Changeset 1508
- Timestamp:
- 04/09/08 20:12:22 (6 months ago)
- Files:
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl
r1499 r1508 299 299 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\WinSxS 300 300 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\ 301 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\Temp\\WGANotify\.settings 302 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\system32\\config 301 303 + Write C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\.+\\Application Data\\.+ 302 304 + Delete C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\.+\\Application Data\\.+
