5	2008-09-05 11:29	C:\Program Files\AST\update.exe	218.93.16.104	80	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	61.152.116.95	8080	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	211.144.68.46	8080	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	220.162.244.166	80	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	220.162.244.172	80	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	211.144.87.122	8080	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	211.152.56.139	8080	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	61.155.5.126	80	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	202.65.202.222	88	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	222.222.65.70	80	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	60.10.58.151	80	允許
5	2008-09-05 11:29	C:\Program Files\AST\update.exe	221.231.139.136	80	允許
5	2008-09-05 11:30	C:\Program Files\AST\update.exe	220.162.244.172	80	允許
5	2008-09-05 11:30	C:\Program Files\AST\update.exe	202.65.202.222	88	允許
5	2008-09-05 11:31	C:\Program Files\AST\update.exe	61.155.5.126	80	允許
5	2008-09-05 11:31	C:\Program Files\AST\update.exe	222.222.65.70	80	允許
5	2008-09-05 11:31	C:\Program Files\AST\update.exe	60.10.58.151	80	允許
5	2008-09-05 11:31	C:\Program Files\AST\update.exe	218.93.16.104	80	允許
5	2008-09-05 11:31	C:\Program Files\AST\update.exe	221.231.139.136	80	允許
5	2008-09-05 11:31	C:\Program Files\AST\update.exe	211.152.56.139	8080	允許
5	2008-09-05 11:31	C:\Program Files\AST\update.exe	211.144.68.46	8080	允許
6	2008-09-05 11:34	dlview32.exe	C:\DynaDoc\	C:\Program Files\Internet Explorer\IEXPLORE.EXE	允許
5	2008-09-05 11:32	C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe	163.30.71.5	3128	允許
5	2008-09-05 11:33	C:\Program Files\Internet Explorer\IEXPLORE.EXE	163.30.71.5	3128	允許
5	2008-09-05 11:38	C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe	163.30.71.5	3128	允許
6	2008-09-05 11:39	QuickTimeInstallerAdmin.exe	C:\Temp\IXP622.TMP\	C:\WINXP2\system32\MsiExec.exe	允許
6	2008-09-05 11:39	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 11:39	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 11:41	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 11:41	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
3	2008-09-05 11:46:28	HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main	"Search Page" 被修改. 修改前值:http://www.google.com    修改後值:http://163.30.71.1/.	IE插件，一般流氓軟件和第三方IE工具會修改此鍵值。
6	2008-09-05 11:46	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 11:46	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 11:54	verclsid.exe	C:\WINXP2\system32\	C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe	允許
6	2008-09-05 11:54	verclsid.exe	C:\WINXP2\system32\	C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe	允許
3	2008-09-05 13:55:00	HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search	"SearchAssistant" 被修改. 修改前值:http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm    修改後值:http://www.google.com/ie.	IE插件，一般流氓軟件和第三方IE工具會修改此鍵值。
6	2008-09-05 13:59	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 13:59	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 17:17	RealPlayer11GOLD_tw.exe	C:\Documents and Settings\user\桌面\	C:\Program Files\Internet Explorer\IEXPLORE.EXE	允許
3	2008-09-05 17:18:59	HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run	創建了值: "HP Network Registry Agent"	註冊表啟動項目，發現此處被修改要留心是否是後門木馬。
3	2008-09-05 17:18:59	HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run	刪除了值: "TkBellExe"	註冊表啟動項目，發現此處被修改要留心是否是後門木馬。
3	2008-09-05 17:18:59	HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run	刪除了值: "HP Network Registry Agent"	註冊表啟動項目，發現此處被修改要留心是否是後門木馬。
3	2008-09-05 17:18:59	HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run	創建了值: "TkBellExe"	註冊表啟動項目，發現此處被修改要留心是否是後門木馬。
6	2008-09-05 17:19	regedit.exe	C:\WINXP2\	C:\Documents and Settings\user\桌面\RealPlayer11GOLD_tw.exe	允許
6	2008-09-05 17:19	mergedt.exe	C:\Temp\~rnsetup\	C:\Documents and Settings\user\桌面\RealPlayer11GOLD_tw.exe	允許
6	2008-09-05 17:19	defenc.exe	C:\Temp\~rnsetup\	C:\Documents and Settings\user\桌面\RealPlayer11GOLD_tw.exe	允許
6	2008-09-05 17:19	realplay_mountpoints.exe	C:\Program Files\Real\RealPlayer\	C:\Documents and Settings\user\桌面\RealPlayer11GOLD_tw.exe	允許
6	2008-09-05 17:19	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 17:19	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 17:23	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
6	2008-09-05 17:23	verclsid.exe	C:\WINXP2\system32\	C:\WINXP2\Explorer.EXE	允許
