注册
登录
| 关键词： 文森特 赛门铁克 Downadup Symantec more Weafer Conficker 病毒 variant machines |
该公司说，Conficker蠕虫的第三个版本。新变种感染的计算机提供更强大的反禁用反病毒软件和分析工具，包括其他行为。 新变种Conficker ，也被称为Downadup ，是一个模块化的组成部分来感染机器。这种变异并没有自我复制和行为，似乎更像是木马病毒，赛门铁克安全响应中心副总裁Vincent Weafer表示。 文森特说“把它的模块，较快的更新，更有力地保护自” 变异被发现在赛门铁克的蜜罐的W32平台下的Downadup.C，其他在调查之中。预计赛门铁克不久确定附加功能文森特补充说，赛门铁克公司目前还没有看到W32.Downadup.C的客户网络。 早期版本的蠕虫病毒也试图禁用防病毒软件，但第三个版本中的设计主要是为了提供更多的保护行动，感染基于Windows的机器，以便他们能够更好地保护自己的反病毒软件和其他消除方法。 “他更具侵略性，它的服务更多”说文森特。 原文： Security company Symantec has spotted a third version of the Conficker worm. The company said that the new variant gives infected machines more powerful instructions to disable anti-virus software and analysis tools, among other actions. The new variant of Conficker, also known as Downadup, is a modular component for machines currently infected. This variant is not attempting to self-replicate and appears to behave more like a Trojan than a worm, said Vincent Weafer, vice president of Symantec Security Response. "Think of it as an updated module that's more aggressive, more robust in defending itself," Weafer said. The W32 Downadup.C variant was discovered in a Symantec honeypot and is still under investigation. Symantec expects to identify additional capabilities shortly, said Weafer, adding that Symantec has not yet seen W32.Downadup.C in customer networks. Earlier versions of the worm did attempt to disable anti-virus software, but the third version represented in has been designed mainly to provide more protective actions to infected Windows-based machines so they can better defend themselves from anti-virus software and other eradication methods. "It's more aggressive, it has more services," says Weafer. 黑客基地译自：http://www.techworld.com/security/news/index.cfm?RSS&NewsID=112347 |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
