Location:
Search - svchost.exe
Search list
Description: 过直接控制DNS进程(其实也就是svchost.exe,不过对应用户名是NETWORK SERVICE)进行数据传输的例子.编程中出现了很多问题,比方说获取svchost对应用户名时没有权限(但是能够操作LOCAL SERVICE),在句柄值为0x2c时进行getsockname时会停止运行-DNS direct control over the process (that is, in fact, svchost.exe, but on the application name is NETWORK SERVICE) examples of data transmission. Programming in a lot of problems, for example, to obtain the application name svchost without permission (but able to operate LOCAL SERVICE), in the handle when the value of 0x2c will stop running getsockname
Platform: |
Size: 4096 |
Author: 陈 |
Hits:
Description: Tit01.无处可逃！网络蠕虫的检测与防治
Tit02.新病毒攻击资料及处理方法(dllhost.exe)
tit03.攻防技术：SYN flood网络攻击的原理及其防御方法
Tit04.安全知识:端口• 木马• 安全• 扫描
Tit05.常用默认端口列表及功能中文注解
Tit06.揭开SVCHOST.exe进程之谜
Tit07.建立主动性网络安全体系
-Tit01. No place to escape! Network worm detection and prevention Tit02. New virus attacks and treatment information (dllhost.exe) tit03. Offensive and defensive techniques: SYN flood attacks and defense of the principle of Tit04. Safety knowledge: port • Trojan • safety • Scanning Tit05. Common default port list and function of Chinese Notes Tit06. opened the mystery SVCHOST.exe process Tit07. the establishment of proactive network security system
Platform: |
Size: 167936 |
Author: zgp |
Hits:
Description: 连载1——最基本的病毒.
本病毒的功能:
1.在C、D、E盘和c:\windows\system、c:\windows中生成本病毒体文件
2.在C、D、E盘中生成自动运行文件
3.注册c:\windows\system\svchost.exe，使其开机自动运行
4.在C:\windows\system下生成隐蔽DLL文件
5.病毒在执行后具有相联复制能力
本病毒类似普通U盘病毒雏形，具备自我复制、运行能力。-Serial 1- the most basic of the virus. The function of the virus: 1. In C, D, E drive and the c: \ windows \ system, c: \ windows in the raw cost of the virus body files 2. In C, D, E drive automatically generated file 3. up c: \ windows \ system \ svchost.exe, to start automatically 4. in the C: \ windows \ system generate hidden DLL files 5. the virus associated with the implementation of replication after the HIV virus like the common U disk shape, with a self-replicating, running ability.
Platform: |
Size: 2048 |
Author: 2626648 |
Hits:
Description: 连载1——最基本的病毒.
本病毒的功能:
1.在C、D、E盘和c:\windows\system、c:\windows中生成本病毒体文件
2.在C、D、E盘中生成自动运行文件
3.注册c:\windows\system\svchost.exe，使其开机自动运行
4.在C:\windows\system下生成隐蔽DLL文件
5.病毒在执行后具有相联复制能力
本病毒类似普通U盘病毒雏形，具备自我复制、运行能力。-Serial 1- the most basic of the virus. The function of the virus: 1. In C, D, E drive and the c: \ windows \ system, c: \ windows in the raw cost of the virus body files 2. In C, D, E drive automatically generated file 3. up c: \ windows \ system \ svchost.exe, to start automatically 4. in the C: \ windows \ system generate hidden DLL files 5. the virus associated with the implementation of replication after the HIV virus like the common U disk shape, with a self-replicating, running ability.
Platform: |
Size: 5120 |
Author: 2626648 |
Hits:
Description: 连载1——最基本的病毒.
