marcmaynard.exe , svchost.exe
Files size 212,992 bytes
MD5: 85C6ABFA2E43C03E4438E18383C78707
SHA-1: 07F1F6650B521A1C2A3504381FA8D12557F5A90E
==================================================
Files Created
%Windir%\Help\services.exe
%Windir%\Help\svchost.exe
%Temp%\marcmaynard.exe
%DesktopDir%\hi.txt
X:\autorun.inf
X:\MarcMaynard.exe
%Windir% = C:\Windows\
%DesktopDir% = C:\Documents and Settings\[UserName]\Desktop\
%Temp% = C:\Documents and Settings\[UserName]\Local Settings\Temp\
X:\ = C:\ - Z:\
Keys Added
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\
{F146C9B1-VMVQ-A9RC-NUFL-D0BA00B4E999}
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\
{Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666}
Values Added
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\
{F146C9B1-VMVQ-A9RC-NUFL-D0BA00B4E999}\
"StubPath" = "C:\WINDOWS\Help\svchost.exe"
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\
{Y479C6D0-OTRW-U5GH-S1EE-E0AC10B4E666}\
"StubPath" = "C:\WINDOWS\Help\services.exe"
Values Modified
HKLM\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\Winlogon\"Userinit" = "userinit.exe, services.exe"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ Folder\Hidden\SHOWALL\CheckedValue: 0x00000000
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\Hidden: 0x00000002
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\
Advanced\ShowSuperHidden: 0x00000000
HKCU\Software\Microsoft\Internet Explorer\Main\
"Window Title" = "M•ä•R•Ç † m•Á•ÿ•Ñ•â•R•Ð"
=======================================================
วิธีกำจัด/แก้ virus : marcmaynard.exe , svchost.exe
=======================================================
Download Fix Tool : PeeTechFix-MarcMaynard 1.0
No comments:
Post a Comment