AUTO²¡¶¾ÔõÑù³¹µ×Çå³ý
ÈËÆø£º
¡¾×ÖÌ壺´ó ÖРС¡¿
·¢²¼Ê±¼ä£º2007-10-28 10:29:39
>>>>>>>>ÌáÎÊ
³öÏÖÕâÖÖÇé¿ö¾ÍÊÇÖÐÁËauto²¡¶¾£¡
auto²¡¶¾×¨É±¹¤¾ßºÍ²¹¶¡ÏÂÔØ
http://www.21ceo.cn/chasha/auto.htm
×î½üÒ»¶Îʱ¼ä,ÎÒµÄÐí¶àÅóÓѶ¼ÖÐÁËÕâ¸ö²¡¶¾:AUTO²¡¶¾¡£¸Ã²¡¶¾µÄÖ÷ÒªÖ¢×´:³ýϵͳÅÌÍâ,ÆäËüÅÌÊó±ê×ó¼üË«»÷´ò²»¿ª,ÓÒ¼üµ¥»÷´ò¿ª²Ëµ¥»á³öÏÖÒ»¸öOPENµÄÑ¡Ïÿ¸öÅ̶¼ÓÐÁ½¸öÕâÑùÓÒ¼ü³öÏÖautoÔõô°ìµÄÎļþ:autorun.inf ºÍ sxs.exe,µ±È»¿ÉÄÜÓÐЩÈ˲¢²»ÊÇsxs.exe,¶øÊÇÒÔÆäËüÃüÃûµÄ*.exeµÄÎļþ¡£
¸Ã²¡¶¾ÊÇrose²¡¶¾µÄ±äÖÖ, rose²¡¶¾Ö¢×´£ºË«»÷ÅÌ·ûÎÞ·¨´ò¿ª£¬Ö»ÄÜͨ¹ýÓÒ¼ü´ò¿ª£»¼¸ÌìÖ®ºóɾ³ýϵͳNTDETECT.COMÎļþ£¬µ¼ÖÂϵͳÎÞ·¨Æô¶¯¡£
´«²¥Í¾¾¶£ºUÅÌ¡¢MP3¡¢Òƶ¯Ó²Å̿ɼû£¬´Ë¶¾²»³ý£¬µçÄÔÍæÍê¡£Ò»°ãµÄɱ¶¾Èí¼þ»ù±¾Ö»Äܲé³öÀ´,µ«ÊǶ¼É±²»ÁË¡£
ÍøÉÏÒ²½²ÁËÐí¶à·½·¨,ÆäÖÐÓÐÁ½ÖÖ·½·¨±È½ÏÆÕ±é:×¢²á±íÓÒ¼üauto²¡¶¾×¨É±·¨ºÍרɱ¹¤¾ß·¨¡£×¢²á±í·¨ÓÉÓÚ¹ýÓÚ¸´ÔÓ,ËùÒÔ½¨Òé¶Ô×¢²á±íÖªÖ®ÉõÉÙµÄÅóÓÑÉÙÓÃ,¸ã²»ºÃ¶¾É±²»µô,·´µ¹°Ñ×Ô¼ºµÄϵͳ¸ã¿ç,ʵÔÚ²»ÖµµÃ¡£
ÐÝÏÐ¾Ó ±à ¼
>>>>>>>>ÐÝÏÐÑøÉúÍø»Ø´ð£º
ÓÃÕâ¸öÈí¼þɱ£ºÐ¡æ÷AutorunרɱVer0.25.exe
ÏÔʾÒþ²ØÎļþµÄ´úÂ룺Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden]
"Text"="@shell32.dll,-30499"
"Type"="group"
"Bitmap"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,\
00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,53,00,\
48,00,45,00,4c,00,4c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,34,00,00,\
00
"HelpID"="shell.hlp#51131"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"Text"="@shell32.dll,-30501"
"Type"="radio"
"CheckedValue"=dword:00000002
"ValueName"="Hidden"
"DefaultValue"=dword:00000002
"HKeyRoot"=dword:80000001
"HelpID"="shell.hlp#51104"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL]
"RegPath"="Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
"Text"="@shell32.dll,-30500"
"Type"="radio"
"CheckedValue"=dword:00000001
"ValueName"="Hidden"
"DefaultValue"=dword:00000002
"HKeyRoot"=dword:80000001
"HelpID"="shell.hlp#51105"
¡Ô ²é¿´¡¢·¢±íÆÀÂÛ ¡Ô