²é¿´: 318  |  »Ø¸´: 10
µ±Ç°Ö÷ÌâÒѾ­´æµµ¡£
¡¾ÐüÉͽð±Ò¡¿»Ø´ð±¾ÌûÎÊÌ⣬×÷Õßmagua-no2½«ÔùËÍÄú 2 ¸ö½ð±Ò

magua-no2

ľ³æ (СÓÐÃûÆø)

[ÇóÖú] µçÄÔÖж¾£¬Çë¸ßÊÖ°ïæ

ÎҵĵçÄÔ£¬×òÌìÓÉÓÚ½èÓÃͬѧµÄÒÆ¶¯Ó²Å̶øÖж¾¡£

ÌØÕ÷£º¿¨°Í˹»ù¼ì²âµ½DLLHOST.EXEºÍSVCHOST.EXE²¡¶¾£¬Ëƺõɾ³ý²»ÁË£¬ÎÒÑ¡ÔñÁ˸ôÀ룬ºóÀ´ÎÊÌâÒ»´ó¶Ñ
         ËùÓÐÓ²ÅÌ´ò²»¿ªÁË£¬Ö»ÄÜÓÒ»÷£¬È»ºóÑ¡´ò¿ª²ÅÄܽøÈ룻
        ÔËÐÐmsconfig£¬Ìáʾwindows ÕÒ²»µ½´ËÎļþ£»
        ¸÷Ó²Å̸ùĿ¼Ï³öÏÖrunauto.. Îļþ¼Ð£¬ÎÞ·¨É¾³ý¡£

ÎÒÕÒµ½DLLHOST.EXEºÍSVCHOST.EXE£¬·¢ÏÖÊÇ¡°ReLinsonϵÁÐÈí¼þ£¬¶à¹¦ÄÜÏÂÔØÕß¡±£¬ÍøÉÏÒ»²é£¬ËµÊǺڿÍÈí¼þ¡£


        ¸ßÊÖÃÇ£¬ÎÒ¸ÃÔõô°ì£¿ ¶àлָµã£¡¸Ð¼¤²»¾¡¡£

» ²ÂÄãϲ»¶

ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nucleus01

ÖÁ×ðľ³æ (ÖøÃûдÊÖ)

Сľ³æ±±Í¥½Ú¶Èʹ

¡ï
magua-no2(½ð±Ò+1,VIP+0):ÐÁ¿àÁË£¬iceswordûÓùý°¡
dllhost.exe²¡¶¾Çå³ý°ì·¨2007-06-09 12:31ÏÖÏóÃèÊö£º¸÷¸öÓ²ÅÌ·ÖÇøÓÐÒ»¸öÎļþ¼Ðrunauto.. £¬%windows%Ŀ¼ÏÂÓÐÌØÕ÷µÄ²¡¶¾Îļþdllhost.exe

Çå³ý²½Ö裺£¨ÒÔÏÂËùÓвÙ×÷ÔÚ IceSword ÖнøÐУ©Iceword v1.20ÏÂÔØ¼°¼òµ¥½éÉÜ
1¡¢½ûÖ¹½ø³Ì´´½¨¡£

2¡¢½áÊø²¡¶¾½ø³Ì%windows%\dllhost.exe¡£

3¡¢É¾³ý²¡¶¾Îļþ£º
         %windows%\dllhost.exe
           %windows%\cmd.exe.exe
           %windows%\regedit.exe.exe
           %windows%\setuprs1.exe
            x:\autorun.inf     (X´ú±íÓ²Å̸÷¸ö·ÖÇø¼°UÅÌÅÌ·û)
          x:\autorun.inf.tmp
         
4¡¢É¾³ý²¡¶¾·þÎñÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COMSystemApp
´ËÍ⣬HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List·Ö֧ϵÄ"C:\\windows\\dllhost.exe"="C:\\windows\\dllhost.exe:*:Enabled:dllhost.exe"ҲҪɾ³ý¡£

5¡¢É¾³ý²¡¶¾Ìí¼ÓµÄIFEOÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe

6¡¢È¡ÏûIceSwordµÄ¡°½ûÖ¹½ø³Ì´´½¨¡±£¬¹Ø±ÕIceSword¡£

7¡¢É¾³ý¸÷¸ö·ÖÇø¼°UÅÌÀïÃæµÄrunauto..Îļþ¼Ð£¬É¾³ý·½·¨£º£¨ÒÔ D ÅÌΪÀý£©

¿ªÊ¼¡ª¡ªÔËÐСª¡ªÊäÈë¡°cmd¡±¡ª¡ªÊäÈë¡°D: ¡±¡ª¡ªÊäÈë¡°rd /s/q runauto...\ ¡±

8¡¢Íê
ˬÊÇÒª¸¶³ö´ú¼ÛµÄ!
2Â¥2007-09-15 11:49:44
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

qjc830401

ÈÙÓþ°æÖ÷ (ÖøÃûдÊÖ)

