[B! Conficker] hiroomiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hiroomi id:hiroomi

Confickerã«é–¢ã™ã‚‹hiroomiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (19)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒ‰ã‚¤ãƒ„ã®è‡ªæ²»ä½“ã€ãƒ¯ãƒ¼ãƒ ã«æ„ŸæŸ“ã—ãŸ170å°ã®PCã‚’å»ƒæ£„å‡¦åˆ†ã€€é§†é™¤ã‚ˆã‚Šå®‰ä¸ŠãŒã‚Šï¼Ÿ
Confickerã«æ„ŸæŸ“ã—ãŸPCã‹ã‚‰ãƒ¯ãƒ¼ãƒ ã‚’é§†é™¤ã™ã‚‹ãŸã‚ã«ã¯13ä¸‡ãƒ¦ãƒ¼ãƒã®çµŒè²»ãŒã‹ã‹ã‚‹ã¨ã®è©¦ç®—ã€‚ã“ã‚Œã¯PC 1å°å½“ãŸã‚Šã«æ›ç®—ã™ã‚‹ã¨ç´„1000ãƒ‰ãƒ«ã«ç›¸å½“ã™ã‚‹ã€‚ ãƒ‰ã‚¤ãƒ„ã®è‡ªæ²»ä½“ã§å¸‚ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã«Confickerãƒ¯ãƒ¼ãƒ ã®æ„ŸæŸ“ãŒåºƒãŒã‚Šã€å¸‚ã¯é§†é™¤ã‚’ã‚ãã‚‰ã‚ã¦170å°ã®PCã‚’å»ƒæ£„ã™ã‚‹ã“ã¨ã‚’æ±ºã‚ãŸã¨ã„ã†ã€‚ç±³ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿé–¢SANS Internet Storm CenterãŒ5æœˆ1æ—¥ã®ãƒ–ãƒã‚°ã§ä¼ãˆãŸã€‚ ãã‚Œã«ã‚ˆã‚‹ã¨ã€ãƒ‰ã‚¤ãƒ„ã®ã‚·ãƒ¥ãƒ´ã‚§ãƒªãƒ¼ãƒ³å¸‚ã§ã¯ã€Confickerã«æ„ŸæŸ“ã—ãŸPCã‹ã‚‰ãƒ¯ãƒ¼ãƒ ã‚’é§†é™¤ã™ã‚‹ãŸã‚ã«ã¯13ä¸‡ãƒ¦ãƒ¼ãƒã®çµŒè²»ãŒã‹ã‹ã‚‹ã¨è©¦ç®—ã€‚å¤ã„PCã‚’å…¥ã‚Œæ›¿ãˆã‚‹ãŸã‚ã®çµŒè²»15ä¸‡ãƒ¦ãƒ¼ãƒãŒæ—¢ã«äºˆç®—ã«è¨ˆä¸Šã•ã‚Œã¦ã„ãŸã“ã¨ã‹ã‚‰ã€170å°ã®å»ƒæ£„ã‚’æ±ºã‚ãŸã¨ã„ã†ã€‚ ã‚·ãƒ¥ãƒ´ã‚§ãƒªãƒ¼ãƒ³å¸‚ãŒè¦‹ç©ã‚‚ã£ãŸãƒ¯ãƒ¼ãƒ ã®é§†é™¤çµŒè²»13ä¸‡ãƒ¦ãƒ¼ãƒã¯ã€PC1å°å½“ãŸã‚Šã«æ›ç®—ã™ã‚‹ã¨ç´„1000ãƒ‰ãƒ«ã«ç›¸å½“ã™ã‚‹ã¨SANSã¯æŒ‡æ‘˜ã™ã‚‹ã€‚ãŸã ã—ã“ã®ä¸ã«ã€è·å“¡ãŒä»•
hiroomi 2013/05/03
2å¹´å‰ãªã‚‰ãˆã£ãƒ¼ã ã‘ã©ã€ã“ã®æ™‚æœŸãªã‚‰æ›´æ–°è²»è¨ˆä¸Šã§ã‚ˆã•ãã€‚

