{"id":281,"date":"2011-03-31T10:54:47","date_gmt":"2011-03-31T02:54:47","guid":{"rendered":"http:\/\/www.ip-guard.net\/blog\/?p=281"},"modified":"2012-03-13T17:03:09","modified_gmt":"2012-03-13T09:03:09","slug":"%e4%b8%89%e6%98%9f%e9%83%a8%e5%88%86%e7%ac%94%e8%ae%b0%e6%9c%ac%e8%a2%ab%e6%8c%87%e9%a2%84%e8%a3%85%e9%97%b4%e8%b0%8d%e8%bd%af%e4%bb%b6","status":"publish","type":"post","link":"https:\/\/www.ip-guard.net\/blog\/?p=281","title":{"rendered":"\u4e09\u661f\u90e8\u5206\u7b14\u8bb0\u672c\u88ab\u6307\u9884\u88c5\u95f4\u8c0d\u8f6f\u4ef6"},"content":{"rendered":"

\u6765\u6e90\uff1a\u65b0\u6d6a\u79d1\u6280<\/a><\/p>\n

\u5317\u4eac\u65f6\u95f43\u670831\u65e5\u65e9\u95f4\u6d88\u606f\uff0c\u4e09\u661f\u5468\u4e09\u5ba3\u5e03\uff0c\u6b63\u5728\u5bf9\u90e8\u5206\u7535\u8111\u9884\u88c5\u95f4\u8c0d\u8f6f\u4ef6\u4e00\u4e8b\u5c55\u5f00\u5185\u90e8\u8c03\u67e5\u3002<\/p>\n

\u5728\u5b89\u5168\u4e13\u5bb6\u9ed8\u7f55\u9ed8\u5fb7\u00b7\u54c8\u6851(Mohammed Hassan)\u53d1\u73b0\u4ed6\u6240\u8d2d\u4e70\u7684\u4e24\u53f0\u4e09\u661f\u7b14\u8bb0\u672c\u4e2d\u90fd\u9884\u88c5\u4e86\u4e00\u4e2a\u540d\u4e3aStarlogger\u7684\u95f4\u8c0d\u8f6f\u4ef6\u540e\uff0c\u4fbf\u5728\u7f8e\u56fd\u79d1\u6280\u7f51\u7ad9Network World\u4e2d\u64b0\u6587\u5bf9\u6b64\u8fdb\u884c\u62a5\u9053\u3002\u800c\u4e09\u661f\u672c\u6b21\u7684\u5185\u90e8\u8c03\u67e5\u6b63\u662f\u9488\u5bf9\u6b64\u4e8b\u3002<\/p>\n

Starlogger\u662f\u4e00\u6b3e\u516c\u5f00\u7684\u5546\u4e1a\u95f4\u8c0d\u8f6f\u4ef6\uff0c\u53ef\u4ee5\u8bb0\u5f55\u7528\u6237\u7535\u8111\u4e0a\u7684\u6240\u6709\u952e\u76d8\u6572\u51fb\u4fe1\u606f\uff0c\u751a\u81f3\u8fdb\u884c\u622a\u5c4f\uff0c\u5e76\u5c06\u6570\u636e\u53d1\u9001\u7ed9\u8f6f\u4ef6\u5b89\u88c5\u8005\u6240\u8bbe\u5b9a\u7684\u7535\u5b50\u90ae\u4ef6\u5730\u5740\u3002<\/p>\n

\u54c8\u6851\u662f\u5728\u901a\u8fc7rootkit\u626b\u63cf\u5668\u5bf9\u7535\u8111\u8fdb\u884c\u626b\u63cf\u65f6\u53d1\u73b0StarLogger\u7684\uff0c\u4ed6\u968f\u540e\u5220\u9664\u4e86\u8fd9\u4e2a\u95f4\u8c0d\u8f6f\u4ef6\uff0c\u4f46\u7531\u4e8e\u89c6\u9891\u9a71\u52a8\u5b58\u5728\u95ee\u9898\uff0c\u56e0\u6b64\u4ed6\u5c06\u7535\u8111\u9000\u8fd8\u7ed9\u5546\u5bb6\u3002\u4f46\u4ed6\u62ff\u56de\u5bb6\u7684\u7b2c\u4e8c\u53f0\u4e09\u661f\u7b14\u8bb0\u672c\u540c\u6837\u88ab\u9884\u88c5\u4e86StarLogger\u3002<\/p>\n

