某木马下载物以及部分生成物

sam.to

11/6/2009 0:54:06        已偵測: Trojan.Win32.Agent.ckwx        C:\Documents and Settings\kato9096\桌面\123\123\ctfmen.exe/ASPack               
11/6/2009 0:54:08        已偵測: Trojan-GameThief.Win32.Magania.bfgb        C:\Documents and Settings\kato9096\桌面\123\123\704C3595.dll/PE_Patch.UPX/UPX               
11/6/2009 0:54:11        已偵測: Trojan-GameThief.Win32.Magania.bgiz        C:\Documents and Settings\kato9096\桌面\123\123\EN7hzSreCat8.dll               
11/6/2009 0:54:53        已偵測: Trojan-Downloader.Win32.Geral.yo        C:\Documents and Settings\kato9096\桌面\123\123\extext438437t.exe               
11/6/2009 0:54:53        已偵測: Trojan-GameThief.Win32.Magania.bflx        C:\Documents and Settings\kato9096\桌面\123\123\hhnt2pBK.dll/PE_Patch.UPX/UPX               
11/6/2009 0:54:53        已偵測: Trojan-GameThief.Win32.Magania.bgcm        C:\Documents and Settings\kato9096\桌面\123\123\U4aTWwQnudZgwhtk.dll/PE_Patch.UPX/UPX               
11/6/2009 0:55:01        已偵測: Trojan-GameThief.Win32.Magania.bfdq        C:\Documents and Settings\kato9096\桌面\123\123\xx12[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:02        已偵測: Trojan-GameThief.Win32.Magania.bfrw        C:\Documents and Settings\kato9096\桌面\123\123\xx13[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:02        已偵測: Trojan-GameThief.Win32.Magania.beuh        C:\Documents and Settings\kato9096\桌面\123\123\UnsrA8Hec.dll/PE_Patch.UPX/UPX               
11/6/2009 0:55:06        已偵測: Trojan-GameThief.Win32.Magania.bfdq        C:\Documents and Settings\kato9096\桌面\123\123\xx14[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:09        已偵測: Trojan-Downloader.Win32.Agent.cecl        C:\Documents and Settings\kato9096\桌面\123\123\xx17[1].exe               
11/6/2009 0:55:10        已偵測: Trojan-GameThief.Win32.Magania.bfdq        C:\Documents and Settings\kato9096\桌面\123\123\xx15[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:11        已偵測: Trojan-PSW.Win32.LdPinch.guz        C:\Documents and Settings\kato9096\桌面\123\123\xx16[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:12        已偵測: Trojan-Dropper.Win32.Agent.aruu        C:\Documents and Settings\kato9096\桌面\123\123\xx19[1].exe               
11/6/2009 0:55:13        已偵測: Trojan-PSW.Win32.LdPinch.guz        C:\Documents and Settings\kato9096\桌面\123\123\xx18[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:15        已偵測: Trojan-GameThief.Win32.Magania.bfdq        C:\Documents and Settings\kato9096\桌面\123\123\xx20[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:15        已偵測: Trojan-GameThief.Win32.Magania.beaa        C:\Documents and Settings\kato9096\桌面\123\123\xx21[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:16        已偵測: Trojan-GameThief.Win32.Magania.bfrw        C:\Documents and Settings\kato9096\桌面\123\123\xx22[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:20        已偵測: Trojan-GameThief.Win32.Magania.bfdq        C:\Documents and Settings\kato9096\桌面\123\123\xx23[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:20        已偵測: Trojan-GameThief.Win32.Magania.bffe        C:\Documents and Settings\kato9096\桌面\123\123\xx24[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:22        已偵測: Trojan-GameThief.Win32.Magania.bffe        C:\Documents and Settings\kato9096\桌面\123\123\xx25[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:24        已偵測: Trojan-GameThief.Win32.Magania.bfsy        C:\Documents and Settings\kato9096\桌面\123\123\xx26[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:26        已偵測: Trojan-GameThief.Win32.Magania.bfdf        C:\Documents and Settings\kato9096\桌面\123\123\xx27[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:27        已偵測: Trojan-GameThief.Win32.Magania.bfrw        C:\Documents and Settings\kato9096\桌面\123\123\xx28[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:29        已偵測: Trojan-PSW.Win32.LdPinch.afvj        C:\Documents and Settings\kato9096\桌面\123\123\xx29[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:31        已偵測: Trojan-GameThief.Win32.Magania.bfrw        C:\Documents and Settings\kato9096\桌面\123\123\xx30[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:32        已偵測: Trojan-GameThief.Win32.Magania.bfrw        C:\Documents and Settings\kato9096\桌面\123\123\xx31[1].exe/PE_Patch.UPX/UPX               
11/6/2009 0:55:34        已偵測: Trojan-GameThief.Win32.OnLineGames.vdcg        C:\Documents and Settings\kato9096\桌面\123\123\xx33[1].exe               
11/6/2009 0:55:34        已偵測: Trojan-GameThief.Win32.Magania.bfdq        C:\Documents and Settings\kato9096\桌面\123\123\xx32[1].exe/PE_Patch.UPX/UPX               

miss 1, to kl

kingmuro

2009-06-11 8:59:52        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\704C3595.dll\[UPX]" file.  
2009-06-11 8:59:55        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\CJPtNyJ6HWTgWWJdUe.dll\[UPX]" file.  
2009-06-11 8:59:55        gxf        3992        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\ctfmen.exe" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\EN7hzSreCat8.dll\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-AEVX [Trj]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\extext438437t.exe" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\hhnt2pBK.dll\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\U4aTWwQnudZgwhtk.dll\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\UnsrA8Hec.dll\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx12[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx12[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx13[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx13[1].exe\[Embedded_Ix#2210]\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx14[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx14[1].exe\[Embedded_Ix#2210]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx15[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx15[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx16[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx16[1].exe\[Embedded_Ix#2210]\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx17[1].exe" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx18[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx18[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx19[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx19[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx20[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx20[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx21[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx21[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx22[1].exe\[UPX]" file.  
2009-06-11 8:59:56        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx22[1].exe\[Embedded_Ix#2210]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx23[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx23[1].exe\[Embedded_Ix#2210]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx24[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx24[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx25[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx25[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx26[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx26[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx27[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx27[1].exe\[Embedded_Ix#2210]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx28[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx28[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx29[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx29[1].exe\[Embedded_Ix#1a10]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx30[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx30[1].exe\[Embedded_Ix#2210]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx31[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx31[1].exe\[Embedded_Ix#2210]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx32[1].exe\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx32[1].exe\[Embedded_Ix#2210]\[UPX]" file.  
2009-06-11 8:59:57        gxf        3992        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx33[1].exe" file.

kingmuro

2009-6-11 9:00:02:734 已开始的扫描
扫描类型 - 右键单击扫描

2009-6-11 9:00:53:218 在这台电脑上侦察到感染病毒
威胁软件名称 - Trojan-Spy.Gampass!sd6
类型 - 文件
风险级别 - 高
感染 - C:\Documents and Settings\gxf\桌面\110\123[1]\123\xx16[1].exe

2009-6-11 9:00:59:62 已完成的扫描
扫描类型 - 右键单击扫描
进展项目 - 86
已检测到的威胁软件 - 1
已检测到的感染 - 1
忽略的感染 - 0

sam.to

Hello,

CJPtNyJ6HWTgWWJdUe.dll2 - Trojan-GameThief.Win32.Magania.bglm