Conficker

Downadup
ãƒªãƒ³ã‚¯
ä¾ç„¶çŒ›å¨ã®ã€ŒConfickerã€ã‚¦ã‚¤ãƒ«ã‚¹ã€å¼±ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®PCãŒé¤Œé£Ÿã«
å›³1ã€€ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è£½å“ã‚ˆã‚Šã€ŒConfickerï¼ˆWin32/Confickerï¼‰ã€ãŒæ¤œå‡ºã•ã‚ŒãŸã‚·ã‚¹ãƒ†ãƒ æ•°ã®æŽ¨ç§»ï¼ˆæ—¥æœ¬ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã®æƒ…å ±ã‹ã‚‰å¼•ç”¨ã€‚ä»¥ä¸‹åŒã˜ï¼‰ æ—¥æœ¬ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã¯2012å¹´5æœˆ11æ—¥ã€2008å¹´11æœˆã«å‡ºç¾ã—ãŸã‚¦ã‚¤ãƒ«ã‚¹ã€ŒConfickerï¼ˆã‚³ãƒ³ãƒ•ã‚£ãƒƒã‚«ãƒ¼ï¼‰ã€ãŒã€ç¾åœ¨ã§ã‚‚å¤§ããªè¢«å®³ã‚’ã‚‚ãŸã‚‰ã—ã¦ã„ã‚‹ã¨ã—ã¦æ³¨æ„ã‚’å‘¼ã³ã‹ã‘ãŸã€‚æŽ¨æ¸¬ã—ã‚„ã™ã„å¼±ã„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®šã—ã¦ã„ã‚‹ãƒ‘ã‚½ã‚³ãƒ³ã§ã¯ã€çŸ¥ã‚‰ãªã„ã†ã¡ã«ä¾µå…¥ã•ã‚Œã¦æ„ŸæŸ“ã™ã‚‹ã€‚ åŒç¤¾ã®èª¿æŸ»ã«ã‚ˆã‚Œã°ã€2å¹´åŠå‰ã‹ã‚‰ç¾åœ¨ã«è‡³ã‚‹ã¾ã§ã€Confickerã¯ä¼æ¥ç’°å¢ƒã«ãŠã„ã¦æœ€ã‚‚æ„ŸæŸ“æ•°ã®å¤šã„ã‚¦ã‚¤ãƒ«ã‚¹ã ã¨ã„ã†ã€‚2009å¹´ä»¥é™ã€å…¨ä¸–ç•Œã§2å„„2åƒä¸‡å›žæ¤œå‡ºã€‚2011å¹´ç¬¬4å››åŠæœŸã«ã¯ã€170ä¸‡å°ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã§æ¤œå‡ºã•ã‚ŒãŸã¨ã—ã¦ã„ã‚‹ï¼ˆå›³1ï¼‰ã€‚ ConfickerãŒãƒ‘ã‚½ã‚³ãƒ³ã«æ„ŸæŸ“ã™ã‚‹æ–¹æ³•ã¯æ¬¡ã®3ç¨®é¡žã€‚ï¼ˆ1ï¼‰Windowsã®ãƒã‚°ã‚ªãƒ³ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ç ´ã‚‹ã€ï¼ˆ2ï¼‰è„†
hiroomi 2012/05/15
Downadup

