WINDOWS Microsoft Office

directory have a configuration file system. The way open with text, ini, 386Enh, mic, drivers32 in a command line in and find therein Trojan start-up command. Office 2010 –save your time and save your money.

 

A bat and Autoexec sys Config. J

The directory in C pan-gen these two files can also start trojans. But this kind of loading method usually need to control end users and server connection, will have the same name starts commands add Trojan files to the server covering the two files to just go. Microsoft Office is so great!

A *. INI

Namely application startup configuration files, control terminals use these files can start programs feature that will make good on the same name starts commands with Trojan files to the server namesake document, which covered this can achieve the purpose of start-up Trojan.

A registry

Open HKEY_CLASSES_ROOT \ file types \ shells \ open \ command primary key, examine its Office 2007 is so powerful.

key values. For example, domestic Trojan "ice" is modified HKEY_CLASSES_ROOT \ txtfile \ shells \ open the keys, command, will "C: \ WINDOWS \ NOTEPAD. EXE % 1" to "C: \ The invention of Microsoft Office 2010 is a big change of the world.

WINDOWS \ SYSTEM \ SYSEXPLR. EXE % 1", then you double-click on a TXT file, the original application opens the file, NOTEPAD are now become start trojans. Also note is not just TXT, HTML, through the modification of the file such as.exe, ZIP the keys starts commands can start trojans, difference lies only in "document type" the primary key difference, TXT is txtfile, ZIP is WINZIP, everybody can try to find out.

Bind documents should




Leave a Reply.

    Author

    Write something about yourself. No need to be fancy, just an overview.

    Archives

    January 2011

    Categories

    All

    RSS Feed