²é¿´: 296  |  »Ø¸´: 10
µ±Ç°Ö÷ÌâÒѾ­´æµµ¡£
¡¾ÐüÉͽð±Ò¡¿»Ø´ð±¾ÌûÎÊÌ⣬×÷Õßmagua-no2½«ÔùËÍÄú 2 ¸ö½ð±Ò
µ±Ç°Ö»ÏÔʾÂú×ãÖ¸¶¨Ìõ¼þµÄ»ØÌû£¬µã»÷ÕâÀï²é¿´±¾»°ÌâµÄËùÓлØÌû

magua-no2

ľ³æ (СÓÐÃûÆø)

[ÇóÖú] µçÄÔÖж¾£¬Çë¸ßÊÖ°ïæ

ÎҵĵçÄÔ£¬×òÌìÓÉÓÚ½èÓÃͬѧµÄÒÆ¶¯Ó²Å̶øÖж¾¡£

ÌØÕ÷£º¿¨°Í˹»ù¼ì²âµ½DLLHOST.EXEºÍSVCHOST.EXE²¡¶¾£¬Ëƺõɾ³ý²»ÁË£¬ÎÒÑ¡ÔñÁ˸ôÀ룬ºóÀ´ÎÊÌâÒ»´ó¶Ñ
         ËùÓÐÓ²ÅÌ´ò²»¿ªÁË£¬Ö»ÄÜÓÒ»÷£¬È»ºóÑ¡´ò¿ª²ÅÄܽøÈ룻
        ÔËÐÐmsconfig£¬Ìáʾwindows ÕÒ²»µ½´ËÎļþ£»
        ¸÷Ó²Å̸ùĿ¼Ï³öÏÖrunauto.. Îļþ¼Ð£¬ÎÞ·¨É¾³ý¡£

ÎÒÕÒµ½DLLHOST.EXEºÍSVCHOST.EXE£¬·¢ÏÖÊÇ¡°ReLinsonϵÁÐÈí¼þ£¬¶à¹¦ÄÜÏÂÔØÕß¡±£¬ÍøÉÏÒ»²é£¬ËµÊǺڿÍÈí¼þ¡£


        ¸ßÊÖÃÇ£¬ÎÒ¸ÃÔõô°ì£¿ ¶àлָµã£¡¸Ð¼¤²»¾¡¡£

» ²ÂÄãϲ»¶

ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

lwy960803

ľ³æ (СÓÐÃûÆø)

¡ï
magua-no2(½ð±Ò+1,VIP+0):killautorunÓêÁÖľ·ç°æ±¾,ÏÂÔØÊ±¾ÍÌáʾÓв¡¶¾£¿
ÊÇ·ñ°²×°ÆäËüÈí¼þµÄʱºò¸½´ø×Ű²×°Á˺ڿÍÈí¼þ£¡£¡£¡

ÁíÍâÒÔºóÔÙÓÃÒÆ¶¯Ó²Å̵ϰ£¬×îºÃÊÇÏȲé²éÊÇ·ñÓÐAuto²¡¶¾£¡£¡
½¨ÒéʹÓÃkillautorunÓêÁÖľ·ç°æ±¾µÄ£¡£¡
5Â¥2007-09-15 12:36:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
²é¿´È«²¿ 11 ¸ö»Ø´ð

nucleus01

ÖÁ×ðľ³æ (ÖøÃûдÊÖ)

Сľ³æ±±Í¥½Ú¶Èʹ

¡ï
magua-no2(½ð±Ò+1,VIP+0):ÐÁ¿àÁË£¬iceswordûÓùý°¡
dllhost.exe²¡¶¾Çå³ý°ì·¨2007-06-09 12:31ÏÖÏóÃèÊö£º¸÷¸öÓ²ÅÌ·ÖÇøÓÐÒ»¸öÎļþ¼Ðrunauto.. £¬%windows%Ŀ¼ÏÂÓÐÌØÕ÷µÄ²¡¶¾Îļþdllhost.exe

