???? ????? ?? ???? ????? ???? ?????? ??? ????? MIRC ????????

???? ???????: 328691 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???????? ????? ????? ??????? ?????? ?????? ???????
??????
????? ??? ??????? ??? Windows 2000. ????? ?? Windows 2000 ????? ?? 13 ????? 2010.Windows 2000 End-of-Support Solution Center
(http://support.microsoft.com/?scid=http%3a%2f%2fsupport.microsoft.com%2fwin2000)
???? ????? ?????? ?????????? ??????? ????? ?? ?? ???? ??????? Windows 2000. ????? ?? ????????? ???? Microsoft Support Lifecycle Policy
(http://support.microsoft.com/lifecycle/)
.
????? ???? | ?? ????

?? ??? ??????

??????

UPDATE: ???? ?? 6 ?????? 2002 ? ?????? ?????? ???? ???? ????? ????? ??????? ?? ??? ??????? ???? lessened ???? ?????. ???? ???? ????? ??? ?????? Microsoft ?????? ??? ????? "????? ??????? ?? Microsoft" ???? ??? ????????? ???????? ??? ????? ???????? ????? ?? ???????? ????????.

????? Microsoft ?????? ????? ?? ???? ????? ???? ????? ????? ????????? ???????? ??? ???????? ???? ???? ????? ??????? Microsoft Windows 2000. ??? ?????? ??? ????? ?? ?????? ???? ?? ??????? ??? ???? Backdoor.IRC.Flood.

?? ???? ????? ????? ????????? ???? ?? ?????? ? ???? ???? Microsoft ???? ?? ???? ??? ??????? ??????? ???????? ?????? ?????? ??????? ??? ??????? ? ?? ???? viral ?? ??? ??????? ??????? ?? ?????. ????? ?? ???? ????? ??????? ???? ????????? ?? ??????? ??? ?????????? ???????? ?? ?? ??? ???????? ????? ??? ?? ?????? "????????? ????????". ???? ?????? ??????? ?????? ??????? ?? ??????? ??????? ???? ??????? ???? ????? ??? Windows 2000. ?????? ????? ???? compromises ??????? ??? ????. ???? ??? ??????? ??????? ???????? ????? ???? ????? ??????? ???????? ??? ??? ?????? ???? ???? ????? ????? ???????:
  • ????? ?? ????? ????????? ???????.
  • ????? ????? ????????? ??????? ?????????.
???? ??? ?????? | ????? ???????

??????? ????

????? ??????

????? ????

???????

????? ????? ??????? ???? ?? ???? ?? ??????? ???????:
  • ???? ?????? ?????? ????????? ?? ??? ?? ???????? Backdoor.IRC.Flood ???????. ?????? ??????? ?? ????????? ?????? (???? ?????? ????? ????????? ???????) ????? ?? ??? ????? ??????.
  • ??? ??? ????????? ??????? ???? ???? ????, ??? ????? ??? ??????. ??? ????????? ??????? ?? ??? ?????? ???????:
    • ??? ????? ????? ?????? Guest ?????? ???? ?????.
    • ?????? ??? ?????? ?? ?????? ???? ????????? ?????? ??? ???????.
    • ??? ????? ?????? ?????? ??? ?????? ?? ?? "Active Directory".
    • ????? ??? ?????????? ????? ?????? ??? ?????? ?? ????? ?????.
    • ?? ???? ?????????? ??? ??????? ???????? "Active Directory" ?? ???? ?????? ???????? ?? Microsoft (MMC).
    • ????? ????? ??? ????????? ??? ?????? ???????? ????? Active Directory ?????? ? ????? ????? ????? ???????:
      ?? ???? ????? ???? ??????? ??????? ?????: ?????? ???? ??? ???????. ???? ?????? ?????? ?????? ?? ?????? ?? ?????? ???? ???? ???? ??? ??????? ??????.
    • ??? ????? ??????? ??? ??????? ????? ?????? ??????? ?? ????? ?????????? ????? ?? ??????.
    • ??? ?????? ????? DCDIAG ??? ???? ???? ???? ?? ????? ???? ?? ???? ?? ????? ????? ???????:
      ????? ??????? ??????: ???? ?? ????? 31 ??? LDAP [sic1] ? ????? ??? ?????? ?? ????.
      ????? ??????? ??????: [ServerName] ??? ??? LDAP ?? ??? 1323 ??? ???? ??? ????? ???? ??????. ?????? ???? ?? ??????? ????? ?????? ??????? ??? ?????. *** ???: ?????? ???? ??????? ??? ???? ???? ?????? DC ???? ?????? ???????? ??? ?????. ???? ?? ?????? ???????? ?????? ?? ?? ??? ?????? ???????? ?? /u: <domain>\ <user>& /p: [<password>| * | ""]
      ?????? ?? ????? ????? ??? ServerName ?? ??? ???? ???? ??????.
?????? ??? ?????? ????? ???? ???????? ?? ???? ?????? ??? ????????? ?????? ????? ????? ??????? ?? ???? ?? ??? ??????? ??? ????????? ??? ??? ????? ????? ?????????:
???? ?????: 8012
??????: NTBackup
?????:
????? '"Active Directory"' ?? '???? ?????? ??? ?????? ?? ????.' ?? ??????? ?????? ?????? 'BackupPrepare()' ' \\ ComputerName '.
?????? ?? ????? ????? ??? ComputerName ?? ??? ???? ???????/??????? ??????? (NetBIOS) ???? ?????????.
???? ?????: 1000
??????: Userenv
?????:
?? ???? ?? Windows ????? ??? ???????? ?? ?????????. ????? ???? (1326)

