http://big5.minghui.org/mh/articles/2003/10/1/58253p.html


©ñ¥ú©úºô¯¸ºò«æ³qª¾¡G¤U¸üMPEG/AVI¤å¥óªº¦w¥þĵ§i
¡X¡X ¦³Ãö¦X¨Öµ{§Ç©Ò¤¤¯S¬¥¥ì¤ì°¨ªººò«æ­×´_±¹¬I


¡i©ú¼zºô2003¦~10¤ë1¤é¡j©ñ¥ú©úºô¯¸ªººò«æ³qª¾¡G¦]©ñ¥ú©úºô¯¸ªA°È¾¹¦A¦¸³Q«I¤J(¤j¬ù¬O8¤ë©³¨ì9¤ë©³´Á¶¡)¡A¥»ºô¯¸µn¸üªºxxx_merge.exe(¤À¶ô¦X¨Öµ{§Ç)³Q´Ó¤J¤F¶¡¿Òµ{§Ç¡C¸Ó¶¡¿Òµ{§Ç·|¦V¤¤°ê¤j³°ªº¬YIP¦a§}µo°e®ø®§(·¥¥i¯à¬Oºô¯Sªº¦a§})¡C¥Ø«e§Ú­Ìµo²{¡A¸Ó¶¡¿Òµ{§Ç·|­×§ïµù¥Uªí(registry)¡A¦Ó¥B¥Í¦¨©M°õ¦æ¨â­Óµ{§Ç¡Glinxup.exe©Mdm_mgr.exe¡Cxxx_Merge.exe ¥¿±`¤å¥ó¤j¤p¬°30KB¥ª¥k¡A¤Z¬O¤å¥ó¤j¤p¤£¥¿±`ªº¡A¤×¨ä¬O90KB¥H¤Wªº¡A³£¬O³Q·P¬Vªº¡C

½Ð«e¤@¬q®É´Á¤U¸ü¨Ã¹B¦æ¹L¥»ºô¯¸xxx_merge.exe(¦X¨Öµ{§Ç)ªºÅªªÌ¥ß§Y±Ä¨ú¬ÛÀ³¦w¥þ±¹¬I¡C²M²z¹q¸£³Ì¹ý©³ªº¤èªk¬O­«·s¦w¸Ë¾Þ§@¨t²Î¡A§ó´«©Ò¦³±K½X¡C¦pªG¥ß§Y­«¸Ë¨t²Î¦³§xÃø¡A½Ð±Ä¨ú¥H¤U±¹¬I¥ý²M°£¶¡¿Òµ{§Ç¡A¨Ã¾¨§Ö­«·s¦w¸Ë¨t²Î¡C

Windows 2000

¬Q¤Ñªº¸ÕÅçÀ|¸Õ¤F¦p¤Uºò«æ­×´_±¹¬I¡A¾Þ§@¨t²Î¬OWindows 2000 Professional¡A¨ä¥Lwindows ¨t²Î¤j¦P¤p²§¡A¦ý¬O¹ï©óMachitosh¤£¾A¥Î¡C

¹ï¤£¤ÓÀ´­pºâ¾÷ªº¦P­×¡A­×§ïµù¥UªíRegistry¬O°ª«×±M·~ªº§Þ³N¡A«D±`®e©ö¨Ï¨t²Î±Y¼ì¡A¤@¥¹¨t²Î³Q·d¶Ã½Ð¥ß§Y§äÀ´­pºâ¾÷ªº¦P­×­×´_¡A¤@©w­n§i¶D¥L­Ì¥H¤U¨BÆJ¤¤²Ä5¡B6¨B©Ò©R¦W¬°Backupªº¤å¥ó¦s¦b­þùؤF¡A¥H«K¨Ï¥ÎImport registry File¥ß§Y«ì´_¨t²Î¡C

