²é¿´: 140  |  »Ø¸´: 8
µ±Ç°Ö÷ÌâÒѾ­´æµµ¡£
¡¾ÐüÉͽð±Ò¡¿»Ø´ð±¾ÌûÎÊÌ⣬×÷ÕßѧԱxPNfSR½«ÔùËÍÄú 2 ¸ö½ð±Ò

qingfeng2008

ľ³æ (ÕýʽдÊÖ)

»¯Ñ§½çÒ»¹ÉÇå·ç

[ÇóÖú] svchost.exe Ó¦ÓóÌÐò´íÎóµÄÎÊÌâ

û¿ª»úÒ»¶Îʱ¼ä¾Íµ¯³öÒ»¸ö¡°Ó¦ÓóÌÐò·¢ÉúÒì³£ δ֪µÄÈí¼þÒì³£(0xc0000409)£¬Î»ÖÃΪ0x5fdda3c0¡±£¬È»ºó»ú×Ó¾ÍûÉùÒôÁË£¬ÈÎÎñÀ¸±ä³ÉÁ˻Ұ×É«µÄ,»ú×Ö·´Ó³ËٶȱäÂý,ÕâʱֻÄÜÖØÆô¡£
ËùÓÐÍøÉÏÄÜËÑË÷µ½µÄ·½·¨¶¼ÊÔ¹ýÁË,Èç×î¶àµÄÏÂÔØB921883-x86-CHS.exe©¶´²¹¶¡
ÈÔÈ»ÎÞЧ
¼±Çó½â¾ö!!!

» ²ÂÄãϲ»¶

ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

dullrobber

ÖÁ×ðľ³æ (Ö°Òµ×÷¼Ò)

¿ìÀÖ¼Ò×åµÄÌØÖÖ²£Á§ÏÈ·æ

×îºÃÊÇϵͳ»¹Ô­£¬²»ÐоÍÖ»ÄÜÖØ×°ÏµÍ³ÁË
ŬÁ¦ÇÀռɳ·¢
2Â¥2007-11-15 17:35:56
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

ÖÐħ²¨²¡¶¾ÁË
3Â¥2007-11-27 10:42:22
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

¡ï
qingfeng2008(½ð±Ò+1,VIP+0):xiexie
ÖÐħ²¨²¡¶¾µÄÅóÓÑÃÇÀ´¿´¿´
Óöµ½¡°Ä§²¨¡±²¡¶¾¹¥»÷£¬Óû§ÎÞÐè¿Ö»Å¡£ÄúÖ»Ðè°´ÕÕÏÂÃæÈý¸ö²½Ö裬¼´¿É¿ìËÙÇå³ý¸Ã²¡¶¾¡£

µÚÒ»²½£ºÊ¹ÓøöÈË·À»ðǽÀ¹½Ø²¡¶¾¹¥»÷

1¡¢Æô¶¯ÈðÐǸöÈË·À»ðǽÖ÷³ÌÐò£¬µã»÷¡°ÉèÖᱲ˵¥£¬Ñ¡Ôñ¡°IP¹æÔò¡±¡£

2¡¢ÔÚµ¯³öµÄ¡°ÉèÖÃÈðÐǸöÈË·À»ðǽIP¹æÔò¡±´°¿ÚÖеã»÷¡°Ôö¼Ó¹æÔò¡±°´Å¥¡£

3¡¢¹æÔòÃû³ÆÌîÈë¡°MS06-040¡±£¬Ö´Ðж¯×÷Ϊ¡°½ûÖ¹¡±£¬È»ºóµã»÷¡°ÏÂÒ»²½¡±¡£¶Ô·½µØÖ·ÉèÖÃΪ¡°ÈÎÒâµØÖ·¡±£¬±¾µØµØÖ·ÉèÖÃΪ¡°ËùÓеØÖ·¡±£¬Ð­ÒéÀàÐÍÑ¡Ôñ¡°TCP¡±£¬¶Ô·½¶Ë¿ÚÑ¡Ôñ¡°ÈÎÒâ¶Ë¿Ú¡±£¬±¾µØ¶Ë¿ÚÑ¡Ôñ¡°¶Ë¿ÚÁÐ±í¡±²¢ÔÚÆäÏÂÃæÊäÈë¡°139,445¡±£¬±¨¾¯·½Ê½Ñ¡Ôñ¡°ÍÐÅ̶¯»­¡±ºÍ¡°ÈÕÖ¾¼Ç¼¡±Á½ÏîÑ¡ÖУ¬µã»÷±£´æ¡£

