Rootkit - a ... Izinhlelo ukususa rootkits. Kaspersky Anti Virus

Ikhompyutha amagciwane kungenziwa ngokuthi uhlelo lusebenza ngasese ukulimaza ohlelweni lonke noma ingxenye ethile yayo. Njalo uhlelo lwesibili ebhekene nale nkinga. Kwesobunxele kakade yimuphi umsebenzisi PC ungoyedwa ongazazi ukuthi igciwane computer.

Izinhlobo zama-computer ezonakele:

1. Izikelemu. Lezi izinhlelo ukucinanisa izivikeli ngu ukukhiqizwa kabusha okuqhubekayo, ukukopishela ngokwabo. Lapho wabo ohlelweni, kancane lapho isebenza khona. Worm Awukwazi ukuhlanganisa nanoma iyiphi ohlelweni lwezokuphepha. It ikhona njengenkampani ifayela ehlukile (s).
2. Trojans uhlangane ne ayinangozi futhi simaskwe kubo. Abanaso kubangele sanoma yikuphi ukulimala kwe-computer kuze umsebenzisi ukusebenzisa ifayela equkethe iThrojani. Lezi amagciwane ezisetshenziswa ukususa futhi ushintshe idatha.
3. izinhlelo spyware ukuqoqa ulwazi. Umgomo wabo - ukuthola amakhodi, amaphasiwedi ukudlula kumuntu owabadala sethula ku-intanethi, Ngamafuphi nje - umnikazi.
4. Zombie amagciwane uvumele hacker ukulawula ikhompyutha itheleleke. Umsebenzisi kungenzeka ukuthi anazi ukuthi PC wakhe ungenwa futhi ngubani.
5. izinhlelo Ukuvimba ungenzi kungenzeka nhlobo ukuze ungene ku.

Uyini rootkit?

Rootkit - okungukuthi eyodwa noma ngaphezulu izinhlelo zingafihla khona engadingeki izicelo kukhompyutha yakho, ukuze usizo kubaduni ukuba isenzo ngokushesha. It iqukethe ngokuphelele konke kuhamba kahle imisebenzi malware. Kusukela lolu hlelo lokusebenza ngokuvamile ekujuleni ezibilinini kohlelo, kunzima kakhulu ukuthola usebenzisa antivirus noma isofthiwe ukuphepha. Rootkit - kuyinto lamathuluzi isofthiwe Ungafunda amaphasiwedi agciniwe, scan idatha ahlukahlukene, futhi ukuvimbela ukuvikelwa PC yakho. Ngaphezu kwalokho, nansi umsebenzi we backdoor, kusho ukuthi lolu hlelo inikeza umhlaseli ithuba ukuxhuma ikhompyutha yakho ukude.

Ngamanye amazwi, a rootkit - kuyinto isicelo unesibopho abaphuca uhlelo imisebenzi. bungabonakala for uhlelo lokusebenza lwe-Windows rootkits popular ezifana: TDSS, Necurs, Phanta, Alureon, ngamatshe, ZeroAccess.

zinhlobo

Abantu bakholelwa izinto eziningana zalokhu izinhlelo ezibangelwa amagciwane. Abakwazi zingahlukaniswa izigaba ezimbili: umsebenzisi-mode (umsebenzisi) kanye ikhenela-mode (ikhenela-mode rootkits). esigabeni sokuqala Izinsiza babe ngokusebenza okufanayo zokusebenza desktop ingaqalisa ku kudivayisi. Abakwazi ukusebenzisa imemori luvele luyasebenza izinhlelo. Lona khetho ethandwa kakhulu. Rootkits kukhona yesibili sigaba ngokujulile ohlelweni futhi egcwele ukufinyelela kukhompyutha. Uma isimiso esinjalo ifakiwe, umhlaseli ungenza ngedivayisi ehlaselwa cishe noma yini ayifunayo. Rootkits lokhu ezingeni okungukuthi okuningi kunzima ukwakha, ngakho ngowokuqala isigaba nokuningi ethandwa. Kodwa viral Uhlelo core ezingeni akulula ukuthola futhi ususe, futhi isivikelo computer amagciwane ngokuvamile baqiniseka engenamandla.

