±±¾©Ê¯ÓÍ»¯¹¤Ñ§Ôº2026ÄêÑо¿ÉúÕÐÉú½ÓÊÕµ÷¼Á¹«¸æ
²é¿´: 325  |  »Ø¸´: 10
µ±Ç°Ö÷ÌâÒѾ­´æµµ¡£
¡¾ÐüÉͽð±Ò¡¿»Ø´ð±¾ÌûÎÊÌ⣬×÷Õßmagua-no2½«ÔùËÍÄú 2 ¸ö½ð±Ò

magua-no2

ľ³æ (СÓÐÃûÆø)

[ÇóÖú] µçÄÔÖж¾£¬Çë¸ßÊÖ°ïæ

ÎҵĵçÄÔ£¬×òÌìÓÉÓÚ½èÓÃͬѧµÄÒÆ¶¯Ó²Å̶øÖж¾¡£

ÌØÕ÷£º¿¨°Í˹»ù¼ì²âµ½DLLHOST.EXEºÍSVCHOST.EXE²¡¶¾£¬Ëƺõɾ³ý²»ÁË£¬ÎÒÑ¡ÔñÁ˸ôÀ룬ºóÀ´ÎÊÌâÒ»´ó¶Ñ
         ËùÓÐÓ²ÅÌ´ò²»¿ªÁË£¬Ö»ÄÜÓÒ»÷£¬È»ºóÑ¡´ò¿ª²ÅÄܽøÈ룻
        ÔËÐÐmsconfig£¬Ìáʾwindows ÕÒ²»µ½´ËÎļþ£»
        ¸÷Ó²Å̸ùĿ¼Ï³öÏÖrunauto.. Îļþ¼Ð£¬ÎÞ·¨É¾³ý¡£

ÎÒÕÒµ½DLLHOST.EXEºÍSVCHOST.EXE£¬·¢ÏÖÊÇ¡°ReLinsonϵÁÐÈí¼þ£¬¶à¹¦ÄÜÏÂÔØÕß¡±£¬ÍøÉÏÒ»²é£¬ËµÊǺڿÍÈí¼þ¡£


        ¸ßÊÖÃÇ£¬ÎÒ¸ÃÔõô°ì£¿ ¶àлָµã£¡¸Ð¼¤²»¾¡¡£

» ²ÂÄãϲ»¶

ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nucleus01

ÖÁ×ðľ³æ (ÖøÃûдÊÖ)

Сľ³æ±±Í¥½Ú¶Èʹ

¡ï
magua-no2(½ð±Ò+1,VIP+0):ÐÁ¿àÁË£¬iceswordûÓùý°¡
dllhost.exe²¡¶¾Çå³ý°ì·¨2007-06-09 12:31ÏÖÏóÃèÊö£º¸÷¸öÓ²ÅÌ·ÖÇøÓÐÒ»¸öÎļþ¼Ðrunauto.. £¬%windows%Ŀ¼ÏÂÓÐÌØÕ÷µÄ²¡¶¾Îļþdllhost.exe

Çå³ý²½Ö裺£¨ÒÔÏÂËùÓвÙ×÷ÔÚ IceSword ÖнøÐУ©Iceword v1.20ÏÂÔØ¼°¼òµ¥½éÉÜ
1¡¢½ûÖ¹½ø³Ì´´½¨¡£

2¡¢½áÊø²¡¶¾½ø³Ì%windows%\dllhost.exe¡£

3¡¢É¾³ý²¡¶¾Îļþ£º
         %windows%\dllhost.exe
           %windows%\cmd.exe.exe
           %windows%\regedit.exe.exe
           %windows%\setuprs1.exe
            x:\autorun.inf     (X´ú±íÓ²Å̸÷¸ö·ÖÇø¼°UÅÌÅÌ·û)
          x:\autorun.inf.tmp
         
4¡¢É¾³ý²¡¶¾·þÎñÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COMSystemApp
´ËÍ⣬HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List·Ö֧ϵÄ"C:\\windows\\dllhost.exe"="C:\\windows\\dllhost.exe:*:Enabled:dllhost.exe"ҲҪɾ³ý¡£

5¡¢É¾³ý²¡¶¾Ìí¼ÓµÄIFEOÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe

6¡¢È¡ÏûIceSwordµÄ¡°½ûÖ¹½ø³Ì´´½¨¡±£¬¹Ø±ÕIceSword¡£

7¡¢É¾³ý¸÷¸ö·ÖÇø¼°UÅÌÀïÃæµÄrunauto..Îļþ¼Ð£¬É¾³ý·½·¨£º£¨ÒÔ D ÅÌΪÀý£©

¿ªÊ¼¡ª¡ªÔËÐСª¡ªÊäÈë¡°cmd¡±¡ª¡ªÊäÈë¡°D: ¡±¡ª¡ªÊäÈë¡°rd /s/q runauto...\ ¡±

8¡¢Íê
ˬÊÇÒª¸¶³ö´ú¼ÛµÄ!
2Â¥2007-09-15 11:49:44
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

qjc830401

ÈÙÓþ°æÖ÷ (ÖøÃûдÊÖ)

