±±¾©Ê¯ÓÍ»¯¹¤Ñ§Ôº2026ÄêÑо¿ÉúÕÐÉú½ÓÊÕµ÷¼Á¹«¸æ
²é¿´: 333  |  »Ø¸´: 10
µ±Ç°Ö÷ÌâÒѾ­´æµµ¡£
¡¾ÐüÉͽð±Ò¡¿»Ø´ð±¾ÌûÎÊÌ⣬×÷Õßmagua-no2½«ÔùËÍÄú 2 ¸ö½ð±Ò
µ±Ç°Ö»ÏÔʾÂú×ãÖ¸¶¨Ìõ¼þµÄ»ØÌû£¬µã»÷ÕâÀï²é¿´±¾»°ÌâµÄËùÓлØÌû

magua-no2

ľ³æ (СÓÐÃûÆø)

[ÇóÖú] µçÄÔÖж¾£¬Çë¸ßÊÖ°ïæ

ÎҵĵçÄÔ£¬×òÌìÓÉÓÚ½èÓÃͬѧµÄÒÆ¶¯Ó²Å̶øÖж¾¡£

ÌØÕ÷£º¿¨°Í˹»ù¼ì²âµ½DLLHOST.EXEºÍSVCHOST.EXE²¡¶¾£¬Ëƺõɾ³ý²»ÁË£¬ÎÒÑ¡ÔñÁ˸ôÀ룬ºóÀ´ÎÊÌâÒ»´ó¶Ñ
         ËùÓÐÓ²ÅÌ´ò²»¿ªÁË£¬Ö»ÄÜÓÒ»÷£¬È»ºóÑ¡´ò¿ª²ÅÄܽøÈ룻
        ÔËÐÐmsconfig£¬Ìáʾwindows ÕÒ²»µ½´ËÎļþ£»
        ¸÷Ó²Å̸ùĿ¼Ï³öÏÖrunauto.. Îļþ¼Ð£¬ÎÞ·¨É¾³ý¡£

ÎÒÕÒµ½DLLHOST.EXEºÍSVCHOST.EXE£¬·¢ÏÖÊÇ¡°ReLinsonϵÁÐÈí¼þ£¬¶à¹¦ÄÜÏÂÔØÕß¡±£¬ÍøÉÏÒ»²é£¬ËµÊǺڿÍÈí¼þ¡£


        ¸ßÊÖÃÇ£¬ÎÒ¸ÃÔõô°ì£¿ ¶àлָµã£¡¸Ð¼¤²»¾¡¡£

» ²ÂÄãϲ»¶

ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

liuwei0551

ÖÁ×ðľ³æ (ÖªÃû×÷¼Ò)

ÓÐAUTORUNµÄרɱ¹¤¾ß£¬ÈçAUOTORUN KILLERµÈÈí¼þ£¬´ÓÍøÉÏÏÂÔØÒ»¸ö£¬È»ºóÔÙ½øÐÐÇåÀí
6Â¥2007-09-15 15:05:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
²é¿´È«²¿ 11 ¸ö»Ø´ð

nucleus01

ÖÁ×ðľ³æ (ÖøÃûдÊÖ)

Сľ³æ±±Í¥½Ú¶Èʹ

¡ï
magua-no2(½ð±Ò+1,VIP+0):ÐÁ¿àÁË£¬iceswordûÓùý°¡
dllhost.exe²¡¶¾Çå³ý°ì·¨2007-06-09 12:31ÏÖÏóÃèÊö£º¸÷¸öÓ²ÅÌ·ÖÇøÓÐÒ»¸öÎļþ¼Ðrunauto.. £¬%windows%Ŀ¼ÏÂÓÐÌØÕ÷µÄ²¡¶¾Îļþdllhost.exe

Çå³ý²½Ö裺£¨ÒÔÏÂËùÓвÙ×÷ÔÚ IceSword ÖнøÐУ©Iceword v1.20ÏÂÔØ¼°¼òµ¥½éÉÜ
1¡¢½ûÖ¹½ø³Ì´´½¨¡£

