鐕炴槦2008鎴戣瘯榪淵簡鏉涓嶆匝
榪兌▼svchost.com鍜屾瘡涓洏涓婄殑sff.exe鏂淵歡鍒犱簡閱嶅惎鍙堝嚭鏉簡!
姣忔綺樿創鏂囧瓧鏃跺彧浼氧矘璐村嚭榪欐牁涓鏉?涓浗緗戠粶娓告垙鏈ㄩ…澶栨寧榛賊鈮鏈鍏?http://www.hack1314.com 鍜ㄨQQ錛?9722181",QQ涓婂崟鐙拰鏈嬪弸鑱婂鐨勤椂鍊欏氨鑷姩鍙戰佽繖鏉℃枃瀛?姣?縐掍竴嬈?鎵撳紑WORD,鍦ㄥ埤璐存澘涓匊佹槸鑷姩鍑虹幫涓婇潰鐨蹺笢瑗?鍒吠櫎鍚庨…涓婂張鏉簡!鎴賊崌綰簡鏈鏂扮殑鐕炴槦鍚庢柇緗賊夬闈二潃姣掞紝浠涔堜篃娌℃湁鍙戠幫錛兌敤濱骨叾瀹寫潃姣掕蔣浠朵篃涓鏍楓?
姣忔鎵撳紑鈥滄枃浠跺閫夐」鈥濆氨浼氧珛鍗充竴闀岄濂紝涓嶈始鏌湅闅愯棌鏂淵歡銆傛渶鍚庡彧濂芥牸寮忏寲C鐩橈紝閱嶈緋葷粺錛岸廳瀹夎鐕炴槦騫朵芄緗賊崌濱嗙駭錛屾塈鏈夌洏鏌潃濱嗕竴閬圮紝娌〞發鐜版瘨銆備竴寮濮嬭繕姝e父錛屼絾鐐逛簡鍑豹涓嶅俔鐩樼殑鏂淵歡鍚峬紝鐘跺喌鍙堝發鐢爨簡錛屼笉鑳藉鍒剁矘甯栨枃浠訛紝鍙始澶嶅埠綺樿創鏂囧瓧錛屼絾鍐喋閮藉彧鏄?涓浗緗戠粶娓告垙鏈ㄩ…澶栨寧榛賊鈮鏈鍏?http://www.hack1314.com 鍜ㄨQQ錛?9722181"錛屻涓撳鐫囩偣涓涓嬶紝涔熻鐕炴槦閱嶈涓涓嬶紝榪欐槸浠涔堡棶姣掑憖錛?
--------------------------------------------------------------
銆愮棶姣掑哄浣撳垎鏋愩?
銆銆File: SFF.exe
銆銆Size: 36864 bytes
銆銆File Version: 2.00.0003
銆銆MD5: 248C496DAFC1CC85207D9ADE77327F8B
銆銆SHA1: B32191D44382ED926716671398809F88DE9A9992
銆銆CRC32: 8C51AAAB
銆銆緙枻啟璇▓錛歁icrosoft Visual Basic 5.0 / 6.0
銆愪腑姣掔壒寰併?
銆銆鐢熸垚釤呮瘨鏂淵歡svchost.com,浣嶄簬%system32%\, 鍦℉KEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run 涓嬮潰娣誨姞閿約vchost 鐫囧悜%system32%\svchost.com, 瀹炵幫寮鏈哄惎鍔?
銆銆鍚蹺釜鍒骨尯鏍圭洰褰曚笅闈三敓鎴匆FF.exe鍜宎utorun.inf錛屼互杈懼埌閫氳繃U鐩樼瓅縐誨姩瀛樺偍浼豹挲鐨動洰鐨?
涓嶆柇鍚賊埤璐存澘閱岄潰鍐欏靉鈥滀腑鍥界繡緇滄父鎴忔渜椹鐫傞磷瀹二妧鏈鍏?鍜ㄨQQ錛?9722181鈥濈殑淇℃伅
瀹綏夬妯〞紡錛堝紑鏈烘椂鐫變綇F8錛岄倨嫨絎竴欏癸級鎵撳紑鐢佃劄
鐐瑰嚮鈥滃紑濮嬧濃斺斺滆繡琛屸濃斺旇緭鍏首egedit鈥濃斺斺淗KEY-local-machine鈥濃斺斺渟oftware鈥濃斺斺淵icrosoft鈥濃斺斺渨indows鈥濃斺斺渃urrentversion鈥濃斺斺首un鈥濂紝鎵懼埌緗戜芄瑕佹眣鍒吠櫎鐨動▼搴忥紙濡傛灉娌¤閿欙紝搴旇鏄拾暟絎簩涓渟vchost.com鈥濂級
鏈鍚峬紝鍦ㄥ番鍏ㄦā寮仁笅錛岸垹闄瘡涓垎鍖虹∥鐩橀噷鐨剆ff.exe鍜宎utorun.inf鐨動▼搴忏氨鍙互濱嗐傛垛璇疊繃錛岄棶棰樿鍐充簡銆?