==================================
Winsock 提供者
N/A
==================================
Autorun.inf
[D:\]
[AutoRun]
OPEN=go.exe
shellexecute=go.exe
shell\打开(&O)\command=go.exe
[E:\]
[AutoRun]
OPEN=go.exe
shellexecute=go.exe
shell\打开(&O)\command=go.exe
[F:\]
[AutoRun]
OPEN=go.exe
shellexecute=go.exe
shell\打开(&O)\command=go.exe
==================================
HOSTS 文件
127.0.0.1 localhost
==================================
API HOOK
警告!System Repair Engineer 提醒
你下面的函数内容与预期值不符,他
们可能被一些恶意的软件所修改:
RVA 错误: GetVersion
RVA 错误: GetVersionExA
RVA 错误: GetVersionExW
RVA 错误: DeleteFileA
RVA 错误: DeleteFileW
RVA 错误: FindFirstFileA
RVA 错误: FindFirstFileExA
RVA 错误: FindFirstFileExW
RVA 错误: FindFirstFileW
RVA 错误: FindNextFileA
RVA 错误: FindNextFileW
RVA 错误: LoadLibraryW
RVA 错误: Process32First
RVA 错误: Process32FirstW
RVA 错误: Process32Next
RVA 错误: Process32NextW
RVA 错误: Module32First
RVA 错误: Module32FirstW
RVA 错误: Module32Next
RVA 错误: Module32NextW
RVA 错误: MoveFileA
RVA 错误: MoveFileExA
RVA 错误: MoveFileExW
RVA 错误: MoveFileW
RVA 错误: TerminateThread
RVA 错误: Thread32First
RVA 错误: Thread32Next
RVA 错误: CreateFileW
RVA 错误: Thread32First
RVA 错误: Thread32Next
RVA 错误: CopyFileA
RVA 错误: CopyFileExA
RVA 错误: CopyFileExW
RVA 错误: CopyFileW
RVA 错误: CreateFileMappingA
RVA 错误: CreateFileMappingW
RVA 错误: CreateRemoteThread
RVA 错误: CreateThread
RVA 错误: CreateToolhelp32Snapshot
RVA 错误: ExitProcess
RVA 错误: ExitThread
RVA 错误: FindCloseChangeNotification
RVA 错误: FindFirstChangeNotificationA
RVA 错误: FindFirstChangeNotificationW
RVA 错误: FreeLibrary
RVA 错误: GetCurrentProcess
RVA 错误: GetCurrentProcessId
RVA 错误: GetCurrentThread
RVA 错误: GetCurrentThreadId
RVA 错误: GetFileSize
RVA 错误: GetFileSizeEx
RVA 错误: GetFileInformationByHandle
RVA 错误: GetFileAttributesA
RVA 错误: GetFileAttributesExA
RVA 错误: GetFileAttributesExW
RVA 错误: GetFileAttributesW
RVA 错误: GetModuleFileNameA
RVA 错误: GetModuleFileNameW
RVA 错误: Toolhelp32ReadProcessMemory
==================================
[/CODE]