mb.txt(所有下载地址已经提供 感谢shilymi)

醉一生爱妍

00005498   00405498      0   SoftWare\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
000054DC   004054DC      0   human.exe
000054E8   004054E8      0   \human.exe
000054F4   004054F4      0   \\.\%s\%s
00005504   00405504      0   NtClose
0000550C   0040550C      0   NtQueryDirectoryObject
00005524   00405524      0   NtOpenDirectoryObject
0000553C   0040553C      0   RtlInitUnicodeString
0000555C   0040555C      0   \winhlp32.exe
0000556C   0040556C      0   \mmc.exe
00005578   00405578      0   \user32.dll
00005584   00405584      0   DOWNLOAD
00005594   00405594      0   \ntdll.dll
000055A8   004055A8      0   Root#RCVYL#0000#
000055CC   004055CC      0   ProtectedC.sys
000055DC   004055DC      0   HookLeave
000055E8   004055E8      0   HookEnter
00005600   00405600      0   %s\%08X.dll
0000560C   0040560C      0   _THINK_SOFT_EVENT_0_
00005624   00405624      0   HintZ3
0000562C   0040562C      0   HintZ0
00005634   00405634      0   hintFD.sys
00005644   00405644      0   THINK
0000564C   0040564C      0   \Drivers\Beep.sys
00005660   00405660      0   \\.\NBA_SOFT
00005670   00405670      0   MZKERNEL32.DLL
00005680   00405680      0   WinExec
00005688   00405688      0   %windir%\system32\userinit.exe
000056A8   004056A8      0   %windir%\system32\mmc.exe
000056C4   004056C4      0   %windir%\system32\user32.dll
000056F4   004056F4      0   http://61.160.213.143/
00005800   00405800      0   mb.txt

1. 000056F4   004056F4      0   http://61.160.213.143/
   
2. 00005800   00405800      0   mb.txt
   
3. 
   

复制代码

http://61.160.213.143/mb.txt

hxxp://qq.caogui03.cn/ma/cw01.exe
hxxp://qq.caogui03.cn/ma/cw02.exe
hxxp://qq.caogui03.cn/ma/sw02.exe
hxxp://qq.caogui03.cn/ma/sw03.exe
hxxp://qq.caogui03.cn/ma/cw03.exe
hxxp://qq.caogui03.cn/ma/cw04.exe
hxxp://qq.caogui03.cn/ma/cw05.exe
hxxp://qq.caogui03.cn/ma/cw06.exe
hxxp://qq.caogui03.cn/ma/cw07.exe
hxxp://qq.caogui03.cn/ma/cw08.exe
hxxp://qq.caogui03.cn/ma/cw09.exe
hxxp://qq.caogui03.cn/ma/cw10.exe
hxxp://qq.caogui03.cn/ma/cw11.exe
hxxp://qq.caogui03.cn/ma/cw12.exe
hxxp://qq.caogui03.cn/ma/cw13.exe
hxxp://qq.caogui03.cn/ma/cw14.exe
hxxp://qq.caogui03.cn/ma/cw15.exe
hxxp://qq.caogui03.cn/ma/cw16.exe
hxxp://qq.caogui03.cn/ma/cw17.exe
hxxp://qq.caogui03.cn/ma/cw18.exe
hxxp://qq.caogui03.cn/ma/cw19.exe
hxxp://qq.caogui03.cn/ma/cw20.exe
hxxp://qq.caogui03.cn/ma/cw21.exe
hxxp://qq.caogui03.cn/ma/cw22.exe
hxxp://qq.caogui03.cn/ma/cw23.exe
hxxp://qq.caogui03.cn/ma/cw24.exe
hxxp://qq.caogui03.cn/ma/cw25.exe
hxxp://qq.caogui03.cn/ma/cw26.exe
hxxp://qq.caogui03.cn/ma/cw27.exe
hxxp://qq.caogui03.cn/ma/cw28.exe
hxxp://qq.caogui03.cn/ma/cw29.exe
hxxp://qq.caogui03.cn/ma/cw30.exe
hxxp://qq.caogui03.cn/ma/cw31.exe
hxxp://qq.caogui03.cn/ma/cw32.exe
hxxp://qq.caogui03.cn/ma/cw33.exe

[ 本帖最后由 WillBeNextKido 于 2008-11-23 13:11 编辑 ]

woai_jolin

网站拒绝显示此网页
HTTP 403  
   最可能的原因是:
此网站要求您登录。

   您可以尝试以下操作:
     返回到上一页。

     更多信息

shmily512099

木马名称：Trojan-PSW.Win32.Magania.cou

程序：
C:\QQDOWNLOAD\CW01.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

shmily512099

hxxp://qq.caogui03.cn/ma/cw01.exe
hxxp://qq.caogui03.cn/ma/cw02.exe
hxxp://qq.caogui03.cn/ma/sw02.exe
hxxp://qq.caogui03.cn/ma/sw03.exe
hxxp://qq.caogui03.cn/ma/cw03.exe
hxxp://qq.caogui03.cn/ma/cw04.exe
hxxp://qq.caogui03.cn/ma/cw05.exe
hxxp://qq.caogui03.cn/ma/cw06.exe
hxxp://qq.caogui03.cn/ma/cw07.exe
hxxp://qq.caogui03.cn/ma/cw08.exe
hxxp://qq.caogui03.cn/ma/cw09.exe
hxxp://qq.caogui03.cn/ma/cw10.exe
hxxp://qq.caogui03.cn/ma/cw11.exe
hxxp://qq.caogui03.cn/ma/cw12.exe
hxxp://qq.caogui03.cn/ma/cw13.exe
hxxp://qq.caogui03.cn/ma/cw14.exe
hxxp://qq.caogui03.cn/ma/cw15.exe
hxxp://qq.caogui03.cn/ma/cw16.exe
hxxp://qq.caogui03.cn/ma/cw17.exe
hxxp://qq.caogui03.cn/ma/cw18.exe
hxxp://qq.caogui03.cn/ma/cw19.exe
hxxp://qq.caogui03.cn/ma/cw20.exe
hxxp://qq.caogui03.cn/ma/cw21.exe
hxxp://qq.caogui03.cn/ma/cw22.exe
hxxp://qq.caogui03.cn/ma/cw23.exe
hxxp://qq.caogui03.cn/ma/cw24.exe
hxxp://qq.caogui03.cn/ma/cw25.exe
hxxp://qq.caogui03.cn/ma/cw26.exe
hxxp://qq.caogui03.cn/ma/cw27.exe
hxxp://qq.caogui03.cn/ma/cw28.exe
hxxp://qq.caogui03.cn/ma/cw29.exe
hxxp://qq.caogui03.cn/ma/cw30.exe
hxxp://qq.caogui03.cn/ma/cw31.exe
hxxp://qq.caogui03.cn/ma/cw32.exe
hxxp://qq.caogui03.cn/ma/cw33.exe