autorun virus

The network found a autorun virus to kill the firewall and is a green version A small tool for defense against Autorun virus, it is very convenient for your computer to be in the monitoring Autorun virus. The firewall will interce

Anti-Virus Attack and Defense Research: Use WinRAR and AutoRun. inf for self-launchI. Preface from a series of previous studies, we can find that in order to enable the "virus" to start itself, I am also painstaking and have adopted various methods, it is often necessary to write lengthy code and have a lot of knowledge about the underlying system or registry. Th

1. Virus analysis: Virus Tag: Virus name: worm. win32.autorun. bqn Virus Type: Worm Hazard level: 2 Infected platform: Windows Virus size: 21,504 (bytes) Sha1: 01015b9f9231018a58a3ca1b5b6a27c269f807e6 Shelling type: pecompact v2.x

At present, U disk virus is very serious situation, almost all with virus USB disk, the root directory has a autorun.inf. The right key menu has more "AutoPlay", "Open", "Browser" and other items. Because we are accustomed to using a double click to open the disk, but now we double-click, usually not open u disk, but let the program set up in the Autorun.inf automatically play. So it's quite troublesome for

Today, a classmate has a virus in his computer, but there are many important things in the computer, such as virus-style Autorun. INF is a stubborn old virus. As long as the deletion is not clean, it will immediately copy and implant everything in the computer into such a file, which is usually in the root directory, w

Release files Copy codeThe Code is as follows: % Program Files % \ Internet Explorer \ PLUGINS \ Autorun. inf % Program Files % \ Internet Explorer \ PLUGINS \ pagefile. pif % Program Files % \ Internet Explorer \ PLUGINS \ WinNice. dll X: \ Autorun. inf (X is a non-system disk with other drive letters) X: \ pagefile. pif Add registry information, such as a startup ItemCopy codeThe Code is as follows:

At present, the U disk virus is very serious situation. Almost all the virus with the U disk, the root directory has a autorun.inf, right-click menu More "AutoPlay", "Open", "Browser" and other items. Because we are accustomed to using a double click to open the disk, but now we double-click, usually not open u disk, but let the program set up in the Autorun.inf automatically play. The

Down.exe/virus. win32.autorun. Z/Trojan. PWS. maran.262 EndurerOriginal2Added replies from Kaspersky.1Version When you open a page that is occasionally used in the Forum, rising prompts you to download and run suspicious files. Search by Google, and Google has already marked it:Http://www.google.cn/search? Complete = 1 HL = ZH-CN newwindow = 1 Q = % E8 % BF % 98% E7 % 8f % A0 % E5 % 8C % Ba + % E6 % 97%

U disk again in the Autorun virus, really annoying! Is there a simple anti-virus method? Here's a trick to teach you. First insert the U disk, then create a new text document, add the following in it: @echo on Taskkill/im explorer.exe/f Taskkill/im W.exe Start reg add hkcusoftwaremicrosoftwindowscurrentversionexploreradvanced/v showsuperhidden/t reg_dword/d

Today, I found that the computer was abnormal. I only needed to open the folder on the left side of the Windows resource manager, and the cmd.exe crashed. I checked that w32.downadup. Autorun virus was detected. Although the latest version of Rising antivirus software is installed on the machine, the virus cannot be detected at all. Symantec can detect it, but th

U disk again in the Autorun virus, really annoying! Is there a simple anti-virus method? First insert the U disk, then create a new text document, add the following in it: @echo on Taskkill/im explorer.exe/f Taskkill/im W.exe Start reg add hkcusoftwaremicrosoftwindowscurrentversionexploreradvanced/v showsuperhidden/t reg_dword/d 1/f Start reg Import Kill.re

Virus. win32.autorun. Xu is infected with a traffic violation query webpage.EndurerOriginal2007-10-26 th1Version The problem lies in the counter code used by the webpage:/------/ Check out the code of hxxp: // www. H * C ** JJ ** d.com/wfcx/count/online.asp:/---Document. write ("---/There are so many things to be hung up ~ I found hxxp: // W ***. 7 *** 373 * 4.cn/reg.htm? A. Code:/------/ Hxxp: // W **. 7 *

1. Run Autorun. BAT to perform drive letter immunity (including USB flash drives) 2. Run de-Autorun.bat to relieve drive letter immunity (including USB flash drive) 3. The fourth line of the Autorun. BAT and de-Autorun.bat filesCodeIn (c d e f g h I j) indicates the drive letter,You can add or delete a drive letter based on your computer. Welcome to my blog: http://hi.baidu.com/ycosxhack. By cosine fu

@ Echo on Taskkill/IM assumer.exe/F Taskkill/IM wscript.exe Start Reg add hkcu/software/Microsoft/Windows/CurrentVersion/Explorer/advanced/V showsuperhidden/T REG_DWORD/D 1/F Start Reg import kill. Reg Del C:/Autorun. */f/Q/ Del % SystemRoot %/system32/Autorun. */f/Q/ Del D:/Autorun. */f/Q/ Del E:/Autorun. */f/

EndurerOriginal1Version A netizen said that no matter what website he opened on his computer, the displayed pages were hxxp: // 218.*1 *. 1*4.170 vip1.htm and vip2.htm. Hxxp: // 218.*1 *. 1*4.170/vip1.htm content is US-ASCII encoded. Download http://purpleendurer.ys168.com encoding decoding to US-ASCIIProgramThe obtained content contains the Javascript script.CodeThe function is to download the file 611.exe, save it as C:/Microsoft.com, and run it. File Description: D:/test/611.exeAttribute:

1. Insert the U disk First, then create a new text document, add the following content in it: @echo on Taskkill/im explorer.exe/f Taskkill/im W.exe Start reg add hkcusoftwaremicrosoftwindowscurrentversionexploreradvanced/v showsuperhidden/t reg_dword/d 1/f Start reg Import Kill.reg Del c:autorun.*/f/q/as Del%systemroot%system32autorun.*/f/q/as Del d:autorun.*/f/q/as Del e:autorun.*/f/q/as Del f:autorun.*/f/q/as Del g:autorun.*/f/q/as Del h:autorun.*/f/q/as Del i:autorun.*/f/q/as De

Recently, the U disk virus has been very serious. Taking the Zhanjiang annual meeting as an example, we found that the ratio of virus to the U disk submitted by each user can be as high as 90%. Here, I will record some personal opinions on the virus.:First, almost all of these viruses use autorun. inf, but in fact

running! Note: Many people are very vigilant now. unfamiliar files won't run easily, and this method is hard to prevent. It should be noted that the people who give you a trojan won't be so stupid not to disguise the Trojan. Generally, they will change the name of the Trojan server file, or nice or very similar to the system file name, and then change the trojan icon to make it look like a TXT file, ZIP file, or image file ,, finally, modify the Trojan's resource file so that it is not recogniz

AUTORUN. The INF is one of the more common files used in our computer to allow you to run a specified file automatically when you double-click the disk. The computer Autorun.inf virus, what should do? WinXP system Autorun.inf How to delete it? The following small series for everyone to bring WinXP system delete the Autorun.inf folder method. Come and have a look! Method/Step: 1, the folder is a stubborn

"is changed to" Open = Trojan Server File Name ", and then AutoRun. inf and the configured Trojan server are copied to the root directory of the d drive of the other party, so that the other party does not need to run the Trojan server program, but simply double-click the D drive to run the Trojan! The advantage of doing so is obvious, that is, greatly increasing the initiative of Trojan running! Note: Many people are very vigilant now. unfamiliar fi