请输入您要查询的百科知识:

 

词条 Win32.Troj.SpyTrickler
释义

§ 概述

病毒别名:Trojan.Trickler.3202【RAV:15.38】

处理时间:2003-10-28

威胁级别:★

中文名称:

病毒类型:木马

影响系统:Win9x/WinNT/Win2K/WinXP

病毒行为:

编写工具:

VC++ 6.0

传染条件:

已知来源:随一些共享软件安装

发作条件:

启动后自动加载运行

§ 系统修改:

A.添加如下注册表项:

【HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun】

"Trickler"=应用程序运行路径

【HKEY_LOCAL_MACHINESoftwareGator.com】

【HKEY_LOCAL_MACHINESoftwareGator.comTrickler】

"FirstStartValue"=dword:0000034c

"StartTime"=dword:3f9d259d

"FirstStartSent"=dword:00000001

"AppPath"=应用程序运行路径

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFiles】

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesSilentSetup】

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesSilentSetupdl】

"Attempts"=dword:00000001

"Errors"=dword:00000000

"FileDones"=dword:00000000

"UrlTime"="Tue, 16 Apr 2002 00:04:19 GMT"

"UrlSize"=dword:0002a675

"StoredFile"=""

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesSilentSetupchk】

"CheckFailures"=dword:00000000

"Attempts"=dword:00000000

"Errors"=dword:00000000

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesBundle】

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesBundledl】

"Attempts"=dword:00000000

"Errors"=dword:00000000

"FileDones"=dword:00000000

"UrlTime"=""

"UrlSize"=dword:ffffffff

"StoredFile"=""

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesBundlechk】

"CheckFailures"=dword:00000000

"Attempts"=dword:00000000

"Errors"=dword:00000000

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesOemResDll】

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesOemResDlldl】

"Attempts"=dword:00000000

"Errors"=dword:00000000

"FileDones"=dword:00000000

"UrlTime"=""

"UrlSize"=dword:ffffffff

"StoredFile"=""

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesOemResDllchk】

"CheckFailures"=dword:00000000

"Attempts"=dword:00000000

"Errors"=dword:00000000

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerFilesTricklerInf】

"Attempts"=dword:00000002

"Errors"=dword:00000000

"FileDones"=dword:00000000

"UrlTime"="Tue, 14 Oct 2003 20:34:12 GMT"

"UrlSize"=dword:0000176c

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerSettings】

"Dead"=dword:00000000

"OEM"=dword:00000001

"TrickleRate"=dword:00000019

"RequirePassword"=dword:00000000

"MinPasswordLength"=dword:00000000

"InstallGator"=dword:00000000

"InstallOffers"=dword:00000000

"OemResDll"=""

"SilentSetupExe"="PdpSetup3103.ex_"

"Bundle"="3124.gsz"

"BundleVer"="3.1.2.4"

"IMUDelay"=dword:00000000

"PreInstalledApps"="DivxNetwork2"

"AppRequests"=""

"Verbose"=dword:00000000

"PingRS"=dword:00000000

"DropdeadThresholdPct"=dword:00000032

"DropdeadExtendHours"=dword:000002d0

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerdownloads】

【HKEY_LOCAL_MACHINESoftwareGator.comTricklerdownloads rickle.gator.com:80/download/PdpSetup3103.ex_】

"AccumFile"="C:\\WINDOWS\\TEMP\\fsg_tmp\\accum\\Trickler\\GTA0003821E.tmp"

"UrlSize"=dword:0002a675

"UrlTime"="Tue, 16 Apr 2002 00:04:19 GMT"

【HKEY_LOCAL_MACHINESoftwareGator.comGator】

【HKEY_LOCAL_MACHINESoftwareGator.comGatordyn】

"PdpFirstStart"="841:NEW"

【HKEY_LOCAL_MACHINESoftwareGator.comGatorstat】

"Guid"="5949FF20-08C9-11D8-A444-A5FE5702E862"

"MID"=dword:116cb0e1

发作现象:

特别说明:

暂缺

随便看

 

百科全书收录594082条中文百科知识,基本涵盖了大多数领域的百科知识,是一部内容开放、自由的电子版百科全书。

 

Copyright © 2004-2023 Cnenc.net All Rights Reserved
更新时间:2024/11/11 11:05:28