探索

Thanks junsu and I have got a copy of MyDoom now.

Its MD5 is: 39A7D2BB 5652C9D1 05C0D64A 640C5A9D [UPX unpacked]

Unfortunatelly he said it’s not valuable to research it because a previous analyze done by his colleague indicates that this is not a “skilled” worm.

I’ll keep this for some time. For security reasons I have denied my own execute privilege of that file.

Well, it’s out of my surprise to see a website called “LonghornBlogs” when I am looking for a Microsoft implementation of blog engine…

比想象中的容易许多许多……当然，留了个巨大的安全隐患在里面，接下来的问题就是修正它。

这里有一个介绍如何架blog的，参考了一下： http://mylibrary.csdl.ac.cn/archives/000016.html