Chem.Q

¡ï
magua-no2(½ð±Ò+1,VIP+0):¶àлÌáʾ
ÓÃAVGɱɱ¿´°¡
http://www.pet2008.cn/index.php?fromuid=11277
3Â¥2007-09-15 12:13:38
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

magua-no2

ľ³æ (СÓÐÃûÆø)

2Â¥ÐֵܵĴð°¸ÎÒÔÚÍøÉÏÓв鵽,µ«ËƺõÖ¢×´²»Ò»Ñù°¡
4Â¥2007-09-15 12:28:53
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

lwy960803

ľ³æ (СÓÐÃûÆø)

¡ï
magua-no2(½ð±Ò+1,VIP+0):killautorunÓêÁÖľ·ç°æ±¾,ÏÂÔØÊ±¾ÍÌáʾÓв¡¶¾£¿
ÊÇ·ñ°²×°ÆäËüÈí¼þµÄʱºò¸½´ø×Ű²×°Á˺ڿÍÈí¼þ£¡£¡£¡

ÁíÍâÒÔºóÔÙÓÃÒÆ¶¯Ó²Å̵ϰ£¬×îºÃÊÇÏȲé²éÊÇ·ñÓÐAuto²¡¶¾£¡£¡
½¨ÒéʹÓÃkillautorunÓêÁÖľ·ç°æ±¾µÄ£¡£¡
5Â¥2007-09-15 12:36:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

liuwei0551

ÖÁ×ðľ³æ (ÖªÃû×÷¼Ò)

ÓÐAUTORUNµÄרɱ¹¤¾ß£¬ÈçAUOTORUN KILLERµÈÈí¼þ£¬´ÓÍøÉÏÏÂÔØÒ»¸ö£¬È»ºóÔÙ½øÐÐÇåÀí
6Â¥2007-09-15 15:05:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

wangchunzheng

ľ³æ (ÖøÃûдÊÖ)


·ÑÄǸö¾¢¸Éɶ ÖØ×°ÏµÍ³µÄÁË
7Â¥2007-09-15 16:26:29
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

ÍõТÊË

½ð³æ (ÖøÃûдÊÖ)

ÓÃunlocker ÂÛ̳ÁË ÍøÂçÉÏÓÐ
ÄÇÊDz¡¶¾ËÀºóÁôµÄ¡°¿Ç¿Ç¡± ÓÃunlocker°ÑËüɾ³ýÁ˾ͿÉÒÔÁË ×îºÃ×Ô¼º×öÒ»¸öautorun.infÎļþ¼ÐÀ´ÃâÒߣ¨×Ô¼ºÕÒ£©
ÈËÉúÔÚÊÀ¼¸Ê®Ä꣬²»Áôϵãʲô¶«Î÷£¬ÊµÔÚ¿ÉϧÁË£¡
8Â¥2007-09-15 16:52:56
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

wolflash

½ð³æ (СÓÐÃûÆø)

ÏµÍ³ÖØ×°ÊǸö²»´íµÄÑ¡Ôñ£¬×¢ÒâÖØ×°Ç°µÄÖØÒª×ÊÁϱ¸·Ý£®£®£®

Ò»¸öµÁ°æ°²×°ÅÌ¡¡Ò²¾Í£µ¿ìÇ®¡¡×°ºÃÖ®ºóÒ»¼üϵͳ±¸·Ý£¬ÒÔºó»µÁËÒ»¼ü»¹Ô­¶à·½±ã£®£®¡¡×îºÃ×°£³£¶£°°²È«ÎÀÊ¿£¨±ð×°ÔÚϵͳÅÌ£¬£×£É£Î£Ä£Ï£×£Óϵͳ¸üж¼ÓÃËü£©£¬ÒÔºó»¹Ô­Ö®ºóÒ²²»Óõ½ÍøÉÏÏÂwindow¸üÐÂÁË£¬£³£¶£°Îļþ¼ÐÏÂרÃÅÓиöÎļþ¼ÐÊǷŸüÐÂÎļþµÄ£®£®£®
Èç¹û²»Äܽ¾°ÁµÄ»î×Å£¬ÎÒÑ¡ÔñËÀÍö£¡¡ª¡¶ºìÉ«ÁµÈË¡·
9Â¥2007-09-15 17:02:29
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

wanghuangiggs

½ð³æ (ÕýʽдÊÖ)

