C�ch di?t virus HackTool.Perl.IrBot.d

Ng�y ph�t hi?n: 05 ? 10 ? 2007 .

Hi?m h?a: Hacker Tool.

Chi ti?t k? thu?t : Ch??ng tr�nh m� ??c n�y l� m?t ti?n �ch ?? hack m�y t�nh. N� l� m?t k?ch b?n Perl. K�ch th??c c?a c�c file nhi?m ??c c� th? bi?n ??i trong kho?ng t? 12KB t?i 69KB.



Ho?t ??ng



?o?n k?ch b?n n�y l� m?t IRC bot ???c s? d?ng ?? t�m ki?m c�c l? h?ng RFI (Remote File Inclusion). T�y thu?c v�o c�c c�u l?nh ???c t?i v?, bot c� th?:



1. X�a s?ch c�c file b?n ghi (log)



2. T�m ki?m c�c site v?i l? h?ng RFI. ?? t�m ki?m m?t site, bot d?a v�o m?t t? kh�a. N� s? s? d?ng t? kh�a v?i c�c d?ch v? t�m ki?m sau:

http://www.google.nl

http://busca.uol.com.br

http://www.alltheweb.com

http://it.ask.com

http://search.aol.com

http://suche.fireball.de

http://search.lycos.com

http://arianna.libero.it

http://search.yahoo.com

http://search.live.com

N?u c�c site t�m ki?m c� ch?a c?m t? "buterfly" v� "uid=" trong ??a ch?, ch??ng tr�nh m� ??c s? t?o m?t request ?? redirect v? ??a ch? link sau:

http://linknet*****.com/source/cmd.txt?

N?i dung c?a file n�y sau ?� s? ch?y tr�n m�y ch? web c?a site v� gi�p ng??i d�ng nguy hi?m t? xa truy c?p v�o m�y ch?.



?o?n k?ch b?n n�y c� ch?a ?o?n sau: Yogya Ceria Scaner Bot Created By eviL-Zone -= evil =-



H??ng d?n g? b?



N?u m�y t�nh c?a b?n kh�ng c� m?t ch??ng tr�nh di?t virus t? ??ng c?p nh?t, ho?c kh�ng c� m?t gi?i ph�p di?t virus to�n v?n, h�y th?c hi?n theo c�c h??ng d?n sau ?? x�a b? m� ??c kh?i m�y t�nh:



1. X�a file ch??ng tr�nh m� ??c g?c tr�n m�y (v? tr� file t�y thu?c v�o c�ch n� x�m nh?p ban ??u v�o m�y t�nh n?n nh�n).



2. C?p nh?t c? s? d? li?u virus v� th?c hi?n qu�t to�n b? m�y t�nh.

Submit Article :- Digg + Technorati + del.icio.us + Stumbleupon + Reddit + BlinkList + Furl + Yahoo+ Blogmarks + Ekstreme Socializer

|