best virus checker

Releasing files Copy Code code as follows: %program files%\internet Explorer\plugins\autorun.inf %program files%\internet Explorer\plugins\pagefile.pif %program files%\internet Explorer\plugins\winnice.dll X:\Autorun.inf (x is not a system disk other letter) X:\pagefile.pif Add registry information such as Startup items Copy Code code as follows: Hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks] { 06a68ad9-ff6

suspect a Trojan or virus, or if the system starts too slowly, use this tool to look at the startup item. The first time you run, the font displayed is very uncomfortable, please go to the menu "Options"-"font" set the font to "Arial" 9th, then no problem. Link: http://www.sysinternals.com/Files/Autoruns.zip V8.11 version download page: http://www.skycn.com/soft/17567.html QUOTE: Startuplist 1.52.1 Description: Foreign

Virus Name: Worm.Pabug.ck Size: 38,132 bytes md5:2391109c40ccb0f982b86af86cfbc900 Adding Shell way: FSG2.0 Written Language: Delphi How to spread: through mobile media or Web page malicious script propagation Through the virtual machine operation, and after the Shell OD analysis, its behavior is as follows: File creation: %systemroot%\system32\gfosdg.exe %systemroot%\system32\gfosdg.dll %systemroot%\system32\severe.exe %systemroot%\system32\drivers

We will use the code to practice a antivirus program, clear the readable and writable program, scan the program's signature, and delete the virus. # Include "stdafx. H "# include" Scandisk. H "# include" scandiskdlg. H "# ifdef _ debug # define new debug_new # UNDEF this_filestatic char this_file [] = _ file __; # endifuint threadproc (lpvoid PARAM) {cscandiskdlg * Scandisk = (required *) param; cstring part; int I = 0; int Cy = Scandisk-> m_disk.g

－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－ Save, file name is S.bat save type is all files Double-click to open any key to continue the manual reboot The following is the Copy.exe upgrade version of the virus specifically killed Copy.bat ******************* Copy Code code as follows: taskkill/f/im Copy.exe taskkill/f/im Svchost1.exe taskkill/f/im Svchost2.exe Del/f/a:s C:\AUTORUN. Inf Del/f/a:s C:\copy.exe Del/f/a:s C:\host.exe Del

Where is a bear cat burning incense?????Not a panda in incense, but all the EXE icon pocket into a burning 3 fragrant little panda, the icon is very cutePay in a manual way:Panda Variety Spoclsv.exe SolutionVirus name: WORM.WIN32.DELF.BF (Kaspersky)Virus alias: WORM.NIMAYA.D (Rising)win32.trojan.qqrobber.nw.22835 (Poison PA)Virus size: 22,886 bytesAdding Shell way: upackSample md5:9749216a37d57cf4b2e528c027

Virus name: BACKDOOR.WIN32.IRCBOT.ACD (Kaspersky) Virus size: 118,272 bytes Adding shell way: Pe_patch NTKRNL Sample Md5:71b015411d27794c3e900707ef21e6e7 Sample sha1:934b80b2bfbb744933ad9de35bc2b588c852d08e Discovery Time: 2007.7 Update Time: 2007.7 Communication mode: Spread by MSN Technical analysis The virus sends messages to MSN contacts and a poisoned pa

After you select the "show hidden files" option, you will find that a file on the USB flash drive disappears immediately. When you enable the folder option, the "hidden file not displayed" option is still found. Another window will be opened when you click drive letter icons such as C and D! Condition description 1. Hidden Files cannot be displayed; 2. When you click drive letter icons such as C and D, another window is opened; 3rd, when using winrar.exe, we found that the CIDR root directory co

Trojan Horse is a remote control of the virus program, the program has a strong concealment and harm, it can be unnoticed in the state of control you or monitor you. Some people say, since the Trojan is so powerful, then I can not be far away from it! However, this trojan is really "naughty", it can be no matter whether you welcome, as long as it is happy, it will try to get into your "home"! Ah, that also got, hurry to see their own computer there i

1, release the virus file: C:\WINDOWS\Help F3C74E3FA248.dll 143872 bytes F3C74E3FA248.exe 74532 bytes 2. Add Startup items: Registrykey:hklm\software\microsoft\windows\currentversion\explorer\shellexecutehooks Registry value: {1dbd6574-d6d0-4782-94c3-69619e719765} Type:reg_sz 3, using hook technology to record the mouse, keyboard operation, stealing online games account password. 4. Release: C:\windows\1.bat Deletes i

Trojan Horse brute force removal to remove the following files: 　　 Quote: C:\WINDOWS\system\1sass.exe C:\WINDOWS\System32\DRIVERS\2pwsdor.sys C:\WINDOWS\system32\drivers\k87wovjoq.sys C:\WINDOWS\system32\xswfgklsjnspp.dll and use Sreng to remove the corresponding service items and drivers, as follows: －－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－ Start Project-> service-> Win32 Service Application-> Select Hide Microsoft Services and delete the following name: 　　 Quote: [Rising Protected Storage/ris

Virus fingerprint: sha-160:da14ddb10d14c568b62176aab738b0c479a06863 Md5:c505733ffdda0394d404bd5bb652c1a6 ripemd-160:410ef9736ad4966094c096e57b477b7572b7ed9c crc-32:ff6e4568 Virus size: 43,900 bytes Connect network Download virus: Enter Address: 61.152.255.252 Correspondence Address: Shanghai Telecom IDC The following vir