Changeset 1525

Show
Ignore:
Timestamp:
04/16/08 15:16:52 (4 weeks ago)
Author:
kindlund
Message:

False positive - (29fffdfc3dcc7eb6cdfa65609c).

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • honeyclient/trunk/thirdparty/capture-mod/FileMonitor.exl

    r1524 r1525  
    322322+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\SoftwareDistribution\\Download.* 
    323323+   Delete  C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\SoftwareDistribution\\Download.* 
     324+   Write   C:\\WINDOWS\\system32\\svchost\.exe C:\\WINDOWS\\system32\\wbem 
    324325 
    325326#### HONEYCLIENT AUTO EXCLUDE SCRIPT - IE7 accessing live.com