Server_Setup

显示全部楼层 · 发表于 2009-1-26 12:40:56

又是server

显示全部楼层 · 发表于 2009-1-26 12:41:59

红伞鸽子基因

显示全部楼层 · 发表于 2009-1-26 12:57:07

rs 0

显示全部楼层 · 发表于 2009-1-26 12:59:49

2009-1-26 12:58:05 WinRAR 压缩文件管理器创建 C:\Documents and Settings\Administrator\桌面\Server_Setup\Server_Setup.exe
2009-1-26 12:58:24 Microsoft Telnet Server Helper 添加到低限制组
2009-1-26 12:58:24 Microsoft Telnet Server Helper 启动进程 C:\Documents and Settings\Administrator\桌面\Server_Setup\Server_Setup.exe
2009-1-26 12:58:24 Microsoft Telnet Server Helper 允许: KLPrivileges/KLSelfStart 自动运行
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/AppInit_DLLs 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/AppInit_DLLs 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLSystemFiles/SystemDll 读取 C:\WINDOWS\system32\SHELL32.dll
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLSystemFiles/ 读取 C:\WINDOWS\system32\SHELL32.dll
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLSystemSecRegKeys/Policies_Explorer2 读取 hkey_users\S-1-5-21-1708537768-746137067-1606980848-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32

显示全部楼层 · 发表于 2009-1-26 13:00:09

2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLSystemFiles/SystemDll 读取 C:\WINDOWS\system32\COMCTL32.dll
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLSystemFiles/ 读取 C:\WINDOWS\system32\COMCTL32.dll
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/CurrentVersion_Drivers32 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009

显示全部楼层 · 发表于 2009-1-26 13:01:11

2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/WinSock2_Parameters 读取 hklm\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003
2009-1-26 12:58:25 Microsoft Telnet Server Helper 拒绝: KLPrivileges/KLPermissionSystem/KLPermissionPrivileges/KLSetDbgPrivilege 设置调试权限
2009-1-26 12:58:25 Microsoft Telnet Server Helper 拒绝: KLPrivileges/KLPermissionSystem/KLPermissionPrivileges/KLSetDbgPrivilege 设置调试权限
2009-1-26 12:58:25 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/AEDebug 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug
2009-1-26 12:58:27 Microsoft Telnet Server Helper : KLSystemData/KLStartupRegKeys/AEDebug 读取 hklm\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug
2009-1-26 12:58:29 Microsoft Telnet Server Helper 退出进程 C:\Documents and Settings\Administrator\桌面\Server_Setup\Server_Setup.exe

显示全部楼层 · 发表于 2009-1-26 13:44:12

已上报eset二版代理咯，不过貌似春节放假。打酱油去……

显示全部楼层 · 发表于 2009-1-26 15:21:44

To KL

显示全部楼层 · 发表于 2009-1-26 17:33:01

对象: Server_Setup.exe
路径: E:\收集区\09-1-26
Status: 已发现病毒
病毒: Backdoor.Hupigon.AAFC (BD 引擎)

显示全部楼层 · 发表于 2009-1-26 18:25:26

Dear Don Johnson,

Thank you for your submission.
The detection for this threat will be included in our next signature update.

Regards,

Senior Virus Researcher
ESET spol. s r.o.

[病毒样本] Server_Setup

本帖子中包含更多资源