2¡¢½áÊø²¡¶¾½ø³Ì%windows%\dllhost.exe¡£

3¡¢É¾³ý²¡¶¾Îļþ£º
         %windows%\dllhost.exe
           %windows%\cmd.exe.exe
           %windows%\regedit.exe.exe
           %windows%\setuprs1.exe
            x:\autorun.inf     (X´ú±íÓ²Å̸÷¸ö·ÖÇø¼°UÅÌÅÌ·û)
          x:\autorun.inf.tmp
         
4¡¢É¾³ý²¡¶¾·þÎñÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\COMSystemApp
´ËÍ⣬HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List·Ö֧ϵÄ"C:\\windows\\dllhost.exe"="C:\\windows\\dllhost.exe:*:Enabled:dllhost.exe"ҲҪɾ³ý¡£

5¡¢É¾³ý²¡¶¾Ìí¼ÓµÄIFEOÏ¼´É¾³ý×¢²á±íÒÔÏ·ÖÖ§£º
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cmd.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedt32.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe

6¡¢È¡ÏûIceSwordµÄ¡°½ûÖ¹½ø³Ì´´½¨¡±£¬¹Ø±ÕIceSword¡£

7¡¢É¾³ý¸÷¸ö·ÖÇø¼°UÅÌÀïÃæµÄrunauto..Îļþ¼Ð£¬É¾³ý·½·¨£º£¨ÒÔ D ÅÌΪÀý£©

¿ªÊ¼¡ª¡ªÔËÐСª¡ªÊäÈë¡°cmd¡±¡ª¡ªÊäÈë¡°D: ¡±¡ª¡ªÊäÈë¡°rd /s/q runauto...\ ¡±

8¡¢Íê
ˬÊÇÒª¸¶³ö´ú¼ÛµÄ!
2Â¥2007-09-15 11:49:44
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

magua-no2

ľ³æ (СÓÐÃûÆø)

2Â¥ÐֵܵĴð°¸ÎÒÔÚÍøÉÏÓв鵽,µ«ËƺõÖ¢×´²»Ò»Ñù°¡
4Â¥2007-09-15 12:28:53
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

lwy960803

ľ³æ (СÓÐÃûÆø)

¡ï
magua-no2(½ð±Ò+1,VIP+0):killautorunÓêÁÖľ·ç°æ±¾,ÏÂÔØÊ±¾ÍÌáʾÓв¡¶¾£¿
ÊÇ·ñ°²×°ÆäËüÈí¼þµÄʱºò¸½´ø×Ű²×°Á˺ڿÍÈí¼þ£¡£¡£¡

