B THNG TIN V TRUYN THNG

TRUNG TM NG CU KHN CP
MY TNH VIT NAM
S:
/VNCERT-PC
V/v theo di, ngn chn kt ni v xo
cc tp tin cha m c

CNG HA X HI CH NGHA VIT NAM

c lp - T do - Hnh phc
H Ni, ngy

thng

nm 2016

Knh gi:
-

Cc n v chuyn trch v CNTT cc B, Ngnh;

Cc S thng tin v Truyn thng;
Thnh vin mng li ng cu s c Internet Vit Nam;
Cc t chc Ti chnh, Ngn hng.

Thc hin Thng t 27/2011/TT-BTTTT v iu phi cc hot ng ng

cu s c mng Internet Vit Nam, Trung tm VNCERT yu cu Lnh o n
v ch o cc n v thuc phm vi qun l thc hin khn cp cc vic:
1. Theo di v ngn chn kt ni n cc tn min sau:
a) playball.ddns.info
b) nvedia.ddns.info
c) air.dcsvn.org
2. R qut h thng v xo cc th mc v tp tin m c c kch thc
tng ng:
a) C:\Program Files\Common Files\McAfee\McAfee.exe (137.28 KB)
- MD5: 884D46C01C762AD6DDD2759FD921BF71
- SHA-1: D201B130232E0EA411DAA23C1BA2892FE6468712
b) C:\Program Files\Common Files\McAfee\McUtil.dll (3.50 KB)
- MD5: C52464E9DF8B3D08FC612A0F11FE53B2
- SHA-1: E464D10AD93600232D7A24856D69F00510949A40
c) C:\Windows\system32\DiskMgers.dll (85.00 KB)
- MD5: 9BF793EF195CC62F8A61093F77B03158
- SHA-1: 46844B0ACF2BB67ADBF2304A61BE07738D2DDD64
d) Tp tin diskperf.exe: tm tt c cc file trong H iu hnh c:
- MD5: 29E656E1256FC998B7CE8494656B3EF8
- SHA-1: 8C073B63D85CBF48BD742A62C7A59EEB064DA74D
3. Hng dn kim tra m MD5, SHA-1 ca tp tin v cch thc xo tp
tin cha m c trong Ph lc km theo.

4. Sau khi thc hin, yu cu cc n v bo co tnh hnh v u mi

iu phi ng cu s c quc gia (Trung tm VNCERT) theo a ch email:
ir@vncert.gov.vn / in thoi: 0934424009 trc 16h ngy 05/8/2016.
5. Trn y l nhng m c c bit nguy him, c th nh cp thng
tin v ph hu h thng, Trung tm VNCERT yu cu Lnh o cc n v
nghim tc thc hin lnh iu phi.
Trn trng./.

Ni nhn:
- Nh trn;
- B trng Trng Minh Tun ( b/c);
- Th trng Nguyn Thnh Hng ( b/c);
- Gim c ( b/c);
- Cc chi nhnh, phng: HCM, N, KTHT;
- Lu VT, PC.

KT.GIM C
PH GIM C

Nguyn Khc Lch

PH LC
Hng dn kim tra m MD5, SHA-1 ca tp tin v cch thc xo tp tin
cha m c
(Km theo cng vn s:

/VNCERT-PC ngy 03 thng 8 nm 2016 ca Trung

tm ng cu khn cp my tnh Vit Nam)

1. Hng dn kim tra m hash MD5, SHA-1:

a) Download phn mm ti: http://www.nirsoft.net/utils/hashmyfiles.zip
b) Kim tra: Gii nn tp tin hashmyfiles.zip trn, tin hnh m file
HashMyFiles.exe. Nhn vo File -> Add Files; Tr n file cn kim tra m Hash.
M MD5 v SHA-1 s hin th bn khung chng trnh. Bn ch cn i chiu m
MD5 v SHA-1 tng ng trong Cng vn i km.
2. Hng dn g b tp tin cha m c:
a) Xc nh m c: Nu m MD5 v SHA-1 trng nhau th tp tin trn my tnh l
phn mm c cha m c. Nu khng trng th cha khng nh 100% n khng phi
l m c. C th khng xo trong trng hp ny.
b) Cch xo tp tin cha m c: Do tp tin ny ang chy nn ta cn dng hoc tt
tin trnh ny trc khi xo. Trc tin cn ti phn mm min ph c tn Process
Explorer

ca

Microsoft

ti

ch

bn

di:

https://download.sysinternals.com/files/ProcessExplorer.zip
Sau khi ti v gii nn ta chy file procexp.exe. Tin hnh tm kim cc tin trnh
tng ng trong Cng vn trn v nhn chut phi chn Suspend hoc Kill
Process. Sau khi chn xong, ta vo ng dn tng ng xo.