uaua3731.exe

天使的愤怒

已上报MSE：
https://www.microsoft.com/securi ... 16e1169538c&n=1

hddu

2010-10-24 16:13:53    创建文件      操作:允许
进程路径:F:\virus\uaua3731\uaua3731.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\SE2FZ9LQ\kele55setup[1].exe
触发规则:所有程序规则->IE临时文件夹设置->?:\Documents and Settings\*\Local Settings\Temporary Internet Files\*.exe

2010-10-24 16:15:00    运行应用程序      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nsl2.tmp\GGExit.exe
命令行:5
触发规则:应用程序规则->TEMP临时目录->*\Temp\*->*\Temp\*.exe

2010-10-24 16:15:05    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*

2010-10-24 16:15:05    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\AudioCapture.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:05    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\AudioCodec1.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:06    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\AudioCodec2.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:06    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\AudioCodec3.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:06    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\DnsSession.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:06    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\EncWmv.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:07    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\EquipCenter.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:09    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\Kele55.exe
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.exe

2010-10-24 16:15:11    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\Mp4Maker.exe
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.exe

2010-10-24 16:15:11    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ProcessCS.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:11    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ResCenter.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:12    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\RtpStack.DLL
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:12    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\UIToolTip.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:14    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\Update.exe
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.exe

2010-10-24 16:15:15    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\VideoCapture.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:15    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\VideoCodec1.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:15    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\VideoDecode2.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:16    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\VideoEncode2.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:16    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\gdiplus.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:17    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ChatRoom\CapSreen.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:18    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ChatRoom\ChatRoomClient.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:18    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ChatRoom\ChatRoomUI.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:19    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ChatRoom\UIToolTip.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:19    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ChatRoom\VcrMediaLib.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:19    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ChatRoom\VolumeCtrl.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:58    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\ImageOle.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:58    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\MFC71u.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:58    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\msvcp71.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:15:58    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\msvcr71.dll
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.dll

2010-10-24 16:16:04    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序\可乐视频社区
触发规则:所有程序规则->Documents and Settings文件夹设置（二）->?:\Documents and Settings\*\*菜单\*

2010-10-24 16:16:07    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序\可乐视频社区\可乐视频社区.lnk
触发规则:所有程序规则->Documents and Settings文件夹设置（二）->?:\Documents and Settings\*\*菜单\程序\*.lnk

2010-10-24 16:16:08    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Documents and Settings\Administrator\「开始」菜单\程序\可乐视频社区\卸载可乐视频社区.lnk
触发规则:所有程序规则->Documents and Settings文件夹设置（二）->?:\Documents and Settings\*\*菜单\程序\*.lnk

2010-10-24 16:16:10    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Documents and Settings\Administrator\桌面\可乐视频社区.lnk
触发规则:所有程序规则->Documents and Settings文件夹设置（二）->?:\Documents and Settings\*\桌面\*.lnk

2010-10-24 16:16:10    创建文件      操作:使用任务隔离区操作
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\可乐视频社区.lnk
触发规则:所有程序规则->Documents and Settings文件夹设置（一）->?:\Documents and Settings\*\Application Data\Microsoft\Internet Explorer\Quick Launch\*.lnk

2010-10-24 16:16:15    创建文件      操作:允许
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Program Files\Kele55\uninst.exe
触发规则:所有程序规则->%ProgramFiles%文件夹设置->%ProgramFiles%\*.exe

2010-10-24 16:16:16    创建文件      操作:使用任务隔离区操作
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\kele55setup.exe
文件路径:C:\Documents and Settings\All Users\「开始」菜单\程序\启动\可乐视频社区.lnk
触发规则:所有程序规则->Documents and Settings文件夹设置（二）->?:\Documents and Settings\*\*菜单\程序\启动\*.lnk

▕、尕寶′

小A没报

歌歌的人

s8706042

已上報趨勢~