木马皮在哪里? [英] where do trojan hides?

问题描述

所以我正在用一个小的工具来删除一些已知的特洛伊木马，但是我遇到了问题.

1.Do trojan将其dll注入到进程中，因为如果这样做，我只需要重新启动进程即可.

2.使用Windows启动的简单exe，因为如果是这样，我只需要查看注册表并回溯其位置并删除exe即可.

还有其他地方吗?

Cumpz，

SO i''m working in a small tool to remove some known trojan but i have a problem.

1.Do trojan inject their dll into a process because if they do i just need to reboot the process.

2.Its simple exe that is started up with windows, because if so i just need to see registry and backtrace its location and delete the exe.

Is there any other palces?

Cumpz,

推荐答案

最好的方法是确定那些木马并下载快速修复或删除工具.
一些工具可能会帮助您:SysInternal自动运行，Process Explorer，RootkitRevealer和趋势科技HijackThis

SysInternals [ ^ ]

HijackThis/ [ ^ ]

本文介绍了一些启动位置.
http://www.pacs-portal.co.uk/startup_content.php [ ^ ]

The best way is to determine those Trojan and download a quick fix or removal tool.
Some tools might help you : SysInternal Autorun, Process Explorer, RootkitRevealer and Trend Micro HijackThis

SysInternals[^]

HijackThis/[^]

This article explain some of the startup location.
http://www.pacs-portal.co.uk/startup_content.php[^]

这篇关于木马皮在哪里?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！