W32.Gokar.A@mm нь Microsoft Outlook программийн хаягын жагсаалт дахь бvх хаяг руу єєрийгєє хавсаргаж явуулдаг.
Мєн єєрийгєє тараахын тулд mIRC программийн Script.ini файл болон Microsoft IIS серверийн Default.htm файлуудыг vvсгэдэг.

Тєрєл: Worm
Илэрсэн он сар єдєр: 2001 оны 12 сарын 12
Хэмжээ: 14366 байт
Хор хохирол учруулах зэрэглэл: 3


Захианы subject нь дараахаас аль нэг нь байж болдог:

· If I were God and didn't belive in myself would it be blasphemy
· The A-Team VS KnightRider … who would win ?
· Just one kiss, will make it better. just one kiss, and we will be alright.
· I can't help this longing, comfort me.
· And I miss you most of all, my darling …
· … When autumn leaves start to fall
· It's dark in here, you can feel it all around. The underground.
· I will always be with you sometimes black sometimes white …
· .. and there's no need to be scared, you re always on my mind.
· You just take a giant step, one step higher.
· The air will hold you if you try, trust my wings of desire. Glory, Glorified…….

Захианы хэсэгт дараахаас аль нэг нь байдаг:

· Happy Birthday
· Yeah ok, so it's not yours it's mine 🙂
· The horizons lean forward, offering us space to place new steps of change.
· I like this calm, moments before the storm
· Darling, when did you fall..when was it over ?
· Will you meet me …. and we'll fly away ?!
· You should like this, it could have been made for you
· speak to you later
· They say love is blind … well, the attachment probably proves it.
· Pretty good either way though, isn't it ?
· still cause for a celebration though, check out the details I attached
· This made me laugh
· Got some more stuff to tell you later but I can't stop right now
· so I'll email you later or give you a ring if thats ok ?!
· Speak to you later

Хавсаргасан файлын нэр нь янз бvрийн тоо болон дараах характеруудаас аль нэгийг нь агуулсан байдаг:

tgfdfg jhfxvc cgfd2 trevc t6tr ffdasf glkfh fhjdv qesac kujzv weafs twat rewfd gfdsf hgbv fdsc p0olik
3tgf rf43dr t54refd ut545a r4354gkjw vgrewu xw54re y343rv z3vdf

Захианд хавсаргасан хавсралт доорх єргєтгєлтэй байна.

– .pif
– .scr
– .exe
– .com
– .bat

Worm нь тухайн хэрэглэгчийн нэрийг захианы хамгийн сvvлд нэмж оруулан бvх хаягууд руу илгээдэг.
Мєн \Windows директорт єєрийгєє Karen.exe нэртэйгээр vvсгэдэг.

Registry файлын HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
директорт доорх утгыг нэмснээр Windows эхлэх бvрт вирус идэвхиждэг:
Karen c:\windows\karen.exe

Дараа нь C:\Mirc директорыг хайн хэрвээ байвал Script.ini файлыг vvсгэснээр mIRC ажиллаж байх vеэр
єєрийгєє тараахыг оролддог.
Мєн C:\Inetpub\wwwroot директорыг хайн хэрвээ олдвол єєрийгєє web.exe нэртэйгээр хуулдаг. Microsoft IIS
сервер нь ийм директортой байдаг. Уг директор дахь vндсэн вэб хуудсын файл болох Default.htm файлын нэрийг
Redesi.htm нэрээр єєрчилдєг. Їvний дараа Default.htm файлыг шинээр vvсгэн дараах текстийг гарч ирж байхаар болгодог:

We Are Forever

Дээрх текстийг харсан хэрэглэгчид Web.exe файлыг татаж авахыг санал болгодог.

Хэрхэн арилгах вэ?

W32.Gokar.A@mm илэрсэн бvх файлуудыг устган Registry файлд нэмэгдсэн утгыг устгах шаардлагатай. Мєн
C:\inetpub\Wwwroot\Redesi.htm файлыг Default.htm нэртэй болгож єєрчлєх.

