|
|
行为描述: 修改原系统的EXE文件
详情信息:
C:\Documents and Settings\Administrator\Application Data\SogouExplorer\Extension\com.sogou.snapTaker\0.4.2\npprintscreen.dll
行为描述: 设置特殊文件属性
详情信息:
C:\Program Files\QQExternal.exe
行为描述: 直接获取CPU时钟
详情信息:
EAX = 0x88ae5a35, EDX = 0x000000b8
EAX = 0x88ae5a81, EDX = 0x000000b8
EAX = 0x88ae5acd, EDX = 0x000000b8
EAX = 0x88ae5b19, EDX = 0x000000b8
EAX = 0x88ae5b65, EDX = 0x000000b8
EAX = 0x88ae5bb1, EDX = 0x000000b8
EAX = 0x88ae5bfd, EDX = 0x000000b8
EAX = 0x88ae5c49, EDX = 0x000000b8
EAX = 0x88ae5c95, EDX = 0x000000b8
EAX = 0x88ae5ce1, EDX = 0x000000b8
行为描述: 设置特殊文件夹属性
详情信息:
C:\DiskX\RECYCLER
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5
C:\Documents and Settings\Administrator\Local Settings\History
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5
C:\Documents and Settings\Administrator\Cookies
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\WebSlices~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Feeds Cache
C:\Documents and Settings\Administrator\IECompatCache
行为描述: 修改注册表_启动项
详情信息:
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
|
|