Trojan/Bizten.a
Trojan/Bizten.a
病毒长度:19958
病毒类型:木马
危害等级:*
影响平台:Win9X/2000/XP/NT/Me/2003
Trojan/Bizten.a是一个未经同意便修改你的IE默认页并添加URL到收藏夹。
传播过程及特征:
1.复制自身为:%Documents and Settings%All UsersStart MenuProgramsStartupwinlogon.exe
2.添加下列URL到IE收藏夹:
~Series Hardcore Pic Sets and Movies.url
Young Teen F***ing Great Lo Archives.url
WOW VIDEOS AND PICS -- REALLY HARDCORE VIDEOS.url
Quality Galleries 50 000 freepics and movie.url
FULL COLLECTION DIRTY PORNO.url
Elite Teen Sites - Adult portal The Best TEEN SITES.url
Elite Mature Sites - Adult portal The Best Mature Sites.url
XXX QH PICS ARCHIVE.url
3.修改注册表:
/添加键值:
"Start Page"="<URL>"
"Search Page"="<URL>"
"Search Bar"="<URL>"
"Use Search Asst"="no"
到注册表:
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMain
/添加键值:
"(Default)"="<URL>"
"provider"="gogl"
到注册表:
HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerSearchURL
/添加键值:"SearchAssistant"="<URL>"
到注册表:HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearch
注:<URL>为:www.find-itnow.com /www.find-itnow.com/panel_search.html /teen-biz.com