Worm.Magistr专用提取清除工具 1.1 英文绿色免费版

计算机病是由C语言编排书写的感染形计算机病，感染词尾名为exe(在操作系统可执行程序)的32位pe(可执行一种新的文件结构)能运行软件，计算机病源的大小为40kb(千字节，储存容量的单位)。
计算机病原文件为boot(建造、拥有、经营、转让).exe，由用户从U盘上提取。
病原文件程序:
boot(建造、拥有、经营、转让).exe(在操作系统可执行程序)运行以后检验自身是否在硬件驱动工具跟列表下，如并非退出。
检查是不是实际存在C:WINNTlinkinfo.dll(动态链接库,由多个程序同时使用),如若不实际存在则建立该文件。
检验硬件驱动文件是否实际存在，象不存在则生成驱动文件%SystemRoot%system(系统进程或木马病)32driversIsDrv118.sys(是驱动程序的后缀)(加载以后卸载)，并挪用ZwSetSystemInformation加载硬件驱动。
装年该dll(动态链接库,由多个程序同时使用)，然后查找计算机病挪用序号为101的导出程序函数。



http://www.aiothome.net/read.php?tid-53534-fpage-1.html http://www.aiothome.net/read.php?tid-33534-fpage-1.html http://www.aiothome.net/read.php?tid-49661-fpage-1.html http://www.aiothome.net/read.php?tid-31725-fpage-1.html http://www.aiothome.net/read.php?tid-66467-fpage-1.html http://www.aiothome.net/read.php?tid-46395-fpage-1.html http://www.aiothome.net/read.php?tid-42038-fpage-1.html http://www.aiothome.net/read.php?tid-78911-fpage-1.html http://www.aiothome.net/read.php?tid-75397-fpage-1.html http://www.aiothome.net/read.php?tid-72829-fpage-1.html http://www.aiothome.net/read.php?tid-64005-fpage-1.html http://www.aiothome.net/read.php?tid-51390-fpage-1.html http://www.aiothome.net/read.php?tid-41260-fpage-1.html http://www.aiothome.net/read.php?tid-55025-fpage-1.html http://www.aiothome.net/read.php?tid-63999-fpage-1.html http://www.aiothome.net/read.php?tid-78850-fpage-1.html http://www.aiothome.net/read.php?tid-49994-fpage-1.html http://www.aiothome.net/read.php?tid-60170-fpage-1.html http://www.aiothome.net/read.php?tid-65457-fpage-1.html http://www.aiothome.net/read.php?tid-65978-fpage-1.html http://www.aiothome.net/read.php?tid-62537-fpage-1.html http://www.aiothome.net/read.php?tid-30452-fpage-1.html http://www.aiothome.net/read.php?tid-66818-fpage-1.html http://www.aiothome.net/read.php?tid-42461-fpage-1.html http://www.aiothome.net/read.php?tid-64826-fpage-1.html http://www.aiothome.net/read.php?tid-33058-fpage-1.html http://www.aiothome.net/read.php?tid-41519-fpage-1.html http://www.aiothome.net/read.php?tid-62987-fpage-1.html http://www.aiothome.net/read.php?tid-67798-fpage-1.html http://www.aiothome.net/read.php?tid-60176-fpage-1.html http://www.aiothome.net/read.php?tid-37998-fpage-1.html http://www.aiothome.net/read.php?tid-57244-fpage-1.html http://www.aiothome.net/read.php?tid-57392-fpage-1.html http://www.aiothome.net/read.php?tid-78993-fpage-1.html http://www.aiothome.net/read.php?tid-79691-fpage-1.html http://www.aiothome.net/read.php?tid-79918-fpage-1.html http://www.aiothome.net/read.php?tid-44544-fpage-1.html http://www.aiothome.net/read.php?tid-31697-fpage-1.html http://www.aiothome.net/read.php?tid-65036-fpage-1.html http://www.aiothome.net/read.php?tid-60698-fpage-1.html http://www.aiothome.net/read.php?tid-65192-fpage-1.html http://www.aiothome.net/read.php?tid-35475-fpage-1.html http://www.aiothome.net/read.php?tid-67472-fpage-1.html http://www.aiothome.net/read.php?tid-54271-fpage-1.html http://www.aiothome.net/read.php?tid-30274-fpage-1.html http://www.aiothome.net/read.php?tid-32515-fpage-1.html http://www.aiothome.net/read.php?tid-35434-fpage-1.html http://www.aiothome.net/read.php?tid-40325-fpage-1.html http://www.aiothome.net/read.php?tid-75727-fpage-1.html http://www.aiothome.net/read.php?tid-40004-fpage-1.html
http://www.aiothome.net/read.php?tid-80001-fpage-1.html http://www.aiothome.net/read.php?tid-80002-fpage-1.html http://www.aiothome.net/read.php?tid-80003-fpage-1.html http://www.aiothome.net/read.php?tid-80004-fpage-1.html http://www.aiothome.net/read.php?tid-80005-fpage-1.html http://www.aiothome.net/read.php?tid-80006-fpage-1.html http://www.aiothome.net/read.php?tid-80007-fpage-1.html http://www.aiothome.net/read.php?tid-80008-fpage-1.html http://www.aiothome.net/read.php?tid-80009-fpage-1.html http://www.aiothome.net/read.php?tid-80010-fpage-1.html http://www.aiothome.net/read.php?tid-80011-fpage-1.html http://www.aiothome.net/read.php?tid-80012-fpage-1.html http://www.aiothome.net/read.php?tid-80013-fpage-1.html http://www.aiothome.net/read.php?tid-80014-fpage-1.html http://www.aiothome.net/read.php?tid-80015-fpage-1.html http://www.aiothome.net/read.php?tid-80016-fpage-1.html http://www.aiothome.net/read.php?tid-80017-fpage-1.html http://www.aiothome.net/read.php?tid-80018-fpage-1.html http://www.aiothome.net/read.php?tid-80019-fpage-1.html http://www.aiothome.net/read.php?tid-80020-fpage-1.html http://www.aiothome.net/read.php?tid-80021-fpage-1.html http://www.aiothome.net/read.php?tid-80022-fpage-1.html http://www.aiothome.net/read.php?tid-80023-fpage-1.html http://www.aiothome.net/read.php?tid-80024-fpage-1.html http://www.aiothome.net/read.php?tid-80025-fpage-1.html http://www.aiothome.net/read.php?tid-80026-fpage-1.html http://www.aiothome.net/read.php?tid-80027-fpage-1.html http://www.aiothome.net/read.php?tid-80028-fpage-1.html http://www.aiothome.net/read.php?tid-80029-fpage-1.html http://www.aiothome.net/read.php?tid-80030-fpage-1.html http://www.aiothome.net/read.php?tid-80031-fpage-1.html http://www.aiothome.net/read.php?tid-80032-fpage-1.html http://www.aiothome.net/read.php?tid-80033-fpage-1.html http://www.aiothome.net/read.php?tid-80034-fpage-1.html http://www.aiothome.net/read.php?tid-80035-fpage-1.html http://www.aiothome.net/read.php?tid-80036-fpage-1.html http://www.aiothome.net/read.php?tid-80037-fpage-1.html http://www.aiothome.net/read.php?tid-80038-fpage-1.html http://www.aiothome.net/read.php?tid-80039-fpage-1.html http://www.aiothome.net/read.php?tid-80040-fpage-1.html http://www.aiothome.net/read.php?tid-80041-fpage-1.html http://www.aiothome.net/read.php?tid-80042-fpage-1.html http://www.aiothome.net/read.php?tid-80043-fpage-1.html http://www.aiothome.net/read.php?tid-80044-fpage-1.html http://www.aiothome.net/read.php?tid-80045-fpage-1.html http://www.aiothome.net/read.php?tid-80046-fpage-1.html http://www.aiothome.net/read.php?tid-80047-fpage-1.html http://www.aiothome.net/read.php?tid-80048-fpage-1.html http://www.aiothome.net/read.php?tid-80049-fpage-1.html http://www.aiothome.net/read.php?tid-80050-fpage-1.html