Tag Archives: 2006

qq越来越像病毒了

qq推出2004,会自动给用户安装虚拟打印机
qq上次出2005,自动修改用户的输入法,监视用户键盘输入;并增加了一个qqhook.dll
而现在的2006,似乎变本加厉,更加像病毒了
 
安装qq2006之后,会出现如下的症状:
 
其中含有一个QQPhoneHelper.dll这个文件在系统临时文件夹中生成一个临时文件?这个文件,在QQ退出后,也不会自动删除。
这个临时文件的名字是:~DFD.tmp (或者是随机生成~DF*.tmp)

其内容用Ultraedit查看是:
[QQHelper]
version=1.0.0.26
url=http://scdown.qq.com/download/QQPhoneHelper.dll
setupfile=QQPhoneHelper.dll

把QQPhoneHelper.dll这个文件改名或删除,在启动QQ后,这个文件会由http://scdown.qq.com/download/QQPhoneHelper.dll 自动下载并安装。

 
而对于这个dll,会在c盘根目录创建"~DTLog.txt"文件
跟踪了读入读出请求

9576 17:01:17 QQ.exe:1484 OPEN D:Program FilesTencentQQ2005QQPhoneHelper.dll SUCCESS Options: Open Access: Execute
29577 17:01:17 QQ.exe:1484 CLOSE D:Program FilesTencentQQ2005QQPhoneHelper.dll SUCCESS
29578 17:01:17 QQ.exe:1484 OPEN C:~DTLog.txt SUCCESS Options: OpenIf Access: All
29579 17:01:17 QQ.exe:1484 QUERY INFORMATION C:~DTLog.txt SUCCESS Length: 0
29580 17:01:17 QQ.exe:1484 QUERY INFORMATION C:~DTLog.txt SUCCESS Length: 0
29581 17:01:17 QQ.exe:1484 QUERY INFORMATION C:~DTLog.txt SUCCESS Length: 0
29582 17:01:17 QQ.exe:1484 WRITE C:~DTLog.txt SUCCESS Offset: 0 Length: 30
29583 17:01:17 QQ.exe:1484 CLOSE C:~DTLog.txt SUCCESS

Norton_Internet_Security_2006_EN_[RETAIL]

Image00046.jpg
 
Norton Internet Security 2006 Phone Activation Method
 
this works with any language versions i guess as this works well for the traditional chinese version as ppl said in the forums and i’ve tried using this method successfully by using an english version either.
 
IN ORDER TO COMPLETE THE ACTIVATION PROCESS, YOU MUST HAVE A RETAIL VERSION WHICH ALLOWS YOU TO SELECT PHONE ACTIVATION AFTER CONNECTION FAILED.
 
Step 1: install the prog. with any valid serial, you may also use this Chicken Link
Step 2: disable the network settings and jump into the page for phone activation.
Step 3: Type ‘0’ for all of the spaces provided for the activation key except the last three ones which have to change into 365. (e.g.: 000000,00000,00000,00000,000365)
when you do the activation put 999 when you put 365 and you get subscription for 2457 days. wow this is great. tested and works
 
You can now enjoy an activated version with 869 days’ subscription. It’s really a mystery for the activation key but it really works. It’s working on LiveUpdate and no popup windows appears on the screen.
 
 

DO NOT LOOSE THIS PRODUCT KEY
 
You must use it when you install this software.
This product will stop working in 15 days if it is not
activated with the key below.
 
Product Key: JGG84-8YM4W-KPPCR-QXRJJ-XBFFK