Iintsholongwane Mhlali: yintoni nendlela atshabalalise. computer virus

abasebenzisi abaninzi awajamelana ubuncinane kanye ebomini bakhe kunye ingqikelelo iintsholongwane computer. Noko ke, asingabo bonke abantu abaziyo ukuba zokuhlela sisiseko izoyikiso iquka iindidi ezinkulu ezimbini: non-umhlali kunye umhlali iintsholongwane. Makhe sihlolisise ibanga lesibini, kuba ukuba abameli balo zezona zinto ziyingozi, yaye maxa wambi undeletable nkqu ufomatha diski okanye ulwahlulo.

Yintoni memory-ongumhlali iintsholongwane?

Ngoko ke, yintoni umsebenzisi deal? Ukuze lula inkcazo ngesakhiwo kunye nemigaqo yokusebenza iintsholongwane enjalo ukuqala kukugxininisa echaza ukuba yintoni na inkqubo ngabahlali ngokubanzi.

Kukholelwa ukuba olu hlobo software iquka izicelo ukuba ayekwe kwimowudi iliso, ngokucacileyo ayibonisi izenzo zakho (umzekelo, le yabavavanyi ezifanayo rhoqo virus). Yona izisongelo ukungena kwinkqubo yekhompyutha, kodwa musa nje hang ngokusisigxina kwimemori ye computer, kodwa ukudala kabini zabo. Ngenxa yoko, iikopi zentsholongwane yaye esweni rhoqo le nkqubo kwaye sihambe kuyo, nto leyo eyenza kube nzima ukufumana kubo. Ezinye ubungozi kwakhona ukutshintsha isakhiwo yayo, kunye ozibonayo ngokusekelwe neendlela eziqhelekileyo cishe akunakwenzeka. Kamva, sijonga indlela ukulahla iintsholongwane zesi simbo. Okwangoku, kugxininisa iintlobo eziphambili izisongelo umhlali.

DOS-usongo

Ekuqaleni, xa NN ‧ okanye UNIX-ezifana iinkqubo akazange ayisekho, kwaye unxibelelwano umsebenzisi kunye computer akwinqanaba uqeqesho, kwabakho "cacis» DOS, elide ngokwaneleyo ukuze sibambe kwincopho ethandwayo.

Kwaye ukuba iinkqubo ezo kumisa non-umhlali kunye ngumhlali iintsholongwane, isiphumo apho ndalathiswa kuqala ukuya ukungasebenzi le nkqubo okanye ukususa iifayile isiko kunye nabalawuli.

Umgaqo esebenza ngayo izisongelo ezinjalo, leyo, ngokuzenzekelayo, lisetyenziswa ukuza kuthi ga ngoku, kukuba komisa iminxeba ukuya iifayile, uze emva koko yosulele le callee. Noko ke, uninzi izoyikiso ezaziwayo namhlanje isebenza phantsi kolu hlobo. Kodwa nantsi iintsholongwane ukugqobhoza apha kule nkqubo okanye ngokudala imodyuli ngumhlali ngohlobo umqhubi leyo kucacisiwe kwinkqubo kwifayile yoqwalaselo, i Config.sys, okanye ngokusebenzisa zemisebenzi eyodwa yokulandela KEEP okuphazamisa.

Le meko mbi kwimeko xa imemori-umhlali iintsholongwane ze olu hlobo isetyenziselwa ulwabiwo ummandla memory nkqubo. Le meko yenza ukuba intsholongwane kuqala "wazinqumla" iqhekeza imemori ezamahala, ngoko kuphawula le ndawo njengoko esiyi, ngoko ugcina ikopi yalo nto. Yintoni eyona buhlungu, kukho iimeko apho iikopi sele ividiyo kwinkumbulo, kwaye kwimimandla libekelwe eqhotyoshwayo, netafile kumda wesangqa uphazamiso, kunye neendawo zokusebenza DOS.

Konke oku kwenza iikopi nokoyikiswa intsholongwane enamandla kangangokuba, ngokungafaniyo iintsholongwane non-umhlali ukuba isebenze de yokusebenza okanye yokusebenza imisebenzi inkqubo, isebenze kwakhona emva kwakhona. Ukongeza, xa ezisafunwa into elosulelekileyo intsholongwane uyakwazi ukuyila ikopi yakho, nkqu kwinkumbulo. Ngenxa yoko - nangoko usisiqhwala ikhompyutha. Njengoko kucacile, unyango iintsholongwane yolu hlobo kufuneka wenziwe ngoncedo yabavavanyi ezizodwa, yaye oko akuyonto zokubhala, kunye ephathekayo okanye abo abakwaziyo ukuziqala ukusuka woqondo drive okanye USB-drive. Kodwa siza kuthetha kamva.

