keylogger virus

Transfer from the original forum Jakee posts: Recently many netizens reflect their machine is called a gray pigeon Trojan virus, this virus is very naughty, in different kill soft have different names such as: Gpigeon, Huigezi, Feutel, in the computer to clear it is very troublesome, especially its just opened issued 2005, Through the interception of Windows System API to achieve program file hiding, proces

Autorun virus Defender is a special for the popular U disk virus development of the killing program. Its unique precision killing and expansion of the killing double killing mechanism can thoroughly remove viruses and trojans related files and registry entries, do not leave remnants. With a unique heuristic killing engine, the unknown U disk virus has more than 9

First, the preface Virus class teacher threw us a copy of the VBS script virus code to try to analyze, here the analysis process sent out for everyone's reference, if found in what is wrong or what is suggested, you can leave a message to me, thank you! Ii. Table of Contents The entire analysis process can be divided into the following sections: 0x00 Preparation Work0x01 Decryption part0x02 function Ana

Situation All the right keys are running, each disk will appear random 8-bit XXXXXXXX.exe and Autorun.inf files Internet search virus, Trojan, etc will be virus turned off, can not open nod32 and other anti-virus Software Unable to view hidden files, workaround: Method One: Modify the registry file (the following file save bit ok.reg) to run Copy Code code

Virus Name: Worm.Pabug.ck Size: 38,132 bytes md5:2391109c40ccb0f982b86af86cfbc900 Adding Shell way: FSG2.0 Written Language: Delphi How to spread: through mobile media or Web page malicious script propagation Through the virtual machine operation, and after the Shell OD analysis, its behavior is as follows: File creation: %systemroot%\system32\gfosdg.exe %systemroot%\system32\gfosdg.dll %systemroot%\system32\severe.exe %systemroot%\system32\drivers

Special finishing a auto Autorun.inf desktop.ini sxs.exe auto.exe virus Manual processing complete skills, you can see the image set method, let auto Autorun.inf desktop.ini Auto.exe Virus Nowhere to hide Recently, a number of viruses, the performance of: 1, under each partition will have three files, the property is hidden, file name is: autorun.inf,desktop.in,sxs.exe, which EXE file is a

, browser sandbox, web site detection and so on. "Avast!" One of the main features of the operation of the interface is quite beautiful, not like the general killing soft interface so stiff, and a large number of skin for you to choose, so that you can arbitrarily create personalized "avast!." Simple user interface, low system resource footprint, fast HDD scan and efficient antivirus, "avast!" is indeed an anti-virus software in the elderly. 3. AVG

Where is a bear cat burning incense?????Not a panda in incense, but all the EXE icon pocket into a burning 3 fragrant little panda, the icon is very cutePay in a manual way:Panda Variety Spoclsv.exe SolutionVirus name: WORM.WIN32.DELF.BF (Kaspersky)Virus alias: WORM.NIMAYA.D (Rising)win32.trojan.qqrobber.nw.22835 (Poison PA)Virus size: 22,886 bytesAdding Shell way: upackSample md5:9749216a37d57cf4b2e528c027

Virus name: BACKDOOR.WIN32.IRCBOT.ACD (Kaspersky) Virus size: 118,272 bytes Adding shell way: Pe_patch NTKRNL Sample Md5:71b015411d27794c3e900707ef21e6e7 Sample sha1:934b80b2bfbb744933ad9de35bc2b588c852d08e Discovery Time: 2007.7 Update Time: 2007.7 Communication mode: Spread by MSN Technical analysis The virus sends messages to MSN contacts and a poisoned pa

Virus program source code instance analysis-example code of CIH virus [2] can be referred to push eax; block table size Push edx; edx is the offset of the virus code block table Push esi; buffer address 　　 The total size of the merged virus code block and virus code block ta

Virus fingerprint: sha-160:da14ddb10d14c568b62176aab738b0c479a06863 Md5:c505733ffdda0394d404bd5bb652c1a6 ripemd-160:410ef9736ad4966094c096e57b477b7572b7ed9c crc-32:ff6e4568 Virus size: 43,900 bytes Connect network Download virus: Enter Address: 61.152.255.252 Correspondence Address: Shanghai Telecom IDC The following vir