词条 | Win32.Troj.SpyTrickler |
释义 | § 概述 病毒别名:Trojan.Trickler.3202【RAV:15.38】 处理时间:2003-10-28 威胁级别:★ 中文名称: 病毒类型:木马 影响系统:Win9x/WinNT/Win2K/WinXP 病毒行为: 无 编写工具: VC++ 6.0 传染条件: 已知来源:随一些共享软件安装 发作条件: 启动后自动加载运行 § 系统修改: A.添加如下注册表项: 【HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun】 "Trickler"=应用程序运行路径 【HKEY_LOCAL_MACHINESoftwareGator.com】 【HKEY_LOCAL_MACHINESoftwareGator.comTrickler】 "FirstStartValue"=dword:0000034c "StartTime"=dword:3f9d259d "FirstStartSent"=dword:00000001 "AppPath"=应用程序运行路径 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFiles】 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesSilentSetup】 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesSilentSetupdl】 "Attempts"=dword:00000001 "Errors"=dword:00000000 "FileDones"=dword:00000000 "UrlTime"="Tue, 16 Apr 2002 00:04:19 GMT" "UrlSize"=dword:0002a675 "StoredFile"="" 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesSilentSetupchk】 "CheckFailures"=dword:00000000 "Attempts"=dword:00000000 "Errors"=dword:00000000 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesBundle】 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesBundledl】 "Attempts"=dword:00000000 "Errors"=dword:00000000 "FileDones"=dword:00000000 "UrlTime"="" "UrlSize"=dword:ffffffff "StoredFile"="" 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesBundlechk】 "CheckFailures"=dword:00000000 "Attempts"=dword:00000000 "Errors"=dword:00000000 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesOemResDll】 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesOemResDlldl】 "Attempts"=dword:00000000 "Errors"=dword:00000000 "FileDones"=dword:00000000 "UrlTime"="" "UrlSize"=dword:ffffffff "StoredFile"="" 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesOemResDllchk】 "CheckFailures"=dword:00000000 "Attempts"=dword:00000000 "Errors"=dword:00000000 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesTricklerInf】 "Attempts"=dword:00000002 "Errors"=dword:00000000 "FileDones"=dword:00000000 "UrlTime"="Tue, 14 Oct 2003 20:34:12 GMT" "UrlSize"=dword:0000176c 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerSettings】 "Dead"=dword:00000000 "OEM"=dword:00000001 "TrickleRate"=dword:00000019 "RequirePassword"=dword:00000000 "MinPasswordLength"=dword:00000000 "InstallGator"=dword:00000000 "InstallOffers"=dword:00000000 "OemResDll"="" "SilentSetupExe"="PdpSetup3103.ex_" "Bundle"="3124.gsz" "BundleVer"="3.1.2.4" "IMUDelay"=dword:00000000 "PreInstalledApps"="DivxNetwork2" "AppRequests"="" "Verbose"=dword:00000000 "PingRS"=dword:00000000 "DropdeadThresholdPct"=dword:00000032 "DropdeadExtendHours"=dword:000002d0 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerdownloads】 【HKEY_LOCAL_MACHINESoftwareGator.comTricklerdownloads rickle.gator.com:80/download/PdpSetup3103.ex_】 "AccumFile"="C:\\WINDOWS\\TEMP\\fsg_tmp\\accum\\Trickler\\GTA0003821E.tmp" "UrlSize"=dword:0002a675 "UrlTime"="Tue, 16 Apr 2002 00:04:19 GMT" 【HKEY_LOCAL_MACHINESoftwareGator.comGator】 【HKEY_LOCAL_MACHINESoftwareGator.comGatordyn】 "PdpFirstStart"="841:NEW" 【HKEY_LOCAL_MACHINESoftwareGator.comGatorstat】 "Guid"="5949FF20-08C9-11D8-A444-A5FE5702E862" "MID"=dword:116cb0e1 发作现象: 无 特别说明: 暂缺 |
随便看 |
百科全书收录594082条中文百科知识,基本涵盖了大多数领域的百科知识,是一部内容开放、自由的电子版百科全书。