Home | hacker invade | crack analyzes | hacker course | Exploit | encryption decipher | network management | System crack | the virus to be related | invades the examination | firewall
You are here: hacking technology > the virus to be related > Content
Hot Articles
• Worm.Win32.AutoRun.eee a
• Trojan-Downloader.Win32.
• The resistance kills the
• Everybody may kill the p
• Careful ＾hard disk devi
• Trojan-PSW.Win32.QQPass.
• Trojan-PSW.Win32.OnLineG
• DeviceWall 5.0 extends U
• Trojan-Dropper.Win32.Sma
• Trojan-GameThief.Win32.O
• Trojan-PSW.Win32.QQPass.
• The machine dog presents
• Trojan-PSW.Win32.OnLineG
• Worm.Win32.AutoRun.eee a
• Trojan-PSW.Win32.OnLineG
Recommend Articles
Trojan-PSW.Win32.QQPass.
The machine dog presents
Everybody may kill the p
Trojan-Dropper.Win32.Sma
How does the Trojan Hors
The resistance kills the
Careful ＾hard disk devi
Trojan-PSW.Win32.OnLineG
Jinshan virus early warn
Under Professor differen
Trojan-Downloader.Win32.
08 year the first half o
Win32.Troj.OnlineGamesT.
Worm.Win32.AutoRun.eee a
07.13 viral early warnin
New Articles
Distortion virus's funda
The auspicious star on O
The auspicious star on S
The auspicious star on S
To some Trading company
The security examines fo
The auspicious star on S
Introduces the ash pigeo
The river people science
Caba Siji from September
The river people science
The auspicious star on S
A significant amount of
Spammers also go on holi
Protecting your business
Trojan-Downloader.Win32.Small.xwr analysis(3)
  Add date: 07/28/2008   Publishing date: 07/28/2008   Hits: 64
Total 4 pages, Current page:3, Jump to page:
 

Note: %System32% are an invariable way. The virus decides the current System folder through the inquiry operating system
Position.
　　
　　　　%Windir% 　　　　　 　　　　　 WINDODWS in table of contents
　　　　%DriveLetter%　 　　　　　　　 Logical driver root directory
　　　　%ProgramFiles%　 　 　　　　　 The system program default installs the table of contents
　　　　%HomeDrive% 　　　　　　　　　 Current start system in district
　　　　%Documents and Settings% 　　　Current user documents root directory
　　　　%Temp% 　　　　　　　　　　　　\ Documents and Settings
　　　　　　　　　　　　 　　　　　　　\ current user \ Local Settings \ Temp
　　　　%System32% 　　　　　　　　　　System's System32 folder
　　　　
　　　　In Windows2000/NT tacitly approves installs the way is C:\Winnt\System32
　　　　in windows95/98/me tacitly approves installs the way is C:\Windows\System
　　　　in windowsXP tacitly approves installs the way is C:\Windows\System32　　
　　　　　　　　
　　　　
Elimination plan:
1st, uses the peaceful day defense line 2008 to be possible to eliminate this virus thoroughly (recommendation),
　 　Welcome to peaceful day website downloading: www.antiy.com　
2nd, the manual elimination please defer to the behavioral analysis deletion correspondence document, resumes the system-related establishment.
　 (1) used the ATOOL process management to finish the rundll32.exe advancement.
　 (2) deletion virus grows document:
　 　 %Windir% \ AppPatch \ AclLayer.dll
　 　 %Windir% \ AppPatch \ DesktopWin.dll
　 　 %Windir% \ AppPatch \ AcSpecf.dll
　 　 %Windir% \ AppPatch \ AcXtrnel.bpl
　 　 %Windir% \ Downloaded Program Files \ ThunderAdvise.dll
　 　 %System32% \ aitlasys.exe
　 　 %System32% \ akjsfkaq.dll
　 　 %System32% \ apsggjba.dll
　 　 %System32% \ apzhctde.dll
　 　 %System32% \ axmsawin.exe
　 　 %System32% \ azcbaime.exe
　 　 %System32% \ azwlaime.exe
　 　 %System32% \ azzxaime.exe
　 　 %System32% \ ciwdaapi.sys
　 　 %System32% \ dazfajke.exe
　 　 %System32% \ dehxaklo.exe
　 　 %System32% \ detxbiua.dll
　 　 %System32% \ drivers \ eth8023.sys
　 　 %System32% \ dtzfajke.sys
　 　 %System32% \ erjxakin.sys
　 　 %System32% \ fd233ds4f3.dll
　 　 %System32% \ fdtxaiua.exe
　 　 %System32% \ fstlbsys.sys
　 　 %System32% \ fxcbbime.sys
　 　 %System32% \ fxwlbime.sys
　 　 %System32% \ fxzxbime.sys
　 　 %System32% \ fzmsbwin.sys
　 　 %System32% \ gajzalit.sys
　 　 %System32% \ gpsgajba.sys
　 　 %System32% \ gpzhatde.sys
　 　 %System32% \ gsdhadwd.sys
　 　 %System32% \ hdf453d.dll
　 　 %System32% \ ictxaiua.sys
　 　 %System32% \ ijsgajba.sys
　 　 %System32% \ ijzhatde.sys
　 　 %System32% \ isdsasrv.exe
　 　 %System32% \ ismhasrv.exe
　 　 %System32% \ jkhxaklo.dll
　 　 %System32% \ lpmxajkl.exe
　 　 %System32% \ lpsgajba.exe
　 　 %System32% \ lpzhatde.exe
　 　 %System32% \ mkjsakaq.exe
　 　 %System32% \ mndhfdwd.dll
　 　 %System32% \ mndshsrv.dll

 
Other pages: : <<Prev * 1 * 2 * 3 * 4 * Next>>
Prev:Trojan-PSW.Win32.QQPass.cdw analysis Next:The auspicious star company on July 08 issued that the daily computer virus and the wooden horse dis

Comment:

Category: Home > the virus to be related
Home