keylogger virus

Primary initial analysisBytesThe guiding part is to load the virus body to the memory to prepare for the infected part (for example, resident memory, modify interrupt, modify high-end memory, and save the original interrupt vector ). The infected part is used to copy the virus code to the infected target, which is the biggest difference between viruses. The first two parts are also used for this part, the f

> Excerpt from: ClamAV virus scanner for Http://www.shangshuwu.cn/index.php/Linux security system ClamAV is a typical anti-virus software with extensive and GPL-license open source code that supports a wide range of platforms, such as Windows, Linux, UNIX, and other applications, such as mail clients and servers, HTTP virus scanning agents, and so on. ClamAV s

September 2, Jinshan Security Center captures the latest variant of the Phantom Virus, which will overwrite a specific model of the motherboard BIOS chip. If the rewrite succeeds, the virus-damaged MBR (The hard drive Master boot record) is protected and the antivirus software repair the damaged MBR will fail. Poisoned computer even formatted hard drive, also can not clear the

Beijing Information Security Evaluation Center, Jinshan Poison PA jointly released the January 22, 2005 popular virus. Today, users are reminded to pay special attention to the following viruses: "Pamela" (Worm.pamela) and "Yahologon" (Html.yahologon). "Pamela" worm, the worm spread through floppy disks, the virus files are using JPG file icon, it is very deceptive. Please pay more attention when you use

December 29, 2004, Jiangmin Antivirus Center took the lead in intercepting the first "stealth virus" BACKDOOR/BYSHELL.A, and named it "stealth thieves." After the virus is run, it is threaded into the system process and immediately deletes its own virus body to avoid killing the anti-virus software. The

With the popularization of computers and networks, there are also more and more viruses. In the face of such crazy viruses, anti-virus software manufacturers are constantly updating their own virus libraries. Most users are more careful when using their computers, some even have a lot of misunderstandings about anti-virus. Computers are infected with viruses, and

1, U disk virus infection principle U disk virus, the main way to infect the computer three kinds, here only one, but also its most important way of transmission-through mobile disk transmission 　　Windows system Auto Playback feature: This feature, which is in the startup state by default, is shown to insert the mobile disk into the computer and will automatically open the mobile disk. U disk

In the system operation, the virus through the virus vector is the system's external memory into the system's internal memory, resident memory. The virus in the system memory to monitor the operation of the system, when it found that there is an attack target and meet the conditions, it will be stored from memory itself to the target of the attack, so that the

Cited: The previous days to learn the virus this technology really ate a lot of hardships, went a lot of detours, although according to my knowledge level, the virus has been the learning content of the inevitable. But now I learned the introduction of this technology is actually hidden a lot of mystery, contains a lot of technology, do not specialize in research can not achieve the "cow" realm up. Now writ

Beijing Information Security Evaluation Center, Jinshan Poison PA jointly released the December 20, 2004 popular virus. Today, users are reminded to pay special attention to the following viruses: "Skull hole" (win32.hack.skubur.i) and "Small" (js.small.x). "Skull Hole" hacker program, which opens and listens on TCP ports, waits for remote connections, and accepts commands that are sent remotely. Hackers are free to illegally control user machines.

Last week, the Jinshan Anti-Virus center intercepted a theft "magic Domain", "perfect World" and "Hao Side game platform" for the purpose of the Trojan virus, the virus named win32.troj.onlinegames.ms.18432, since the advent of the Thursday has been derived from a number of variants. Jinshan Customer Service Center received a large number of user complaints, refl

Imagine, midnight you sit in front of the computer to surf the Internet, suddenly the motherboard starts singing--"Back to the Future", you will be startled? Then you will be crazy, the main board of the buzzer (buzzer issued "drip, drip, drip" sound, mainly used to alarm or hint), unusually nasty, as if it is "Death aria". This is the "singing virus" sequelae, in the virus, you will always be the motherboa

E-mails have become the main communication mode for daily office work of many enterprises. Today, virus is everywhere, and e-mails have become a way of spreading viruses. Many enterprises are vulnerable to the virus. As an enterprise user's network management system, how can we comprehensively prevent email virus erosion and create a secure application environmen

In the network life, the computer virus has brought the big threat to us, how to prevent the virus is we very concerned about a topic. In fact, the prevention of computer viruses is not a simple word, in the understanding of some of us there is a big mistake, the following we take a look at the computer virus when we face some of the wrong understanding. 1, on t

Often has the Netizen view in browsing some rubbish website to have caused the computer system to be destroyed, causes the computer above 360 anti-virus software to be not open the situation. So antivirus software can not open how to do it? Small series summed up about computer 360 anti-virus software can not open the fault and elimination methods to share to everyone. Usually the computer

Earlier, Jinshan Poison PA has released a message that "Taobao cheat" hijacked Taobao search results, many businesses cost rise commission was sucked away. Recently, Jinshan poison Bully Cloud Security Center monitoring found that "Taobao cheat" virus infection rate is rising rapidly, now ranked the second most popular virus, the virus to ordinary netizens brough

Rising anti-virus software network version of the network can be a unified computer installation, Setup, management, maintenance and upgrade, so as to provide a sound network of virus prevention system. For the first contact anti-virus software network version of users, the lack of experience and the product function of the unfamiliar can lead to increased worklo

Antivirus software is not yet fully erased Virus in addition to the C disk generated virus file IE.EXE, etc., will modify the game startup file If the original file name is Jxonline.exe virus changed the original file name become Jxonline~.exe, and then generate the Jxonline.exe infected with the virus After the 8th re

U disk auto Run virus (auto virus) is very common recently, and has a certain degree of harm, its mechanism is dependent on the automatic operation of Windows, so that we click on the disk when the automatic execution of related files. Today brings u disk (auto virus) class virus analysis and solution! First, U disk

Editor's note: A wood thinks that the concerns of Wang Yong's readers should be brought to our attention. Because today's digital products more and more popular, which will gradually attract more virus manufacturers eyes, perhaps in everyone happy to pass the song at the same time infected with a lot of viruses, if the formation of good anti-virus habits, the virus