Safety Collection: Careful startup item protection system security (2)

Fourth, Wininit.ini

We know that the Windows installer often calls this program to implement the deletion after the installation program, so don't be small Look at it, if you do it on it, it can be said to be very hidden, very perfect!

It is in the Windows directory of the system disk, open it with Notepad (sometimes wininit.hak file) You can see the corresponding content. Obviously, we can add corresponding statements to the purpose of modifying the system program or deleting the program. If it is a file-associated Trojan, you can use winint.ini to delete the original file after infection, so as to truly hide yourself!

V. Battle under DOS

Finally, let's talk about it The startup project under DOS is loaded, and the files such as config.sys, autoexec.bat, *.bat, etc. can be loaded in a specific programming manner. So don't think that DOS is an outdated thing. Good DOS programming can often achieve very simple and very useful functions!