10/42 (23.81%)

显示全部楼层 · 发表于 2010-7-30 19:13:08

费尔杀

显示全部楼层 · 发表于 2010-7-30 19:22:22

卡巴斯基不让下

显示全部楼层 · 发表于 2010-7-30 19:51:41

2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\ole32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; ole32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\ole32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; ole32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:00 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:19 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 修改注册表值 HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache 阻止 [注册表组]IE浏览器设置保护(询问) -> [注册表]*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders; Cache 值: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
2010-7-30 19:49:21 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 修改注册表值 HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache 阻止 [注册表组]IE浏览器设置保护(询问) -> [注册表]*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders; Cache 值: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
2010-7-30 19:49:22 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 修改注册表值 HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cookies 阻止 [注册表组]IE浏览器设置保护(询问) -> [注册表]*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders; Cookies 值: D:\我的文档\Cookies
2010-7-30 19:49:23 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 修改注册表值 HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cookies 阻止 [注册表组]IE浏览器设置保护(询问) -> [注册表]*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders; Cookies 值: D:\我的文档\Cookies
2010-7-30 19:49:24 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 修改注册表值 HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\History 阻止 [注册表组]IE浏览器设置保护(询问) -> [注册表]*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders; History 值: C:\Documents and Settings\Administrator\Local Settings\History
2010-7-30 19:49:25 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 修改注册表值 HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\History 阻止 [注册表组]IE浏览器设置保护(询问) -> [注册表]*\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders; History 值: C:\Documents and Settings\Administrator\Local Settings\History
2010-7-30 19:49:25 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\advapi32.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; advapi32.dll
2010-7-30 19:49:25 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 读文件 C:\WINDOWS\system32\ntdll.dll 阻止 [文件组]限制读取的文件 -> [文件]c:\windows\system32; ntdll.dll
2010-7-30 19:49:28 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 创建注册表项 HKEY_USERS\Sandbox_Administrator_DefaultBox\machine\System\CurrentControlSet\Services\Tcpip\Parameters 阻止 [注册表组]系统关键设置保护(询问) -> [注册表]*\SYSTEM\*Controlset*\Services\*
2010-7-30 19:49:29 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 创建注册表项 HKEY_USERS\Sandbox_Administrator_DefaultBox\machine\system\CurrentControlSet\Services\Tcpip 阻止 [注册表组]系统关键设置保护(询问) -> [注册表]*\SYSTEM\*Controlset*\Services\*
2010-7-30 19:49:30 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 创建注册表项 HKEY_USERS\Sandbox_Administrator_DefaultBox\machine\System\CurrentControlSet\Services\Tcpip\Parameters 阻止 [注册表组]系统关键设置保护(询问) -> [注册表]*\SYSTEM\*Controlset*\Services\*
2010-7-30 19:49:31 c:\sandbox\administrator\defaultbox\drive\c\tddownload\龙之谷辅助\龙之谷.exe 创建注册表项 HKEY_USERS\Sandbox_Administrator_DefaultBox\machine\system\CurrentControlSet\Services\Tcpip 阻止 [注册表组]系统关键设置保护(询问) -> [注册表]*\SYSTEM\*Controlset*\Services\*

显示全部楼层 · 发表于 2010-7-30 19:54:35

过小a

显示全部楼层 · 发表于 2010-7-30 22:52:40

to norton
A2杀之

显示全部楼层 · 发表于 2010-8-1 15:02:55

金山网盾kill

[病毒样本] 10/42 (23.81%)