Sinowal/Mebroot，hxxp://nbcidbanncz.com/index.php?tp=001e4bb7b4d7333d

a256886572008

2011-11-08 11:45:39   C:\Documents and Settings\Roger\Local Settings\Temp\0.5819983232610398exe   Sandboxed As   Partially Limited   

2011-11-08 11:45:48   C:\Documents and Settings\Roger\Local Settings\Temp\0.5819983232610398exe   Modify Key   HKLM\SYSTEM\ControlSet001\Control\Session Manager\PendingFileRenameOperations   

2011-11-08 11:45:48   C:\Documents and Settings\Roger\Local Settings\Temp\0.5819983232610398exe   Direct Disk Access   \Device\Harddisk0\DR0   

2011-11-08 11:46:00   C:\Documents and Settings\Roger\Local Settings\Temp\431.tmp   Sandboxed As   Partially Limited   

2011-11-08 11:46:04   C:\Documents and Settings\Roger\Local Settings\Temp\432.tmp   Sandboxed As   Partially Limited   

2011-11-08 11:46:08   C:\Documents and Settings\Roger\Local Settings\Temp\431.tmp   Modify File   C:\WINDOWS\system32\drivers\3t4tgxp3.sys   

2011-11-08 11:46:08   C:\Documents and Settings\Roger\Local Settings\Temp\431.tmp   Modify Key   HKLM\SYSTEM\ControlSet???\Services\3t4tgxp3.sys   

2011-11-08 11:46:13   C:\Documents and Settings\Roger\Local Settings\Temp\431.tmp   Modify Key   HKLM\SYSTEM\ControlSet001\Services\3t4tgxp3.sys   

2011-11-08 11:46:13   C:\Documents and Settings\Roger\Local Settings\Temp\431.tmp   Modify Key   HKLM\SYSTEM\ControlSet001\Services\{9119607D3718B963F8EA7C3894894D9F}   

訪問網路



常駐進程

下載地址：
http://www.vdisk.cn/down/index/9092065A6919

dalianjhc1986

论坛附件有问题 上传网盘

夜ㄝ殇

毒霸kill 3x

a256886572008

dalianjhc1986 发表于 2011-11-8 11:56
论坛附件有问题 上传网盘

標題有網址，可以裝舊版 java，進去下載

ADSLgg

红伞kill

倾枫锝渔♂

卡巴 全 miss~~~~~~~~~~~

dalianjhc1986

to
eset

jayavira

hitman kill1x

xyc5238207

费尔无压力！！

3801187