While the network brings the enormous convenience for ours work study, viral, wooden horse, back door as well as hacker procedure also serious influence information security. These procedures infect a computer's common characteristic are in the registry the write information, serves like automatic purposes and so on movement, destruction and dissemination. The following is the author in on-line collection, copes with the virus, the wooden horse, the back door as well as the hacker procedure through the revision registry, assures personal computer's security.
1. after cleaning up visit “network neighbor”, stays behind words and expressions information
Under HEKY_CURRENT_USER \ Network \ Recent, deletes the following principal linkage.
2. cancels when the debarkation automatic dialing
Revises in the window right side HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Network \ RealModeNet “autologon” is “01 00 00 00 00”.
3. cancels registers when chooses the user
Already deleted all users, but registers time must choose the user, we must cancel registers when choose the user, must under HKEY_LOCAL_MACHINENetworkLogon, in the right side window, the revision " UserProfiles " the value be " 0 ".
4. the hideaway hands-on user registers name
Under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Winlogon in right side window newly built string of character " DontDisplayLastUserName ", supposes the value is " 1 ".
5. prevents Acid Battery the v1.0 wooden horse's destruction
Under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ RunServices, if like has discovered “Explorer” in the right side window the key value, then explained that has hit the YAI wooden horse, deletes it.
6. prevents the YAI wooden horse's destruction
Under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ RunServices, if like has discovered “Batterieanzeige” in the right side window the key value, then explained that has hit the YAI wooden horse, deletes it.
7. prevents the Eclipse 2000 wooden horse's destructions
Under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ RunServices, if like had discovered in the right side window “bybt” the key value, deletes it.
Right side then deletes under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ RunServices the key value “cksys”, starts the computer.
8. prevents BO2000 the destruction
Under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ RunServices, if like has discovered “umgr32.exe” in the right side window the key value, then explained that has hit BO2000, deletes it.
9. the prevention loves the insect the destruction
Under HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ CurrentVersion \ Run, if like had discovered in the right side window “MSKernel32” the key value, deletes it.
Other pages: : 1 * 2 * Next>>
|
You are here: hacking technology
> hacker invade
> Content
Category: Home
> hacker invade