(0904.24-25)卡饭论坛被挂—样本及下载物+分析（9日更新38X-Update6）

woai_jolin

2009/4/25 19:27:38        Document protection        file        http://bbs.kafan.cn/attachment.p ... 23&t=1240658845        Win32/TrojanDownloader.Agent.OVM trojan        deleted (after the next restart) - quarantined        Jason-PC\Jason

woai_jolin

http://bbs.kafan.cn/attachment.p ... 65&t=1240658879        multiple threats        deleted (after the next restart) - quarantined       
http://bbs.kafan.cn/attachment.p ... 65&t=1240658879 » RAR » 01.exe        Win32/TrojanClicker.Delf.NFW trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 65&t=1240658879 » RAR » a8.exe        a variant of Win32/TrojanDropper.Agent.NJN trojan        was a part of the deleted object

woai_jolin

http://bbs.kafan.cn/attachment.p ... 02&t=1240658738        multiple threats        deleted (after the next restart) - quarantined       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\122B901E.dll        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\12days.dll        probably a variant of Win32/PSW.WOW.DZI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\12days.exe        probably a variant of Win32/PSW.WOW.DZI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\2742513_xeex.exe        Win32/TrojanDownloader.Agent.OZH trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\56BC86C7.dll        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\704C3595.dll        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\a1.exe        Win32/VB.NZV trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\a2.exe        Win32/Adware.Cinmus application        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\a2.exe » NSIS » Entries.bin        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\a2.exe » NSIS » Strings.txt        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\a2.exe » NSIS » System.dll        is OK               
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\a2.exe » NSIS » 15.exe        Win32/Adware.Cinmus application        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\a8.exe        a variant of Win32/TrojanDropper.Agent.NJN trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\efc0c52cc1.dll        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\GrTZqH5SnRhAt.dll        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\JBn2ypqY23vWX.dll        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\jxsystem.gif        a variant of Win32/PSW.OnLineGames.NUO trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\L1.exe        a variant of Win32/PSW.OnLineGames.NZF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\L3.exe        a variant of Win32/PSW.OnLineGames.NSU trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\L4.exe        a variant of Win32/PSW.OnLineGames.NUO trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\L5.exe        a variant of Win32/PSW.OnLineGames.NSU trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\L6.exe        probably a variant of Win32/PSW.WOW.DZI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M15.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M23.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M24.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M25.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M33.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M35.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M37.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M39.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M4.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\M5.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\Nj4gYd3rUbJ57.dll        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\peV7mS4gcukR.dll        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\PkVyCX5kHnftC7BXjt.dll        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S1.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S10.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S11.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S12.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S13.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S14.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S15.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S16.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S17.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S2.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S20.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S21.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\S8.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\scvhost.exe        Win32/AntiAV.AZQ trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\xcsystem.gif        a variant of Win32/PSW.OnLineGames.NSU trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 02&t=1240658738 » RAR » 木马群\zxsystem.gif        a variant of Win32/PSW.OnLineGames.NSU trojan        was a part of the deleted object

XMatence

我我我。。。

在沙盘运行了。。。


ms穿沙盘了。。。。。。


我要重装系统。。。。

XMatence

ps：这个vir很棘手。。


名字叫v.exe

[ 本帖最后由 vistabull 于 2009-4-25 19:41 编辑 ]

XMatence

v.exe是下载者

下载以下文件

1:http://u8.d7n9.com/sb/ok.exe
1:http://u2.d7n9.com/la/L1.exe
1:http://u2.d7n9.com/la/L3.exe
1:http://u2.d7n9.com/la/L4.exe
1:http://u2.d7n9.com/la/L5.exe
1:http://u2.d7n9.com/la/L6.exe
1:http://u2.d7n9.com/la/L7.exe
1:http://u3.d7n9.com/lm/S10.exe
1:http://u3.d7n9.com/lm/S1.exe
1:http://u3.d7n9.com/lm/S8.exe
1:http://u3.d7n9.com/lm/S2.exe
1:http://u3.d7n9.com/lm/S12.exe
1:http://u3.d7n9.com/lm/S14.exe
1:http://u3.d7n9.com/lm/S01.exe
1:http://u2.d7n9.com/lm/M5.exe
1:http://u2.d7n9.com/lm/M39.exe
1:http://u2.d7n9.com/lm/M25.exe
1:http://u2.d7n9.com/lm/M4.exe
1:http://u2.d7n9.com/lm/M35.exe
1:http://u2.d7n9.com/lm/M33.exe
1:http://u2.d7n9.com/lm/M01.exe
1:http://u3.d7n9.com/lm/S15.exe
1:http://u3.d7n9.com/lm/S16.exe
1:http://u3.d7n9.com/lm/S21.exe
1:http://u2.d7n9.com/lm/M37.exe
1:http://u2.d7n9.com/lm/M15.exe
1:http://u2.d7n9.com/lm/M24.exe
1:http://u2.d7n9.com/lm/M38.exe
1:http://u2.d7n9.com/lm/M23.exe
1:http://u2.d7n9.com/lm/M02.exe
1:http://u3.d7n9.com/lm/S13.exe
1:http://u3.d7n9.com/lm/S17.exe
1:http://u3.d7n9.com/lm/S20.exe
1:http://u3.d7n9.com/lm/S21.exe
1:http://u3.d7n9.com/lm/S11.exe
1:http://u7.d7n9.com/cj/1a.exe
1:http://u9.d7n9.com/cj/a2.exe
1:http://u9.d7n9.com/cj/a10.exe
1:http://u9.d7n9.com/cj/a6.exe
1:http://u7.d7n9.com/cj/a9.exe
1:http://u7.d7n9.com/cj/csj.exe
1:http://u0.d7n9.com/cj/a8.exe
1:http://u8.d7n9.com/sb/01.exe
1:http://u0.d7n9.com/cj/sb1.exe

