معرفی و مقابله با تروجان

[simplex]

0

تروجان ها به دو قسمت تقسيم مي شوند. يك قسمت Client (خدمات گيرنده) و ديگری Server (خدمات دهنده). وقتي قرباني ندانسته قسمت Server را روي سيستم خودش اجرا مي كند. حمله كننده بوسيله قسمت Client با Server كه روي كامپيوتر قرباني است متصل مي شود و از آن پس مي تواند كنترل سيستم قرباني را در دست بگيرد . پروتكل TCP/IP كه استاندارد معمول براي برقراري ارتباطات است به اين تروجان آلوده ميشود و تروجان از طريق آن كارش را انجام مي دهد. البته لازم به ذكر است كه برخي اعمال تروجانها نيز از پروتكل UDP استفاده مي كنند. معمولاً زماني كه Server روي كامپيوتر قرباني اجرا مي شود. خود را در جايي از حافظه مخفي مي كند تا پيدا كردن يا تشخيص آن مشكل شود و به برخي درگاههاي خاص (Port) گوش مي دهد تا ببيند درخواست ارتباطي به سيستم از طرف حمله كننده آمده است يا نه، از طرفي رجيستري را نيز به گونه اي ويرايش مي كند كه برخي از اعمال بطور خودكار روي سيستم شروع به كار كنند.

براي نفوذ كننده لازم است كه IP قرباني را بداند براي اينكه بتواند به سيستم او متصل شود. اكثر قريب به اتفاق تروجانها بصورتي برنامه ريزي شده اند كه IP قرباني را براي حمله كننده ارسال مي كنند همانند سيستم پيغام گذار از طريق ICQ يا IRS . اين زماني اتفاق مي افتد كه قرباني IP ديناميك داشته باشد بدين معني كه هر زمان به اينترنت متصل ميشود و يك IP متفاوت از قبل داشته باشد كه اغلب سيستم هايي كه به روش dial- up به اينترنت متصل مي شوند از اين قانون پيروي مي كنند. كاربران ASDL معمولا IP هاي ثابت دارند به همين علت IP آلوده شده همواره براي حمله كننده شناخته شده است و اين حالت باعث تسهيل درامر اتصال به سيستم قرباني مي گردد.

اغلب تروجانها از روش شروع اتوماتيك استفاده مي كنند. بصورتي كه اگر شما كامپيوترتان را خاموش كنيد آنها قادر خواهند كه فعاليتهايشان را مجددا ً آغاز كنند و دسترسي لازم به حمله كننده را روي سيستم شما بدهند و ساختن تروجانها با قابليت شروع روشهايي هستند كه هميشه مورد استفاده قرار مي گيرند. يكي از اين روشها، محلق كردن تروجان به يك فايل اجرايي كه كاربرد زيادي دارد مي باشد، به عبارت ديگر محلق نمودن تروجان به يك برنامه پركاربرد ، موجب عملي شدن تفكرات حمله كننده خواهد شد. روشهاي شناخته شده نيز همانند دستكاري فايلهاي ريجستري ويندوز مي تواند به عملي شدن افكار حمله كننده بيانجامد. فايلهاي سيستمي ويندوز قرار دارند كه مي توانند بهترين انتخابهاي حمله كنندگان باشند.


به جهت اينکه دوستان بتوانند سيستم خود را در برابر اين حمله ها محافظت نمايند، قسمتهای مختلف ويندوز که می توان از آن استفاده نمود را در اينجا بررسی می کنيم.

پوشه شروع خودكار

پوشه اي كه بصورت خودكار در شروع كار ويندوز فراخواني مي شود و فايلهاي داخل آن بصورت اتوماتيك اجرا مي شوند در آدرس زير قرار دارند.


C:\ windows\ start Menu \ programs \startup



البته فرض براي اين است كه سيستم عامل ويندوز در درايو C و در شاخه windows نصب شده باشد.


فايل Win.ini

فرمت شروع خودكار در اين فايل بصورت زير مي باشد :


Load = Trojan.exe

Run = Trojan.exe




فايل System.ini

فرمت بكارگيري تروجان در اين فايل سيستمي بصورت زير است:


Shell = explorer.exe Trojan.exe



كه باعث مي شود بعد از هر بار اجراي Explorer فايل Trojan.exe اجرا شود.


