W32.Qakbot attacks computers by exploiting the vulnerabilities of Internet Explorer and QuickTime software.
Virus name: W32.Qakbot
Virus Type: Worm
Affected Operating Systems: Windows 95/98/2000/Me/XP/Vista/NT, Windows Server 2003
Virus analysis:
Symantec's security response
Recently, Jiangmin technology issued an emergency virus warning, a disguised as "panda incense" pattern of the virus is crazy crime, has dozens of of corporate LAN has been hit. Companies from different parts of the country reported to the Jiangmin Antivirus center that their company was being attacked by an unidentified virus, and that all of the executable. exe
Characteristics of the virus:
The biggest feature of the virus is self-replicating, from the classification of viruses there are many kinds, here we will introduce the most popular add-onVirus, which is adapted to the normal file to achieve its own replication purposes.From a procedural point of view, we have two things to do:
1, so that the program can be copied to other programs without affecting the wo
In the middle of January this year, the network Supervision Department of Xiantao Public Security Bureau of Hubei Province conducted a survey on the producers of "panda incense" virus according to the unified deployment of the Security Supervision Bureau and provincial Police Department. After investigation, the producer of panda incense virus in Hubei province, Wuhan Li June, according to Li June, on Octob
Just repeatedly tested several versions, DF of the above version is all worn ...
Completely crazy ing .... Currently, only a few sites can be blocked on the route .... Look forward to the emergence of the master!
Sample sent up .... Say you can't penetrate yourself first Test
Overall protection, the system is completely open, without any restrictions! Now do not know why some systems do not wear ~
Immediately after running, look at the startup item.
The
Through the U disk transmission of the virus Sxs.exe power has always been very large, once n a computer was his downfall ~ ~ Its variant is also increasingly refurbished, the pattern white ~ ~ Computer engine room and poisoned ... Each letter has hidden files, the icon is Conan head Sxs.exe and autorun, virus system into the xeklsk.exe.
Hidden files cannot be displayed through Folder options.
After repeate
First of all, no matter what virus you have, if you do not understand the meaning or suspected of a virus, please refer to my plan to try first:
4. Start = "Run =" Input: msconfig= "OK =" start = "all disabled (D) =" OK
5. Start = "Run =" Input: regedit= "OK =" hkey_local_machine\software\microsoft\windows\currentversion\run\= "Right can be deleted all
6. Start = "Run =" Input: regedit= "OK =" hkey_loca
With the rising of the virus can not be worse, with Kabbah upgrade to May 25 after the ability to find, but note that Kabbah will infect Word documents, pictures together delete!
Because a lot of documents are urgent and important, if lost on the problem is serious, so do not understand the computer do not use Kaspersky, because he is too professional.
Fortunately, the source file is not many, I deleted a few, the specific removal method on the Intern
[%repeat_0 match= "/data/option"%][%= @title%] [%= @count%] ticket [[%= @percent%]%]
[%_repeat_0%]
SXS. EXE this is a theft of QQ account password Trojan virus, the characteristics can be transmitted through removable disk. The virus's main harm is to steal QQ account and password, the virus will also end a large number of anti-virus software, reduce the securi
This series of tutorials is copyright "I spring and Autumn" All, reproduced please indicate the source.For video tutorials, please visit "I Spring" (www.ichunqiu.com).PrefaceAfter several discussions, we have a certain understanding of the U disk virus, then this time we will be based on the characteristics of the virus behavior, to write needles for the U-disk virus
Almost everyone who uses computers has ever experienced computer viruses and antivirus software. However, many people still have misunderstandings about viruses and anti-virus software. Anti-virus software is not omnipotent, but it is never a waste. The purpose of this article is to allow more people to have a correct understanding of anti-virus software and use
For the symptoms, I first went online to find the relevant information, first, to show hidden files
In this: Hkey_local_machine\software\microsoft\windows\currentversion\explorer\
Advanced\folder\hidden\showall, modify the CheckedValue key value to 1
Still no use, hidden files or no display, careful observation found that the virus it has a more ruthless way: it in the modified registration to hide the purpose of the file, in order to be safe, the ori
Panda Burning Incense Virus Special Kill V1.6 Official edition:
The tool implements detection and removal, repair of infected panda incense virus files, unknown varieties of panda incense to detect and deal with the ability to deal with all the current family of panda incense virus and related variants. Download the address below
Download this file
testing easy
Recently, Jiangmin Technology issued an emergency VIRUS alert. A virus disguised as a "pandatv" pattern is committing a crime. Dozens of enterprises have suffered heavy losses on their local networks. When companies in different countries report to the anti-virus center of the People's Republic of China, their company is being attacked by unknown viruses, and All
Definition of computer virus
Computer virus is a destructive and infectious ability of the program, and other normal procedures, when a computer virus from a certain way into the person, it will automatically enter the relevant procedures, destroy existing information, to replicate themselves, destroying the normal operation of the program. Mountains are like mi
Autorun virus Defender is a special for the popular U disk virus development of the killing program. Its unique precision killing and expansion of the killing double killing mechanism can thoroughly remove viruses and trojans related files and registry entries, do not leave remnants. With a unique heuristic killing engine, the unknown U disk virus has more than 9
Situation
All the right keys are running, each disk will appear random 8-bit XXXXXXXX.exe and Autorun.inf files
Internet search virus, Trojan, etc will be virus turned off, can not open nod32 and other anti-virus
Software
Unable to view hidden files, workaround:
Method One: Modify the registry file (the following file save bit ok.reg) to run
Copy Code code
Special finishing a auto Autorun.inf desktop.ini sxs.exe auto.exe virus Manual processing complete skills, you can see the image set method, let auto Autorun.inf desktop.ini Auto.exe Virus Nowhere to hide
Recently, a number of viruses, the performance of:
1, under each partition will have three files, the property is hidden, file name is: autorun.inf,desktop.in,sxs.exe, which EXE file is a
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.