Changeset 1510

Show
Ignore:
Timestamp:
04/09/08 22:01:40 (1 month ago)
Author:
kindlund
Message:

False positive (d006934159767a7fc28160d5d1).

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl

    r1509 r1510  
    304304+   Delete  C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\.+\\Application Data\\.+ 
    305305+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\.+\\Application Data\\Microsoft\\CryptnetUrlCache.* 
     306+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\Documents and Settings\\All Users