ÒªÉϽø

¿ÉÄܶ¼ÊÇÓÉÓÚAUOTORUN²¡¶¾µ¼Öµģ¬ÓÃAUOTORUN  KILLERɱÏÂÊÔÊÔ
²»ÐоÍ×°¿¨°Í˹»ùÉý¼¶µ½×îв¡¶¾¿â£¬ÔÚ°²È«Ä£Ê½ÏÂɱ£¬¿ÉÄÜÒª4¡«5Сʱ£¬ÂýÒ»µã¹ÜÓÃ
10Â¥2007-09-15 17:10:22
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
Ïà¹Ø°æ¿éÌø×ª ÎÒÒª¶©ÔÄÂ¥Ö÷ magua-no2 µÄÖ÷Ìâ¸üÐÂ
²»Ó¦Öú È·¶¨»ØÌûÓ¦Öú (×¢Ò⣺ӦÖú²Å¿ÉÄܱ»½±Àø£¬µ«²»ÔÊÐí¹àË®£¬±ØÐëÌîд15¸ö×Ö·ûÒÔÉÏ)
×î¾ßÈËÆøÈÈÌûÍÆ¼ö [²é¿´È«²¿] ×÷Õß »Ø/¿´ ×îºó·¢±í
[˶²©¼ÒÔ°] ÕÐÊÕÉúÎïѧ/ϸ°ûÉúÎïѧµ÷¼Á +3 IceGuo 2026-03-26 4/200 2026-03-27 05:35 by user003
[¿¼ÑÐ] 324Çóµ÷¼Á +6 hanamiko 2026-03-26 8/400 2026-03-27 04:40 by wxiongid
[¿¼ÑÐ] Çóµ÷¼Á£¬Ò»Ö¾Ô¸ ÄϾ©º½¿Õº½Ìì´óѧ´óѧ £¬080500²ÄÁÏ¿ÆÑ§Ó빤³Ìѧ˶ +3 @taotao 2026-03-26 4/200 2026-03-27 03:50 by wxiongid
[¿¼ÑÐ] 291Çóµ÷¼Á +9 hhhhxn.. 2026-03-23 9/450 2026-03-26 18:59 by ²»³Ôô~µÄ؈
[¿¼ÑÐ] ¿¼Ñе÷¼Á +8 СÀ¯ÐÂ±Ê 2026-03-26 8/400 2026-03-26 16:18 by dick_runner
[¿¼ÑÐ] 081700 µ÷¼Á 267·Ö +11 ÃÔÈ˵Ĺþ¹þ 2026-03-23 11/550 2026-03-26 15:41 by zzll406
[¿¼ÑÐ] Ò»Ö¾Ô¸ºÓ¹¤´ó 081700 276Çóµ÷¼Á +4 µØÇòÈÆ×ÅÌ«Ñôת 2026-03-23 4/200 2026-03-26 14:27 by zzll406
[¿¼ÑÐ] 263Çóµ÷¼Á +6 yqdszhdap£­ 2026-03-22 10/500 2026-03-26 13:11 by ¹«èªåÐÒ£
[¿¼ÑÐ] 291 Çóµ÷¼Á +7 »¯¹¤2026½ì±ÏÒµÉ 2026-03-21 8/400 2026-03-26 11:25 by AlenQIN.
[¿¼ÑÐ] ²ÄÁÏÇóµ÷¼Á +4 .m.. 2026-03-25 4/200 2026-03-25 21:30 by peike
[¿¼ÑÐ] 359Çóµ÷¼Á +3 ÍõÁ˸öéª 2026-03-25 3/150 2026-03-25 12:50 by Dyhoer
[¿¼ÑÐ] 085600²ÄÁÏÓ뻯¹¤µ÷¼Á +9 A-¶ßÀ²ZÃÎ 2026-03-23 15/750 2026-03-25 11:18 by Ainin_
[¿¼ÑÐ] µ÷¼Á +4 13853210211 2026-03-24 4/200 2026-03-24 19:44 by ms629
[¿¼ÑÐ] 080500Çóµ÷¼Á +3 zzzzfan 2026-03-24 3/150 2026-03-24 16:38 by barlinike
[¿¼ÑÐ] 280·ÖÇóµ÷¼Á Ò»Ö¾Ô¸085802 +4 PUMPT 2026-03-22 7/350 2026-03-22 22:13 by ÐÇ¿ÕÐÇÔÂ
[¿¼ÑÐ] ²ÄÁÏѧ˶301·ÖÇóµ÷¼Á +7 Liyouyumairs 2026-03-21 7/350 2026-03-21 22:31 by peike
[¿¼ÑÐ] ²ÄÁÏÇóµ÷¼Á +5 @taotao 2026-03-21 5/250 2026-03-21 20:55 by lbsjt
[¿¼ÑÐ] Ò»Ö¾Ô¸¶«»ª´óѧ¿ØÖÆÑ§Ë¶320Çóµ÷¼Á +3 Grand777 2026-03-21 3/150 2026-03-21 19:23 by ¼òÖ®-
[¿¼ÑÐ] 330Çóµ÷¼Á0854 +3 assdll 2026-03-21 3/150 2026-03-21 13:01 by ²«»÷518
[¿¼ÑÐ] 085601µ÷¼Á 358·Ö +3 zzzzggh 2026-03-20 4/200 2026-03-21 10:21 by luoyongfeng
ÐÅÏ¢Ìáʾ
ÇëÌî´¦ÀíÒâ¼û