Page 246 - Tự Khắc Phục Máy Tính Khi Bị Vi Rút Tấn Công

• %Windir%\system32\msgsvc.exe
• %Windir%\I_06_JA.pdf
• %Windir%\msvbvm60.dll
• %Windir%\system32\sol.exe

Nó sẽ khởi tạo vào Regedit.

•HKEY_LOCAL_MACHINE\SOFTWAREXClasses\scrfil
e\"NeverShowExt" = " 1"
•HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scrfil
eVIníoTip" =""
•HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scrfil
eVTilelnío" = ""
•HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\01e
VEnableRemoteConnect" = "N"
•HKEY_LOCAL_MACHINEVSOFTWAR^Microsoft\Sec
urity CenterVUpdatesOverride" = " 1"
•HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Micr
osoft\Windows\Installer\"LimitSystemRestoreCheckpointi
ng" = 'T '
•HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Micr
osoft\Windows\Installer\"DisableMSI" = "1"
•HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Micr
osoft\Windows NTYSystemRestoreVDisableSR" = "1"
•HKEY_LOCAL_MACHINEVSOFTWARBdíolicies\Micr
osoft\Windows NTSSystemRestore\"DisableConfig" = "1"
•HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scrfiI
e\" ” = "Screen Saver"
•HKEY_LOCAL_MACHINE\SOFTWARE\Classes\scrfil
e\" " = "Adobe Acrobat Document"
•HKEY_LOCAL_MACHINEsSOFTWARE\Microsoft\Sec
urity CenterVAntiVirusOveưide" = "1"
•HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Sec
urity Center\"FirewallOveưide" = " 1"
•HKEY_LOCAL_MACHINE\SOFrWARE\Microsoft\Wi

246