???????? ???????

??? ??? ?? ?? ?????? ?????????, ?? ?????? ??????? ?? ????????? ?????? ?? ??????? ?????? ???? ??? Backdoor.IRC.Flood ???????. ????? ?? ?????????? ???? ????? ?????? ??????? ?? ?????????.

?? ??????? ???? ?? ??????? Microsoft ??? ?????? ??? ?????? ??????? ???? ??????? ??????? ????????. ???? ???? ??? ??????? ??? ?????? ??????. ??? ?? ?????? ??? ??? ??????? ?? ??????? ??? ????????? ???? ?? ?? ??????? ?????? ????? ?? ?? ?????? ????? ??? ??????? ????? ?? ???? ??????? ????????.

?????? ?? ??? ??? ?????? ??????? ????? ?? ?????.
  • Gg.bat: ????? Gg.bat ??????? ?????? ???? ??? ?????? "??" ??????? "??" ?????? ???? ?? Flashfxp ???????? Ws_ftp ??? ?????? ??? ?????? ?? ??????? (??? ?? ??? Ocxdll.exe) ??? ?????? ??? ?? ?????? ???????? Psexec ?????? ??????? ??? ?????? ??????.
  • Seced.bat: Seced.bat ????? ??? ??????.
  • Nt32.ini
  • Ocxdll.exe
  • Gates.txt
  • Task32.exe
?? ????? ????? ????? ????? ?? ?????? ?????? ?? ??? ????????? ???????? ?? ?????. ??? ?? ?????? ??? ??? ??????? ??? ??????? ? ??? ?? ??? ????? ??? ??? ??? ??? ????? ? ??? ?? ????? ???? ????.
  • Psexec
  • Ws_ftp
  • Flashfxp
?????? ??????? ???? ????? ??? ??????? ?????? ??? ?? ????? ?????? ??????? ???? ?????? ??????? ??? ????? ???? ?? ???? ????? ??????? trojanized ???? ???? ?? ??????. ????? ?????? ???? ????? ????? ??????? ?? ????????? ??? ????????? ????????? ?? ???????? ????? ?????? trojanized ??????? ??? ??????? ??? ???? ??????.
  • MDM.exe
  • Taskmngr.exe

??? ??? ????? ??????

????? ??? ????? ???? ??? ?? ???? ????????? ????? ?? gained ??????? ??? ??????? ???????? ????? ???? ??????? ????? ?? ??? ?????. ????? Microsoft ?? ???? ???? ??????? ?? ??????? ?? ????? ??? ????? ?????? heretofore ??? ????? ?? ??????? ????.