فايل Wininit.ini

اين فايل توسط Setup.exe برنامه هاي نصب شوند مورد استفاده قرار مي گيرد.

بدين صورت كه يك بار اجرا شود، قابليت حذف خودكار را نيز دارد كه براي تروجان ها بسيار سهل مي باشد.


Winstart.bat

اين فايل دسته اي هم در ابتداي شروع به كار ويندوز فراخواني شده و فرامين داخل آن به ترتيب اجراي مي شوند كه تروجان مي تواند با افزودن خط زير خود را در حافظه بار كند.


@ Trojan.exe




فايل Autoexec.bat

اين فايل دسته اي هم از فايلهاي معروف فراخواني شده در ابتداي كار سيستم عامل مي باشد كه مي توان با دستكاري و اضافه نمودن خط زير بر آن تروجان مورد نظر را در سيستم قرباني اجرا نمود:


C:\ Trojan.exe




فايل Config.sys

اين فايل نيز از معروفترين فايلهاي پيكر بندي سيستم است و مي تواند در امر اجراي تروجان كاربرد داشته باشد.

[simplex]

0

Mozilla Firefox - faster, more secure, easier to use and sporting a new look, this latest Firefox release sets a new standard for web browser innovation. Mozilla Firefox project (formerly Firebird, which was formerly Phoenix) is a redesign of Mozilla's browser component, written using the XUL user interface language and designed to be cross-platform. It is small, fast and easy to use, and offers many advantages over other web browsers, such as the tabbed browsing and the ability to block pop-up windows.

Mozilla Firefox 3 is focused on improved memory handling, performance, and stability, improved XUL, and new core components such as application data stored in SQLite. Firefox 3 is based on the Gecko 1.9 Web rendering platform, which has been under development for the past 34 months. This new platform includes more than 15,000 changes to improve performance, stability, rendering correctness, and code simplification and sustainability. Firefox 3 is been built on top of this new platform resulting in a more secure, easier to use, more personal product with a lot more under the hood to offer website and Firefox add-on developers

لینک دانلود:

http://rapidshare.com/files/19370306...up_203.0.6.exe

[simplex]

0

Eset NOD32 v3.0.684 Business Edition || 21.2MB || Rs.Com


Antivirus protection is spelled "NOD32." Built on the award-winning ThreatSense® engine, ESET NOD32 Antivirus
software proactively detects and eliminates more viruses, trojans, worms, adware, spyware, phishing, rootkits
and other Internet threats than any program available.

It's the ideal antivirus for Windows XP, and also runs smoothly on Windows legacy systems, MS-DOS, file servers,
mail servers, and more.

No matter what your system, there is no better antivirus protection. ESET NOD32 Antivirus was awarded the "BEST
Antivirus Solution" in 2006 and 2007 by AV-Comparatives. Compare antivirus solutions here to learn more, or
check out the latest virus bulletin.
ESET NOD32 Antivirus provides:

* Proactive Protection: The award winning ThreatSense technology combines multiple layers of detection
protecting you from Internet threats before it is too late.
* Precise Detection: ESET accurately identifies known and unknown threats. It consistently wins top awards
from testing labs and is recognized for having zero false positives.1
* Lightweight Design: Requires less memory and CPU power, allowing your computer to run fast, making more
room for games, web browsing, and emailing.
* Fast Scanning Speeds: Highly efficient program ensuring fast file scanning and product updates. It runs
quietly in the background.


Version 3.0: What's New in Antivirus Protection?

Rapidly evolving threats and regularly changing system requirements mean you need a solution that adapts
itself to fight the threats of the day. With hundreds of new threats released daily and regularly changing
system requirements, you need a solution that evolves to take on those threats and meet those requirements.