usongo lendlela yokuqalelisa ikhompyutha

iintsholongwane wesiqalo zingene kwinkqubo yi indlela efanayo. Yiloo nje mabaziphathe, into ekuthiwa, ubuncwane, okokuqala "ukutya" iqhekeza memory system (njenge-1 KB, kodwa ngamanye amaxesha eli nani ukufikelela kuma-30 KB), uze echaza ukuba ikhowudi yayo ngohlobo ikopi, uze ukuqala ezifuna ukuba phansi. Oku naxa ingumbandela ozaliswe ziziphumo ezimbi, kuba emva kokuba uqalise intsholongwane ulibuyele memory yancitshiswa kubungakanani bayo boqobo, kunye nekopi ngaphandle kwindlela inkumbulo.

Ukongezelela tracking iziphazamiso anjenge bakwazi ukumisela ikhowudi zabo kwicandelo wesiqalo (MBR irekhodi). Ngaphantsi asetyenziswa rhoqo engenela BIOS kunye DOS, kwaye iintsholongwane ngokwabo zilayishwe kanye, ngaphandle kokuhlola ngenxa iikopi zabo.

Lukhuni Windows

Nokufika kuphuhliso intsholongwane-Windows Iinkqubo bafikelele kwinqanaba entsha, ngelishwa. Namhlanje yinto ezitho oluguqulelo lwe Windows ithathwa inkqubo babuthathaka, nangona imigudu eyenziwa ziingcali Microsoft kuphuhliso iimodyuli zokhuseleko.

Virus eyenzelwe on Windows; isebenza kwi ofanayo umgaqo kwi DOS-ukusongela, kuphela kwendlela ndzulu computer kukho okungakumbi. Avamise kakhulu emithathu ezingundoqo, nto leyo intsholongwane unakho ukumisela inkqubo yayo ikhowudi lakhe:

• Ukubhaliswa ntsholongwane njengoko izicelo ezisebenzayo ngoku;
• ulwabiwo block yinkumbulo ubhale iikopi kuyo ngokwakhe;
• ukusebenza kule nkqubo phantsi ngesebe okanye abaqhubi engaqondakaliyo VxD phantsi NT Windows umqhubi.

iifayile engenwe okanye indawo kwindlela inkumbulo, umgaqo, iyanyangeka ngeendlela eqhelekileyo, ezithi zisetyenziswe kule yabavavanyi anti-virus (virus Ubhaqo imaski, uthelekiso kunye zolwazi zasayinwa njalo njalo. D.). Noko ke, ukuba kusetyenziswa nabalulamileyo iinkqubo ezamahala, abakwazi ukubona intsholongwane, kwaye maxa wambi bade banike emihle zobuxoki. Ngoko ke, lo umqadi sebenzisa izixhobo eziphathwayo njenge "Gqirha Web" (ngakumbi, uGqr Web CureIt!) Okanye Iimveliso 'Kaspersky Lab ". Noko ke, namhlanje uyakwazi ukufumana okuninzi lwezixhobo yale hlobo.

amagciwane Macro

Phambi kwethu yenye ezahlukeneyo izisongelo. Igama livela elithi "macro", ie applet ephunyeziweyo, okanye add ezisetyenziswa kwezinye abahleli. Akumangalisi ukuba ukusungulwa kwentsholongwane kwenzeka ekuqaleni kwenkqubo (Word, Excel, njalo njalo. D.), Ukuvulwa uxwebhu ofisi, uprinte, ukubiza izinto menu, njalo-njalo. N.

izisongelo ezinjalo ngohlobo imacros zesikocan wendlela lugcinwe kwinkumbulo lonke umhleli ixesha ukubaleka. Kodwa ngokubanzi, xa siqwalasela umbuzo indlela lokuyigxotha le iintsholongwane yolu hlobo, isisombululo ilula. Kwezinye iimeko, oku kuyanceda nditsho yesiqhelo Khubaza Dibanisa-ons okanye imacros zesikocan kumhleli, kwakunye ipoti ye applet yokhuseleko wesi, singasathethi inkqubo yesiqhelo iiphakheji scan unqulo ngokukhawuleza.

Iintsholongwane ngokwesiseko ubuchwepheshe "cwaka"

Ngoku khangela kule iintsholongwane wazenza mntu, ayimangalisi baza igama labo moya lahlukile.

