{"id":476338,"date":"2023-08-09T07:28:31","date_gmt":"2023-08-09T07:28:31","guid":{"rendered":""},"modified":"2023-09-05T11:12:32","modified_gmt":"2023-09-05T11:12:32","slug":"companion-virus","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/cn\/wiki\/companion-virus\/","title":{"rendered":"\u4f34\u968f\u75c5\u6bd2"},"content":{"rendered":"<p>Companion \u75c5\u6bd2\u662f\u4e00\u79cd\u5bf9\u8ba1\u7b97\u673a\u7cfb\u7edf\u548c\u7f51\u7edc\u6784\u6210\u4e25\u91cd\u5a01\u80c1\u7684\u6076\u610f\u8f6f\u4ef6\u3002\u5b83\u5c5e\u4e8e\u6587\u4ef6\u611f\u67d3\u75c5\u6bd2\u7c7b\u522b\uff0c\u56e0\u4e3a\u5b83\u4f1a\u5c06\u81ea\u8eab\u9644\u52a0\u5230\u53ef\u6267\u884c\u6587\u4ef6\u5e76\u5728\u6267\u884c\u53d7\u611f\u67d3\u6587\u4ef6\u65f6\u8fdb\u884c\u4f20\u64ad\u3002 Companion \u75c5\u6bd2\u4e8e 20 \u4e16\u7eaa 90 \u5e74\u4ee3\u521d\u9996\u6b21\u88ab\u53d1\u73b0\uff0c\u56e0\u5176\u80fd\u591f\u9003\u907f\u4f20\u7edf\u9632\u75c5\u6bd2\u63aa\u65bd\u5e76\u957f\u65f6\u95f4\u4e0d\u88ab\u53d1\u73b0\u800c\u58f0\u540d\u72fc\u85c9\u3002<\/p>\n<h2>\u4f34\u968f\u75c5\u6bd2\u7684\u8d77\u6e90\u5386\u53f2\u548c\u9996\u6b21\u63d0\u53ca\u3002<\/h2>\n<p>Companion \u75c5\u6bd2\u4e8e 1992 \u5e74\u9996\u6b21\u5728\u91ce\u5916\u53d1\u73b0\uff0c\u5176\u8bbe\u8ba1\u76ee\u6807\u662f\u5f53\u65f6\u6d41\u884c\u7684\u57fa\u4e8e DOS \u7684\u7cfb\u7edf\u3002\u8be5\u75c5\u6bd2\u88ab\u547d\u540d\u4e3a\u201cCompanion\u201d\uff0c\u56e0\u4e3a\u5b83\u4f1a\u521b\u5efa\u4e00\u4e2a\u4e0e\u53d7\u611f\u67d3\u7684\u53ef\u6267\u884c\u6587\u4ef6\u540c\u540d\u7684\u4f34\u968f\u6587\u4ef6\uff0c\u4f46\u6269\u5c55\u540d\u4e3a\u201c.com\u201d\u3002\u5728 DOS \u7cfb\u7edf\u7684\u641c\u7d22\u987a\u5e8f\u4e2d\uff0c\u8be5\u4f34\u968f\u6587\u4ef6\u51fa\u73b0\u5728\u5408\u6cd5\u53ef\u6267\u884c\u6587\u4ef6\u4e4b\u524d\uff0c\u6709\u6548\u5730\u66ff\u6362\u4e86\u5408\u6cd5\u6587\u4ef6\u5e76\u786e\u4fdd\u7528\u6237\u8fd0\u884c\u7a0b\u5e8f\u65f6\u9996\u5148\u6267\u884c\u75c5\u6bd2\u3002<\/p>\n<h2>\u6709\u5173\u4f34\u968f\u75c5\u6bd2\u7684\u8be6\u7ec6\u4fe1\u606f\u3002\u6269\u5c55\u4f34\u751f\u75c5\u6bd2\u4e3b\u9898\u3002<\/h2>\n<p>Companion\u75c5\u6bd2\u901a\u8fc7\u4fee\u6539MS-DOS\u7cfb\u7edf\u6587\u4ef6COMMAND.COM\u548cIO.SYS\u6765\u8fd0\u884c\uff0c\u4ee5\u786e\u4fdd\u5176\u5728\u7cfb\u7edf\u542f\u52a8\u65f6\u6267\u884c\u3002\u5f53\u7528\u6237\u542f\u52a8\u53d7\u611f\u67d3\u7684\u53ef\u6267\u884c\u6587\u4ef6\u65f6\uff0c\u75c5\u6bd2\u5c31\u4f1a\u83b7\u5f97\u63a7\u5236\u6743\u5e76\u611f\u67d3\u7cfb\u7edf\u4e2d\u7684\u5176\u4ed6\u53ef\u6267\u884c\u6587\u4ef6\u3002\u7531\u4e8e\u5176\u9690\u79d8\u6027\u548c\u80fd\u591f\u907f\u514d\u4f20\u7edf\u9632\u75c5\u6bd2\u8f6f\u4ef6\u68c0\u6d4b\u7684\u80fd\u529b\uff0cCompanion \u75c5\u6bd2\u5728\u5176\u9f0e\u76db\u65f6\u671f\u5bf9\u7f51\u7edc\u5b89\u5168\u4e13\u5bb6\u6765\u8bf4\u662f\u4e00\u4e2a\u91cd\u5927\u6311\u6218\u3002<\/p>\n<h2>\u4f34\u968f\u75c5\u6bd2\u7684\u5185\u90e8\u7ed3\u6784\u3002\u4f34\u968f\u75c5\u6bd2\u5982\u4f55\u8fd0\u4f5c\u3002<\/h2>\n<p>\u4e0e\u73b0\u4ee3\u6076\u610f\u8f6f\u4ef6\u76f8\u6bd4\uff0cCompanion \u75c5\u6bd2\u7684\u5185\u90e8\u7ed3\u6784\u76f8\u5bf9\u7b80\u5355\u3002\u5b83\u901a\u5e38\u7531\u4e24\u90e8\u5206\u7ec4\u6210\uff1a\u4e00\u4e2a\u5c0f\u7684\u5f15\u5bfc\u4ee3\u7801\u548c\u4e3b\u8981\u6709\u6548\u8d1f\u8f7d\u3002\u5f15\u5bfc\u4ee3\u7801\u8d1f\u8d23\u5b9a\u4f4d\u8981\u611f\u67d3\u7684\u76ee\u6807\u6587\u4ef6\u5e76\u786e\u4fdd\u75c5\u6bd2\u52a0\u8f7d\u5230\u5185\u5b58\u4e2d\u3002\u4e00\u65e6\u6267\u884c\uff0c\u75c5\u6bd2\u7684\u4e3b\u8981\u6709\u6548\u8d1f\u8f7d\u5c31\u4f1a\u63a7\u5236\u7cfb\u7edf\u5e76\u5f00\u59cb\u5176\u6076\u610f\u6d3b\u52a8\u3002<\/p>\n<p>Companion\u75c5\u6bd2\u8fd0\u884c\u7684\u5173\u952e\u6b65\u9aa4\u5982\u4e0b\uff1a<\/p>\n<ol>\n<li>\u75c5\u6bd2\u5728\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u4e0a\u5b9a\u4f4d\u5177\u6709\u7279\u5b9a\u6269\u5c55\u540d\uff08\u4f8b\u5982.exe\uff09\u7684\u76ee\u6807\u6587\u4ef6\u3002<\/li>\n<li>\u5b83\u5907\u4efd\u539f\u59cb\u6587\u4ef6\u5185\u5bb9\u5e76\u5c06\u81ea\u8eab\u5199\u5165\u76ee\u6807\u6587\u4ef6\uff0c\u4ece\u800c\u6709\u6548\u5730\u611f\u67d3\u5b83\u3002<\/li>\n<li>\u8be5\u75c5\u6bd2\u4f1a\u4fee\u6539\u7cfb\u7edf\u6587\u4ef6\uff08COMMAND.COM \u548c IO.SYS\uff09\u4ee5\u7ef4\u6301\u5176\u5728\u7cfb\u7edf\u4e2d\u7684\u5b58\u5728\u3002<\/li>\n<li>\u6bcf\u5f53\u8fd0\u884c\u53d7\u611f\u67d3\u7684\u7a0b\u5e8f\u65f6\uff0c\u75c5\u6bd2\u5c31\u4f1a\u518d\u6b21\u5f00\u59cb\u5176\u5faa\u73af\uff0c\u4f20\u64ad\u5230\u5176\u4ed6\u53ef\u6267\u884c\u6587\u4ef6\u3002<\/li>\n<\/ol>\n<h2>\u4f34\u4fa3\u75c5\u6bd2\u7684\u4e3b\u8981\u7279\u5f81\u5206\u6790\u3002<\/h2>\n<p>Companion \u75c5\u6bd2\u5177\u6709\u51e0\u4e2a\u533a\u522b\u4e8e\u5176\u4ed6\u6076\u610f\u8f6f\u4ef6\u7684\u5173\u952e\u7279\u5f81\uff1a<\/p>\n<ol>\n<li><strong>\u9690\u79d8\u6027<\/strong>\uff1aCompanion \u75c5\u6bd2\u6700\u663e\u7740\u7684\u7279\u5f81\u4e4b\u4e00\u662f\u5b83\u80fd\u591f\u9690\u85cf\u5728\u4f20\u7edf\u9632\u75c5\u6bd2\u626b\u63cf\u7a0b\u5e8f\u548c\u5176\u4ed6\u5b89\u5168\u63aa\u65bd\u4e4b\u5916\u3002<\/li>\n<li><strong>\u5f15\u5bfc\u6247\u533a\u611f\u67d3<\/strong>\uff1a\u8be5\u75c5\u6bd2\u4f1a\u5728\u542f\u52a8\u8fc7\u7a0b\u4e2d\u4fee\u6539\u5173\u952e\u7cfb\u7edf\u6587\u4ef6\uff0c\u4f7f\u5176\u80fd\u591f\u5728\u7cfb\u7edf\u6267\u884c\u7684\u65e9\u671f\u52a0\u8f7d\uff0c\u4ece\u800c\u4f7f\u5176\u96be\u4ee5\u68c0\u6d4b\u548c\u5220\u9664\u3002<\/li>\n<li><strong>\u6587\u4ef6\u611f\u67d3<\/strong>\uff1a\u540c\u4f34\u611f\u67d3\u53ef\u6267\u884c\u6587\u4ef6\uff0c\u4f7f\u5176\u80fd\u591f\u901a\u8fc7\u6b63\u5e38\u7684\u6587\u4ef6\u6267\u884c\u548c\u7cfb\u7edf\u4f7f\u7528\u8fdb\u884c\u4f20\u64ad\uff0c\u4f7f\u5176\u4f20\u64ad\u65e0\u7f1d\u3002<\/li>\n<\/ol>\n<h2>\u4f34\u968f\u75c5\u6bd2\u7684\u7c7b\u578b<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u7c7b\u578b<\/th>\n<th>\u63cf\u8ff0<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u7ecf\u5178\u4f34\u4fa3<\/td>\n<td>\u6700\u521d\u7684 Companion \u75c5\u6bd2\u662f\u4e3a DOS \u7cfb\u7edf\u8bbe\u8ba1\u7684\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u73b0\u4ee3\u4f34\u4fa3<\/td>\n<td>\u9002\u5408\u611f\u67d3\u73b0\u4ee3 Windows \u548c Linux \u53ef\u6267\u884c\u6587\u4ef6\u7684\u53d8\u4f53\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7f51\u7edc\u4f34\u4fa3<\/td>\n<td>\u5229\u7528\u7f51\u7edc\u6f0f\u6d1e\u5728\u4e92\u8054\u7cfb\u7edf\u4e2d\u4f20\u64ad\u7684\u4f34\u751f\u75c5\u6bd2\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Companion \u75c5\u6bd2\u7684\u4f7f\u7528\u65b9\u6cd5\u3001\u95ee\u9898\u4ee5\u53ca\u4e0e\u4f7f\u7528\u76f8\u5173\u7684\u89e3\u51b3\u65b9\u6848\u3002<\/h2>\n<p>\u867d\u7136 Companion \u75c5\u6bd2\u56e0\u5176\u9690\u79d8\u884c\u4e3a\u548c\u9003\u907f\u884c\u4e3a\u800c\u81ed\u540d\u662d\u8457\uff0c\u4f46\u5b83\u4e3b\u8981\u7528\u4f5c\u6982\u5ff5\u9a8c\u8bc1\uff0c\u800c\u4e0d\u662f\u7f51\u7edc\u72af\u7f6a\u5206\u5b50\u7684\u5e7f\u6cdb\u5de5\u5177\u3002\u5176\u4e3b\u8981\u7528\u9014\u662f\u5c55\u793a\u9632\u75c5\u6bd2\u8f6f\u4ef6\u7684\u5f31\u70b9\u4ee5\u53ca\u6076\u610f\u8f6f\u4ef6\u68c0\u6d4b\u65e9\u671f\u5b89\u5168\u5b9e\u8df5\u7684\u5c40\u9650\u6027\u3002<\/p>\n<p><strong>\u95ee\u9898\u53ca\u89e3\u51b3\u65b9\u6848\uff1a<\/strong><\/p>\n<ol>\n<li>\n<p><strong>\u68c0\u6d4b\u6311\u6218<\/strong>\uff1a\u4f20\u7edf\u7684\u57fa\u4e8e\u7b7e\u540d\u7684\u9632\u75c5\u6bd2\u8f6f\u4ef6\u5f88\u96be\u68c0\u6d4b\u5230 