Hermit(ÒþÊ¿)×îй¥»÷Ñù±¾·ÖÎö
°ä²¼¹¦·ò 2019-06-04½üÈÕ£¬£¬£¬£¬£¬£¬8827Ì«Ñô¼¯ÍŽ𾦰²È«×êÑÐÍŶÓͨ¹ýVenusEyeÍþвµý±¨ÖÐÐÄá÷ÁÔϵͳ²¶»ñµ½Ò»¸ö¿ÉÒÉÎĵµ¡£¡£¡£¡£¡£¡£¾¹ý¶ÈÎö£¬£¬£¬£¬£¬£¬ÎÒÃÇÈ·ÈÏÆäΪHermit(ÒþÊ¿)×éÖ¯×îй¥»÷Ñù±¾¡£¡£¡£¡£¡£¡£
±¾´Î¹¥»÷Èë¿ÚÓëÒÔÍùÒ»Ñù£¬£¬£¬£¬£¬£¬¾ùÒÔ´¹µöÓʼþΪÇÐÈëµã£¬£¬£¬£¬£¬£¬²¢×îÖÕ¿ªÊÍľÂíÒÔʵÏÖÐÅÏ¢ÇÔÈ¡¡£¡£¡£¡£¡£¡£
ºê´úÂëÖ÷ÌåÈçÏ£º
ºê´úÂëÖ´Ðк󣬣¬£¬£¬£¬£¬»áÏÂÔØÁ½¸öÎļþ¡£¡£¡£¡£¡£¡£ÆäÖÐÒ»¸öÎļþÊÇÕý³£Îĵµ£¬£¬£¬£¬£¬£¬¸ÃÎĵµ±»³Á¶¨ÃûΪÓë´¹µöÎĵµÒ»ÑùµÄÎļþÃû£¬£¬£¬£¬£¬£¬Ö®ºóºê»á´ò¿ªÕâ¸öÕý³£ÎĵµÒԹƻóÊܺ¦Õß¡£¡£¡£¡£¡£¡£
Õý³£ÎĵµÊÓͼÈçÏ£º
ľÂí·ÖÎö
ºê´úÂëÏÂÔØµÄÁíÒ»¸öÎļþ¾ÍÊÇľÂíÖ÷Ì壬£¬£¬£¬£¬£¬¼´Ò»¸öDLLÎļþ¡£¡£¡£¡£¡£¡£ÏÂÔØºó»áŲÓÃregsvr32.exe×¢²áºÍÔËÐиÃDLL¡£¡£¡£¡£¡£¡£DLL¼ÓÔØ³É¹¦ºó£¬£¬£¬£¬£¬£¬»á½«×ÔÉí¿½±´µ½%APPDATA%\\ChromInst\\ChromSrch.dat£¬£¬£¬£¬£¬£¬²¢Å²ÓÃrundll32Ö´Ðе¼³öº¯ÊýÖеÄ"insrchmdl"º¯Êý¡£¡£¡£¡£¡£¡£Í¬Ê±´´½¨¿ª»ú×ÔÆôÏîÄ¿ÒÔ´ïµ½³Ö¾ÃפÁôµÄÖ÷ÕÅ¡£¡£¡£¡£¡£¡£
´´½¨Á½¸öÎļþõè¾¶£¬£¬£¬£¬£¬£¬Ò»¸öÓÃÓÚ´æ·Å´ÓFTP·þÎñÆ÷ÏÂÔØµÄ¼ÓÃÜÊý¾Ý£¬£¬£¬£¬£¬£¬ÁíÒ»¸öÓÃÓÚ´æ·Å½âÃܺóµÄÎļþ¡£¡£¡£¡£¡£¡£
ľÂíµÄFTP·þÎñÆ÷µØÖ·£¬£¬£¬£¬£¬£¬µÇ½Õ˺ţ¬£¬£¬£¬£¬£¬µÇ½ÃÜÂë¾ùÓ²±àÂëÔÚ·¨Ê½ÄÚ£¬£¬£¬£¬£¬£¬µ«ÊÇÊý¾Ý¾¹ý¼ÓÃÜ¡£¡£¡£¡£¡£¡£½âÃܺ¯ÊýÈçÏ£º