With ESET NOD32 Antivirus version 3.0, you'll enjoy:

* Support for Windows 2000/XP/Vista
* Full integration with Windows Security Center
* Improved graphical interface
* Improved cleaning - automatically removes detected threats.
* Even faster scanning

لینک دانلود :

http://rapidshare.com/files/19369873...a.2003-iND.rar

[simplex]

0

ZoneAlarm® Internet Security Suite 2009 v 8.0.059 || 52.3MB || Rs.Com


Only ZoneAlarm offers this many layers of security to protect you



Award-winning Antivirus and Anti-Spyware
We don't just scan and remove viruses and spyware, we prevent and disable even the most recent and sophisticated viruses and computer attacks that others miss.

Includes the World's #1 Firewall From the People Who Invented It
ZoneAlarm pioneered the personal computer firewall used by over 60 million people worldwide, and our parent company, Check Point Software, invented the enterprise firewall used by every member of the Fortune 100. We know how to keep the bad guys out.

Total Identity Theft Protection
Only ZoneAlarm combines offline identity protection services with online technologies to stop thieves from stealing your identity.

Keeps YOU in Control of Your Computer
Rootkits and operating system attacks can by-pass other defenses and take control of your computer. Our leading Root & Boot Protection shields you during startup and beyond to stop these attacks.

Additional Security Layers Include:
Anti-spam, parental controls, and privacy to deliver comprehensive computer security.

Fast, Safe, and Easy to use for novices with our new One-Click Fix It interface, yet powerful and customizable for more advanced users.

Fully compatible with Windows Vista and XP


لینک دانلود :

http://rapidshare.com/files/19607166...t_Security.rar

[simplex]

0

Avira AntiVir Premium reliably protects you against all threats from viruses, worms, trojans, rootkits, phishings, adware, spyware, bots, and dangerous “drive-by” downloads. Best detection rates and top-class security with several updates every day. Advanced protection: Includes basic antivirus protection PLUS: email protection (POP3) ,AntiPhishing, AntiSpyware, AntiAdware and more. With real-time on-access scanning, profile-based on-demand scans and scheduling of full system scanning and updates it offers premium protection. It includes a POP3 based MailScanner that scans emails before they are stored on your machine. With a user-friendly control center, quarantine management, fast performance and world leading detection rates the Avira AntiVir Premium provides essential protection for your PC.

AntiVir Personal offers effective protection against computer viruses for the individual and private use on a single PC-workstation. It detects and removes viruses and includes an Internet-Update Wizard for easy updating. The built in resident Virus Guard serves to monitor file movements automatically, for example when downloading files from the Internet. Heuristic scanning protects Protection against previously unknown macro viruses. Even though viruses have now grown very numerous, one thing hasn't changed: our commitment to provide you with all-round protection. The reliability of AntiVir is demonstrated in numerous comparison test and references featured in independent trade journals.

Features:

Premium Protection:
* AntiVir
* AntiAd/Spyware
* AntiPhishing
* AntiRootkit
* AntiDrive-by
* AntiBot
* EmailScanner
* WebGuard
* RescueSystem

Premium functions:

• Protection against viruses, worms and Trojans
• Protection against expensive dialers
• Detects and deletes rootkits
• NEW: Raised scan speed
• NEW: Redesigned visual appearance
• Protection against phishing
• Protection against spyware
• Special protection against email viruses (POP 3)
• Fast updates through Premium Server
• 5 Euro donation to Auerbach Foundation
• Protection against annoying adware
• NEW: System to create a Rescue-CD


لینک دانلود:

http://rapidshare.com/files/19511344..._8.2.0.373.rar

[محمد هورزاد]

0

سلام

ممنون بابت زحمات بیدریغتون

آیا این آنتی ویروس را تایید میکنید ؟

http://www.personalfirewall.comodo.c..._firewall.html

[simplex]

0

hoorzad با تشکر از لطف شما
در مورد این برنامه باید بگم که خودم به شخصه کار نکردم ولی تو سایتها تعریف Firewall این شرکت رو زیاد میکنند .

http://www.comodo.com
پیروز باشید

[simplex]

0

ESET Smart Security 3.0.650 32-bit - Expires in Jan-05-2050

Download Link:

http://rapidshare.com/files/19206432...an-05-2050.rar


Size: 21658 KB

[simplex]

0

NOD32 Antivirus 4.0.314 - Final | 32.5 MB



ESET NOD32 Antivirus System - Integrated, Real-Time Protection against viruses, worms, trojans, spyware, adware, phishing, and hackers. Best detection, fastest performance & smallest footprint.
NOD32 Antivirus System provides well balanced, state-of-the-art protection against threats endangering your PC and enterprise systems running various platforms from Microsoft Windows, through a number of UNIX/Linux, Novell, MS DOS operating systems to Microsoft Exchange Server, Lotus Domino and other mail servers.

