1. This trojan takes advantage of the "eternal blue" vulnerability to attack and spread in the local area network. It builds a robust botnet of the infected machine, supports the self-renewal of the intranet, and lurks in the computer for a long time to extract Monroe money. Because most ordinary personal computers have been patched by windows security update and Tencent computer manager and other security software, they are basically not affected by wanna miner. It is suggested that if the suspected wanna miner
mining Trojan horse is found, the poisoned machine can be located and isolated in time. It can be judged by scanning port 26931. If the port is open, the host has been infected; If you need to patch the intranet, all the computers that have not been patched. It is suggested that professional terminal security management software should be installed in the whole network, such as Tencent Yudian. The administrator should carry out mass antivirus and patch installation for the whole network to avoid unnecessary losses.
2. You can apply to use Tencent Yudian on Tencent Smart Security page, and then use the vulnerability repair function on this software to directly detect and repair the computer vulnerabilities
3. a new customer recently consulted with sine security company, saying that his server often fails to open the website of the card, and the remote connection to the server is extremely slow. Sometimes the Ping value reaches 300-500, and he often switches. After listening to the customer's words,
will generally judge that he has been attacked by CC + DDoS mixed traffic, It's strange to say that there is no traffic attack on the computer room. It's not a traffic attack, but it also causes the server card and website to fail to open. What kind of attack is this? In order to solve the problem of
client server card, we immediately arranged a security engineer to carry out security detection and deployment on his Linux server
{rrrrrrr}
Mining Trojan horse is also designed. If the mining process is forced to stop by customers, it will automatically start to continue mining to achieve uninterrupted mining.
careful inspection shows that it is through setting the hourly task plan, remotely downloading shell mining Trojan horse, and then executing, Check whether the current process exists or not. If not, start the Trojan horse to mine
a detailed security inspection was carried out on the client's Linux server. It was found that fortunately, there was no encrypted server data, and the worm was infected with the disease
virus. If the data was encrypted, the loss would be great. The client was a platform, and the client's data was very important. After finding out the mining Trojan horse,
do customers need to know how the server is attacked? Was the Trojan horse uploaded? It can prevent the attack
in the later stage
through the security detection and analysis of our security engineers, we found that the server uses Apache Tomcat environment, the open architecture of the platform is JSP + Oracle database, and Apache Tomcat uses the version of 2016, which leads to the serious remote command execution vulnerability of Apache, Through this vulnerability, the intruder can directly invade the server and get the administrator permission of the server,
sine security engineer immediately repairs the Apache vulnerability and clears the Trojan horse. So far, the problem has been solved, the client server
runs stably, and the network station opens normally
4. Now let's see who else is playing SF. Brother, quit. It's not interesting
5. It's OK to use Tencent computer housekeeper. Every time I download a software, I open Tencent computer housekeeper, and then check if there is any abnormality in the software. If not, I use it. If there is, Tencent computer Housekeeper will kill it directly
6. Can use Tencent computer housekeeper, all-round protection account security, accurate attack Trojan horse, instant killing risk. Computer clinic, for daily computer problems repair and processing, covering a wide range of problems, fast search, intelligent matching, easy to solve computer problems step by step. Real time all-round protection of the user's computer from Trojan horse attacks.
7. Can use Tencent computer housekeeper is a two in one anti-virus and management security software, all-round protection of users online security. The first time to participate in the AVC evaluation is the best performance rating. Is China's first two in one anti-virus software, security manager. Small memory, good antivirus and protection.
8. The "beauty scorpion" mining Trojan horse uses the beautiful woman's picture to encrypt and transmit the information of the mine pool, which is hidden in all kinds of auxiliary software for dissemination. According to the characteristics of the Trojan horse selectively invading computers without installing security software, we can download and install Tencent computer housekeeper and other software in time to do a good job in computer self defense and avoid unnecessary losses.
9. It depends on what monitoring software is installed on your computer. Don't open some malicious links or web pages at will. Besides, you should have security awareness. Secondly, there should be monitoring software on your computer to be more secure. For example, Tencent computer manager suggests that we should improve our network security awareness and keep Tencent computer manager and other security software running all the time when we use our computer, Be alert to links and documents of unknown origin, so as to prevent criminals from taking advantage of them.
10. You can reprogram the little program in the official account.