duoshao

* avast! Report
* This file is generated automatically
*
* Started on 2009年04月25日 星期六 19时28分16秒
* VPS: 90425-0, 2009年04月25日
*
/home/XXXXXXX/Documents/1/木马群/2742513_xeex.exe [L] Win32:Agent-AEVX [Trj]
/home/XXXXXXX/Documents/1/木马群/L1.exe [L] Win32:Trojan-gen {Other}
/home/XXXXXXX/Documents/1/木马群/L3.exe [L] Win32:Trojan-gen {Other}
/home/XXXXXXX/Documents/1/木马群/L4.exe [L] Win32:Trojan-gen {Other}
/home/XXXXXXX/Documents/1/木马群/L5.exe [L] Win32:Trojan-gen {Other}
/home/XXXXXXX/Documents/1/木马群/L6.exe [L] Win32:Rootkit-gen [Rtk]
/home/XXXXXXX/Documents/1/木马群/peV7mS4gcukR.dll/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M4.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M5.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/GrTZqH5SnRhAt.dll/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S1.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S2.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S8.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/Nj4gYd3rUbJ57.dll/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/scvhost.exe/[UPX]/[Embedded_Ra#14110] [L] Win32:Rootkit-gen [Rtk]
/home/XXXXXXX/Documents/1/木马群/xcsystem.gif [L] Win32:Trojan-gen {Other}
/home/XXXXXXX/Documents/1/木马群/12days.dll [L] Win32:Spyware-gen [Trj]
/home/XXXXXXX/Documents/1/木马群/12days.exe [L] Win32:Rootkit-gen [Rtk]
/home/XXXXXXX/Documents/1/木马群/a2.exe/$[32]/15.exe [L] Win32:BHO-VA [Trj]
/home/XXXXXXX/Documents/1/木马群/a8.exe/[ASPack]/[ASPack]/[Embedded_R#12660] [L] Win32:Trojan-gen {Other}
/home/XXXXXXX/Documents/1/木马群/PkVyCX5kHnftC7BXjt.dll/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/704C3595.dll/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/56BC86C7.dll/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/jxsystem.gif [L] Win32:Trojan-gen {Other}
/home/XXXXXXX/Documents/1/木马群/JBn2ypqY23vWX.dll [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S10.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S11.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S12.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S13.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S14.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S15.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S16.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S17.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S20.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/S21.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/efc0c52cc1.dll/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/zxsystem.gif [L] Win32:Trojan-gen {Other}
/home/XXXXXXX/Documents/1/木马群/M15.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M23.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M24.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M25.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M33.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M35.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M37.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/M39.exe/[UPX] [L] Win32:Agent-ACMH [Drp]
/home/XXXXXXX/Documents/1/木马群/122B901E.dll/[UPX] [L] Win32:Agent-ACMH [Drp]
Infected files: 450971566150
Total files: 450971566224
Total folders: 450971566081
Total size: 5.1 MiB

*
* Stopped on 2009年04月25日 星期六 19时29分12秒
* Runtime was 00:00:56
*
a1.exe丢了，剩下都删除了！

