×

Loading...
Ad by
  • 予人玫瑰,手有余香:加拿大新天地工作移民诚聘求职顾问&行业导师!
Ad by
  • 予人玫瑰,手有余香:加拿大新天地工作移民诚聘求职顾问&行业导师!

Anybody knows any JAVA Virus? Why viruses love Microsoft so much?

本文发表在 rolia.net 枫下论坛搜狐IT  2002-03-04 10:03:50
  17岁的女黑客Gigabyte/Metaphase,使用C#语言写出了第一个真正针对“微软.N
et”的病毒,这位美媚在黑客界受到“广泛的赞赏”。
  这种C#病毒被反病毒公司命名为W32/Sharpei@MM,又被称Sharpei,它包含三个部分
:感染程序,邮件发送与处理程序,以及 .NET组件等。
  电脑安全专家称,该病毒不会破坏被感染者的电脑文件系统,但是它可以制造并发
送大量带病毒的邮件,让用户感到十分不便。
  该病毒的主题是: "Important: Windows update"
  正文是:Hey, at work we are applying this update because it makes Window
s over 50% faster and more secure. I thought I should forward it as you may
like it.
  附件名是: MS02-010.exe
  当 MS02-010.exe被打开并执行时,该病毒首先检查电脑中是否安装了微软的 .NET
组件。如果安装了.Net组件,它把自己拷贝到C:\MS02-010.exe,并在C:\windows和Pro
gramfiles文件中建立隐藏的文件夹;然后使用 "sharp.vbs"向 Outlook或Outlook Exp
ress 地址簿中所有收信人发送带病毒邮件,最后它把所有已发送的病毒邮件全部删除,
同时删除病毒程序"sharp.vbs"。如果电脑系统中没有安装.Net组件,该病毒仅执行"Sh
arp.vbs",不会建立任何文件夹。
  据反病毒公司AVERT介绍,该病毒的作者是荷兰的一位女孩子。“据我们所知,她是
荷兰唯一写病毒的女孩子。” AVERT公司副主席Vinny Galgullotto说,“她经常写一些
VB Script病毒,从中获得非常幼稚的乐趣。但是这次出现的Sharpei病毒中又多了一些
新的东西。”
  据悉,Gigabyte/Metaphase还曾写过Scrambler、 Crakly 以及Buffy等病毒。但是
安全专家称,这些病毒的危险等级比较低。(阿东)更多精彩文章及讨论,请光临枫下论坛 rolia.net
Report

Replies, comments and Discussions:

  • 工作学习 / IT杂谈 / Anybody knows any JAVA Virus? Why viruses love Microsoft so much?
    本文发表在 rolia.net 枫下论坛搜狐IT  2002-03-04 10:03:50
      17岁的女黑客Gigabyte/Metaphase,使用C#语言写出了第一个真正针对“微软.N
    et”的病毒,这位美媚在黑客界受到“广泛的赞赏”。
      这种C#病毒被反病毒公司命名为W32/Sharpei@MM,又被称Sharpei,它包含三个部分
    :感染程序,邮件发送与处理程序,以及 .NET组件等。
      电脑安全专家称,该病毒不会破坏被感染者的电脑文件系统,但是它可以制造并发
    送大量带病毒的邮件,让用户感到十分不便。
      该病毒的主题是: "Important: Windows update"
      正文是:Hey, at work we are applying this update because it makes Window
    s over 50% faster and more secure. I thought I should forward it as you may
    like it.
      附件名是: MS02-010.exe
      当 MS02-010.exe被打开并执行时,该病毒首先检查电脑中是否安装了微软的 .NET
    组件。如果安装了.Net组件,它把自己拷贝到C:\MS02-010.exe,并在C:\windows和Pro
    gramfiles文件中建立隐藏的文件夹;然后使用 "sharp.vbs"向 Outlook或Outlook Exp
    ress 地址簿中所有收信人发送带病毒邮件,最后它把所有已发送的病毒邮件全部删除,
    同时删除病毒程序"sharp.vbs"。如果电脑系统中没有安装.Net组件,该病毒仅执行"Sh
    arp.vbs",不会建立任何文件夹。
      据反病毒公司AVERT介绍,该病毒的作者是荷兰的一位女孩子。“据我们所知,她是
    荷兰唯一写病毒的女孩子。” AVERT公司副主席Vinny Galgullotto说,“她经常写一些
    VB Script病毒,从中获得非常幼稚的乐趣。但是这次出现的Sharpei病毒中又多了一些
    新的东西。”
      据悉,Gigabyte/Metaphase还曾写过Scrambler、 Crakly 以及Buffy等病毒。但是
    安全专家称,这些病毒的危险等级比较低。(阿东)更多精彩文章及讨论,请光临枫下论坛 rolia.net
    • Java's built-in mechanism makes virus-writting very hard, thus lose some flexibility (correct me if I am wrong), such as you cannot control Excel from Outlook or what ever. However, It is not impossible-->check URL
      • Thank you for refering the article.
    • 树大招风
      • Maybe not only that. one possible reason is: Java is for business field; while Microsoft is for consumer's market.
        Business application requires high security standard, Sun did a lot of work on this point.

        For consumer's market, end users need easy to use GUI and convenient functionalities. Seems it's quite difficult to compromise these two features with security.

        If a company uses Microsoft's product for business, it needs to spend a big deal of extra money on the security aspect.
        • "If a company uses Microsoft's product for business, it needs to spend a big deal of extra money on the security aspect. " -->What is this conclution based on? Any number or hyperlink?
          We can argue so called "mission critical" application are always based on UNIX platform.

          e.g. NASDAQ Transaction Centre/ TD Bank infrastructure/ Imperil Oil Inc./ BOEING : their backbone infrastructure are heavily based on NT or W2K system.

          WINTER OLYMPIC GAME 2002, There are 400s NT/SQL server(Kernal Game system) + 150s Sun Box , they built the final results together.

          Finally, My previous company using 20s Servers(SQL+Exchange)+400s desktops+100s laptops infrasctructure based on pure NT/2000 platform. I take care of them, I didn't find an extra expense on security part, Just very standard configuration:(We using CheckPoint Firewall (NT verstion)+Norton Enterprise AntiVirus Server+Norton Enterprise Antivirus Client.).

          CheckPoint is an industry standard.
          Norton AntiVirus Server cost us 500$, Clients included unlimited licenses.
          • Thank you for your information.
            I don't have solid evident to support my point, in fact. :-)

            Based on my own experience, NT/W2K are too vulnerable to virus. One affection costed the whole IT section, about 50 persons, 3 days' un-productivity. We installed the anti-virus system, but who knows next time when a new virus would come.