[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4688: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4690: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4691: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4692: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
 Samedisk • 檢視主題 - 提供一個 autorun.inf 毒的偵測法

提供一個 autorun.inf 毒的偵測法

關於本論壇的任何建議與疑問,歡迎在此提出~

提供一個 autorun.inf 毒的偵測法

文章jimchou » 週日 5月 20, 2007 3:32 pm

先前使用你們的ROMTER不能中毒
這裡提供一個偵測法
基於尼可拉的方法改良
在根目錄建一個
AUTORUN.INF

INF內容可以是

[AUTORUN]
OPEN=NOTEPAD.EXE README.TXT

這樣就不用常常去看根目錄
開機時或點右鍵沒出README就是中了

資安論壇
有關隨身碟 autorun.inf 觀念釐清問題

網路流傳的隨身碟防毒招數有效嗎?
jimchou
 
文章: 11
註冊時間: 週二 12月 21, 2010 5:16 am

Re: 提供一個 autorun.inf 毒的偵測法

文章eject » 週四 4月 17, 2008 10:30 pm

祥大

這個方法不一定能用
因為防毒會砍
有EXE.DLL.COM... 的Autorun

而且因為OS版本不同
磁碟的動作也不同
_________________
Samedisk <- Engineers' Better Tomorrow !
USB SPI, NOR, NAND, I/O, Emulator, Romter, ICE
產品網址
---------------------------------------------
我的部落格
eject
 
文章: 140
註冊時間: 週二 12月 21, 2010 4:10 am

Re: 提供一個 autorun.inf 毒的偵測法

文章eject » 週日 4月 20, 2008 6:13 pm

真正要防止AUTORUN.INF產生只要在根目錄建一個
"AUTORUN.INF"目錄
因為同目錄不可以有同檔名
所以除非毒砍目錄
否則檔案無法生成

不過AUTORUN病毒其實並不只是用AUTORUN本身傳染
產生檔案時系統已經中毒了
_________________
Samedisk <- Engineers' Better Tomorrow !
USB SPI, NOR, NAND, I/O, Emulator, Romter, ICE
產品網址
---------------------------------------------
我的部落格
eject
 
文章: 140
註冊時間: 週二 12月 21, 2010 4:10 am

Re: 提供一個 autorun.inf 毒的偵測法

文章jimchou » 週二 5月 20, 2008 9:09 am

了解~
jimchou
 
文章: 11
註冊時間: 週二 12月 21, 2010 5:16 am


回到 意見與反應

誰在線上

正在瀏覽這個版面的使用者:沒有註冊會員 和 2 位訪客

cron