Not in system root table of contents automatic batch run |http://www.cshu.net




                               About us 
                               Commercial cooperation 
                               Copyright declaration 
                               Contacts with us 



            Returns to the home pageArticle browsingOther columnsLands the forum


            |   The absolute &#21019;   |   |   hacker file   |   |   is newest 
            dynamically   |   
                  |  Hacker file>>invasion analysis>> not in system root table 
                  of contents automatic batch run  Printing

            Not in system root table of contents automatic batch run
            Www.cshu.net  2002-8-18  fog rain village 

              We all knew has a special batch run document in DOS [ Autoexec.bat 
              ] it to be located opens the shifting plate under the root table 
              of contents, may along with the system start automatic execution. 
              Actually center completely does not need [ Config.sys ] in "the 
              acute communicable disease bar" and [ Autoexec.bat ] may move 
              well. But you know? "The acute communicable disease bar" center 
              also had the automatic movement which very few some people knew 
              the batch run (dhole when installed the Jinshan poisonous tyrant 
              to discover this thing ^_^, a poisonous tyrant unexpectedly wanted 
              to use DOS to complete final step, but also left behind quite 
              several trash &_&), this batch run name name was called [ 
              WinStart.bat ], position under \windows table of contents, with [ 
              Autoexec.bat ] the function was same, after I installed the 
              Jinshan poisonous tyrant to discover when system start 
              unexpectedly appeared three line of C:\ prompt line, thereupon I 
              looked up [ Autoexec.bat ] to discover only had a carriage return 
              symbol, At that time all ignorant. 
              Presently summarizes as follows: 
              1st, position: [ WinStart.bat ] only has is located 98 installs in 
              the table of contents when can when the system start carries out. 
              2nd, function: [ WinStart.bat ] are most is some application 
              procedures installs when produces (for example the Jinshan 
              poisonous tyrant). Because certain reason system establishments 
              cannot change immediately, next time will start when the system on 
              passable has installed the table of contents production in the 
              system this batch runs reliably automatically to complete -odd 
              under the duty. 
              3rd, carries out the order: [ WinStart.bat ] was in has carried 
              out Win.com, after and increase the driver only then started to 
              carry out. When our passable start presses the F8 key to use 
              "Step-by-step confirmation again the" start option, the use on 
              foot starts confirmed sees its execution. 
              4th, the existence begins: In ordinary circumstances we very ugly 
              to [ WinStart.bat ] existence, even if sometimes planted the 
              installation procedure to found it, after completed the task the 
              system automatic will delete (the Jinshan poisonous tyrant not to 
              have &_&). But if we manual founded [ WinStart.bat ] the document, 
              the system not automatically deletes it. 
              In the normal condition is very difficult forbids [ WinStart.bat ] 
              the execution: With "Step-by-step confirmation when" option 
              replied "y" & "n" or not all very much is effective to other 
              procedures increases, but [ WinStart.bat ] actually halves a step 
              of execution not to pay attention, when uses the safe mode starts 
              98, it also and other procedures equally increase. 
              We may own arrange [ WinStart.bat ], for instance: 
              @echo off 
              Cd command 
              Pdos95.bat 
              Cls 
              Echo on 
              Rem presses the free key to start the formatted C plate... 
              Rem Ready? 
              Rem this is a new virus, therefore please use newest &#26432;Ը software 
              to try. 
              By now did not know the circumstances of the matter the user after 
              saw can frighten in a big way one jumps! Zha Du, looks up the 
              registration table, the start option, how does all uselessly, 
              ha-ha...





              Original author: N/A 
              Origin: Black and white network 
              Altogether has 53 readers to read this article 

              [Tells friend] 
            Previous article:Studies the phpnuke loophole 

            Next article:Carries on the attack using the mysql spatial password 

            - this week popular article - related article 
            Not in system root table of contents automatic batch run



      CSHU 