Conficker
ãƒªãƒ³ã‚¯
Confickerãƒ¯ãƒ¼ãƒ ãŒä»Šã§ã‚‚ã¯ã³ã“ã‚‹åŽŸå› ã¯ï¼Ÿã€€MicrosoftãŒå ±å‘Šæ›¸å…¬é–‹
MicrosoftãŒã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ãƒ¬ãƒãƒ¼ãƒˆã€ï¼ˆSIRï¼‰ã®ç¬¬12ç‰ˆã‚’å…¬é–‹ã€‚Confickerã‚„APTæ”»æ’ƒãªã©ã«ã‚¹ãƒãƒƒãƒˆã‚’å½“ã¦ã¦ã„ã‚‹ã€‚ ç±³Microsoftã¯4æœˆ25æ—¥ã€è„†å¼±æ€§æ‚ªç”¨ã‚„ãƒžãƒ«ã‚¦ã‚§ã‚¢æµé€šãªã©ã®ä¸–ç•Œçš„ãªå‹•å‘ã«ã¤ã„ã¦è§£èª¬ã—ãŸã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¤ãƒ³ãƒ†ãƒªã‚¸ã‚§ãƒ³ã‚¹ãƒ¬ãƒãƒ¼ãƒˆã€ï¼ˆSIRï¼‰ã®ç¬¬12ç‰ˆã‚’å…¬é–‹ã—ãŸã€‚ä»Šå›žã®ãƒ¬ãƒãƒ¼ãƒˆã§ã¯ã€å‡ºç¾ã‹ã‚‰3å¹´è¿‘ããŸã£ãŸä»Šã‚‚ä¼æ¥ã§ã¯ã³ã“ã‚Šç¶šã‘ã‚‹ãƒžãƒ«ã‚¦ã‚§ã‚¢ã®ã€ŒConfickerã€ã‚„ã€ç‰¹å®šã®æ¨™çš„ã«å¯¾ã—ã¦åŸ·æ‹—ãªæ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‹ã€ŒAPTï¼ˆAdvanced Persistent Threatï¼‰ã€ãªã©ã«ã‚¹ãƒãƒƒãƒˆã‚’å½“ã¦ã¦ã„ã‚‹ã€‚ Confickerã¯2008å¹´å¾ŒåŠã«å‡ºç¾ã—ã¦çŒ›å¨ã‚’æŒ¯ã‚‹ã£ãŸãƒžãƒ«ã‚¦ã‚§ã‚¢ã€‚Microsoftã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ–ãƒã‚°ã«ã‚ˆã‚‹ã¨ã€ä¼æ¥ã«ã¨ã£ã¦ã¯ã„ã¾ã ã«æœ€å¤§ç´šã®è„…å¨ã§ã‚ã‚Šç¶šã‘ã€è‡ªç¤¾ç’°å¢ƒã‹ã‚‰ã®é§†é™¤ã«æ‰‹é–“å–ã£ã¦ã„ã‚‹ä¼æ¥ã‚‚å¤šã„ã€‚å®Ÿéš›ã€ConfickerãŒ1å°ã®ã‚³ãƒ³ãƒ”
hiroomi 2012/04/26
ä¹…ã€…ã«è¦‹ã‹ã‘ãŸãªã€‚