本病毒的功能:
1.在C、D、E盘和c:\windows\system、c:\windows中生成本病毒体文件
2.在C、D、E盘中生成自动运行文件
3.注册c:\windows\system\svchost.exe，使其开机自动运行
4.在C:\windows\system下生成隐蔽DLL文件
5.病毒在执行后具有相联复制能力
本病毒类似普通U盘病毒雏形，具备自我复制、运行能力。-Serial 1- the most basic of the virus. The function of the virus: 1. In C, D, E drive and the c: \ windows \ system, c: \ windows in the raw cost of the virus body files 2. In C, D, E drive automatically generated file 3. up c: \ windows \ system \ svchost.exe, to start automatically 4. in the C: \ windows \ system generate hidden DLL files 5. the virus associated with the implementation of replication after the HIV virus like the common U disk shape, with a self-replicating, running ability.
Platform: |
Size: 3072 |
Author: 2626648 |
Hits:
Description: 连载1——最基本的病毒.
本病毒的功能:
1.在C、D、E盘和c:\windows\system、c:\windows中生成本病毒体文件
2.在C、D、E盘中生成自动运行文件
3.注册c:\windows\system\svchost.exe，使其开机自动运行
4.在C:\windows\system下生成隐蔽DLL文件
5.病毒在执行后具有相联复制能力
本病毒类似普通U盘病毒雏形，具备自我复制、运行能力。-Serial 1- the most basic of the virus. The function of the virus: 1. In C, D, E drive and the c: \ windows \ system, c: \ windows in the raw cost of the virus body files 2. In C, D, E drive automatically generated file 3. up c: \ windows \ system \ svchost.exe, to start automatically 4. in the C: \ windows \ system generate hidden DLL files 5. the virus associated with the implementation of replication after the HIV virus like the common U disk shape, with a self-replicating, running ability.
Platform: |
Size: 3072 |
Author: 2626648 |
Hits:
Description: 总体下来，能查杀exe文件夹病毒文件，但无法清除它在c:\F10S 目录下的 ctfmon.exe 与 svchost.exe 和它生成的启动组的快捷方式。
由于条件的限制，我也乏天回术。它将自己的句柄写入到 系统关键的进程 winlogon 中。
源码中有个UnLocker的类、本来想清掉它的句柄删除文件，但是发生个很无奈的 0xC0000005(STATUS_ACCESS_VIOLATION)错误。最后我很无耻的放弃了。
另外 附加 LPK查杀。基本上它创建的服务，打开的进程，注入的线程，文件都能查杀。
源码中有个SysService类。用来枚举系统服务的、测试过程中发生个未知的错误。
无奈之下也无耻的放弃了。最后使用了CMD的SC命令来卸载服务。-Overall down, killing exe folder virus file, but you can not clear it in the c: \ F10S directory, the ctfmon.exe and the svchost.exe and it generates the Startup group shortcut. Due to constraints, I also spent days back surgery. It write your own handle to the key process winlogon. A UnLocker class in the source code, originally wanted cleared its handle to delete files, but are helpless of 0xC0000005 (STATUS_ACCESS_VIOLATION) of errors occurred. Finally, I am shameless abandon. Addition additional LPK killing. Basically it created the service, open process, injected threads, files can be killing. Source in SysService class. Services used to enumerate the system, unknown error occurred during the test. In desperation shameless abandon. Finally, use the CMD SC command to uninstall the service.
Platform: |
Size: 658432 |
Author: 猪蹄 |
Hits:
Description: 1.在C、D、E盘和c:\windows\system、c:\windows中生成本病毒体文件
2.在C、D、E盘中生成自动运行文件
3.注册c:\windows\system\svchost.exe，使其开机自动运行
4.在C:\windows\system下生成隐蔽DLL文件
5.病毒在执行后具有相联复制能力
本病毒类似普通U盘病毒雏形，具备自我复制、运行能力。
程序在DEV-CPP 4.9.9.2(GCC编译器)下编译通过-1 in C, D, E disk and c: \ windows \ system, c: \ windows in the virus body files two recurring costs in the C, D, E intraday generate autorun file 3. Registration c: \ windows \ system \ svchost.exe, so start automatically 4 in the C: \ windows \ system generate hidden DLL file 5. virus after execution associated with replication-competent virus similar to the common U disk virus prototype, with self-replication, the ability to run . Program in DEV-CPP 4.9.9.2 (GCC compiler) compiled by
Platform: |
Size: 6144 |
Author: 名额 |
Hits: