计算机病毒基础知识资料.ppt

Backdoors DDoS Programs 发展情况 – 黑客行为的病毒 Boot Viruses Virus Characteristics Modern Viruses CODERED.A Infects vulnerable IIS Web servers Propagates through IIS Web servers Exists in memory alone, not in file PE_NIMDA.A Propagates through email Propagates through network shared drives Propagates through IIS web servers Propagates through file infection CODERED.A PE_NIMDA.A WORM_KILONC.A（杀手13） Macro viruses in Excel documents / spreadsheets When Microsoft Excel is loaded, it opens all the files in the startup folder. Upon opening the files, it also executes the macros in them. An Excel macro virus customarily drops a copy of the infected spreadsheet / document in the startup (XLSTART) folder to allow itself to propagate and infect in the succeeding sessions of Excel. Chapter 3: Different Types of Computer Viruses Macro viruses in other file types Macro viruses are also found in other file types aside from MS Word and MS Excel. They have been found in MS Powerpoint files, MS Access files, CorelDraw files and Visio files, among others. If the macro language used in an application is powerful enough to manipulate files and if the file format supports the inclusion of both data and macro codes in the same file, then macro viruses are possible for the particular file type. Currently, documents that support the Visual Basic for Applications (VBA) macro language are susceptible to viruses. Since VBA is a subset of the Visual Basic language, which is widely used by programmers, it is relatively easy to write malicious code in them, as compared to the other types of malware. Other popular script languages available are LotusScript, used in AmiPro and WordPro files, and CorelScript, used in CorelDraw files. Some macro viruses are able to cross to other applications. There are known macro viruses that are able to infect Word documents, Excel spreadsheets, and Powerpoint presentations! Chapter 3: Different Types of Computer Viruses Macro viruses and their symptoms As