proemoldtw

½Ð°Ý²³°ª¤â¡A§Úªº¹q¸£­«Äé¹L¤F¡A
1¡B§Ú¥u­n¤@¶i©_¼¯ª¾ÃÑ®a´N·|·í¾÷1¤ÀÄÁ(cpu¡G100%)¡A
     ¤Wºô¥u¦³ª¾ÃÑ®a·|¨º¼Ë¡C
2¡B¡§§Úªº¹q¸£¡¨¸Ì¦pªGª½±µÂIc¼Ñ´N¤£·|¦³¤ÏÀ³¡A
       «ö¥kÁä¡÷¶}±Ò...³o¼Ë´N¶iªº¥h¡C
½Ð°Ý³o¨â­Ó°ÝÃD­n¦p¦ó¸Ñ¨M©O¡H

[ ¥»©«³Ì«á¥Ñ AthlonXP ©ó 2008-10-2 20:12 ½s¿è ]

¥¿¸qªº«ËªÌ

1.«ö·x¶}¾÷3Áä§ä¥X¬O­þ°¦µ{¦¡¦Ycpu³Ì­«¦A°µ¶i¤@¨B§PÂ_

1.§A´«Âsø°¾¹¬Ý¬Ý
1.ÁÙ¬O¤@¼Ëªº¸ÜÅX°Ê¾ã­Ó­«°µ
2.ÁÙ¬O¤@¼Ëªº¸Üos´«ª©¥»­«°µ
¥~­±¤H®a§ïªºos¨Ã¤£¬O¾A¦X©Ò¦³ªº¾÷¤l(¦³¨Ços®Ö¤ß±ìªº«ÜÄê ex:¦­´Ás¶}ÀYªº
1.§ä±½°O¾ÐÅéµ{¦¡±½¬Ý¬ÝµwÅé¬O¤£¬O¦³°ÝÃD

                               
µn¿ý/µù¥U«á¥i¬Ý¤j¹Ï

proemoldtw

­ì©«¥Ñ ¥¿¸qªº«ËªÌ ©ó 2007-11-11 10:32 µoªí

                               
µn¿ý/µù¥U«á¥i¬Ý¤j¹Ï

1.«ö·x¶}¾÷3Áä§ä¥X¬O­þ°¦µ{¦¡¦Ycpu³Ì­«¦A°µ¶i¤@¨B§PÂ_

1.§A´«Âsø°¾¹¬Ý¬Ý
1.ÁÙ¬O¤@¼Ëªº¸ÜÅX°Ê¾ã­Ó­«°µ
2.ÁÙ¬O¤@¼Ëªº¸Üos´«ª©¥»­«°µ
¥~­±¤H®a§ïªºos¨Ã¤£¬O¾A¦X©Ò¦³ªº¾÷¤l(¦³¨Ços®Ö¤ß±ìªº«ÜÄê ex:¦­´Ás¶}ÀYªº ...

°£¤Fos¥H¥~³£¸Õ¹L¤F¡A½Ð°Ýos¬O¤°»ò¡H

proemoldtw

­ì©«¥Ñ ¤@­¶®Ñ ©ó 2007-11-11 11:18 µoªí

                               
µn¿ý/µù¥U«á¥i¬Ý¤j¹Ï

§Ú²q§AÀ³¸Ó¤¤¬r¤F~~¦Ó¥B¬O¤¤¤FKAVOªº¯f¬r©ÎªÌ¬OÅܺØ~~
§A¬d¬Ý§A¬O§_¥i¥H¬Ý§AªºÁôÂÃÀÉ´Nª¾¹D¬O°Õ

