²é¿´: 134  |  »Ø¸´: 8
µ±Ç°Ö÷ÌâÒѾ­´æµµ¡£
¡¾ÐüÉͽð±Ò¡¿»Ø´ð±¾ÌûÎÊÌ⣬×÷ÕßѧԱxPNfSR½«ÔùËÍÄú 2 ¸ö½ð±Ò

qingfeng2008

ľ³æ (ÕýʽдÊÖ)

»¯Ñ§½çÒ»¹ÉÇå·ç

[ÇóÖú] svchost.exe Ó¦ÓóÌÐò´íÎóµÄÎÊÌâ

û¿ª»úÒ»¶Îʱ¼ä¾Íµ¯³öÒ»¸ö¡°Ó¦ÓóÌÐò·¢ÉúÒì³£ δ֪µÄÈí¼þÒì³£(0xc0000409)£¬Î»ÖÃΪ0x5fdda3c0¡±£¬È»ºó»ú×Ó¾ÍûÉùÒôÁË£¬ÈÎÎñÀ¸±ä³ÉÁ˻Ұ×É«µÄ,»ú×Ö·´Ó³ËٶȱäÂý,ÕâʱֻÄÜÖØÆô¡£
ËùÓÐÍøÉÏÄÜËÑË÷µ½µÄ·½·¨¶¼ÊÔ¹ýÁË,Èç×î¶àµÄÏÂÔØB921883-x86-CHS.exe©¶´²¹¶¡
ÈÔÈ»ÎÞЧ
¼±Çó½â¾ö!!!

» ²ÂÄãϲ»¶

ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

dullrobber

ÖÁ×ðľ³æ (Ö°Òµ×÷¼Ò)

¿ìÀÖ¼Ò×åµÄÌØÖÖ²£Á§ÏÈ·æ

×îºÃÊÇϵͳ»¹Ô­£¬²»ÐоÍÖ»ÄÜÖØ×°ÏµÍ³ÁË
ŬÁ¦ÇÀռɳ·¢
2Â¥2007-11-15 17:35:56
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

ÖÐħ²¨²¡¶¾ÁË
3Â¥2007-11-27 10:42:22
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

¡ï
qingfeng2008(½ð±Ò+1,VIP+0):xiexie
ÖÐħ²¨²¡¶¾µÄÅóÓÑÃÇÀ´¿´¿´
Óöµ½¡°Ä§²¨¡±²¡¶¾¹¥»÷£¬Óû§ÎÞÐè¿Ö»Å¡£ÄúÖ»Ðè°´ÕÕÏÂÃæÈý¸ö²½Ö裬¼´¿É¿ìËÙÇå³ý¸Ã²¡¶¾¡£

µÚÒ»²½£ºÊ¹ÓøöÈË·À»ðǽÀ¹½Ø²¡¶¾¹¥»÷

1¡¢Æô¶¯ÈðÐǸöÈË·À»ðǽÖ÷³ÌÐò£¬µã»÷¡°ÉèÖᱲ˵¥£¬Ñ¡Ôñ¡°IP¹æÔò¡±¡£

2¡¢ÔÚµ¯³öµÄ¡°ÉèÖÃÈðÐǸöÈË·À»ðǽIP¹æÔò¡±´°¿ÚÖеã»÷¡°Ôö¼Ó¹æÔò¡±°´Å¥¡£

3¡¢¹æÔòÃû³ÆÌîÈë¡°MS06-040¡±£¬Ö´Ðж¯×÷Ϊ¡°½ûÖ¹¡±£¬È»ºóµã»÷¡°ÏÂÒ»²½¡±¡£¶Ô·½µØÖ·ÉèÖÃΪ¡°ÈÎÒâµØÖ·¡±£¬±¾µØµØÖ·ÉèÖÃΪ¡°ËùÓеØÖ·¡±£¬Ð­ÒéÀàÐÍÑ¡Ôñ¡°TCP¡±£¬¶Ô·½¶Ë¿ÚÑ¡Ôñ¡°ÈÎÒâ¶Ë¿Ú¡±£¬±¾µØ¶Ë¿ÚÑ¡Ôñ¡°¶Ë¿ÚÁÐ±í¡±²¢ÔÚÆäÏÂÃæÊäÈë¡°139,445¡±£¬±¨¾¯·½Ê½Ñ¡Ôñ¡°ÍÐÅ̶¯»­¡±ºÍ¡°ÈÕÖ¾¼Ç¼¡±Á½ÏîÑ¡ÖУ¬µã»÷±£´æ¡£