Chem.Q

¡ï
magua-no2(½ð±Ò+1,VIP+0):¶àлÌáʾ
ÓÃAVGɱɱ¿´°¡
http://www.pet2008.cn/index.php?fromuid=11277
3Â¥2007-09-15 12:13:38
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

magua-no2

ľ³æ (СÓÐÃûÆø)

2Â¥ÐֵܵĴð°¸ÎÒÔÚÍøÉÏÓв鵽,µ«ËƺõÖ¢×´²»Ò»Ñù°¡
4Â¥2007-09-15 12:28:53
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

lwy960803

ľ³æ (СÓÐÃûÆø)

¡ï
magua-no2(½ð±Ò+1,VIP+0):killautorunÓêÁÖľ·ç°æ±¾,ÏÂÔØÊ±¾ÍÌáʾÓв¡¶¾£¿
ÊÇ·ñ°²×°ÆäËüÈí¼þµÄʱºò¸½´ø×Ű²×°Á˺ڿÍÈí¼þ£¡£¡£¡

ÁíÍâÒÔºóÔÙÓÃÒÆ¶¯Ó²Å̵ϰ£¬×îºÃÊÇÏȲé²éÊÇ·ñÓÐAuto²¡¶¾£¡£¡
½¨ÒéʹÓÃkillautorunÓêÁÖľ·ç°æ±¾µÄ£¡£¡
5Â¥2007-09-15 12:36:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

liuwei0551

ÖÁ×ðľ³æ (ÖªÃû×÷¼Ò)

ÓÐAUTORUNµÄרɱ¹¤¾ß£¬ÈçAUOTORUN KILLERµÈÈí¼þ£¬´ÓÍøÉÏÏÂÔØÒ»¸ö£¬È»ºóÔÙ½øÐÐÇåÀí
6Â¥2007-09-15 15:05:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

wangchunzheng

ľ³æ (ÖøÃûдÊÖ)


·ÑÄǸö¾¢¸Éɶ ÖØ×°ÏµÍ³µÄÁË
7Â¥2007-09-15 16:26:29
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

ÍõТÊË

½ð³æ (ÖøÃûдÊÖ)

ÓÃunlocker ÂÛ̳ÁË ÍøÂçÉÏÓÐ
ÄÇÊDz¡¶¾ËÀºóÁôµÄ¡°¿Ç¿Ç¡± ÓÃunlocker°ÑËüɾ³ýÁ˾ͿÉÒÔÁË ×îºÃ×Ô¼º×öÒ»¸öautorun.infÎļþ¼ÐÀ´ÃâÒߣ¨×Ô¼ºÕÒ£©
ÈËÉúÔÚÊÀ¼¸Ê®Ä꣬²»Áôϵãʲô¶«Î÷£¬ÊµÔÚ¿ÉϧÁË£¡
8Â¥2007-09-15 16:52:56
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

wolflash

½ð³æ (СÓÐÃûÆø)

ÏµÍ³ÖØ×°ÊǸö²»´íµÄÑ¡Ôñ£¬×¢ÒâÖØ×°Ç°µÄÖØÒª×ÊÁϱ¸·Ý£®£®£®

Ò»¸öµÁ°æ°²×°ÅÌ¡¡Ò²¾Í£µ¿ìÇ®¡¡×°ºÃÖ®ºóÒ»¼üϵͳ±¸·Ý£¬ÒÔºó»µÁËÒ»¼ü»¹Ô­¶à·½±ã£®£®¡¡×îºÃ×°£³£¶£°°²È«ÎÀÊ¿£¨±ð×°ÔÚϵͳÅÌ£¬£×£É£Î£Ä£Ï£×£Óϵͳ¸üж¼ÓÃËü£©£¬ÒÔºó»¹Ô­Ö®ºóÒ²²»Óõ½ÍøÉÏÏÂwindow¸üÐÂÁË£¬£³£¶£°Îļþ¼ÐÏÂרÃÅÓиöÎļþ¼ÐÊǷŸüÐÂÎļþµÄ£®£®£®
Èç¹û²»Äܽ¾°ÁµÄ»î×Å£¬ÎÒÑ¡ÔñËÀÍö£¡¡ª¡¶ºìÉ«ÁµÈË¡·
9Â¥2007-09-15 17:02:29
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

wanghuangiggs

½ð³æ (ÕýʽдÊÖ)