???

???? Microsoft ??????? ????? ???????? ?? ??? ???????? ?????? ?? ???? ?????? ?? ?? ???? ?????? ??????? ???? ?????????, ???:
  • ????? ????? ???? ??????? ????? ?? ??? ?????.
  • ????? ???? ????? (Guest).
  • ????? ?????? ?????? ????????? ?????? ?? ??????? ????? ????????? ???????.
  • ???????? ????? ??????? ??? ????? ?????? ????? ??? ?? ??? ????? ???? ??????.
  • ?????? ??????? ??? ???? ??????? ??????.
?????? ??? ??????? ??? ???? ????????? ?????? prescriptively ??????? ???? ????? ??? ???? ??????? Microsoft Windows 2000 ???? ???? ???????? ?????? ?? Windows 2000 Server. ??????? ??? ?????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://www.microsoft.com/downloads/details.aspx?FamilyID=f0b7b4ee-201a-4b40-a0d2-cdd9775aeff8
(http://www.microsoft.com/downloads/details.aspx?FamilyID=f0b7b4ee-201a-4b40-a0d2-cdd9775aeff8)
????? ?? ????????? ??? ????? ????? Windows 2000 Server patched ????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://www.microsoft.com/technet/security/current.aspx
(http://www.microsoft.com/technet/security/current.aspx)
????? ?? ???? ???? ??????? ?????? ???? Microsoft ????. ????? ?? ????????? ??? ???? ?????? ???? Microsoft ?? ?????? ???? Microsoft ?????? ??? ?????:
http://technet.microsoft.com/en-us/security/cc184924.aspx
(http://technet.microsoft.com/en-us/security/cc184924.aspx)

???? ????? ??

??????, ?? ?? ??????? ??? ????? ?? ??????? ???? ??? ?? ??? ????? ??? ?????? ??? ??????? ???? ???? ?????? Windows 2000 Server. ???? Microsoft ??????? ????? ?????? ?????? ??? ????? ????? ??? Windows 2000 Server ?????? ?? ??? ?????? ??????? ??????? ?? ??? "?????? ??????" ?? ??? ???????. ??? ??? ??????? ?? ???? ?????? ????? ??? ?? ????? ??????? ????? ?????? ??????? ? ??? ?????? ???.

?????????

???? ???? ?????? Microsoft ?????? ??? ??????? ??? ??????? ??????? ?????? ??????? ??????? ??????. ????? ?? ????????? ??? ?????? ??????? ?????? ??? ?????? Microsoft ?? ?????? ???? Microsoft ?????? ??? ?????:
http://support.microsoft.com/
(http://support.microsoft.com/)
???? ??? ?????? | ????? ???????

???? ??????

??? ??? ?????? ?? ????? ?? ?????? ??? ????? ?????? ?? ????? ????? ???????. ??? ???? ?? ???? ?????? ????? ?? ???? ????? ????? ?????? ??? ?????. ?????? ??? ?????? ?? ???? ??????? ??????? ??????. ??????? ??????? ??? ???? ???????? ?? ????? ??? ??????. ??? ???? ????? ??????? ????? ?? ???? ???? ?????. ????? ?? ????????? ??? ????? ??? ???? ???????? ?? ????? ????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft" (????? ?? ??? ???????? ??? ???? ?? ???? ??????? ??? ?? ??? ??? ?????? ??????????):
322756
(http://support.microsoft.com/kb/322756/ )
????? ??? ???? ???????? ????????? ?? Windows


??????? ?????? ??? ??? ??????? ??? ????? ????? ????? ????? ?? ?? ?????? ???????. ?????? ????? ???? ??????? ???????.

