97¹ú¼Ê

¹¤³§ÑÐѧ Ø­ 97¹ú¼ÊÍøÂçÊý×Ö»¯ÖÇÄܹ¤³§¡°ºÚ¿Æ¼¼¡±´ó½ÒÃØ
Ô¤Ô¼Ö±²¥
ÀÖÏíÓªÒµ°ü¹Ü·þÎñ Ø­ ÊØ»¤Ò½ÁÆÓªÒµÒ»Á¬ÎȹÌ
Ô¤Ô¼Ö±²¥
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
²úÆ·
< ·µ»ØÖ÷²Ëµ¥
²úÆ·ÖÐÐÄ
²úÆ·
½â¾ö¼Æ»®
< ·µ»ØÖ÷²Ëµ¥
½â¾ö¼Æ»®ÖÐÐÄ
ÐÐÒµ
ºÏ×÷»ï°é
·µ»ØÖ÷²Ëµ¥
Ñ¡ÔñÇøÓò/ÓïÑÔ
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

¡°WannaCry¡±ºóÓÖÒ»ÀÕË÷Èí¼þ¡°Petya¡±±äÖÖ²¡¶¾Ï®À´£¡£¡ ×¼±¸ºÃÔõÑùÓ¦¶ÔÁËÂð£¿

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ Ðû²¼Ê±¼ä£º2017-07-10
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

Ò»¡¢ÊÂÎñÅä¾°

±±¾©Ê±¼ä6ÔÂ27ÈÕÍí¼ä £¬¾ÝÍâÑóýÌåHackerNews±¬ÁÏ £¬Ò»ÖÖÀàËÆÓÚ“WannaCry”µÄÐÂÐÍÀÕË÷²¡¶¾Ï¯¾íÁËÅ·ÖÞ £¬ÎÚ¿ËÀ¼¾³ÄÚµØÌú¡¢µçÁ¦¹«Ë¾¡¢µçÐŹ«Ë¾¡¢Çжûŵ±´ÀûºËµçÕ¾¡¢ÒøÐÐϵͳµÈ¶à¸ö¹ú¼ÒÉèÊ©¾ùÔâѬȾµ¼ÖÂÔËÐÐÒì³£¡£¸Ã²¡¶¾Îª“Petya”±äÖÖ²¡¶¾ £¬Í¨¹ýÓÊÏ丽¼þÈö²¥¡£Áí¾ÝÎÚ¿ËÀ¼CERT¹Ù·½ÐÂÎÅ³Æ £¬ÓÊÏ丽¼þ±»È·ÈÏÊǸôβ¡¶¾¹¥»÷µÄÈö²¥Ô´Í·¡£¸ÃÀÕË÷²¡¶¾ÔÚÈ«Çò¹æÄ£ÄÚ±¬·¢ £¬Êܲ¡¶¾ÇÖÏ®µÄ¹ú¼Ò³ýÁËÎÚ¿ËÀ¼Íâ £¬ÉÐÓжíÂÞ˹¡¢Î÷°àÑÀ¡¢·¨¹ú¡¢Ó¢¹úÒÔ¼°Å·ÖÞ¶à¸ö¹ú¼Ò £¬ºóÐø²»É¨³ý»á¼ÌÐøÉìÕŵ½°üÀ¨ÖйúÔÚÄÚµÄÑÇÖÞ¹ú¼Ò¡£

¶þ¡¢²¡¶¾ÆÊÎö

¾­ÓÉ97¹ú¼ÊÇå¾²²úÆ·ÊÂÒµ²¿µÄȡ֤Ñо¿ £¬Õâ´Î¹¥»÷ÊÇÀÕË÷²¡¶¾“Petya”µÄ±äÖÖ £¬²¡¶¾Èö²¥Àú³ÌʹÓõ½windowsµÄÁ½¸öÎó²î¡£µÚÒ»²½ÊÇʹÓÃCVE-2017-0199Îó²î·¢ËÍÓʼþ £¬½«²¡¶¾Ìí¼ÓÔÚoffice¸½¼þÀï £¬PCÒ»µ©·­¿ª¸½¼þ £¬µÚÒ»¸öÈö²¥µÄÔ´Í·±»Ñ¬È¾Àֳɡ£µÚ¶þ²½ÊÇͨ¹ýMS17-010£¨ÓÀºãÖ®À¶£©Îó²îºÍϵͳÈõ¿ÚÁî¾ÙÐÐÈö²¥¡£Îó²îµÄÏêϸʹÓÃÇéÐÎÈçÏ£º

