疑惑中,求教高手

有谁能看懂木马克星日志,帮忙看一下;
还有,为什么木马扫描的木马经常出现在C:\Documents and Settings\user\Local Settings\Temp\和C:\System Volume Information\_restore{B297F1D4-35F8-4B31-BDB7-9F4A0B83D642}\文件夹下,这个C:\System Volume Information\到底是干什么的,木马中分离地址是什么意思?

日志:
C:\Documents and Settings\user\Local Settings\Temp\0bce4531-9a67-467a-90f8-87079ed6c332\MiniPack.exe 发现广告程序:tro2005-5-31-spywareSminiddd,147989
C:\Documents and Settings\user\Local Settings\Temp\0bce4531-9a67-467a-90f8-87079ed6c332\MiniPack.exe广告已经清除.
木马中分离地址:vc.dudu.com
C:\Documents and Settings\user\Local Settings\Temp\b022ef38-ba38-4161-bcdf-4cdce70b1fe3\MiniPack.exe 发现广告程序:tro2005-5-31-spywareSminiddd,147989
C:\Documents and Settings\user\Local Settings\Temp\b022ef38-ba38-4161-bcdf-4cdce70b1fe3\MiniPack.exe广告已经清除.
木马中分离地址:vc.dudu.com
C:\Documents and Settings\user\Local Settings\Temp\nsp18.tmp\setup1.exe 发现广告程序:tro2005-7-10-adware-msetup,128600
C:\Documents and Settings\user\Local Settings\Temp\nsp18.tmp\setup1.exe广告已经清除.
木马中分离地址:hongsou.com
C:\Program Files\wsearch\mUninstall.exe 发现广告程序:spyware0531b
C:\Program Files\wsearch\mUninstall.exe广告已经清除.
C:\Program Files\wsearch\mUninstall.exe 发现木马:Tro,20480
请重新启动计算机,才能彻底清除
C:\Program Files\wsearch\mupdate.exe 发现木马:Tro,40960
C:\Program Files\wsearch\mupdate.exe木马已经清除.
C:\Program Files\wsearch\Search.exe 发现木马:Tro,90112
请重新启动计算机,才能彻底清除
木马中分离地址:edu
木马中分离地址:org
C:\Documents and Settings\user\Local Settings\Temp\setup\cdnns.dll 发现广告程序:tro2005-7-22-adware广告1,22016
C:\Documents and Settings\user\Local Settings\Temp\setup\cdnns.dll广告已经清除.
C:\Program Files\wsearch\Mouse1.dll 发现木马:tro2005-6-14-Mouse1,65536
请重新启动计算机,才能彻底清除
C:\Program Files\wsearch\SearchM.dll 发现广告程序:tro2005-7-14-adware-SearchM,32768
C:\Program Files\wsearch\SearchM.dll广告已经清除.
木马中分离地址:searchm.com
C:\WINDOWS\system32\cdn.dll 怀疑为CNNIC广告
C:\WINDOWS\system32\cdnns.dll 发现广告程序:tro2005-7-22-adware广告1,22016
C:\WINDOWS\system32\cdnns.dll广告已经清除.
C:\ 扫描完成.

C:\System Volume Information\_restore{B297F1D4-35F8-4B31-BDB7-9F4A0B83D642}\RP8\A0005712.exe 发现木马:Tro,90112
C:\System Volume Information\_restore{B297F1D4-35F8-4B31-BDB7-9F4A0B83D642}\RP8\A0005712.exe木马已经清除.
木马中分离地址:edu
木马中分离地址:org
C:\System Volume Information\_restore{B297F1D4-35F8-4B31-BDB7-9F4A0B83D642}\RP8\A0005713.dll 发现木马:tro2005-6-14-Mouse1,65536
C:\System Volume Information\_restore{B297F1D4-35F8-4B31-BDB7-9F4A0B83D642}\RP8\A0005713.dll木马已经清除.
C:\WINDOWS\system32\cdn.dll 怀疑为CNNIC广告
C:\ 扫描完成.
最后编辑2005-08-08 13:26:36