Winexec (pchar ('strcommand'), sw_show );"Strcommand" indicates one of the following commands (do not enclose them with quotation marks when running in Windows ):"Rundll32 shell32, control_rundll"-Operation Control Panel"Rundll32 shell32,
Winexec (Pchar ('strcommand'), sw_Show );
"StrCommand" indicates one of the following commands (do not enclose them with quotation marks when running in Windows ):
"Rundll32 shell32.dll, Control_RunDLL"-Operation Control Panel
"Rundll32 shell32.dll,
Rundl132.exe RichDll.dll Solutions for Sunway variants
The variant has not been jiangmin and Cabacha killed, and several special kill to find a can repair EXE file!
After the virus runs, access the network to download multiple Trojan programs
What is Rundll32.exe? As implies, "execute a 32-bit DLL file." Its function is to execute the internal functions in the DLL file, so that in the process, there will be only Rundll32.exe, and no DLL back-door process, so that the process of the
Weijin variant rundl132.exe richdll. dll Solution
This variant has not been detected and killed by Jiang min and Kabbah. After several excludes, you can find one to kill and repair the EXE file!
After the virus runs, access the network to download
"Execute a 32-bit DLL file ". The internal implementation is the internal implementation of the dllfile. In this process, only rundll32.exe is available, and no DLL backdoor process is available. In this way, process hiding is realized. If you see
C # Use ilmerge to compress all referenced DLL and exe files into an EXE file
Address: http://www.cnblogs.com/hongfei/archive/2013/03/14/2958627.html#2634561
Ilmerge:Http://www.microsoft.com/downloads/details.aspx? Familyid =
Kabbah has been prompted early in the morning, the beginning of the "delete" Kabbah project, then only "restore" and "skip", the virus, from the Win3.exe has been changing, as long as you press skip, 20 seconds before the pop-up next combination.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.