VBS.Fundll@mm нь Visual Basic Script (VBS) worm бєгєєд єєрийгєє
Microsoft Outlook программийн хаягын жагсаалт дахь бvх имэйлийн хаяг
руу хавсарган явуулдаг.

Тєрєл: Worm
Илэрсэн он сар єдєр: 2001 оны 12 сарын 7
Хэмжээ: 1495 байт
Захианы subject нь: Funny…Funny…Funny…stories
Захианы хэсэгт: Here are some funny stories and I hope you'll enjoy them. Have a good time! Bye
Хавсаргасан файлын нэр: Funnystories.txt               .vbs
Хор хохирол учруулах зэрэглэл: 1


Уг worm идэвхижвэл єєрийгєє дараах байдлаар хуулдаг:
C:\Windows\System\Funnystories.txt               .vbs

Дээрх файлуудын эхний файлын єргєтгєл нь 2 хэсгээс бvрдэж байгаа бєгєєд
хоорондоо нилээд их зайтай байгаа нь бичилтийн алдаа бишийг анхаарна
уу. Хэрвээ Windows систем єєр газар суусан эсвэл C:\Windows\System
директор байхгvй нєхцєлд дээрх файлууд хатуу дискэнд хуулагддаггvй.

Registry файлд дараах утгуудыг 1 болгодог:
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Outlook\Options\mail\Send Mail Immediately
HKEY_CURRENT_USER\Software\Microsoft\Office\8.0\Outlook\Options\mail\Send Mail Immediately
Утгуудыг 1 болгож єєрчилснєєр Outlook программаар гадагшаа явуулах захидлыг хvлээлгэнд оруулахгvйгээр шууд илгээдэг.
Мєн HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
директорт дараах утгыг нэмдэг:

Fundll C:\Windows\System\Fun.dll.vbs

Дээрх утгыг нэмснээр Windows систем эхлэх бvрт уг скрипт файл ажилладаг.

Хэрхэн арилгах вэ?

1. Norton Antivirus программийн LiveUpdate -г ажиллуулж хамгийн сvvлийн
vеийн вирусын эсрэг программийг авсан эсэхийг шалгах хэрэгтэй.
2. Norton AntiVirus (NAV) программийг эхлvvлэн бvх файлыг шалгахаар тохируулагдсан
эсэхийг шалгах.
3. Scan virus командаар вирусийг шалгах.
4. VBS.Fundll@mm вирус илэрсэн бvх файлуудын устгах

Registry файлыг засах:

Анхаар! Системийн registry файлд ямар нэгэн єєрчлєлт оруулахаасаа ємнє нэг хувийг нь хадгалж авч байна уу.
Буруу бичилт, єєрчлєлт хийснээс шалтгаалан файлууд эвдрэх, устах аюултайгаас гадна систем ажиллахгvй болдог.

1. Start товчыг даран Run командыг сонгоно.
2. Командын мєрєнд regedit гэж бичиж єгєн OK товчыг дарна. Registry Editor гэсэн бичиг бvхий цонх нээгдэнэ.
3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run гэсэн дарааллаар очно.
4. Баруун талын баганад байрлах дараах утгыг сонгож Del товч дарж устгана.
Fundll C:\Windows\System\Fun.dll.vbs
Registry гэсэн цэснээс Exit командыг сонгож гарна.



Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 1,560

1,560 Responses to VBS.Fundll@mm

    Ahaa, its fastidious conversation about this post at this
    place at this web site, I have read all that, so now me also commenting here.

    Remarkable things here. I am very happy to see your article. Thank you so much and I am taking a look ahead to contact you. Will you please drop me a e-mail?|

    I was recommended this website by my cousin. I’m no longer certain whether or not this publish is written by way of him as nobody else recognize such targeted about my difficulty. You’re amazing! Thanks!|

    I do agree with all the ideas you’ve offered to your post. They are really convincing and will definitely work. Nonetheless, the posts are too quick for starters. May you please lengthen them a little from subsequent time? Thanks for the post.|

    I will immediately seize your rss as I can’t to find your
    email subscription link or newsletter service. Do you have
    any? Please permit me understand in order that I may subscribe.


    I do trust all the concepts you have offered in your post. They’re really convincing and will certainly work. Nonetheless, the posts are too short for newbies. May you please extend them a bit from subsequent time? Thank you for the post.|

    Very descriptive blog, I liked that bit. Will there be a part 2?|

    Hi there to every one, it’s truly a pleasant for me to visit this website, it contains precious Information.|

    Thank you for the auspicious writeup. It actually was once a amusement account it.

    Look complicated to more delivered agreeable from you!
    By the way, how can we be in contact?

    First off I want to say fantastic blog! I had a quick question that I’d like to ask if you don’t mind. I was interested to know how you center yourself and clear your mind before writing. I have had a tough time clearing my mind in getting my ideas out. I do enjoy writing but it just seems like the first 10 to 15 minutes are wasted simply just trying to figure out how to begin. Any ideas or tips? Kudos!|

    pharmacies near me Trental northwest pharmacy/com

    I’ve learn a few just right stuff here. Certainly
    price bookmarking for revisiting. I surprise how a lot attempt you put to create one of these great informative web site.

    hello there and thank you for your info – I’ve certainly picked up something new from right here. I did however expertise a few technical points using this site, as I experienced to reload the web site a lot of times previous to I could get it to load properly. I had been wondering if your web hosting is OK? Not that I’m complaining, but sluggish loading instances times will often affect your placement in google and could damage your high-quality score if ads and marketing with Adwords. Anyway I’m adding this RSS to my email and can look out for much more of your respective interesting content. Make sure you update this again soon.|

