Hxdef is a backdoor that hides processes, registries, links, and files. After running Hxdef, you cannot use the task manager to view the processes and registries.
The author also introduced the golden version of Hxdef, which is said to be able to bypass core-level backdoor detection tools such as Iceword, Knlps, and Rootkitreveal. Of course, the gold version is paid.
But I believe that no matter how he changes it, he will be able to find it through secure restart. The following is a brief introduction to how to use secure restart.
1. Run Hxdef, a virus sample in my computer, and then the security expert will intercept him. To describe the secure restart function, we will allow this process to run here.
2. Click the secure restart button on the main window.
The interface is as follows:
After the startup of the new computer is completed, the system will pop up a window showing the progress that security experts can help you intercept. Here we see that hxdef.exe has been intercepted.
4. You can select to edit the list