Companion \u75c5\u6bd2\uff0c\u56e0\u4e3a\u5b83\u80fd\u591f\u4fee\u6539\u6587\u4ef6\u5e76\u4fdd\u6301\u5185\u5b58\u9a7b\u7559\u3002<br \/>\n\u89e3\u51b3\u65b9\u6848\uff1a\u73b0\u4ee3\u9632\u75c5\u6bd2\u8f6f\u4ef6\u4f7f\u7528\u57fa\u4e8e\u884c\u4e3a\u7684\u542f\u53d1\u5f0f\u65b9\u6cd5\u548c\u673a\u5668\u5b66\u4e60\u7b97\u6cd5\u6765\u8bc6\u522b\u548c\u9694\u79bb\u6076\u610f\u8f6f\u4ef6\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u575a\u6301<\/strong>\uff1a\u75c5\u6bd2\u4fee\u6539\u4e86\u7cfb\u7edf\u6587\u4ef6\uff0c\u4ee5\u786e\u4fdd\u5373\u4f7f\u5728\u7cfb\u7edf\u91cd\u65b0\u542f\u52a8\u540e\u5b83\u4ecd\u7136\u4fdd\u6301\u6d3b\u52a8\u72b6\u6001\u3002<br \/>\n\u89e3\u51b3\u65b9\u6848\uff1a\u5b9a\u671f\u66f4\u65b0\u7cfb\u7edf\u6587\u4ef6\u5e76\u4f7f\u7528\u7cfb\u7edf\u5b8c\u6574\u6027\u68c0\u67e5\u53ef\u4ee5\u5e2e\u52a9\u68c0\u6d4b\u672a\u7ecf\u6388\u6743\u7684\u4fee\u6539\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u4f20\u64ad<\/strong>\uff1aCompanion \u75c5\u6bd2\u53ef\u4ee5\u901a\u8fc7\u53ef\u6267\u884c\u6587\u4ef6\u5feb\u901f\u4f20\u64ad\uff0c\u4ece\u800c\u4f7f\u5176\u5220\u9664\u53d8\u5f97\u56f0\u96be\u3002<br \/>\n\u89e3\u51b3\u65b9\u6848\uff1a\u9694\u79bb\u53d7\u611f\u67d3\u7684\u7cfb\u7edf\u3001\u5b9a\u671f\u8fd0\u884c\u9632\u75c5\u6bd2\u626b\u63cf\u548c\u66f4\u65b0\u8f6f\u4ef6\u6709\u52a9\u4e8e\u9632\u6b62\u8fdb\u4e00\u6b65\u611f\u67d3\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u4ee5\u8868\u683c\u548c\u5217\u8868\u7684\u5f62\u5f0f\u5217\u51fa\u4e3b\u8981\u7279\u5f81\u4ee5\u53ca\u4e0e\u7c7b\u4f3c\u672f\u8bed\u7684\u5176\u4ed6\u6bd4\u8f83\u3002<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u7279\u5f81<\/th>\n<th>\u4f34\u968f\u75c5\u6bd2<\/th>\n<th>\u5e38\u89c4\u75c5\u6bd2<\/th>\n<th>\u866b<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u6587\u4ef6\u611f\u67d3<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u4e0d<\/td>\n<\/tr>\n<tr>\n<td>\u9690\u79d8\u7684<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u4e0d<\/td>\n<td>\u4e0d<\/td>\n<\/tr>\n<tr>\n<td>\u81ea\u6211\u4f20\u64ad<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u662f\u7684<\/td>\n<\/tr>\n<tr>\n<td>\u7f51\u7edc\u4f20\u64ad<\/td>\n<td>\u4e0d<\/td>\n<td>\u4e0d<\/td>\n<td>\u662f\u7684<\/td>\n<\/tr>\n<tr>\n<td>\u5f15\u5bfc\u6247\u533a\u611f\u67d3<\/td>\n<td>\u662f\u7684<\/td>\n<td>\u4e0d<\/td>\n<td>\u4e0d<\/td>