²é¿´: 293  |  »Ø¸´: 10
µ±Ç°Ö÷ÌâÒѾ­´æµµ¡£
¡¾ÐüÉͽð±Ò¡¿»Ø´ð±¾ÌûÎÊÌ⣬×÷Õßmagua-no2½«ÔùËÍÄú 2 ¸ö½ð±Ò
µ±Ç°Ö»ÏÔʾÂú×ãÖ¸¶¨Ìõ¼þµÄ»ØÌû£¬µã»÷ÕâÀï²é¿´±¾»°ÌâµÄËùÓлØÌû

magua-no2

ľ³æ (СÓÐÃûÆø)

[ÇóÖú] µçÄÔÖж¾£¬Çë¸ßÊÖ°ïæ

ÎҵĵçÄÔ£¬×òÌìÓÉÓÚ½èÓÃͬѧµÄÒÆ¶¯Ó²Å̶øÖж¾¡£

ÌØÕ÷£º¿¨°Í˹»ù¼ì²âµ½DLLHOST.EXEºÍSVCHOST.EXE²¡¶¾£¬Ëƺõɾ³ý²»ÁË£¬ÎÒÑ¡ÔñÁ˸ôÀ룬ºóÀ´ÎÊÌâÒ»´ó¶Ñ
         ËùÓÐÓ²ÅÌ´ò²»¿ªÁË£¬Ö»ÄÜÓÒ»÷£¬È»ºóÑ¡´ò¿ª²ÅÄܽøÈ룻
        ÔËÐÐmsconfig£¬Ìáʾwindows ÕÒ²»µ½´ËÎļþ£»
        ¸÷Ó²Å̸ùĿ¼Ï³öÏÖrunauto.. Îļþ¼Ð£¬ÎÞ·¨É¾³ý¡£

ÎÒÕÒµ½DLLHOST.EXEºÍSVCHOST.EXE£¬·¢ÏÖÊÇ¡°ReLinsonϵÁÐÈí¼þ£¬¶à¹¦ÄÜÏÂÔØÕß¡±£¬ÍøÉÏÒ»²é£¬ËµÊǺڿÍÈí¼þ¡£


        ¸ßÊÖÃÇ£¬ÎÒ¸ÃÔõô°ì£¿ ¶àлָµã£¡¸Ð¼¤²»¾¡¡£

» ²ÂÄãϲ»¶

ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

lwy960803

ľ³æ (СÓÐÃûÆø)

¡ï
magua-no2(½ð±Ò+1,VIP+0):killautorunÓêÁÖľ·ç°æ±¾,ÏÂÔØÊ±¾ÍÌáʾÓв¡¶¾£¿
ÊÇ·ñ°²×°ÆäËüÈí¼þµÄʱºò¸½´ø×Ű²×°Á˺ڿÍÈí¼þ£¡£¡£¡

ÁíÍâÒÔºóÔÙÓÃÒÆ¶¯Ó²Å̵ϰ£¬×îºÃÊÇÏȲé²éÊÇ·ñÓÐAuto²¡¶¾£¡£¡
½¨ÒéʹÓÃkillautorunÓêÁÖľ·ç°æ±¾µÄ£¡£¡
5Â¥2007-09-15 12:36:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
²é¿´È«²¿ 11 ¸ö»Ø´ð

nucleus01

ÖÁ×ðľ³æ (ÖøÃûдÊÖ)

Сľ³æ±±Í¥½Ú¶Èʹ

¡ï
magua-no2(½ð±Ò+1,VIP+0):ÐÁ¿àÁË£¬iceswordûÓùý°¡
dllhost.exe²¡¶¾Çå³ý°ì·¨2007-06-09 12:31ÏÖÏóÃèÊö£º¸÷¸öÓ²ÅÌ·ÖÇøÓÐÒ»¸öÎļþ¼Ðrunauto.. £¬%windows%Ŀ¼ÏÂÓÐÌØÕ÷µÄ²¡¶¾Îļþdllhost.exe