ÒªÉϽø

¿ÉÄܶ¼ÊÇÓÉÓÚAUOTORUN²¡¶¾µ¼Öµģ¬ÓÃAUOTORUN  KILLERɱÏÂÊÔÊÔ
²»ÐоÍ×°¿¨°Í˹»ùÉý¼¶µ½×îв¡¶¾¿â£¬ÔÚ°²È«Ä£Ê½ÏÂɱ£¬¿ÉÄÜÒª4¡«5Сʱ£¬ÂýÒ»µã¹ÜÓÃ
10Â¥2007-09-15 17:10:22
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
Ïà¹Ø°æ¿éÌø×ª ÎÒÒª¶©ÔÄÂ¥Ö÷ magua-no2 µÄÖ÷Ìâ¸üÐÂ
²»Ó¦Öú È·¶¨»ØÌûÓ¦Öú (×¢Ò⣺ӦÖú²Å¿ÉÄܱ»½±Àø£¬µ«²»ÔÊÐí¹àË®£¬±ØÐëÌîд15¸ö×Ö·ûÒÔÉÏ)
×î¾ßÈËÆøÈÈÌûÍÆ¼ö [²é¿´È«²¿] ×÷Õß »Ø/¿´ ×îºó·¢±í
[¿¼ÑÐ] 291 Çóµ÷¼Á +6 »¯¹¤2026½ì±ÏÒµÉ 2026-03-21 7/350 2026-03-26 02:14 by BruceLiu320
[˶²©¼ÒÔ°] ±±¾©ÁÖÒµ´óѧ˶µ¼ÕÐÉú¹ã¸æ +3 kongweilin 2026-03-26 3/150 2026-03-26 00:53 by 15723253818
[¿¼ÑÐ] 332Çóµ÷¼Á +6 032500 2026-03-25 6/300 2026-03-25 22:45 by 418490947
[¿¼ÑÐ] 275Çóµ÷¼Á +3 Micky11223 2026-03-25 5/250 2026-03-25 22:32 by barlinike
[¿¼ÑÐ] Ò»Ö¾Ô¸ºÓ¹¤´ó 081700 276Çóµ÷¼Á +3 µØÇòÈÆ×ÅÌ«Ñôת 2026-03-23 3/150 2026-03-25 19:10 by ÎíÉ¢ºóÏàÓölc
[¿¼ÑÐ] ¡¾2026¿¼Ñе÷¼Á¡¿ÖÆÒ©¹¤³Ì 284·Ö ÇóÏà¹Ø×¨Òµµ÷¼ÁÃû¶î +4 Ô¬Û¼Û¼ 2026-03-25 8/400 2026-03-25 14:32 by lbsjt
[¿¼ÑÐ] ²ÄÁÏÓ뻯¹¤¿¼Ñе÷¼Á +9 ‹üÈA 2026-03-22 9/450 2026-03-25 13:09 by cmz0325
[¿¼ÑÐ] ²ÄÁϵ÷¼Á +3 iwinso 2026-03-23 3/150 2026-03-25 11:29 by greychen00
[¿¼ÑÐ] Çóµ÷¼Á Ò»Ö¾Ô¸ ±¾¿Æ ±±¿Æ´ó »¯Ñ§ 343 +4 13831862839 2026-03-24 5/250 2026-03-25 09:47 by Î޼ʵIJÝÔ­
[¿¼ÑÐ] ÉϺ£µçÁ¦´óѧ²ÄÁÏ·À»¤ÓëвÄÁÏÖØµãʵÑéÊÒÕÐÊÕµ÷¼ÁÑо¿Éú£¨²ÄÁÏ¡¢»¯Ñ§¡¢µç»¯Ñ§£¬»·¾³£© +4 ÎÒ°®Ñ§µç³Ø 2026-03-23 4/200 2026-03-25 00:59 by 1027_324
[¿¼ÑÐ] µ÷¼Á +4 13853210211 2026-03-24 4/200 2026-03-24 19:44 by ms629
[¿¼ÑÐ] 292Çóµ÷¼Á +4 ¶ì¶ì¶ì¶î¶î¶î¶î¶ 2026-03-24 4/200 2026-03-24 16:41 by peike
[¿¼ÑÐ] 080500Çóµ÷¼Á +3 zzzzfan 2026-03-24 3/150 2026-03-24 16:38 by barlinike
[¿¼ÑÐ] 384Çóµ÷¼Á +3 ×Óϵ²© 2026-03-22 6/300 2026-03-23 21:45 by ×Óϵ²©
[¿¼ÑÐ] 350Çóµ÷¼Á +6 weudhdk 2026-03-19 6/300 2026-03-23 15:47 by tangyuan0840221
[¿¼ÑÐ] Çóµ÷¼Á +3 13341 2026-03-20 3/150 2026-03-21 18:28 by ѧԱ8dgXkO
[¿¼ÑÐ] Çóµ÷¼Á +3 .m.. 2026-03-21 4/200 2026-03-21 16:25 by barlinike
[¿¼ÑÐ] ²ÄÁÏÓ뻯¹¤£¨0856£©304Çó BÇø µ÷¼Á +3 Çñgl 2026-03-21 3/150 2026-03-21 13:47 by lature00
[¿¼ÑÐ] 085601µ÷¼Á 358·Ö +3 zzzzggh 2026-03-20 4/200 2026-03-21 10:21 by luoyongfeng
[¿¼ÑÐ] 22408 344·Ö Çóµ÷¼Á Ò»Ö¾Ô¸ »ªµç¼ÆËã»ú¼¼Êõ +4 solanXXX 2026-03-20 4/200 2026-03-20 23:49 by alg094825
ÐÅÏ¢Ìáʾ
ÇëÌî´¦ÀíÒâ¼û