°Ñ¦Ò°Ñ¦Ò~~

ÁôÂÃÀɳ£¯à¬Ý¡A½Ð°ÝÁÙ¦³¨ä¥L´úªk¶Ü¡H
¥ý¸ò§A»¡ÁnÁÂÁ­ò¡I

¥­³Ó

­ü.......§Ú¤]¤¤¤F¯uºG ,ÁÙ¦n«Ü¦n¸Ñ¨M¥u¤£¹L¯uªº«Ü«×ÀÝ

¥¿¸qªº«ËªÌ

­ì©«¥Ñ proemoldtw ©ó 2007-11-11 21:25 µoªí

                               
µn¿ý/µù¥U«á¥i¬Ý¤j¹Ï

°£¤Fos¥H¥~³£¸Õ¹L¤F¡A½Ð°Ýos¬O¤°»ò¡H

OS=§@·~¨t²Î
o = operation
s = system

¦]¬°§A»¡§A­«Äé¹L¤F ©Ò¥H§Ú¤~±Æ°£¤¤¬r¦æ¬°
¦ý§Ú¬O¤£ª¾¹D§AªºÀH¨­ºÐ¦³¨S¦³¬r ¦³¨S¦³µ¹¥L´¡¤U¥h
ÁÙ¦³§A¬O§_¦³¨ä¥LªººÏºÐ¤À°Ï¤£ª¾¦³¨S¦³¯d¬r
©Ò¥HÀ³¸Ó·Ó¤@­¶®Ñ¤j¤j©Ò»¡°µ¤@¤U¯f¬r°ò¦ÀË´ú
§Ú³q±`³£¬O
1.«ö·x¶}¾÷3Áä§ä¥X¬O­þ°¦µ{¦¡¦Ycpu³Ì­«¦A°µ¶i¤@¨B§PÂ_
¬Ý¬Ý¬O§_¦³°£¤F"System Idle Process"¤§¥~ªºµ{¦¡¤@ª½¦b®ø¯ÓCPU¸ê·½...
¦³ªº¸Ü¡A½Ðµ²§ô¸Óµ{¦¡ªºµ{§Ç (¤Ï¥Õµ{¦¡¿ï¶µ ÂI¤@¤U¥k¤U¨¤ªº µ²§ô³B²zµ{§Ç)
¤£¹L§Ú²qÀ³¸Ó³£¬O³o°¦explorer.exe¦b¦Y
explorer.exe
©Ò¦b¸ô®|C:\WINDOWS
¥Î³~¡G²³æ»¡¬O§Úªº¹q¸£ªºÀÉ®×Á`ºÞ
­ì«h¤W³o­Ó¬O¨t²Î­«­n¤¸¥ó¦pªG¬Oexplorer.exe¥»¨­¶]¨ì·í±¼....«Øij­«ÄéÅo

¨ä¥L³£¥¿±`¥u¦³ª¾ÃÑ®a¦³°ÝÃD¤£±Æ°£Âsø°¾¹¦³°ÝÃD©Î¬O¦³¬r

[ ¥»©«³Ì«á¥Ñ ¥¿¸qªº«ËªÌ ©ó 2007-11-12 09:56 ½s¿è ]

proemoldtw

cmd.exe,
´N¬O³oµ{¦¡¦Ycpu100%¡A
½Ð°Ý­n«ç»ò³B²z¡H
µn¿ýÀɨS¦³kavo¡I¤£ª¾¹D§Ú¦³¨S¦³§Ë¿ù¡A
¬O¤£¬O°õ¦æ©³¤U¥´regedit¡A¦b¨Ì¤j¤jªº¸ô®|´M§ä¡H

¥¿¸qªº«ËªÌ

cmd¬O©R¥O´£¥Ü¦r¤¸=¦P¥H«eªºdos
®¥³ß§A~¶P³ß§A~
¥i¯à¬O¬rÅ}µo§@§a
¬r±½¤@±½§a
ÁקK¬å¨ì­«­n¨t²Î®Ö¤ßÀÉÄU§A¨t²Î­«°µ§a
§K¶Oªº½u¤W±½¬r¡A¬Ý¬Ý§a¡G

¥d¤Ú´µ°ò§K¶O½u¤W±½¬r(­^¤å)¡Ghttp://www.kaspersky.com/service?chapter=161739400#betatest

Panda ActiveScan§K¶O½u¤W±½¬r(¤¤¤å)¡Ghttp://www.pandasoftware.com.tw/freescan/activescan.htm

f-secure§K¶O½u¤W±½¬r(­^¤å)¡Ghttp://support.f-secure.com/enu/home/ols.shtml

ÁͶլì§Þ§K¶O½u¤W±½¬r(­^¤å)¡Ghttp://housecall.trendmicro.com/housecall/start_corp.asp

ÁͶլì§Þ§K¶O½u¤W±½¬r(¤¤¤å)¡Ghttp://211.76.133.76/housecall/zh_tw/index.asp

ÁɪùÅK§J§K¶O½u¤W±½¬r(¤¤¤å)¡Ghttp://security.symantec.com/ssc ... tid=symhome&langid=ch&venid=sym

