By the way, hackers will not be able to succeed.

Today, my colleague Mr. Wang was in a very low mood. someone had stolen his QQ password and deleted all his friends and personal information! This type of prank is really annoying! Mr. Wang was worried that this would happen again, so he ran for help. I had to be invited to try again.

　　Trojan process Detection

According to my experience, password theft is often caused by Trojans. We can take appropriate measures only when we know what kind of Trojan is implanted by someone else on the local computer. Otherwise, we cannot start.

First, go to the desktop of the computer that has lost QQ, open the "Windows Task Manager" dialog box, select the "process" tab option in the functional components above it, the program displays all running processes. Looking for suspicious strangers here, the pen finds the Trojan process of Alxa stealing ntdhcp.exe on the machine of John. No wonder he will lose his QQ number.

Tip: for unknown processes, we can search on google to determine whether the process is a Trojan process.

　　Catch the "fishing boat"

It's easy to know what arada's Trojan is doing. You just need to download the trojan killing tool to clear the Trojan. However, I don't want to give up on this. I found out through searching that the accounts of the stolen QQ numbers were received in the mailbox, so I thought of using Sniffer to listen to the accounts of the received mailboxes, so that we can find the account theft email address.

Here, I use the X-Sniffergui monitoring tool. After downloading and unzipping the tool, double-click the "XsnifferGUI" feasible program and the "Graphical" operation interface () will pop up. If you want to adopt the "listener" mode, click the start listener button below, and the program will immediately listen to the current information flow of all "accounts" on the local machine. John's machine also has a big theft Trojan. I will log on to another QQ number and use the X-Sniffergui tool to listen to it to steal account information of this malicious account, x-Sniffergui saves the information in. log files are located in the X-Sniffergui installation directory.

After receiving the specific information from the mailbox, the last thing to do is to log on to the designated "fishing boat". The author found that there were many QQ accounts and passwords in this mailbox, it seems that it is harmful. I deleted all emails and modified the email password to give this hacker some lessons. Finally, I downloaded the trojan killing tool to clear all the Trojans on the machine and finally solved the problem.

Tip: after discovering a Trojan, users only need to use the kill tool to clear the Trojan to avoid the risk of another account theft. X-Sniffergui is a hacker tool. Please use it with caution.