Çå³ý²½Ö裺£¨ÒÔÏÂËùÓвÙ×÷ÔÚ IceSword ÖнøÐУ©Iceword v1.20ÏÂÔØ¼°¼òµ¥½éÉÜ
1¡¢½ûÖ¹½ø³Ì´´½¨¡£

2¡¢½áÊø²¡¶¾½ø³Ì%windows%\dllhost.exe¡£

3¡¢É¾³ý²¡¶¾Îļþ£º
         %windows%\dllhost.exe
           %windows%\cmd.exe.exe
           %windows%\regedit.exe.exe
           %windows%\setuprs1.exe
            x:\autorun.inf     (X´ú±íÓ²Å̸÷¸ö·ÖÇø¼°UÅÌÅÌ·û)
          x:\autorun.inf.tmp
         
4¡¢É¾³ý²¡¶¾·þÎñÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COMSystemApp
´ËÍ⣬HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List·Ö֧ϵÄ"C:\\windows\\dllhost.exe"="C:\\windows\\dllhost.exe:*:Enabled:dllhost.exe"ҲҪɾ³ý¡£

5¡¢É¾³ý²¡¶¾Ìí¼ÓµÄIFEOÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe

6¡¢È¡ÏûIceSwordµÄ¡°½ûÖ¹½ø³Ì´´½¨¡±£¬¹Ø±ÕIceSword¡£

7¡¢É¾³ý¸÷¸ö·ÖÇø¼°UÅÌÀïÃæµÄrunauto..Îļþ¼Ð£¬É¾³ý·½·¨£º£¨ÒÔ D ÅÌΪÀý£©

¿ªÊ¼¡ª¡ªÔËÐСª¡ªÊäÈë¡°cmd¡±¡ª¡ªÊäÈë¡°D: ¡±¡ª¡ªÊäÈë¡°rd /s/q runauto...\ ¡±

8¡¢Íê
ˬÊÇÒª¸¶³ö´ú¼ÛµÄ!
2Â¥2007-09-15 11:49:44
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

magua-no2

ľ³æ (СÓÐÃûÆø)

2Â¥ÐֵܵĴð°¸ÎÒÔÚÍøÉÏÓв鵽,µ«ËƺõÖ¢×´²»Ò»Ñù°¡
4Â¥2007-09-15 12:28:53
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

liuwei0551

ÖÁ×ðľ³æ (ÖªÃû×÷¼Ò)

