Programming Forums
User Name Password Register
 

RSS Feed
FORUM INDEX | TODAY'S POSTS | UNANSWERED THREADS | ADVANCED SEARCH

Reply
 
Thread Tools Display Modes
Old Feb 20th, 2007, 2:26 AM   #1
Lesliect6
Programmer
 
Join Date: Aug 2005
Posts: 68
Rep Power: 4 Lesliect6 is on a distinguished road
Getting process information

Hello,

I have recently beeen attacked by a Troyan (for the second time now...) and it took me about one hour and a half to kill it (not completely). I have had just about enough with these worms, and as my Spyware/adware cleaner doesn't recognise it, even with the latest updates, I am resolved to make an anti-troyan myself. All I need to know is how do you retreive a process's name in the memory, if you have access to it? I'm sure there is a way! I only know c++/vc++, and I'm starting to learn Assembly, which is the reason why I posted this on this forum.
Thank you,

Leslie
Lesliect6 is offline   Reply With Quote
Old Feb 20th, 2007, 4:07 AM   #2
Arevos
Programming Guru
 
Arevos's Avatar
 
Join Date: Aug 2005
Location: England
Posts: 1,499
Rep Power: 5 Arevos is on a distinguished road
You might want to try Hijack this. It probably won't help you make your own anti-malware kit, but it will help you identify and remove processes manually that automatic malware removers miss.
Arevos is offline   Reply With Quote
Old Feb 21st, 2007, 7:31 PM   #3
Game_Ender
Professional Programmer
 
Game_Ender's Avatar
 
Join Date: May 2006
Location: Maryland, USA
Posts: 306
Rep Power: 3 Game_Ender is on a distinguished road
You should also make sure to practice safe browsing habits (high security settings) and possibly using alternative browsers (Firefox) email suites (Thunderbird).

Using something like Linux and Mac almost definitely get you away from this completely but not save you much time in short term because you will have to figure out how to do things differently. (Heck you might even try Vista).

Good luck!
__________________
Robotics @ Maryland AUV Team - Software Lead
Game_Ender is offline   Reply With Quote
Reply

Bookmarks

« Previous Thread in Forum | Next Thread in Forum »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Inspecting process' memory on Windows magnus.therning C 7 Jul 26th, 2006 12:11 PM
Older members: How did you learn to code Mjordan2nd Coder's Corner Lounge 55 Mar 22nd, 2006 8:35 AM
Break Point Problem on VC++ 6.0 chanwing C++ 4 Feb 8th, 2006 3:42 AM
Process injection jayme C++ 3 Jan 28th, 2006 6:05 AM
Forking process using python/Writing daemons thinkgeek Python 5 Jul 5th, 2005 11:46 AM




DaniWeb IT Discussion Community
All times are GMT -5. The time now is 9:33 PM.

Powered by vBulletin® Version 3.7.0, Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright ©2007 DaniWeb® LLC