1. ¦P®É«ö¤UCtrl-Alt-DelÁä¡A±o¨ìWindows Security µ¡¤f
2. «ö¤U(¥ô°ÈºÞ²z¾¹Task Manager)Áä±o¨ìWindows Task Manager µ¡¤f
3. ¿ï¾Ü(¶iµ{Processes Tab)¬d¬Ý(¬M¹³¦WºÙImage Name)¶µ¤¤¦³µLdm_mgr.exe©Îlinxup.exe¦b¹B¦æ¡A¦p¦³«h¥Î¹«¼ÐÂIÀ»¨Ï¤§ÅÜÂÅ¡AµM«á«ö¤U(µ²§ô¶iµ{End Process)Á䤤¤î¦¹¶iµ{¡C(¦pªG¸Óµ{§ÇµLªk¤¤¤î¡A½Ð¥Î·L³nªºKill.exe(¤U¸ü)µ{§Ç±N¸Óµ{§Ç¤¤¤î¡C
4. «ö¤U¥ª¤U¨¤(¶}©lStart)Áä¿ï¾Ü(¹B¦æRun)¿ï¶µ¡A¿é¤Jregedit¡A«ö¤UOKÁä¡A¨t²Î·|¼u¥X(µù¥Uªí½s¿è¾¹Registry Editor)µ¡¤f¡C
5. ¿ï¾Üµæ³æ¤Wªº(µù¥UªíRegistry)¡A¦b¤lµæ³æ¤¤¿ï¾Ü(¾É¥Xµù¥Uªí¤å¥óExport registry File)
6. ¨t²Î¼u¥X·sµ¡¤f¡A¦b(¤å¥ó¦WFile name)¤¤Áä¤JBackupµM«á«ö¤U(«O¦sSave)Áä¡C¨t²Î·|«O¦s¤@¥÷Registry file¡C
7. §ä¨ì¦p¤UÁä­È(Key)¨Ã§R°£¡G
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WMDM
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WMDM
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMDM
8. ­«·s±Ò°Ê¾÷¾¹¡A¶i¤J¦w¥þ¼Ò¦¡¡A¶i¤JC:\WINNT\system32¥Ø¿ý¬d¬Ý¦³µLdm_mgr.exe ©Mlinxup.exe¤å¥ó¡A¦p¦³«h§R°£¡C
9. Ãö¾÷¨ÃÃö±¼¹q·½µM«á­«·s±Ò°Ê­pºâ¾÷¡C
10. ¥ß§Y¦w¸Ë¨¾¤õÀð¡A§Ú¥Îªº¬OZoneAlarm¡CZoneAlarm Pro.¦¹³n¥óªº§K¶Oª©¦b¡Ghttp://www.zonelabs.com/store/content/company/products/znalm/
freeDownload.jsp?lid=zadb_zadown
«ØÄ³§äÀ´­pºâ¾÷ªº¦P­×¥[¸Ë¥¿¦¡ª©¨¾¤õÀð¡C
===========================================
Windows 98

1. °±¤î¹B¦æ³Q·P¬Vªº xxx_Merge.exe ¥¿±`¤å¥ó¤j¤p¬°30KB¥ª¥k¡A¤Z¬O¤å¥ó¤j¤p¤£¥¿±`ªº¡A¤×¨ä¬O90KB¥H¤Wªº¡A³£¬O³Q·P¬Vªº¡C
2. §R°£³Q·P¬Vªº xxx_Merge.exe
3. §R°£¨t²Î¤å¥ó§¨¤Uªº¤ì°¨¤å¥ó¡G
linxup.exe
dm_mgr.exe
¨t²Î¤å¥ó§¨¦bWindows 98 ¤@¯ë¬O C:\Windows\System¡F
¦bWindows 2000 ¤@¯ë¬O C:\WINNT\System32¡A§ó¥i¾aªº¿ìªk¬O¾ã½L·j¯Á¤W­z¤å¥ó¡A§ä¨ì¤§«á§R°£¡C
4. §R°£Á{®É¤å¥ó§¨ªº¯f¬r¤å¥ó¡Gdofl.exe
Á{®É¤å¥ó§¨¦b Windows 98 ¤@¯ë¬O C:\Windows\Temp
§ó¥i¾aªº¿ìªk¬O¾ã½L·j¯Á¤W­z¤å¥ó¡A§ä¨ì¤§«á§R°£¡C
5. ¨Ï¥ÎRegEdit.exe§R°£¤ì°¨¥Î©ó¦Û°Ê±Ò°Êªºµù¥Uªí°O¿ý
\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run¤U­±ªº"Dm mgr" ¶µ
6. ­«·s±Ò°Ê¨t²Î
7. ¥i¥H¨Ï¥Î¤@¨Ç¤u¨ãÀˬd¥¿¦b¹B¦æªºµ{§Ç¡C¦pªGµo²{linxup.exe¡A¤ì°¨¤´µM¦b¹B¦æ¡C


³¡¥÷«ØÄ³¡G

¦n¹³ÁÙ¦³Ãþ¦üªº¨ä¥¦¤å¥ó¦W¤]¬O³o­Ó¶¡¿Òµ{§Ç¡A¤w¸gª¾¹Dªº¦³¡Glinxup.exe¡Afl.exe¡Asvch0st.exe¡]µù¥Uªí¤¤¡A¬ONetLogon Help¡^¡C¥Ñ©ó¶¡¿Òµ{§Ç¥i¥H¶i¦æªº¾Þ§@¥i¯à«Ü½ÆÂø¡A©Ò¥H¦pªGµo²{¦³³o­Ó¯f¬r¡A«ØÄ³­«¸Ë¨t²Î¡A­×§ï©Ò¦³´¿¸g¦b¨º­Ó¾÷¾¹¤W¥Î¹Lªº±K½X©M¥Î¤á¦W¡C

¦¨¤å¡G2003¦~10¤ë01¤é  µo½Z¡G2003¦~10¤ë01¤é  §ó·s¡G2003¦~10¤ë02¤é 03:41:58


·N¨£«ØÄ³½Ð±H feedback@minghui.org
©ú¼zºôª©Åv©Ò¦³ © 1999-2004 MINGHUI.ORG Âà¸ü½Ðµù©ú¥X³B