Çå³ý²½Ö裺£¨ÒÔÏÂËùÓвÙ×÷ÔÚ IceSword ÖнøÐУ©Iceword v1.20ÏÂÔØ¼°¼òµ¥½éÉÜ
1¡¢½ûÖ¹½ø³Ì´´½¨¡£

2¡¢½áÊø²¡¶¾½ø³Ì%windows%\dllhost.exe¡£

3¡¢É¾³ý²¡¶¾Îļþ£º
         %windows%\dllhost.exe
           %windows%\cmd.exe.exe
           %windows%\regedit.exe.exe
           %windows%\setuprs1.exe
            x:\autorun.inf     (X´ú±íÓ²Å̸÷¸ö·ÖÇø¼°UÅÌÅÌ·û)
          x:\autorun.inf.tmp
         
4¡¢É¾³ý²¡¶¾·þÎñÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COMSystemApp
´ËÍ⣬HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List·Ö֧ϵÄ"C:\\windows\\dllhost.exe"="C:\\windows\\dllhost.exe:*:Enabled:dllhost.exe"ҲҪɾ³ý¡£

5¡¢É¾³ý²¡¶¾Ìí¼ÓµÄIFEOÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe

6¡¢È¡ÏûIceSwordµÄ¡°½ûÖ¹½ø³Ì´´½¨¡±£¬¹Ø±ÕIceSword¡£

7¡¢É¾³ý¸÷¸ö·ÖÇø¼°UÅÌÀïÃæµÄrunauto..Îļþ¼Ð£¬É¾³ý·½·¨£º£¨ÒÔ D ÅÌΪÀý£©

¿ªÊ¼¡ª¡ªÔËÐСª¡ªÊäÈë¡°cmd¡±¡ª¡ªÊäÈë¡°D: ¡±¡ª¡ªÊäÈë¡°rd /s/q runauto...\ ¡±

8¡¢Íê
ˬÊÇÒª¸¶³ö´ú¼ÛµÄ!
2Â¥2007-09-15 11:49:44
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

magua-no2

ľ³æ (СÓÐÃûÆø)

2Â¥ÐֵܵĴð°¸ÎÒÔÚÍøÉÏÓв鵽,µ«ËƺõÖ¢×´²»Ò»Ñù°¡
4Â¥2007-09-15 12:28:53
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

liuwei0551

ÖÁ×ðľ³æ (ÖªÃû×÷¼Ò)

