thimble.exe

xcffl

很无聊的游戏，真的是毒么。。。

xcffl

2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\WINDOWS\system32\imm32.dll C:\WINDOWS\system32\imm32.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\WINDOWS\system32\imm32.dll C:\WINDOWS\system32\imm32.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\Program Files\Common Files\Kingsoft\kiscommon\security\ksde\kisdcom.dll C:\Program Files\Common Files\Kingsoft\kiscommon\security\ksde\kisdcom.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\WINDOWS\system32\uxtheme.dll C:\WINDOWS\system32\uxtheme.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\Program Files\KSafe\ksfmon.dll C:\Program Files\KSafe\ksfmon.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\Program Files\Common Files\Kingsoft\kiscommon\kwsui.dll C:\Program Files\Common Files\Kingsoft\kiscommon\kwsui.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\Program Files\Common Files\Kingsoft\kiscommon\kswebshield.dll C:\Program Files\Common Files\Kingsoft\kiscommon\kswebshield.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe创建注册表键值HKEY_USERS\S-1-5-21-1935655697-1326574676-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings HKEY_USERS\S-1-5-21-1935655697-1326574676-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\WINDOWS\system32\MSCTF.dll C:\WINDOWS\system32\MSCTF.dll
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe加载库文件C:\WINDOWS\system32\MSCTFIME.IME C:\WINDOWS\system32\MSCTFIME.IME
2011-05-08 17:57:07 C:\Documents and Settings\xcffl\桌面\thimble[1].exe发送消息C:\Program Files\Common Files\Kingsoft\kiscommon\ksandbox.exe C:\Program Files\Common Files\Kingsoft\kiscommon\ksandbox.exe
2011-05-08 17:57:17 C:\Documents and Settings\xcffl\桌面\thimble[1].exe发送消息C:\WINDOWS\explorer.exe C:\WINDOWS\explorer.exe
2011-05-08 17:57:17 C:\Documents and Settings\xcffl\桌面\thimble[1].exe发送消息C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\ctfmon.exe
2011-05-08 17:57:43 C:\Documents and Settings\xcffl\桌面\thimble[1].exe发送消息C:\Program Files\Common Files\Kingsoft\kiscommon\ksandbox.exe C:\Program Files\Common Files\Kingsoft\kiscommon\ksandbox.exe
2011-05-08 17:58:01 C:\Documents and Settings\xcffl\桌面\thimble[1].exe发送消息C:\WINDOWS\explorer.exe C:\WINDOWS\explorer.exe
2011-05-08 17:58:01 C:\Documents and Settings\xcffl\桌面\thimble[1].exe发送消息C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\ctfmon.exe

littlefritz

Micropoint Proavtive Defence Sofeware 2.0

Found Nothing