What ten shock waves?

Chinese name of virus: shock wave (including many varieties)

Virus type: worm virus

Attacking objects: Windows NT 4.0, Windows 2000, Windows XP, Windows Server 2003, etc.

Transmission route: "Shock Wave" is a worm virus with strong destructive power that spreads randomly by taking advantage of RPC (Remote Procedure Call, a communication protocol that a program can use to request services from another computer in the network) vulnerability of Windows system. It doesn't need to be spread by mail (or attachment), so it is more hidden and less noticeable. It uses IP scanning technology to find computers running Windows 2000/XP/2003 operating system on the network. Once it finds a computer with vulnerabilities, it will use the vulnerabilities in the RPC buffer of DCOM (a protocol that enables software components to communicate directly through the network) to implant viruses to control and attack the system.

Poisoning symptoms:

1. The system resources are tight, and the running speed of the application is abnormal;

2. The network speed is slow, and the "DNS" and "Ⅱ S" services are illegally refused, so that users cannot browse the web or send and receive emails normally;

3. Cannot copy and paste;

4.Word, Excel, PowerPoint and other software can't run normally;

5. The system restarts for no reason, or automatically restarts after a warning prompt of "System Shutdown" pops up.

Emergency measures:

If you accidentally catch a virus, you can use the following steps to kill it:

1. Close the system shutdown prompt box.

When the shutdown prompt appears, enter "shutdown -a" in "Start → Run" to cancel the prompt box of "System Shutdown". This method can ensure that users have enough time to download patches.

2. download the patch of Shockwave

Windows 2000 Simplified Chinese Patch Download Address:&; familyid = c8b 8a 846-f 54 1-4c 15-8c9f-220354449 1 17

Windows XP Simplified Chinese Version (32-bit) Patch Download Address:

& ampfamilyid = 2354406 c-c5b 6-44ac-9532-3 de 40 f 69 c 074

Windows Server 2003 Chinese version (32-bit)) patch download address:

& ampfamilyid = f8e 0 ff 3a-9f4c-406 1-9009-3a 2 12458 e92e

When downloading patches, it should be noted that different operating systems and different versions have different patches, so don't confuse them. When installing this patch, the pirated Windows XP system may not be installed normally, and the Windows 2000 operating system must be upgraded to SP2 or higher before installation.

Windows2000 Service Pack 4 simplified Chinese version download address:. Extensions of executable programs

3. Download the killing tool

Rising worm. Blaster "virus killing tool download address:/zsgj/ravzerg.exe.

Jinshan "worm. Blaster "Download address of virus killing tools: fg.exe", and open the "Component Services" window; Click Component Services under the root node of the console, and then open the computer subfolder. Then right-click my computer and select Properties (local computer), or right-click the computer folder, select New → Computer, enter the computer name, right-click the computer name and select Properties (remote computer); Then select the Default Properties tab and uncheck the Enable Distributed COM on this computer check box.

Tip: Disabling DCOM will prevent all communication between objects on this computer and objects on other computers. Please choose carefully.

Some precautions:

1. Install professional firewall and antivirus software, activate "real-time protection" function, and update virus database frequently;

2. Activate the automatic update function of the system, download and install the latest security patches in time, and plan ahead;

3. Optimize the parameters related to system security, modify some default values, and close or delete unnecessary services in the system;

4. Develop a good concept of network security, do not visit unhealthy websites, do not open emails and attachments of unknown origin at will, and do not execute non-antivirus software downloaded from the Internet;

5. Try to use complicated passwords to improve the safety factor of computers;

6. When a virus is found, you should quickly disconnect the network and isolate the infected computer.