Statefull Packer Inspection against any kind of Malware!

beatnik beatnik at mail.gr
Fri Aug 13 13:10:38 EEST 2004


ricudis at komodino.itc.auth.gr wrote in
news:mailman.272.1092390432.316.linux-greek-users at lists.hellug.gr: 

> Quoting fs <admin at www0.org>:
> 
>> > Skopos einai na min apothikeutei ston hdd
>>
>> Koitakse. Aytes oi tainies poy lene oti ta virus einai kati to magiko
>> poy molis aggiksei ena computer bgazei amesws pardali xrwmatakia sthn
>> o8onh toy kai amesws sbinontai ta panta, einai ligo sth sfaira ths
>> fantasias. To typiko virus den einai tipota allo apo ena executable
>> binary file. An de to kaneis "execute" menei ena sinolo apo odigies
>> pou pote den do8hkan ston ypologisth.
> 
> Aneksarthta apo tis apy8menes malakies poy leei o skias (mou epese
> katala8os mia sto patwma kai anoikse mia trypa mexri thn Kina) :
> 
> Yparxei mia periptwsh ekteleshs kwdika poy den proypo8etei thn
> apo8hkeysh tou kapou - h periptwsh enos trojan pou xrhsimopoiei
> vulnerabilities tou leitourgikou pou sou epitrepoun arbitrary code
> execution over the network. Osous tous phdhkse o Blaster kai ta
> paragwga tou - ki osoi etrexan na tous kanoyn th nosokoma - to
> 8ymountai kala 

Oriste! Apo auto pos tha mas glytosoun ta ilithia antivirus?
Mono to Stateful Packet Inspection tha mas glytone apo auto epeidi tha 
eixe tin dynatotita na elenxei to periexomeno ton incoming packeton pou 
tha estelne to machine tou random anypopsiastou kollimenou malaka pou tha 
evriske to kaimeno to pc mas ystera apo random ip range space check oti 
einai vulnerable px sto 445 port sto opoio akouei o scvhost kai etsi me 
to lovesan exploit tha mas xeskize xoris to AV na parei prefa.

Pws tha to glytoname auto? Egw proswpika to pathaina epi 2 vdomades kai 
to firewall kai to av trexan kanonika. Mono patch den evaza epeidi itan 
kopia ta xp kai kai den eixa allazei to s/n key etsi oste na ta kano 
activate.

-- 
Just because I can, doesnt mean I will.
Just because I dont, doesnt mean I cant.
Just because you say so, doesnt mean Ill change.
And above all, just because you want it, doesnt mean I care.





More information about the Linux-greek-users mailing list