http://www.scta.gov.cn/(四川旅游政务网)[挂马][已检测 by 是昔流芳]

显示全部楼层 · 发表于 2011-5-5 11:28:53

回复 10楼 cninguy 的帖子

好吧，你不是说要去教计算机？怎么在玩这个…

显示全部楼层 · 发表于 2011-5-5 11:30:02

回复 11楼 ˇじ☆ve塗的帖子

你以为整节课都要上课啊

显示全部楼层 · 发表于 2011-5-5 12:31:24

回复 12楼 cninguy 的帖子

那是当然啦、、、

显示全部楼层 · 发表于 2011-5-5 19:38:41

Program Guard: lzg.exe -> rundll32.exe 2011/5/5 19:35 Allowed C:\Users\xxxx\Desktop\lzg.exe(2588) wants to start C:\Windows\SysWOW64\rundll32.exe(3376)
Program Guard: 1304595218.dat 2011/5/5 19:35 Allowed C:\Users\xxxx\Desktop\lzg.exe -> C:\Users\xxxx\AppData\Local\Temp\1304595218.dat
Program Guard: lzg.exe -> rundll32.exe 2011/5/5 19:34 Allowed C:\Users\xxxx\Desktop\lzg.exe(2588) wants to start C:\Windows\system32\rundll32.exe
Program Guard: lzg.exe -> YUksuser.dll 2011/5/5 19:34 Blocked C:\Users\xxxx\Desktop\lzg.exe wants to delete executable file C:\Windows\SysWOW64\YUksuser.dll
Program Guard: lzg.exe -> sc.exe 2011/5/5 19:33 Blocked C:\Users\xxxx\Desktop\lzg.exe(2588) wants to start C:\Windows\SysWOW64\sc.exe(2220)
Program Guard: sc.exe 2011/5/5 19:33 Trusted C:\Windows\SysWOW64\sc.exe was trusted by dictionary.
Program Guard: lzg.exe -> net.exe 2011/5/5 19:33 Blocked C:\Users\xxxx\Desktop\lzg.exe(2588) wants to start C:\Windows\SysWOW64\net.exe(5096)
Program Guard: net.exe 2011/5/5 19:33 Trusted C:\Windows\SysWOW64\net.exe was trusted by dictionary.
Program Guard: lzg.exe 2011/5/5 19:33 Allowed C:\Windows\explorer.exe -> C:\Users\xxxx\Desktop\lzg.exe

显示全部楼层 · 发表于 2011-5-6 09:11:10

QQ电脑管家拦截：

显示全部楼层 · 发表于 2011-5-6 12:34:41

搜狗浏览器，微点主防对lzg.exe没反应

[其它] http://www.scta.gov.cn/(四川旅游政务网)[挂马][已检测 by 是昔流芳]