\u54c8\u6851\u4e0e\u4e09\u661f\u5ba2\u6237\u652f\u6301\u90e8\u95e8\u7684\u4e3b\u7ba1\u53d6\u5f97\u4e86\u8054\u7cfb\uff0c\u5bf9\u65b9\u5374\u8868\u793a\uff0c\u6b64\u4e3e\u662f\u4e3a\u4e86\u201c\u76d1\u63a7\u673a\u5668\u6027\u80fd\uff0c\u5e76\u4e86\u89e3\u7528\u6237\u7684\u4f7f\u7528\u65b9\u5f0f\u201d\u3002<\/p>\n

\u54c8\u6851\u8ba4\u4e3a\uff0c\u6b64\u4e8b\u4e0e\u7d22\u5c3cBMG\u7684rootkit\u4e11\u95fb\u5c5e\u4e8e\u540c\u4e00\u6027\u8d28\u3002\u7d22\u5c3cBMG\u66fe\u4e8e2005\u5e74\u5728\u97f3\u4e50CD\u4e2d\u5b89\u88c5\u4e86\u6570\u5b57\u7248\u6743\u7ba1\u7406\u8f6f\u4ef6\uff0c\u4ee5\u907f\u514d\u62f7\u8d1d\uff0c\u4f46\u540c\u65f6\u4e5f\u5728\u7528\u6237\u7684\u8bbe\u5907\u4e2d\u5b89\u88c5\u4e86\u4e00\u4e2arootkit\uff1a\u8fd9\u662f\u4e00\u4e2a\u9690\u85cf\u6587\u4ef6\u5939\uff0c\u53ef\u4ee5\u88ab\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u7528\u6765\u9690\u85cf\u6076\u610f\u8f6f\u4ef6\u3002\u5f88\u591a\u53cd\u75c5\u6bd2\u516c\u53f8\u5c06\u7d22\u5c3c\u7684\u7a0b\u5e8f\u5f52\u7c7b\u4e3a\u6076\u610f\u8f6f\u4ef6\uff0c\u800c\u7d22\u5c3c\u6700\u7ec8\u4e5f\u540c\u610f\u53ec\u56de\u53d7rootkit\u5f71\u54cd\u7684\u5149\u76d8\u3002<\/p>\n

\u76ee\u524d\u8fd8\u4e0d\u6e05\u695a\u4e09\u661f\u7684\u8fd9\u4e00\u95ee\u9898\u7a76\u7adf\u5728\u5168\u7403\u666e\u904d\u5b58\u5728\uff0c\u8fd8\u662f\u4ec5\u4ec5\u662f\u7ecf\u9500\u5546\u7684\u4e2a\u4eba\u884c\u4e3a\u3002\u4e09\u661f\u53d1\u8a00\u4eba\u5728\u58f0\u660e\u4e2d\u8bf4\uff1a\u201c\u4e09\u661f\u975e\u5e38\u91cd\u89c6\u54c8\u6851\u5148\u751f\u7684\u4e8b\u60c5\u3002\u4eca\u65e9\u5728NetworkWorld.com\u4e0a\u9605\u8bfb\u4e86\u6700\u521d\u7684\u6587\u7ae0\u540e\uff0c\u6211\u4eec\u5df2\u7ecf\u5bf9\u6b64\u4e8b\u5c55\u5f00\u5185\u90e8\u8c03\u67e5\u3002\u4e00\u65e6\u6709\u8fdb\u5c55\uff0c\u6211\u4eec\u5c31\u5c06\u5c3d\u5feb\u62ab\u9732\u8fdb\u4e00\u6b65\u4fe1\u606f\u3002\u201d<\/p>\n

\u636e\u54c8\u6851\u4ecb\u7ecd\uff0cStarLogger\u95f4\u8c0d\u8f6f\u4ef6\u4f1a\u88ab\u5b89\u88c5\u4e8e\u7528\u6237\u7535\u8111C\u76d8\u7684windowsSL\u76ee\u5f55\u4e0b\u3002<\/p>\n

