What is the most powerful computer virus you've ever seen?
I believe that many people will answer "panda burning incense"
At the end of 2006, a computer virus called "Panda Burning Incense" infected millions of computers in just one month, and was rated as the "King of Drugs" by the "2006 Chinese mainland Computer Virus Epidemic and Internet Security Report".
Panda burns incense
Basic information about panda burning incense
Outbreak: November 2006
Large and small: 30-100KB, there are many variants
Notable features: Infected Windows system executable file and replaced the icon with panda burning incense, removed. GHO format backup file, terminate most of the antivirus software process, and download more viruses from the designated server to the system, such as number theft
And Li Jun, the author of "Panda Burning Incense", actually only has a technical school degree
Panda incense by Li Jun
Born in 1982, Li Jun is a rural boy in Wuhan, Hubei Province, from a young age like to tinker with various electronic equipment, junior high school because of partial subjects and did not enter high school, in the technical school, Li Jun studied "cement technology major", commonly known as sand and gravel mixture ratio solidification researcher
In school, Li Jun came into contact with Internet cafes and became obsessed with online games, at this time he would only use the computer to play games, but two things that happened after that changed the trajectory of Li Jun's life.
Because of the school, his major was adjusted to "mechatronics", and Li Jun began to formally contact the Windows system and began to learn programming.
The second incident occurred in Eastern Europe, where in May 1999 NATO bombed the Chinese Embassy in Yugoslavia, killing three journalists and injuring dozens.
This matter should have had no intersection with Li Jun
But one night two days later, Li Jun came to the Internet café alone, and in the corner of the Internet café, he saw a familiar figure, which turned out to be a classmate "Lei Lei"
Li Jun will smile, this guy looks quite Sven, did not expect to hide in the corner to watch "Japanese love action movies", restless youth makes Li Jun also want to go over to see the end.
When he quietly came to the back of "Lei Lei", he wanted to feast his eyes, but the content on Lei Lei's screen stunned him, which was a Japanese action movie, but a string of strange code that could not be understood flashing, just like the hacker in the movie, deeply attracted Li Jun, Lei Lei skillfully tapped on the keyboard, completely ignoring a person behind him.
Finally, Li Jun finally couldn't contain his curiosity and interrupted Lei Lei and asked: "Dude, what are you doing?"
Lei Lei was startled, and when he saw that it was his classmate Li Jun, he replied that he hadn't done anything, just a fight
DDOS attacks
fight?? Li Jun was confused, how to fight with people on the Internet, what do you think these strange codes are for? How come I can't understand anything?
Lei Lei saw Li Jun asking questions, seemed to be interested, and asked rhetorically
The Americans blew up our embassy, you know
You know, it was reported on TV
They blew up Chinese still don't want to apologize, you know
I know! It's so infuriating
If they don't apologize, we hit them to apologize. We hacked the Americans' websites to see how angry they were!
Are you a hacker! That's awesome! Li Jun could not hide the excitement in his heart, this was the first time he had seen a living hacker, or his classmate.
I want to be a hacker too! Li Jun's eyes were full of excitement and longing
Since then, Li Jun and Lei Lei have a relationship of mentoring and friendship, and Lei Lei has no secrets, and has no reservations about Li Jun in terms of technology.
Li Jun is also very obsessed with hacking technology, often browse the hacking technology forum, but also buy a large number of related books to learn, the school time a few years passed, Li Jun graduated, at this time he did not listen to his parents' arrangements, the idea of becoming a mason, but wanted to go to the big city to break in, find a computer-related job.
So Li Jun came to Wuhan alone, his first job was in the "computer city", during the part-time job, Li Jun still persevered in self-study of various programming technology books, and also used the money earned from his part-time work to sign up for the "Network Technology Vocational Training Class".
