Help analyze a piece of malware

Steal the account password and remotely control the poisoner's machine.

Malware - malicious software, malware

Unauthorized interference with or damage to computer systems.

A program or set of instructions that functions on a network is called a malicious program.

A set of instructions: it could be a binary, or it could be a scripting language.

macro languages, etc. Further reading:

Malware"Used as a collective noun.

to refer to intentional in a computer system.

Viruses, worms, and Trojan horses that perform malicious tasks.

Internet users often bring malicious programs into their computers when browsing games or other programs that are malicious or never from unsafe sites, without the user's knowledge. It is not until malvertising keeps popping up or ** appears automatically that users may find out that the computer has been "poisoned". During the period when the malware is not detected, all sensitive information online can be stolen, such as bank account information, credit card passwords, etc.

These let the victims.

The computer keeps popping up** or malvertising. Programs are called malware, and they are also called rogue software.

For a general antivirus discussion, the following simple malware category definitions can be used:

Troy

The program appears to be useful or harmless, but contains hidden features designed to exploit or damage the system on which it is running. Trojans are usually delivered to users via emails that do not properly state the purpose and functionality of this program. It is also known as Troy**.

Trojans do this by delivering malicious payloads or tasks while they are running. [1]

Worms

Worms use self-propagating malice** that automatically distributes itself from one computer to another over a network connection. Worms perform harmful actions, such as consuming network or local system resources, which can lead to denial-of-service attacks. Some worms can be executed and spread without user intervention, while others require the user to execute the worm** directly in order to spread.

In addition to replication, worms may also deliver payloads. [1]

Viruses

The clear intent of the virus** is to replicate itself. The virus tries to attach itself to the host program in order to spread from computer to computer. It can harm hardware, software, or data.

As the host program executes, the virus** runs with it and infects the new host, sometimes passing on an additional load.

If you want to use it, you can use it, and you can't trust all the things in Kaka

I've had a similar situation, isn't it an inexplicable icon, and I can't delete it? You go to the next Jinshan first aid kit, it's super easy to use, you can find out the virus that 360 can't detect, just delete it. You can give it a try.

3. Deal with malware. If you want to see which software has malicious behavior, you can go to the details page and then you can handle it. Such as:

Click [Get Contact] to view which software is currently using your contact information, then select "Forbidden" to block its malicious behavior at one time, and the software can also be used normally; If you don't want to keep the software, you can also go to the "Software Management" of the system or the housekeeper to delete it

Similarly, you can also view the corresponding software that is using this permission according to the categories of [Call Log], [Mobile Phone Location], [SMS], etc., and deal with it:

In addition, you can also directly click the trust button behind the software to add the software as a trust, then the housekeeper will not monitor all the operations of the software:

Finally, in the upper right corner of Permissions Management, click the pinion to turn on the main switch to turn off Permissions Management and view the monitoring logs

Now there are more and more malware on the Internet (referring to those that come uninvited, come and do not leave, ill-intentioned, unpopular software), a few days ago the Internet Industry Association named the top ten rogue software, most of these software are forced to install, and it is not easy to uninstall. This software (formerly known as Rogue Software Cleanup Assistant) is written for this situation, and the software can currently clean the following malware:

1. 360 search.

2. 3721 Internet Assistant.

3. Soba.

4. Excerpt from the network.

5. MMS.

6. cnic Chinese Internet access.

8. Duoduo QQ emoticons.

9. eBay Toolbar.

10. Great pass.

11. Great little secretary.

13. Network pigs.

14. Sogou.

15. Pop-up advertisements on Soyi.com.

17. U88 Fortune Express toolbar.

18. Maintenance.

19. Perfect Network Translation.

20. **** pop-up ads.

21. Yahoo assistant.

22. A search toolbar.

23. Entertainment is empty.

24. YOK toolbar.

25, desktop media (desktop media) 26, cool station navigation.

27. QQ tail virus.

28. HWS Trojan (virus).

29. irjit Trojan.

30. Jiaozhu Trojan (virus).

31、 msibm

32, Thousand Images (MOP) broadcast ba.

33. zcom Entertainment.

34. syscast pop-up ad plug-in.

35. Happy Luck Express.

36、 scintruder

37. The address bar is through the train.

38. ipsec (msdc32) Trojan.

39. Qing Entertainment.

40, 100 dogs.

2. After interception, you only need to pass the "Harassment Interception" function in "Security Protection" to view the interception record.

3. The housekeeper also provides the function of modifying the "wrong mark"**, in the "number mark", click "I want to correct the error" to modify. At the same time, here you can see the recently marked numbers as shown below:

Tap "Mark a recent unknown number" to also directly tag a recent call.

It's probably not a good thing, so it's best not to do it.

It is a web page file that can be opened by a mobile phone, and it is generally a promotional link, but it may link to a Trojan horse or virus.

Remember when I let you get something off is the virus.