Conficker
ãƒªãƒ³ã‚¯
Scanning for Conficker with Nmap
hiroomi 2009/12/24
conficker
ãƒªãƒ³ã‚¯
Confickeræ„ŸæŸ“ãƒžã‚·ãƒ³ã‚’æ¤œå‡ºã™ã‚‹ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒé–‹ç™ºã•ã‚Œã‚‹
ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç›£æŸ»ãƒ„ãƒ¼ãƒ«Nmapã«æºã‚ã‚‹ç ”ç©¶è€…ãŒã€Confickerãƒ¯ãƒ¼ãƒ ã®P2Pãƒ—ãƒãƒˆã‚³ãƒ«ã‚’é€†æ‰‹ã«å–ã£ã¦ã€æ„ŸæŸ“ãƒžã‚·ãƒ³ã‚’ç™ºè¦‹ã§ãã‚‹ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’é–‹ç™ºã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ã“ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’Nmapã®æœ€æ–°ç‰ˆã«çµ„ã¿è¾¼ã‚€ã¨ã¨ã‚‚ã«ã€Webã‚µã‚¤ãƒˆã§ä¸€èˆ¬ã«å…¬é–‹ã—ã¦ã„ã‚‹ã€‚ ã“ã®ç ”ç©¶è€…ã®ãƒ–ãƒã‚°ã€ŒSkullSecurityã€ã«ã‚ˆã‚‹ã¨ã€ç±³Symantecã®å”åŠ›ã‚’å¾—ã¦Confickerã®ãƒãƒ¼ãƒˆç”Ÿæˆã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨ãƒ—ãƒãƒˆã‚³ãƒ«ã‚’è¦‹ã¤ã‘å‡ºã—ãŸã€‚ã“ã‚Œã‚’çµ„ã¿è¾¼ã‚“ã ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«ã‚ˆã£ã¦ã€Conficker.Cä»¥é™ã®äºœç¨®ã‚’æ¤œå‡ºã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ã€‚ Conficker.Cä»¥é™ã®äºœç¨®ã¯ã€é€šä¿¡ç”¨ã«4ã¤ã®ãƒãƒ¼ãƒˆã‚’é–‹ã„ã¦æ„ŸæŸ“ãƒžã‚·ãƒ³åŒå£«ã§é€šä¿¡ã—ã€æ›´æ–°ç‰ˆã‚’å—ã‘å–ã£ãŸã‚Šæƒ…å ±ã‚’äº¤æ›ã™ã‚‹æ©Ÿèƒ½ã‚’æŒã£ã¦ã„ã‚‹ã€‚ ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§ã¯ã“ã®æ©Ÿèƒ½ã‚’é€†æ‰‹ã«å–ã‚Šã€Confickerã®ãƒãƒ¼ãƒˆã«å‘ã‘ã¦ãƒ‘ã‚±ãƒƒãƒˆã‚’é€ä¿¡ã€‚åå¿œãŒè¿”ã£ã¦ãã‚Œã°ã€ãã®ãƒžã‚·ãƒ³ãŒæ„ŸæŸ“ã—ã¦ã„ã‚‹ã“ã¨ã«
hiroomi 2009/11/30
conficker
ãƒªãƒ³ã‚¯
yebo blog: Nmap 5.00ãŒãƒªãƒªãƒ¼ã‚¹
2009/07/17 Nmap 5.00ãŒãƒªãƒªãƒ¼ã‚¹ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚¹ã‚ãƒ£ãƒŠ Nmap 5.00 ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸ (1997å¹´ä»¥æ¥ã€ã‚‚ã£ã¨ã‚‚é‡è¦ãªãƒªãƒªãƒ¼ã‚¹)ã€‚ã‚¹ã‚ãƒ£ãƒ³çµæžœã®ãƒ“ãƒ¥ãƒ¼ã‚¢ Zenmapã€ãƒ‡ãƒãƒƒã‚¬ãƒ„ãƒ¼ãƒ« ncat ã‚„ã‚¹ã‚ãƒ£ãƒ³çµæžœã®æ¯”è¼ƒã‚’è¡Œã† ndiff ãƒ„ãƒ¼ãƒ«ã‚’å«ã¿ã€ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ãŒæ”¹å–„ã•ã‚Œã€NSE (Nmap Scripting Engine) ã¨å‘¼ã°ã‚Œã‚‹Luaãƒ™ãƒ¼ã‚¹ã®æ–°ã—ã„ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚¨ãƒ³ã‚¸ãƒ³ãŒæè¼‰ã•ã‚Œã¦ã„ã‚‹ã€‚NSEã¯ã‹ãªã‚Šå”åŠ›ã§NIDSã®ã‚ˆã†ã«åƒã‹ã›ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ æŠ•ç¨¿è€… zubora æŠ•ç¨¿æ™‚é–“ 05:08 ãƒ©ãƒ™ãƒ«: Network, Open Source, Security 0 ã‚³ãƒ¡ãƒ³ãƒˆ: ã‚³ãƒ¡ãƒ³ãƒˆã‚’æŠ•ç¨¿
hiroomi 2009/11/30
conficker

