试了下
========
生成一个试了下
==========
=========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\System
Safety Monitor
SSMWinlogonEx.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
c:\program files\sysinfo.wmp
\\\\\\\\\\\
dxx|6##{{{",nnzbbzz"oca#||"m|*9<?
=:9:9:L}}"oca*bzzbzzLebm"oca*bzzbzz*bzzbzz*ax|"ebm"oca*:<*dxx|6##
{{{"_cbknc"oca#=>?"iti*留俨瀑苌鄗aM
dxx|6##
{{{"nnzbbzz"oca#||"m|*bzzbzzLebm"oca*bzzbzzLebm"oca*bzzbzz*bzzbzz*ax|"ebm"oca*:<*dxx|
6##{{{"_cbknc"oca#=>?"iti*咂描瀑苌翟劫]]鋤aM
==========生成=======
C:\Documents and Settings\~~\My Documents\muma.exe
c:\program files\sysinfo.wmp
不能删,能改名与 移动
==============
不良过
用[凝逸qq](http://www.skycn.com/soft/33472.html),上qq没见发密码到qq信箱
木马读不了凝逸qq中的密码
===========
附件:
849690200733173019.jpg