¹ØÓÚ Win32.Joke.Haha.c µÄ°Ù¿ÆÐ¡³£Ê¶
²¡¶¾±ðÃû£º
´¦Àíʱ¼ä£º
Íþв¼¶±ð£º¡ï¡ï
ÖÐÎÄÃû³Æ£º
²¡¶¾ÀàÐÍ£º¶ñ×÷¾ç³ÌÐò
Ó°Ïìϵͳ£ºWin9x/WinMe/WinNT/Win2000/WinXP
²¡¶¾ÐÐΪ:
±àд¹¤¾ß:
´«È¾Ìõ¼þ:
·¢×÷Ìõ¼þ:
ϵͳÐÞ¸Ä:
ÔÚ%SystemRoot%ÏÂн¨Îļþosa.exeºÍTppa1dr.exe Õâ2¸öÎļþÍêÈ«Ïàͬ
ÔÚ×¢²á±íµÄÖ÷¼ü:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
Ìí¼ÓÈçϼüÖµ:
"Tppa1dr"="Tppa1dr.exe"
ÔÚ×¢²á±íµÄÖ÷¼ü:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionÖÇÄÜABC
ɾ³ýÈçϼüÖµ:
"Ë«´ò¼üÅÌÀàÐÍ"=dword:00000000
ÔÚ×¢²á±íµÄÖ÷¼ü:
HKEY_USERSS-1-5-21-73586283-602609370-682003330-1000SoftwareMicrosoftWindowsCurrentVersionÖÇÄÜABC
ɾ³ýÈçϼüÖµ:
"Ë«´ò¼üÅÌÀàÐÍ"=dword:00000000
·¢×÷ÏÖÏó:
ÔÚÆÁÄ»µÄÖÐÑë²»¶ÏµÄµ¯³öÒ»¸öÏûÏ¢¿ò
ÄÚÈÝΪ:"¹þ~¹þ~¹þ! ¹§ìûÄãÖв¡¶¾ÁË~~~"
ÌØ±ð˵Ã÷:
¸Ã²¡¶¾ÔÚ%SystemRoot%ÏÂн¨µÄ2¸öÍêÈ«ÏàͬµÄÎļþosa.exeºÍTppa1dr.exeÂÖÁ÷Ö´ÐÐ ¼¸ÃëÖÓÂÖÁ÷Ò»´Î
2¸öÎļþÏ໥ÒÀ´æ ÉÙÁËÒ»¸öÎļþÁíÒ»¸öÎļþ¾Í²»ÄÜÔËÐÐ.
Èç¹ûÖ»½«osa.exeɾµô ËäÈ»ÔÝʱ²»»áµ¯³öÏûÏ¢¿ò µ«ÏµÍ³ÖØÆðºóTppa1dr.exe»á¿½±´×ÔÉíΪosa.exe
ÄǸöÌÖÑáµÄÏûÏ¢¿òÓÖ³öÏÖÁË.
ÿ´Î¸ÃÏûÏ¢¿ò³öÏÖµÄʱºòÊäÈë½¹µã¶¼»áÌøµ½¸ÃÏûÏ¢¿òÉÏÃæ ¸øÊäÈë´øÀ´Á˺ܴóµÄÂé·³.