lua
ãƒªãƒ³ã‚¯
ã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢ãƒ–ãƒã‚° : Confickerã¯Blasterã¨ä½•ãŒé•ã†ã®ã‹
Confickerã¯Blasterã¨ä½•ãŒé•ã†ã®ã‹ 2009å¹´04æœˆ12æ—¥11:55 ãƒ„ã‚¤ãƒ¼ãƒˆ hiroki_iwai ã‚ªãƒ•ã‚£ã‚·ãƒ£ãƒ«ã‚³ãƒ¡ãƒ³ãƒˆÂ byï¼šå²©äº• åšæ¨¹ ã¾ãŸäºœç¨®ãŒå‡ºã¦ããŸã‹ï¼ï¼ã¨ã„ã†æ€ã„ã§ã™ã€‚(T T) Confickerã®ã‚¢ã‚¦ãƒˆãƒ–ãƒ¬ã‚¤ã‚¯ã¯ã€ã‚ˆã2003å¹´ã®Blasterãƒ¯ãƒ¼ãƒ ã®å†æ¥ã¨ä¾‹ãˆã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ã—ã‹ã—ã€å¤§ããç•°ãªã‚‹ã®ãŒæ„ŸæŸ“å¾Œã®é§†é™¤ãŒåŽ„ä»‹ãªç‚¹ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚è‹¦æˆ¦ã•ã‚Œã¦ã„ã‚‹ä¼æ¥ãŒå¤šã„ã“ã¨ã‹ã‚‰ã€ç†è€…ã‚‰ã‚‚å…ˆæ—¥ç·Šæ€¥ã‚¢ãƒ©ãƒ¼ãƒˆã‚’å‡ºã—ã¾ã—ãŸã€‚ é•·æœŸåŒ–ã™ã‚‹çµ„ç¹”å†…ã«æ½œå…¥ã—ãŸConfickerï¼ˆDownadupï¼‰ã®é§†é™¤ãƒ»å¯¾å‡¦ã«ã¤ã„ã¦ http://www.lac.co.jp/info/alert/alert20090409.html ï¼ˆï¼‘ï¼‰é§†é™¤ãƒ„ãƒ¼ãƒ«ãŒåŠ¹ã‹ãªã„ï¼Ÿ Blasterãƒ¯ãƒ¼ãƒ ã¨æ¯”è¼ƒã—ã€Confickerã¯ã‹ãªã‚Šå·§å¦™ãªä½œã‚Šã«ãªã£ã¦ã„ã¾ã™ã€‚ãã®ç‚ºã‹ã€é§†é™¤ãƒ„ãƒ¼ãƒ«ãŒå¿…ãšã—ã‚‚æœ‰åŠ¹ã§ã¯ã‚ã‚Šã¾ã›ã‚“
hiroomi 2009/11/27
ä¸€æ™‚çš„ã«æ¥å‹™ã‚·ã‚¹ãƒ†ãƒ ã‚’åœæ¢ã—ã¦ã§ã‚‚é§†é™¤ã—ãªã‘ã‚Œã°è§£æ±ºã¯é•·å¼•ãã ã‘ã§ã™ã€‚

conficker

Downadup
ãƒªãƒ³ã‚¯
The Honeynet Project
Conficker.A going down? 10 Jul 2009 Tillmann Werner conficker Conficker contains a piece of code that has been object of speculation: It does not infect boxes located in the Ukraine. Before sending an exploit, it performs a lookup against Maxmindâ€™s GeoIP database, which is freely available, and skips the host if the returned country code is UA. While the B variant comes with a copy of the database
hiroomi 2009/11/16
conficker

Downadup
ãƒªãƒ³ã‚¯
Microsoft Learn: Build skills that open doors in your career
hiroomi 2009/10/15
conficker

Downadup
ãƒªãƒ³ã‚¯
Win32/Conficker.B ãƒ¯ãƒ¼ãƒ ã«é–¢ã™ã‚‹ã‚¦ã‚¤ãƒ«ã‚¹å¯¾ç–æƒ…å ±
Windows Server 2008 Datacenter without Hyper-V Windows Server 2008 Enterprise without Hyper-V Windows Server 2008 for Itanium-Based Systems Windows Server 2008 Standard without Hyper-V Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Vista Business Windows Vista Enterprise Windows Vista Home Basic Windows Vista Home
hiroomi 2009/10/15
conficker

Downadup
ãƒªãƒ³ã‚¯
McAfee Customer Service -- Official Site
hiroomi 2009/10/13
conficker