黑衣~魂

DR MISS 6
jxsystem.gif;D:\Documents and Settings\Administrator\桌面\2;Container contains infected objects;Deleted.;
L4.exe;D:\Documents and Settings\Administrator\桌面\2;Container contains infected objects;Deleted.;
L5.exe;D:\Documents and Settings\Administrator\桌面\2;Container contains infected objects;Deleted.;
xcsystem.gif;D:\Documents and Settings\Administrator\桌面\2;Container contains infected objects;Deleted.;
a1.exe;D:\Documents and Settings\Administrator\桌面\2;Probably BACKDOOR.Trojan;Renamed.;
01.exe;D:\Documents and Settings\Administrator\桌面\3;Trojan.Click.18117;Deleted.;
ok.exe;D:\Documents and Settings\Administrator\桌面\1;Trojan.DownLoad.31777;Deleted.;
L1.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.MulDrop.31217;Deleted.;
L3.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.MulDrop.31232;Deleted.;
zxsystem.gif;D:\Documents and Settings\Administrator\桌面\2;Trojan.MulDrop.31232;Deleted.;
S20.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Gamania.18367;Deleted.;
L5.exe\data001;D:\Documents and Settings\Administrator\桌面\2\L5.exe;Trojan.PWS.Gamania.18523;;
xcsystem.gif\data001;D:\Documents and Settings\Administrator\桌面\2\xcsystem.gif;Trojan.PWS.Gamania.18523;;
JBn2ypqY23vWX.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Gamania.origin;Deleted.;
jxsystem.gif\data001;D:\Documents and Settings\Administrator\桌面\2\jxsystem.gif;Trojan.PWS.Gamania.origin;;
L4.exe\data001;D:\Documents and Settings\Administrator\桌面\2\L4.exe;Trojan.PWS.Gamania.origin;;
S17.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11003;Deleted.;
M15.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Deleted.;
M35.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Deleted.;
M37.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Deleted.;
M4.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Deleted.;
S14.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Deleted.;
S2.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Deleted.;
S21.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Deleted.;
S8.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Deleted.;
GrTZqH5SnRhAt.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11115;Deleted.;
S1.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11115;Deleted.;
S16.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11115;Deleted.;
S13.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11142;Deleted.;
efc0c52cc1.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11156;Deleted.;
S15.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11275;Deleted.;
M23.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Deleted.;
M24.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Deleted.;
M25.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Deleted.;
S10.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Deleted.;
S12.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Deleted.;
M33.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11284;Deleted.;
peV7mS4gcukR.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11284;Deleted.;
704C3595.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11285;Deleted.;
56BC86C7.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11325;Deleted.;
Nj4gYd3rUbJ57.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11327;Deleted.;
S11.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11345;Deleted.;
M5.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11356;Deleted.;
M39.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11371;Deleted.;
122B901E.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.origin;Deleted.;
PkVyCX5kHnftC7BXjt.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.origin;Deleted.;
a8.exe;D:\Documents and Settings\Administrator\桌面\3;Trojan.Sniff;Deleted.;
a8.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.Sniff;Deleted.;
ok.exe;D:\Documents and Settings\Administrator\桌面\1;Trojan.DownLoad.31777;Invalid path to file ;
122B901E.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.origin;Invalid path to file ;
56BC86C7.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11325;Invalid path to file ;
704C3595.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11285;Invalid path to file ;
a1.#xe;D:\Documents and Settings\Administrator\桌面\2;Probably BACKDOOR.Trojan;Deleted.;
a8.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.Sniff;Invalid path to file ;
efc0c52cc1.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11156;Invalid path to file ;
GrTZqH5SnRhAt.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11115;Invalid path to file ;
JBn2ypqY23vWX.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Gamania.origin;Invalid path to file ;
jxsystem.gif\data001;D:\Documents and Settings\Administrator\桌面\2\jxsystem.gif;Trojan.PWS.Gamania.origin;;
jxsystem.gif;D:\Documents and Settings\Administrator\桌面\2;Container contains infected objects;Invalid path to file ;
L1.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.MulDrop.31217;Invalid path to file ;
L3.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.MulDrop.31232;Invalid path to file ;
L4.exe\data001;D:\Documents and Settings\Administrator\桌面\2\L4.exe;Trojan.PWS.Gamania.origin;;
L4.exe;D:\Documents and Settings\Administrator\桌面\2;Container contains infected objects;Invalid path to file ;
L5.exe\data001;D:\Documents and Settings\Administrator\桌面\2\L5.exe;Trojan.PWS.Gamania.18523;;
L5.exe;D:\Documents and Settings\Administrator\桌面\2;Container contains infected objects;Invalid path to file ;
M15.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Invalid path to file ;
M23.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Invalid path to file ;
M24.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Invalid path to file ;
M25.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Invalid path to file ;
M33.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11284;Invalid path to file ;
M35.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Invalid path to file ;
M37.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Invalid path to file ;
M39.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11371;Invalid path to file ;
M4.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Invalid path to file ;
M5.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11356;Invalid path to file ;
Nj4gYd3rUbJ57.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11327;Invalid path to file ;
peV7mS4gcukR.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11284;Invalid path to file ;
PkVyCX5kHnftC7BXjt.dll;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.origin;Invalid path to file ;
S1.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11115;Invalid path to file ;
S10.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Invalid path to file ;
S11.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11345;Invalid path to file ;
S12.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11279;Invalid path to file ;
S13.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11142;Invalid path to file ;
S14.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Invalid path to file ;
S15.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11275;Invalid path to file ;
S16.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11115;Invalid path to file ;
S17.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11003;Invalid path to file ;
S2.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Invalid path to file ;
S20.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Gamania.18367;Invalid path to file ;
S21.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Invalid path to file ;
S8.exe;D:\Documents and Settings\Administrator\桌面\2;Trojan.PWS.Wsgame.11089;Invalid path to file ;

JusT.Like

Backdoor.Agent.ZFS&Win32:Trojan-gen {Other} (2x)
for today

巴山冷箭

昨晚我关机时临时文件夹报毒，我扫描又没问题，今天才真发现卡饭被挂了，晕