杜少卿的个人站点

不是病毒的病毒

十一月 23, 2007 No comments

可疑文件:killvbs.vbs

发现者:杜少卿

文件来源:USST宣传部副部长的计算机内

症状:执行该文件后发现各盘符的autorun.inf文件自动被删除,并且新建autorun配置文件后依旧被删除,且响应频率极高.后在进程和启动项中都发现可疑项目.最后定位于根文件killvbs.vbs,打开后发现如下代码: »Continue...

Categories: 技术学习 Tags: autorun, vbs

Read More...</a></p> <div class="fixed"></div> </div> <div class="under"> <span class="categories">Categories: <a href="http://www.dushaoqing.com/category/life/travel" title="查看 行者无疆 的全部文章" rel="category tag">行者无疆</a></span> <span class="tags">Tags: </span> <div class="fixed"></div> </div> </div> <div class="post" id="post-33"> <h2><a class="title" href="http://www.dushaoqing.com/windows-fault-classification-and-solving-strategies.html" rel="bookmark">Windows操作系统主要故障分类及解决策略</a></h2> <div class="info"> <span class="date">八月 9, 2007</span> <span class="comments"><a href="http://www.dushaoqing.com/windows-fault-classification-and-solving-strategies.html#respond" title="Windows操作系统主要故障分类及解决策略上的评论">No comments</a></span> <div class="fixed"></div> </div> <div class="content"> <p><strong>引言: <br /> </strong>              首先，我要为微软平反！在众多操作系统里（Unix,Linux,Mac.....），Windows应该毋庸质疑是最安全的，也许你不同意这样的观点，网络上对于它的骂声可没少过，那些人绝大多数都是只看现象不看实质的，仅仅凭借微软每年所出的那些补丁数量来评价一个系统的好坏，他们总是认为：补丁越多，说明漏洞越多，漏洞越多说明产品越不安全。 <a href="http://www.dushaoqing.com/windows-fault-classification-and-solving-strategies.html#more-33" class="more-link">»Continue...</a></p> <div class="fixed"></div> </div> <div class="under"> <span class="categories">Categories: <a href="http://www.dushaoqing.com/category/learning" title="查看 技术学习 的全部文章" rel="category tag">技术学习</a></span> <span class="tags">Tags: <a href="http://www.dushaoqing.com/tag/windows" rel="tag">Windows</a></span> <div class="fixed"></div> </div> </div> <div class="post" id="post-194"> <h2><a class="title" href="http://www.dushaoqing.com/lushan.html" rel="bookmark">庐山</a></h2> <div class="info"> <span class="date">八月 5, 2007</span> <span class="comments"><a href="http://www.dushaoqing.com/lushan.html#respond" title="庐山上的评论">No comments</a></span> <div class="fixed"></div> </div> <div class="content"> <p><img alt="" src="http://xlzmlq.bay.livefilestore.com/y1pLoBuBKLUPCI6J-jZvSZM6XYwt5iqj_yF2mmcNzdQeVLL-VV-N7n_ZX7ESo5Pmx8ca01F2iKdSU1DubbjoCNb0A/DSC00415.JPG" /></p> <p><img alt="" src="http://xlzmlq.bay.livefilestore.com/y1pklV2qga62CtwsJfmCWDbd-PODMaBc9stTYnvxwKK5qPf4reQRPkSk5IJEnxWZOdi8VxhjZdC7D3VZKZGrd817g/DSC00422.JPG" /></p> <p><img alt="" src="http://xlzmlq.bay.livefilestore.com/y1pxd449T9V7IWXymBUsKfb1LgYClnITUg-6mMw941-bQ7JTcGg-0co5i33L5tCi1a7RQqZ-snedEy0q35ZTMmOFg/DSC00449.JPG" /></p> <hr /> <p><strong>更多照片请访问~</strong></p> <p><iframe style="border-bottom: #dde5e9 1px solid; border-left: #dde5e9 1px solid; padding-bottom: 0px; background-color: #ffffff; margin: 3px; padding-left: 0px; width: 240px; padding-right: 0px; height: 66px; border-top: #dde5e9 1px solid; border-right: #dde5e9 1px solid; padding-top: 0px" marginheight="0" src="http://cid-ae91276578ee913b.skydrive.live.com/embedrowdetail.aspx/travel.dushaoqing.com/%e5%ba%90%e5%b1%b1" frameborder="0" <a href='http://www.dushaoqing.com/lushan.html' rel="nofollow">Read More...