| 词条 | Win32.Troj.QQkdw |
| 释义 | § 概述 病毒 别名： 处理时间： 威胁级别：★★ 中文名称：QQ狂盗王 病毒类型：木马 影响系统：Win9x/WinNT/Win2K/WinXP/Win2003 病毒行为: 编写工具:VB6.0 传染条件:该木马将图标改成网页图标 发作条件: § 系统修改: 1. 添加键值: HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWindows "Run" = "%SYSTEM%uqslkgw.exe" HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun %filename% = "%filepath%\\%filename%.exe" HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "ediinn" = "%SYSTEM%ediinn.exe" HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "iqhx" = "%SYSTEM%iqhx.exe" HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "oiqjvog" = "C:Program Filesoiqjvog.exe" HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunservices %filename% = "%filepath%\\%filename%.exe" HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunservices ediinn" = "%SYSTEM%ediinn.exe" HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunservices "iqhx" = "%SYSTEM%iqhx.exe" HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunservices "oiqjvog" = "C:Program Filesoiqjvog.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun %filename% = "%filepath%\\%filename%.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "ediinn" = "%SYSTEM%ediinn.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "iqhx" = "%SYSTEM%iqhx.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "oiqjvog" = "C:Program Filesoiqjvog.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunservices %filename% = "%filepath%\\%filename%.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunservices "ediinn" = "%SYSTEM%ediinn.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunservices "iqhx" = "%SYSTEM%iqhx.exe" HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunservicesoiqjvog "oiqjvog" = "C:Program Filesoiqjvog.exe" 2. 向病毒所在的当前目录添加oiqjvog.exe,ediinn.exe,iqhx.exe三个隐藏文件, 向C:Program Files添加oiqjvog.exe, 向%SYSTEM%添加ediinn.exe,iqhx.exe,uqslkgw.exe文件 § 发作现象: 病毒运行后弹出QQ的界面(和QQ界面一模一样) , 伪装成QQ, 如果用户输入了密码, 那么该信息被发送到指定的油箱 特别说明: |
| 随便看 |
百科全书收录594082条中文百科知识，基本涵盖了大多数领域的百科知识，是一部内容开放、自由的电子版百科全书。