ÓÐAUTORUNµÄרɱ¹¤¾ß£¬ÈçAUOTORUN KILLERµÈÈí¼þ£¬´ÓÍøÉÏÏÂÔØÒ»¸ö£¬È»ºóÔÙ½øÐÐÇåÀí
6Â¥2007-09-15 15:05:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
²»Ó¦Öú È·¶¨»ØÌûÓ¦Öú (×¢Ò⣺ӦÖú²Å¿ÉÄܱ»½±Àø£¬µ«²»ÔÊÐí¹àË®£¬±ØÐëÌîд15¸ö×Ö·ûÒÔÉÏ)
×î¾ßÈËÆøÈÈÌûÍÆ¼ö [²é¿´È«²¿] ×÷Õß »Ø/¿´ ×îºó·¢±í
[¿¼ÑÐ] 085600²ÄÁÏÓ뻯¹¤µ÷¼Á +7 A-¶ßÀ²ZÃÎ 2026-03-23 12/600 2026-03-23 23:16 by ÐÇ¿ÕÐÇÔÂ
[¿¼ÑÐ] 384Çóµ÷¼Á +3 ×Óϵ²© 2026-03-22 6/300 2026-03-23 21:45 by ×Óϵ²©
[¿¼ÑÐ] Ò»Ö¾Ô¸ÉÂʦ´óÉúÎïѧ071000£¬298·Ö£¬Çóµ÷¼Á +3 SYA£¡ 2026-03-23 3/150 2026-03-23 19:09 by macy2011
[¿¼ÑÐ] 291 Çóµ÷¼Á +4 »¯¹¤2026½ì±ÏÒµÉ 2026-03-21 5/250 2026-03-23 16:46 by »¯¹¤2026½ì±ÏÒµÉ
[¿¼ÑÐ] ¿¼Ñе÷¼Á +3 ºôºô£¿~+123456 2026-03-21 3/150 2026-03-21 20:04 by Î޼ʵIJÝÔ­
[¿¼ÑÐ] ²ÄÁÏѧ˶333Çóµ÷¼Á +3 ±±µÀÏï 2026-03-18 3/150 2026-03-21 18:17 by ѧԱ8dgXkO
[¿¼ÑÐ] Çóµ÷¼Á +3 °×QF 2026-03-21 3/150 2026-03-21 13:12 by zhukairuo
[¿¼ÑÐ] ²ÄÁϹ¤³Ì£¨×¨£©Ò»Ö¾Ô¸985 ³õÊÔ335Çóµ÷¼Á +3 hiloiy 2026-03-17 4/200 2026-03-21 03:04 by JourneyLucky
[¿¼ÑÐ] 083200ѧ˶321·ÖÒ»Ö¾Ô¸ôßÄÏ´óѧÇóµ÷¼Á +3 innocenceF 2026-03-17 3/150 2026-03-21 02:35 by JourneyLucky
[¿¼ÑÐ] »¯Ñ§Çóµ÷¼Á +4 ÁÙÔó¾³llllll 2026-03-17 5/250 2026-03-21 02:23 by JourneyLucky
[¿¼ÑÐ] Ò»Ö¾Ô¸»ªÖпƼ¼´óѧ£¬080502£¬354·ÖÇóµ÷¼Á +5 ÊØºòϦÑôCF 2026-03-18 5/250 2026-03-21 01:06 by JourneyLucky
[¿¼ÑÐ] 294Çóµ÷¼Á²ÄÁÏÓ뻯¹¤×¨Ë¶ +15 ݤÎÉ­ÁÖ 2026-03-18 15/750 2026-03-20 23:28 by JourneyLucky
[¿¼ÑÐ] Çóµ÷¼Á£¬Ò»Ö¾Ô¸:ÄϾ©º½¿Õº½Ìì´óѧ´óѧ £¬080500²ÄÁÏ¿ÆÑ§Ó빤³Ìѧ˶£¬×Ü·Ö289·Ö +4 @taotao 2026-03-19 4/200 2026-03-20 22:14 by JourneyLucky
[¿¼ÑÐ] ÖÐÄÏ´óѧ»¯Ñ§Ñ§Ë¶337Çóµ÷¼Á +3 niko- 2026-03-19 6/300 2026-03-20 21:58 by luoyongfeng
[¿¼ÑÐ] ²ÄÁÏѧÇóµ÷¼Á +4 Stella_Yao 2026-03-20 4/200 2026-03-20 20:28 by ms629
[¿¼ÑÐ] Ò»Ö¾Ô¸Î÷°²½»Í¨´óѧ ѧ˶ 354Çóµ÷¼Á211»òÕß˫һÁ÷ +3 ÎÒÏëÒª¶ÁÑо¿Éú 2026-03-20 3/150 2026-03-20 20:13 by JourneyLucky
[¿¼ÑÐ] Çóµ÷¼Á +3 eation27 2026-03-20 3/150 2026-03-20 19:32 by JourneyLucky
[¿¼²©] É격26Äê +3 °Ë6°Ë68 2026-03-19 3/150 2026-03-19 19:43 by nxgogo
[¿¼ÑÐ] ÊÕ¸´ÊÔµ÷¼ÁÉú +4 ÓêºóÇïºÉ 2026-03-18 4/200 2026-03-18 14:16 by elevennnne
[¿¼ÑÐ] ²ÄÁÏ£¬·ÄÖ¯£¬ÉúÎ0856¡¢0710£©£¬»¯Ñ§ÕÐÉúÀ² +3 Eember. 2026-03-17 9/450 2026-03-18 10:28 by Eember.
ÐÅÏ¢Ìáʾ
ÇëÌî´¦ÀíÒâ¼û