AVG：
扫描：killed；
"";"Virus found Win32/Hedo, C:\Users\Killer\Desktop\新建文件夹\IE.exe";"Secured"
双击：关闭监控，实机双击，IDP击杀本体及衍生物。【又现ALEXA】
"";"IDP.ALEXA.51, C:\Users\Killer\Desktop\IE.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/7/22, 14:07:44"
"";", C:\Users\Killer\Desktop\IE.exe";"Object was blocked";"Process";"2016/7/22, 14:07:44"
"";", C:\Windows\explorer.exe";"Object was blocked";"Process";"2016/7/22, 14:07:44"
"";", D:\Haozip\HaoZip.exe";"Object was blocked";"Process";"2016/7/22, 14:07:44"
"";", D:\Haozip\HaoZip.exe";"Object was blocked";"Process";"2016/7/22, 14:07:44"
"";", D:\Haozip\HaoZipUpdate.exe";"Object was blocked";"Process";"2016/7/22, 14:07:44"
"";", D:\Haozip\HaoZipUpdate.exe";"Object was blocked";"Process";"2016/7/22, 14:07:44"
"";", C:\Users\Killer\AppData\Local\Temp\firefax.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/7/22, 14:07:44"
"";"IDP.Trojan.103276E5, C:\USERS\KILLER\APPDATA\LOCAL\TEMP\FIREFAX.EXE";"Deleted";"File or Directory";"2016/7/22, 14:23:46"
"";", C:\USERS\KILLER\APPDATA\LOCAL\TEMP\FIREFAX.EXE";"Object was blocked";"Process";"2016/7/22, 14:23:46"
"";", C:\Windows\System32\netsh.exe";"Object was blocked";"Process";"2016/7/22, 14:23:46"
"";", C:\USERS\KILLER\DESKTOP\新建文件夹\IE.EXE";"Object was blocked";"Process";"2016/7/22, 14:23:46"
"";", C:\USERS\KILLER\DESKTOP\新建文件夹\IE.EXE";"Deleted";"File or Directory";"2016/7/22, 14:23:46"
"";"Found registry key with reference to infected file C:\USERS\KILLER\APPDATA\LOCAL\TEMP\FIREFAX.EXE, HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{79618940-44DD-4472-AB4F-C476A5786684}";"Healed, Moved to Virus Vault";"Registry value";"2016/7/22, 14:23:46"
"";"Found registry key with reference to infected file C:\USERS\KILLER\APPDATA\LOCAL\TEMP\FIREFAX.EXE, HKLM\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DF00AD50-1448-4A1B-B23B-83A7CEF57027}";"Healed, Moved to Virus Vault";"Registry value";"2016/7/22, 14:23:46"
|
楼主: 白露为霜
发表于 2016-7-22 14:59:30