Îó²îÒ»£ºCVE-2017-0199Îó²î

Îó²î˵Ã÷£ºCVE-2017-0199ÔÊÐí¹¥»÷ÕßʹÓôËÎó²îÓÕʹÓû§·­¿ª´¦Öóͷ£ÌØÊâ½á¹¹µÄOfficeÎļþÔÚÓû§ÏµÍ³ÉÏÖ´ÐÐí§ÒâÏÂÁî £¬´Ó¶ø¿ØÖÆÓû§ÏµÍ³¡£

ʹÓÃÒªÁ죺ʹÓøÃÎó²î £¬ºÚ¿Í¿ÉÒÔ½«ÀÕË÷Èí¼þµÄ´úÂëǶÈëÁËofficeÎĵµÖÐ £¬ÀýÈçword¡¢PPT¡¢ExcelµÈ £¬×÷Ϊ¸½¼þαװ³ÉÇóÖ°¡¢¹ã¸æµÈͨ¹ýµç×ÓÓʼþÈö²¥¡£Óû§ÊÕµ½¾­ÓÉαװµÄÓʼþºó £¬Ò»µ©·­¿ª £¬ÀÕË÷²¡¶¾ÊͷųɿÉÖ´ÐÐÎļþ¡£

Îó²î¶þ£ºMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²î

Îó²î˵Ã÷£ºMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²îÊǽñÄê4Ô·½³Ìʽ×é֯й¶µÄÖ÷ÒªÎó²îÖ®Ò»¡£“ÓÀºãÖ®À¶”ʹÓÃWindows SMBÔ¶³ÌÌáȨÎó²î £¬¿ÉÒÔ¹¥»÷¿ª·Å445 ¶Ë¿ÚµÄ Windows ϵͳ²¢ÌáÉýȨÏÞ¡£

ʹÓÃÒªÁ죺Ê×ÏÈ £¬TCP ¶Ë¿Ú 445ÊÇÔÚWindows ϵͳÖÐÌṩ¾ÖÓòÍøÖÐÎļþ»ò´òÓ¡»ú¹²Ïí·þÎñ £¬ºÚ¿ÍʵÑéÓëµçÄÔ445¶Ë¿Ú½¨ÉèÇëÇóÅþÁ¬ £¬Ò»µ©ÅþÁ¬ÀÖ³É £¬¾ÍÄܹ»»ñµÃ¾ÖÓòÍøÄÚ¹²ÏíµÄÎļþ»òÐÅÏ¢¡£Í¨¹ýµÚÒ»¸öÎó²îѬȾµÄµÚһ̨PC¼Ì¶øÊ¹ÓÃMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²îѬȾ¾ÖÓòÍøÖпª·Å445¶Ë¿ÚµÄËùÓÐPC¡£

±¾´ÎÀÕË÷²¡¶¾ÁýÕÖµÄÖÕ¶ËÊÇwindows XP¼¶ÒÔÉϲÙ×÷ϵͳ £¬µçÄÔ¡¢·þÎñÆ÷ѬȾÕâÖÖ²¡¶¾ºó»á±»¼ÓÃÜÌØ¶¨ÀàÐÍÎļþ £¬µ¼ÖÂϵͳÎÞ·¨Õý³£ÔËÐС£²î±ðÓڹŰåÀÕË÷Èí¼þ¼ÓÃÜÎļþµÄÐÐΪ £¬“Petya”ÊÇÒ»¸ö½ÓÄÉ´ÅÅ̼ÓÃÜ·½·¨ £¬¼ÓÃÜÀֳɺó £¬»áÏÔʾÀÕË÷ÐÅÏ¢µÄ½çÃæ £¬ÈôÊÇÊܺ¦Õß²»Ö§¸¶Êê½ð £¬»ù´¡ÎÞ·¨½øÈëϵͳ¡£

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

±»¼ÓÃܺóµÄÀÕË÷ÐÅÏ¢

 

Èý¡¢Çå¾²½¨Òé

1¡¢ ¶ñÒâÓʼþÌá·À

¸ÃÀÕË÷Èí¼þÊ×´ÎÈö²¥ÊÇͨ¹ýÓʼþ¾ÙÐÐµÄ £¬¹Ê´Ë £¬Óöµ½Ð¯´ø²»Ã÷office¸½¼þºÍ²»Ã÷Á´½ÓµÄÓʼþÇëÎðµã»÷¸½¼þ¡£

