接下來....

發生更可怕的事....

明明只在Google找資料，可是網路連線小圖標卻長亮(表示資料大量傳輸中.... ~.~)

關機後檢查網路紀錄，明明自己沒去的網站赫然在目....

自己沒po過文，可是電腦裡卻說自己有....

還有奇怪的檔案~

晚上，他幫我看了紀錄，還有防火牆的資料，告訴Cynthia那是一種叫做

Zlob.Downloader.Virus 的大陸木馬病毒，

特徵是以為已經把它除去了，卻會不停地再生，因為它已經感染了系統中一份很重要的程式。所以沒辦法盡除。

他說，下手的人應該是高手，因為他能突破微軟XP SP2內設的防火牆和Norton的保護。更指出那人的IP是 61.180.66.139 是江西省赣州市电信的ADSL用戶，時間在我訪問過有他在的科學網站找資料以後。

他還利用Cynthia的電腦去訪問一系列的大陸網頁，而Cynthia那時一點也不知道，螢幕上看不到那些視窗，只是當時電腦網路真的變得好慢好慢....

這是那時後回溯時的歷史記錄：....部份是Cynthia在網路城邦看文的記錄。

Zlob.Downloader.Virus
WWW.Download

這病毒登入Cynthia電腦後會自動產生a1、a2、a3、a4....等.txt檔
http://down.down988.cn/a1.txt
http://down.down988.cn/a2.txt
http://down.down988.cn/a3.txt
http://down.down988.cn/a4.txt
....
http://rad.17luntan.com/GetContentPortal/GetContent.asmx?wsdl
....
http://rad.17luntan.com/JsResource/init.js
http://rad.17luntan.com/JsResource/myFlash.swf
http://rad.17luntan.com/WebPageView.aspx?SiteID=95c2bc69-75a9-4a38-995e-5f277c36d3b8&Url=http%253a%252f%252fwww.177hy.com%252fbbs%252fsimple%252findex.php%253ft22734.html
http://rad.17luntan.com/JsResource/common.js
http://rad.17luntan.com/Default.aspx?SiteID=95c2bc69-75a9-4a38-995e-5f277c36d3b8
....
http://down.down988.cn/a3.exe
....
http://count23.51yes.com/sa.aspx?id=239592034&refe=http%3A//59game.cn/ggfile/liuliang.htm&location=http%3A//wow.wow88.cn/down/wang.htm&color=32x&resolution=1024x768&returning=0&language=zh-tw&ua=Mozilla/4.0%20%28compatible%3B%20MSIE%206.0%3B%20Windows%20NT%205.1%29
http://wow.wow88.cn/down/xia.exe
http://wow.wow88.cn/down/wang.htm
....
http://down.down988.cn/a2.exe
Cookie:cynthia@www.18soo.com/
http://js.users.51.la/725207.js
....
http://www.wawadown.com/adfile/shiyan.js
http://s48.cnzz.com/stat.htm?id=355217&agt=mozilla/4.0%20%28compatible%3B%20msie%206.0%3B%20windows%20nt%205.1%29&r=http%3A//www.mykool.cn/admin/qita/200611232008322006.htm&aN=Microsoft%20Internet%20Explorer&lg=zh-tw&OS=Win32&aV=4.0%20%28compatible%3B%20MSIE%206.0%3B%20Windows%20NT%205.1%29&ntime=0.79138700%201168495083&repeatip=0&rtime=0&cnzz_eid=15885387-http%3A//www.mykool.cn/admin/qita/200611232008322006.htm&showp=1024x768
http://www.google.com/intl/zh-TW/images/t4_ie.gif
http://4.db.51.la/s.asp?id=734783&tpages=1&ttimes=1&tzone=8&tcolor=32&sSize=1024,768&referrer=http%3A//www.mykool.cn/admin/qita/200611232008322006.htm&vpage=http%3A//www.wawadown.com/admin/jiqing/200713133522006.html
....
http://c6.50bang.com/click.js?user_id=418761&l=102
http://www.ivsk.com/adfile/mailiuliang.js
http://www.ivsk.com/adfile/760tz.js
http://www.ivsk.com/adfile/3qqq.js  0K
http://www.wawadown.com/adfile/shiyan.js  0K
....
http://13.db.51.la/s.asp?id=767472&tpages=1&ttimes=1&tzone=8&tcolor=32&sSize=1024,768&referrer=http%3A//www.18soo.com/3_4768.htm&vpage=http%3A//bbs.qicn.net/index.asp
....
http://count28.51yes.com/sa.aspx?id=284420428&refe=http%3A//www.18soo.com/ad.htm&location=http%3A//mail.down988.cn/bill/index.htm&color=32x&resolution=1024x768&returning=0&language=zh-tw&ua=Mozilla/4.0%20%28compatible%3B%20MSIE%206.0%3B%20Windows%20NT%205.1%29
....
http://down.down988.cn/a1.exe
....
http://mail.down988.cn/get/avpi.exe
....
http://mail.down988.cn/bill/test.js
http://59game.cn/ggfile/liuliang.htm
http://bbs.qicn.net/skins/siji/xml.gif
http://doudown.com/happy.htm
view-source:http://bbs.huaxia.com/viewthread.php?fid=1&tid=2910&extra=page%3D1&page=1&sid=aRCJ4f
http://hd.265.com/inc/topic_a.js
http://bbs.qicn.net/skins/aspsky_4.css
http://www.tumoo.cn/upload/3654224.jpg
http://bbs.qicn.net/inc/Main.js
http://www.akiss.cn/Files/BeyondPic/2006-7/23/2006330143427_4891.jpg
http://hd.265.com/inc/topic.js
http://image.bbs.tom.com/pic/1/1602/1602491.jpg
http://www.18soo.com/ad/js/07.js
http://image2.sina.com.cn/lx/upload/37/5167/20060808/67/13447/13449.jpg
http://www.18soo.com/pic/tmp/455565_DgMbWdEFrwLo4XKyRwEx.jpg
http://mail.down988.cn/bill/index.htm
http://www.18soo.com/ad/js/06.js
http://www.18soo.com/pic/gaoxiao/%C8%D5%B1%BE%C5%AE%BA%A2%D7%D3%CD%CF%D2%C2%B7%FE%B1%C8%C8%FC.jpg
http://www.18soo.com/htmluser.asp
http://count19.51yes.com/sa.aspx?id=194022881&refe=http%3A//www.18soo.com/3_4768.htm&location=http%3A//www.18soo.com/ad.htm&color=32x&resolution=1024x768&returning=0&language=zh-tw&ua=Mozilla/4.0%20%28compatible%3B%20MSIE%206.0%3B%20Windows%20NT%205.1%29
http://union2.3qqq.cn/u2/news1.js
http://count19.51yes.com/count1.gif
http://hd.265.com/inc/show1.js
http://www.18soo.com/ad/js/05.js
http://www.18soo.com/ad.htm
http://www.18soo.com/ad/js/a3.js
http://www.18soo.com/ad/js/03.js
http://www.18soo.com/images/logo.gif
http://www.18soo.com/dianji.asp?ids=4768
http://www.18soo.com/3_4768.htm
http://hd.265.com/css/topic1.css
http://hd.265.com/css/default.css
http://hd.265.com/topic_114_1757_5.htm
http://bbs.huaxia.com/images/default/edit.gif
http://bbs.huaxia.com/images/default/credits.gif
http://bbs.huaxia.com/images/default/pm.gif
http://bbs.huaxia.com/viewthread.php?fid=1&tid=2910&extra=page%3D1&page=1&sid=aRCJ4f
http://bbs.huaxia.com/images/common/xml.gif
http://bbs.huaxia.com/images/default/star_level1.gif
http://bbs.huaxia.com/images/default/quote.gif
http://bbs.huaxia.com/images/default/bg2.gif
http://bbs.huaxia.com/images/default/top.gif
http://bbs.huaxia.com/images/default/profile.gif
http://bbs.huaxia.com/images/default/td_bg014.gif
http://bbs.huaxia.com/images/default/fastreply.gif
http://bbs.huaxia.com/images/default/newtopic.gif
http://bbs.huaxia.com/include/common.js
http://cimg2.163.com/cnews/newimg/bg2.gif
Cookie:cynthia@huaxia.com/
Cookie:cynthia@imrworldwide.com/cgi-bin

