HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion
Run "System Service" = C:WINDOWSSYSTEMMSREXE.EXE
Several other keys are created:
HKEY_LOCAL_MACHINESystemCurrentControlSetServices
Swartax "ImagePath" = C:WINDOWSSYSTEMMSREXE.EXE
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion
Welcome "%random values%" = "%random data%"
check http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=99793
a few registries for reference
本帖于 2004-02-06 15:24:48 时间, 由普通用户 old-cotton 编辑