sasser virus

The Sasser worm, known as the "Concussion wave" worm, is also known as the "killer" worm. The Sasser worm uses the LSASS vulnerability on the Microsoft Windows NT kernel platform to randomly scan the IP ports of computers in other networks and then spread them. Although firewalls can be used to block the spread of this computer worm, security experts suggest that ms04-011 patches to the system are the most

family. For example, the family names of the famous CIH virus are unified "CIH ", in addition, the family name of the recently popular wannacache worm is "Sasser ". A virus suffix is a variant of a virus. It is used to distinguish a variant of a specific family of viruses. Generally, 26 letters are used for representa

Recently, Jiangmin technology issued an emergency virus warning, a disguised as "panda incense" pattern of the virus is crazy crime, has dozens of of corporate LAN has been hit. Companies from different parts of the country reported to the Jiangmin Antivirus center that their company was being attacked by an unidentified virus, and that all of the executable. exe

the family characteristics of a virus, is used to distinguish and identify the virus family, such as the previous famous CIH virus family name is a unified "CIH", and the recent noisy oscillation wave worm virus family names are "Sasser". A

, the virus name is "Sasser ". 3. Virus suffix A virus suffix is a variant of a virus. It is generally expressed by 26 letters. For example, "Worm. Sasser. c" refers to the Variant c of the Worm. If there are too many

Characteristics of the virus: The biggest feature of the virus is self-replicating, from the classification of viruses there are many kinds, here we will introduce the most popular add-onVirus, which is adapted to the normal file to achieve its own replication purposes.From a procedural point of view, we have two things to do: 1, so that the program can be copied to other programs without affecting the wo

In the middle of January this year, the network Supervision Department of Xiantao Public Security Bureau of Hubei Province conducted a survey on the producers of "panda incense" virus according to the unified deployment of the Security Supervision Bureau and provincial Police Department. After investigation, the producer of panda incense virus in Hubei province, Wuhan Li June, according to Li June, on Octob

[%repeat_0 match= "/data/option"%][%= @title%] [%= @count%] ticket [[%= @percent%]%] [%_repeat_0%] SXS. EXE this is a theft of QQ account password Trojan virus, the characteristics can be transmitted through removable disk. The virus's main harm is to steal QQ account and password, the virus will also end a large number of anti-virus software, reduce the securi

Today encountered auto virus, his actions include each packing directory has auto.exe,autorun.inf, registry startup, Task Manager appeared multiple EXE virus, cannot be banned. K11986325364.exe Xkpnoo.exe C:\WINDOWS\ktwlqd.exe Lguezc.exe NAVMon32.exE Xqtflm.exe Vgdidn.exe K11986299022.exe K119862991512.exe K119862991613.exe K119862991815.exe K119862992016.exe K11986301162.exe K11986303952.exe K11986304017.e

Just repeatedly tested several versions, DF of the above version is all worn ... Completely crazy ing .... Currently, only a few sites can be blocked on the route .... Look forward to the emergence of the master! Sample sent up .... Say you can't penetrate yourself first Test Overall protection, the system is completely open, without any restrictions! Now do not know why some systems do not wear ~ Immediately after running, look at the startup item. The

File name: Happy2008-card.com\svchost.exe File size: 26014 byte Name of AV: (rising) backdoor.win32.pbot.b Adding shell mode: Unknown Writing language: VC File md5:66951f5a5c5211d60b811c018a849f96 Virus type: IRCBot Behavioral Analysis: 1. Release virus copy: C:\WINDOWS\Happy2008.zip 26148 bytes (virus compression package) C:\WINDOWS\svchost.exe 26014 b

Through the U disk transmission of the virus Sxs.exe power has always been very large, once n a computer was his downfall ~ ~ Its variant is also increasingly refurbished, the pattern white ~ ~ Computer engine room and poisoned ... Each letter has hidden files, the icon is Conan head Sxs.exe and autorun, virus system into the xeklsk.exe. Hidden files cannot be displayed through Folder options. After repeate

Almost everyone who uses computers has ever experienced computer viruses and antivirus software. However, many people still have misunderstandings about viruses and anti-virus software. Anti-virus software is not omnipotent, but it is never a waste. The purpose of this article is to allow more people to have a correct understanding of anti-virus software and use

First of all, no matter what virus you have, if you do not understand the meaning or suspected of a virus, please refer to my plan to try first: 4. Start = "Run =" Input: msconfig= "OK =" start = "all disabled (D) =" OK 5. Start = "Run =" Input: regedit= "OK =" hkey_local_machine\software\microsoft\windows\currentversion\run\= "Right can be deleted all 6. Start = "Run =" Input: regedit= "OK =" hkey_loca

Recently, Jiangmin Technology issued an emergency VIRUS alert. A virus disguised as a "pandatv" pattern is committing a crime. Dozens of enterprises have suffered heavy losses on their local networks. When companies in different countries report to the anti-virus center of the People's Republic of China, their company is being attacked by unknown viruses, and All

With the rising of the virus can not be worse, with Kabbah upgrade to May 25 after the ability to find, but note that Kabbah will infect Word documents, pictures together delete! Because a lot of documents are urgent and important, if lost on the problem is serious, so do not understand the computer do not use Kaspersky, because he is too professional. Fortunately, the source file is not many, I deleted a few, the specific removal method on the Intern

Situation All the right keys are running, each disk will appear random 8-bit XXXXXXXX.exe and Autorun.inf files Internet search virus, Trojan, etc will be virus turned off, can not open nod32 and other anti-virus Software Unable to view hidden files, workaround: Method One: Modify the registry file (the following file save bit ok.reg) to run Copy Code code

Special finishing a auto Autorun.inf desktop.ini sxs.exe auto.exe virus Manual processing complete skills, you can see the image set method, let auto Autorun.inf desktop.ini Auto.exe Virus Nowhere to hide Recently, a number of viruses, the performance of: 1, under each partition will have three files, the property is hidden, file name is: autorun.inf,desktop.in,sxs.exe, which EXE file is a

Some people think that anti-virus is a simple task. Isn't it just by clicking the "anti-virus" button of anti-virus software? Yes, anti-virus software is required for anti-virus, but it doesn't mean that it is a good thing to do when you click anti-

This article is not an article about horizontal evaluation of n types of anti-virus software, but an article about building a platform based on my own user experience. For now, good anti-virus software has its own characteristics, but they are all the same. Therefore, there is no universal anti-virus software. The key is to choose a suitable anti-