W32.Alcarys.B@mm

W32.Alcarys.B@mm

W32.Alcarys.B@mm нь имэйл ашиглан олон хvнд зэрэг тараагддаг worm бєгєєд Regedit.exe
файл болон бусад системийн файлуудыг єєрчилдєг.





Тєрєл:
worm
Илэрсэн он сар єдєр: 2002.2.27
Захианы subject: i've got cool stuffs here… , nice stuffs i got here…
, check this out… , i want you to know how much i care for you… , hello!
i'm your long, lost friend… , talk to me… tell me your name… , kindness
is a virtue… гэсэн хувилбаруудын аль нэг нь байна.
Хавсралтын нэр: єєр єєр тєрлийн нэртэй байдаг ба уг нэрvvд нь ямар ч
байж болно.
Хавсралтын хэмжээ: 16.384 байт
Хор хохирол учруулах зэрэг: 2
Хор хохирол:
– Халдварласан файлуудыг идэвхжvvлнэ.
– Windows-ын address book дахь хаягуудтай холбоо тогтооно.
– .scr , .com єргєтгєлтэй файлуудыг устгах юм уу єєрчилж, Regedit.exe, Regsvr32.exe,
Scanregw.exe файлуудыг устгахыг оролдоно.
– Chat-ын суваг болох mIRC -ийг ашиглан Script.ini файлыг єєрчилнє.
– Системийн гvйцэтгэл болон хурдыг бууруулна.
– Системийг тогтворгvй болгоно.

Идэвхжиж эхлээд дараах vйлvvдийг хийнэ.

1. Єєрийгєє доорх файлуудад хуулна.

  • C:\Windows\System\Regsvr32.exe
  • C:\Windows\Desktop\Win.exe
  • C:\Windows\Desktop\Top Secret\Clickme.exe
  • C:\Windows\Sendto\Oceans11\Watchme.exe
  • C:\Windows\Favorites\A Beautiful Mind\Watchme.exe
  • C:\Windows\Regedit.exe
  • C:\Windows\Scanregw.exe
  • C:\Windows\Tuneup.exe
  • C:\Windows\Rundll64.exe
  • C:\Windows\Windows.exe
  • C:\Disney.scr
  • C:\File1980.com
  • C:\Hacktool.co_
  • C:\Movie.exe
  • C:\Msmsgs.exe
  • C:\Porno.scr
  • C:\Screenxx.scr
  • C:\Windows.exe
  • C:\Windows.scr
  • C:\Winstart.com
  • C:\Program Files\Curlysoft\Viewer.dll
  • C:\Program Files\Curlysoft\Pornview.exe
  • C:\Program Files\Xxx Files\Clickme.exe
  • C:\Recycled\Alco.com

2. Screen saver-ын (.scr) файлыг єєрчилнє.
3. C:\Windows\ фолдерт Files гэсэн фолдер шинээр vvсгэн ###.###.exe гэсэн /
# тэмдэгт нь тоонуудыг илэрхийлнэ. / нэртэйгээр єєрийгєє уг фолдерт хуулна.

4. .htm файлуудыг єєрчлєн дарж , C:\Blank.html файлд халдварлана.
5. Уг вирусыг зохиосон эзний home page-ээс вирусын .exe файлыг download хийж
авахыг оролдоно.
6. Microsoft Excel болон Microsoft Word-ын документуудыг єєрчилнє. Ингэхдээ
Excel-ын документуудын хувьд C:\XXXMovie.xls файлыг, Word-ын документуудын хувьд
C:\Windows\NewDocument.doc файлыг ашиглана. Їvний дараа Windows -ын address
book-д байгаа хаягууд руу єєрчлєгдсєн файлуудаа ашиглан уг worm -оор халдварласан
хавсралт файл бvхий захиа илгээх боломжтой болдог.
7. Программ руу нэвтрэх кодуудыг дамжуулах vvрэг бvхий C:\V.vbs файл, регистрыг
єєрчлєх vvрэг бvхий C:\V.reg файл болон тухайн worm-ыг идэвхжvvлж ажиллуухад
туслах vvрэг бvхий C:\Acs.acs, C:\Windows\Tmpdelis.bat , C:\Program Files\Curlysoft\Viewer.dll
, C:\V.reg зэрэг файлуудыг vvсгэнэ.
8. Дэлгэцэн дээр shortcut -уудыг vvсгэнэ.
9.

Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 2,071

2,071 Responses to W32.Alcarys.B@mm

    Pretty nice post. I just stumbled upon your blog and wished to say that I have truly enjoyed browsing your blog posts. After all I will be subscribing to your rss feed and I hope you write again very soon!|

    Outstanding post but I was wondering if you could write a litte more on this subject? I’d be very thankful if you could elaborate a little bit further. Thanks!

    Your style is unique compared to other people I’ve read stuff from. I appreciate you for posting when you have the opportunity, Guess I’ll just book mark this site.

    An outstanding share! I have just forwarded this onto a co-worker who had been doing a little research on this. And he actually ordered me breakfast due to the fact that I discovered it for him… lol. So allow me to reword this…. Thanks for the meal!! But yeah, thanks for spending time to discuss this matter here on your blog.

    Excellent post. I definitely appreciate this website. Keep it up!

    Thanks for sharing such a nice thinking, paragraph is nice, thats why i have read it entirely|

    Today, I went to the beach with my kids. I found a sea shell and gave it to my 4 year old daughter and said “You can hear the ocean if you put this to your ear.” She put the shell to her ear and screamed. There was a hermit crab inside and it pinched her ear. She never wants to go back! LoL I know this is totally off topic but I had to tell someone!|

    Very rapidly this web site will be famous amid all blogging users, due to it’s nice content|

    Wow that was unusual. I just wrote an really long comment but after I clicked submit my comment didn’t show up. Grrrr… well I’m not writing all that over again. Anyways, just wanted to say excellent blog!|

    It’s going to be finish of mine day, but before end I am reading this fantastic article to improve my experience.|

    Greаt post.

    Aⅼso visіt my blog post … social media agency

    I just couldn’t depart your web site before suggesting that I really enjoyed the standard info a person provide for your visitors? Is gonna be back often in order to check up on new posts

    I’m truly enjoying the design and layout of your blog. It’s a very easy on the eyes which makes it much more pleasant for me to come here and visit more often. Did you hire out a designer to create your theme? Great work!

    I am in fact delighted to glance at this weblog posts which consists of plenty of useful facts, thanks for providing these statistics.|

    Hi fantastic blog! Does running a blog like this take a great deal of work? I’ve virtually no expertise in coding but I was hoping to start my own blog in the near future. Anyways, should you have any ideas or tips for new blog owners please share. I understand this is off subject however I simply needed to ask. Cheers!|

    This paragraph will assist the internet visitors for building up new website or even a blog from start to end.|

    I carry on listening to the newscast talk about getting free online grant applications so I have been looking around for the finest site to get one. Could you tell me please, where could i acquire some?

    Good info. Lucky me I ran across your website by chance (stumbleupon). I have book-marked it for later!|

    Good blog you’ve got here.. It’s difficult to find good quality writing like yours nowadays. I honestly appreciate individuals like you! Take care!!|

    Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You clearly know what youre talking about, why waste your intelligence on just posting videos to your blog when you could be giving us something enlightening to read?|

    Hey there! I know this is kind of off topic but I was wondering if you knew where I could get a captcha plugin for my comment form? I’m using the same blog platform as yours and I’m having trouble finding one? Thanks a lot!|

    Precisely the type of material that enhances the web. Many thanks!

    Good day! I could have sworn I’ve been to this site before but after looking at some of the posts I realized it’s new to me. Anyhow, I’m definitely pleased I came across it and I’ll be book-marking it and checking back often!|

    Hi there, just became aware of your blog through Google, and found that it’s really informative. I’m gonna watch out for brussels. I will be grateful if you continue this in future. Lots of people will be benefited from your writing. Cheers!|

    If some one desires expert view about blogging and site-building then i recommend him/her to visit this web site, Keep up the pleasant job.|

    I really like reading a post that will make men and women think. Also, many thanks for allowing me to comment!|

    After checking out a number of the articles on your web site, I seriously like your technique of blogging. I added it to my bookmark website list and will be checking back in the near future. Please check out my website too and tell me how you feel.