Downadup
ãƒªãƒ³ã‚¯
ã€ŒDownadupã€ãƒ¯ãƒ¼ãƒ ã«ã‚ˆã‚‹Windowsã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ç„¡åŠ¹åŒ–
æ³¨è¨˜ï¼šå½“è¨˜äº‹ã¯ã€ŒW32.Downadupã€ãƒ¯ãƒ¼ãƒ ç‰¹é›†é€£è¼‰ã®ç¬¬7å›žã§ã‚ã‚‹ã€‚ éŽåŽ»ã®æŠ•ç¨¿è¨˜äº‹ï¼ˆé–¢é€£è¨˜äº‹ï¼šæµ·è€ã§é¯›ã‚’é‡£ã‚‹ã€ŒDownadupã€ãƒ¯ãƒ¼ãƒ /ã€ŒDownadupã€ãƒ¯ãƒ¼ãƒ ã®å·§å¦™ãªã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ãƒ»ã‚¹ã‚ãƒ£ãƒ³ï¼‰ã§ã¯ï¼Œã€ŒDownadupã€ãƒ¯ãƒ¼ãƒ ãŒãƒªãƒ¢ãƒ¼ãƒˆãƒ»ãƒ—ãƒã‚·ãƒ¼ã‚¸ãƒ£ãƒ»ã‚³ãƒ¼ãƒ«ï¼ˆRPCï¼‰ã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã‚’ä½¿ã£ã¦æ„ŸæŸ“ã™ã‚‹æ‰‹å£ã‚’å–ã‚Šä¸Šã’ãŸãŒï¼ŒåŒãƒ¯ãƒ¼ãƒ ã¯åˆ¥ã®æ–¹æ³•ã§ã‚‚æ„ŸæŸ“ã™ã‚‹ã€‚ä¸ã§ã‚‚ç‰¹ã«ç›®ç«‹ã¤ã®ãŒï¼Œä¼æ¥ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å…±æœ‰ã‚’ä»‹ã—ãŸæ„ŸæŸ“ã§ã‚ã‚‹ã€‚ Downadupã¯ï¼ŒWindowsãƒ‘ã‚½ã‚³ãƒ³ãŒæœ€åˆã‹ã‚‰å‚™ãˆã¦ã„ã‚‹ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆå…±æœ‰ãƒ•ã‚©ãƒ«ãƒ€ï¼ˆADMIN$ï¼‰æ©Ÿèƒ½ã‚’ä½¿ã£ã¦ï¼Œè‡ªã‚‰ã‚’åˆ¥ã®ãƒ‘ã‚½ã‚³ãƒ³ã«ã‚³ãƒ”ãƒ¼ã™ã‚‹ã€‚ãŸã ï¼Œã“ã®ã‚³ãƒ”ãƒ¼å‡¦ç†ã«ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼èªè¨¼ãŒå¿…è¦ã«ãªã‚‹ã€‚ã“ã®ã“ã¨ãŒå¤§ããªå‰¯ä½œç”¨ã«ã¤ãªãŒã‚‹ã€‚ Downadupã¯ï¼Œã¾ãšãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã®ã™ã¹ã¦ã®Windowsãƒ‘ã‚½ã‚³ãƒ³ã®æƒ…å ±ã‚’å…¥æ‰‹ã§ãã‚‹NetServerEnumãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’ä½¿ã£ã¦ï¼Œãƒãƒƒãƒˆãƒ¯
hiroomi 2009/10/13
conficker

Downadup
ãƒªãƒ³ã‚¯
Conficker Working Group - Main - HomePage
hiroomi 2009/10/13
conficker