µÚ¶þ²½ ´ò²¹¶¡

Äú¿ÉÒԵǼ΢ÈíµÄÍøÕ¾http://www.microsoft.com/china/t ... letin/MS06-040.mspxÏÂÔØ²¢°²×°¶ÔÓ¦²Ù×÷ϵͳµÄ²¹¶¡³ÌÐò¡£½¨Òé´ó¼Ò·ÃÎÊhttp://update.microsoft.com/ °²×°ËùÓеĹؼü¸üÐÂÒÔ·ÀÖ¹ÀûÓÃÆäËü©¶´½øÐд«²¥ºÍÆÆ»µµÄ²¡¶¾¡£

µÚÈýÕÐ Çå³ý²¡¶¾

ÓÉÓڸò¡¶¾µÄ±äÖÖÊýÁ¿½Ï¶à£¬Ã¿Ò»¸ö±äÖÖÉú³ÉµÄÎļþλÖö¼²»Ò»Ñù£¬Òò´ËÊÖ¹¤Çå³ýÕâ¸ö²¡¶¾²¢²»ÊǺܷ½±ã£¬½¨Òé´ó¼ÒÉý¼¶É±¶¾Èí¼þµ½×îа汾À´¶Ô´Ë²¡¶¾½øÐвéɱ¡£

×îºó£¬ÌáÐѸ÷λ¼°Ê±Éý¼¶ÄúµÄɱ¶¾Èí¼þ¡£
4Â¥2007-11-27 10:43:00
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

ÎÒÊÇתÌùÓêÁÖľ·çµÄ£º£©
5Â¥2007-11-27 10:43:20
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

¡ï ¡ï
qingfeng2008(½ð±Ò+2,VIP+0):xiexie
²é¿´ÎÄÕ   
ÖÐħ²¨²¡¶¾µÄ½â¾ö°ì·¨---×îÐÂ2006-12-28 12:12Èç¹ûÄ㻹ûÖÐħ²¨²¡¶¾,ÇëÏȵ½±¾Õ¾http://hi.baidu.com/yifengnum1/b ... a91234349bf7b9.htmlÏÂÔØÄ§²¨µÄ²¡¶¾²¹¶¡,Ô¤·ÀÖж¾.Èç¹û²»ÐÒÄãÒѾ­Öж¾ÁË,ÇëÍùÏ¿´:

ÖØÆô½øÈ밲ȫģʽ£¨¿ª»ú°´f8£©¡£

1. ´ò¿ª×¢²á±í±à¼­Æ÷¡£µã»÷¿ªÊ¼>ÔËÐУ¬ÊäÈëregedit£¬°´enter

2. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷:hkey_local_machine>system>currentcontrolset>services

3. ÈÔÈ»ÔÚ×ó±ßµÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçϼü£º¡°wgareg¡±Ä§²¨£¨worm.mocbot.a£©¡¢¡°wgavm ¡±Ä§²¨±äÖÖb(worm.mocbot.b)

»Ö¸´enabledcomºÍrestrictanonymous×¢²á±íÏîÄ¿

1. ÈÔÈ»ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£º hkey_local_machine>software>microsoft>ole

2. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½ÈçÏÂÏîÄ¿£ºienabledcom = "n"

3. ÓÒ»÷¸ÃÏîĿѡÔñÐÞ¸ÄֵΪ£º enabledcom = "y"

ɾ³ý¹ØÓÚ¹ÜÀí¹²ÏíµÄ×¢²á±íÏîÄ¿

1. ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>system>currentcontrolset> services>lanmanserver>parameters

2. ÔÚ×ó±ßµÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£º

a. autosharewks = "dword:00000000"

b. autoshareserver = "dword:00000000"

3. ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>system>currentcontrolset> services>lanmanworkstation>parameters


4. ÔÚ×ó±ßµÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£º

a. autosharewks = "dword:00000000"

b. autoshareserver = "dword:00000000"

ħ²¨£¨worm.mocbot.a£¬ÓÖ³Æworm_ircbot.jl£©É¾³ýÌí¼Ó»òÕßÐ޸ĵÄ×¢²á±íÏîÄ¿

1. ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>microsoft>security center

2. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½ÏîÄ¿£ºo firewalldisablenotify = "dword:00000001" o antivirusoverride = "dword:00000001" o antivirusdisablenotify = "dword:00000001" o firewalldisableoverride = "dword:00000001"

3. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>policies>microsoft>windowsfirewall>domainprofile

4. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½ÏîÄ¿£ºenablefirewall = "dword:00000000"

5. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>policies>microsoft>windowsfirewall>standardprofile

ħ²¨±äÖÖb(worm.mocbot.b£¬ÓÖ³Æworm_ircbot.jk)ɾ³ýÌí¼Ó»òÕßÐ޸ĵÄ×¢²á±íÏîÄ¿£º

1. ÔÚ×¢²á±í±à¼­Æ÷ÖУ¬ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>microsoft>security center

2. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£º:

antivirusdisablenotify = "dword:00000001"

antivirusoverride = "dword:00000001"

firewalldisablenotify = "dword:00000001"

firewalldisableoverride = "dword:00000001"

3. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>system>currentcontrolset>services>sharedaccess

4. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½ÏîÄ¿£º start = "dword:00000004"

5. ÓÒ»÷¸Ã×¢²á±íÏîÄ¿£¬Ñ¡ÔñÐÞ¸ÄÏîĿֵΪ£ºstart = "dword:00000002"

6. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>policies>microsoft>windowsfirewall>domainprofile

7. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£ºenablefirewall = "dword:00000000"

8. ÔÚ×ó±ßµÄÃæ°åÖУ¬Ë«»÷£ºhkey_local_machine>software>policies>microsoft>windowsfirewall>standardprofile

9. ÔÚÓұߵÄÃæ°åÖУ¬ÕÒµ½²¢É¾³ýÈçÏÂÏîÄ¿£ºenablefirewall = "dword:00000000"

10. ¹Ø±Õ×¢²á±í±à¼­Æ÷

¸½¼Ówindows ne/xpÇå³ý˵Ã÷

ÔËÐÐwindows meºÍxpµÄÓû§±ØÐë½ûÓÃϵͳ»¹Ô­£¬´Ó¶ø¿ÉÒÔ¶ÔÊܸÐȾµÄϵͳ½øÐÐÈ«ÃæÉ¨Ãè¡£ÔËÐÐÆäËûwindows°æ±¾µÄÓû§¿ÉÒÔ²»ÐèÒª´¦ÀíÉÏÃæµÄ¸½¼Ó˵Ã÷¡£

ɱ¶¾¹¤¾ßÍÆ¼ö£ºÊ¹ÓÃÇ÷ÊÆ¿Æ¼¼·À²¡¶¾²úƷɨÃèϵͳ²¢É¾³ýËùÓб»¼ì²âΪħ²¨£¨worm.mocbot.a£¬ÓÖ³Æworm_ircbot.jl£©¡¢Ä§²¨±äÖÖb(worm.mocbot.b£¬ÓÖ³Æworm_ircbot.jk)µÄÎļþ¡£Ç÷ÊÆ¿Æ¼¼µÄÓû§±ØÐëÔÚɨÃèϵͳ֮ǰÏÂÔØ×îв¡¶¾ÂëÎļþ¡£
6Â¥2007-11-27 10:43:58
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

nonglin84

ľ³æ (ÕýʽдÊÖ)

ÕâÊÇתÌù°Ù¶È¿Õ¼äµÄ
7Â¥2007-11-27 10:44:34
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

ququxiao

ÈÙÓþ°æÖ÷ (Ö°Òµ×÷¼Ò)

³æÓï³æÔ¸

ÖîλÔÚУ£¬ÓÐÁ½¸öÎÊÌâÓ¦¸Ã×Ô¼ºÎÊÎÊ£ºµÚÒ»£¬À´´ó¹¤×öʲô£¿µÚ¶þ£¬½«À´±ÏÒµºó×öʲôÑùµÄÈË£¿
8Â¥2007-11-27 10:56:07
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû

surpermen

Òø³æ (ÕýʽдÊÖ)

