![]() |
eXeL@B —› Вопросы новичков —› Помогите распаковать Y0da's 1.x/modified |
Посл.ответ | Сообщение |
|
Создано: 01 ноября 2008 18:15 · Личное сообщение · #1 |
|
Создано: 01 ноября 2008 18:28 · Личное сообщение · #2 цитата "CABALMAIN.EXE has been seen to perform the following behavior: Can make outbound communication to other computers, IM chat rooms and other services using IRC protocols Communicates with other computers using FTP connections This Process sends MIME Email The Process is packed and/or encrypted using a software packing process This Process Deletes Other Processes From Disk Executes a Process The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents Makes outbound connections to other computers using NETBIOSOUT protocols Writes to another Process's Virtual Memory (Process Hijacking) Registers a Dynamic Link Library File Can communicate with other computer systems using HTTP protocols Violates Windows/Vista Physical Memory Protection allowing it to look inside the data areas of other programs This Process Creates Other Processes On Disk" ![]() |
|
Создано: 01 ноября 2008 18:32 · Личное сообщение · #3 |
![]() |
eXeL@B —› Вопросы новичков —› Помогите распаковать Y0da's 1.x/modified |