Cynthia沒到這裡post過文章~
http://comment.education.163.com/reply/post.jsp?

type=&board=education_bbs&threadid=2LBHGACL00290005&pagex=2
http://comment.education.163.com/screen.css
....
http://secure-sg.imrworldwide.com/v52.js
....
http://mms.blog.xuite.net/d5/41/13423053/blog_101689/dv/4096744/4096744.mp3
....
http://ad2.udn.com/RealMedia/ads/adstream_jx.ads/udn.com/cityudn/1913363354@Right
....
http://ad2.udn.com/RealMedia/ads/adstream_jx.ads/udn.com/cityudn/1969927405@Right
....
http://ad2.udn.com/RealMedia/ads/adstream_jx.ads/udn.com/cityudn/1158501605@Right
....
http://ad2.udn.com/RealMedia/ads/adstream_jx.ads/udn.com/cityudn/1158501605@Middle
....
http://secure-sg.imrworldwide.com/cgi-bin/m?rnd=1168493592654&ci=tw-udn&cg=0&cc=0&sr=1024x768&cd=32&lg=zh-tw&je=y&ck=y&tz=8&ct=modem&hp=n&si=http%3A//city.udn.com/v1/city/forum/article.jsp%3Faid%3D2020973%26raid%3D2033189%26no%3D55245%26cate_no%3D63729%23rep2033189&rp=http%3A//city.udn.com/v1/city/rank/forum_rank.jsp%3Ftype%3Dgg%26level%3D%26f_ORDER_BY%3DN%26f_STATE%3D%26f_TIME%3D
....
http://ad2.udn.com/RealMedia/ads/adstream_jx.ads/udn.com/cityudn/1671689564@Middle
http://secure-sg.imrworldwide.com/cgi-bin/m?rnd=1168493455987&ci=tw-udn&cg=0&cc=0&sr=1024x768&cd=32&lg=zh-tw&je=y&ck=y&tz=8&ct=modem&hp=n&si=http%3A//city.udn.com/v1/city/forum/article.jsp%3Faid%3D1577252%26raid%3D2033293%26no%3D52418%26cate_no%3D56237%23rep2033293&rp=http%3A//city.udn.com/v1/city/rank/forum_rank.jsp%3Ff_ORDER_BY%3DN
http://ad2.udn.com/RealMedia/ads/adstream_jx.ads/udn.com/cityudn/1163213386@Right
http://ad2.udn.com/RealMedia/ads/adstream_jx.ads/udn.com/cityudn/1163213386@Middle1
....