Chapter 256: Ghost Virus
Lu Qin was stunned by what Du Xinghe said, although the jargon Du Xinghe said was not so standardized, she could hear that Du Xinghe was quite familiar with the way of cyber attacks!
Before Du Xinghe provided her with suggestions on the improvement of the floating cloud system, she thought that Du Xinghe was purely from the perspective of the user, and he didn't know much about the system or programming, and Du Xinghe himself said that he didn't know much about computers.
But based on Du Xinghe's current words, Lu Qin can conclude that Du Xinghe is definitely a computer expert! Even those students who study computer science under her command may not have such a clear attack idea and a broad jishu foundation as Du Xinghe!
This guy always says that he doesn't understand computers, and if he doesn't understand computers, can he say such things!
"Mr. Du, you are always a liar!"
Lu Qin's eyes lit up, and his face was full of surprise, complaining about Du Xinghe. She just told Du Xinghe what a computer virus is, it's really embarrassing to think about it, according to this guy's knowledge, he can create a computer virus by himself!
Du Xinghe was stunned by Lu Qin's sudden deception, and after turning the car right at the previous intersection, he asked Lu Qin: "Who did I deceive?" ”
"You say you don't understand computers, you don't understand that computers can know the backdoor, permissions, and physical isolation of the system? …… Especially 'physical isolation', even if it is a professional computer science bachelor's graduate, or even a computer master's graduate, they may not necessarily understand the new 'physical isolation card' jishu that has only appeared in the past six months! You don't know about computers, can you know about physical isolation? ”
Du Xinghe really doesn't understand computers, but he still knows a little bit about physical isolation. Because in the previous plane, the internal network of large companies at all important points, such as banks and telecommunications, must be protected by physical isolation to avoid being attacked by the external network.
Listening to Lu Qin's tone, it is obvious that the development of the Internet in this plane is really slow, and even the "physically isolated" jishu has just been developed.
If you think about it carefully, it's no wonder that this is the case, if you don't need to connect to the Internet, there is no need for physical isolation jishu to exist. Because it appeared to separate the internal network from the external network.
Du Xinghe didn't explain to Lu Qinduo anymore. Asked directly: "You said Sioux City Telecom." What kind of physical isolation jishu do their servers use? Single-drive isolation card or dual-drive isolation card? ”
"Dual hard drive isolation card?"
Lu Qin was stunned when he heard it, and the physical isolation jishu that had just appeared for a long time was to install the physical isolation card on the motherboard slot, and then take the software jishu treatment on the original hard disk. Virtualize one computer into two computers. Through the isolation gate. Create an environment where the internal and external networks are physically disconnected, but logically connected. In this way, network data transmission from one network to another network is effectively avoided, and a secure environment is formed between the two networks.
In Lu Qin's cognition. A physical isolation card is a physical isolation card, and there is no distinction between single and double hard disks.
Du Xinghe saw that Lu Qin didn't understand, so he told Lu Qin a little. He still knows more about this matter, because he has a very haode buddy who is a network security executive, once a network data company in charge of their company, in order to save money, made a single hard disk physical isolation jishu, that is, logically rather than actually constituted isolation, and as a result, someone cracked the isolation jishu and attacked the server.
Du Xinghe suspected what Lu Qin said, and he didn't know where the virus came out, and it was loaded by the attack because the jishu vulnerability of the single physical isolation card was exploited.
He shared this idea with Lu Qin.
Lu Qin was really shocked to hear it! Because physical isolation Jishu has just appeared, Jishu is naturally immature, and she also thought that on a computer, there will always be loopholes in dividing the internal network and the external network in a virtual way. And now what Du Xinghe said to her is exactly what she thought!
Even, Du Xinghe's views are more direct and bold than his! Du Xinghe also put forward the idea of installing dual hard disks to completely isolate the internal and external networks, which will increase the hardware cost, but can greatly improve the security of the system!
"How did you come up with it! You also say you don't understand computers! Could this be a method that someone who doesn't know how to use computers? ”
Lu Qin was once again conquered by Du Xinghe's genius thinking! The anger she was angry with Du Xinghe before was swept away, and she was going to pounce on Du Xinghe again! In her eyes, this guy is simply a computer genius who is even more genius than her! And he's a hidden super genius!
For Xu Nuo, Du Xinghe's Pandora's box is full of wonderful music, and for Lu Qin, Du Xinghe's Pandora's box is not only full of spiritual music, but also her shocking computer thinking and jishu!
