tag:blogger.com,1999:blog-10846851158606110722011-04-21T15:47:06.778-07:00Kendivhttp://www.blogger.com/profile/15628013927959375098noreply@blogger.comBlogger21100tag:blogger.com,1999:blog-1084685115860611072.post-1578315894020633062008-10-30T00:04:00.000-07:002008-10-30T00:27:01.044-07:00On June, I found an interesting storm worm. This worm used several "dark" techniques such as rootkit, customer packer to protect itself and it is also included a P2P component to spread the spam and downloading or control the infected computer.<br /><br />Overview of this worm <a href="http://3.bp.blogspot.com/_BaPmExYA4gU/SQlhQwooBiI/AAAAAAAAAAU/vXlXzPw5qPc/s1600-h/Overview.worm.png"><img id="BLOGGER_PHOTO_ID_5262844580120233506" style="DISPLAY: block; MARGIN: 0px auto 10px; WIDTH: 400px; CURSOR: hand; HEIGHT: 167px; TEXT-ALIGN: center" alt="" src="http://3.bp.blogspot.com/_BaPmExYA4gU/SQlhQwooBiI/AAAAAAAAAAU/vXlXzPw5qPc/s400/Overview.worm.png" border="0" /></a> <p>I have written a white paper for this worm, you can get this paper from the below URL:<br /><a href="http://securitylabs.websense.com/content/Assets/Storm_Worm_Botnet_Analysis_-_June_2008.pdf">http://securitylabs.websense.com/content/Assets/Storm_Worm_Botnet_Analysis_-_June_2008.pdf</a></p><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1084685115860611072-157831589402063306?l=kendiv.blogspot.com' alt='' /></div>Kendivhttp://www.blogger.com/profile/15628013927959375098noreply@blogger.com0tag:blogger.com,1999:blog-1084685115860611072.post-8162785330079738172008-10-29T23:21:00.000-07:002008-10-31T09:09:17.478-07:00Ok, I got my new home here, it will save all of the english stuff.<br />The chinese version blog : <a href="http://blog.csdn.net/kendiv/">http://blog.csdn.net/kendiv/</a><div class="blogger-post-footer"><img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/1084685115860611072-816278533007973817?l=kendiv.blogspot.com' alt='' /></div>Kendivhttp://www.blogger.com/profile/15628013927959375098noreply@blogger.com0