WinXP?????????????

admin

??????????????

????????????msconfig????????????????????????????????????????????????�??�????????????? MSCONFIG?????????�??�?????????????????????hta??htm??url?????????????????????????????????�??�?????regedit/s????????????????????????????MSCONFIG????????????????????????!????????????????MSCONFIG??????????????????????????????????????????

???????WINDOWS?MSCONFIG?????(????Win2000??MSCONFIG???????WinXP?????msconfig.exe???)???????Win98 SE?????????????????????????????

1. Welcome ?????C:WINDOWSWelcome.exe /r

????Windows???????????!???????????????????????????????????????????KILL??

2. TaskMonitor ?????C:WINDOWStaskmon.exe

?????????????????????????????????????windowsapplog?applog.ind?????????

3?internat.exe ?????internat.exe

???!??????????????????????????????????????internet??????????internat???????????????????????En??????!

3. ScanRegistry ?????C:WINDOWSscaegw.exe /aotorun

????????????????????????????????WINDOWS??????????????????????????????????????????????????????????????????????!

5. SystemTray ?????SysTray.Exe

?????????????????????????????????????????????????

6. SchedulingAgent ?????C:WINDOWSSYSTEMmstask.exe

?????????????????????????????????????????????????!

7. LoadPowerProfile ?????Rundll32.exe

powrprof.dll,LoadCurrentPwrScheme (?????????????!)

??????????????????????????????�????�??????????????

??!??????Windows?????????????????????????????3721????????????????????????????^_^!

?????????????

??�??�??

?????windows?????????????????????????????????????

??????????????????????????????????????????????????????????

??????�??�????�??�???

?????????C:Documents and SettingsAdministrator???????????

??????????HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun?

????????????????????????

??msconfig

msconfig?Windows????�????????�????????????:system.ini.win.ini???????????????????????????!

1.system.ini

????�??�??????�msconfig�????????????(??)???system.ini?????? �shell=??�?????????????????shell=???????explorer.exe??????????????????????????????????????!

2.win.ini

???????????:hack.exe??????win?ini??????????:

[windows]

load=hack.exe

run=hacke.exe

????????????!

3.�??�??

?????????????????????"??"??????????????????????????????Windows???????????????????????????----??????????????????????????????

??�??�???�????�???????????????�??�???????????????"??"?????????????????????????????????????????????????????"??"??????????????

??????????????????????????????????????????????????:?????????????????????????????????????????????????????????????????????!

???????????????

???????????????????!????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????!?????????????????????????????????????????

?????????????????????????????????????????????????????????????!

?????????????????????????????????????????????!????????? �system�?�windows�?�programfiles�????????"????"????????????????????????????????????!

??wininit.ini

?????Wiidows?????????????????????????????????????????????????????????????!

??????Windows??????????? (????wininit.hak??)?????????????????????????????????????????????????????????????????winint.ini??????????????????????????!

??DOS????

???????DOS??????????config.sys,autoexec.bat,*.bat???????????????????????????????DOS???????????DOS?????????????????????!

????????

????? 2009-03-07 21:25

1? ????(????)?msconfig

2? ????gpedit.msc.

3? ???????lusrmgr.msc.

4? ???perfmon.msc.

5? ???????secpol.msc.

6? ??:services.msc.

7? ???????regedit.

8? ????�???�???sendto.

9? ??????compmgmt.msc.

10? ?????devmgmt.msc.

11? ?????diskmgmt.msc.

12? ?????????dfrg.msc.

13? ???????eventvwr.msc.

14? ??????fsmgmmt.msc.

15? ??????:rsop.msc.

16? ??? OE ?????

? Windows ?????�??/??(R)...�???�mailto:� ?�mailto:<????>�????Windows ?

?????????????

17? WinXP??????

WinXP????????????WinXP?????Shutdown.exe????????????

Windows?System32??????????12:00????????????

??�??�/?????�at 12:00 Shutdown -s�?????12????????�????�???????30?????????????????Shutdown.exe???????????

??? ????

??????????? ??�shutdown -i�????????????

??????????? ??�Shutdown.exe -s -t 300�?????5????????�300�??5

???

?????? ??????????????????????�shutdown -a�

???Shutdown.exe???????????????

-s??????????

-a?????????

-i??????????????Shutdown??????

-t??????????

-c "????"??????????????(???127???)

-l???????

-r??????

-f?????????

-m ?????????????ji

??~~~~~~~

????????????????????? ??????|???? |??

????S1???,????,???,?????????????

2009?03?18? ??? 14:19

S1???,????,???,?????????????

?Windows Mobile????????????????????

WINDOWS??????????????

backlight.exe????

btftpclient.exe ???????

bubblebreaker.exe

calc.exe

calender.exe

camera.exe

clearstorage.exe

clock.exe

commManager.exe

commuRec.exe

cprog.exe

CSDtype.exe

cusTSK.exe

cvdsetting.exe

Deviceinfo.exe

dlagent.exe

fexplore.exe

GCHistory.exe

GIFplayer.exe???? ??? ?? ?? ?????? ?? ???? ??? ?? CSD???? ???? ?????? ???? ????� ????? ???? GIF???

Gimageview.exe ????? GMMSview.exe?????

GOTOne_home.exe??????? GOTOneServ.exe ????

GPRSAuthentication.exe GPRS?? GRingView.exe???? Helpdesk.exe ?????? IA_Zip.exe Zip???? iexplore.exe???

intSHrui.exe??????? JBLend_AMS.exe JAVA??? keyLock.exe ???

Message.exe??

MicrophoneAGC.exe ??????? Mute.exe ???

MyFavvorite.exe ????

notes.exe ??

pimg.exe ????? Powerexe.exe ?????? poweroffwarning.exe ?????? ppc_adobereaderle.exeAdobe reader ppt.exepowerpoint pword.exe word

pxl.exe excl

Readial.exe ?????? remnet.exe ????

repllog.exe ????

safemode.exe????

sddialer.exe ???????? shfind.exe ????

SIMlock.exe SIM?

SMSService.exe????

sndplay.exe ???

solitare.exe????

STK_UIPPC.exe SIM???

storagelow.exe ?????????? syncml.exe????

tasks.exe ??

tmail.exe??

welcome.exe ???????? wlansettings.exe WLAN?? wmplayer.exewm???

wrlsmgr.exe ?????

????????????????# ?? Windowscprog.exe

# ????? Windowswmplayer.exe

?????????XP?????

XP???????????

????????????

??????????C:Documents and Settings????? ??????????

??????????: C:Documents and SettingsAll Users??????????

??????????

?????????????

??????????????"notepad ???????.txt"????????bat??????�gpedit.msc�??????????�????

?�/�Windows??�???�??(??/??)�??????�??�??????????�??�?????�??�????????????????????????????????????�??�????????????????????????

???????????

1.?????c:windowsaidu.bat?????????

@echo off

echo REGEDIT4>x.reg

echo.

echo

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersion
un]>>x.reg

echo "bat"="C:\windows\baidu.bat">>x.reg

regedit /s x.reg &del x.reg

????????????????????OK

2.?????????????C:TencentQQ.exe

@echo off

echo REGEDIT4>x.reg

echo.

echo

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion
un]>>x.reg

echo "QQStart"="C:\Tencent\QQ.exe">>x.reg

regedit /s x.reg &del x.reg

????????????????,QQStart?????.

3.???c:1.bat???????????

reg add

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun /v lin /t REG_SZ /d C:1.bat /f

lin???1.bat????????????.


?WinXP?????????????????????
?????http://www.850500.com/news/4993.html
?????,??!