½âÃܺóµÄFTP·þÎñÆ÷µØÖ·£¬£¬£¬£¬£¬£¬µÇ½Õ˺ÅÃÜÂëÈçÏÂËùʾ£º
·¨Ê½»áƾ¾Ý·ÖÆçµÄ²Ù×÷ϵͳλÊý´ÓFTP·þÎñÆ÷µÄ¡°Ftake¡±Ä¿Â¼ÏÂÑ¡ÔñÏÂÔØ¶ÔÓ¦µÄ¼ÓÃÜÊý¾Ý¡£¡£¡£¡£¡£¡£¶ÔÓ¦±íÈçÏ£º
ÏÂÔØµÄ¼ÓÃÜÊý¾Ýͨ¹ýÈçϵĽâÃÜËã·¨½øÐнâÃܲ¢Ð´µ½%APPDATA%\\ChromInst\\ChromInst.datÖÓ×£¡£¡£¡£¡£¡£
Ö®ºóÒÔÒ»ÑùµÄ·½Ê½Å²ÓýâÃܺóµÄChromlnst.datÖеġ°insrchmdl¡±º¯Êý²¢×¢²á¿ª»ú×ÔÆôÏî¡£¡£¡£¡£¡£¡£
×îºó´´½¨Åú´¦Ö÷¨Ê½ÒÔËãÕÊChromSrch.datÎļþ¡£¡£¡£¡£¡£¡£
2.ChromInst.dat·ÖÎö
Æð³õ´´½¨»¥³âÁ¿¡°ChromInstMutex¡±£¬£¬£¬£¬£¬£¬¶øºó»ñÈ¡´ÅÅÌÐÅÏ¢¡£¡£¡£¡£¡£¡£
´´½¨ÈçÏÂÎļþ¡£¡£¡£¡£¡£¡£
´´½¨5¸öÏ̡߳£¡£¡£¡£¡£¡£
µÚÒ»¸öÏß³ÌÓÃÓÚÉèÖÃÈ«¾Ö¼üÅÌ¼à¿Ø£¬£¬£¬£¬£¬£¬²¢½«ÈÕÖ¾¼Í¼µ½%TEMP%\\ChromInst.klgÖÓ×£¡£¡£¡£¡£¡£
µÚ¶þ¸öÏß³ÌÓÃÓÚ»ñÈ¡ÆÁÄ»½ØÍ¼²¢±£ÁôÔÚ%TEMP%\\ChromInst.scfÖÓ×£¡£¡£¡£¡£¡£
µÚÈý¸öÏß³ÌŲÓÃcmdÖ´ÐÐsysteminfo£¬£¬£¬£¬£¬£¬½«»ñÈ¡µ½µÄϵͳÐÅÏ¢³Á¶¨Ïòµ½%TEMP%\\ChromInst.cifÖÓ×£¡£¡£¡£¡£¡£
µÚËĸöÏß³ÌÓÃÓÚ¶ÁȡͬĿ¼ÏµÄChromInst.lstÎļþ¡£¡£¡£¡£¡£¡£¸ÃÎļþΪһ¸öÅäÖÃÎļþ£¬£¬£¬£¬£¬£¬·¨Ê½Í¨¹ý¶ÁÈ¡ÅäÖÃÎļþÖеÄFROMºÍTO×ֶν«FROM×Ö¶ÎÖеÄÎļþÒÆ¶¯µ½TO×ֶζÔÓ¦µÄõè¾¶ÖÓ×£¡£¡£¡£¡£¡£¶øºóʹÓÃFTPµÄ·½Ê½ÉÏ´«µ½Ö¸¶¨Ä¿Â¼¡£¡£¡£¡£¡£¡£
ÉÏ´«Îļþ
×îºóÒ»¸öÏ̻߳Ὣǰ¼¸¸öÏ̻߳ñÈ¡µ½µÄÊý¾ÝÉÏ´«µ½FTP·þÎñÆ÷£¬£¬£¬£¬£¬£¬¶øºó´Ó·þÎñÆ÷ÏÂÔØ¶ÔÓ¦Ö÷»úµÄ½ÚÔìÎļþ¡£¡£¡£¡£¡£¡£Ö¸ÁîÎļþÌåʽΪssl_[Ö÷»úΨһ±êʶ].txt
