浏览器加载项
[]
{989D2FEB-5411-4565-8988-1DD2C5263377} <C:\WINDOWS\system32\SysInfo.dll, N/A>
==================================
Autorun.inf
[C:\]
[autorun]
open=RunDll32.exe .\SysInfo2.Dll,MyFun
shell\1=打开(&O)
shell\1\Command=RunDll32.exe .\SysInfo2.Dll,MyFun
shellexecute=RunDll32.exe .\SysInfo2.Dll,MyFun
[D:\]
[autorun]
open=RunDll32.exe .\SysInfo2.Dll,MyFun
shell\1=打开(&O)
shell\1\Command=RunDll32.exe .\SysInfo2.Dll,MyFun
shellexecute=RunDll32.exe .\SysInfo2.Dll,MyFun
[E:\]
[autorun]
open=RunDll32.exe .\SysInfo2.Dll,MyFun
shell\1=打开(&O)
shell\1\Command=RunDll32.exe .\SysInfo2.Dll,MyFun
shellexecute=RunDll32.exe .\SysInfo2.Dll,MyFun
[F:\]
[autorun]
open=RunDll32.exe .\SysInfo2.Dll,MyFun
shell\1=打开(&O)
shell\1\Command=RunDll32.exe .\SysInfo2.Dll,MyFun
shellexecute=RunDll32.exe .\SysInfo2.Dll,MyFun
==================================
HOSTS 文件
216.53.3.52 cncall1.19310918.cn
4.43.114.43 cncall2.19310918.cn
==================================
晕,明明有autorun.inf还说不是autorun病毒……