Teach you to quickly identify "Sasser"

May 1 Jing Xian Internet "Sasser (Worm.Sasser)" menacing viruses, the virus is through Microsoft's latest high-risk vulnerability-LSASS vulnerability (MS04-011 bulletin Microsoft) spread, the danger of great current WINDOWS 2000/XP/Server 2003 operating system users such as the existence of the vulnerability, users of these operating systems as long as an Internet, there may be the virus attacks. Teach users how to quickly identify the following "Sasser (Worm.Sasser)" virus.

If the user's computer is one of the following phenomena, then that has been poisoned, they should take immediate measures to eliminate the virus.

First, a system error dialog box appears

Attack of the user, if a virus attack fails, the user's computer will appear LSA Shell service exceptions box, and then restart the computer after a minute there the "System Shutdown" box.



Second, a corresponding record in the system log

If the user can not determine whether there had their own computer box above exception or system reboot prompt, you can also view the system log of the way to ascertain whether the poisoning. Method is to run the Event Viewer program, see which system log, if logging as shown below, the proof has been poisoned.



Third, the system resources are a large number of occupation

Virus A successful attack will take up a lot of system resources, so that 100% CPU utilization, appears the phenomenon of the computer running unusually slow.

Fourth, there is named in memory of the process avserve

Virus A successful attack will generate in memory process called avserve.exe, users can use Ctrl + Shift + Esc approach called "Task Manager" and then see if there is a memory in the process of the virus.

5, appears in the system directory file named avserve.exe virus

Virus if the attack is successful, the system installation directory (default is C: WINNT) generated under a virus file named avserve.exe.

6, the virus appears in the registry key

Virus A successful attack would create a registry entry HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun virus key: "avserve.exe" = "% WINDOWS% avserve.exe".






Recommended links:



Convert Flv To Avi



FTP Site Preferences



ps3 FORMAT



Premier XML Or CSS Tools



Yunjie: Mr. Chen in The "correction"?



Audio CD Players REPORT



Popped into the home appliance industry with high black horse



Comment Shell Tools



Convert Dvd To Wmv



Easy to change Driving



C + + Programmers To Easily Commit The Error Of 10 C #



CMM KPA and KP in the distribution of statistics



QUICKTIME to avi



Spring Independent WAP wait policy



China's Largest Drilling Company Defectors Brush Out Of Legal Counsel, The Credit Risk Of Specul

Alert: New worm Jing Xian, suppose you code the deal is off

This is a new worm attack, the worm attacks the system NT/2000 platform port 445 by way of exhaustive detection of an administrator password, and cloned into a backdoor program makes the security of the machine down to 0. Remind you, must give their super user to set a safe, strong passwords.

The following is a preliminary analysis of the virus:

Virus Name: Worm.DvLdr

Virus type: PE worm

Mode of transmission: 445 port to connect an exhaustive exploration crack passwords

About the virus: the virus in the body, including a number of executable files. The main program for DvLdr32.exe, prepared for the VC + +6 and using aspack compressed. Virus comes with two command-line tool, respectively psexesvc and Remote process launcher, both the normal web publishing tools sysinternals. Accompanied with an installation package, is responsible for the attack succeeds, the host machine to install VNC remote control tool.

The worm runs, randomly select two IP segment, connect the other 445 port, the port for the Samba and NT systems as file sharing and open ports. If the worm successfully connect to this port, use a dictionary with their exhaustive probe each other's administrator user password, once the successful detection of the other super-user password, then copy itself into the system. Registration registry HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

Add three keys: "TaskMan" = "% 1Fontsrundll32.exe"; "Explorer" = "% 1Fontsexplorer.exe"; "messnger" = "% 1system32Dvldr32.exe". Where% 1 is being attacked machine WinNT directory. Explorer.exe for the VNC own management tools. And cloned into the VNC remote control tool to attack the system, also modified the VNC registry configuration, making VNC server icon does not appear in the system tray.

Treatment: From the above process, the system will be attacked by infection depends largely on whether the worm Aministrator password dictionary list. If the worm does not get super user's password, then the follow-up actions are impossible to carry out a series of infections, so to remind the general manager of the Administrator must set a strong password.