Du Xinghe's thoughts that shocked Lu Qin were naturally the crystallization of the wisdom of the previous plane. In the previous plane, the physical isolation of a single hard disk has long been eliminated, because from a security point of view, the physical isolation of a single hard disk is really easy to attack and very insecure. Since he knew this, he naturally talked to Lu Qin, which could be regarded as helping this plane reduce some trouble.
"If Sioux City Telecom is a single hard drive physical isolation, you can start from here to check and see if there are traces of attack."
"Definitely not. Because we completely disconnected that server and have moved it back to our company to study it. Now that computer is not connected to any network at all, it is a single computer, but no matter how you format it, after reinstalling it with a clean system, it will still have bizarre viruses! It's okay to install it on other computers, just this one, no matter how you install it, there will be viruses! ”
After learning about Du Xinghe's super talent in the computer field, Lu Qin began to excitedly talk to Du Xinghe about the problems their company is facing. This problem has nothing to do with physical isolation, and she doesn't know if Du Xinghe can figure out the crux of the problem.
"Honey, why don't you go to my company to help take a look!"
couldn't help but call Du Xinghe a pleasant name, and Lu Qin strongly invited Du Xinghe: "The engineers of our company are about to be completely troubled by this computer, and many people think that this computer has been cultivated into a goblin and has the ability to produce viruses by itself." Of course I don't believe this, but I can't figure it out after a day! Those viruses are like ghosts, haunting the computer, it's really weird, no matter how you kill them, they will come back to life! ”
Du Xinghe heard Lu Qin say this, and remembered a virus called "Ghost Shadow" that he had been hit in the previous face.
This virus is extremely perverted!
A general computer virus is an application under the Windows system that runs only after Windows is loaded. The main code of the "ghost" virus is parasitic in the master boot record (MBR) of the hard drive, and even if the user reinstalls the system, it cannot be completely removed.
When the system restarts, the ghost virus will load the operating system kernel before it does. When the virus runs successfully, no abnormalities can be found in the process or system boot add-on, and the virus is like a "ghost" on the poisoned computer!
It subverts the infection characteristics of traditional viruses and the mindset of users dealing with virus problems, not only does it achieve the "three nos" characteristics - no files, no system startup items, no process modules, even if the user reinstalls the system, the virus will still enter the user's new system again.
Du Xinghe remembered that his buddy said that the degree of perversion of this virus was simply outrageous! Even if the development of the previous plane computer jishu is so mature, among the domestic security vendors and civil anti-virus masters, there are only a handful of people who can completely analyze the "ghost" virus!
This plane computer jishu is still very backward, and there should not be such a perverted virus. But the poisoning symptoms of the computer described by Lu Qin are too similar to the ghost virus. Could it be that there is really such an NB character in this plane, and under such jishu conditions, the virus code can already be written into the master boot record of the hard disk?
Seeing that he was about to go to Lu Qin's company, Du Xinghe said to Lu Qin: "I won't go to your company, I really don't understand computers." However, you can check the master boot record of the poisoned computer to see if the virus code has been written into the master boot record of the hard drive. ”
Lu Qin touched his little eyebrows, carefully thought about Du Xinghe's analysis, how to think about it and how to think it was impossible. Because the master boot record of the hard disk is a boot code when the hard disk is initially booted, it does not belong to any operating system, this code is loaded when the hard disk manufacturer makes the hard disk, and it cannot be modified, because if it is modified, the hard disk will not work. And the hard disk of that poisoned computer is running very normally, there is no abnormality.
However, Du Xinghe's analysis made Lu Qin feel a sudden sense of enlightenment, if someone can really write the virus into the master boot record of the hard disk, it will indeed cause the effect that the computer cannot get rid of the virus no matter how it is formatted. Because the sector of the hard disk where the boot code is recorded is a very special sector, the contents of that sector have special protection and cannot be modified by formatted commands.
Because of this, it is impossible for the code of that sector to load the virus code.
Lu Qin couldn't figure out what was going on.
Finally arrived at the Ocean Building, where her company is located.
Seeing that there were employees of Lu Qin's company waiting for Lu Qin downstairs, Du Xinghe didn't send Lu Qin up, and he had to rush back to Su University.
Lu Qin was thinking about the virus in her mind, and she didn't care about pestering Du Xinghe, so she jumped out of the car on one foot, put on her shoes, and limped into the building by the employees.
When he came to the computer, he didn't listen to the blind analysis of those engineers, and as soon as he sat down on the chair, Lu Qin went to check the main boot record of the computer's hard disk as Du Xinghe said.
After entering the function command, the computer's hard disk boot code appears on the screen...... (To be continued......)