每日一句: Build your own dreams, or someone else will hire you to build theirs. 打造自己的梦想,否则你就会被雇用去打造别人的梦想。 跟读

汉语站

2017年12月17日 星期日

丁酉(鸡)年十月三十

Win32.Troj.Goweh.a - 概述 [回目录]

病毒别名:
处理时间:2005-10-11
威胁级别:★
中文名称:
病毒类型木马
影响系统:Win 9x/ME,Win 2000/NT,Win XP,Win 2003
病毒行为:
该病毒是一个修改浏览器主页的木马病毒。该病毒运行后不停地添加启动项,修改浏览器主页,严重影响了系统的性能;该病毒还会会屏蔽大量站点,给网民造成了很大的不便。

Win32.Troj.Goweh.a - 介绍 [回目录]

1,生成文件
%Current%network.sys

2,添加启动项
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun
"UserSystem" = "%CurrentFile%"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
"UserSystem" = "%CurrentFile%"

3,修改主页
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain
"Start Page" = "http://smartsearch.ws"

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain
"Default_Page_URL" = "http://smartsearch.ws"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain
"Start Page" = "http://smartsearch.ws"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain
"Default_Page_URL" = "http://smartsearch.ws"

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain
"Search Page" = "http://smartsearch.ws/?q="

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain
"Search Bar" = "http://smartsearch.ws/?q="

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain
"Default_Search_URL" = "http://smartsearch.ws/?q="

HKEY_CURRENT_USERSoftwareMicrosoftInternet Explorer
"SearchURL" = "http://smartsearch.ws/?q="

HKEY_CURRENT_USERSoftwareMicrosoftInternet Explorer
"Search" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain
"Search Page" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain
"Search Bar" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerMain
"Default_Search_URL" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet Explorer
"SearchURL" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet Explorer
"Search" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionURLDefaultPrefix
"default" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionURLPrefixes
"www" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearch
"SearchAssistant" = "http://smartsearch.ws/?q="

HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearch
"CustomizeSearch"= "http://smartsearch.ws/?q="

3,通过改写hosts文件屏蔽以下网站
127.0.0.1 forums.spywareinfo.com
127.0.0.1 www.spywareinfo.com
127.0.0.1 www.merijn.org
127.0.0.1 merijn.org
127.0.0.1 spywareinfo.com
127.0.0.1 www.computercops.biz
127.0.0.1 computercops.biz
127.0.0.1 dslreports.com
127.0.0.1 www.dslreports.com
127.0.0.1 www.lavasoftsupport.com
127.0.0.1 lavasoftsupport.com
127.0.0.1 www.lurkhere.com
127.0.0.1 lurkhere.com
127.0.0.1 forums.net-integration.net
127.0.0.1 www.pctalk.info
127.0.0.1 pctalk.info
127.0.0.1 www.suggestafix.com
127.0.0.1 suggestafix.com
127.0.0.1 forums.thiefware.com
127.0.0.1 www.tomcoyote.org
127.0.0.1 tomcoyote.org
127.0.0.1 www.wilderssecurity.com
127.0.0.1 wilderssecurity.com
127.0.0.1 www.winguides.com
127.0.0.1 winguides.com
127.0.0.1 www.spybot-spyware.com
127.0.0.1 spybot-spyware.com
127.0.0.1 1spybot.com
127.0.0.1 www.1spybot.com
127.0.0.1 www.lavasoftusa.com
127.0.0.1 lavasoftusa.com
127.0.0.1 www.spychecker.com
127.0.0.1 spychecker.com
127.0.0.1 www.grc.com
127.0.0.1 grc.com
127.0.0.1 www.cexx.org
127.0.0.1 cexx.org
127.0.0.1 security.kolla.de
127.0.0.1 www.security.kolla.de
127.0.0.1 simplythebest.net
127.0.0.1 www.simplythebest.net
127.0.0.1 www.spywareguide.com
127.0.0.1 spywareguide.com
127.0.0.1 www.spyware.co.uk
127.0.0.1 spyware.co.uk
127.0.0.1 www.lavasoft.de
127.0.0.1 lavasoft.de
127.0.0.1 www.webopedia.com
127.0.0.1 webopedia.com
127.0.0.1 www.ZeroSpyWare.com
127.0.0.1 ZeroSpyWare.com
127.0.0.1 www.spectorsoft.com
127.0.0.1 spectorsoft.com
127.0.0.1 www.Spy--Software.com
127.0.0.1 Spy--Software.com
127.0.0.1 www.sunbelt-software.com
127.0.0.1 sunbelt-software.com
127.0.0.1 www.spycleaner.net
127.0.0.1 spycleaner.net
127.0.0.1 www.EnigmaSoftwareGroup.com
127.0.0.1 EnigmaSoftwareGroup.com
127.0.0.1 www.no-spybot.com
127.0.0.1 no-spybot.com

词条内容仅供参考,如果您需要解决具体问题
(尤其在法律、医学等领域),建议您咨询相关领域专业人士。

标签: Win32.Troj.Goweh.a

同义词: 暂无同义词

词条统计

浏览次数 : 6658 次

编辑次数 : 1 次 历史版本

更新时间 : 2009-04-12

双语连环画