Knowledge Focus: With a powerful instant messaging tool, Trojans also accelerated the script, MSN has long been the leading third-party computers infected with their jump platform. In the circle of friends, as long as the friends steal a MSN account or a user's computer infected with the virus that will extend the hand of evil, will be in use ..
with powerful real-time communication tools, trojan virus speed up the script, MSN has long been the leading third-party computers infected with their jump platform. In the circle of friends, as long as the friends steal a MSN account or a user's computer infected with the virus that will extend the hand of evil, will be sent when the user's MSN chat virus information. Analysis of the virus belongs to the MSN virus worm variants, is a powerful tool with instant messaging, Trojans also accelerated the script, MSN has long been the leading third-party computers infected with their jump platform. In the circle of friends, as long as the friends steal a MSN account or a user's computer infected with the virus that will extend the hand of evil, will be sent when the user's MSN chat virus information. Analysis of the virus belongs to the MSN virus worm, infected computers will be automatically sent to the MSN contacts and carriers of the temptation to archive text messages, when the other person to receive and open the virus infected file in the archive, the system will become the new victims persons, and therefore attempt to infect another computer. Virus size is 434,176 bytes,
nba shoes, spread through MSN Messenger. Infected computer, virus was first in the system 目录% Windows% with the next generation with the virus source body F0538_jpg.zip compressed, then the virus itself started in Computer% Windows% directory, create a copy of the chcp.exe executable file, and in the registry HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Run branch to establish Windows NT CurrentVersion Winlogon under The value of After completion of the above, the virus is still not quiet, wait, but the infected computer to find the existence of FTP directory, if the normal procedure will be renamed the original backup.ftp, backup.tftp and copied to the% System% microsoft directory , then the system directory under the% System% is written ftp.exe, tftp.exe, dllcache tftp.exe, dllcache ftp.exe executable program, a series of hands and feet done, the virus began to send the temptation to MSN contacts type text message, and folder to trick users to open infected packets F0538_jpg.zip. Clear method users of this drug do not be nervous, after understanding the principle of survival in order to clear the virus nor difficult, just follow the following steps to implement to clear the virus out of bounds, so that normal operation of the system in MSN. First,
nba basketball shoes, we must first enter the registry branch HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows CurrentVersion Run, will computer. Second, enter the% Windows% directory under the body of the virus source and F0538_jpg.zip compressed file chcp.exe deleted. Third, the directory% System% damage instead of under FTP program ftp.exe, tftp.exe, dllcache tftp.exe, dllcache ftp.exe deleted and the% System% microsoft directory backup.ftp,
cheap lebron shoes, backup. tftp directory% System% change back to the next. Fourth, remove the registry branch [HKEY_LOCAL_MACHINE SOFTWARE Microsoft Windows NT CurrentVersion Winlogon] under V. Finally, the registry [HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Control] branch of the The author by: MSN virus in there are many variants, such as: MSN Robot,
lebron iii, MSN clown, MSN ######y album,
nike kobe v, with its principle is the use MSN as a platform to communicate with chatters also send virus information, via MSN Friendship deceive the user clicks, and then spread to form a strong transmission. In order to better deal with such viruses, where the user is to enhance protection of the computer in advance such as: turn on the soft kill time l library, install security software category, such as irregular patches into the system, and learn more about the daily virus dynamic, real-time well preventive work can be, once the user is infected should be immediately responded to manually delete or download the appropriate use of Zhuanshagongju to clean up,
zoom lebron shoes, so as not to allow more users to become victims.
Linear Mode
