瑞星卡卡安全论坛

HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTERSION\WINLOGON\NOTIFY\CRYPTIMG

附件: 9741892007117202718.txt

c:\windows\system32\com\loglive.dll
c:\documents and settings\all users\application data\microsoft\office\system\sysloader.exe
c:\windows\system32\drivers\twz6glv.sys
c:\documents and settings\all users\application data\microsoft\office\userdata\webbrowser_3102.dll
c:\windows\system32\winforms.dll
c:\windows\system32\avzxemn.dll
c:\windows\system32\kvmxfma.dll
c:\windows\system32\rarjdpi.dll
c:\windows\system32\zhjtrx.dll
c:\program files\internet explorer\plugins\winsys8x.sys
c:\windows\system32\csavpw0.dll
c:\program files\internet explorer\iexplore32.sys
c:\program files\internet explorer\iexplore32.dat
c:\program files\internet explorer\iexplore32.wi
以上文件找到压缩后发到我的邮箱