?????? ??????? ??????? ?? ?????. ????? ??? ??????? ??????? ????? ?????? ???. ?? ??? ?????? ??? ??????? ??? ??????? ????? ???? ????????? ?????? ????? ??? ?? ????????? ?????. ?? ???????? ??????? ???? ??????? ???????? ????? ????? ????????? ?? ?????? ???? ?? ???? ???? ?????? ? ??? ?? ????? ???? ?????????. ????? ????? ????? ????? ?????? ? ????? ????? ???? ??????? ? ?? ??????? ???????? ???????? ???? ???????? ????? ????? ????????? ?? ?????? ???? ?? ???? ???? ??????.
  1. ??? ??????? ???? ????? ??????? Windows 2000, ???? ??? ?????? ?????? ??? ???? ?????? ?? ???? ??? ????? ??????.
  2. ?? ????? ??????? ??? Taskmngr.exe ?? ???? ??? ?????.

    ?????? ???? ?? ????? Taskmngr.exe ? ?? Taskmgr.exe
  3. ?? ?????? "????? ??????".
  4. ???????? "?????? Microsoft Windows" ??? ???? ?????? \WINNT\System32. ????? ????? ??????? ??????? ???????? ?? ?????? \WINNT\System32 ?????? .bak ?? ????? ??? ?????.

    ?????? ??? ??? ??????? ?? ?? ???? ?????? ?? ?????? \WINNT\System32.
    • Nt32.ini
    • Nt16.ini
    • Dll32nt.hlp
    • Xvpll.hlp
    • Dll32.hlp
    • Httpsearch.ini
    • Mdm.scr
    • Gates.txt
    • Taskmngr.exe
    • Secedit.sdb
    • Seced.bat
    • Ocx.dll
    • Dll16.ini
    • Gg.bat
    • Ocxdll.exe
    ?????? ?????? ????? ??? ??????? ???? ??????? ???????:
    1. ?? ?????? \WINNT\System32 ???? ??? ?????? ?????? ??? ?? ??? ?? ??????? ?? ???????, ???? ??? ????? ????? ????? .bak ?? ????? ??? ????? ?? ?? ???? Enter.

      ??? ???? ??????? ????? ????? ????? Nt32.ini ??? Nt32.ini.bak.
    2. ??? ?????? ?? ??? ?? ??? ???????.
  5. ???? ??? ???? ?? ???? ??? ????? ???? regedit ?? ???? ??? ?????.
  6. ?? "???? ???????" ? ??? ???? ????? ??????? ?????? ??????:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  7. ???? ??? ???? Rundll32 ???? Taskmngr.exe ??? ????? ??????? ?????? ?????? ?? ???? ??? ???:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  8. ??? ??? ???? ???? ???? ???? Windows 2000 ?? ?? ????? ????? ???? ?????? MIRC ?????? ?????? Windows ?????? ???? ????? GmpTpl.inf ??????? ?? ?????? ?????? ??? Windows 2000 ??????:
    \WINNT\SYSVOL\sysvol\ \MACHINE\Microsoft\Windows NT\SecEdit \Policies\ {GUID} DomainName
    ?????? ?? ??? ??? ?????? ?? DomainName ??? ???? Windows 2000.
  9. ?????? ????? GmpTpl.inf ??? ???? ???? ?????? ?? ??? GmpTpl.inf. ????? ??????? ???? ???? ?????? ?? ??? GmpTpl.inf ???????? ????? ????? ????????? ?? ?????? ???? ?? ???? ???? ?????? ?? ???????? ???? ???? ???? Windows 2000 ????.

    ?????? ????? ???? ?????? MIRC ?? ?????? ?? ????? SeNetworkLogonRight ?????? ???????? ?? ????? GmpTpl.inf.

??? ????? ??? ???????? ????? ???? ???????? ?????? ??????? ?? ????????? ????? ??? ???? ??????? ????????? ????? ?? ????? ???? ?????? MIRC ????????. ??? ??? ?????? ?? ?? ?????? ????? ?????? ??? ????? ??. ???? ??? ??????? ???? ?????? ??????.
???? ??? ?????? | ????? ???????

???????

???? ???????: 328691 - ????? ??? ??????: 04/????/1427 - ??????: 4.6
????? ???
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Professional Edition
????? ??????: 
kbmt kbenv kbinfo kbsechack KB328691 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????328691
(http://support.microsoft.com/kb/328691/en-us/ )
???? ??? ?????? | ????? ???????

????? ???????

 
???? ??? ?????????? ??? ??????