In 2004, Li Jun felt that his programming level has been very good, he can rely on his own technology to find a "decent" job, so he went to Beijing, Guangzhou network security companies to find a job, the result is all because of low education reasons were rejected, repeatedly frustrated Li Jun began to lament the injustice of heaven, lamenting that his own talent is not met, which makes Li Jun's mentality gradually change, since you do not agree with my technology, then I have to do an earth-shattering thing, let you know my strength.
In this revenge mentality, Li Jun began to write computer viruses, and in 2005 Li Jun wrote computer viruses "QQ Tail" "Wuhan Boys 2005"
With a show-off mentality, Li Jun left his own special symbol in the computer virus code he wrote, "WHBOY", which is the abbreviation of Wuhan Boy, and even left his own QQ number and website information.
Wuhan Boy is a code name shared by Li Jun and several other hacker friends.
Li Jun found that writing computer viruses can not only prove their own strength and be admired by others, but also sell virus code for others to profit.
But before it was a small fight, Li Jun decided to do a big vote, "panda burning incense" also came into being, Li Jun used the virus source code of wuhan boys and a virus code called "Weijin", added more functions and behaviors, made a computer virus that was extremely harmful at the time, and the same before, Li Jun still did not forget to leave the code name of the Wuhan boy in the virus code to show off that this was his own work
After the virus was completed, Li Jun sold the virus to more than 120 people on the network, with a price of 500-1000 yuan, which could earn thousands of yuan every day, and in a short period of time, Li Jun earned more than 100,000 yuan with the virus.
At this time, Li Jun never thought that this virus would cause such serious consequences.
More than 120 people bought the virus, modified it, and spread it. They use viruses to steal netizens' games and QQ accounts, sell them for profit, and also use "computers" infected with viruses to form botnets and bring malicious traffic to some websites.
In mid-November 2006, the virus first appeared on the Internet
In just one month, hundreds of variants of the virus appeared and began to ravage the network, centered on Wuhan, Hubei Province, frantically infecting users' computers
At this time, Li Jun was admiring his own achievements in front of the computer and was complacent.
After a month, on January 9, 2007, the virus has infected millions of computers across the country.
Unfortunately infected with the virus Windows computer, most of the format of the file icon in the system will become a chubby red panda, holding 3 sticks of incense. So this virus has a cute name "panda burning incense"
In the face of the crazy variant of "panda burning incense", the major domestic antivirus manufacturers basically all stopped, even if some of the killing soft has joined the heuristic recognition technology or active defense technology, but the immature technology does not seem to play the expected role in the face of the threat of panda burning incense. "Except for micro-point defense"
Thousands of enterprises, including many relevant departments, work computers were paralyzed by "panda burning incense", and in the face of such a large-scale epidemic, the network security alarm was finally sounded. Some people also offer a reward of $100,000 to find the author of the virus.
The panda burning incense does not seem to have the intention of stopping spreading, and the variant has soared to more than 300
Li Jun began to panic, he never thought that the situation was developing so rapidly, completely out of his control, and even alarmed the public security department.
He called his master Lei Lei to "find a way to save the situation", and at his master's suggestion, Li Jun began to make a panda burning incense killing tool and wrote a public apology letter acknowledging his mistake
However, time did not give Li Jun this opportunity.
The "buyers" of panda incense did not give Li Jun this opportunity, and they were still vigorously modifying and spreading the variant of panda incense for the sake of profit
After analysis, the public security department found the code name "Wuhan Boy" hidden in the virus code, which also appeared in the virus "Wuhan Boy 2005" that appeared in 2005.
And Li Jun, once left his QQ number and website information in this virus.
According to the relevant information, Li Jun was quickly locked as a suspect
On February 12 of the same year, Li Jun was arrested in his rental house, along with seven other people in the "Wuhan Boys", including Li Jun's master "Lei Lei".
This is the first time in China that such a large-scale "network virus transmission case" has been cracked.
Li Jun and his companions were also duly punished
Inside the detention center, Li Jun wrote a "special killing tool" for panda burning incense and publicly apologized to netizens.
After being released from prison, Li Jun started a new life, but his road was still bumpy