µÚ¶þ²½ ´ò²¹¶¡

Äú¿ÉÒԵǼ΢ÈíµÄÍøÕ¾http://www.microsoft.com/china/t ... letin/MS06-040.mspxÏÂÔØ²¢°²×°¶ÔÓ¦²Ù×÷ϵͳµÄ²¹¶¡³ÌÐò¡£½¨Òé´ó¼Ò·ÃÎÊhttp://update.microsoft.com/ °²×°ËùÓеĹؼü¸üÐÂÒÔ·ÀÖ¹ÀûÓÃÆäËü©¶´½øÐд«²¥ºÍÆÆ»µµÄ²¡¶¾¡£

µÚÈýÕÐ Çå³ý²¡¶¾

ÓÉÓڸò¡¶¾µÄ±äÖÖÊýÁ¿½Ï¶à£¬Ã¿Ò»¸ö±äÖÖÉú³ÉµÄÎļþλÖö¼²»Ò»Ñù£¬Òò´ËÊÖ¹¤Çå³ýÕâ¸ö²¡¶¾²¢²»ÊǺܷ½±ã£¬½¨Òé´ó¼ÒÉý¼¶É±¶¾Èí¼þµ½×îа汾À´¶Ô´Ë²¡¶¾½øÐвéɱ¡£

×îºó£¬ÌáÐѸ÷λ¼°Ê±Éý¼¶ÄúµÄɱ¶¾Èí¼þ¡£
4Â¥2007-11-27 10:43:00
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

ÎÒÊÇתÌùÓêÁÖľ·çµÄ£º£©
5Â¥2007-11-27 10:43:20
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

¡ï ¡ï
qingfeng2008(½ð±Ò+2,VIP+0):xiexie
²é¿´ÎÄÕ   
ÖÐħ²¨²¡¶¾µÄ½â¾ö°ì·¨---×îÐÂ2006-12-28 12:12Èç¹ûÄ㻹ûÖÐħ²¨²¡¶¾,ÇëÏȵ½±¾Õ¾http://hi.baidu.com/yifengnum1/b ... a91234349bf7b9.htmlÏÂÔØÄ§²¨µÄ²¡¶¾²¹¶¡,Ô¤·ÀÖж¾.Èç¹û²»ÐÒÄãÒѾ­Öж¾ÁË,ÇëÍùÏ¿´:

ÖØÆô½øÈ밲ȫģʽ£¨¿ª»ú°´f8£©¡£

1. ´ò¿ª×¢²á±í±à¼­Æ÷¡£µã»÷¿ªÊ¼>ÔËÐУ¬ÊäÈëregedit£¬°´enter

2. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷:hkey_local_machine>system>currentcontrolset>services

3. ÈÔÈ»ÔÚ×ó±ßµÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçϼü£º¡°wgareg¡±Ä§²¨£¨worm.mocbot.a£©¡¢¡°wgavm ¡±Ä§²¨±äÖÖb(worm.mocbot.b)

»Ö¸´enabledcomºÍrestrictanonymous×¢²á±íÏîÄ¿

1. ÈÔÈ»ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£º hkey_local_machine>software>microsoft>ole

2. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½ÈçÏÂÏîÄ¿£ºienabledcom = "n"

3. ÓÒ»÷¸ÃÏîĿѡÔñÐÞ¸ÄֵΪ£º enabledcom = "y"

ɾ³ý¹ØÓÚ¹ÜÀí¹²ÏíµÄ×¢²á±íÏîÄ¿

1. ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>system>currentcontrolset> services>lanmanserver>parameters

2. ÔÚ×ó±ßµÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£º

a. autosharewks = "dword:00000000"

b. autoshareserver = "dword:00000000"

3. ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>system>currentcontrolset> services>lanmanworkstation>parameters


4. ÔÚ×ó±ßµÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£º

a. autosharewks = "dword:00000000"

b. autoshareserver = "dword:00000000"

ħ²¨£¨worm.mocbot.a£¬ÓÖ³Æworm_ircbot.jl£©É¾³ýÌí¼Ó»òÕßÐ޸ĵÄ×¢²á±íÏîÄ¿

1. ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>microsoft>security center

2. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½ÏîÄ¿£ºo firewalldisablenotify = "dword:00000001" o antivirusoverride = "dword:00000001" o antivirusdisablenotify = "dword:00000001" o firewalldisableoverride = "dword:00000001"

3. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>policies>microsoft>windowsfirewall>domainprofile

4. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½ÏîÄ¿£ºenablefirewall = "dword:00000000"

5. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>policies>microsoft>windowsfirewall>standardprofile

ħ²¨±äÖÖb(worm.mocbot.b£¬ÓÖ³Æworm_ircbot.jk)ɾ³ýÌí¼Ó»òÕßÐ޸ĵÄ×¢²á±íÏîÄ¿£º

1. ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>microsoft>security center

2. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£º:

antivirusdisablenotify = "dword:00000001"

antivirusoverride = "dword:00000001"

firewalldisablenotify = "dword:00000001"

firewalldisableoverride = "dword:00000001"

3. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>system>currentcontrolset>services>sharedaccess

4. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½ÏîÄ¿£º start = "dword:00000004"

5. ÓÒ»÷¸Ã×¢²á±íÏîÄ¿£¬Ñ¡ÔñÐÞ¸ÄÏîĿֵΪ£ºstart = "dword:00000002"

6. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>policies>microsoft>windowsfirewall>domainprofile

7. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£ºenablefirewall = "dword:00000000"

8. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>policies>microsoft>windowsfirewall>standardprofile

9. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£ºenablefirewall = "dword:00000000"

10. ¹Ø±Õ×¢²á±í±à¼­Æ÷

¸½¼Ówindows ne/xpÇå³ý˵Ã÷

ÔËÐÐwindows meºÍxpµÄÓû§±ØÐë½ûÓÃϵͳ»¹Ô­£¬´Ó¶ø¿ÉÒÔ¶ÔÊܸÐȾµÄϵͳ½øÐÐÈ«ÃæÉ¨Ãè¡£ÔËÐÐÆäËûwindows°æ±¾µÄÓû§¿ÉÒÔ²»ÐèÒª´¦ÀíÉÏÃæµÄ¸½¼Ó˵Ã÷¡£

ɱ¶¾¹¤¾ßÍÆ¼ö£ºÊ¹ÓÃÇ÷ÊÆ¿Æ¼¼·À²¡¶¾²úƷɨÃèϵͳ²¢É¾³ýËùÓб»¼ì²âΪħ²¨£¨worm.mocbot.a£¬ÓÖ³Æworm_ircbot.jl£©¡¢Ä§²¨±äÖÖb(worm.mocbot.b£¬ÓÖ³Æworm_ircbot.jk)µÄÎļþ¡£Ç÷ÊÆ¿Æ¼¼µÄÓû§±ØÐëÔÚɨÃèϵͳ֮ǰÏÂÔØ×îв¡¶¾ÂëÎļþ¡£
6Â¥2007-11-27 10:43:58
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

ÕâÊÇתÌù°Ù¶È¿Õ¼äµÄ
7Â¥2007-11-27 10:44:34
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

ququxiao

ÈÙÓþ°æÖ÷ (Ö°Òµ×÷¼Ò)

³æÓï³æÔ¸

ÖîλÔÚУ£¬ÓÐÁ½¸öÎÊÌâÓ¦¸Ã×Ô¼ºÎÊÎÊ£ºµÚÒ»£¬À´´ó¹¤×öʲô£¿µÚ¶þ£¬½«À´±ÏÒµºó×öʲôÑùµÄÈË£¿
8Â¥2007-11-27 10:56:07
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

surpermen

Òø³æ (ÕýʽдÊÖ)