ESET solutions are built on ESET’s one-of-a-kind ThreatSense technology. This advanced heuristics engine enables proactive detection of malware not covered by even the most frequently updated signature-based products by decoding and analyzing executable code in real time, using an emulated environment. By allowing malware to execute in a secure virtual world, ESET is able to clearly differentiate between benign files and even the most sophisticated and cleverly-disguised malware.

Users of Microsoft® Windows® can experience the power and elegance of NOD32's ThreatSense Technology with ease and comfort. Our single optimized engine offers the best protection from viruses, spyware, adware, phishing attacks, and more. Keep tomorrow's threats at bay with our proactive detection technology.

If you are interested in computer security and would like to get a chance to influence the development of ESET's security systems, we invite you to join our Early Access program. Gain early access to the latest technology in beta and release candidate stages.

Changes in NOD32 Antivirus 4.0:
* Export/Import of root SSL certificate to well known web browsers (Firefox, Opera, Internet Explorer)
* Windows Live Mail v14 (Beta) is supported also
* Added support for including external programs to iso image (recovery CD function)
* Added possibility to edit user-defined servers for update module
* Support of SSL on Microsoft Windows 2000 has been added
* Improved zxcing of logs is available now(smart zxcing)
* Support “Download Headers” mode in MS Outlook (Exchange, IMAP)
* Exclusions work for mapped network drives (there must be two exclusions: one for mapped path and one for UNC path)

لینک دانلود 32-bit:

http://rapidshare.com/files/20457221...nal.32-bit.rar

لینک دانلود 64-bit:

http://rapidshare.com/files/20457992...nal.64-bit.rar

[isar]

0

نوشته اصلي بوسيله omidsx

NOD32 Antivirus 4.0.314 - Final | 32.5 MB



ESET NOD32 Antivirus System - Integrated, Real-Time Protection against viruses, worms, trojans, spyware, adware, phishing, and hackers. Best detection, fastest performance & smallest footprint.
NOD32 Antivirus System provides well balanced, state-of-the-art protection against threats endangering your PC and enterprise systems running various platforms from Microsoft Windows, through a number of UNIX/Linux, Novell, MS DOS operating systems to Microsoft Exchange Server, Lotus Domino and other mail servers.

ESET solutions are built on ESET’s one-of-a-kind ThreatSense technology. This advanced heuristics engine enables proactive detection of malware not covered by even the most frequently updated signature-based products by decoding and analyzing executable code in real time, using an emulated environment. By allowing malware to execute in a secure virtual world, ESET is able to clearly differentiate between benign files and even the most sophisticated and cleverly-disguised malware.

Users of Microsoft® Windows® can experience the power and elegance of NOD32's ThreatSense Technology with ease and comfort. Our single optimized engine offers the best protection from viruses, spyware, adware, phishing attacks, and more. Keep tomorrow's threats at bay with our proactive detection technology.

If you are interested in computer security and would like to get a chance to influence the development of ESET's security systems, we invite you to join our Early Access program. Gain early access to the latest technology in beta and release candidate stages.