銆??濡傛灉涓嶅垢宸茬粡琚爼铏劅鏌擄紝閭ｄ箞闄や簡鍙婃椂鏇存敼瀵嗙爜锛岃繕闇?缁撴潫鎺夋锠曡櫕鐨勮繘绋嬶紝娓呴櫎瀹冩墍鍋氱殑涓?郴鍒椾慨鏀癸細

銆??棣栧厛浣跨敤杩涚▼绠＄悊鍣ㄧ粨鏉熸帀dvldr32.exe杩涚▼銆傞噸鏂板惎鍔ㄧ郴缁燂紝纭娌℃湁drldr32.exe杩欎釜杩涚▼锛岀劧鍚庡垹闄ゆ枃浠讹細
銆??锛匴indir锛匜ontsrundll32.exe
銆??%WINDIR锛匜ontsexplorer.exe
銆??%WINDIR锛匜ontsomnithread_rt.dll
銆??%WINDIR锛匜ontsVNCHooks.dll
銆??%SYSTEMDIR%dvldr32.exe
銆??锛匰YSTEMDIR%cygwin1.dll
銆??%STARTMENU%ProgramsStartupINST.exe

銆??娓呴櫎娉ㄥ唽琛ㄩ」鐩細

銆??鍒犻櫎涓婚敭锛欻KEY_CURRENT_USERSoftwareORL

銆??鍒犻櫎HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun涓嬬殑涓夐」閿?锛?br />
銆??"TaskMan"="锛?Fontsrundll32.exe"
銆??"Explorer"="锛?Fontsexplorer.exe"
銆??"messnger"="锛?system32Dvldr32.exe"






相关链接:



Video format for ps3



Online video convergence can watch movies without having to download



Lists System Maintenance



Helpdesk And Remote PC Shop



avi to MP4 converter free download



mp3 to m4a CONVERTER free



Vacations MP4 Converter



321 DVD To IPod PSP Ripper



Top Geography Education



reviews Firewall And Proxy Servers



Mr. Chen will be back in the more TERRIBLE



Photoshop effect of manufacturing flames SOAR



Converter Mp4 To Avi



e-cology in the pan of a micro-series



Value DVD to Zune Converter



Step by step with ME to learn X-Spaces personal space template changes



MP3 M3U To ID3

Vacations DVD to Pocket PC

Vacations DVD to Pocket PC is a professional video converter to convert DVD to Pocket PC, and convert almost all popular video/movie formats to Pocket PC MP4 format. The output iPhone MP4 video files can be played on your Pocket PC. All popular video/movie formats are supported, including AVI, MPEG/MPG/DAT, WMV, ASF, MP4, M4V, 3GP, 3G2, H264, MPEG4, AVC, MOV, QT, DivX, XviD, VOB, FLV, etc. The amazing output quality with super fast conversion speed is brough you by the built-in power MPEG4 encoder. All the output iPhone MP4 videos fit your Pocket PC.



Recommand Link:



PICKED Audio Speech



Avi converter



convert avi to wav



Avi to 3gp converter free download



Youtube Movie to WMV Application



Ever M4P MP3 to MPC Backup



CD-R WAVE to Midi



Picked XML Or CSS Tools



X-Cloner DVD To 3GP



Review Automation Tools



Digital CD M3U RM To AAC Recorder



Professional WMV to DVD FLV



Daniusoft Video to BlackBerry Converter



OJOsoft MP4 To MP3 Converter



Mpg to dat



AllRipper DVD Editor



Youtube Movie to Wii Tools

Explosion DVD to PSP

Explosion DVD to PSP is a professional DVD movie to PSP video converter software. Explosion DVD to PSP directly converts DVD movies to your PSP. All you need do is to connect PSP to your PC and start Super DVD to PSP Converter. When the conversion is completed. Explosion DVD to PSP is an innovative Windows application that transcodes your favorite DVD movies to SONY PSP directly. You can easily convert both PAL/NTSC DVDs for optimized video playback on PSP. Integrated world-class MPEG4 encoder make it possible to transcode whole DVD disc with the time half of playback time of DVD. You can select any audio track, subtitle, chapters of the DVD as you want.