¡ï
qingfeng2008(½ð±Ò+1,VIP+0):xiexie
ÓÃSRENGɨÃè¸öÈÕÖ¾´«ÉÏÀ´

°ïÄã·ÖÎöÏÂ

SVCHOSTÊÇËÞÖ÷ÀàµÄ³ÌÐò

¹ØÏµºÜ¶àÄ£¿éÀàµÄ³ÌÐòÔËÐе썲»ÖªµÀÕâô˵¶Ô²»¶Ô°¡£¬µ«»ù±¾ÉÏÊÇÕâÑùµÄ£©

»úÆ÷±¾Éí¿ÉÄÜ»¹ÓÐÆäËûµÄ¶«Î÷

ÎÒÊÇÊÖ¹¤²Ù×÷µÄ£¬¾¡¿ÉÄܵļõÉÙ¶Ô»úÆ÷µÄ»¹Ô­»òÊÇ֨װ

ÕâÑùµÄËðʧҲ×îºÃ

Ï£ÍûÄܰïÉÏæ

×£LZÔçÈÕ½â¾öÎÊÌâ
X£­£­ÐÅÐÄ Y£­£­ÓÂÆø Z£­£­ÔðÈÎ
9Â¥2007-11-27 11:12:58
ÒÑÔÄ   »Ø¸´´ËÂ¥   ¹Ø×¢TA ¸øTA·¢ÏûÏ¢ ËÍTAºì»¨ TAµÄ»ØÌû
Ïà¹Ø°æ¿éÌø×ª ÎÒÒª¶©ÔÄÂ¥Ö÷ ѧԱxPNfSR µÄÖ÷Ìâ¸üÐÂ
²»Ó¦Öú È·¶¨»ØÌûÓ¦Öú (×¢Ò⣺ӦÖú²Å¿ÉÄܱ»½±Àø£¬µ«²»ÔÊÐí¹àË®£¬±ØÐëÌîд15¸ö×Ö·ûÒÔÉÏ)
×î¾ßÈËÆøÈÈÌûÍÆ¼ö [²é¿´È«²¿] ×÷Õß »Ø/¿´ ×îºó·¢±í
[¿¼ÑÐ] 308Çóµ÷¼Á +3 īīĮ 2026-03-21 3/150 2026-03-22 16:54 by i_cooler
[¿¼ÑÐ] ÉúÎïѧ071000 329·ÖÇóµ÷¼Á +5 ÎÒ°®ÉúÎïÉúÎﰮΠ2026-03-17 5/250 2026-03-22 16:42 by tcx007
[¿¼ÑÐ] 319Çóµ÷¼Á +4 СÁ¦Æøçæçæ 2026-03-20 4/200 2026-03-22 15:53 by ColorlessPI
[¿¼ÑÐ] 305·ÖÇóµ÷¼Á£¨Ê³Æ·¹¤³Ì£© +4 Sxy112 2026-03-21 6/300 2026-03-22 15:26 by ÎÞи¿É»÷111
[¿¼ÑÐ] Çóµ÷¼Á +5 Zhangbod 2026-03-21 7/350 2026-03-22 13:13 by Zhangbod
[¿¼ÑÐ] ¿¼Ñе÷¼Á +3 ºôºô£¿~+123456 2026-03-21 3/150 2026-03-21 20:04 by Î޼ʵIJÝÔ­
[¿¼ÑÐ] 0703»¯Ñ§297Çóµ÷¼Á +3 Daisy¡î 2026-03-20 3/150 2026-03-21 17:45 by ColorlessPI
[¿¼ÑÐ] 083200ѧ˶321·ÖÒ»Ö¾Ô¸ôßÄÏ´óѧÇóµ÷¼Á +3 innocenceF 2026-03-17 3/150 2026-03-21 02:35 by JourneyLucky
[¿¼ÑÐ] ²ÄÁÏ 336 Çóµ÷¼Á +3 An@. 2026-03-18 4/200 2026-03-21 01:39 by JourneyLucky
[¿¼ÑÐ] ²ÄÁÏר˶ӢһÊý¶þ306 +7 z1z2z3879 2026-03-18 7/350 2026-03-20 23:48 by JourneyLucky
[¿¼ÑÐ] 304Çóµ÷¼Á +7 ˾¿Õ. 2026-03-18 7/350 2026-03-20 23:08 by JourneyLucky
[¿¼ÑÐ] 261ÇóBÇøµ÷¼Á£¬¿ÆÑо­Àú·á¸» +3 Å£Ä̺Üæ 2026-03-20 4/200 2026-03-20 19:34 by JourneyLucky
[¿¼ÑÐ] 085410È˹¤ÖÇÄÜר˶317Çóµ÷¼Á£¨0854¶¼¿ÉÒÔ£© +4 xbxudjdn 2026-03-18 4/200 2026-03-20 09:07 by ²»168
[¿¼ÑÐ] ÉúÎïѧµ÷¼ÁÕÐÈË£¡£¡£¡ +3 ɽº£Ììá° 2026-03-17 4/200 2026-03-19 21:34 by ÔõôÊÍ»³
[¿¼ÑÐ] ²ÄÁÏÓ뻯¹¤Çóµ÷¼Á +7 Ϊѧ666 2026-03-16 7/350 2026-03-19 14:48 by ¾¡Ë´Ò¢1
[¿¼ÑÐ] 286Çóµ÷¼Á +6 lemonzzn 2026-03-16 10/500 2026-03-19 14:31 by lemonzzn
[¿¼ÑÐ] 328Çóµ÷¼Á£¬Ó¢ÓïÁù¼¶551£¬ÓпÆÑо­Àú +4 ÉúÎ﹤³Ìµ÷¼Á 2026-03-16 12/600 2026-03-19 11:10 by ÉúÎ﹤³Ìµ÷¼Á
[¿¼ÑÐ] ²ÄÁϹ¤³Ìר˶µ÷¼Á +5 204818@lcx 2026-03-17 6/300 2026-03-18 22:55 by 204818@lcx
[¿¼ÑÐ] ²ÄÁÏ£¬·ÄÖ¯£¬ÉúÎ0856¡¢0710£©£¬»¯Ñ§ÕÐÉúÀ² +3 Eember. 2026-03-17 9/450 2026-03-18 10:28 by Eember.
[¿¼ÑÐ] 301Çóµ÷¼Á +4 A_JiXing 2026-03-16 4/200 2026-03-17 17:32 by ruiyingmiao
ÐÅÏ¢Ìáʾ
ÇëÌî´¦ÀíÒâ¼û