AVG：
扫描：killed；
"";"Virus found VBS/Agent, c:\Users\killer\Desktop\Server.vbs";"Healed";"File or Directory";"2016/2/20, 21:28:59"
双击：关闭监控，实机双击，IDP击杀之。（本体（即vbs）并未被回滚击杀）
"";"IDP.ALEXA.51, C:\Users\killer\AppData\Local\Temp\system.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/20, 21:30:14"
"";", C:\Users\killer\AppData\Local\Temp\txw45g.exe";"Object was blocked";"Process";"2016/2/20, 21:30:14"
"";", C:\Windows\System32\netsh.exe";"Object was blocked";"Process";"2016/2/20, 21:30:14"
"";", C:\Users\killer\AppData\Local\Temp\txw45g.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/20, 21:30:14"
"";", C:\Users\killer\AppData\Local\Temp\system.exe";"Object was blocked";"Process";"2016/2/20, 21:30:14"
"";",HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\F27C64DAF2CAD411A18A4E3FC21A8B65";"Deleted, Moved to Virus Vault";"Registry value";"2016/2/20, 21:30:14"
"";", HKEY_USERS\S-1-5-21-540828005-2055914412-3868506426-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\F27C64DAF2CAD411A18A4E3FC21A8B65";"Deleted, Moved to Virus Vault";"Registry value";"2016/2/20, 21:30:14"
"";", HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES\\{58A2231C-838F-4B0E-B06A-B9C0064DB75B}";"Deleted, Moved to Virus Vault";"Registry value";"2016/2/20, 21:30:14"
"";", HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\SHAREDACCESS\PARAMETERS\FIREWALLPOLICY\FIREWALLRULES\\{9D3EE7BF-815F-4576-A580-11AD079006C6}";"Deleted, Moved to Virus Vault";"Registry value";"2016/2/20, 21:30:14"
|
发表于 2016-2-20 21:27:35
