感染全盘EXE的DOWNLOADER全力出击,秒杀各路杀软!

jehovah_king

2008-2-4 8:57:37        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Run        Program Files        43 00 3a 00 5c 00 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 5c 00 73 00 79 00 73 00 74 00 65 00 6d 00 33 00 32 00 5c 00 53 00 50 00 30 00 30 00 4c 00 56 00 2e 00 65 00 78 00 65 00 00 00 00 00 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 34 00 aa e2 00 00 34 00 aa e2 00 00 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 00 76 3f 00 3c 00 02 00 25 00 00 00 24 00 4c e2 00 00 77 00 04 00 57 8a 3f 00 22 00 02 00 09 68 1c 8b 55 00 2a 60 77 00 3f 00 22 00 02 00 44 00 b4 97 00 00 cc 69 00 89 3c 00 02 00 25 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 84 00 89 3f 00 7f 8b 3e 00 43 00 40 00 00 00 9f 5c 3f 00 72 6c 00 89 fe 68 00 89 00 00 00 00 00 00 00 00 05 76 3f 00 67 00 54 00 40 00 00 00 f5 f8 f5 f8 f5 f8 f5 f8 51 6a 3f 00 24 00 c7 56 77 00 74 00 01 00 29 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 74 92 3f 00 3e 00 43 00 40 00 00 00 b3 77 88 5f 00 00 00 00 00 00 00 00 8e 61 3f 00 3e 00 43 00 40 00 00 00 00 00 4c e2 00 00 e9 84 00 89 00 00 3b 5e 7f 00 00 00 4c e2 00 00 4a 00 01 58 77 00 89 53 3f 00 1a 00 01 58 77 00 00 00 00 00 00 00 00 00 74 00 01 00 29 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00        未结束的Unicode字符串        修改        检测到
2008-2-4 8:56:12        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Run        Internat        43 00 3a 00 5c 00 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 5c 00 73 00 79 00 73 00 74 00 65 00 6d 00 33 00 32 00 5c 00 6d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 65 00 78 00 65 00 00 00 14 00 00 00 00 00 00 00 14 00 00 00 3f 00 14 00 00 00 d8 e7 12 00 00 00 3d 00 99 9e 7c 00 7a 79 12 00 00 00 18 00 60 98 7c 00 38 00 07 00 22 64 f5 f8 f5 f8 f5 f8 f5 f8 32 00 07 00 22 64 3f 00 22 64 3f 00 22 64 00 00 00 00 00 00 00 00 20 00 3f 00 00 00 8d e2 12 00 00 00 34 00 00 00 00 00 3f 00 3f 00 00 00 6c 00 99 9e 7c 00 28 00 3f 00 00 00 00 00 00 00 47 00 00 00 32 00 07 00 22 64 06 00 00 00 00 00 00 00 3f 00 47 00 00 00 00 00 00 00 47 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 78 00 99 9e 7c 00 44 00 3f 00 00 00 18 00 60 98 7c 00 38 00 07 00 22 64 f5 f8 f5 f8 f5 f8 f5 f8 32 00 07 00 22 64 3f 00 22 64 3f 00 22 64 1f 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 38 00 00 00 3f 00 0c 00 42 00 3f 00 00 00 00 00 02 00 00 00 00 00 00 00 28 00 3f 00 00 00 5e 91 24 00 7d 00 19 5e 12 00 00 00 dd 6e 12 00 00 00 00 00 00 00 14 00 00 00 32 00 07 00 22 64 d9 e7 12 00 00 00 00 00 00 00 14 00 00 00 32 00 07 00 22 64 05 00 00 00 00 00 00 00 78 00 07 00 14 00 00 00 50 83 12 00 00 00 00 00 00 00 47 00 00 00        未结束的Unicode字符串        创建        检测到
2008-2-4 8:56:12        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Run        Internat        43 00 3a 00 5c 00 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 5c 00 73 00 79 00 73 00 74 00 65 00 6d 00 33 00 32 00 5c 00 6d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 65 00 78 00 65 00 00 00 14 00 00 00 00 00 00 00 14 00 00 00 3f 00 14 00 00 00 d8 e7 12 00 00 00 3d 00 99 9e 7c 00 7a 79 12 00 00 00 18 00 60 98 7c 00 38 00 07 00 22 64 f5 f8 f5 f8 f5 f8 f5 f8 32 00 07 00 22 64 3f 00 22 64 3f 00 22 64 00 00 00 00 00 00 00 00 20 00 3f 00 00 00 8d e2 12 00 00 00 34 00 00 00 00 00 3f 00 3f 00 00 00 6c 00 99 9e 7c 00 28 00 3f 00 00 00 00 00 00 00 47 00 00 00 32 00 07 00 22 64 06 00 00 00 00 00 00 00 3f 00 47 00 00 00 00 