    Outstanding post however I was wanting to know if you could write a litte more on this subject? I’d be very grateful if you could elaborate a little bit more. Appreciate it!

    Attractive section of content. I just stumbled upon your site and in accession capital to assert that I get actually enjoyed account your blog posts. Anyway I’ll be subscribing to your augment and even I achievement you access consistently rapidly.|

    Usually I don’t learn post on blogs, but I wish to say that this write-up very compelled me to take a look at and do so! Your writing taste has been amazed me. Thanks, very nice post.

    Hey there! I just wanted to ask if you ever have any issues with hackers? My last blog (wordpress) was hacked and I ended up losing a few months of hard work due to no back up. Do you have any methods to prevent hackers?|

    We absolutely love your blog and find many of your post’s to be just what I’m looking for. Does one offer guest writers to write content for you? I wouldn’t mind publishing a post or elaborating on most of the subjects you write concerning here. Again, awesome website!|

    I am continually invstigating online for ideas that can benefit me. Thanks!

    Whoa! This blog looks exactly like my old one! It’s on a totally different subject but it has pretty much the same layout and design. Excellent choice of colors!|

    Hi there! I know this is somewhat off topic but I was wondering which blog platform are you using for this site? I’m getting fed up of WordPress because I’ve had issues with hackers and I’m looking at options for another platform. I would be great if you could point me in the direction of a good platform.|

    My developer is trying to persuade me to move to .net from PHP. I have always disliked the idea because of the costs. But he’s tryiong none the less. I’ve been using Movable-type on several websites for about a year and am anxious about switching to another platform. I have heard excellent things about blogengine.net. Is there a way I can import all my wordpress content into it? Any help would be greatly appreciated!|

    Amazing issues here. I’m very happy to look your article. Thanks so much and I’m taking a look forward to contact you. Will you please drop me a mail?|

    I don’t even know how I ended up here, but I thought this post was good. I do not know who you are but definitely you’re going to a famous blogger if you aren’t already 😉 Cheers!|

    Control your S7 PLC with your iPhone or iPad. S7 Remote is the perfect App to control your home or view some machine data.

    Itís hard to find knowledgeable people about this topic, but you sound like you know what youíre talking about! Thanks

    Absolutely pent subject matter, Really enjoyed reading through.

    I don’t know whether it’s just me or if perhaps everybody else encountering issues with your blog. It appears as if some of the written text within your posts are running off the screen. Can someone else please comment and let me know if this is happening to them as well? This might be a problem with my browser because I’ve had this happen previously. Many thanks

    Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You clearly know what youre talking about, why throw away your intelligence on just posting videos to your blog when you could be giving us something enlightening to read?|

    Incredible! This blog looks exactly like my old one! It’s on a entirely different topic but it has pretty much the same page layout and design. Great choice of colors!|

    My coder is trying to persuade me to move to .net from PHP. I have always disliked the idea because of the expenses. But he’s tryiong none the less. I’ve been using Movable-type on a variety of websites for about a year and am concerned about switching to another platform. I have heard fantastic things about blogengine.net. Is there a way I can transfer all my wordpress content into it? Any kind of help would be really appreciated!|

    Hello
    Thank you for giving me useful information.
    Please keep posting good information in the future
    I will visit you often. Thank you.
    I am also running the site. 안전놀이터 This is a related site, so please visit once.
    Have a niceday!

    You ought to take part in a contest for one of the finest blogs on the internet. I’m going to highly recommend this web site!

    I truly love your blog.. Very nice colors & theme. Did you develop this amazing site yourself? Please reply back as I’m planning to create my own personal site and would love to learn where you got this from or what the theme is called. Many thanks!

Leave a Reply

Message:*

Name:

Email:

Website: