鐕炴槦2008鎴戣瘯杩渊简鏉涓嶆匝
杩兑▼svchost.com鍜屾疮涓洏涓婄殑sff.exe鏂渊欢鍒犱简阅嶅惎鍙埚嚭鏉简!
姣忔绮椫创鏂囧瓧镞跺彧浼氧矘璐村嚭杩欐牁涓鏉?涓浗缃戠粶娓告垙链ㄩ…澶栨宁榛贼铌链鍏?http://www.hack1314.com 鍜ㄨQQ锛?9722181",QQ涓婂崟镫拰链嫔弸镵婂镄勤椂炼椤氨镊姩鍙战佽伞鏉℃枃瀛?姣?绉掍竴娆?镓揿紑WORD,鍦ㄥ埤璐存澘涓匊佹槸镊姩鍑虹帮涓婇溃镄跷笢瑗?鍒吠櫎钖庨…涓婂张鏉简!鎴贼崌绾简链鏂扮殑鐕炴槦钖庢柇缃贼夬闱二潃姣掞纴浠涔堜篃娌℃湁鍙戠帮锛兑敤滨骨叾瀹写潃姣掕蒋浠朵篃涓镙枫?
姣忔镓揿紑钬沧枃浠跺阃夐」钬濆氨浼氧珛鍗充竴哄岄濂纴涓嶈始镆湅阌愯棌鏂渊欢銆傛渶钖庡彧濂芥牸寮忏寲C燧桡纴阅嶈绯荤稗锛岸厅瀹夎鐕炴槦骞朵芄缃贼崌滨嗙骇锛屾塈链夌洏镆潃滨嗕竴阆圮纴娌〞发鐜版瘨銆备竴寮濮奶缮姝e父锛屼絾镣逛简鍑豹涓嶅伣燧樼殑鏂渊欢钖峬纴钟跺喌鍙埚发鐢爨简锛屼笉鑳藉鍒剁矘宁栨枃浠讹纴鍙始澶嶅埠绮椫创鏂囧瓧锛屼絾鍐喋閮藉彧鏄?涓浗缃戠粶娓告垙链ㄩ…澶栨宁榛贼铌链鍏?http://www.hack1314.com 鍜ㄨQQ锛?9722181"锛屻涓揿镌囩偣涓涓嬶纴涔熻鐕炴槦阅嶈涓涓嬶纴杩欐槸浠涔堡梾姣掑慭锛?
--------------------------------------------------------------
銆愮梾姣掑哄浣揿垎鏋愩?
銆銆File: SFF.exe
銆銆Size: 36864 bytes
銆銆File Version: 2.00.0003
銆銆MD5: 248C496DAFC1CC85207D9ADE77327F8B
銆銆SHA1: B32191D44382ED926716671398809F88DE9A9992
銆銆CRC32: 8C51AAAB
銆銆缂枻启璇▓锛歁icrosoft Visual Basic 5.0 / 6.0
銆愪腑姣掔壒寰并?
銆銆鐢熸垚钐呮瘨鏂渊欢svchost.com,浣崭簬%system32%\, 鍦℉KEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run 涓嬮溃娣诲姞阌约vchost 镌囧悜%system32%\svchost.com, 瀹炵帮寮链哄惎锷?
銆銆钖跷釜鍒骨尯镙圭洰褰曚笅闱三敓鎴匆FF.exe鍜宎utorun.inf锛屼互杈惧埌阃氲绷U燧樼瓅绉诲姩瀛桦偍浼豹挲镄动洰镄?
涓嶆柇钖贼埤璐存澘阅岄溃鍐椤叆钬滀腑锲界绣缁沧父鎴忔渜椹镌傞磷瀹二妧链鍏?鍜ㄨQQ锛?9722181钬濈殑淇℃伅
瀹绥夬妯〞纺锛埚紑链烘椂镌变綇F8锛岄倨嫨绗竴椤癸级镓揿紑鐢佃札
镣瑰向钬滃紑濮嬧浓斺斺滆绣琛屸浓斺旇緭鍏首egedit钬浓斺斺淗KEY-local-machine钬浓斺斺渟oftware钬浓斺斺渊icrosoft钬浓斺斺渨indows钬浓斺斺渃urrentversion钬浓斺斺首un钬濂纴镓惧埌缃戜芄瑕佹眣鍒吠櫎镄动▼搴忥纸濡傛灉娌¤阌欙纴搴旇鏄拾暟绗簩涓渟vchost.com钬濂级
链钖峬纴鍦ㄥ番鍏ㄦā寮仁笅锛岸垹闄疮涓垎鍖虹∥燧橀噷镄剆ff.exe鍜宎utorun.inf镄动▼搴忏氨鍙互滨嗐傛垛璇叠绷锛岄梾棰椫鍐充简銆?