BO（****）.exe-波波病毒 (第115次更新）

显示全部楼层 · 发表于 2009-8-30 09:29:02

Update

显示全部楼层 · 发表于 2009-8-30 09:37:45

原帖由 Sherry.ai 于 2009-8-30 09:29 发表
Update

Type,Date/Time,Action,Description
Program Guard,2009-8-30 9:33:56,Blocked,C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\iexplore.exe(3700) wants to start C:\WINDOWS\System32\net.exe
Program Guard,2009-8-30 9:33:45,Blocked,C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\iexplore.exe(3700) wants to start C:\WINDOWS\System32\sc.exe
Program Guard,2009-8-30 9:33:37,Allowed,C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\iexplore.exe wants to create executable file C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Messenger\cp.bat
Program Guard,2009-8-30 9:33:29,Blocked,C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\setup.exe(352) wants to start C:\WINDOWS\System32\net.exe
Program Guard,2009-8-30 9:33:22,Blocked,C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\setup.exe wants to create executable file \??\C:\WINDOWS\system32\czvsp.exe
Program Guard,2009-8-30 9:33:17,Allowed,C:\Documents and Settings\Administrator\My Documents\BO5751.exe(1228) wants to start C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\iexplore.exe
Program Guard,2009-8-30 9:33:09,Blocked,C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\setup.exe wants to create executable file \??\C:\WINDOWS\system32\xaehk.exe
Program Guard,2009-8-30 9:33:02,Allowed,C:\Documents and Settings\Administrator\My Documents\BO5751.exe(1228) wants to start C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\bdsetup.exe
Program Guard,2009-8-30 9:32:52,Allowed,C:\Documents and Settings\Administrator\My Documents\BO5751.exe(1228) wants to start C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\setup.exe
Program Guard,2009-8-30 9:32:42,Allowed,C:\Documents and Settings\Administrator\My Documents\BO5751.exe(1228) wants to start C:\Documents and Settings\Administrator\Local Settings\Temp\Messenger\install.exe
Program Guard,2009-8-30 9:32:30,Allowed,C:\Documents and Settings\Administrator\My Documents\BO5751.exe wants to create executable file C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Messenger\cc.exe
Program Guard,2009-8-30 9:32:15,Allowed,C:\Documents and Settings\Administrator\My Documents\BO5751.exe

显示全部楼层 · 发表于 2009-8-30 20:56:17

71 Kill
2009/8/30 20:55:40 已清除木马程序 Trojan-Dropper.Win32.Agent.bbkv G:\Temp\Virus\BO71.rar/BO5751.exe

显示全部楼层 · 发表于 2009-9-6 13:25:46

Update

显示全部楼层 · 发表于 2009-9-6 17:56:37

72 Kill
2009/9/6 17:56:08 已清除木马程序 Trojan-Spy.Win32.Agent.azss G:\Temp\Virus\BO72.rar/BO5753.exe

显示全部楼层 · 发表于 2009-9-10 18:04:35

Update

显示全部楼层 · 发表于 2009-9-10 18:06:42

IK 搞定

显示全部楼层 · 发表于 2009-9-13 13:56:14

Update

显示全部楼层 · 发表于 2009-9-13 16:11:23

KV2010 KILL

显示全部楼层 · 发表于 2009-9-13 22:09:58

73-74
2009/9/13 22:08:45 已清除木马程序 Trojan-Dropper.Win32.Agent.bcpb G:\Temp\Virus\BO73.rar/BO5754.exe
2009/9/13 22:08:47 已清除木马程序 Trojan.Win32.Small.ccn G:\Temp\Virus\BO74.rar/BO5755.exe

[病毒样本] BO（****）.exe-波波病毒 (第115次更新）