Recommand Link:



Bliss MP3 WAVE RA to AMR Ripper



iSofter DVD Ripper Platinum Pro



Eztoo-DVD-Ripper



Storage Active X



Youtube FLV to Blackberry Utility



Professional DVD Cloner



Best Animation Tools



Youtube Movie To 3GP Plus



Professional CD WAV AMR to MPC Cloner



Real Player To H.264/avc



Christmasgift DVD to MPEG



HD to iPod Nano Conversion tool



video to SONY NWZ-E436FPNK converter



Basic Or VB Or VB DOTNET comments

WorldCup AVI to MP4

WorldCup AVI to MP4 is a best video and movie converter to MP4 Movie software! This product offers convert all popular formats to iPod, PSP, Zune, iPhone, MP4 video/ movie, Easy Convert DVD, VCD, SVCD, AVI, MPEG, WMV, MOV, MP4, RM, RMVB, DivX, ASF, VOB, 3GP and etc. WorldCup AVI to MP4 helps you watch your music videos and movies on your iPod, PSP, Zune, iPhone. In addition, you can also extracting audio from movie or music video and converting to iPod supported MP3 file format! WorldCup AVI to MP4 is the fastest Rip DVD movie to iPod, PSP, Zune, iPhone, MP4 video, you can convert almost all kinds of AVI to MP44 format. Its conversion speed is far faster than real-time, converting one DVD movie only takes half an hour in some high-end computers. WorldCup MP4 Suite supports single-step conversion of DVD video into iPhone-ready MPEG-4 format while some other soft wares need two steps which wastes unnecessary time.



Recommand Link:



Tansee iPod music to computer 3.61



Computer Education INFOMATION



Youtube to Xbox 360 Suite



AC3 to WAV Studio



Lohan DVD to PDA



WorldCup DVD to FLV



Digital CDA Audio To WAVE Player



Review ASP And PHP



wcf restful service with Binarymessaginencoding



Youtube Movie to EPOC Online



YOUTUBE Movie to Xbox Deluxe



Evaluate Web Servers



NewLive All To Real Converter Pro

Explosion DVD Creator

Explosion DVD Creator is an easy-to-use and high speed All-in-One DVD creator and DVD burner. It can converts ALL formats of video files directly to DVD disk, including DivX, Xvid, AVI, MPEG, WMV, QuickTime, Real Video format, etc. With only a few clicks, you can convert your internet video collection to a DVD R/RW disk and then replay your collection on your home DVD player/car DVD player. Share your collection with your family, your friends on TV. It supports both NTSC and PAL TV standards. It supports both 4:3 TV and 16:9 widescreen TV. It already includes DVD encoder and DVD burner. You don't need any other software to make it work. The copied disc works well with most DVD player, being completely same as the DVD movie you bought. Now you can enjoy Hollywood film at home now!



Recommand Link:



Youtube FLV To PDA Top Rated



EVALUATE Animation Tools



Games Simulation Guide



PeonySoft WAV Converter



Youtube Video Converter + Player Today



Storage Browsers



YOUTUBE to QuickTime Today



LasVegas Flash to Mobile



best UTILITY software review



X-Cloner Flash to PSP



4Musics Free WMV Converter



OtsAV Free



Apple DVD-Audio MP2 AAC To ID3 Ripping



Winner Video Splitter



US-State 3GP 3GP2 Convert



A V S - AUDIO Tools

WorldCup WMV Converter

WorldCup WMV Converter fast convert WMV files to all popular video formats such as DVD, VCD, SVCD, AVI, MPEG, WMV, DivX, RM, MOV, MP4, 3GP, 3G2, Xvid, ASF, etc. easily, and convert DVD to audio formats including MP3, WAV, WMA, AAC, AC3, M4A, MP2, OGG, etc. It can support many personal multimedia devices such as PSP, iPod, Zune, iPhone, PDA and MP4 player.

WorldCup WMV Converter is powerful, easy to use DVD to WMV converter and DVD to WMA converter software which helps you rip and convert DVD to WMV video file formats or extract to WMA audio file formats with excellent quality.



Recommand Link:



Immedirate



贤科的家园



Open PDA Converter



Happiness AAC Audio to VQF EDITING



葛的家园



Ever CD M4P Midi to RA Creator



Application software download site



X-Cloner DivX Converter



Cloysoft Ultimate DVD Converter



Digital AC3 CD to VQF Copier



WorldCup DVD to iPod



我的乐园



MP2 To MP3 Copier



Andromeda Hyper iPhone Converter



Wellsoft ULTIMATE Video Converter



Happiness DVD to DivX