\n<\/tr>\n<tr>\n<td>\u73b0\u4ee3\u6d41\u884c<\/td>\n<td>\u4f4e\u7684<\/td>\n<td>\u9ad8\u7684<\/td>\n<td>\u4e2d\u7b49\u7684<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u4e0e\u4f34\u4fa3\u75c5\u6bd2\u76f8\u5173\u7684\u672a\u6765\u524d\u666f\u548c\u6280\u672f\u3002<\/h2>\n<p>\u968f\u7740\u6280\u672f\u7684\u8fdb\u6b65\uff0c\u7531\u4e8e\u5b89\u5168\u63aa\u65bd\u7684\u6539\u8fdb\u548c MS-DOS \u7cfb\u7edf\u7684\u8870\u843d\uff0cCompanion \u75c5\u6bd2\u672c\u8eab\u5df2\u4e0d\u518d\u90a3\u4e48\u6d41\u884c\u3002\u7136\u800c\uff0c\u5b83\u7684\u9057\u4ea7\u63d0\u9192\u4eba\u4eec\u5bf9\u65b0\u51fa\u73b0\u7684\u6076\u610f\u8f6f\u4ef6\u5a01\u80c1\u4fdd\u6301\u8b66\u60d5\u7684\u91cd\u8981\u6027\u3002\u672a\u6765\u7684\u6280\u672f\u53ef\u80fd\u4f1a\u96c6\u4e2d\u5728\u66f4\u590d\u6742\u7684\u57fa\u4e8e\u884c\u4e3a\u7684\u68c0\u6d4b\u7cfb\u7edf\u3001\u673a\u5668\u5b66\u4e60\u9a71\u52a8\u7684\u9632\u75c5\u6bd2\u89e3\u51b3\u65b9\u6848\u4ee5\u53ca\u589e\u5f3a\u7684\u5a01\u80c1\u60c5\u62a5\u5171\u4eab\u4ee5\u5e94\u5bf9\u4e0d\u65ad\u53d8\u5316\u7684\u6076\u610f\u8f6f\u4ef6\u5a01\u80c1\u3002<\/p>\n<h2>\u5982\u4f55\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u6216\u5982\u4f55\u5c06\u4ee3\u7406\u670d\u52a1\u5668\u4e0e Companion \u75c5\u6bd2\u5173\u8054\u3002<\/h2>\n<p>\u4ee3\u7406\u670d\u52a1\u5668\u5728\u964d\u4f4e\u4e0e Companion \u75c5\u6bd2\u611f\u67d3\u76f8\u5173\u7684\u98ce\u9669\u65b9\u9762\u53ef\u4ee5\u53d1\u6325\u91cd\u8981\u4f5c\u7528\u3002\u901a\u8fc7\u5145\u5f53\u7528\u6237\u548c\u4e92\u8054\u7f51\u4e4b\u95f4\u7684\u4e2d\u4ecb\uff0c\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u8fc7\u6ee4\u6389\u6076\u610f\u6d41\u91cf\u5e76\u963b\u6b62\u5bf9\u53d7\u611f\u67d3\u7f51\u7ad9\u7684\u8bbf\u95ee\u3002\u4ed6\u4eec\u8fd8\u53ef\u4ee5\u8bb0\u5f55\u548c\u5206\u6790\u7f51\u7edc\u6d3b\u52a8\uff0c\u4ee5\u68c0\u6d4b\u548c\u9632\u6b62\u6076\u610f\u8f6f\u4ef6\u7684\u4f20\u64ad\u3002\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u4ee5\u53ca\u5f3a\u5927\u7684\u9632\u75c5\u6bd2\u8f6f\u4ef6\u53ef\u4ee5\u589e\u5f3a\u7ec4\u7ec7\u7684\u6574\u4f53\u5b89\u5168\u72b6\u51b5\uff0c\u5e76\u9632\u8303\u6f5c\u5728\u7684\u6076\u610f\u8f6f\u4ef6\u5a01\u80c1\uff08\u4f8b\u5982 Companion \u75c5\u6bd2\uff09\u3002<\/p>\n<h2>\u76f8\u5173\u94fe\u63a5<\/h2>\n<p>\u6709\u5173 Companion \u75c5\u6bd2\u548c\u5176\u4ed6\u6076\u610f\u8f6f\u4ef6\u5a01\u80c1\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u60a8\u53ef\u4ee5\u53c2\u8003\u4ee5\u4e0b\u8d44\u6e90\uff1a<\/p>\n<ol>\n<li><a