¶øºó½«Îļþ½âÃܲ¢±£Áôµ½Í¬Ä¿Â¼ÏµÄSSL.datÎļþÖУ¬£¬£¬£¬£¬£¬½âÃܹý³ÌÈçÏ£º
ºóÐø·¨Ê½»áƾ¾ÝSSL.datÎļþÖеÄÖ¸ÁîÀ´Ö´ÐÐ·ÖÆçµÄÖ°ÄÜ¡£¡£¡£¡£¡£¡£
Ö§³ÖµÄÖ¸ÁîÓëÖ¸Áî¶ÔÓ¦Ö´ÐеÄÖ°ÄܶÔÕÕ±íÈçÏ£º
¹ØÁª·ÖÎö
ÓÉÓÚ¹¥»÷ÕßµÄç¢Â©´óÒ⣬£¬£¬£¬£¬£¬ÎÒÃÇÔÚÆäºê´úÂëÖУ¬£¬£¬£¬£¬£¬·¢ÏÖÁËÒ»Ðб»×¢½âµÄ´úÂë¡£¡£¡£¡£¡£¡£
Õâ¶ÎÆ´½ÓµÄURL¼´http://fighiting1013.org/2/£¬£¬£¬£¬£¬£¬¸ÃURLÔø±»ÓÑÉÌÅû¶ΪHermit£¨ÒþÊ¿£©APT×éÖ¯ËùʹÓ㬣¬£¬£¬£¬£¬²¢ÇÒÆäºê´úÂëÒ²Óë֮ǰÓп϶¨µÄÀàËÆÖ®´¦¡£¡£¡£¡£¡£¡£Òò¶øÎÒÃÇÒÔΪ±¾´Î¹¥»÷ÓëHermit£¨ÒþÊ¿£©APT×éÖ¯Óп϶¨µÄ¹ØÁª¡£¡£¡£¡£¡£¡£
½øÒ»²½·ÖÎö·¢ÏÖ£¬£¬£¬£¬£¬£¬¸Ã×éÖ¯ËùʹÓõÄSYSCONľÂíÓëKONNIľÂí´æÔڿ϶¨µÄ¹ØÁª¡£¡£¡£¡£¡£¡£ÀýÈ罫»ñÈ¡µ½µÄÊܺ¦ÕßÖ÷»úÐÅÏ¢ÊÇ´æ·Åµ½·ÖÆç¶¨Ãûǰ׺µÄTEMPÎļþÖУ¬£¬£¬£¬£¬£¬¶øºóÔÙ³Á¶¨ÃûÉÏ´«¡£¡£¡£¡£¡£¡£Òò¶øÎÒÃÇÒÔΪ¸Ã×éÖ¯¿ÉÄܺÍÒѾʹÓùýSYSCONľÂíµÄDarkHotel×éÖ¯ÒÔ¼°Ê¹ÓÃKONNIľÂí¹¥»÷µÄ×éÖ¯ÓÐ×ÅǧͷÍòÐ÷µÄÁªÏµ¡£¡£¡£¡£¡£¡£
Íþвָ±ê£¨IOC£©
715051f5028dc793e06b20b4048f33a6
cfac51f1a10d6a176617ffd3a3a261cb
naiei-aldiel.16mb[.]com
½â¾ö¹æ»®
1¡¢ 8827Ì«Ñô¼¯ÍÅVenusEyeÍþвµý±¨ÖÐÐÄÒѾ֧³Ö¶Ô±¾´Î¹¥»÷»î¶¯Óйصý±¨µÄ²éÎÊ¡£¡£¡£¡£¡£¡£
2¡¢ ÒѲ¿Êð8827Ì«Ñô¼¯ÍÅAPT¼ì²â²úÆ·µÄ¿Í»§ÎÞÐèÉý¼¶£¬£¬£¬£¬£¬£¬¼´¿ÉÓÐЧ¼ì²âÕâ´Î¹¥»÷¡£¡£¡£¡£¡£¡£


¾©¹«Íø°²±¸11010802024551ºÅ