virus worm trojan horse

Virus Name: Trojan-psw.win32.onlinegames.kuu Chinese name: Online stolen Trojan Horse Virus type: Trojan Horse File Md5:d1ca82fd63c7c760cbe43a2520a28e34 File Length: 14,703 bytes I

National Computer virus Emergency treatment center through the monitoring of the internet found a malicious decoy users to expose the bank's personal bank account password Network silver Trojan trojspy_banker.yy. The net Silver Trojan will monitor the Web page that IE browser is visiting, if discovers the user is logged in ICBC Personal bank, will pop up forged l

Teach everyone to prevent Trojan, only for the Web Trojan, effective rate of more than 90%, you can prevent more than 90% Trojans on your machine is executed, and even anti-virus software can not find the Trojan could be prohibited to execute. Let's talk about the principle first. Now the Web

Since most of the Web site intrusion is done using ASP trojan, close-up of this article so that ordinary virtual host users can better understand and prevent ASP Trojan Horse. Only space and virtual host users to do a good job of preventive measures can effectively prevent ASP Trojan! One, what is ASP

With the increasing number of network users, all kinds of virus Trojan theft program will naturally be regarded as the mouth of the delicious. In a number of stolen pioneer Trojan down at the same time, will generate an alternative to the theft of the program, one after another, a network of improper use, will soon give personal network Bank account to bring larg

Anti-Virus Attack and Defense Research: simple Trojan Analysis and Prevention part1I. preface the development of virus and Trojan Horse technologies today, because they are always complementary, you have me and I have you, so the boundaries between them are often no longer s

Teach you to judge the existence of a virus Trojan from the processAny virus and Trojan exists in the system, can not be completely and process out of the relationship, even if the use of hidden technology, but also can find clues from the process, so, to see the process of activity in the system is the most direct way

: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon Name: shell key value: assumer.exe % WinDir % \ svchost.exe 3. Add a service for the gray pigeon Trojan: service name: system starmize display name: System starmize Description: system startup optimization executable file path: % ProgramFiles % \ common files \ microsoft shared \ msinfo \ servieces.exe Startup Type: Automatic 4. modify the system time. Run th

uninstall program is false to confuse users!! The Youth Forum Deadwoods netizen detailed analysis, because the original post picture has been invalidated, I will the content slightly edits to turn over: Today Kaspersky report found Trojan Horse (December 19) The latest version of Jinshan Poison PA and rising anti-virus software are not yet recognized this

Web|web Service |web Server | Trojan Horse with the development of ASP technology, network based on ASP technology to develop more and more web sites, the support of ASP technology can be said to be a Windows system IIS Server a basic function. But the backdoor of Trojan Horse based on ASP technology, also more and mor

Although the Trojan Horse is crazy, but there are many ways to deal with it, I think the best way is to master the method of killing Trojan horse. The following is an example of the use of the system itself with the "Program installation event record file" to find a Trojan

Procexp. Procexp can differentiate between system processes and general processes, and differentiate them in different colors, leaving the virus processes of counterfeit system processes nowhere to be hid. After the procexp is run, the process is divided into two large chunks, and the "systemidleprocess" subordinate process belongs to the system process, and Explorer.exe "subordinate processes belong to the general process." We have introduced the

system-related directory (with the directory of. exe files) and other than the system partition directory (with the directory of. exe files) released a large number of. t files. Later, whenever the relevant. exe is run, the. t file must be executed first, this process can be monitored by the SSM, can also be banned by the SSM. However, if you use the SSM to ban this. T, then the. exe you want to run is also banned by the SSM. After the use of anti-virus