恶意代码.ppt

Slammer: prison * * * * * * * * * * * * * * * * * Trojan.Dropper为特洛伊病毒危害性：中等危害病毒特性：它会显示伪装的“被感染”信息，并尝试下载一个假的“间谍软件”扫描器；伪装的“被感染”信息怂恿用户下载这个软件。它是大小为39,936字节的Win32可运行程序，并能够被Win32.DlMersting 病毒变体下载。危害:监听HTTP请求\修改系统设置\使系统修复功能失效\下载并运行任意文件清除： KILL安全胄甲Vet 11.x/9265版本可检测/清除此病毒。 * * * * * Restarting in Safe Mode ? On Windows 95 Restart your computer. Press F8 at the Starting Windows 95 message. Choose Safe Mode from the Windows 95 Startup Menu then press Enter. ? On Windows 98 and ME Restart your computer. Press the CTRL key until the Windows 98 startup menu appears.Choose the Safe Mode option then press Enter. ? On Windows NT (VGA mode) Click StartSettingsControl Panel. Double-click the System icon. Click the Startup/Shutdown tab. Set the Show List field to 10 seconds and click OK to save this change. Shut down and restart your computer. Select VGA mode from the startup menu. ? On Windows 2000 Restart your computer.Press the F8 key, when you see the Starting Windows bar at the bottom of the screen.Choose the Safe Mode option from the Windows Advanced Options Menu then press Enter. ? On Windows XP Restart your computer.Press F8 after the Power-On Self Test (POST) is done. If the Windows Advanced Options Menu does not appear, try restarting and then pressing F8 several times after the POST screen. Choose the Safe Mode option from the Windows Advanced Options Menu then press Enter. Enabling Show All Files This procedure allows you to access hidden malware files using Windows Explorer. ? On Windows 95, 98, and NT Open Windows Explorer. Right-click Start then click Explore. On the View menu, click Options or Folders Options. Click the View tab. Select Show all files, then click OK. ? On Windows ME, 2000, and XP Open Windows Explorer. Right-click Start then click Explore. On the Tools menu, click Folder Options. Click the View tab. Select Show hidden files and folders, then click OK. Removing Malware Entries from the Registry Removing autostart en