keylogger virus

The following is an analysis of the latest variants of the most rampant auto virus in two days: A Behavior overview The EXE is a virus downloader and it will: 1 Reference System C disk volume serial number to calculate the service name, EXE and DLL file name. 2 in each drive, place the auto virus autorun.inf and its own copy Auto.exe and add system and hidden at

Characteristics: 1, after running Notepad.exe,%systemroot%system32 set up random naming folder 935f0d, Release C:\WINDOWS\system32\935F0D\96B69A. Exe 2, in the%userprofile%"Start menu \ program \ startup icon for the folder file name is a space shortcut, point to C:\windows\system32\935f0d\96b69a.exe 3, add boot to HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, point to C:\windows\system32\935f0d\96b69a.exe 4, download the virus yun_qi_img/o.g

Behavior: 1. To release a file: C:\WINDOWS\system\SERVICES. EXE 65536 bytes C:\WINDOWS\system\SYSANALYSIS. EXE 65536 bytes C:\WINDOWS\system\explorer.exe 976896 bytes 2. To delete a backup file: C:\WINDOWS\system32\dllcache\explorer.exe 3. Overwrite system files: C:\WINDOWS\explorer.exe When the system starts, execute the virus body first, then execute C:\WINDOWS\system\explorer.exe. 4. Rename file as: explorer.exe608924508094788, as Backup 5. Try

The program was originally 2000 system in the Rundll.exe, by rogue malicious program with it changed the name everywhere, became a person to see people hate things. The virus behaves as follows: IE home page is forced to change, the system automatically restarts for no reason at regular intervals, this process occurs in Task Manager, and so on. Killing Method: For Walalet services that appear in the system service, you can delete the registry location

Text virus (new virus theory) In the past, when talking about viruses, we had to distinguish between text and executable files. In theory, viruses are program code, so only executable files can be infected, images and other data files cannot be infected with viruses. However, I think data files can also be infected with viruses. Virus is code, which is correct. H

"Experimental Purpose"1) Learn about macro viruses2) How to learn macro virus"Experimental principle"Macro viruses are malicious programs written in macro language (VBA) that exist in Word-processing documents, spreadsheets, databases and other data files, such as Office data Processing systems, which use the functions of the macro language to replicate and reproduce themselves in other data documents.There are two types of macros: an inline macro tha

Jiang Min's August 15 virus broadcast: Beware of "Heaven killer" Beware of online game equipment and other information Jiang min reminds you today that Trojan/PSW is a virus today. lineage. eko "Heaven killer" variants eko and Trojan/PSW. gamePass. tiq, a variant of "online game thieves", deserves attention. Virus name: Trojan/PSW. Lineage. eko Chinese name: "Hea

Tool Type: Integrated tools ⊙ operating system: All Windows systems ⊙ Tool Size: 1.95 MB ⊙ Date of submission: 2007-1-1 ⊙ number of visits: 1590 ⊙ Download Address: Download address ⊙ Tools Introduction The symptoms of a computer infected with the ARP spoofing virus (Trojan) are as follows: The machine starts to surf the internet and constantly sends ARP spoofing messages, Tha

Method One:You can use WinRAR software to open the D:e: F: Wait for a disk to see if there are SES.EXE files on each disk if so, then the Rose virus is modified.The solution is this:In Safe mode for manual antivirus, in addition, I am in the Register, manual search for virus-related files: Sxs.exe, Svohost, Autorun.inf, found after all deleted, each letter is deleted, and then Safe mode running antivirus so

Recently, Sunway Mutant virus rampant, many people were forced to format all the partitions, painstakingly saved data destroyed.The characteristics of this virus is: slow response to the system, playing online games will automatically quit, the hard drive EXE file icon will be changed to "Flower", to Dos with Ghost recovery system failure, if not the overall format, reload system can not solve the problem.T

Mobile viruses are now mimicking the common destructive practices of computer viruses, such as: "The Machine", "Terminate the Application", "derivative variant family", "Wireless Intrusion", "camouflage free software" even "steal the information", the virus invades the handset may cause the file, the telephone book, the message, the photograph as well as the telephone itself operation function to lose. Overall, although mobile phone

"Mail Virus" is actually the same as ordinary computer viruses, only because they are transmitted mainly through e-mail, it is called "Mail Virus", because they generally through the mail "attachment" entrainment method to spread, due to ordinary daily work in the use of e-mail frequently, Therefore, the prevention of mail viruses is very important. To deal with the mail

Next week (2007.09.24 ~ 09.30) a new Virus is particularly worth the user. It is the "LYW (Virus. Win32.LYW. a)" Virus. The virus automatically downloads other viruses and trojans from the Internet to steal users' privacy information. Follow the virus this week: LYW Vigila

Recently, a large number of Excel files in the company have discovered an office macro virus. They cannot be killed when using Kingsoft 360. Downloading Kingsoft version's macro virus excludes only part of the virus, another type of macro virus cannot be killed in any way. Attack symptoms Office macro

HDM.exe is a vicious u disk virus, its destructive power, mainly in the following areas:Quote:1. Use recovery SSDT to destroy antivirus software2.IFEO Image Hijacking3. Close the specified window4. Delete gho file5. Destroy Safe mode, and Show hidden file function6. Infection HTM and other Web files7. Guess the password is spread through LAN8. Through the U disk and other mobile storage transmission9.arp DeceptionThe specific analysis is as follows:Qu

Jinshan Poison PA 2008 The official introduction of technical information looks very beautiful, the actual face of the virus, and what? Going to get a virus experience. Virus samples are in a forum to get the little ladybird, the virus almost at the same time with panda incense and AV terminator

"A few days ago, the computer panda incense, just the ' national treasure ' away from a few days, today on the Internet to download a gadget, the machine began to slow down, there are several program icon into ' handsome ' head, eyes more prominent like the appearance of the light bulb, estimated again in the virus, really depressed! The user, Mr. Chen reluctantly said. Jinshan Poison Bully Anti-Virus expe

I haven't met the virus yet. I don't know if it is popular. But I have never seen pandatv before. Ps: My computer is streaking without even anti-virus How to kill the popular virus igm.exe VirusIgm.exe virus poisoning symptoms:1. IGM. EXE found in the startup Item of MSconfig2. Automatic startupTo clear the igm.exe vir

Php webpage virus cleanup class, php webpage virus cleanup This example describes the php webpage virus cleanup class. Share it with you for your reference. The details are as follows: I believe that many people's webpages are often troubled by adding Trojans in the background of php, asp, html, js and other files for no reason! I used to have a website like this

"Panda incense" virus can not only damage the user system, the result is that a large number of applications are unusable, and all files with an extension of Gho can be deleted, resulting in the loss of a user's system backup file, resulting in a failure to restore the system, and the virus can terminate a large number of anti-virus software processes and greatly