ÁíÍâÒÔºóÔÙÓÃÒÆ¶¯Ó²Å̵ϰ£¬×îºÃÊÇÏȲé²éÊÇ·ñÓÐAuto²¡¶¾£¡£¡
½¨ÒéʹÓÃkillautorunÓêÁÖľ·ç°æ±¾µÄ£¡£¡
5Â¥2007-09-15 12:36:37
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
²»Ó¦Öú È·¶¨»ØÌûÓ¦Öú (×¢Ò⣺ӦÖú²Å¿ÉÄܱ»½±Àø£¬µ«²»ÔÊÐí¹àË®£¬±ØÐëÌîд15¸ö×Ö·ûÒÔÉÏ)
×î¾ßÈËÆøÈÈÌûÍÆ¼ö [²é¿´È«²¿] ×÷Õß »Ø/¿´ ×îºó·¢±í
[¿¼ÑÐ] 340Çóµ÷¼Á +5 jhx777 2026-03-27 5/250 2026-03-28 04:18 by fmesaito
[¿¼ÑÐ] Çóµ÷¼ÁÍÆ¼ö ²ÄÁÏ 304 +15 ºÉ°üµ°hyj 2026-03-26 15/750 2026-03-28 04:13 by fmesaito
[¿¼ÑÐ] 289Çóµ÷¼Á +8 ÐÂʱ´ú²ÄÁÏ 2026-03-27 8/400 2026-03-28 04:09 by fmesaito
[¿¼ÑÐ] 295²ÄÁϹ¤³Ìר˶Çóµ÷¼Á +6 1428151015 2026-03-27 6/300 2026-03-28 03:51 by fmesaito
[¿¼ÑÐ] 286Çóµ÷¼Á +3 ¶ªµôÀÁ¶è 2026-03-27 6/300 2026-03-27 23:46 by barnett0632
[¿¼ÑÐ] 265Çóµ÷¼Á +8 Сľ³æ085600 2026-03-27 8/400 2026-03-27 22:16 by Î޼ʵIJÝÔ­
[¿¼ÑÐ] Ò»Ö¾Ô¸ Î÷±±´óѧ ×Ü·Ö282 Ó¢ÓïÒ»62 Çóµ÷¼Á +7 18419759900 2026-03-25 8/400 2026-03-27 16:38 by 18419759900
[¿¼ÑÐ] 085600£¬²ÄÁÏÓ뻯¹¤321·Ö£¬Çóµ÷¼Á +9 ´ó²öС×Ó 2026-03-27 9/450 2026-03-27 14:30 by mmm just
[¿¼ÑÐ] 316Çóµ÷¼Á +5 ½­´Ç666 2026-03-26 5/250 2026-03-27 08:08 by hypershenger
[¿¼ÑÐ] 327Çóµ÷¼Á +7 prayer13 2026-03-23 7/350 2026-03-26 20:48 by ²»³Ôô~µÄ؈
[¿¼ÑÐ] 325Çóµ÷¼Á +3 Aoyijiang 2026-03-23 3/150 2026-03-26 20:46 by ²»³Ôô~µÄ؈
[¿¼ÑÐ] µ÷¼Á +4 èÖèÖyoyo 2026-03-26 4/200 2026-03-26 20:43 by fmesaito
[¿¼ÑÐ] 081200-11408-276ѧ˶Çóµ÷¼Á +3 ´Þwj 2026-03-26 3/150 2026-03-26 19:57 by nihaoar
[¿¼ÑÐ] ´ò¹ýºÜ¶à¾ºÈü£¬085406¿ØÖƹ¤³Ì300·Ö£¬Çóµ÷¼Á +3 askeladz 2026-03-26 3/150 2026-03-26 09:08 by ¸øÄãÄã×¢ÒâÐÝÏ¢
[¿¼ÑÐ] ¿¼ÑÐÒ»Ö¾Ô¸ËÕÖÝ´óѧ³õʼ315£¨Ó¢Ò»£©Çóµ÷¼Á +3 sbdksD 2026-03-24 4/200 2026-03-25 18:16 by xcjcqu
[¿¼ÑÐ] 0703»¯Ñ§µ÷¼Á£¬Çóµ¼Ê¦ÊÕ +7 ÌìÌìºÃÔËÀ´Éϰ¶° 2026-03-24 7/350 2026-03-24 20:26 by peike
[»ù½ðÉêÇë] Çë½ÌÏ´ó¼Ò 2026Äê¹ú¼Ò»ù½ðÉêÇëÊÇ˫äÉóÂ𣿠+3 lishucheng1 2026-03-22 5/250 2026-03-24 08:22 by gltch
[¿¼ÑÐ] 269Çóµ÷¼Á +4 ÎÒÏë¶ÁÑÐ11 2026-03-23 4/200 2026-03-23 21:25 by pswait
[¿¼ÑÐ] 293Çóµ÷¼Á +3 ÌÎÌÎWjt 2026-03-22 5/250 2026-03-22 22:21 by jiangpengfei
[¿¼ÑÐ] Çóµ÷¼ÁԺУÐÅÏ¢ +6 CX 330 2026-03-21 6/300 2026-03-22 15:25 by ÎÞи¿É»÷111
ÐÅÏ¢Ìáʾ
ÇëÌî´¦ÀíÒâ¼û