XYZ.EXE

显示全部楼层 · 发表于 2011-1-8 12:59:04

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Desktop
值: C:\Documents and Settings\All Users\桌面
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\C\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\J\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\K\BaseClass
值: Drive
规则: [注册表]*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Start Menu
值: C:\Documents and Settings\All Users\「开始」菜单
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Programs
值: C:\Documents and Settings\All Users\「开始」菜单\程序
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Startup
值: C:\Documents and Settings\All Users\「开始」菜单\程序\启动
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Desktop
值: C:\Documents and Settings\Administrator\桌面
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData
值: C:\Documents and Settings\Administrator\Application Data
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\PrintHood
值: C:\Documents and Settings\Administrator\PrintHood
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Templates
值: C:\Documents and Settings\Administrator\Templates
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Fonts
值: C:\WINDOWS\Fonts
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\NetHood
值: C:\Documents and Settings\Administrator\NetHood
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Start Menu
值: C:\Documents and Settings\Administrator\「开始」菜单
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\SendTo
值: C:\Documents and Settings\Administrator\SendTo
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Recent
值: C:\Documents and Settings\Administrator\Recent
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Startup
值: C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Favorites
值: C:\Documents and Settings\Administrator\Favorites
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

2011-01-08 12:55:40 修改注册表值阻止
进程: c:\documents and settings\administrator\桌面\xyz.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Programs
值: C:\Documents and Settings\Administrator\「开始」菜单\程序
规则: [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*

显示全部楼层 · 发表于 2011-1-8 13:45:29

miss,to pandalabs

显示全部楼层 · 发表于 2011-1-8 14:15:00

扫描用时：00:00:39
扫描类型：右键扫描
扫描文件总数：1
威胁总数：1

扫描选项
----------------------
扫描所有文件：是
扫描压缩包：是
发现病毒处理方式：通知用户
扫描系统内存：是
扫描磁盘引导区：是
扫描 Rootkit：是
使用QVM启发式引擎：是

扫描内容
----------------------
D:\My Documents\Downloads\XYZ.EXE

白名单设置
----------------------

扫描结果
======================
病毒扫描结果
----------------------
D:\My Documents\Downloads\XYZ.EXE 木马程序(Trojan.Agent.VB.BRZ) 未处理

显示全部楼层 · 发表于 2011-1-8 14:41:09

诺顿杀

显示全部楼层 · 发表于 2011-1-8 14:48:49

过小红伞 AVG kill

显示全部楼层 · 发表于 2011-1-8 14:59:32

瑞星报毒

显示全部楼层 · 发表于 2011-1-8 16:04:57

IK悲剧~

显示全部楼层 · 发表于 2011-1-8 21:50:13

"";"C:\Users\Administrator\Downloads\XYZ.rar:\XYZ.EXE";"特洛伊木马 Clicker.AOGT";"已移至病毒库"

显示全部楼层 · 发表于 2011-1-8 23:14:08

已上報趨勢嚕~~~

显示全部楼层 · 发表于 2011-1-8 23:16:11

过红伞小 a

[可疑文件] XYZ.EXE

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块