+ HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit
[AM] 60. e:\高强度文件夹加密大师\svohost.exe
,,,.rsrc,
55 8B EC B9 28 00 00 00 6A 00 6A 00 49 75 F9 53
文件名和"svchost.exe"类似
+ HKLM\Software\Microsoft\Windows\CurrentVersion\Run
F0BA2C2F524E86A537475EB0F3D52C45
[AM] 61. e:\qq自动登陆器2\tenyqq.exe
VL橸谚?_Y??G,QV?褤瑒,
可疑文件,请你上报给瑞星确认，
http://up.rising.com.cn/webmail/uploadnew.htm