Zikhona nezinye, ezahlukeneyo lingandile ka rootkits. Bootkit ngokuthi lezi zinhlelo. Ingqikithi yomsebenzi wabo itholakala lokuthi ukuthi uthole ukulawula idivayisi eside ngaphambi kokuqala kohlelo. Okusanda, ke wadalwa rootkit ehlasela Android-smartphone. Hacking ubuchwepheshe ivela njengoba nje isofthiwe letsinzionnoe - kuzosiza nokumelana nokwanda izikhathi.

rootkits okuzenzela

A-computer amaningi kakhulu abatheleleke asezindaweni okuthiwa zombie amanethiwekhi futhi isetshenziselwe ukuthumela imiyalezo spam. Ngezinye efanayo abasebenzisi isikhathi PC akusho usola lutho mayelana "umsebenzi" enjalo. Kuze kube namuhla, kwathiwa evamile ukuthi ukuba ukudala okukhulunywa program professional kuphela ongabona kunethiwekhi. Kodwa ngokushesha kakhulu izinto zingashintsha kakhulu. Inethiwekhi empeleni ukuthola amathuluzi ezingasho ngokudala igciwane izinhlelo. Ngokwesibonelo, usebenzisa iqoqo Phusha okuthiwa, ungakwazi kalula ukudala rootkit. Isisekelo lesi ikhompyutha Ncinza Builder iThrojani, okuyinto kungenziwa kulekelelwa ezihlukahlukene imisebenzi. Lolu hlelo lokusebenza kalula ukufunda amaphasiwedi iziphequluli ukuqaphela idatha input bese uyithumele imikhonyovu, ngobuqili ukufihla izici zabo.

Izindlela kudivayisi ukutheleleka

Ekuqaleni rootkits ziyasetshenziswa ngendlela efanayo njengoba nezinye izinhlelo igciwane. Lapho ngishiyeka isiphequluli i-plugin noma uthole isicelo computer ngeke kube nobunzima. Ngokuvamile esetshenziswa ngalezi zinhloso flash oshayelayo. Ngezinye izikhathi kubaduni ngivele induku ezindaweni ezinabantu abaningi, lapho abantu ingacosha idivayisi onegciwane omunye. Ngakho kukhompyutha lohlaselwayo uthola rootkit. Lokhu kuholela yokuthi isicelo isebenzisa ohlangothini ezibuthakathaka uhlelo futhi kalula uthola isikhundla evelele kuyo. Uhlelo ke lucwaningo ukufakwa kwezingxenye asizayo ezisetshenziswa ukulawula ikhompyutha buqamama.

bokweba imininingwane ebucayi

Ngokuvamile, uhlelo abangenwe ophathe. Kukhona ithuba elikhulu ukufaka ikhodi kukhompyutha ngesikhathi thwebula of imidlalo ezingekho emthethweni kanye nezinhlelo. Kuvame wazifihla njengendlela ifayela ebizwa ifayela. Ungalokothi ukhohlwe ngezingozi isofthiwe nemidlalo elandiwe kusuka kumasayithi engathembekile. Ngokuvamile, umsebenzisi iqala a rootkit bebodwa ke lolu hlelo luyoba ngokushesha ukufihla zonke izimpawu imisebenzi yabo, futhi bakuthola kunzima kakhulu ngaleso sikhathi.

Kungani kunzima ukuthola rootkit?

Lolu hlelo iphatha ukucabhela idatha kusuka izicelo ezahlukene. Ngezinye izikhathi antivirus ukukhomba lezi zenzo ngokushesha. Kodwa ngokuvamile, lapho idivayisi asemithonjeni, kalula igciwane efihla lonke ulwazi mayelana nesimo se-computer, nge imisebenzi elandelayo abantu abaye balahlekelwa umsebenzi kakade, futhi ulwazi mayelana nazo zonke software ayingozi isusiwe. Kusobala ukuthi esimweni esinjalo, anti-virus akunakwenzeka ukuthola izimpawu rootkit abuye etame uyisuse. Kodwa, njengoba umkhuba imibukiso, izinhlelo anti-virus sikwazi ukuqhubeka ukuhlaselwa okunjalo. Futhi izinkampani ezikhiqiza software yokuvikela bese njalo ubuyekeze umkhiqizo, enezele futhi ulwazi olufanele mayelana ngishiyeka ezintsha.