Downadup
ãƒªãƒ³ã‚¯
[Think IT] ç¬¬5å›žï¼šä»Šã“ã®çž¬é–“ã®æ”»æ’ƒã‚’åˆ†æžãƒ»å¯è¦–åŒ–ã™ã‚‹nicter (1/3)
ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æ•™ç¿’æ‰€ã€‘ æœªæ¥ãŒè¿‘ã¥ãã€æ–°ä¸–ä»£ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ï¼ ç¬¬5å›žï¼šä»Šã“ã®çž¬é–“ã®æ”»æ’ƒã‚’åˆ†æžãƒ»å¯è¦–åŒ–ã™ã‚‹nicter è‘—è€…ï¼šæƒ…å ±é€šä¿¡ç ”ç©¶æ©Ÿæ§‹ è¡›è—¤ å°†å² å…¬é–‹æ—¥ï¼š2008/03/31ï¼ˆæœˆï¼‰ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£äº‹æƒ… æœ¬é€£è¼‰ã§ã¯ã€ã“ã‚Œã¾ã§ã«æ–°ä¸–ä»£ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®è¦ã¨ãªã‚‹æŠ€è¡“ã¨ã—ã¦ã€æ–°ä¸–ä»£ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã‹ã‚‰ç„¡ç·šæŠ€è¡“ã€è¡›æ˜Ÿé€šä¿¡æŠ€è¡“ã‚’å–ã‚Šä¸Šã’ã¦ããŸã€‚æœ€çµ‚å›žã¨ãªã‚‹ç¬¬5å›žã§ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ç¾çŠ¶ã‚’æŒ¯ã‚Šè¿”ã‚Šã€ãã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œç‚¹ã‚’æŒ‡æ‘˜ã™ã‚‹ã¨ã¨ã‚‚ã«ã€æœ€æ–°ã®å¯¾ç–æŠ€è¡“ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ã“ã“ã§å–ã‚Šä¸Šã’ã‚‹å„æŠ€è¡“ã¨ãã®è¨è¨ˆæ€æƒ³ã¯ã€æ–°ä¸–ä»£ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ãŠã‘ã‚‹å®‰å¿ƒãƒ»å®‰å…¨ã‚’å®Ÿç¾ã™ã‚‹ä¸Šã§ã‚‚ã€å¿…è¦ä¸å¯æ¬ ã¨ãªã‚‹ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãŒç¤¾ä¼šã‚¤ãƒ³ãƒ•ãƒ©ã¨ã—ã¦ä¸–é–“ã«èªçŸ¥ã•ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ã‹ã‚‰ã€ã™ã§ã«æ•°å¹´ãŒçµŒéŽã—ã¦ã„ã‚‹ã€‚ãã®é–“ã«ã€æ”¿åºœãƒ»è‡ªæ²»ä½“ã«ã‚ˆã‚‹å…¬å…±ã‚µãƒ¼ãƒ“ã‚¹ã‚„éŠ€è¡Œæ¥å‹™ãªã©ã€ç”Ÿæ´»ã«å¯†ç€ã—ãŸæ‰‹ç¶šããŒã‚ªãƒ³ãƒ©ã‚¤ãƒ³åŒ–ã•ã‚ŒãŸã“ã¨ã§
hiroomi 2009/10/10
cubeã§confikerã®æµã‚Œã‚’è¦‹ã›ã¦ã‚‚ã‚‰ã£ãŸã€‚ã“ã†ã‚‚ã—ãªã„ã¨ã€e,dã«æ„ŸæŸ“ã—ãŸã®ã€æ¤œä½“ã¯ã‚ã‹ã‚‰ã‚“ã½ã•ãã€‚

