基本介紹
- 外文名：Win32.Troj.Agent.k
- 中文名稱：木馬下載器
- 病毒類型：木馬
- 影響系統：Win9X/ME/2000/XP/NT/2003
- 威脅級別：★
基本信息,傳播過程,
基本信息
病毒別名：TrojanDropper.Win32.Agent.k【AVP】
處理時間：
中文名稱：木馬下載器
病毒類型：木馬
影響系統：Win9X/ME/2000/XP/NT/2003
病毒行為:
編寫工具:
傳染條件:
發作條件:
傳播過程
A、在%SystemRoot%目錄下或者%System%目錄下生成的幾個檔案名稱變化的檔案：
1098位元組的exe檔案(檔案釋放)
2891位元組的exe檔案(檔案釋放)
2907位元組的exe檔案
7314位元組的exe檔案
B、在%System%目錄下生成的檔案：
winmm64.exe
favico.dat
C、在當前用戶的收藏夾內添加連線：
Adult Pics and Moviesoo.url
Free Adult Pics and MoviesIncest.url
Free Adult Pics and MoviesDate Rape.url
Free Adult Pics and MoviesAnal Rape.url
Free Adult Pics and MoviesSex.url
Free Adult Pics and MoviesFree Porn.url
Free Adult Pics and MoviesEscorts.url
Free Adult Pics and MoviesPenis Enlargement.url
Free Adult Pics and MoviesSingle Girls.url
Free Adult Pics and MoviesSex Video.url
Free Adult Pics and MoviesHardcore.url
Free Adult Pics and MoviesAmateur Sex.url
Free Adult Pics and MoviesPorn.url
Free Adult Pics and MoviesTeen Sex.url
Free Adult Pics and MoviesGay.url
Free Adult Pics and MoviesFree Sex.url
Free Adult Pics and MoviesPussy.url
Free Adult Pics and MoviesAnimal Sex.url
Free Adult Pics and MoviesAsian Sex.url
Free Adult Pics and MoviesMature Sex.url
Free Adult Pics and MoviesGroup Sex.url
Free Adult Pics and MoviesAnal.url
E-Business NewsOnline Trading.url
E-Business NewsInternet.url
E-Business NewsWeb Site Design.url
E-Business NewsWeb Hosting.url
E-Business NewsAffiliate Program.url
E-Business NewsDomain Names.url
Health NewsHealth Insurance.url
Health NewsFitness.url
Health NewsWomen Health.url
Health NewsNutrition.url
Health NewsDiet.url
Health NewsMen Health.url
Shopping NewsSkin Care.url
Shopping NewsComputers.url
Shopping NewsCosmetics.url
Shopping NewsGifts.url
Shopping NewsElectronics.url
Shopping NewsAuto.url
Shopping NewsBooks.url
Shopping NewsClothing.url
Online Pharmacy NewsOnline Pharmacy.url
Online Pharmacy NewsViagra.url
Online Pharmacy NewsTramadol.url
Online Pharmacy NewsPhentermine.url
Online Pharmacy NewsValium.url
Online Pharmacy NewsXanax.url
Online Pharmacy NewsAdipex.url
Online Pharmacy NewsPenis Pills.url
Online Pharmacy NewsCarisoprodol.url
Online Pharmacy NewsDrug.url
Online Gambling NewsPoker.url
Online Gambling NewsOnline Casino.url
Online Gambling NewsOnline Gambling.url
Online Gambling NewsCasino.url
Online Gambling NewsOnline Poker.url
Online Gambling NewsBlack Jack.url
Online Gambling NewsCasino Games.url
Online Gambling NewsHome Business and Finances.url
Antiviruses, Software, ComputersAntivirus.url
Antiviruses, Software, ComputersSpyware.url
Antiviruses, Software, ComputersSpyware Remover.url
Antiviruses, Software, ComputersSoftware.url
Antiviruses, Software, ComputersHosting.url
100% FREE RANDOM ADULT SITE!.url
FREE ANIMAL SEX, INCEST, TEEN SEX, MATURE SEX AND MORE!.url
Animal sex.url
Anal Rape (raped teens).url
incest sex (Dad and daughter, Mom and son).url
Spyware remover.url
Elite Porno!.url
Elite Hardcore Video.url
Sweet Babes fucking.url
D、在註冊表主鍵：
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun和
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun
下添加與生成檔案同名的鍵值，並指向該檔案名稱，以及：
"SpywareGuardPlus"="C:WINNTsystem32winmm64.exe"
特別說明:
