how to detect trojan horse

May 25, 2009, CCTV2 reported the "Big Miss" Trojan case investigation, another people surprised that its well-organized, clear division of labor, Technology and business "perfect" combination, the formation of the Trojan economic network, it marked the "Trojan Economy industry chain" has matured, has become a social problem can not be ignored.

In Win9x, only to register the process as a system service can be invisible from the process viewer, but all of this in the Winnt is completely different, regardless of the Trojan from the port, the boot file on how cleverly hide themselves, always can not deceive the Winnt Task Manager, So many friends asked me: Under the Winnt is not the Trojan really can no longer hide their own process? This paper attem

Trojan Horse is a remote control based virus program, which is very hidden and harmful, it can control you or monitor your computer without your knowledge. Here is a talk about the Trojan often hiding places and cleaning methods. First check if there is a trojan in your computer 1, integrated into the program In fac

Mention Trojan, we must think of ancient Greek ancient story, the ancient Greeks with their wisdom, the soldiers hid in the Trojan inside the enemy city to occupy the enemy city story. Although a bit old-fashioned, but the Trojan is still inseparable from the background of the story. Trojan's full name is "Trojan

Author: flashsky (original) Author Email: flashsky@xfocus.org Site: www.xfocus.net Statement:The author has no intention of implementing a trojan. The author is not a Trojan developer, but provides a method of combining buffer overflow attacks with Trojans/backdoors,A simple prototype is used to verify the feasibility of this approach, and we can see many features and advantages of this implementation meth

form to the text.asp of the remote host. And then because the text.asp has Speaking of which, everyone is clear. We constructed two forms, the first form of code is the code for file operations (that is, the contents of the second form are written to the current directory and named NewValue.) ASP's handling of such a section of the code) then the second form of course is the horse we want to write. The following is the specific paragraph: Set Lp=ser

Recently, "Swordsman World" new information film "Wulin Family" grand online. The game is more than the number of thieves. The future is a repetition of the past, and observing history helps to understand what is going to happen. In the fun of the game at the same time, do not forget to maintain a vigilant heart. At present, the speed of the mutation Trojan horse, mainly in order to deal with anti-virus so

A lot of knowledge about the safety of the rookie, in the computer "Trojan" after the helpless. Although now there are many new versions of anti-virus software can automatically remove most of the "Trojan Horse", but they do not prevent the emergence of the "Trojan" program. Therefore, the killing

automatically load the application method, "Trojan" will be used, such as: Start group, Win.ini, System.ini, the registration form and so on are all "Trojan" hiding place. The following specific talk about "Trojan" is how to automatically load. In the Win.ini file, under [WINDOWS], "run=" and "load=" are ways to load the tr