BitDefender§K¶O½u¤W±½¬r(­^¤å)¡Ghttp://www.bitdefender.com/scan/Msie/index.php

CA eTrust§K¶O½u¤W±½¬r(­^¤å)¡Ghttp://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Rav antivirus§K¶O½u¤W±½¬r(­^¤å)¡Ghttp://www.ravantivirus.com/scan/

McAfee Security§K¶O½u¤W±½¬r(­^¤å)¡Ghttp://us.mcafee.com/root/mfs/scan.asp?affid=56

CA§K¶O½u¤W¶¡ºÐµ{¦¡±½´y(­^¤å)¡Ghttp://www3.ca.com/securityadvisor/pest/pestscan.aspx

X-CLEAN§K¶O½u¤W¶¡ºÐ¼s§i±½´y(­^¤å)¡Ghttp://www.spywareinfo.com/xscan.php

·L³n§K¶O½u¤W´c·N³nÅé²¾°£(­^¤å)¡Ghttp://www.microsoft.com/security/malwareremove/default.mspx#run

§K¶O½u¤W±½¤ì°¨µ{¦¡(­^¤å)¡Ghttp://www.windowsecurity.com/trojanscan/trojanscan.asp

Webroot§K¶O½u¤W±½¶¡ºÐµ{¦¡(­^¤å)¡Ghttp://webroot.com/services/spyaudit_03.htm

[ ¥»©«³Ì«á¥Ñ ¥¿¸qªº«ËªÌ ©ó 2007-11-12 23:53 ½s¿è ]

proemoldtw

­ì©«¥Ñ ¥¿¸qªº«ËªÌ ©ó 2007-11-12 23:45 µoªí

                               
µn¿ý/µù¥U«á¥i¬Ý¤j¹Ï

cmd¬O©R¥O´£¥Ü¦r¤¸=¦P¥H«eªºdos
®¥³ß§A~¶P³ß§A~

¬Ý¨ì³o´X¦æÁy´Nºñ¤F......¡C
ÁÂÁ§Aªº¸Ñµª¡I

proemoldtw

­ì©«¥Ñ ¥¿¸qªº«ËªÌ ©ó 2007-11-12 23:45 µoªí

                               
µn¿ý/µù¥U«á¥i¬Ý¤j¹Ï

¥d¤Ú´µ°ò§K¶O½u¤W±½¬r(­^¤å)¡Ghttp://www.kaspersky.com ...

­è­è¸Õ¤F½u¤W±½¬r¡A±½§¹«o¤£¯à¸Ñ¬r......¡C
¥»¨Ó·Q»¡«ç»ò¦³³o»ò¦nªº¨Æ¡A­ì¨Ó...¡C

¥¿¸qªº«ËªÌ

§K¶O±½¬r¤£¥]§t¸Ñ¬r³á~~!«¢
¥i¥H¨ì¦U¤j½×¾Â·j´M³£¦³¯}¸Ñª©ªº¨¾¬r¥i§ì

¨ä¹ê³Ì­«­nªº¬O¨Ï¥ÎªÌ¹ï¬rªºÆ[©À
¹³§Ú¥Î¯}Äꪺ¥d¤K7.0¯}¸Ñª©³£¨S±½ºËÁÙ¤£¬O¹Lªº¦n¦nªº
(ª±¬rªÌ¥»¨­´N¬O¬r©Ò¥H¤£¯à±½.°µ¤ì°¨¯f¬r¹êÅç®É·íµM¬O¥Î¾Ç®Õªº¦×¾÷°Õ~¼K¼K)

¤Ú´µªiªiªi

­ì©«¥Ñ ¤@­¶®Ñ ©ó 2007-11-12 00:52 µoªí

                               
µn¿ý/µù¥U«á¥i¬Ý¤j¹Ï

§A¦³¨ìµn³°ÀÉ©³¤U
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
¸Ì­±¬O§_¦³kavo µ{¦¡¦b°õ¦æ ¦pªGDelAutorun-Virus¦³ §A´N¤¤¤FÀH¨­ºÐ¯f¬r
¦pªG¦³§A¨ìwebo.com.hk/levis ¤U¸ü123.bat ...

¦hÁ¤@­¶®Ñ¤j¤jªºÄ_¶Q¤åªü¡A±Ï¤F§Ú¹q¸£....

¦¨¥\¤F­C....

¯uªº«Ü·PÁ¤@­¶®Ñ¤j¤j.....