keylogger virus

series "kingdoms" has been seen. Oh, just don't understand so deeply! In the hacking technology, Jinchantuoqiao refers to: Delete system running log attacker to break the system, often delete the system run log, hide their traces ... OhSecond, Shell, shelling, packersIn nature, I think we should not be unfamiliar with the shell of this thing, from the above story, we can also be seen. Plants in nature use it to protect the seeds, and animals use it to protect the body and so on. Also, in some c

Logo_1.exe Mutant Virus SolutionAfter the attachment decompression, the files inside the virus folder are copied to the c:\windows\ below. Rest assured. These are empty files. The file name is the same as the virus name. But it's all 0 bytes.Then run Logo1virus.bat to add the system to the files that were just put under c:\windows\. Hide. Read Only 3 properties.T

PsKill Msns.exe echo "Kill Msns the virus that paralyzed the network ... jb51.net" echo "shuts down process 10 ..." echo "shuts down process 9 ..." echo "shuts down process 8 ..." echo "shuts down process 7 ..." echo "shuts down process 6 ..." echo "Kill Msns the virus that paralyzed the network ... jb51.net" Attrib-h-s-r-A%windir%\system32\msns.exe Del%windir%\system32\msns.exe regedit/s./msns.reg echo "sh

Today, the company's computer in the virus, Kabbah and 360 can not run, because it is an XP system, so I thought of using tasklist and taskkill implementation of the deletion method, the specific method Copy Code code as follows: Run-->cmd.exe First use tasklist >>list.txt to get the PID value of the virus Then using taskkill/f/t/pid PID value, /f is mandatory termination, /t because the

Recently, the Auto virus in the U disk flooding, several friends have recruit, and then summed up a small skill, although not how good, but basically can be auto virus prevention, of course, special variants except, methods are as follows: You can in your USB disk or mobile hard drive to create a new autorun file, Because according to the laws of the computer, there can be no two identical names under the s

1. Boot virus capture Virus extraction in the boot area is simple. First, use Format A:/S to copy the boot system file to A floppy disk, and then copy some system execution files from the hard disk to the floppy disk. The specific steps are as follows: Enter the MS-DOS mode, Format A system disk, Format A:/s, for different systems, copy the following files to the same disk: For the gdi.exernl286.exe1_progma

Since the release of the "write a WORM.WIN32.VB.FW virus kill" and " virus Rundll.exe Release and source sharing " two articles in the virus specifically killed, my virus specifically kill VBS template also began to consider perfect. This time, the "Hosts file restore function module " and "Autorun immune Function Modu

Today encountered a virus, the code is not much, but the use of a function of the small loophole, the lethality is really amazing.Reprint Please specify source: http://blog.csdn.net/u010484477 Thank you ^_^This virus is normal in front:Socket->bind->listen This process, we allBelow I would like to elaborate on its attack mode:while (1){Nsock =Accept(sock, (struct sockaddr *) v10, (socklen_t *) v9);//wait to

The recent website hangs the horse comparison verification, my computer also super card, proposed everybody next 360safe,File name: Image. Jpg-www.photobucket.comFile Size: 10752 bytesAV name: (No, haha ' because all over ')Adding shell mode: UnknownWritten Language: DelphiVirus type: IRCBotFile Md5:0e404cb8b010273ef085afe9c90e8de1Behavior:1. Release virus copy:%systemroot%\system32\rpmsvc.exe 10752 bytesC:\Documents and settings\%users%\local setting

1. Disconnect the network (necessary) 2. End the virus process %system%\drivers\spoclsv.exe 3. Delete virus files: C:\windows\system32\drivers\spoclsv.exe Note: Open C disk to the right key-fight, otherwise the man will failed, repeat 2 steps! 4. Modify registry settings and restore the "Show All Files and folders" option: [Copy to Clipboard] CODE: [Hkey_local_machine\software\microsoft\windows\currentversi

This series of tutorials is copyright "I spring and Autumn" All, reproduced please indicate the source. for Video tutorials, please visit "I Spring" (www.ichunqiu.com).PrefaceThe last time we have introduced the basic method of virus signature extraction, this time we are programmed to implement the virus signature killing.defining a signature storage structureFor the sake of simplicity, this time we are us

This series of tutorials is copyright "I spring and Autumn" All, reproduced please indicate the source.for video tutorials, please visit "I Spring" (www.ichunqiu.com). virus found on USB stickSome time ago need to copy the point data to the virtual machine, as usual, plug in my USB flash drive, and in the virtual machine settings to choose the connection USB drive. Oddly enough, this time the connection is longer than usual and the AutoPlay window app

Jiang Min's October 3 virus broadcast: Beware of "nilag" virus stealing equipment information of online game heaven Jiang min reminds you today: In today's virus, TrojanDropper. HTML. r "HTML messenger" variants r and Trojan/ PSW. Nilage. bql "nilag" variant bql is worth noting. Virus name: TrojanDropper. HTML. r Chine