top ten virus

1. Principles of Viruses First of all, it seems that we should introduce what is virus, because many people are always confused with viruses and Trojans. No-this cannot blame them, because many Trojans now use virus-related technologies, there is no trojan virus. A virus is a group of computer commands or program code

Newbie can also deal with virus series Article address: http://www.bkjia.com/Search.asp? Field = Title ClassID = keyword = % D0 % C2 % CA % D6 % D2 % B2 % C4 % DC % B6 % D4 % B8 % B6 % B2 % A1 % B6 % BE Submit = + % CB % D1 % CB % F7 + Once a friend had a virus on his computer, I went to check it out. It was a QQ virus. Because I had not been surfing the inter

"Recently found a strange phenomenon, my system time is always changed to 1980, changed back after the computer automatically changed back." I asked a friend, said that the motherboard battery is dead, I bought a new battery installed also did not fix, yesterday unexpectedly found QQ was stolen. The user, Mr. Zhang reluctantly said. Jinshan Poison PA Anti-Virus expert Dai Guangjin said, recently similar to Mr. Zhang's encounter more, the

Jiang Min's August 10 virus broadcast: Beware of the account and password of online game thieves "Perfect World International Edition" Players Jiang min reminds you today that among today's viruses, Trojan/PSW. GamePass. tip "online game thieves" variants tip and TrojanDownloader. Small. lge "Small dot" variants lge deserve attention. Virus name: Trojan/PSW. GamePass. tip Chinese name: tip of the "Online Ga

Recently, some time ago, the 8749 virus on the user's IE homepage was tampered with to generate a new variant, variant B, with more destructive power. This not only can end anti-virus software on the user's computer, you can even delete files related to some anti-virus software. As a result, the anti-virus software is

Recently, some netizens reported that the computer was down and nothing except the mouse could be changed. In addition, almost none of the keyboard shortcuts are available (only the "Task Manager" is available). The most strange thing is the crazy pop-up of the optical drive. In the past, there was a virus called "Crazy Optical Drive", but "Crazy Optical Drive" is a timed attack, and the optical drive pops up once every one minute, which is inconsiste

Virus symptoms: Antivirus software is disabled, hidden files can not be displayed, start command msconfig can not run, a lot of assistive software also can not run, run EXE and SCR files after the virus infection Manual killing of the software used: Sreng Software and Xdelbox software 　　 Quote: Virus Name: trojan-downloader.win32.agent.****

Memory-resident viruses are immediately infected. Every time a virus program is executed, it actively searches the current path and finds executable files that meet the requirements. This type of virus does not modify the interrupt vector, and does not change any state of the system. Therefore, it is difficult to distinguish whether a virus is running or a normal

According to rising's Global Anti-Virus monitoring network, there is a virus worth noting today, which is the "proxy Worm variant IOJ (Worm. Win32.Agent. ioj)" virus. The virus is spread through a USB flash drive, which may cause various anti-virus software and personal fire

04: virus, 04 Virus04: Virus View Submit Statistics Question Total time limit: 1000 ms Memory limit: 65535kB Description One day, John suddenly found his computer infected with a virus! Fortunately, John finds the virus weak, but replaces all the letters in the document w

From:http://blog.cfan.com.cn/html/48/1148_itemid_73178.html "Panda Incense" worm can not only damage the user system, the result is that a large number of applications are unusable, and all files with an extension of Gho can be deleted, resulting in the loss of a user's system backup file, resulting in a failure to restore the system, and the virus can terminate a large number of anti-virus software proces

Rogue Software Phenomenon Description: 1, the browser home page was modified to "w**.3448.com", can not be modified. 2, the virus through the API Hook self protection. 3, can modify the registration form, infected QQ file import table. 4, search for the process name or the process where the window text contains a special string, and then turn off the computer after discovery. Solution: 1, install the rising Card card 3.0 2, click the "Upgrade Now"

Jiang Min's August 11 virus broadcast: Beware of the star lock virus stealing the login password of Web Pages browsed by users Jiang min reminds you today that in today's virus, I-Worm/Locksky. ax star lock variants ax and Trojan/PSW. Moshou. aef "Warcraft" variants aef are worth noting. Virus name: I-Worm/Locksky. ax

Virus program source code instance analysis-CIH virus [3] code, you need to refer to the jmp ExitRing0Init; exit Ring0 level 　　 ; Size of the merged code CodeSizeOfMergeVirusCodeSection = offset $ 　　 ; New IFSMgr_InstallFileSystemApiHook function call InstallFileSystemApiHook: Push ebx 　　 Call @ 4 　　 @ 4: Pop ebx; get the offset address of the current command Add ebx, FileSystemApiHook-@ 4; the offset diffe

Disk drive Trojans have recently become a hot topic in the field of security, it is reported that since the March, "Disk machine" Trojan Horse has been updated several times, infection rate and destructive power is gradually increased. The virus after the operation to shut down and prevent 360 security guards and Kabbah, rising, Jinshan, Jiangmin and other security software operation, in addition to delete the system contains "360" the words of the do

Software Introduction: Chenoe Anit-virus Tools (short: C-AV) to restore the virus destroyed by the file and suppress the virus-oriented professional anti-virus software, the killing of some Trojan virus is also quite effective. With a strong pertinence and flexibility, the f

Anti-virus attack and defense: Adding virus infection marks1. preface if the same target file is infected for multiple times, the target file may be corrupted and cannot be executed. Therefore, virus programs often write an infection mark to the target file when the first infection occurs. In this way, when the file is first encountered, determine whether the fil

Combo ransomware virus is solvable. Combo ransomware virus successfully decryptedGamma ransomware virus successfully decryptedFree Test XXXNot successful no chargeAnheng declassified a professional agency engaged in the decryption ransomware virus, we have been employed for more than three years to solve various ransom

Recently, Baidu security lab found a new "UkyadPay" virus that has been infected with a large number of popular applications, such as quickplay, super white point, and Lori guard. After the virus is started, the background secretly accesses the remote server to obtain the command and executes the following malicious behaviors according to the server command: 1. Access the paid video through cmwap in the bac

Kill macro Virus Step 1: First open your Excel, casually open a file on it. We mainly set the security. Find the tool on the menu bar, in the Tools menu, we click "Macros", in the macro's secondary menu, we find security, open the Security dialog box. Killing macro virus Step 2: In the Security dialog box, we tick very high: Only macros that are scheduled to be installed in a trusted location