:

.



.

.1 .
.2 .
.3 .
:
.1 .
.2 .
.3 .
.4
.5 .


_______________________________________________ 3
____________________________ 3
__________________________________________________ 3
______________________________________________________ 5
 .

5 ____________________________________________________ SASR
  5 ____________________________________________________ Gobot
 .  _________________________________________________________ 6
 melissa virus  ________________________________________________ 6

______________________________________________________ 7
____________________________________________ 7
___________________________________________________ 8
 9 ________________________________________________________ worm
____________________________________________________ 9
___________________________________________________ 10
10 _______________________________________________________ : Autorun virus

____________________________________________________ 11
___________________________________ 12
$_____________________________________________________________ 12
 ______________________________________________________________ 12
&  ____________________________________________________________ 13

__________________________________________ 14
_____________________________________________ 15



.
.

. 1 Pakistani brain

.
. 2 STONED.

.
. 3
V2P
. 4
.

 .
:

.
.
.
:




.

.
..



.

 .  SASR
2004 %3.17

.

  Gobot



Firewall

 Blaster
.

 . 


.


. 500000

 melissa virus 

1999

.

:
server parch
spy



.

. 1
.
. 2 ..
.
. 3

.
. 4



.
. 5 ..
.
. 6 FTP
. 7

.

) . ( zone alarm

.

.


.

 worm
....




.

.

1988 )( Robert T.
) (Cornell 8


Security National ) NSA
( Agency .


: Autorun virus


.worm
:
.. MP3 , MP4, Flash Memory
hard disk .
:
:
Win32.Perlovga Virus :
AutoRun .inf & host .exe & Copy .exe .
RavMon Virus & AutoRun .inf
. Ravmon.exe
:
-1 drive . ERROR
-2 drive .
-3 drive . Open With

10

 -4 drives . Local Disk

- 5 Folder options .
:
7 8 2007
32 .

.

NOD32 VBS[Butsur.A,B]-Fix
Perlovga Removal Tool
RavMon Removal Tool

) ( exe

.
)( I Love you
4 2000
) (.

11


:

.
.

.
exe


.


.


.

.

12





.


:

.

.
 :
.
.
.
.
.
. . .
. )( back door
.

13

 .
.

exe bat
.

. .

.
.

14




:
.1 )
(.
.2 .
.3 .
.4 .
.5 .
- 6 .
.7 .
.8 .
.9 .
.10 .

15