會創建註冊表以及目錄並生成檔案
CreateFile C:\2.hiv
CreateRegValue \REGISTRY\USER\S-1-5-21-1614895754-1343024091-682003330-500\Software\nt\ctfmon
CreateRegKey \REGISTRY\USER\S-1-5-21-1614895754-1343024091-682003330-500\Software\nt
CreateFile C:\1.hiv
CreateFile C:\Documents and Settings\All Users\Favorites\netservice.exe
CreateFile C:\Documents and Settings\All Users\Favorites\plugin\001.dll
CreateDir C:\Documents and Settings\All Users\Favorites\plugin\
CreateRegValue \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\cover
CreateRegValue \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\netinfo
ModifyRegValue \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Favorites
ModifyRegValue \REGISTRY\USER\S-1-5-21-1614895754-1343024091-682003330-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6af0e80-5be0-11dc-ac31-806d6172696f}\BaseClass
ModifyRegValue \REGISTRY\USER\S-1-5-21-1614895754-1343024091-682003330-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6af0e81-5be0-11dc-ac31-806d6172696f}\BaseClass
ModifyRegValue \REGISTRY\USER\S-1-5-21-1614895754-1343024091-682003330-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b6af0e83-5be0-11dc-ac31-806d6172696f}\BaseClass
C:\WINDOWS\system32\dsnpstd3.dll 52 KB 2007/5/25 ¤W¤È 12:04:16 2004/6/15 ¤U¤È 03:18:42 1, 1, 0, 1
C:\WINDOWS\system32\comctl32.dll 615 KB 2004/7/12 ¤W¤È 08:00:00 2006/8/25 ¤U¤È 11:49:37 5.82 (xpsp.060825-0040) Microsoft Corporation Common Controls Library
C:\WINDOWS\system32\wininet.dll 650 KB 2004/7/12 ¤W¤È 08:00:00 2007/6/26 ¤U¤È 10:13:16 6.00.2900.3164 (xpsp_sp2_gdr.070626-1259) Microsoft Corporation Internet Extensions for Win32
肯定有問題...
想要遠離病毒請不要使用這些來路不明的破解以及外掛程式
