下面的是防火墙 的扫描历史记录
2006-03-11 01:45:59, csrss.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:38:42, IEXPLORE.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:38:26, realsched.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:38:14, explorer.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:37:46, conime.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:37:40, AgentSvr.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:37:33, RsAgent.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:37:24, nvsvc32.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:37:15, HotKeyB.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:37:05, Ravmon.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:36:54, CTFMON.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:36:49, rfwmain.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:36:47, RavTask.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:36:37, SOUNDMAN.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:36:25, RUNDLL32.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:36:14, winlogon.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:35:55, IExplore.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:35:53, RfwCfg.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:35:52, IEXPLORE.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:35:36, IEXPLORE.EXE>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:35:35, realsched.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:35:35, realsched.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:35:22, explorer.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:34:54, explorer.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:34:53, conime.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:34:53, conime.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:34:46, AgentSvr.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:34:39, AgentSvr.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:34:39, RsAgent.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:34:30, RsAgent.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:34:30, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:34:20, nvsvc32.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:34:20, nvsvc32.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:34:11, alg.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:33:57, HotKeyB.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:33:57, HotKeyB.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:33:48, Ravmon.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:33:48, Ravmon.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:33:37, CTFMON.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:33:30, CTFMON.EXE>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:33:30, rfwmain.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:33:30, rfwmain.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:33:28, RavTask.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:33:19, RavTask.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:33:19, SOUNDMAN.EXE>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:33:18, SOUNDMAN.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:33:10, RUNDLL32.EXE>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:33:10, RUNDLL32.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:33:02, RavStub.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:32:55, spoolsv.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:32:42, rfwsrv.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:32:32, Ravmond.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:32:18, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:32:08, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:32:00, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:31:25, CCenter.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:31:20, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:31:13, lsass.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:30:59, services.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:30:53, winlogon.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:30:53, winlogon.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:30:36, csrss.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:29:51, IEXPLORE.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:29:35, realsched.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:29:23, explorer.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:28:52, conime.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:28:47, AgentSvr.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:28:40, RsAgent.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:28:30, nvsvc32.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:28:23, HotKeyB.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:28:13, Ravmon.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:28:02, CTFMON.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:27:57, rfwmain.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:27:56, RavTask.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:27:46, SOUNDMAN.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:27:37, RUNDLL32.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:27:30, winlogon.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:27:12, RfwCfg.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:27:11, IEXPLORE.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:26:55, IEXPLORE.EXE>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:26:52, realsched.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:26:52, realsched.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:26:40, explorer.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:26:12, explorer.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:26:10, explorer.exe>>C:\WINDOWS\explorer.exe ->Worm.Mail.Fanbot
2006-03-11 01:26:06, conime.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:26:06, conime.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:26:00, AgentSvr.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:25:53, AgentSvr.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:25:53, RsAgent.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:25:44, RsAgent.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:25:43, Thunder.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:25:18, Thunder.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:25:12, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:25:03, nvsvc32.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:25:03, nvsvc32.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:24:54, alg.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:24:41, HotKeyB.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:24:41, HotKeyB.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:24:28, Ravmon.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:24:28, Ravmon.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:24:16, CTFMON.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:24:11, CTFMON.EXE>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:24:10, rfwmain.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:24:10, rfwmain.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:24:09, RavTask.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:23:59, RavTask.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:23:58, SOUNDMAN.EXE>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:23:58, SOUNDMAN.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:23:49, RUNDLL32.EXE>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:23:49, RUNDLL32.EXE>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:23:38, RavStub.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:23:32, spoolsv.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:23:21, rfwsrv.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:23:12, Ravmond.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:22:58, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:22:49, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:22:42, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:22:09, CCenter.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:22:05, svchost.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:21:58, lsass.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:21:42, services.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:21:36, winlogon.exe>>C:\WINDOWS\G_ServerKey.DLL ->Backdoor.Gpigeon.thj
2006-03-11 01:21:36, winlogon.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
2006-03-11 01:21:13, csrss.exe>>C:\WINDOWS\G_Server_HOOk.DLL ->Backdoor.Gpigeon.tfs
这就是我们的“瑞星2006网络威胁粉碎机”! 狗屁都不如!