Registry Buat Virus

Start Up

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

- microfost = C:\windows\system32\hanny.exe

- sysedit = C:\windows\iexplorer.exe

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

- winsystem = c:\windows\system32\aniee.exe

    • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

- Printer Cpl = C:\WINDOWS\SPOOL32.EXE

    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

- Microsoft Word = C:\WINDOWS\system32\WINWORD.EXE

o HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\4LLI

o HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\ CurrentControlSet\Services\4LLI

o HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\ CurrentControlSet\Services\4LLI

o HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\ CurrentControlSet\Services\4LLI

o HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

ยง windowsapp = C:\WINDOWS\windowsapp.exe

Leave a Reply