\SYSTEM32\SVCHOST.EXE <br>Offending URL: tlu.dl.delivery.mp.microsoft.com/filestreamingservice/files/615584ed-7a6f-49ea-bf05-04b975126d80?P1=1453372321&P2=301&P3=2&P4=W5Rwu0X6VZKZn2%2bPL4HiO5ppQPOpvf7xSt0TSU0hVPg%3d <br>Date Detected: Thu, 21d Jan 2016d 09d:51d:31d GMT <br>Application File Checksum: 6A1212077C0559029CDFB9C39580C835 <br>Application File Information: 10.0.10586.0 <br>Network Data: 434D50520014000078DAED92CB6ED34014868F2950EEA042B9ECBA69C5C6773B4E171132F150476DECE98C5DDAB0B01C5F8A2527B61237C04B201E8B158FC1733075938222162C58CE271D9D19FFE7D7999963CFE9DB9B370128006C000802CB37585CE6FB2C9E7F00689EB19DA0012B63B10D041D87880691EB90C8F5D902FB24C070E99297454F2020B647DF2112F5DDD03B440EB4FAEBA5FE100634C2C43F3D8B42BA121FC06D96769879BD43535E486929A559592CB2D91769524B93229955F32A6FA4A49A80A02FBD4F7F7B91EDA07FB56FB7F62D78B56E67A723917D80BC60B872ECBC1D0454B6A42E088F5B9B078FAE6DD826F690BEC16A4F354C5DB7345D53F7B0D6D31596F49EB6878DDE7B937CBA504E3B27A3C3D154DBD5C6F8C8700BDFACEB63ECD78BDCFA4C1B25A0A1F2F1049FEFEA29081B6D9FAF6C22AB3E2119C8795166F36696C593627A3ECF668B22C9AE3ECA1DD534BB46968A56DCC945633F8BC571AE98A2628CF72D53D53A6957F9DF87BC773D5B8228F63D8AA2BEEFA0EFED6CEF2CC5177F8A5EC0DE353A42DE41E0FEF8F6F3160877DB8BBE6C7FB2B5B2E00CA3B8AECB22899BA29ACA55D2648D7875FFE108381C0E87C3E170381C0E87C3E170387FE517E585AD20 <br>Sub-signature ID: 70772 <br>Signature Properties: 29714 <br>Referer URL: <br>Application File SHA256: 5D00BBEB147E0C838A622FC42C543B2913D57EACA4E69D9A37ED61E98C819347 <br>Application File CreateTime: 0 <br>IPSSubmissionID: 4e7ffec4-5431-11e5-a6e4-001a7dda7113 <br>Application File Reputation: 82 <br>Application File Prevalence: 196 <br>Remote Address: 182.34.127.89 <br> <br>OS-Country:86 <br>OS-Language:Chinese (Simplified) <br>Processor:AMD64 Family 21 Model 16 Stepping 1 <br>System:Windows 10 Pro build 10586 <br>Platform-GUID:073498E9-9998-4120-B24E-0A9B7132B518 <br>DateSubmitted:Thu, 21 Jan 2016 09:51:31 GMT <br>Product:Norton Internet Security 22.5.5.15" |
楼主: 尘梦幽然
楼主
发表于 2016-1-21 18:00:34