强制更改主页
看看瑞星的记录
操作 时间 进程名称 数值名称 旧值 新值
修改 2009-05-12 15:20:55 C:\DOCUME~1\GOOWI\LOCALS~1\TEMP\SETACL.EXE HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\SHELL\OPENHOMEPAGE\COMMAND\
修改 2009-05-12 15:20:46 C:\WINDOWS\REGEDIT.EXE HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\START PAGE
http://www.hao123.com/ http://www.go2000.org/?s 修改 2009-05-12 15:20:32 C:\DOCUME~1\GOOWI\LOCALS~1\TEMP\SETACL.EXE HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\SHELL\OPENHOMEPAGE\COMMAND\
修改 2009-05-12 15:14:23 C:\DOCUME~1\GOOWI\LOCALS~1\TEMP\SETACL.EXE HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\SHELL\OPENHOMEPAGE\COMMAND\
修改 2009-05-12 15:14:21 C:\WINDOWS\REGEDIT.EXE HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\SHELL\OPENHOMEPAGE\COMMAND\"C:\Program Files\Internet Explorer\IEXPLORE.EXE" "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
http://www.go2000.org/?修改 2009-05-12 15:14:17 C:\WINDOWS\REGEDIT.EXE HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN\START PAGE
http://www.hao123.com/ http://www.go2000.org/?s 修改 2009-05-12 15:14:13 C:\DOCUME~1\GOOWI\LOCALS~1\TEMP\SETACL.EXE HKEY_CLASSES_ROOT\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\SHELL\OPENHOMEPAGE\COMMAND\
用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://bsalsa.com) ; .NET CLR 1.1.4322; CIBA)