2¡¢ Õë¶ÔCVE-2017-0199¡¢MS-17-010Á½¸öÎó²îʵʱװÖÃÎó²î²¹¶¡

£¨CVE-2017-0199) RTFÎó²î²¹¶¡µØÖ·£º

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199

S17-010£¨ÓÀºãÖ®À¶£©Îó²î²¹¶¡µØÖ·£º

https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

3¡¢ ½ûÓÃWMI·þÎñ

https://msdn.microsoft.com/en-us/library/aa826517(v=vs.85).aspx

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

4¡¢ ·À»ðǽ·À»¤

97¹ú¼ÊÍøÂçÒѸüзÀ»¤ÌØÕ÷¿â £¬ÈôÊÇÄúÊÇ97¹ú¼ÊÈ«ÐÂÏÂÒ»´ú·À»ðǽ²úÆ·µÄÓû§ £¬Çëʵʱ¸üе½Èçϰ汾£º²¡¶¾Ñù±¾¿â£º49.00830£» IPSÌØÕ÷¿â£º11.00168

97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

ËÄ¡¢×ܽ᣺

 

»ØÊדPetya”±äÖÖ²¡¶¾ºÍ“wannacry”ÊÂÎñ £¬ÀÕË÷²¡¶¾ËùʹÓõÄÊֶβ¢²»ÊǺÜÊǸ߼¶µÄ¹¥»÷ÒªÁì £¬Ê¹ÓõÄÎó²îÒ²²¢·Ç0-dayÎó²î £¬¶øÊÇ΢ÈíÔçÒÑÐû²¼Í¨¸æµÄÒÑÖªÎó²î £¬Èö²¥µÄÒªº¦ÒòËØÔÚÓÚµçÄÔ»ò·þÎñÆ÷±£´æÎ´ÊµÊ±¸üеÄÎó²îºÍÈõ¿ÚÁî¡£Òò´Ë £¬ÆóÒµºÍСÎÒ˽¼Ò¶¼Ó¦ÈÏÕæË¼Ë÷Ç徲ϵͳ½¨ÉèµÄ»ù´¡ÊÂÇé £¬Ð¡ÎÒ˽¼ÒµçÄÔӦʵʱװÖòÙ×÷ϵͳ²¹¶¡ £¬¾Ü¾øÈõ¿ÚÁî²¢°´ÆÚÌæ»»ÃÜÂë £¬Óöµ½²»Ã÷È·µÄÓʼþ²»ÒªÈÝÒ×·­¿ª¡£ÆóÒµÓû§Ó¦ÔÚÍøÂç½çÏß°²ÅÅ¿ÉÒÔʵʱÌṩÏìÓ¦ÌØÕ÷¿âºÍ·À»¤Õ½ÂÔµÄÇå¾²×°±¸ £¬¾¡Ô翪Æô·À»¤Õ½ÂÔ²¢ÊµÊ±¸üÐÂÌØÕ÷¿â¡£·À»¼ÓÚδȻ £¬×öºÃÇå¾² £¬ÆóÒµ²Å»ª¸üºÃµØÉú³¤¡£

¹Ø×¢97¹ú¼Ê
¹Ø×¢97¹ú¼Ê¹ÙÍøÎ¢ÐÅ
ËæÊ±Ïàʶ¹«Ë¾×îж¯Ì¬
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾ 97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾

·µ»Ø¶¥²¿

ÊÕÆð
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
ÎĵµÆÀ¼Û
¸Ã×ÊÁÏÊÇ·ñ½â¾öÁËÄúµÄÎÊÌ⣿
Äú¶ÔÄ¿½ñÒ³ÃæµÄÖª×ã¶ÈÔõÑù£¿
²»Õ¦µÎ
ºÜÊǺÃ
ÄúÖª×ãµÄÔµ¹ÊÔ­ÓÉÊÇ£¨¶àÑ¡£©£¿
Äú²»Öª×ãµÄÔµ¹ÊÔ­ÓÉÊÇ£¨¶àÑ¡£©£¿
ÄúÊÇ·ñÉÐÓÐÆäËûÎÊÌâ»ò½¨Ò飿
ΪÁË¿ìËÙ½â¾ö²¢»Ø¸´ÄúµÄÎÊÌâ £¬Äú¿ÉÒÔÁôÏÂÁªÏµ·½·¨
ÓÊÏä
ÊÖ»úºÅ
ллÄúµÄ·´À¡£¡
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
97¹ú¼Ê¡¤(ÖйúÇø)¼¯ÍŹٷ½ÍøÕ¾
ÇëÑ¡Ôñ·þÎñÏîÄ¿
¹Ø±Õ×Éѯҳ
ÊÛǰ×Éѯ ÊÛǰ×Éѯ
ÊÛǰ×Éѯ
ÊÛºó·þÎñ ÊÛºó·þÎñ
ÊÛºó·þÎñ
Òâ¼û·´Ïì Òâ¼û·´Ïì
Òâ¼û·´Ïì
¸ü¶àÁªÏµ·½·¨
ÍøÕ¾µØÍ¼