資源包括：正文標(biāo)準(zhǔn)WORD格式共 49頁 25793字 附?jīng)_擊波.dwg 與查殺程序文件

摘要
隨著計(jì)算機(jī)在社會(huì)生活各個(gè)領(lǐng)域的廣泛運(yùn)用，計(jì)算機(jī)病毒攻擊與防范技術(shù)也在不斷發(fā)展。計(jì)算機(jī)病毒是能改變或破壞存在計(jì)算機(jī)中的數(shù)據(jù)的程序，而且它能在操作過程中不斷自我復(fù)制，從而造成損害。隨著網(wǎng)絡(luò)的普及，蠕蟲病毒逐漸的成為了對(duì)當(dāng)今世界危害最大的計(jì)算機(jī)病毒，占據(jù)了現(xiàn)今計(jì)算機(jī)病毒的90％左右。它與一般的計(jì)算機(jī)病毒不同，它不采用將自身拷貝附加到其他程序中的方式來復(fù)制自己，并且它是依靠網(wǎng)絡(luò)來傳播的。在當(dāng)今這個(gè)沒有網(wǎng)絡(luò)就無法正常生活的時(shí)代中，網(wǎng)絡(luò)蠕蟲的對(duì)抗技術(shù)會(huì)逐漸的成為熱門。
在本次設(shè)計(jì)中，我主要是選擇了在2003年轟動(dòng)一時(shí)的沖擊波病毒作為研究的課題。通過對(duì)沖擊波的代碼，病毒的有關(guān)性質(zhì)和作用原理進(jìn)行系統(tǒng)的分析，找到它的發(fā)作機(jī)制，并利用病毒的運(yùn)行結(jié)果提出了一套事實(shí)可行的解決方案，恢復(fù)系統(tǒng)在感染病毒以前的狀態(tài)。這樣對(duì)研究網(wǎng)絡(luò)蠕蟲是會(huì)有很大的幫助的。

關(guān)鍵詞：網(wǎng)絡(luò)蠕蟲；沖擊波；病毒

ABSTRACT
Along with the computer is popularly used in each realm of the social, the attack of the computer’s virus and technology that against the virus are also developing. The virus of the computer is a program that can change and break the data in the computer, and it can copy itself in computer’s operating, so that the data in the computer is broken. Along with the universality of the network, the worm is the worst harm of the computer’s virus to the world, and it takes up 90% of computer’s virus nowadays. Worm is different from other virus, it dose not copy itself to other program, and it depends on the network to spread of. Today without the network the people can’t live in normal life, so that the technology that against the worm will be the hottest specialty.
In this design, I choose the worm that named I-Worm/Blaster by authority for my design of graduate, it very popular in the year of 2003.I will use the code of I-Worm/Blaster and the function of it to find out the action of the I-Worm/Blaster. Using the action of the I-Worm/Blaster to find the way to kill it, and restore the operation system. My design will give the help to the study of the worm.

Keywords： worm；Worm/Blaster；virus

目 錄
摘要…………………………………………………………………………………………1
Abstract…………………………………………………………………………………..2
1 蠕蟲病毒簡介……………………………………………………..............................3
1．1蠕蟲病毒的認(rèn)識(shí)……….………………………………………………………...3
1．2蠕蟲病毒與一般病毒的異同…………………………………………………….3
1．3蠕蟲病毒的組成與結(jié)構(gòu)…………………………………………….....................4
1．3．1 蠕蟲程序的一般傳播過程……………………………………………...4
1．4入侵過程的分析…………………………………………….................................5
1．5蠕蟲傳播的一般模式分析…………………………………………….................5
1．6蠕蟲病毒的一些新特點(diǎn)………………………………………….........................7
1．7蠕蟲的防治…………………………………………….........................................7
2 沖擊波病毒的簡述…………………………………………….................................9
2．1沖擊波病毒的介紹…………………………………………….............................9
2．2病毒相關(guān)技術(shù)說明…………………………………………….............................9
2．2．1 RPC：遠(yuǎn)程過程調(diào)用協(xié)議………………………………….………...….9
2．2．2 DCOM：分布式對(duì)象模型…………………………………………...……13
2．2．3緩沖區(qū)溢出……………………………………………............................13
2．2．4 TFTP簡單文件傳輸協(xié)議…………………………………………..……18
2．2．5多線程技術(shù)……………………………………………............................18
2．3沖擊波病毒的操作和癥狀………………………………………………..….......19
2．3．1病毒的操作……………………………………………............................19
2．3．2病毒的發(fā)作癥狀………………………………………….………….......19
2．4沖擊波病毒的具體說明………………………………………….…....................20
2．5沖擊波病毒的處理方法………………………………………………….............21
2．5．1沖擊波應(yīng)急方案……………………………………………....................21
2．5．2安全模式下清除病毒……………………………………………………22
2．6沖擊波病毒分析報(bào)告…………………………………………….........................23
2．7計(jì)算機(jī)安全建議…………………………………………….................................34
3 沖擊波病毒專殺工具的設(shè)計(jì)…………………………………………………......35
3．1專殺工具的設(shè)計(jì)思路…………………………………………….........................35
3．2專殺工具的具體實(shí)現(xiàn)…………………………………………….........................36
4 病毒檢測(cè)技術(shù)……………………………………………..........................................44
4．1特征碼檢測(cè)技術(shù)…………………………………………….................................44
4．2校驗(yàn)和檢測(cè)技術(shù)…………………………………………….................................45
4．3行為監(jiān)測(cè)技術(shù)……………………………………………...................