À̵¿½Ä µå¶óÀÌºê »ç¿ë ½Ã ÀÚµ¿ ½ÇÇà ÇϽÃÁö ¸¶½Ã°í, Ž»ö±â¸¦ ÀÌ¿ëÇÏ¿© µå¶óÀ̺êÀÇ ³»¿ëÀ» È®ÀÎ ¶Ç´Â ½ÇÇà ÇϽñ⠹ٶø´Ï´Ù.
¼öµ¿ È®ÀÎ
1. [½ÃÀÛ]-[½ÇÇà]-[cmd] ½ÇÇà
2. %System% ¿¡¼ dir/ah
3. ¼û°ÜÁø ¸ñ·Ïµé Áß CRESS.com ¹× NWCWorkstationfd.d11 (±âŸ NETSVCS_0x0fd.d11, NETSVCS_0x1fd.d11, NETSVCS_0x2fd.d11, NETSVCS_0x3fd.d11, NETSVCS_0x4fd.d11 µî ÆÄÀÏ)ÆÄÀÏ È®ÀÎ
4. ÀÛ¾÷°ü¸®ÀÚ¿¡¼ CRESS.com È®ÀÎ
¼öµ¿ Ä¡·á (Àӽà ¹æÆí)
1. ÀÛ¾÷°ü¸®ÀÚ¿¡¼ CRESS.com Á¾·á
2. NWCWorkstation ¼ºñ½º Á¾·á
3. Cmd ºê¶ó¿ìÀú¿¡¼ %system%ÀÇ ¼û±è ¼Ó¼ºÇØÁ¦
(Attrib –s –r –h CRESS.com
Attrib –s –r –h NWCWorkstationfd.d11
Attrib –s –r –h NETSVCS_*.d11)
4. Cmd ºê¶ó¿ìÀú¿¡¼ %system% ÇØ´çÆÄÀÏ »èÁ¦
(del CRESS.com
del NETSVCS_*.d11)
5. [½ÃÀÛ]-[½ÇÇà]-[regedit] ½ÇÇà
6. ÇØ´çÅ° °ª »èÁ¦(»¡°»öÀÇ Run »èÁ¦)
([HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run]
CRESS = "CRESS.COM")
7. ·¹Áö½ºÆ®¸®ÀÇ Å°°ªº¯°æ ÈÄ »èÁ¦ (Start = 0x00000002 -> Start = 0x00000004 º¯°æ ÈÄ NWCWorkstation »èÁ¦)
([HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NWCWorkstation]
Start = 0x00000004)
8. ·¹Áö½ºÆ®¸®ÀÇ Å°°ªº¯°æ ÈÄ »èÁ¦(NETSVCS_0x0°ü·Ã Å° °ª »èÁ¦)
([HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NETSVCS_0x0])
9. Cmd ºê¶ó¿ìÀú¿¡¼ %system% ÇØ´çÆÄÀÏ »èÁ¦ (del NWCWorkstationfd.d11)
»èÁ¦ µÈ ·¹Áö °ª º¹¿ø
legalnoticecaption = ""
legalnoticetext = "")
1. [½ÃÀÛ]-[½ÇÇà]-[regedit] ½ÇÇà
2. »èÁ¦ µÈ ·¹Áö½ºÆ®¸® ÁöÁ¡ À̵¿
([HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system])
3. ÇØ´ç ¹®ÀÚ¿ °ª »ý¼º
("legalnoticecaption", "legalnoticetext")
|