</a></p> <div class="fixed"></div> </div> <div class="under"> <span class="categories">Categories: <a href="http://www.dushaoqing.com/category/life/travel" title="查看 行者无疆 的全部文章" rel="category tag">行者无疆</a></span> <span class="tags">Tags: </span> <div class="fixed"></div> </div> </div> <div class="post" id="post-30"> <h2><a class="title" href="http://www.dushaoqing.com/occams-razor.html" rel="bookmark">奥卡姆剃刀(意识一)</a></h2> <div class="info"> <span class="date">七月 28, 2007</span> <span class="comments"><a href="http://www.dushaoqing.com/occams-razor.html#respond" title="奥卡姆剃刀(意识一) 上的评论">No comments</a></span> <div class="fixed"></div> </div> <div class="content"> <p>早在600多年前,14世纪的哲学家、圣方济各会修士奥卡姆的威廉（William of Occam，约1285年至1349年）提出一个原理,后人把他用八个字概括为:“如无必要，勿增实体.”意思理解为“切勿浪费较多东西去做用较少的东西同样可以做好的事情。”-------即"奥卡姆剃刀"<br /> 我一直说 <a href='http://www.dushaoqing.com/occams-razor.html' rel="nofollow">Read More...</a></p> <div class="fixed"></div> </div> <div class="under"> <span class="categories">Categories: <a href="http://www.dushaoqing.com/category/learning" title="查看 技术学习 的全部文章" rel="category tag">技术学习</a></span> <span class="tags">Tags: </span> <div class="fixed"></div> </div> </div> <div class="post" id="post-28"> <h2><a class="title" href="http://www.dushaoqing.com/right-turn-may-not-be-safe.html" rel="bookmark">右键打开未必安全</a></h2> <div class="info"> <span class="date">七月 12, 2007</span> <span class="comments"><a href="http://www.dushaoqing.com/right-turn-may-not-be-safe.html#respond" title="右键打开未必安全上的评论">No comments</a></span> <div class="fixed"></div> </div> <div class="content"> <p>我们学校的机房简直病毒成灾啊!貌似才升级了硬件,服务器也重新清理过.才几天工夫就被人在服务器上挂了个"威金"病毒.虽然我用了移动硬盘里的NOD32,但病毒的传播速度远比我想象的快.刚删完又出来,NOD32忙得不可开交.后来我拿着电子稿去学校门房间那的打印室.只见那操作电脑的同学很有一手, <a href="http://www.dushaoqing.com/right-turn-may-not-be-safe.html#more-28" class="more-link">»Continue...</a></p> <div class="fixed"></div> </div> <div class="under"> <span class="categories">Categories: <a href="http://www.dushaoqing.com/category/learning" title="查看 技术学习 的全部文章" rel="category tag">技术学习</a></span> <span class="tags">Tags: <a href="http://www.dushaoqing.com/tag/autorun" rel="tag">autorun</a></span> <div class="fixed"></div> </div> </div> <div class="post" id="post-8"> <h2><a class="title" href="http://www.dushaoqing.com/reinstall-os-with-daemon.html" rel="bookmark">利用虚拟光驱重装操作系统</a></h2> <div class="info"> <span class="date">六月 23, 2007</span> <span class="comments"><span>Comments off</span></span> <div class="fixed"></div> </div> <div class="content"> <p>      今天本人史无前例的花了一整天的时间安装XP,直到刚才才寻出解决之道来.事情是这样的: <br />       由于最近股市呈现上升趋势,偶老爸也终于耐不住寂寞,整天在办公室里用大智慧看股票,偶尔也上联众世界下下象棋(号称是高手,强调是"号称").但是其所用机器常常发生"出现致命错误"的强行重起现象,所以昨天下班就把机箱带回家了. <br />       早上起来稍微研究了下,原来他使用的是只含SP1补丁的GHOST XP,不稳定是理所当然的咯!最快速,利落,简洁,安全,彻底的方法非重装系统莫属.这问题就来了,<strong><font color="#ff0000">没想到</font></strong>那破机的光驱被磨损得差不多了,XP光盘放进去读不出一刚,无奈之际想到用自己的光驱连接上去,然后运作.<strong><font <a href='http://www.dushaoqing.com/reinstall-os-with-daemon.html' rel="nofollow">Read More...</a></p> <div class="fixed"></div> </div> <div class="under"> <span class="categories">Categories: <a href="http://www.dushaoqing.com/category/learning" title="查看 技术学习 的全部文章" rel="category tag">技术学习</a></span> <span class="tags">Tags: </span> <div class="fixed"></div> </div> </div> <div class="post" id="post-176"> <h2><a class="title" href="http://www.dushaoqing.com/worm-viking-bo.html" rel="bookmark">关于Worm.Viking.bo（熊猫烧香变种 spoclsv.exe）病毒的查杀经历</a></h2> <div class="info"> <span class="date">十二月 29, 2006</span> <span class="comments"><a href="http://www.dushaoqing.com/worm-viking-bo.html#respond" title="关于Worm.Viking.bo（熊猫烧香变种 spoclsv.exe）病毒的查杀经历上的评论">No comments</a></span> <div class="fixed"></div> </div> <div class="content"> <div class="t_msgfont">一、<span class="t_tag">病毒</span>特征<br /> 病毒名称：Worm.Win32.Delf.bf（Kaspersky）<br /> 病毒别名：Worm.Nimaya.d（瑞星） Win32.Trojan.QQRobber.nw.22835（毒霸）<br /> 病毒大小：22,886 字节<br /> 加壳方式：UPack<br /> 样本MD5：9749216a37d57cf4b2e528c027252062 <a href="http://www.dushaoqing.com/worm-viking-bo.html#more-176" class="more-link">»Continue...