Introduction to the typical "Valentine's Day" virus
1. Valentine's Day (VBS. Valentin) virus
Valentine's Day (VBS. Valentin) virus is a virus that can write love letters. It encrypts itself with the scripting encryption engine and inserts it into the HTML file, which produces a vir
Any viruses and Trojans exist in the system, can not completely and process out of the relationship, even if the use of hidden technology, but also can find clues from the process, therefore, viewing the process of the system activity is the most direct way to detect the virus Trojan. But the system runs at the same time so many processes, which is the normal system process, which is the process of Trojans, and often by
First, let the virus disappear from the directory
We start with the directory where the virus resides, and if the virus has a separate directory like normal software, then we can smile a little bit--the virus is weaker. When you check the directory's creation time, you can tell when you dyed the poison and you may fin
Some people think that anti-virus is a simple task. Isn't it just by clicking the "anti-virus" button of anti-virus software?
Yes, anti-virus software is required for anti-virus, but it doesn't mean that it is a good thing to do when you click anti-
This article is not an article about horizontal evaluation of n types of anti-virus software, but an article about building a platform based on my own user experience. For now, good anti-virus software has its own characteristics, but they are all the same. Therefore, there is no universal anti-virus software. The key is to choose a suitable anti-
1. What is the virus?
What is computer virus? The standard definition should refer to the compilation or insertion of computer commands or program code that damage computer functions or data and affect computer use. Computer viruses, like biological viruses, can spread, multiply, and attach to normal computer programs to cause damage. Therefore, we call it computer viruses. It is contagious, destructive, c
push EAX; block table size
push edx; edx is the offset of the Virus code block table
push esi; buffer address
Combined virus code block and Virus code block table must be less than or equal to the amount of space not used
Inc ECX
push ecx; Save numberofsections+1
SHL ecx, 03h; multiply 8
push ecx; reserved virus
series "kingdoms" has been seen. Oh, just don't understand so deeply! In the hacking technology, Jinchantuoqiao refers to: Delete system running log attacker to break the system, often delete the system run log, hide their traces ... OhSecond, Shell, shelling, packersIn nature, I think we should not be unfamiliar with the shell of this thing, from the above story, we can also be seen. Plants in nature use it to protect the seeds, and animals use it to protect the body and so on. Also, in some c
Logo_1.exe Mutant Virus SolutionAfter the attachment decompression, the files inside the virus folder are copied to the c:\windows\ below. Rest assured. These are empty files. The file name is the same as the virus name. But it's all 0 bytes.Then run Logo1virus.bat to add the system to the files that were just put under c:\windows\. Hide. Read Only 3 properties.T
There are a few old jokes, and I can't remember where to go from. It's very classic and worth collecting :)
Let's learn from the ground up.
The first story is the story of letting go.
One day, the old monk took the little monk out and turned back.
For the symptoms, I first went online to find the relevant information, first, to show hidden files
In this: Hkey_local_machine\software\microsoft\windows\currentversion\explorer\
Advanced\folder\hidden\showall, modify the CheckedValue key value to 1
Still no use, hidden files or no display, careful observation found that the virus it has a more ruthless way: it in the modified registration to hide the purpose of the file, in order to be safe, the ori
Panda Burning Incense Virus Special Kill V1.6 Official edition:
The tool implements detection and removal, repair of infected panda incense virus files, unknown varieties of panda incense to detect and deal with the ability to deal with all the current family of panda incense virus and related variants. Download the address below
Download this file
testing easy
1. Boot virus capture
Virus extraction in the boot area is simple. First, use Format A:/S to copy the boot system file to A floppy disk, and then copy some system execution files from the hard disk to the floppy disk. The specific steps are as follows: Enter the MS-DOS mode, Format A system disk, Format A:/s, for different systems, copy the following files to the same disk:
For the gdi.exernl286.exe1_progma
Since the release of the "write a WORM.WIN32.VB.FW virus kill" and " virus Rundll.exe Release and source sharing " two articles in the virus specifically killed, my virus specifically kill VBS template also began to consider perfect. This time, the "Hosts file restore function module " and "Autorun immune Function Modu
Definition of computer virus
Computer virus is a destructive and infectious ability of the program, and other normal procedures, when a computer virus from a certain way into the person, it will automatically enter the relevant procedures, destroy existing information, to replicate themselves, destroying the normal operation of the program. Mountains are like mi
This series of tutorials is copyright "I spring and Autumn" All, reproduced please indicate the source. for Video tutorials, please visit "I Spring" (www.ichunqiu.com).PrefaceThe last time we have introduced the basic method of virus signature extraction, this time we are programmed to implement the virus signature killing.defining a signature storage structureFor the sake of simplicity, this time we are us
This series of tutorials is copyright "I spring and Autumn" All, reproduced please indicate the source.for video tutorials, please visit "I Spring" (www.ichunqiu.com). virus found on USB stickSome time ago need to copy the point data to the virtual machine, as usual, plug in my USB flash drive, and in the virtual machine settings to choose the connection USB drive. Oddly enough, this time the connection is longer than usual and the AutoPlay window app
Jiang Min's October 3 virus broadcast: Beware of "nilag" virus stealing equipment information of online game heaven
Jiang min reminds you today: In today's virus, TrojanDropper. HTML. r "HTML messenger" variants r and Trojan/
PSW. Nilage. bql "nilag" variant bql is worth noting.
Virus name: TrojanDropper. HTML. r
Chine
MSN virus refers to those who send a poisonous file or a poisonous Web page link through MSN, the malicious program that realizes self propagation. Most of the MSN virus workflows are fairly similar and are grouped into the following 3 steps:
1, the virus obtains the user's MSN Friend list, sends the virus file or the
Virus Trojan scan: A. NET-based research on "Hitting the bar" virusI. Preface: since the development of malicious programs, their functions have evolved from simple destruction to privacy spying, information theft, and even the very popular "Hitting the barriers" virus, used for extortion. It can be seen that with the development of the times, virus writers often
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.