||\u7f16\u8005\u6309<\/strong><\/p>\n

\u4e00\u63d0\u5230\u7535\u8111\u76d1\u63a7\u3001\u95f4\u8c0d\u8f6f\u4ef6\uff0c\u6211\u4eec\u7684\u5934\u8111\u4e2d\u5c31\u4f1a\u663e\u73b0\u51fa\u4e00\u5e45\u9b3c\u9b3c\u795f\u795f\u4eba\u89c1\u4eba\u9a82\u7684\u5f62\u8c61\uff0c\u4f46\u4e8b\u5b9e\u4e0a\uff0c\u76d1\u63a7\u7cfb\u7edf\u5728\u4f01\u4e1a\u5e94\u7528\u4e2d\u5374\u662f\u975e\u5e38\u666e\u904d\u7684\uff0c\u5305\u62ecIP-guard\u5728\u5185\u7684\u4f17\u591a\u4ea7\u54c1\u7684\u6210\u529f\u4e5f\u8bc1\u660e\u4e86\u8fd9\u4e00\u70b9\u3002\u90a3\u4e48\uff0c\u540c\u6837\u662f\u76d1\u63a7\uff0c\u4e3a\u4ec0\u4e48\u4f01\u4e1a\u7ea7\u7684\u76d1\u63a7\u662f\u666e\u904d\u5e94\u7528\u7684\uff0c\u800c\u5bf9\u4e2a\u4eba\u7684\u76d1\u63a7\u5c31\u5b8c\u5168\u4e0d\u53ef\u63a5\u53d7\u5462\uff1f<\/p>\n

\u5176\u5b9e\uff0c\u8fd9\u6d89\u53ca\u5230\u4e00\u4e2a\u4e2a\u4eba\u9690\u79c1\u7a7a\u95f4\u7684\u95ee\u9898\u3002\u5728\u4f01\u4e1a\u73af\u5883\u4e0b\uff0c\u5458\u5de5\u4e0e\u4f01\u4e1a\u8fbe\u6210\u4e86\u96c7\u4f63\u5173\u7cfb\uff0c\u4f01\u4e1a\u5728\u67d0\u79cd\u7a0b\u5ea6\u4e0a\u662f\u6709\u6743\u5229\u76d1\u63a7\u5185\u90e8\u7684\u4fe1\u606f\u7cfb\u7edf\u8fd0\u884c\u72b6\u6001\u7684\uff0c\u8fd9\u540c\u65f6\u4e5f\u662f\u4e3a\u4e86\u4f01\u4e1a\u4fe1\u606f\u5b89\u5168\u7684\u9700\u8981\uff1b\u800c\u5728\u4e2a\u4eba\u5e94\u7528\u73af\u5883\u4e0b\uff0c\u7528\u6237\u4e2a\u4eba\u7684\u5e94\u7528\u662f\u5bf9\u5176\u81ea\u8eab\u8d1f\u8d23\u7684\uff0c\u6cd5\u5f8b\u4e5f\u4fdd\u62a4\u4e2a\u4eba\u7684\u9690\u79c1\u6743\u4e0d\u53d7\u4fb5\u5bb3\uff0c\u56e0\u6b64\uff0c\u5bf9\u4e2a\u4eba\u7684\u76d1\u63a7\u5c31\u662f\u5b8c\u5168\u4e0d\u80fd\u88ab\u63a5\u53d7\u7684\u3002<\/p>\n

\u8fd9\u4e2a\u6848\u4f8b\u4e8b\u5b9e\u4e0a\u4e5f\u542f\u793a\u4e86\u6211\u4eec\uff0c\u5373\u4f7f\u662f\u5728\u4f01\u4e1a\u7ea7\u7684\u76d1\u63a7\u4e2d\uff0c\u7531\u4e8e\u6cd5\u5f8b\u4e0a\u5bf9\u4e8e\u6b64\u9879\u7684\u754c\u5b9a\u4e0d\u591f\u660e\u786e\uff0c\u4f01\u4e1a\u5728\u90e8\u7f72\u7c7b\u4f3c\u7684\u4fe1\u606f\u5b89\u5168\u7cfb\u7edf\u4e4b\u524d\uff0c\u4e00\u5b9a\u8981\u5148\u6709\u660e\u786e\u7684\u516c\u5f00\u7684\u4fe1\u606f\u5b89\u5168\u653f\u7b56\uff0c\u5e76\u4e14\u4fdd\u8bc1\u88ab\u7ba1\u7406\u5458\u5de5\u7684\u77e5\u60c5\u6743\uff0c\u8fd9\u6837\uff0c\u624d\u80fd\u5c0a\u91cd\u4e2a\u4eba\u7684\u9690\u79c1\uff0c\u540c\u65f6\u4e5f\u89c4\u907f\u4e86\u4e00\u5b9a\u7684\u6cd5\u5f8b\u98ce\u9669\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"