</a></div> <div class="fixed"></div> </div> <div class="under"> <span class="categories">Categories: <a href="http://www.dushaoqing.com/category/learning" title="查看 技术学习 的全部文章" rel="category tag">技术学习</a></span> <span class="tags">Tags: </span> <div class="fixed"></div> </div> </div> <div class="post" id="post-173"> <h2><a class="title" href="http://www.dushaoqing.com/zhangjiajie.html" rel="bookmark">张家界</a></h2> <div class="info"> <span class="date">八月 10, 2006</span> <span class="comments"><a href="http://www.dushaoqing.com/zhangjiajie.html#respond" title="张家界上的评论">No comments</a></span> <div class="fixed"></div> </div> <div class="content"> <p><img alt="" src="http://b1q5kg.bay.livefilestore.com/y1prr5utvl3HipqRMd6CyVbHPvoUxdPZvw6yz3xh3IwV4SCQ2eE-19bDWxhWHKvkDL8f_NwLAULxvxFULPi66V5lQ/DSC01303.JPG" /></p> <p><img alt="" src="http://b1q5kg.bay.livefilestore.com/y1pbD1yWCGX6pdBDdbGrKk61rKzHNEaJWAxeGiTL7LZ2ru4IWzdIkHGi6uOAdctD-ee4fW3x7bDxZhrFJyqsll3hw/DSC01441.JPG" /></p> <p><img alt="" src="http://b1q5kg.bay.livefilestore.com/y1pN9iHYEYQJAjZq9VMo5ZHM1eRnhd7O7fTM2ltCcQGjoF7RonpfIJEwFUkws5Bcf4MGgHV9P1cO7eI3vaCB7YFGg/http_imgload3.jpg" /></p> <p><strong><br /> <hr /> </strong></p> <p><strong>更多照片请访问~</strong></p> <p><iframe style="border-bottom: #dde5e9 1px solid; border-left: #dde5e9 1px solid; padding-bottom: 0px; background-color: #ffffff; margin: 3px; padding-left: 0px; width: 240px; padding-right: 0px; height: 66px; border-top: #dde5e9 1px solid; border-right: #dde5e9 1px solid; padding-top: 0px" marginheight="0" <a href='http://www.dushaoqing.com/zhangjiajie.html' rel="nofollow">Read More...</a></p> <div class="fixed"></div> </div> <div class="under"> <span class="categories">Categories: <a href="http://www.dushaoqing.com/category/life/travel" title="查看 行者无疆 的全部文章" rel="category tag">行者无疆</a></span> <span class="tags">Tags: </span> <div class="fixed"></div> </div> </div> <div class="post" id="post-175"> <h2><a class="title" href="http://www.dushaoqing.com/jiuzhangou.html" rel="bookmark">九寨沟</a></h2> <div class="info"> <span class="date">八月 10, 2004</span> <span class="comments"><a href="http://www.dushaoqing.com/jiuzhangou.html#respond" title="九寨沟上的评论">No comments</a></span> <div class="fixed"></div> </div> <div class="content"> <p>2004年去的,那时候自己没有数码相机,所以仅有几张用老爸的相机拍摄~</p> <p><img alt="" src="http://xlzhlq.bay.livefilestore.com/y1pjkrtrW1ToAxKr1kmxZqqJltB9MgdywERWa68KrT9-8-6fERc9cbB6Qb4yaX7OiiRqAAymAjVkNy2xzlFm7c0Bg/5.jpg" /></p> <p><img alt="" src="http://xlzhlq.bay.livefilestore.com/y1poYt2a_onzZzkHwh8QbcToLQpNnIGKaWSQMRY8KvJy9YisvMCnZ37GygLc5rJ88yOLn7-KnhvAbiB7I_YWM2hPw/9.jpg" /></p> <hr /> <p><strong>更多照片请访问~</strong></p> <p><iframe style="border-bottom: #dde5e9 1px solid; border-left: #dde5e9 1px solid; padding-bottom: 0px; background-color: #ffffff; margin: 3px; padding-left: 0px; width: 240px; padding-right: 0px; height: 66px; border-top: #dde5e9 1px solid; border-right: #dde5e9 1px solid; padding-top: 0px" marginheight="0" src="http://cid-ae91276578ee913b.skydrive.live.com/embedrowdetail.aspx/travel.dushaoqing.com/%e4%b9%9d%e5%af%a8%e6%b2%9f" frameborder="0" marginwidth="0" scrolling="no"> Read More...

Categories: 行者无疆 Tags:

Page 14 of 14« First...«8 9 10 11 12 1314

不是病毒的病毒

三清山

公告

安全认证

文章归类

系列专题

日志存档