What are the characteristics of the most hidden system backdoors?
First, the system must be powerful and fully controlled. Second, the system should be concealed. Attackers can bypass antivirus software. Are there any such backdoors? The answer is yes. Besides special viruses, the hidden accounts in the system are also
This feature is available.
There are two types of hidden accounts. One is simple hiding, that is, hidden accounts that cannot be viewed in the command prompt; the other is completely hidden, which does not appear in the user account on the control panel, it cannot be deleted even if it is found. It can only be cleared through professional tools. A hidden account generally has administrator privileges and has full control over the system. The first reason for hiding accounts is that our system may be infiltrated by hackers. For the convenience of next login, hackers will launch a hidden backdoor, which is what we call a hidden account, the second is to use some insecure ghost system to clone disks. To achieve their own purposes, the creators of these CDs have done their best in the system and created a hidden account. In any case, hiding accounts in the system is definitely not a good thing.
Let me talk about how to hide an account first.
I. Common Methods
Enter the "net user" command in the command prompt, and press enter to display the account in the current system. Then, enter "net user test $123456/add ", press enter and the command is successfully completed. That is, an account named "test $" with a password of 123456 has been created.
Enter "net user" again to find something? In the displayed result, the "test $" account does not exist, but the input "net user test" test $ "account exists. Enter the user account on the control panel and you can see the hidden account "test $.
In fact, the problem lies in the "$" symbol of the account backdoor. You can hide this symbol in the command prompt by placing it behind the account name, this is a simple way to hide accounts, but the effect is not good.
Ii. Special Methods
To create a fully hidden account, you must use the third-party tool provided by me later. The hidden account created using this tool cannot be deleted in general.
The Simple Method for deleting a hidden account is very simple. Find the hidden account in the user account and choose delete directly. or enter the command prompt and enter the command: net user to hide the account name/del to delete the user.
It would be much more difficult to clear a completely hidden account, because it is too hidden. How to discover his existence is a problem, but there are still flaws that can be seen, after a completely hidden account is created, the system's welcome interface will be canceled to Prevent Windows XP users from discovering hidden accounts when logging on.
If we find that the welcome page of the system disappears for no reason, we must be vigilant. You must also use this clone Account creation/deletion tool to clear full accounts. The tool must be run in a command prompt. Enter the directory where the file is located and enter the command: z.exe-l (l.pdf) to display all simple and completely hidden accounts in the system. Enter z.exe-u. The tool will prompt you to enter the username to be deleted, enter the name of the hidden account, and press enter to delete it.