Win32.loader. C, Trojan. psw. win32.gameonline, Trojan. psw. win32.asktao, etc. 2
EndurerOriginal1Version
Check that the last modification time of the EXE file on other disks except drive C is similar, and the file size increases, such as hijackthis
Rootkit. win32.gamehack. Gen, Trojan. psw. win32.gameol. Gen, and rootkit. win32.mnless
EndurerOriginal2008-03-051Version
Today, a netizen said that his computer suddenly became very slow yesterday afternoon, so he had to force the shutdown. Today,
Rootkit. win32.agent, Trojan. psw. win32.gameonline, Trojan. win32.mnless, etc. 2
EndurerOriginal1Version
There were a lot of things during this time and there was no time for remote assistance. Let the netizens handle them as follows:
Restart your
Encounter psw. win32.wowar, Trojan. win32.mnless, Trojan. immsg. win32.tbmsg, etc.
EndurerOriginal1Version
A netizen said rising in his computer often prompts to discover viruses and asked him to help him remotely via QQ.
Check the record history of
In addition, Trojan. psw. win32.qqpass, Trojan. psw. win32.gameol, etc. 2EndurerOriginal 2008-06-161Version(Step 1)Download fileinfo, bat_do from the http://purpleendurer.ys168.com.Use fileinfo to extract the information of the red files in the log,
Forcibly recommend Firefox adware. win32.admoke. FG, rootkit. win32.mnless. ft, etc.
EndurerOriginal1st-
A few days ago, a netizen said that Kingsoft drug overlord in his computer recently reported a virus every day, And ie appeared
Encountered
Encounter Trojan-PSW.Win32.QQPass, Trojan. psw. win32.gameol, etc. 2
Original endurerVersion 1st
(Continued: encounter Trojan-PSW.Win32.QQPass, Trojan. psw. win32.gameol, etc. 1)
Download fileinfo and bat_do to the http://purpleendurer.ys168.com,
Use of LCC-Win32!
About LCC-Win32LCC-Win32 is a free open source Win32 compiler, contains a very useful IDE,It is easy to use, but the source code has recently started to pay (40 US dollars ). For more information, see the LCC-Win32
Detours: intercepts Win32 function calls in binary code
Galen hunt and Doug brubacher
Microsoft Research
One Microsoft Way
Redmond, WA 98052
Detours@microsoft.com
Http://research.microsoft.com/sn/detours
Note: The first publication of this paper is
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.