mydoom virus

Recently, Jiangmin technology issued an emergency virus warning, a disguised as "panda incense" pattern of the virus is crazy crime, has dozens of of corporate LAN has been hit. Companies from different parts of the country reported to the Jiangmin Antivirus center that their company was being attacked by an unidentified virus, and that all of the executable. exe

Characteristics of the virus: The biggest feature of the virus is self-replicating, from the classification of viruses there are many kinds, here we will introduce the most popular add-onVirus, which is adapted to the normal file to achieve its own replication purposes.From a procedural point of view, we have two things to do: 1, so that the program can be copied to other programs without affecting the wo

Through the U disk transmission of the virus Sxs.exe power has always been very large, once n a computer was his downfall ~ ~ Its variant is also increasingly refurbished, the pattern white ~ ~ Computer engine room and poisoned ... Each letter has hidden files, the icon is Conan head Sxs.exe and autorun, virus system into the xeklsk.exe. Hidden files cannot be displayed through Folder options. After repeate

In the middle of January this year, the network Supervision Department of Xiantao Public Security Bureau of Hubei Province conducted a survey on the producers of "panda incense" virus according to the unified deployment of the Security Supervision Bureau and provincial Police Department. After investigation, the producer of panda incense virus in Hubei province, Wuhan Li June, according to Li June, on Octob

First of all, no matter what virus you have, if you do not understand the meaning or suspected of a virus, please refer to my plan to try first: 4. Start = "Run =" Input: msconfig= "OK =" start = "all disabled (D) =" OK 5. Start = "Run =" Input: regedit= "OK =" hkey_local_machine\software\microsoft\windows\currentversion\run\= "Right can be deleted all 6. Start = "Run =" Input: regedit= "OK =" hkey_loca

With the rising of the virus can not be worse, with Kabbah upgrade to May 25 after the ability to find, but note that Kabbah will infect Word documents, pictures together delete! Because a lot of documents are urgent and important, if lost on the problem is serious, so do not understand the computer do not use Kaspersky, because he is too professional. Fortunately, the source file is not many, I deleted a few, the specific removal method on the Intern

Just repeatedly tested several versions, DF of the above version is all worn ... Completely crazy ing .... Currently, only a few sites can be blocked on the route .... Look forward to the emergence of the master! Sample sent up .... Say you can't penetrate yourself first Test Overall protection, the system is completely open, without any restrictions! Now do not know why some systems do not wear ~ Immediately after running, look at the startup item. The

File name: Happy2008-card.com\svchost.exe File size: 26014 byte Name of AV: (rising) backdoor.win32.pbot.b Adding shell mode: Unknown Writing language: VC File md5:66951f5a5c5211d60b811c018a849f96 Virus type: IRCBot Behavioral Analysis: 1. Release virus copy: C:\WINDOWS\Happy2008.zip 26148 bytes (virus compression package) C:\WINDOWS\svchost.exe 26014 b

This series of tutorials is copyright "I spring and Autumn" All, reproduced please indicate the source.For video tutorials, please visit "I Spring" (www.ichunqiu.com).PrefaceAfter several discussions, we have a certain understanding of the U disk virus, then this time we will be based on the characteristics of the virus behavior, to write needles for the U-disk virus