    Thanks for finally talking about > blog_title < Liked it!|

    I do not even know how I ended up here, but I thought this post was great. I do not know who you are but certainly you’re going to a famous blogger if you are not already 😉 Cheers!|

    Thanks a bunch for sharing this with all folks you really know what you are talking approximately! Bookmarked. Kindly additionally talk over with my website =). We can have a hyperlink alternate contract among us|

    I every time spent my half an hour to read this blog’s articles all the time along with a mug of coffee.|

    wonderful submit, very informative. I’m wondering why the opposite specialists of this sector don’t notice this. You must proceed your writing. I’m sure, you’ve a huge readers’ base already!|

    sildenafil for pulmonary hypertension sildenafil pronunciation how long does sildenafil take to work

    I have to thank you for the efforts you have put in writing this site. I’m hoping to see the same high-grade blog posts by you later on as well. In truth, your creative writing abilities has inspired me to get my own website now 😉

    obviously like your website but you have to test the spelling on several of your posts. Many of them are rife with spelling issues and I to find it very troublesome to inform the truth then again I’ll definitely come back again.|

    Hello there! I just would like to offer you a big thumbs up for the great info you have right here on this post. I’ll be coming back to your blog for more soon.|

    I every time emailed this web site post page to all my contacts, for the reason that if like to read it then my friends will too.|

    It’s hard to find educated people in this particular topic, but you seem like you know what you’re talking about! Thanks|

    I think everything posted made a great deal of sense. But, consider this, suppose you were to write a awesome title? I am not saying your information is not good, however suppose you added something to maybe get folk’s attention? I mean BLOG_TITLE is a little plain. You might look at Yahoo’s home page and see how they create article titles to grab people to open the links. You might add a related video or a pic or two to grab people interested about everything’ve got to say. Just my opinion, it could bring your posts a little bit more interesting.|

    What’s up everyone, it’s my first pay a quick visit at this website, and paragraph is actually fruitful in favor of me, keep up posting these types of articles or reviews.|

    With every little thing that appears to be building inside this specific area, all your perspectives tend to be fairly refreshing. On the other hand, I appologize, because I do not give credence to your entire idea, all be it exciting none the less. It looks to me that your remarks are not totally validated and in reality you are generally yourself not fully confident of your point. In any event I did appreciate examining it.

    I do not know if it’s just me or if perhaps everybody else encountering problems with your website. It appears like some of the written text in your content are running off the screen. Can somebody else please provide feedback and let me know if this is happening to them too? This might be a issue with my browser because I’ve had this happen before. Appreciate it

    Hello Dear, are you genuinely visiting this web site on a regular basis, if so then you will without doubt take fastidious knowledge.|

    Aw, this was an exceptionally nice post. Taking a few minutes and actual effort to generate a top notch article… but what can I say… I put things off a whole lot and don’t manage to get anything done.|

    Woah! I’m really digging the template/theme of this website. It’s simple, yet effective. A lot of times it’s hard to get that “perfect balance” between user friendliness and appearance. I must say you’ve done a fantastic job with this. Additionally, the blog loads extremely quick for me on Safari. Exceptional Blog!|

    It’s appropriate time to make a few plans for the long run and it is time to be happy. I have read this post and if I may I wish to counsel you some interesting things or advice. Perhaps you could write next articles referring to this article. I desire to learn more things about it!|

    This website was… how do you say it? Relevant!! Finally I’ve found something which helped me. Thanks!|

    Everyone loves it when people come together and share thoughts. Great website, keep it up.

    You can certainly see your skills within the work you write. The world hopes for even more passionate writers such as you who are not afraid to say how they believe. Always follow your heart.|

    Attractive part of content. I just stumbled upon your website and in accession capital to say that I get in fact loved account your weblog posts. Anyway I will be subscribing in your feeds and even I success you get admission to consistently fast.|

    Accustomed Low-down Here this by-product
    https://albuterolday.com albuterol

    Hello excellent website! Does running a blog such as this require a great deal of work? I’ve no knowledge of computer programming however I was hoping to start my own blog in the near future. Anyways, should you have any suggestions or tips for new blog owners please share. I know this is off topic but I simply had to ask. Thank you!|

    I don’t know whether it’s just me or if everyone else experiencing problems with your website. It seems like some of the written text within your content are running off the screen. Can somebody else please comment and let me know if this is happening to them too? This might be a problem with my browser because I’ve had this happen before. Cheers

    Great work! This is the kind of information that are meant to be shared around the internet. Shame on Google for no longer positioning this publish upper! Come on over and seek advice from my website . Thank you =)

    Interesting blog! Is your theme custom made or did you download it from somewhere? A design like yours with a few simple adjustements would really make my blog jump out. Please let me know where you got your theme. Many thanks|

    Undeniably believe that which you said. Your favorite justification seemed to be on the web the easiest thing to be aware of. I say to you, I certainly get irked while people think about worries that they just don’t know about. You managed to hit the nail upon the top and also defined out the whole thing without having side effect , people can take a signal. Will probably be back to get more. Thanks|

    Hello i am kavin, its my first time to commenting anywhere, when i read this article i thought i could also make comment due to this brilliant post.|

    Thanks for sharing such a good thinking, paragraph is fastidious, thats why i have read it completely|

    Greetings! Very helpful advice in this particular article! It is the little changes which will make the largest changes. Thanks a lot for sharing!|

    General Dope Far this offshoot
    https://levitrahill.com vardenafil

    This is a great tip particularly to those new to the blogosphere. Simple but very accurate info… Thanks for sharing this one. A must read article!|

Leave a Reply