Mugen on fire
Neuling
Thread Starter
- Mitglied seit
- 12.12.2006
- Beiträge
- 163
hi leude ich hatte voll das prob mit nem virus(backdoor win 32)so hab ihn nun runter dank google hab nur noch ne frage in einem anderen forum hab ich gelesen das man alle befehle die dieser virus gemacht hat in der registry von sytem32 zrück ändern soll nur hab ich kp wie sie voher waren ich poste euch mal meine registry: shell "" AddValueList $(KeyHandle) $($2)
ifstr(i) $($R0) != STATUS_SUCCESSFUL
set Status = STATUS_ERROR_CREATEVALUE
goto endcreate
endif
endif
set Status = STATUS_SUCCESSFUL
endcreate = +
ifstr(i) $(Status) != STATUS_SUCCESSFUL
Debug-Output "REGISTRY.INF: CreateKey Error:"$(Status)
endif
Return $(Status) $(KeyHandle)
[AddValueList]
set Status = STATUS_FAILED
read-syms RegistryConstants
ForListDo $($1)
SetRegValue $($0) $($)
ifint $(RegLastError) != $(!REG_ERROR_SUCCESS)
Debug-Output "REGISTRY.INF: CreateValue failed:"$($)
goto end_addvaluelist
endif
EndForListDo
set Status = STATUS_SUCCESSFUL
end_addvaluelist = +
return $(Status)
[EnableCrashDump]
OpenRegKey $(!REG_H_LOCAL) "" system\currentcontrolset\control\CrashControl $(!REG_KEY_SET_VALUE) CrashControlKey
ifstr $(CrashControlKey) != ""
shell "" AddValueList $(CrashControlKey) {{LogEvent ,0,$(!REG_VT_DWORD),1},+
{SendAlert ,0,$(!REG_VT_DWORD),1},+
{CrashDumpEnabled,0,$(!REG_VT_DWORD),1},+
{AutoReboot ,0,$(!REG_VT_DWORD),1}}
CloseRegKey $(CrashControlKey)
endif
return
ich hoffe es kann wer helfen
ifstr(i) $($R0) != STATUS_SUCCESSFUL
set Status = STATUS_ERROR_CREATEVALUE
goto endcreate
endif
endif
set Status = STATUS_SUCCESSFUL
endcreate = +
ifstr(i) $(Status) != STATUS_SUCCESSFUL
Debug-Output "REGISTRY.INF: CreateKey Error:"$(Status)
endif
Return $(Status) $(KeyHandle)
[AddValueList]
set Status = STATUS_FAILED
read-syms RegistryConstants
ForListDo $($1)
SetRegValue $($0) $($)
ifint $(RegLastError) != $(!REG_ERROR_SUCCESS)
Debug-Output "REGISTRY.INF: CreateValue failed:"$($)
goto end_addvaluelist
endif
EndForListDo
set Status = STATUS_SUCCESSFUL
end_addvaluelist = +
return $(Status)
[EnableCrashDump]
OpenRegKey $(!REG_H_LOCAL) "" system\currentcontrolset\control\CrashControl $(!REG_KEY_SET_VALUE) CrashControlKey
ifstr $(CrashControlKey) != ""
shell "" AddValueList $(CrashControlKey) {{LogEvent ,0,$(!REG_VT_DWORD),1},+
{SendAlert ,0,$(!REG_VT_DWORD),1},+
{CrashDumpEnabled,0,$(!REG_VT_DWORD),1},+
{AutoReboot ,0,$(!REG_VT_DWORD),1}}
CloseRegKey $(CrashControlKey)
endif
return
ich hoffe es kann wer helfen
