双击了样本区里的病毒，360卫士没反应？

derrick_goi

Tron 发表于 2011-2-11 01:48
启动目录如果没文件就没中

启动目录是没文件的，所以我可以放心了

傲尔

2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Programs        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\「开始」菜单\程序
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Personal        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: D:\My Documents
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Favorites        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: D:\My Documents\Favorites
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Startup        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\「开始」菜单\程序\启动
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Recent        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Recent
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\SendTo        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\SendTo
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Start Menu        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\「开始」菜单
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\My Music        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: D:\My Documents\My Music
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\My Video        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: D:\My Documents\My Videos
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Desktop        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\桌面
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\NetHood        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\NetHood
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Fonts        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\WINDOWS\Fonts
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Templates        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Templates
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Start Menu        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\「开始」菜单
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Programs        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\「开始」菜单\程序
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Startup        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\「开始」菜单\程序\启动
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Desktop        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\桌面
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Application Data
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\PrintHood        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\PrintHood
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Local AppData        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Local Settings\Application Data
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Favorites        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\Favorites
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cookies        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Cookies
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\History        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Local Settings\History
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common AppData        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\Application Data
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\My Pictures        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: D:\My Documents\My Pictures
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Templates        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\Templates
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Documents        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\Documents
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Administrative Tools        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\「开始」菜单\程序\管理工具
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Administrative Tools        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值:
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\CommonMusic        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\Documents\My Music
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\CommonPictures        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\Documents\My Pictures
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\CommonVideo        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\All Users\Documents\My Videos
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        修改注册表值        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\CD Burning        阻止        [注册表组]注册表保护 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders*        值: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\CD Burning
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        创建文件        C:\Documents and Settings\Administrator\Local Settings\Temp\1.exe        阻止        [文件]*       
2011-2-11 05:56:30        d:\downloads\测试\测试.exe        创建文件        C:\Documents and Settings\Administrator\Local Settings\Temp\1.exe        阻止        [文件]*       
2011-2-11 05:56:33        d:\downloads\测试\测试.exe        创建文件        C:\Documents and Settings\Administrator\Local Settings\Temp\1.exe        阻止        [文件]*       
2011-2-11 05:56:33        d:\downloads\测试\测试.exe        创建文件        C:\Documents and Settings\Administrator\Local Settings\Temp\1.exe        阻止        [文件]*       

傲尔

我开SD,用MD进行测试的，TO EAV的这个病毒

-oAo-

主动防御对没病毒行为的都不报，运行后什么病毒行为吗？

pigiam

属猫的耗子 发表于 2011-2-11 01:42
不联网的360杯具了。

不联网又哪来什么病毒那

jun6832

有胆识

左手

这样？

雨之神

楼主胆量真好

comicwm

回复 7楼 Tron 的帖子

7.7beta 开始菜单的启动里多了个启动项  名字忘了

leisong

7.6.2001拦截