koobface virus

"Recently found a strange phenomenon, my system time is always changed to 1980, changed back after the computer automatically changed back." I asked a friend, said that the motherboard battery is dead, I bought a new battery installed also did not fix, yesterday unexpectedly found QQ was stolen. The user, Mr. Zhang reluctantly said. Jinshan Poison PA Anti-Virus expert Dai Guangjin said, recently similar to Mr. Zhang's encounter more, the

Rogue Software Phenomenon Description: 1, the browser home page was modified to "w**.3448.com", can not be modified. 2, the virus through the API Hook self protection. 3, can modify the registration form, infected QQ file import table. 4, search for the process name or the process where the window text contains a special string, and then turn off the computer after discovery. Solution: 1, install the rising Card card 3.0 2, click the "Upgrade Now"

Any viruses and Trojans exist in the system, can not completely and process out of the relationship, even if the use of hidden technology, but also can find clues from the process, therefore, viewing the process of the system activity is the most direct way to detect the virus Trojan. But the system runs at the same time so many processes, which is the normal system process, which is the process of Trojans, and often by

First, let the virus disappear from the directory We start with the directory where the virus resides, and if the virus has a separate directory like normal software, then we can smile a little bit--the virus is weaker. When you check the directory's creation time, you can tell when you dyed the poison and you may fin

Some people think that anti-virus is a simple task. Isn't it just by clicking the "anti-virus" button of anti-virus software? Yes, anti-virus software is required for anti-virus, but it doesn't mean that it is a good thing to do when you click anti-

This article is not an article about horizontal evaluation of n types of anti-virus software, but an article about building a platform based on my own user experience. For now, good anti-virus software has its own characteristics, but they are all the same. Therefore, there is no universal anti-virus software. The key is to choose a suitable anti-

What if you find a virus and can't clear it? Q: Virus discovery, but what if it is not clear in safe mode or Windows? A: Due to some directory and file specificity, can not directly eliminate (including the safe mode of anti-virus and other methods of anti-virus), and need some special means to clear the poison fil

Transfer from the original forum Jakee posts: Recently many netizens reflect their machine is called a gray pigeon Trojan virus, this virus is very naughty, in different kill soft have different names such as: Gpigeon, Huigezi, Feutel, in the computer to clear it is very troublesome, especially its just opened issued 2005, Through the interception of Windows System API to achieve program file hiding, proces

First, the preface Virus class teacher threw us a copy of the VBS script virus code to try to analyze, here the analysis process sent out for everyone's reference, if found in what is wrong or what is suggested, you can leave a message to me, thank you! Ii. Table of Contents The entire analysis process can be divided into the following sections: 0x00 Preparation Work0x01 Decryption part0x02 function Ana

1. What is the virus? What is computer virus? The standard definition should refer to the compilation or insertion of computer commands or program code that damage computer functions or data and affect computer use. Computer viruses, like biological viruses, can spread, multiply, and attach to normal computer programs to cause damage. Therefore, we call it computer viruses. It is contagious, destructive, c

series "kingdoms" has been seen. Oh, just don't understand so deeply! In the hacking technology, Jinchantuoqiao refers to: Delete system running log attacker to break the system, often delete the system run log, hide their traces ... OhSecond, Shell, shelling, packersIn nature, I think we should not be unfamiliar with the shell of this thing, from the above story, we can also be seen. Plants in nature use it to protect the seeds, and animals use it to protect the body and so on. Also, in some c

Logo_1.exe Mutant Virus SolutionAfter the attachment decompression, the files inside the virus folder are copied to the c:\windows\ below. Rest assured. These are empty files. The file name is the same as the virus name. But it's all 0 bytes.Then run Logo1virus.bat to add the system to the files that were just put under c:\windows\. Hide. Read Only 3 properties.T

push EAX; block table size push edx; edx is the offset of the Virus code block table push esi; buffer address 　　 Combined virus code block and Virus code block table must be less than or equal to the amount of space not used Inc ECX push ecx; Save numberofsections+1 　　 SHL ecx, 03h; multiply 8 push ecx; reserved virus