Autorun.inf ကိုၾကားဖူးၾကတဲ့ မိတ္ေဆြမ်ားအတြက္ရည္ရြယ္ၿပီး ဒီ post ေလးကိုေရးသားလိုက္တာပါ.....ေတာ္ေတာ္ေလးကို
ဒုကၡေပးတတ္တဲ့ေကာင္ေလးပါဘဲ ေအာက္မွာေတာ့ ဒီေကာင္ေလးရဲ႕အလုပ္လုပ္ပံု လုပ္နည္းေလးကို viruslist.com ကေန copy ကူးျပထားပါတယ္
When launched, the virus copies its executable file as follows:
%System%\config\csrss.exe
%WinDir%\media\arona.exe
It also creates the following file:
%System%\logon.bat
When this file is run, it will launch a copy of the virus:
%System%\config\csrss.exe
In order to ensure that the virus is launched automatically when the system is rebooted, it adds a link to its executable file to the system registry:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Worms" = "%System%\logon.bat"
The virus also creates the following files:
%System%\config\autorun.inf
h:\autorun.inf
f:\autorun.inf
i:\autorun.inf
g:\autorun.inf
k:\autorun.inf
l:\autorun.inf
o:\autorun.inf
j:\autorun.inf
These files will be launched each time the user opens the corresponding hard disk partition using Windows Explorer. When one of these files is run, it will launch a copy of the virus: %System%\config\csrss.exe.
ဒါေတြကေတာ့ သူအလုပ္လုပ္ပံု လုပ္နည္းအဆင့္ဆင့္ပါဘဲ.....ကၽြန္ေတာ္အခုေျပာမွာကေတာ့ autorun.inf ကုိဘယ္လို kill မလည္းဆိုတာကိုေျပာဖို႔ပါဘဲ....... ဒီလင့္ေလး ကေနေဒါင္းလုပ္ခ်ၿပီး run ေပးလိုက္ရင္ autorun.inf ကို delete လုပ္ေပးသြားပါလိမ့္မယ္...........
2009-02-16
Autorun.inf
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment