2009-02-16

Autorun.inf

Autorun.inf ကိုၾကားဖူးၾကတဲ့ မိတ္ေဆြမ်ားအတြက္ရည္ရြယ္ၿပီး ဒီ post ေလးကိုေရးသားလိုက္တာပါ.....ေတာ္ေတာ္ေလးကို
ဒုကၡေပးတတ္တဲ့ေကာင္ေလးပါဘဲ ေအာက္မွာေတာ့ ဒီေကာင္ေလးရဲ႕အလုပ္လုပ္ပံု လုပ္နည္းေလးကို viruslist.com ကေန copy ကူးျပထားပါတယ္

When launched, the virus copies its executable file as follows:

%System%\config\csrss.exe
%WinDir%\media\arona.exe

It also creates the following file:

%System%\logon.bat

When this file is run, it will launch a copy of the virus:

%System%\config\csrss.exe

In order to ensure that the virus is launched automatically when the system is rebooted, it adds a link to its executable file to the system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Worms" = "%System%\logon.bat"

The virus also creates the following files:

%System%\config\autorun.inf
h:\autorun.inf
f:\autorun.inf
i:\autorun.inf
g:\autorun.inf
k:\autorun.inf
l:\autorun.inf
o:\autorun.inf
j:\autorun.inf

These files will be launched each time the user opens the corresponding hard disk partition using Windows Explorer. When one of these files is run, it will launch a copy of the virus: %System%\config\csrss.exe.

ဒါေတြကေတာ့ သူအလုပ္လုပ္ပံု လုပ္နည္းအဆင့္ဆင့္ပါဘဲ.....ကၽြန္ေတာ္အခုေျပာမွာကေတာ့ autorun.inf ကုိဘယ္လို kill မလည္းဆိုတာကိုေျပာဖို႔ပါဘဲ....... ဒီလင့္ေလး ကေနေဒါင္းလုပ္ခ်ၿပီး run ေပးလိုက္ရင္ autorun.inf ကို delete လုပ္ေပးသြားပါလိမ့္မယ္...........

No comments: