75
人物
win 2k/2k3 system32下部分exe文件權限設置
“arp.exe”,”at.exe”,”atsvc.exe”,”attrib.exe”,”cacls.exe”,”cmd.exe”,”cｓｃｒｉｐｔ.exe”,”debug.exe”,
“finger.exe”,”ftp.exe”,”net.exe”,”net1.exe”,”netstat.exe”,”nslookup.exe”,”ping.exe”,”posix.exe”,”qbasic.exe”,
“regedt32.exe”,”regedit.exe”,”rsh.exe”,”route.exe”,”runonce.exe”,”secfixup.exe”,”syskey.exe”,
“rcp.exe”,”rdisk.exe”,”rexec.exe”,”telnet.exe”,”tftp.exe”,”tracert.exe”,”xcopy.exe”,
“edit.com”,”edlin.exe”,”wｓｃｒｉｐｔ.exe”,
搜索 :activeds.dll和activeds.tlb 隻留administrators和system組權限 防止aspxspy遍曆iis
“utilman.exe”,”osk.exe”,”sethc.exe”,”magnify.exe”,
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe]
“Debugger”=”C:\\WINDOWS\\explorer.exe” 沒事可以劫持下
文章來源於>> 站長天空
最後更新：2017-01-04 22:34:53