What ten shock waves?

Chinese name of virus: shock wave (including many variants)

Virus type: worm virus

Attacking objects: Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003, etc.

Transmission route: "Shockwave" is a worm with strong destructive power that randomly spreads by using the RPC (Remote Procedure Call, a communication protocol that a program can use to request services from another computer in the network) vulnerability of Windows system. It doesn't need to be transmitted by email (or attachment), so it is more hidden and less noticeable. It uses IP scanning technology to find computers with Windows 2000/XP/2003 operating system installed on the network. Once it finds a vulnerable computer, it will use the vulnerability in the RPC buffer of DCOM (a protocol that enables software components to communicate directly through the network) to implant viruses to control and attack the system.

Poisoning symptoms:

1. The system resources are tight, and the running speed of the application is abnormal;

2. The network speed is slow, and the "DNS" and "Ⅱ S" services are illegally rejected, so that users cannot browse the web or send and receive emails normally;

3. Cannot copy and paste;

4.Word, Excel, PowerPoint and other software can't run normally;

5. The system restarts for no reason, or automatically restarts after a warning prompt of "System Shutdown" pops up.

Emergency measures:

If you accidentally catch a virus, you can use the following steps to kill it:

1. Close the system shutdown prompt box.

When the shutdown prompt appears, enter "Shutdown -a" in "Start → Run" to cancel the "System Shutdown" prompt box. This method ensures that users have enough time to download patches.

2. download the Shockwave patch

Windows 2000 Simplified Chinese Patch Download Address:&; familyid = c8b8a 846-f 54 1-4c 15-8c9f-22035449 1 17

Windows XP Simplified Chinese Version (32-bit) Patch Download Address:

& ampfamilyid = 2354406 c-c5b 6-44ac-9532-3de 40 f 69 c 074

Windows Server 2003 Chinese version (32-bit)) patch download address:

& ampfamilyid = f 8e 0 ff 3a-9f4c-406 1-9009-3a 2 12458 e92e

When downloading patches, it should be noted that different operating systems and different versions have different patches, so don't confuse them. When installing the patch, the pirated Windows XP system may not be installed normally, and the Windows 2000 operating system must be upgraded to SP2 or higher before installation.

Windows2000 Service Pack 4 simplified Chinese version download address:. Extensions of executable programs

3. Download the killing tool

The "worm" rising in Ran Ran. Blaster "virus killing tool download address:/zsgj/ravzerg.exe.

Jinshan worm. Blaster "Download address of virus killing tools: fg.exe", and open the "Component Services" window; Click Component Services under the root node of the console, and then open the computer subfolder; Then right-click my computer and select Properties (for local computer), or right-click the computer folder, select New → Computer, enter the computer name, right-click the computer name and select Properties (for remote computer); Then select the Default Properties tab and uncheck the Enable Distributed COM on this computer check box.

Tip: Disabling DCOM will prevent all communication between objects on this computer and objects on other computers. Please choose carefully.

Some precautions:

1. Install professional firewall and antivirus software, activate "real-time protection" function, and update virus database frequently;

2. Activate the automatic update function of the system, download and install the latest security patches in time, and plan ahead;

3. Optimize the parameters related to system security, modify some default values, and close or delete unnecessary services in the system;

4. Develop a good concept of network security, don't visit unhealthy websites, don't open emails and attachments of unknown origin at will, and don't execute non-antivirus software downloaded from the Internet;

5. Try to use complicated passwords to improve the safety factor of computers;

6. When you find a virus, you should quickly disconnect the network and isolate the infected computer.