CEATEC

conficker

Downadup
ãƒªãƒ³ã‚¯
ã‚¨ãƒ•ã‚»ã‚ãƒ¥ã‚¢ãƒ–ãƒã‚°
OWASP World Tour Tokyo 2017å¹´10æœˆ04æ—¥09:43 yoshinari_fukumoto ã‚ªãƒ•ã‚£ã‚·ãƒ£ãƒ«ã‚³ãƒ¡ãƒ³ãƒˆÂ byï¼šç¦æœ¬ ä½³æˆ ã¿ãªã•ã‚“ã€ã“ã‚“ã«ã¡ã¯ã€‚Rakuten-CERTã®ç¦æœ¬ã§ã™ã€‚ å…ˆæ—¥ã€æ±äº¬å·¥æ¥å¤§å¦ è”µå‰ä¼šé¤¨ã«ã¦OWASP World Tour TokyoãŒé–‹å‚¬ã•ã‚Œã¾ã—ãŸã€‚ã“ã®OWASPã®æœ¬æ ¼çš„ãªãƒˆãƒ¬ãƒ¼ãƒ‹ãƒ³ã‚°ã‚¤ãƒ™ãƒ³ãƒˆã¯ãªã‚“ã¨ç„¡å„Ÿã§æä¾›ã•ã‚Œã€æœ‰å¿—ã®ãƒœãƒ©ãƒ³ãƒ†ã‚£ã‚¢ã«ã‚ˆã£ã¦é‹å–¶ã•ã‚Œã¾ã—ãŸã€‚ã‚µãƒ†ãƒ©ã‚¤ãƒˆä¼šå ´ã‚‚å«ã‚ç·å‹¢700åã‚’è¶…ãˆã‚‹å‚åŠ è€…ãŒé›†ã¾ã‚Šã€ã“ã‚Œã ã‘ã®ã‚¤ãƒ™ãƒ³ãƒˆãŒã‚¹ãƒãƒ³ã‚µãƒ¼ç„¡ã—ã§å®Ÿæ–½ã§ããŸã¨ã„ã†ã“ã¨ãŒã€ã„ã¾ã®OWASP Japanã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ã®å¼·ã•ã‚’ç¤ºã—ã¦ã„ã‚‹ã®ã‹ãªã¨æ€ã„ã¾ã™ã€‚ä»Šå›žã®ãƒˆãƒ¬ãƒ¼ãƒ‹ãƒ³ã‚°å†…å®¹ã«ã¤ã„ã¦ã§ã™ãŒã€å„æ‰€ã§ã®æ§˜ã€…ãªOWASPã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®æ´»ç”¨ä¾‹ãŒå……å®Ÿã—ã¦ãŠã‚Šã€ä¼šå ´ã‹ã‚‰ã¯ã€ã“ã®ã‚±ãƒ¼ã‚¹ã‚¹ã‚¿ãƒ‡ã‚£ã‚’å‚è€ƒã«ã—ã¦è‡ªç¤¾ã§åŒã˜ã‚ˆã†ãªå–ã‚Šçµ„ã¿ã‚’ã‚„
hiroomi 2009/10/09
conficker

Downadup
ãƒªãƒ³ã‚¯
Informatik 4: Containing Conficker
Felix Leder and Tillmann Werner The following page contains the tools and analysis results described in our "Know your Enemy" paper "Containing Conficker - To Tame a Malware". The paper is published by the Honeynet Project and can be downloaded here: https://www.honeynet.org/papers/conficker All tools are to be considered as proof of concepts. Even though most of them run stable, they are not mean
hiroomi 2009/10/09
conficker

Downadup
ãƒªãƒ³ã‚¯
ãƒžã‚«ãƒ•ã‚£ãƒ¼ã€€ã‚¦ã‚¤ãƒ«ã‚¹å®šç¾©ãƒ•ã‚¡ã‚¤ãƒ«
McAfee+ Individual Plans Complete privacy, identity and device protection for individuals. McAfee+ Family Plans Complete privacy, identity and device protection for up to 6 family members.
hiroomi 2009/10/09
conficker

Downadup
ãƒªãƒ³ã‚¯
Microsoft Learn: Build skills that open doors in your career
Microsoft Learn. Spark possibility. Build skills that open doors. See all you can do with documentation, hands-on training, and certifications to help you get the most from Microsoft products. Learn by doing Gain the skills you can apply to everyday situations through hands-on training personalized to your needs, at your own pace or with our global network of learning partners. Take training Find
hiroomi 2009/07/08
ã€ŒW32/Confickerã€ã€ŒWORM_DOWNADã€ã€ŒW32.downadupã€ã®MSç‰ˆ

Downadup

conficker
ãƒªãƒ³ã‚¯
Microsoft Corporation
ã“ã®ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã¯ã‚µãƒãƒ¼ãƒˆã•ã‚Œãªããªã‚Šã¾ã—ãŸã€‚ Microsoft Edge ã«ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã™ã‚‹ã¨ã€æœ€æ–°ã®æ©Ÿèƒ½ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ›´æ–°ãƒ—ãƒã‚°ãƒ©ãƒ ã€ãŠã‚ˆã³ãƒ†ã‚¯ãƒ‹ã‚«ãƒ« ã‚µãƒãƒ¼ãƒˆã‚’åˆ©ç”¨ã§ãã¾ã™ã€‚
hiroomi 2007/04/24
ãƒªãƒ³ã‚¯
1