ÓÐAUTORUNµÄרɱ¹¤¾ß£¬ÈçAUOTORUN KILLERµÈÈí¼þ£¬´ÓÍøÉÏÏÂÔØÒ»¸ö£¬È»ºóÔÙ½øÐÐÇåÀí
6Â¥2007-09-15 15:05:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
²»Ó¦Öú È·¶¨»ØÌûÓ¦Öú (×¢Ò⣺ӦÖú²Å¿ÉÄܱ»½±Àø£¬µ«²»ÔÊÐí¹àË®£¬±ØÐëÌîд15¸ö×Ö·ûÒÔÉÏ)
×î¾ßÈËÆøÈÈÌûÍÆ¼ö [²é¿´È«²¿] ×÷Õß »Ø/¿´ ×îºó·¢±í
[¿¼ÑÐ] 340Çóµ÷¼Á +4 »°Ã·ÌÇ111 2026-03-24 4/200 2026-03-24 21:41 by yuyu98412
[¿¼ÑÐ] 0703»¯Ñ§µ÷¼Á£¬Çóµ¼Ê¦ÊÕ +7 ÌìÌìºÃÔËÀ´Éϰ¶° 2026-03-24 7/350 2026-03-24 20:26 by peike
[¿¼ÑÐ] 289Çóµ÷¼Á +8 ˶ÐǸ° 2026-03-23 8/400 2026-03-24 20:17 by peike
[¿¼ÑÐ] Çóµ÷¼Á +5 ÁÖ֮Ϧ 2026-03-24 5/250 2026-03-24 17:16 by dick_runner
[¿¼ÑÐ] ²ÄÁÏר˶331Çóµ÷¼Á +4 Ïʵ±Å£ 2026-03-24 4/200 2026-03-24 15:58 by JourneyLucky
[¿¼ÑÐ] 303Çóµ÷¼Á +4 ԪϦԪ 2026-03-20 4/200 2026-03-23 19:00 by macy2011
[¿¼ÑÐ] ÉϺ£µçÁ¦´óѧ²ÄÁÏ·À»¤ÓëвÄÁÏÖØµãʵÑéÊÒÕÐÊÕµ÷¼ÁÑо¿Éú£¨²ÄÁÏ¡¢»¯Ñ§¡¢µç»¯Ñ§£¬»·¾³£© +3 ÎÒ°®Ñ§µç³Ø 2026-03-23 3/150 2026-03-23 17:16 by AZMK
[¿¼ÑÐ] ±±¿Æ281ѧ˶²ÄÁÏÇóµ÷¼Á +8 tcxiaoxx 2026-03-20 9/450 2026-03-23 12:16 by tcxiaoxx
[¿¼ÑÐ] 317Çóµ÷¼Á +12 Éê×ÓÉêÉê 2026-03-19 18/900 2026-03-22 22:23 by luoyongfeng
[¿¼ÑÐ] 287Çóµ÷¼Á +8 ³¿»èÏßÓëÐǺ£ 2026-03-19 9/450 2026-03-22 17:01 by i_cooler
[¿¼ÑÐ] 297Çóµ÷¼Á +3 ϲ»¶»¹ÊDz»¸ÊÐÄ 2026-03-20 3/150 2026-03-21 18:33 by ѧԱ8dgXkO
[¿¼ÑÐ] Çóµ÷¼Á +3 13341 2026-03-20 3/150 2026-03-21 18:28 by ѧԱ8dgXkO
[¿¼ÑÐ] 274Çóµ÷¼Á +10 S.H1 2026-03-18 10/500 2026-03-20 23:51 by JourneyLucky
[¿¼ÑÐ] Ò»Ö¾Ô¸ Î÷±±´óѧ £¬070300»¯Ñ§Ñ§Ë¶£¬×Ü·Ö287£¬Ë«·ÇÒ»±¾£¬Çóµ÷¼Á¡£ +4 ³¿»èÏßÓëÐǺ£ 2026-03-19 4/200 2026-03-20 22:15 by JourneyLucky
[¿¼ÑÐ] 329Çóµ÷¼Á +9 ÏëÉÏѧ߹߹ 2026-03-19 9/450 2026-03-20 22:01 by luoyongfeng
[¿¼ÑÐ] 290Çóµ÷¼Á +7 ^O^Ø¿ 2026-03-19 7/350 2026-03-20 21:43 by JourneyLucky
[¿¼ÑÐ] Ò»Ö¾Ô¸Î÷°²½»Í¨´óѧ ѧ˶ 354Çóµ÷¼Á211»òÕß˫һÁ÷ +3 ÎÒÏëÒª¶ÁÑо¿Éú 2026-03-20 3/150 2026-03-20 20:13 by JourneyLucky
[¿¼ÑÐ] Çóµ÷¼Á +3 @taotao 2026-03-20 3/150 2026-03-20 19:35 by JourneyLucky
[¿¼ÑÐ] Ò»Ö¾Ô¸¸£´ó288Óлú»¯Ñ§£¬Çóµ÷¼Á +3 Сľ³æ200408204 2026-03-18 3/150 2026-03-19 13:31 by houyaoxu
[¿¼ÑÐ] ¡¾Í¬¼ÃÈí¼þ¡¿Èí¼þ£¨085405£©¿¼ÑÐÇóµ÷¼Á +3 2026eternal 2026-03-18 3/150 2026-03-18 19:09 by ²«»÷518
ÐÅÏ¢Ìáʾ
ÇëÌî´¦ÀíÒâ¼û