Search the Community

Nazwa dziennika:Application Źródło: HitmanPro.Alert Data: 16.07.2016 22:39:26 Identyfikator zdarzenia:911 Kategoria zadania:(9) Poziom: Błędy Słowa kluczowe:Klasyczny Użytkownik: Nie dotyczy Komputer: idea-PCZ-580 Opis: Mitigation Lockdown Platform 10.0.10586/x64 06_3a PID 3840 Application C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe Filename C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe Created By C:\Program Files\WinRAR\WinRAR.exe Process Trace 1 C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe [3840] 2 C:\Program Files\WinRAR\WinRAR.exe [11056] "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\j\AppData\Local\Temp\Update-ee281bac-bcd4-4549-8ed8-2900a53bb6f1\EnpassPackage-5.2.1.zip" 3 C:\Program Files (x86)\Enpass\Enpass.exe [7608] "C:\Program Files (x86)\Enpass\Enpass.exe" startWithTray 4 C:\Windows\explorer.exe [6192] 5 C:\Windows\System32\userinit.exe [2284] 6 C:\Windows\System32\winlogon.exe [5276] winlogon.exe 7 C:\Windows\System32\smss.exe [3160] \SystemRoot\System32\smss.exe 000000ec 00000074 Kod XML zdarzenia: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="HitmanPro.Alert" /> <EventID Qualifiers="0">911</EventID> <Level>2</Level> <Task>9</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2016-07-16T20:39:26.725800700Z" /> <EventRecordID>29146</EventRecordID> <Channel>Application</Channel> <Computer>idea-PCZ-580</Computer> <Security /> </System> <EventData> <Data>C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe</Data> <Data>Lockdown</Data> <Data>Mitigation Lockdown Platform 10.0.10586/x64 06_3a PID 3840 Application C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe Filename C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe Created By C:\Program Files\WinRAR\WinRAR.exe Process Trace 1 C:\Users\j\AppData\Local\Temp\Rar$EXa0.250\EnpassSetup-5.2.1.exe [3840] 2 C:\Program Files\WinRAR\WinRAR.exe [11056] "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\j\AppData\Local\Temp\Update-ee281bac-bcd4-4549-8ed8-2900a53bb6f1\EnpassPackage-5.2.1.zip" 3 C:\Program Files (x86)\Enpass\Enpass.exe [7608] "C:\Program Files (x86)\Enpass\Enpass.exe" startWithTray 4 C:\Windows\explorer.exe [6192] 5 C:\Windows\System32\userinit.exe [2284] 6 C:\Windows\System32\winlogon.exe [5276] winlogon.exe 7 C:\Windows\System32\smss.exe [3160] \SystemRoot\System32\smss.exe 000000ec 00000074 </Data> </EventData> </Event>