Changes in NOD32 Antivirus 4.0:
* Export/Import of root SSL certificate to well known web browsers (Firefox, Opera, Internet Explorer)
* Windows Live Mail v14 (Beta) is supported also
* Added support for including external programs to iso image (recovery CD function)
* Added possibility to edit user-defined servers for update module
* Support of SSL on Microsoft Windows 2000 has been added
* Improved zxcing of logs is available now(smart zxcing)
* Support “Download Headers” mode in MS Outlook (Exchange, IMAP)
* Exclusions work for mapped network drives (there must be two exclusions: one for mapped path and one for UNC path)

لینک دانلود 32-bit:

http://rapidshare.com/files/20457221...nal.32-bit.rar

لینک دانلود 64-bit:

http://rapidshare.com/files/20457992...nal.64-bit.rar

آیا تریل است یا ک . ر . ک شده ؟

[L0RD]

0

نوشته اصلي بوسيله forexisar

آیا تریل است یا ک . ر . ک شده ؟

لایسنسها رو میتونید به صورت روزانه از سایت زیر بگیرید

http://www.nod321.com/

ولی پیشنهاد من خرید لایسنس یکساله از این سایت هست www.nod32.ir


موفق باشید.

[simplex]

0

Norton Antivirus 2009 /unlimited updates|Rs.Com


Norton Internet Security 2009 - Strong on protection, light on system resources, award winning! Stay protected from the latest online threats. Norton Internet Security runs quietly in the background to detect and block today's complex threats and to protect your identity when you buy, bank, or browse online. The friendly and efficient product design helps minimize confusing security alerts and system slowdowns that can get in the way of your online experience.

Key Technologies

* Antivirus
* Antispyware
* Botnet protection
* Browser protection
* Internet worm protection
* Intrusion prevention
* Norton™ Protection System

* OS and application protection
* Pulse Updates
* Recovery tool**
* Rootkit protection
* Norton™ Insight
* SONAR™ behavioral protection



Key Features

* Stops viruses, worms, spyware, bots, and more–Keeps your system protected against malicious software
* Norton™ Insight–Delivers innovative intelligence-driven technology for faster, fewer, shorter scans
* NEW! Pulse updates for up-to-the-minute protection–Delivered every 5 to 15 minutes to detect and eliminate new threats
* Prevents virus-infected emails and instant messages from spreading–Feel secure while you keep in touch
* Blocks browser exploits and protects against infected web sites–Surf the Internet with confidence.

System Requirements
Windows Vista® Home Basic/ Home Premium/Business/Ultimate**
Windows® XP with Service Pack 2 Home/XP Pro/XP Media Center Edition

* 300MHz or faster processor
* 256MB of RAM
* 150 MB of available hard disk space

Email scanning supported for POP3 and SMTP compatible email clients.
Browser support for Browser Protection feature:

* Microsoft Internet Explorer® 32-bit 6.0 or higher
* Mozilla Firefox® 2.0 or higher

Supported instant messenger clients:

* AOL®
* Yahoo!®
* Microsoft®
* Trillian™
------------------------------------
Instructions:

1) Disconnect from internet
2) Install Norton trial version
3) Restart Windows into safe mode (press F8 at startup)
4) Install *****
5) Restart Windows
6) You now have Norton AV with updates

لینک دانلود:

http://rapidshare.com/files/204408872/N2009.zip

[simplex]

0

Download Link:

http://rapidshare.com/files/20790383...226_32-bit.rar


Size: 32.76 MB

[simplex]

0

Avira AntiVir Premium 2009 V1.00.20.00 + license till 2011|Rs.Com


Avira AntiVir Premium reliably protects you against all threats from viruses, worms, trojans, rootkits, phishings, adware, spyware, bots, and dangerous “drive-by” downloads. Best detection rates and top-class security with several updates every day



AntiVir stops all types of viruses
AntiAd/Spyware eliminates ad/spyware
AntiPhishing proactive protection against phising
AntiRootkit against hidden rootkit threats
AntiDrive-by prevents against downloading viruses when surfing
EmailScanner enhanced email protection
WebGuard protection against malicious websites
RescueSystem create a bootable rescue CD
QuickRemoval eliminate viruses at the push of a button NEW!
NetbookSupport for laptops with low resolution NEW!

لینک دانلود:

http://rapidshare.com/files/211327401/Avira9.rar

[simplex]

0

Windows Internet Explorer 8 8.00.6001.18702 RTM Final|Rs.Com


The Final Edition

For Windows XP 32 bit


http://rapidshare.com/files/21132183...XP-x86-ENU.exe



For Windows Vista X86


http://rapidshare.com/files/21132202...ta-x86-ENU.exe