00 00 00 47 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 78 00 99 9e 7c 00 44 00 3f 00 00 00 18 00 60 98 7c 00 38 00 07 00 22 64 f5 f8 f5 f8 f5 f8 f5 f8 32 00 07 00 22 64 3f 00 22 64 3f 00 22 64 1f 00 00 00 00 00 00 00 21 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 38 00 00 00 3f 00 0c 00 42 00 3f 00 00 00 00 00 02 00 00 00 00 00 00 00 28 00 3f 00 00 00 5e 91 24 00 7d 00 19 5e 12 00 00 00 dd 6e 12 00 00 00 00 00 00 00 14 00 00 00 32 00 07 00 22 64 d9 e7 12 00 00 00 00 00 00 00 14 00 00 00 32 00 07 00 22 64 05 00 00 00 00 00 00 00 78 00 07 00 14 00 00 00 50 83 12 00 00 00 00 00 00 00 47 00 00 00        未结束的Unicode字符串        创建        被允许　　
2008-2-4 8:56:16        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Run        Program Files        43 00 3a 00 5c 00 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 5c 00 73 00 79 00 73 00 74 00 65 00 6d 00 33 00 32 00 5c 00 53 00 50 00 30 00 30 00 4c 00 56 00 2e 00 65 00 78 00 65 00 00 00 00 00 18 00 60 98 7c 00 38 00 07 00 22 64 f5 f8 f5 f8 f5 f8 f5 f8 32 00 07 00 22 64 00 00 00 00 00 00 00 00 3f 00 22 64 30 00 3f 00 00 00 28 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 36 99 99 8d 20 00 3f 00 00 00 3f 00 0c 00 42 00 0a 00 00 00 00 00 00 00 3f 00 44 00 01 00 05 00 40 00 00 00 ac 20 01 00 00 00 00 00 00 00 3f 00 0b 00 42 00 3f 00 00 00 00 00 04 00 00 00 00 00 00 00 3f 00 00 00 00 00 0f 00 00 00 00 00 00 00 3f 00 00 00 00 00 45 00 09 00 22 64 4e 00 09 00 22 64 7c 00 3f 00 00 00 24 00 00 00 02 00 00 00 68 00 3f 00 00 00 02 00 00 00 00 00 00 00 09 60 22 64 00 00 ac 20 3f 00 05 00 10 00 be 62 10 00 3f 00 00 00 00 00 00 00 00 00 00 00 1c 57 12 00 00 00 18 00 60 98 7c 00 70 00 09 00 22 64 b7 51 a4 6a 6f 00 3e 00 22 64 62 00 3e 00 22 64 08 00 02 00 00 00 00 00 20 00 3f 00 00 00 8d e2 12 00 00 00 3f 00 00 00 00 00 3f 00 47 00 00 00 40 00 06 00 47 00 00 00 10 00 00 00 00 00 00 00 78 00 01 00 14 00 00 00 72 00 3f 00 00 00 18 00 00 00 00 00 00 00 4f 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 3f 00 3f 00 04 00 00 00 3f 00 00 00 00 00 00 00 00 00 12 00 00 00 14 00 00 00 04 00 00 00 3f 00 00 00 00 00 00 00 00 00        未结束的Unicode字符串        创建        检测到
2008-2-4 8:56:16        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Run        Program Files        43 00 3a 00 5c 00 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 5c 00 73 00 79 00 73 00 74 00 65 00 6d 00 33 00 32 00 5c 00 53 00 50 00 30 00 30 00 4c 00 56 00 2e 00 65 00 78 00 65 00 00 00 00 00 18 00 60 98 7c 00 38 00 07 00 22 64 f5 f8 f5 f8 f5 f8 f5 f8 32 00 07 00 22 64 00 00 00 00 00 00 00 00 3f 00 22 64 30 00 3f 00 00 00 28 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 36 99 99 8d 20 00 3f 00 00 00 3f 00 0c 00 42 00 0a 00 00 00 00 00 00 00 3f 00 44 00 01 00 05 00 40 00 00 00 ac 20 01 00 00 00 00 00 00 00 3f 00 0b 00 42 00 3f 00 00 00 00 00 04 00 00 00 00 00 00 00 3f 00 00 00 00 00 0f 00 00 00 00 00 00 00 3f 00 00 00 00 00 45 00 09 00 22 64 4e 00 09 00 22 64 7c 00 3f 00 00 00 24 00 00 00 02 00 00 00 68 00 3f 00 00 00 02 00 00 00 00 00 00 00 09 60 22 64 00 00 ac 20 3f 00 05 00 10 00 be 62 10 00 3f 00 00 00 00 00 00 00 00 00 00 00 1c 57 12 00 00 00 18 00 60 98 7c 00 70 00 09 00 22 64 b7 51 a4 6a 6f 00 3e 00 22 64 62 00 3e 00 22 64 08 00 02 00 00 00 00 00 20 00 3f 00 00 00 8d e2 12 00 00 00 3f 00 00 00 00 00 3f 00 47 00 00 00 40 00 06 00 47 00 00 00 10 00 00 00 00 00 00 00 78 00 01 00 14 00 00 00 72 00 3f 00 00 00 18 00 00 00 00 00 00 00 4f 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 3f 00 3f 00 04 00 00 00 3f 00 00 00 00 00 00 00 00 00 12 00 00 00 14 00 00 00 04 00 00 00 3f 00 00 00 00 00 00 00 00 00        未结束的Unicode字符串        创建        被允许　　