href=\"https:\/\/www.us-cert.gov\/ncas\/tips\/ST04-001\" target=\"_new\" rel=\"noopener nofollow\">US-CERT \u2013 \u4e86\u89e3\u6076\u610f\u8f6f\u4ef6<\/a><\/li>\n<li><a href=\"https:\/\/www.symantec.com\/security-center\/writeup\/2003-112111-5759-99\" target=\"_new\" rel=\"noopener nofollow\">\u8d5b\u95e8\u94c1\u514b \u2013 \u4f34\u968f\u75c5\u6bd2\u63cf\u8ff0<\/a><\/li>\n<li><a href=\"https:\/\/attack.mitre.org\/wiki\/Technique\/T1003\" target=\"_new\" rel=\"noopener nofollow\">MITRE \u2013 \u5a01\u80c1\u6982\u51b5\uff1a\u6587\u4ef6\u611f\u67d3\u8005<\/a><\/li>\n<li><a href=\"https:\/\/www.kaspersky.com\/intelligence-services\" target=\"_new\" rel=\"noopener nofollow\">\u5361\u5df4\u65af\u57fa\u5b9e\u9a8c\u5ba4 \u2013 \u5a01\u80c1\u60c5\u62a5\u95e8\u6237<\/a><\/li>\n<\/ol>\n<p>\u603b\u4e4b\uff0cCompanion \u75c5\u6bd2\u4ee3\u8868\u4e86\u8ba1\u7b97\u673a\u6076\u610f\u8f6f\u4ef6\u5386\u53f2\u4e0a\u7684\u4e00\u4e2a\u91cd\u8981\u91cc\u7a0b\u7891\uff0c\u8868\u660e\u9700\u8981\u4e0d\u65ad\u521b\u65b0\u548c\u6539\u8fdb\u7f51\u7edc\u5b89\u5168\u3002\u968f\u7740\u6280\u672f\u7684\u8fdb\u6b65\uff0c\u7f51\u7edc\u5a01\u80c1\u4e5f\u5728\u4e0d\u65ad\u589e\u52a0\uff0c\u4fdd\u6301\u4fe1\u606f\u7075\u901a\u548c\u505a\u597d\u51c6\u5907\u5bf9\u4e8e\u9632\u5fa1\u73b0\u4ee3\u6570\u5b57\u5371\u9669\u81f3\u5173\u91cd\u8981\u3002\u5229\u7528\u5148\u8fdb\u7684\u5b89\u5168\u89e3\u51b3\u65b9\u6848\u3001\u5b9e\u65bd\u6700\u4f73\u5b9e\u8df5\u548c\u4f7f\u7528\u4ee3\u7406\u670d\u52a1\u5668\u53ef\u4ee5\u5171\u540c\u521b\u5efa\u9488\u5bf9 Companion \u75c5\u6bd2\u7b49\u6076\u610f\u8f6f\u4ef6\u7684\u5f3a\u5927\u9632\u5fa1\u3002<\/p>","protected":false},"featured_media":467922,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476338","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Companion Virus: A Comprehensive Guide<\/mark>","faq_items":[{"question":"What is the Companion virus?","answer":"<p>The Companion virus is a type of malware that infects executable files and spreads when the infected files are executed. It was first discovered in the early 1990s and gained notoriety due to its ability to evade traditional antivirus measures.<\/p>"},{"question":"How does the Companion virus work?","answer":"<p>The Companion virus operates by modifying critical system files during the boot process and infecting target executable files. It creates a companion file with the same name as the infected executable but with a \".com\" extension, ensuring its execution before the legitimate file.