Hoi Hoi
Ein Arbeitskollege von mir hat nach seinen Angaben den LOVESUN Virus drauf. Nach 60sek. fährt der PC wieder runter. Wie entferne ich ihn, ohne das der PC gleich wieder runterfährt ???
Viren, Spyware, Datenschutz 11.241 Themen, 94.650 Beiträge
Tyrfing Teletom „Ja aber DCOM zu deaktivieren, nutzt überhaupt nichts, Blaster z.B....“
Zitat von Microsoft.com:
"Microsoft originally released this bulletin and patch on July 16, 2003 to correct a security vulnerability in a Windows Distributed Component Object Model (DCOM) Remote Procedure Call (RPC) interface.[...]There is a vulnerability in the part of RPC that deals with message exchange over TCP/IP. The failure results because of incorrect handling of malformed messages. This particular vulnerability affects a Distributed Component Object Model (DCOM) interface with RPC, which listens on RPC enabled ports. This interface handles DCOM object activation requests that are sent by client machines to the server. An attacker who successfully exploited this vulnerability would be able to run code with Local System privileges on an affected system. The attacker would be able to take any action on the system, including installing programs, viewing changing or deleting data, or creating new accounts with full privileges."
DCOM ist eigentlich der Hauptproblemfaktor an dem ganzen RPC-Kram
"Microsoft originally released this bulletin and patch on July 16, 2003 to correct a security vulnerability in a Windows Distributed Component Object Model (DCOM) Remote Procedure Call (RPC) interface.[...]There is a vulnerability in the part of RPC that deals with message exchange over TCP/IP. The failure results because of incorrect handling of malformed messages. This particular vulnerability affects a Distributed Component Object Model (DCOM) interface with RPC, which listens on RPC enabled ports. This interface handles DCOM object activation requests that are sent by client machines to the server. An attacker who successfully exploited this vulnerability would be able to run code with Local System privileges on an affected system. The attacker would be able to take any action on the system, including installing programs, viewing changing or deleting data, or creating new accounts with full privileges."
DCOM ist eigentlich der Hauptproblemfaktor an dem ganzen RPC-Kram
