- °Ô½Ã¹°Á¦¸ñ : »ç½ê¸£(Sasser.worm) Á¶Ä¡¹æ¹ý |
3,353 - Á¶È¸ |
- ÀÛ¼ºÀÚÀ̸§ : ¼ÀƲ°ú»ç¶÷µé
|
2004/05/03 - µî·Ï |
- ÇØ°á ¹æ¹ý
1. A. wmiprvse32 ¶Ç´Â wmiprsvc(wmip µÚ·Î´Â ¹®ÀÚ°¡ º¯Á¶µÉ ¼ö ÀÖÀ½.)
- OS Ãë¾àÁ¡ ÆÐÄ¡¸¦ ÇÏÁö ¾Ê¾Æ ¹ß»ýÇÏ´Â ¹®Á¦·Î¼ CPU¸¦ 100% »ç¿ëÇÏ¿© ÄÄÇ»ÅÍ »ç¿ëÀ» ºÒ°¡´ÉÇÏ°Ô ÇÕ´Ï´Ù.
°¡. OS Ãë¾àÁ¡ ÆÐÄ¡ ÆÄÀÏÀ» ´Ù¿î·Îµå ¹Þ¾Æ ÀúÀåÇÑ´Ù.
³ª. ³×Æ®¿öÅ© ÄÉÀ̺íÀ» »Ì´Â´Ù.(³×Æ®¿öÅ© »ç¿ëÁß´Ü)
´Ù. "½ÃÀÛ->½ÇÇà->¸í·É¿¡¼ "msconfig"¸¦ ±âÀçÇÏ¿© "È®ÀÎ"À» ´·¯ ½ÇÇà. ¿ìÃøÀÇ "½ÃÀÛÇÁ·Î±×·¥"¿¡¼ wmiprvse32.exe¶Ç´Â wmiprsvc.exe¸¦ ¼±ÅÃ ÇØÁ¦ÇÑ´Ù.
¶ó. À©µµ¿ì¸¦ Àç½ÃÀÛÇÑ´Ù.
¸¶. c:windowssystem32 Æú´õ³»¿¡ Á¸ÀçÇÏ´Â wmiprvse32.exe ¶Ç´Â wmiprsvc.exe¸¦ »èÁ¦ÇÑ´Ù.
»ç. ÃֽйÙÀÌ·¯½º ¹é½ÅÀ» ¾÷µ¥ÀÌÆ® ÇÏ¿© ¹ÙÀÌ·¯½º¸¦ °Ë»çÇÑ´Ù.(÷ºÎÆÄÀÏ ÂüÁ¶)
2. LSASS
- OS Ãë¾àÁ¡ ÆÐÄ¡¸¦ ´Ù¿î¹ÞÁö ¾Ê¾Æ ¹ß»ýÇÏ´Â ¹®Á¦·Î¼, "lsass ¼ºñ½º ¿À·ù·Î ÀÎÇÑ ½Ã½ºÅÛ Àç½ÃÀÛ"¸Þ¼¼Áö ¹ß»ýÀ¸·Î ÄÄÇ»ÅÍ »ç¿ëÀ» ºÒ°¡´ÉÇϰÔÇÕ´Ï´Ù.
°¡. OS Ãë¾àÁ¡ ÆÐÄ¡ ÆÄÀÏÀ» ´Ù¿î·Îµå ¹Þ¾Æ ÀúÀåÇÑ´Ù.
³ª. ³×Æ®¿öÅ© ÄÉÀ̺íÀ» »Ì´Â´Ù.(³×Æ®¿öÅ© »ç¿ë Áß´Ü)
´Ù. OS Ãë¾àÁ¡ ÆÐÄ¡ ÆÄÀÏÀ» Àû¿ëÇϽʽÿÀ
- OS Ãë¾àÁ¡ ÆÐÄ¡ÆÄÀÏ
ÇÑ±Û WIN XP
WindowsXP-KB828741-x86-KOR
WindowsXP-KB835732-x86-KOR
WindowsXP-KB837001-x86-KOR
¿µ¹® WIN XP
WindowsXP-KB828741-x86-ENU
WindowsXP-KB835732-x86-ENU
WindowsXP-KB837001-x86-ENU
ÇÑ±Û WIN2000
Windows2000-KB828741-x86-KOR
Windows2000-KB835732-x86-KOR
Windows2000-KB837001-x86-KOR
ÇÑ±Û WIN2003
Windows2000-KB828741-x86-ENU
Windows2000-KB835732-x86-ENU
Windows2000-KB837001-x86-ENU |
|
|