中国开发网: 论坛: 程序员情感CBD: 贴子 55784
坏鼠标: 这个病毒不可怕。你自己看着办吧
When W32.Setclo runs, it performs the following actions:


Creates a copy of itself as C:\SETUP.EXE.


Creates a file named C:\AUTORUN.INF, which starts SETUP.EXE when the computer starts up.


Copies SETUP.EXE and AUTORUN.INF to all mapped network drives.


Adds the value:

"svchost"="[Path to file]\SETUP.EXE"

to the registry key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

so that the worm starts when Windows starts.

相关信息:


欢迎光临本社区,您还没有登录,不能发贴子。请在 这里登录