Page 302 - Tự Khắc Phục Máy Tính Khi Bị Vi Rút Tấn Công

ndows\CurrentVersion\Run\"StartLoad_[COMPUTER
NAME]" = "%System%\---- OuUuW_YeAh~~~.exe"
•HKEY_CURRENT_USER\Software\Microsoft\Windows
\CuưentVersion\Run\"Loading_[COMPUTER NAME]" =
"%System%\---- OuU uW_Y eAh-----.exe"
•HKEY_LOCAL_MACHINE\SOFTWARĐ^Microsoft\Wi
ndows
NT\CurrentVersion\Winlogon\"LegalNoticeCaption" =
"XPDC OuUuW YeAh KABA-LOVE 17/03/2007 ->
22/03/2007"
• H KE Y_cu R RENT_U SER\Soft ware\M icrosoft\W i ndows
\CuưentVersion\Winlogon\"LegalNoticeCaption" =
"XPDC OuUuW YeAh KABA-LOVE 17/03/2007 ->
22/03/2007"
•HKEY_CURRENT_USER\Software\Microsoft\Windows
\CuưentVersion\Winlogon\"LegalNoticeText” =
"Welcome To [LOGGED ON USER] Computer —>
•HKEY_LOCAL_MACHINEsSOFrWARĨAMicrosoft\Wi
ndovvs NT\CuưentVersion\Winlogon\"LegalNoticeText" =
"Welcome To [LOGGED_ON_USER] Computer —> ;-)"
HKEY_LOCAL_MACHINESSOFTWAREVvlicro.soft\Win
dows NT\CurrentVersion\Winlogon\"Shell" =
"explorer.exe"
•HKEY_LOCAL_MACHINE\SOFTWAR^icrosoft\Wi
ndovvs NTACuưentVersionXVVinlogonVSystem" =
"%System%\---- OuUuW_YeAh~~~.exe"
•HKEY_LOCAL_MACHINEXSOFTWARE\Poiicies\Micr
osoft\Windows NT\SystemRestore\"DisaỊ5leConfig" = "1"
•HKEY_LOCAL_MACHINE\SOFTWARE\Policĩes\Micr
osoft\Windows NTsSystemRestoreVDisableSR" = "1"
•HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Micr
osoft\Windows\Installer\"LimitSystemRestoreCheckpointi
ng" = 'T"
HKEY_CURRENT_USER\Software\Microsoft\Internet

302