<\/p>"},{"question":"What are the key features of the Companion virus?","answer":"<p>The Companion virus is known for its stealthiness, making it challenging to detect by traditional antivirus software. It performs file infection and system file modification, allowing it to persist and propagate through executable files.<\/p>"},{"question":"What types of Companion virus exist?","answer":"<p>There are mainly three types of Companion virus: Classic Companion (for DOS systems), Modern Companion (adapted for modern Windows and Linux executables), and Network Companion (exploiting network vulnerabilities).<\/p>"},{"question":"How can proxy servers help with Companion virus protection?","answer":"<p>Proxy servers act as intermediaries between users and the internet, filtering out malicious traffic and blocking access to infected websites. They can enhance security and prevent the spread of malware, including the Companion virus.<\/p>"},{"question":"What are the future perspectives related to the Companion virus?","answer":"<p>As technology evolves, future cybersecurity measures are likely to focus on more sophisticated behavior-based detection systems, machine learning-driven antivirus solutions, and enhanced threat intelligence sharing to combat evolving malware threats.<\/p>"},{"question":"How was the Companion virus used, and what problems did it pose?","answer":"<p>The Companion virus was mainly used as a proof-of-concept to highlight weaknesses in antivirus software. It posed challenges in detection, persistence, and propagation, making its removal difficult.<\/p>"},{"question":"Where can I find more information about the Companion virus and malware threats?","answer":"<p>For more information about the Companion virus and other malware threats, you can refer to resources such as US-CERT, Symantec, MITRE, and Kaspersky Lab. Stay informed and vigilant to defend against cyber dangers.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476338","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/wiki\/476338\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media\/467922"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/cn\/wp-json\/wp\/v2\/media?parent=476338"}],"curies":[{"name":"\u53ef\u6e7f\u6027\u7c89\u5242","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}