¡ï
qingfeng2008(½ð±Ò+1,VIP+0):xiexie
ÓÃSRENGɨÃè¸öÈÕÖ¾´«ÉÏÀ´

°ïÄã·ÖÎöÏÂ

SVCHOSTÊÇËÞÖ÷ÀàµÄ³ÌÐò

¹ØÏµºÜ¶àÄ£¿éÀàµÄ³ÌÐòÔËÐе썲»ÖªµÀÕâô˵¶Ô²»¶Ô°¡£¬µ«»ù±¾ÉÏÊÇÕâÑùµÄ£©

»úÆ÷±¾Éí¿ÉÄÜ»¹ÓÐÆäËûµÄ¶«Î÷

ÎÒÊÇÊÖ¹¤²Ù×÷µÄ£¬¾¡¿ÉÄܵļõÉÙ¶Ô»úÆ÷µÄ»¹Ô­»òÊÇ֨װ

ÕâÑùµÄËðʧҲ×îºÃ

Ï£ÍûÄܰïÉÏæ

×£LZÔçÈÕ½â¾öÎÊÌâ
X£­£­ÐÅÐÄ Y£­£­ÓÂÆø Z£­£­ÔðÈÎ
9Â¥2007-11-27 11:12:58
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
Ïà¹Ø°æ¿éÌø×ª ÎÒÒª¶©ÔÄÂ¥Ö÷ ѧԱxPNfSR µÄÖ÷Ìâ¸üÐÂ
²»Ó¦Öú È·¶¨»ØÌûÓ¦Öú (×¢Ò⣺ӦÖú²Å¿ÉÄܱ»½±Àø£¬µ«²»ÔÊÐí¹àË®£¬±ØÐëÌîд15¸ö×Ö·ûÒÔÉÏ)
×î¾ßÈËÆøÈÈÌûÍÆ¼ö [²é¿´È«²¿] ×÷Õß »Ø/¿´ ×îºó·¢±í
[¿¼ÑÐ] 352Çóµ÷¼Á +3 ´óÃ×·¹£¡ 2026-03-22 3/150 2026-03-22 23:28 by king123£¡
[¿¼ÑÐ] 311Çóµ÷¼Á +6 ¶¬Ê®Èý 2026-03-18 6/300 2026-03-22 20:18 by edmund7
[¿¼ÑÐ] 319Çóµ÷¼Á +4 СÁ¦Æøçæçæ 2026-03-20 4/200 2026-03-22 15:53 by ColorlessPI
[¿¼ÑÐ] 291 Çóµ÷¼Á +3 »¯¹¤2026½ì±ÏÒµÉ 2026-03-21 3/150 2026-03-22 14:26 by ColorlessPI
[¿¼ÑÐ] ¿¼Ñе÷¼Á +4 À´ºÃÔËÀ´À´À´ 2026-03-21 4/200 2026-03-22 12:15 by ÐÇ¿ÕÐÇÔÂ
[¿¼ÑÐ] 085600²ÄÁÏÓ뻯¹¤306 +4 z1z2z3879 2026-03-21 4/200 2026-03-21 23:44 by ms629
[¿¼ÑÐ] ²ÄÁÏѧ˶333Çóµ÷¼Á +3 ±±µÀÏï 2026-03-18 3/150 2026-03-21 18:17 by ѧԱ8dgXkO
[¿¼ÑÐ] 313Çóµ÷¼Á +4 ËÁÈþ·¡Ò¼22 2026-03-19 4/200 2026-03-21 17:33 by ColorlessPI
[¿¼ÑÐ] Ò»Ö¾Ô¸ÖйúʯÓÍ´óѧ£¨»ª¶«£© ±¾¿ÆÆë³¹¤Òµ´óѧ +3 ʯÄÜΰ 2026-03-17 3/150 2026-03-21 02:22 by JourneyLucky
[¿¼ÑÐ] »ª¶«Ê¦·¶´óѧ-071000ÉúÎïѧ-293·Ö-Çóµ÷¼Á +3 Ñо¿ÉúºÎÑþÃ÷ 2026-03-18 3/150 2026-03-21 01:30 by JourneyLucky
[¿¼ÑÐ] 304Çóµ÷¼Á +6 ÂüÊâ2266 2026-03-18 6/300 2026-03-21 00:32 by JourneyLucky
[¿¼ÑÐ] 308Çóµ÷¼Á +3 °¢½ã°¢½ã¼Ò°¡ 2026-03-18 3/150 2026-03-20 23:24 by JourneyLucky
[¿¼ÑÐ] ÖÐÄÏ´óѧ»¯Ñ§Ñ§Ë¶337Çóµ÷¼Á +3 niko- 2026-03-19 6/300 2026-03-20 21:58 by luoyongfeng
[¿¼ÑÐ] AÇøÏß²ÄÁÏѧµ÷¼Á +5 ÖÜÖÜÎÞ¼« 2026-03-20 5/250 2026-03-20 21:33 by laoshidan
[¿¼ÑÐ] 261ÇóBÇøµ÷¼Á£¬¿ÆÑо­Àú·á¸» +3 Å£Ä̺Üæ 2026-03-20 4/200 2026-03-20 19:34 by JourneyLucky
[¿¼ÑÐ] ÕÐÊÕµ÷¼Á˶ʿ +4 lidianxing 2026-03-19 12/600 2026-03-20 12:25 by lidianxing
[¿¼ÑÐ] Ò»Ö¾Ô¸Öйúº£Ñó´óѧ£¬ÉúÎïѧ£¬301·Ö£¬Çóµ÷¼Á +5 1ËïÎò¿Õ 2026-03-17 6/300 2026-03-19 23:46 by zcl123
[¿¼ÑÐ] 288Çóµ÷¼Á£¬Ò»Ö¾Ô¸»ªÄÏÀí¹¤´óѧ071005 +5 ioodiiij 2026-03-17 5/250 2026-03-19 18:22 by zcl123
[¿¼ÑÐ] 0703»¯Ñ§µ÷¼Á +5 pupcoco 2026-03-17 8/400 2026-03-19 13:58 by houyaoxu
[¿¼ÑÐ] ²ÄÁÏ¿¼Ñе÷¼Á +3 xwt¡£ 2026-03-19 3/150 2026-03-19 11:22 by wãåÑôw
ÐÅÏ¢Ìáʾ
ÇëÌî´¦ÀíÒâ¼û