ORDEM_DE_PAGAMENTO.vbs

显示全部楼层 · 发表于 2016-9-2 23:11:45

本帖最后由我要打十個于 2016-9-2 23:15 编辑

To COMODO

2016-09-02 23:09:07 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 修改注册表项 HKUS\360SANDBOX\S\Registry\USER\S-1-5-21-1145015313-3560306806-2860196612-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings
2016-09-02 23:09:03 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 修改注册表项 HKUS\360SANDBOX\S\Registry\USER\S-1-5-21-1145015313-3560306806-2860196612-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyOverride
2016-09-02 23:09:00 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 修改注册表项 HKUS\360SANDBOX\S\Registry\USER\S-1-5-21-1145015313-3560306806-2860196612-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer
2016-09-02 23:08:55 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 修改注册表项 HKUS\360SANDBOX\S\Registry\USER\S-1-5-21-1145015313-3560306806-2860196612-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable
2016-09-02 23:08:51 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 访问COM接口 C:\Windows\System32\svchost.exe
2016-09-02 23:08:47 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 访问COM接口 {8BC3F05E-D86B-11D0-A075-00C04FB68820}
2016-09-02 23:08:41 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 创建进程 C:\Windows\SysWOW64\wscript.exe
2016-09-02 23:08:36 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 创建进程 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs
2016-09-02 23:08:32 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 访问COM接口 C:\Windows\System32\svchost.exe
2016-09-02 23:08:24 C:\Users\Administrator\Desktop\ORDEM_DE_PAGAMENTO.vbs 访问COM接口 {8BC3F05E-D86B-11D0-A075-00C04FB68820}

想下载什么东西，然后可能网络不通，over~

显示全部楼层 · 发表于 2016-9-2 23:33:18

喜欢这种不加密的

显示全部楼层 · 发表于 2016-9-3 06:04:26

AVG 拦截网页

显示全部楼层 · 发表于 2016-9-5 14:44:54

MSE

ORDEM_DE_PAGAMENTO.vbs
Infected: TrojanDownloader:VBS/Regub.A

[可疑文件] ORDEM_DE_PAGAMENTO.vbs

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源