我爱辅助论坛

标题: 求助 [打印本页]

作者: 艾玛电动车    时间: 2018-2-27 15:56
标题: 求助
有毒吗、
行为描述:设置特殊文件属性
详情信息:
C:\System32\svchcst.exe
C:\Documents and Settings\Administrator\Application Data\Microsoft\VBS3.vbs
行为描述:设置特殊文件夹属性
详情信息:
C:\System32
行为描述:获取TickCount值
详情信息:
TickCount = 221797, SleepMilliseconds = 1.
TickCount = 222297, SleepMilliseconds = 1.
TickCount = 222797, SleepMilliseconds = 1.
TickCount = 223297, SleepMilliseconds = 1.
TickCount = 223797, SleepMilliseconds = 1.
TickCount = 224297, SleepMilliseconds = 1.
TickCount = 224797, SleepMilliseconds = 1.
TickCount = 225297, SleepMilliseconds = 1.
TickCount = 225797, SleepMilliseconds = 1.
TickCount = 226297, SleepMilliseconds = 1.
TickCount = 226797, SleepMilliseconds = 1.
TickCount = 227297, SleepMilliseconds = 1.
TickCount = 227704, SleepMilliseconds = 1.
TickCount = 227797, SleepMilliseconds = 1.
TickCount = 228297, SleepMilliseconds = 1.
行为描述:修改注册表_启动项
详情信息:
\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Winder



作者: 艾玛电动车    时间: 2018-2-27 15:58
不小心启动了
作者: 艾玛电动车    时间: 2018-2-27 16:04
https://habo.qq.com/file/showdetail?pk=ADMGb11oB2QIOls9#baseinfo
作者: .Best    时间: 2018-2-27 16:08
应该没什么大问题,建议你以后要用辅助开影子系统吧,影子系统内存占用也不是很大
作者: .Best    时间: 2018-2-27 16:10
实在不放心,就杀毒下吧




欢迎光临 我爱辅助论坛 (https://www.52fzwg.com/) Powered by Discuz! X3.4