å°æ¬çèæ³ç¨æ·æ¨å¥½ï¼
1.ä¸æ¯ã
å¼æºåä¼æ示Generic Host Process for Win32 Services éå°é®é¢éè¦ å
³éââRemote Rrocedure Call ï¼RPCï¼æå¡æå¤ç»æ¢ï¼ç¶åå°±èªå¨éèµ·çµèãä¸è¬è¯¥ç
æ¯ä¼å¨æ³¨å表
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ä¸å»ºç« msblast.exeé®å¼ï¼è¿ä¼å¨c:\windows\system32ç®å½ä¸ä¼æ¾ç½®ä¸ä¸ªmsblast.exeçæ¨é©¬ç¨ï¼è§£å³æ¹æ¡å¦ä¸ï¼ ä¸è½½ç¸åºè¡¥ä¸
å¦æå·²åæ»å»ï¼å»ºè®®å
ææç½çº¿ï¼å¨ä»»å¡ç®¡çå¨ä¸ç»æmsblast.exeè¿ç¨ï¼æ¸
é¤æ³¨å表ä¸çç¸åºæ¡ç®ï¼å é¤system32ä¸çæ¨é©¬ç¨åºï¼æåæè¡¥ä¸ã éï¼RPCæ¼æ´ 详ç»æè¿°ï¼
æè¿åç°é¨åRPCå¨ä½¿ç¨TCP/IPåè®®å¤çä¿¡æ¯äº¤æ¢æ¶ä¸æ£ç¡®çå¤çç¸å½¢çæ¶æ¯å¯¼è´åå¨ä¸ä¸ªå®å
¨æ¼æ´ã该æ¼æ´å½±å使ç¨RPCçDCOMæ¥å£ï¼è¿ä¸ªæ¥å£ç¨æ¥å¤çç±å®¢æ·ç«¯æºå¨åéç»æå¡å¨çDCOM对象æ¿æ´»è¯·æ±ï¼å¦UNCè·¯å¾ï¼ãå¦ææ»å»è
æåå©ç¨äºè¯¥æ¼æ´å°è·å¾æ¬å°ç³»ç»æéï¼ä»å°å¯ä»¥å¨ç³»ç»ä¸è¿è¡ä»»æå½ä»¤ï¼å¦å®è£
ç¨åºãæ¥çææ´æ¹ãå é¤æ°æ®æè
æ¯å»ºç«ç³»ç»ç®¡çåæéçå¸æ·çã å·²åç°çä¸ä¸ªæ»å»ç°è±¡ï¼
æ»å»è
å¨ç¨æ·æ³¨å表
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Run ä¸å»ºç«ä¸ä¸ªå«âmsupdateâï¼ä¼°è®¡æååï¼çé®ï¼é®å¼ä¸è¬ä¸º
msblast.exeC:\windows\system32ç®å½ä¸ä¼æ¾ç½®ä¸ä¸ªmsblast.exeçæ¨é©¬ç¨åºã
å¦å¤åæ»å»è
ä¼åºç°âGeneric Host Process for Win32 Services éå°é®é¢éè¦å
³éââRemote Rrocedure Call ï¼RPCï¼æå¡æå¤ç»æ¢ï¼Windowså¿
é¡»ç«å³éæ°å¯å¨âçé误信æ¯èéå¯ã
2.IEç»ä»¶å¨æ³¨å表ä¸ç注åä¿¡æ¯è¢«ç ´åã 解å³åæ³ï¼å¨è¿è¡éä¾æ¬¡è¾å
¥ regsvr32 actxprxy.dll regsvr32 shdocvw.dll regsvr32 oleaut32.dll regsvr32 actxprxy.dll regsvr32 mshtml.dll regsvr32 msjava.dll regsvr32 browseui.dll regsvr32 urlmon.dll
å¦ææé¤äºæ
åµ1ï¼æ³¨åå®è¿å 个IEç»ä»¶Generic Host Process for Win32 Servicesé®é¢ä¸è¬å³å¯å¾å°è§£å³ã
3.æå°æºé©±å¨å®è£
é误ã
å¦æçµèææå°æºï¼è¿å¯è½å 为æå°æºé©±å¨å®è£
é误é æGeneric Host Process for Win32 Servicesé®é¢ï¼éæ°å®è£
æå°æºé©±å¨å³å¯è§£å³
æ´å¤é®é¢æ¨å¯ä»¥å¨è¯¢
idea论åï¼
http://lenovobbs.lenovo.com.cn/forum.php?intcmp=FM_LBBS_baidureplyThink论åï¼
http://thinkbbs.lenovo.com.cn/forum.php?intcmp=FM_LBBS_baidureplyèæ³ä¹ç¤¾åºï¼
http://bbs.lenovomobile.com/forum.php?intcmp=FM_LBBS_baidureplyæå¾
æ¨æ»¡æçè¯ä»·ï¼æè°¢æ¨å¯¹èæ³çæ¯æï¼ç¥æ¨çæ´»æå¿«ï¼