New tricks for Trojan horse theft visual hiding

A "general-purpose" trojan virus that simultaneously steals users' "QQ", online game accounts, bank passwords, email passwords, and other private information has recently been "raging. This trojan is a pair named Rootkit. win32.Delf. l and the Trojan-PSW.Win32.Delf.eve of the Trojan, because of its stealth ability is super powerful, the user but in this trojan, all the password information entered from the keyboard has the risk of being stolen. This trojan virus uses the "Rootkit" technology to achieve "visual hiding", making it impossible for common users to find trojan files, which brings users great security risks.
 
According to micro-point anti-virus experts, this trojan is extremely tricky and uses Rootkit to protect its own trojan files, its "Rootkit" Driver file uses a random generated 1-9 variable file name to maliciously interfere with the user identification, by the "Rootkit" visual hiding technology to protect the trojan program Trojan-PSW.Win32.Delf.eve, even if you use the WINDOWS folder function to find and select "show all files", you still cannot see the trojan program, thus achieving the complete visual stealth of the Trojan program.

This type of Trojan horse with "Rootkit" for protection greatly increases the difficulty of Analysis and Removal. Generally, you cannot clear it manually. We recommend that you use the active defense software with behavior analysis technology and use the powerful system analysis capability of "behavior anti-virus" to completely remove this Rootkit Trojan, such as the micro-point active defense software, the active defense security software can effectively scan and kill the virus without being upgraded. (1, 2)

Figure 1 alarm Diagram for security software with active defense

Figure 2 shows the known feature alarm chart after the update

Related terminology: Rootkit

Rootkit appeared in early 1990s. It is literally a system-level management tool. It is actually a malicious tool used by hackers at the system kernel level, the most common application is to hide the Trojan horse's whereabouts-completely hide the trojan file, process, and registry, and make the conventional system analysis tool ineffective and unable to catch any clues. Based on the characteristics of Rootkit Driver technology, a higher level of driver-level programming technology is required for detecting and removing Rootkit, which is deeply analyzed and determined by the system kernel. Rootkit detection and removal are currently cutting-edge technologies in the international anti-virus industry.

Download: html ">Micro-point active defense Software