whats trojan virus

Q: How can I determine from the port whether it is a virus or a trojan? A: ports can be divided into three categories: 1. Well Known Ports: from 0 to 1023, they are closely bound to some services. Usually the communication between these ports clearly indicates a service protocol. For example, port 80 is always HTTP Communication. 2. register the port (Registered Ports) from 1024 to 49151. They are loosel

Today, with the ever-changing nature of the virus, more and more camouflage and new variants are crazy one day after another. In the face of such a situation, many netizens can only restore or reinstall the system once and again. Security Software seems to be powerless at this time, because many virus and Trojan horses began to remove the security protection func

Disk drive Trojans have recently become a hot topic in the field of security, it is reported that since the March, "Disk machine" Trojan Horse has been updated several times, infection rate and destructive power is gradually increased. The virus after the operation to shut down and prevent 360 security guards and Kabbah, rising, Jinshan, Jiangmin and other security software operation, in addition to delete

"Fantasy stealing" (Win32.PSWTroj. OnlineGames.14848) is a trojan virus that mainly steals the account and password of "Fantasy westward journey. "Ad downloader" (Win32.Adware. Navi.394615) is an advertisement virus.I. Threat Level:★This virus is mainly used to steal account information of "Fantasy westward journey.1. The "LYMANGR. dll" file generated by the

= 600;}"> At this time should use 360 security guards to the killing, or login to the 360 Security Center website ( www.360.cnDownload the Kill tool (download address: Http://dl.360safe.com/killer_ati2evxx.exe）。 can also use the 360 kill Daquan, (download address: Http://dl.360safe.com/360compkill.exe）。 At present, the use of web pages to hang horses and third-party software vulnerabilities intrusion computer Trojan is extremely rampant, these Tro

Virus Information Archival: ======================================== Xinhuanet, Beijing, September 11, February 20, a camel Trojan download tool, CAP (Trojan. DL. win32.mnless. CAP) "the virus is worth noting this week. Its authors are a bit superstitious. Even the names of the released

Use DYNSRC in web development to be addressed by McAfee report Trojan virus By Dynsrc, McAfee and other antivirus software have been blacklisted by such malicious use. In the Web page in any case contains dynsrc these 6 letters, will be reported virus or Trojan. Finally, we have to use the replacement metho

Down.exe/virus. win32.autorun. Z/Trojan. PWS. maran.262 EndurerOriginal2Added replies from Kaspersky.1Version When you open a page that is occasionally used in the Forum, rising prompts you to download and run suspicious files. Search by Google, and Google has already marked it:Http://www.google.cn/search? Complete = 1 HL = ZH-CN newwindow = 1 Q = % E8 % BF % 98% E7 % 8f % A0 % E5 % 8C % Ba + % E6 % 97%

Virus name: TrojanClicker. VB. gg Chinese name: "video baby" variant gg Virus length: 22528 bytes Virus Type: Trojan clicks Hazard level:★ Affected Platforms: Win9X/ME/NT/2000/XP/2003 This virus is one of the latest members of the "video baby"

Trojan. DL. Small. ibr virus manual cleanup method 1. restart the computer and press F8 to enter safe mode.2. Find windirected2.0 in "add and delete programs" on the control panel and uninstall it.3. Clear IE cached files in Safe ModeOpen IE browser, tool -- Internet option -- delete file (all offline content)4. Delete the following folders in safe mode.C: WindowsSystem32mscacheC: WindowsSystem32msicn5. res

A Basic defensive thinking: backup is better than remedy. 1. Backup, after loading the machine, first back up the C disk (System disk) WINDOWS inside, and C:\WINDOWS\system32 the file directory. Run, CMD commands as follows; dir/a C:\WINDOWS\system32 >c:\1. Txt dir/a C:\Windows >c:\2. Txt This backs up the list of files under Windows and System32, and if one day you feel the computer is having problems, the same command lists the files, and then cmd below, the FC command comparison, the format i

Autorun.exe and%autorun.inf to the machine's C $ below. 4.IFEO Hijack some anti-virus software HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360safe.exe HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360tray.exe HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ravmon.exe HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ravmond

One month later, Kaspersky was so annoying to listen to the voice of "pig" every day. Kaspersky was able to delete files only when encountering this virus, but the virus had a system service in the background, A virus file will be generated later. If your machine is infected with this trojan

This series of tutorials is copyright "I spring and Autumn" All, reproduced please indicate the source. for Video tutorials, please visit "I Spring" (www.ichunqiu.com).PrefaceIf we have anti-virus software installed in our computer, then when we intentionally or unintentionally downloaded a malicious program, kill the soft generally pop up a dialog box prompts us, the download program is likely to be malicious programs, suggest deletion or the like,

Microsoft Word users should be especially careful when downloading files because hackers are exploiting an uncorrected defect in this popular word processing software. According to IDG reports, last Thursday, the security vendor McAfee warned users that a type of name is BackDoor-ckb! The cfaae1e6 trojan virus secretly installs software on the computer. However, to infect computers with this

Virus Trojan scan: Reverse Analysis of pandatv (I)1. Preface conduct Reverse Analysis on viruses to thoroughly identify the behavior of viruses and take more effective measures. In order to save space, I am not going to thoroughly analyze the "pandatv incense" here. I will only explain some important parts. If you have mastered these ideas, then we can handle a lot of malicious programs. Generally, we use I

How to solve the problem of using DYNSRC to receive a trojan virus from McAfee in Web Development DYNSRC is often used in this way maliciously, and anti-virus software such as McAfee has blacklisted it. A webpage containing the six letters DYNSRC may be infected with viruses or Trojans. Finally, we had to use the replacement method to solve the problem:

Script virus: Trojan. DL. vbs. agent. | JS) It always appears in temporary files on the Internet. Rising monitoring has been killing and repeating this! I tried to clear the temporary files, but when I open the web page (no matter which web pages) Online, K [1]. js will be monitored by rising again. What's going on? Is it a false positive? This web page uses the MS06-014 vulnerability, download http://d

Security researchers warned that a Trojan horse took unusual self-defense measures-installing anti-virus software to clear other malware from infected PCs.Security researchers said the SpamThru Trojan Horse installed the AntiVirusforWinGate software on the infected PC. The pirated software can scan malicious code on the system-but can miss SpamThru files, then, t

We know that the Win7 system is very powerful, but now the chances of a virus infecting a computer are high, which requires security guards to keep our computer safe for 24 hours without interruption. If the user computer accidentally infected Trojan virus, this time the computer program is likely to burst. So in order to prevent