avupdate.exe

saibanzhizun

费尔和360杀毒都查不出来

ablhr

上报费尔

myshowjwx

卡巴主动防御拦截

XE-cj

2010-7-28 19:37:02    创建新进程    允许
进程: c:\windows\explorer.exe
目标: c:\documents and settings\xe-cj\my documents\avupdate.exe
命令行: "C:\Documents and Settings\XE-CJ\My Documents\avupdate.exe"
规则: [应用程序]c:\windows\explorer.exe

2010-7-28 19:37:21    创建文件夹    允许
进程: c:\documents and settings\xe-cj\my documents\avupdate.exe
目标: C:\Documents and Settings\XE-CJ\Local Settings\Application Data\rhihceksl
规则: [文件]*

2010-7-28 19:37:23    创建文件    允许
进程: c:\documents and settings\xe-cj\my documents\avupdate.exe
目标: C:\Documents and Settings\XE-CJ\Local Settings\Application Data\rhihceksl\hdwfopdtssd.exe
规则: [文件组]所有执行文件 -> [文件]*; *.exe

2010-7-28 19:37:27    修改注册表值    阻止
进程: c:\documents and settings\xe-cj\my documents\avupdate.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\xwhkiyan
值: C:\Documents and Settings\XE-CJ\Local Settings\Application Data\rhihceksl\hdwfopdtssd.exe
规则: [注册表组]自动运行程序所在位置 -> [注册表]HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\*

2010-7-28 19:37:29    修改注册表值    阻止
进程: c:\documents and settings\xe-cj\my documents\avupdate.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\xwhkiyan
值: C:\Documents and Settings\XE-CJ\Local Settings\Application Data\rhihceksl\hdwfopdtssd.exe
规则: [注册表组]自动运行程序所在位置 -> [注册表]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\*

2010-7-28 19:37:31    创建新进程    阻止
进程: c:\documents and settings\xe-cj\my documents\avupdate.exe
目标: c:\documents and settings\xe-cj\local settings\application data\rhihceksl\hdwfopdtssd.exe
命令行: "C:\Documents and Settings\XE-CJ\Local Settings\Application Data\rhihceksl\hdwfopdtssd.exe"
规则: [应用程序]*

jason_jiang

to xandora(panda)

huawei_518

过卡巴2011.....金山杀之...............

sy0923

小a高敏感拦截

辉崽一族

回复 2楼 a369258147  的帖子


    有结果了没？

a369258147

回复 18楼 辉崽一族  的帖子


  鉴定结果：危险

Love=卡巴+费尔