dhcpsrv.exe [md5:fc48ed]

BING126

McAfee  MISS

qigang

RS20.44.12未杀！

qigang

RS20.44.12未杀！

Palkia

nothing~

allinwonderi

TO Frisk

电影结束了

那个下载下来的...
这个东西很好....
过了TF默认规则....

The following Registry Keys were created:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NEW_DRV
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NEW_DRV\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NEW_DRV\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\new_drv
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\new_drv\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\new_drv\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NEW_DRV
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NEW_DRV\0000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NEW_DRV\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\new_drv
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\new_drv\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\new_drv\Enum
HKEY_USERS\.DEFAULT\Software\Microsoft\InetData
HKEY_CURRENT_USER\Software\Microsoft\InetData
The newly created Registry Values are:
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NEW_DRV\0000\Control]
*NewlyCreated* = 0x00000000
ActiveService = "new_drv"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NEW_DRV\0000]
Service = "new_drv"
Legacy = 0x00000001
ConfigFlags = 0x00000000
Class = "LegacyDriver"
ClassGUID = "{8ECC055D-047F-11D1-A537-0000F8753ED1}"
DeviceDesc = "!!!!"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NEW_DRV]
NextInstance = 0x00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\new_drv\Enum]
0 = "Root\LEGACY_NEW_DRV\0000"
Count = 0x00000001
NextInstance = 0x00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\new_drv\Security]
Security = 01 00 14 80 90 00 00 00 9C 00 00 00 14 00 00 00 30 00 00 00 02 00 1C 00 01 00 00 00 02 80 14 00 FF 01 0F 00 01 01 00 00 00 00 00 01 00 00 00 00 02 00 60 00 04 00 00 00 00 00 14 00 FD 01 02 00 01 01 00 00 00 00 00 05 12 00 00 00 00 00 18 00 FF 01 0F 0
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\new_drv]
Type = 0x00000001
Start = 0x00000003
ErrorControl = 0x00000000
ImagePath = "%Windir%\new_drv.sys"
DisplayName = "!!!!"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NEW_DRV\0000\Control]
*NewlyCreated* = 0x00000000
ActiveService = "new_drv"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NEW_DRV\0000]
Service = "new_drv"
Legacy = 0x00000001
ConfigFlags = 0x00000000
Class = "LegacyDriver"
ClassGUID = "{8ECC055D-047F-11D1-A537-0000F8753ED1}"
DeviceDesc = "!!!!"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NEW_DRV]
NextInstance = 0x00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\new_drv\Enum]
0 = "Root\LEGACY_NEW_DRV\0000"
Count = 0x00000001
NextInstance = 0x00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\new_drv\Security]
Security = 01 00 14 80 90 00 00 00 9C 00 00 00 14 00 00 00 30 00 00 00 02 00 1C 00 01 00 00 00 02 80 14 00 FF 01 0F 00 01 01 00 00 00 00 00 01 00 00 00 00 02 00 60 00 04 00 00 00 00 00 14 00 FD 01 02 00 01 01 00 00 00 00 00 05 12 00 00 00 00 00 18 00 FF 01 0F 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\new_drv]
Type = 0x00000001
Start = 0x00000003
ErrorControl = 0x00000000
ImagePath = "%Windir%\new_drv.sys"
DisplayName = "!!!!"
[HKEY_CURRENT_USER\Software\Microsoft\InetData]
k1 = 0x79FCEEF5
k2 = 0x4E037159
version = "230"
Attention! The newly created hidden Registry Value is:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
ttool = "%Windir%\9129837.exe"

so that 9129837.exe runs every time Windows starts

The following Registry Value was deleted:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
C:\Documents and Settings\UserName\Application Data\Microsoft\Installer\ = ""
C:\WINDOWS\Installer\{4275B162-C5C0-4912-9522-E92FE1C4E21D}\ = ""
C:\Documents and Settings\UserName\Application Data\Microsoft\Installer\{3966BA0C-23BA-4B20-9B9D-7561DEC54E6A}\ = ""
C:\Config.Msi\ = ""
C:\Program Files\VMware\VMware Tools\Drivers\memctl\ = ""
C:\Program Files\VMware\VMware Tools\TPOG3\ = ""
C:\Program Files\VMware\VMware Tools\TPOG3\amd64\ = ""
C:\Program Files\VMware\VMware Tools\TPOG3\i386\ = ""
C:\Program Files\VMware\VMware Tools\vmci\ = ""
C:\WINDOWS\Installer\{3B410500-1802-488E-9EF1-4B11992E0440}\ = ""

[ 本帖最后由 电影结束了 于 2008-5-13 22:25 编辑 ]