Cinga rootkits kukhompyutha yakho

Ukuze uthole lezi izinhlelo ezinonya zingase zisebenzise ngamathuluzi ahlukahlukene eziklanyelwe le njongo. Ubhekana nale nkinga, "Kaspersky Anti Virus". Kufanele kube lula ukuhlola zedivayisi nganoma yiziphi uhlobo ubuthakathaka malware. Lokhu kuqinisekisa kubaluleke kakhulu ukuvikela ohlelweni kusuka amagciwane, kuhlanganise rootkit. Ngosizo zithwetshulwa kuthola ikhodi enonya, okuyinto ayikwazanga ukuthola isivikelo izinhlelo ezingafuneki. Ngaphezu kwalokho, search kusiza ukuthola sengozini isikhala yesistimu yokusebenza lapho abahlaseli ungasabalalisa izinhlelo ezinonya futhi izindawo. Ingabe ufuna Ukuvikelwa efanelekayo? Wena kokuhle 'Kaspersky ". I rootkit kungatholakala ngokumane kuhlanganise search yezikhathi la magciwane ohlelweni lwakho.

Ukuze uthole yosesho eziningiliziwe izicelo ezinjalo, kumelwe ulungiselele software unqulo wesi arab ukuhlola umsebenzi ebaluleke kakhulu amafayela uhlelo ezingeni aphansi. Kubalulekile futhi kakhulu ukuqinisekisa ezingeni lelisetulu self-ukuvikelwa unqulo wesi arab, njengoba rootkit kalula ukusebenza.

Ihlola ngemoto

Ukuze ube nesiqiniseko ukuthi ukuphepha kwe-computer yakho, kufanele uhlole lapho uvula wonke amadivayisi esiphathekayo. Rootkits kalula ukungena ohlelweni lwakho lokusebenza ngokusebenzisa oshayelayo esikhiphekayo, flash oshayelayo. "Kaspersky Internet Security" udalula monotoringu konke esikhiphekayo Imininingwane abathwali lapho yokuxhuma ukuba iyunithi. Ukuze wenze lokhu, wena nje udinga ukusetha ngemoto test futhi qiniseka ukulandela antivirus zakho zokubuyekeza.

Ukususa rootkit

Impi yokulwa lezi zinhlelo zokusebenza ezinonya, zikhona izinkinga eziningi. The main inkinga siwukuthi bangamalungu ngempela ngokuphumelelayo naleli nokubonwa yokucasha lokubhalisa okhiye zonke amafayela wakho ukuze unqulo wesi arab ngeke ubathole. Kukhona amathuluzi software zokususa rootkits. La mathuluzi zadalwa ukucinga isofthiwe enonya usebenzisa izindlela ezahlukahlukene, kufaka phakathi ezikhethekile kakhulu. Ungalanda uhlelo sasivumela ngempumelelo Gmer. Kuyokusiza ukuba abhubhise iningi rootkits ezaziwayo. Olunye uhlelo kungenzeka AVZ kuyancomeka. It ngempumelelo kuthola cishe kunoma iyiphi rootkit. Indlela ukususa isofthiwe eyingozi lolu hlelo? Kuyinto elula: adalule izilungiselelo oyifunayo (Umbuso indawo kungaba kokubili uthumele amafayela onegciwane ehlukanisiwe futhi bawasuse ngokwakho), bese ukhetha uhlobo lokuhlolwa - PC monotoring okuphelele noma okuyingxenye. Khona-ke siqale isivivinyo uqobo bese ulinda imiphumela.

Special Uhlelo TDSSkiller ngempumelelo yokulwa TDSS isicelo. AVG Anti-Rootkit kuzosiza ukususa rootkits asele. Kubalulekile kakhulu ngemva kokusebenza like abasizi ukuhlola uhlelo khona ukungcoliswa iyiphi unqulo wesi arab. Kaspersky Internet Security ngeke babhekane nalesi msebenzi. Ngaphezu kwalokho, ikhono ukususa rootkits ngaphezulu letilula umsebenzi ukwelashwa.

Udinga ukhumbule ukuthi uma ekufuneni noma iyiphi isofthiwe samagciwane musa ukuvula noma yiziphi izinhlelo zokusebenza noma amafayela kwikhompyutha yakho. Khona-ke isivivinyo zizosebenza ngaphezulu. Ngokwemvelo, akumelwe sikhohlwe njalo ubuyekeze anti-virus software. Ideal - nsuku zonke okuzenzakalelayo (isethwe ku izilungiselelo) isofthiwe update ukuthi kwenzeka uma ukuxhumana kwenethiwekhi.