資源包括：正文標(biāo)準(zhǔn)WORD格式共 49頁(yè) 25793字 附?jīng)_擊波.dwg 與查殺程序文件

摘要
隨著計(jì)算機(jī)在社會(huì)生活各個(gè)領(lǐng)域的廣泛運(yùn)用，計(jì)算機(jī)病毒攻擊與防范技術(shù)也在不斷發(fā)展。計(jì)算機(jī)病毒是能改變或破壞存在計(jì)算機(jī)中的數(shù)據(jù)的程序，而且它能在操作過(guò)程中不斷自我復(fù)制，從而造成損害。隨著網(wǎng)絡(luò)的普及，蠕蟲(chóng)病毒逐漸的成為了對(duì)當(dāng)今世界危害最大的計(jì)算機(jī)病毒，占據(jù)了現(xiàn)今計(jì)算機(jī)病毒的90％左右。它與一般的計(jì)算機(jī)病毒不同，它不采用將自身拷貝附加到其他程序中的方式來(lái)復(fù)制自己，并且它是依靠網(wǎng)絡(luò)來(lái)傳播的。在當(dāng)今這個(gè)沒(méi)有網(wǎng)絡(luò)就無(wú)法正常生活的時(shí)代中，網(wǎng)絡(luò)蠕蟲(chóng)的對(duì)抗技術(shù)會(huì)逐漸的成為熱門(mén)。
在本次設(shè)計(jì)中，我主要是選擇了在2003年轟動(dòng)一時(shí)的沖擊波病毒作為研究的課題。通過(guò)對(duì)沖擊波的代碼，病毒的有關(guān)性質(zhì)和作用原理進(jìn)行系統(tǒng)的分析，找到它的發(fā)作機(jī)制，并利用病毒的運(yùn)行結(jié)果提出了一套事實(shí)可行的解決方案，恢復(fù)系統(tǒng)在感染病毒以前的狀態(tài)。這樣對(duì)研究網(wǎng)絡(luò)蠕蟲(chóng)是會(huì)有很大的幫助的。

關(guān)鍵詞：網(wǎng)絡(luò)蠕蟲(chóng)；沖擊波；病毒

ABSTRACT
Along with the computer is popularly used in each realm of the social, the attack of the computer’s virus and technology that against the virus are also developing. The virus of the computer is a program that can change and break the data in the computer, and it can copy itself in computer’s operating, so that the data in the computer is broken. Along with the universality of the network, the worm is the worst harm of the computer’s virus to the world, and it takes up 90% of computer’s virus nowadays. Worm is different from other virus, it dose not copy itself to other program, and it depends on the network to spread of. Today without the network the people can’t live in normal life, so that the technology that against the worm will be the hottest specialty.
In this design, I choose the worm that named I-Worm/Blaster by authority for my design of graduate, it very popular in the year of 2003.I will use the code of I-Worm/Blaster and the function of it to find out the action of the I-Worm/Blaster. Using the action of the I-Worm/Blaster to find the way to kill it, and restore the operation system. My design will give the help to the study of the worm.

Keywords： worm；Worm/Blaster；virus

目 錄
摘要…………………………………………………………………………………………1
Abstract…………………………………………………………………………………..2
1 蠕蟲(chóng)病毒簡(jiǎn)介……………………………………………………..............................3
1．1蠕蟲(chóng)病毒的認(rèn)識(shí)……….………………………………………………………...3
1．2蠕蟲(chóng)病毒與一般病毒的異同…………………………………………………….3
1．3蠕蟲(chóng)病毒的組成與結(jié)構(gòu)…………………………………………….....................4
1．3．1 蠕蟲(chóng)程序的一般傳播過(guò)程……………………………………………...4
1．4入侵過(guò)程的分析…………………………………………….................................5
1．5蠕蟲(chóng)傳播的一般模式分析…………………………………………….................5
1．6蠕蟲(chóng)病毒的一些新特點(diǎn)………………………………………….........................7
1．7蠕蟲(chóng)的防治…………………………………………….........................................7
2 沖擊波病毒的簡(jiǎn)述…………………………………………….................................9
2．1沖擊波病毒的介紹…………………………………………….............................9
2．2病毒相關(guān)技術(shù)說(shuō)明…………………………………………….............................9
2．2．1 RPC：遠(yuǎn)程過(guò)程調(diào)用協(xié)議………………………………….………...….9
2．2．2 DCOM：分布式對(duì)象模型…………………………………………...……13
2．2．3緩沖區(qū)溢出……………………………………………............................13
2．2．4 TFTP簡(jiǎn)單文件傳輸協(xié)議…………………………………………..……18
2．2．5多線(xiàn)程技術(shù)……………………………………………............................18
2．3沖擊波病毒的操作和癥狀………………………………………………..….......19
2．3．1病毒的操作……………………………………………............................19
2．3．2病毒的發(fā)作癥狀………………………………………….………….......19
2．4沖擊波病毒的具體說(shuō)明………………………………………….…....................20
2．5沖擊波病毒的處理方法………………………………………………….............21
2．5．1沖擊波應(yīng)急方案……………………………………………....................21
2．5．2安全模式下清除病毒……………………………………………………22
2．6沖擊波病毒分析報(bào)告…………………………………………….........................23
2．7計(jì)算機(jī)安全建議…………………………………………….................................34
3 沖擊波病毒專(zhuān)殺工具的設(shè)計(jì)…………………………………………………......35
3．1專(zhuān)殺工具的設(shè)計(jì)思路…………………………………………….........................35
3．2專(zhuān)殺工具的具體實(shí)現(xiàn)…………………………………………….........................36
4 病毒檢測(cè)技術(shù)……………………………………………..........................................44
4．1特征碼檢測(cè)技術(shù)…………………………………………….................................44
4．2校驗(yàn)和檢測(cè)技術(shù)…………………………………………….................................45
4．3行為監(jiān)測(cè)技術(shù)……………………………………………...................