2008-2-4 8:56:20        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL        CheckedValue        0x00000000 (0)        32位数字        创建        检测到
2008-2-4 8:56:20        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL        CheckedValue        0x00000000 (0)        32位数字        创建        被允许　　
2008-2-4 8:57:31        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Run        Internat        43 00 3a 00 5c 00 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 5c 00 73 00 79 00 73 00 74 00 65 00 6d 00 33 00 32 00 5c 00 6d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 65 00 78 00 65 00 00 00 be 62 74 00 62 00 be 62 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 3d 61 3f 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 be 62 3f 00 be 62 88 e2 3f 00 01 00 00 00 00 00 00 00 30 00 89 9f 00 00 3f 00 22 64 00 00 00 00 be 62 00 00 00 00 00 00 00 00 67 79 3f 00 5a 6e 22 64 00 00 00 00 be 62 b1 63 3f 00 9e 5c 3f 00 9e 5c 3f 00 b1 63 3f 00 3f 00 06 6d 7c 00 69 4e a4 6a 18 97 22 64 3f 00 64 00 73 00 3f 00 64 00 73 00 f5 f8 f5 f8 00 00 00 00 00 00 3b 5e 7f 00 3f 00 24 00 00 00 8c 85 68 00 74 00 34 00 39 00 be 62 00 00 00 00 04 00 00 00 00 00 2f 00 24 00 00 00 76 75 00 89 1d 00 f1 56 77 00 3c 00 02 00 25 00 00 00 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 76 3f 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 76 3f 00 0c 76 3f 00 3f 00 00 00 00 00 64 00 6f 00 77 00 6e 00 49 00 6e 00 50 00 72 00 6f 00 67 00 72 00 65 00 73 00 73 00 00 00 73 00 00 00 00 00 00 00 00 00 67 79 3f 00 1c 00 00 00 00 00 00 00 7f 5a 3f 00 25 4f 3f 00 cc 69 00 89 3c 00 02 00 25 00 00 00        未结束的Unicode字符串        修改        检测到
2008-2-4 8:57:31        C:\Sandbox\jehovah_king\DefaultBox\drive\C\WINDOWS\system32\drivers\svchost.exe        HKEY_USERS\SANDBOX_JEHOVAH_KING_DEFAULTBOX\machine\software\microsoft\Windows\CurrentVersion\Run        Internat        43 00 3a 00 5c 00 57 00 49 00 4e 00 44 00 4f 00 57 00 53 00 5c 00 73 00 79 00 73 00 74 00 65 00 6d 00 33 00 32 00 5c 00 6d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 00 2e 00 65 00 78 00 65 00 00 00 be 62 74 00 62 00 be 62 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 3d 61 3f 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 be 62 3f 00 be 62 88 e2 3f 00 01 00 00 00 00 00 00 00 30 00 89 9f 00 00 3f 00 22 64 00 00 00 00 be 62 00 00 00 00 00 00 00 00 67 79 3f 00 5a 6e 22 64 00 00 00 00 be 62 b1 63 3f 00 9e 5c 3f 00 9e 5c 3f 00 b1 63 3f 00 3f 00 06 6d 7c 00 69 4e a4 6a 18 97 22 64 3f 00 64 00 73 00 3f 00 64 00 73 00 f5 f8 f5 f8 00 00 00 00 00 00 3b 5e 7f 00 3f 00 24 00 00 00 8c 85 68 00 74 00 34 00 39 00 be 62 00 00 00 00 04 00 00 00 00 00 2f 00 24 00 00 00 76 75 00 89 1d 00 f1 56 77 00 3c 00 02 00 25 00 00 00 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 76 3f 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 76 3f 00 0c 76 3f 00 3f 00 00 00 00 00 64 00 6f 00 77 00 6e 00 49 00 6e 00 50 00 72 00 6f 00 67 00 72 00 65 00 73 00 73 00 00 00 73 00 00 00 00 00 00 00 00 00 67 79 3f 00 1c 00 00 00 00 00 00 00 7f 5a 3f 00 25 4f 3f 00 cc 69 00 89 3c 00 02 00 25 00 00 00        未结束的Unicode字符串        修改        被允许　　

yaofaye

卡巴斯基反病毒软件 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=195706 is infected with Worm.Win32.AutoRun.cfe virus
不让下载

qigang

rising20.30未杀！