Eli ukusebenza kwawo iqulathe kanye kule yokuba azivelelayo icandelo inkqubo ze imisele iindlela zabo eqhelekileyo maxa wambi kuba nzima ngokwaneleyo. Phakathi kwezi izisongelo zingafunyanwa kunye iintsholongwane macro, kwaye ukuziqala usongo, kunye DOS-iintsholongwane. Kukholelwa ukuba lahlukile iintsholongwane Windows nabangekafumani ziphuhliswe, nangona iingcali ezininzi ukuphikisana ukuba kudlula ixesha.

imihlobo ifayile

Ngokubanzi, zonke iintsholongwane nga ngokuba ifayile, kuba kuchaphazela thile inkqubo ifayile aze enze kwi fayile, okanye nokosulela nabo ikhowudi yayo, okanye umbhalo iwuse kwi khowudi, okanye ukwenza ingafikeleleki ngenxa urhwaphilizo okanye ukususwa.

Umzekelo elula le mihla coders iintsholongwane (rhorho kuphela), kunye lobunqambi I Love You. Avelisa anti-virus ayikho into kunzima ngaphandle keys rasshifrovochnyh okhethekileyo, yaye ngokufuthi akunakwenzeka ukuyenza. Nkqu ababhekisi phambili software anti-virus aninakwenza nto Yho, ngenxa yokuba, ngokungafaniyo namhlanje inkqubo AES256 ufihlo, ngoko kusetyenziswa ubuchwepheshe AES1024. Uyaqonda ukuba okotshiweyo ingathatha ngaphezu kweshumi, ngokusekelwe kwinani kunokwenzeka imidibaniso yamaqhosha.

izisongelo polymorphic

Ekugqibeleni, omnye ezahlukeneyo izisongelo, ezisebenzisa le ngxaki yokusetyenziswa polymorphism. Yintoni na? Isibakala sokuba iintsholongwane atshintsha rhoqo ikhowudi yakho, yaye oku kwenziwa ngokususela ekuthiwa-iqhosha zokudada.

Ngamanye amazwi, imaski ukuchonga ingozi akwenzeki, kuba, njengoko sibonile, iyahluka nje kuphela kwindlela esekelwe kwi khowudi, kodwa ezingundoqo zokucazulula. STB ezikhethekileyo polymorphic (transcribers) zisetyenziswa ukujongana neengxaki ezinjalo. Noko ke, njengokuba kusenziwa imiboniso, ukuba uyakwazi ukuwuqonda iintsholongwane ezininzi elula kuphela. ubuchule nobunzima kakhulu, ngelishwa, kwiimeko ezininzi, abakwazi ukuba ifuthe labo. Kufuneka kwakhona zithi ukuba kutshintshwe ikhowudi ntsholongwane ihamba kunye nokudalwa leekopi ubude zawo, nto leyo zingohluka kwezo original kubaluleke kakhulu.

Indlela ekujonganeni neentsongelo abahlala

Ekugqibeleni, sibheka kuzo umba ukulwa iintsholongwane umhlali nokukhusela iinkqubo zekhompyutha nawuphi xaka. Indlela elula kwabakhweli ingaqatshelwa ufakelo wexesha elizeleyo package anti-virus, yiloo ukusetyenziswa kuphela Kuhle software free, kodwa ubuncinane shareware (trial) bookmark us evela abaphuhlisi ezifana "Gqirha Web", "Kaspersky Anti-Virus", i-ESET NOD32 kunye nenkqubo uhlobo Smart Security, ukuba umsebenzisi usoloko usebenza kwi Internet.

Noko ke, kule meko, akukho mntu omzimba kuloo usongo ukungena kwi computer. Ukuba kunjalo, le meko iye kwenzeka, kuqala kufuneka asebenzise yabavavanyi eziphathwayo, kwaye kubhetele ukusebenzisa eziluncedo diski Rescue Disk. Ukuba ingasetyenziswa ivuleke ujongano lwenkqubo, ukufunda ngokukhawuleza phambi kokuqala engundoqo yokusebenza (iintsholongwane olunokudala ukugcina iikopi zawo kule nkqubo, kwaye nkqu-memory).

Kwaye kwakhona, ayikhuthazwa tu into yokuba ukusebenzisa software ezifana SpyHunter, uze emva koko ukusuka iphakheji kwanangamacandelo ezinxulumene zawo ukuphelisa lomsebenzisi uninitiated bekuya kuba yingxaki. Kakade ke, musa nje ukususa iifayile abosulelekileyo okanye uzame ukufomata hard drive. Kulungile ukuba ushiye unyango lobungcali iimveliso anti-virus.

isiphelo

Kuhleli ukongeza ukuba le miba ingentla kuqwalaselwa kuphela eziphambili ezinxulumene iintsholongwane abahlali kunye nendlela yokulwa nazo. Ngapha koko, xa sijonga izisongelo computer, ngoko ukuthetha, ngengqiqo lwehlabathi, yonke imihla kukho inani elikhulu kubo, la mayeza ababhekisi bamane nje ixesha ukuza neendlela ezintsha zokujongana nobunzima enjalo.