Registry файлыг засах:
Анхаар: Системийн registry файлд ямар нэгэн єєрчлєлт оруулахаасаа ємнє нэг хувийг нь хадгалж авч байна уу.
Буруу бичилт, єєрчлєлт хийснээс шалтгаалан файлууд эвдрэх, устах аюултайгаас гадна систем ажиллахгvй болдог.

1. Start товчыг даран Run командыг сонгоно.
2. Командын мєрєнд regedit гэж бичиж єгєн OK товчыг дарна. Registry Editor гэсэн бичиг бvхий цонх нээгдэнэ.
3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run гэсэн дарааллаар очно.
4. Баруун талын баганад байрлах дараах утгыг сонгож Del товч дарж устгана.
Karen c:\windows\karen.exe
5. Registry гэсэн цэснээс Exit командыг сонгож гарна.



Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 3,993

3,993 Responses to W32.Gokar.A@mm


    cheap viagra generic viagra available – female viagra
    free viagra

    fantastic post, very informative. I ponder why the other experts of this sector don’t realize this. You must proceed your writing. I am sure, you have a great readers’ base already!|

    Hi there mates, how is everything, and what you desire to say on the topic of this paragraph, in my view its actually remarkable for me.|

    Hey very cool website!! Man .. Excellent .. Amazing .. I will bookmark your website and take the feeds also…I am happy to find numerous useful information here in the post, we need work out more strategies in this regard, thanks for sharing. . . . . .

    Greetings! Quick question that’s totally off topic. Do you know how to make your site mobile friendly? My site looks weird when viewing from my iphone4. I’m trying to find a theme or plugin that might be able to resolve this problem. If you have any recommendations, please share. With thanks!|

    Quality articles is the crucial to invite the users to visit the website, that’s what this web site is providing.|

    Everyone loves it whenever people come together and share thoughts. Great site, stick with it!

    This piece of writing is really a fastidious one it helps new net viewers, who are wishing in favor of blogging.|

    It’s nearly impossible to find well-informed people about this topic, but you seem like you know what you’re talking about! Thanks

    Oh my goodness! Impressive article dude! Thank you so much, However I am encountering issues with your RSS. I don’t understand why I can’t subscribe to it. Is there anyone else getting identical RSS issues? Anybody who knows the answer will you kindly respond? Thanks!!|


    buy cialis very cheap prices fast delivery: buy cialis online best price generic cialis daily pricing
    buy cialis cheaper online

    Great information. Lucky me I discovered your blog by accident (stumbleupon). I’ve bookmarked it for later!

    Hello there! This is kind of off topic but I need some guidance from an established blog. Is it very difficult to set up your own blog? I’m not very techincal but I can figure things out pretty fast. I’m thinking about making my own but I’m not sure where to begin. Do you have any ideas or suggestions? Many thanks

    Very good write-up. I definitely appreciate this website. Keep it up!

    I think what you published was very logical. But, consider this, what if you were to write a awesome headline? I am not suggesting your content is not good., but suppose you added something that makes people want more? I mean BLOG_TITLE is kinda plain. You should peek at Yahoo’s home page and see how they create article headlines to get viewers interested. You might add a related video or a related pic or two to get people excited about everything’ve got to say. In my opinion, it could make your posts a little bit more interesting.|

    Thank you for any other magnificent post. Where else could anybody get that kind of information in such an ideal way of writing? I’ve a presentation next week, and I’m at the look for such information.|

    Very nice post. I just stumbled upon your weblog and wished to mention that I’ve really loved browsing your weblog posts. After all I’ll be subscribing in your feed and I am hoping you write once more soon!|

    Good day! I could have sworn I’ve visited this blog before but after going through a few of the articles I realized it’s new to me. Anyhow, I’m certainly happy I discovered it and I’ll be bookmarking it and checking back frequently!

    Howdy, I do think your site could be having web browser compatibility problems. Whenever I take a look at your site in Safari, it looks fine but when opening in IE, it has some overlapping issues. I simply wanted to give you a quick heads up! Apart from that, fantastic site!|

    In the great pattern of things you receive a B+ with regard to effort and hard work. Where exactly you actually confused everybody was first in all the facts. As it is said, details make or break the argument.. And it couldn’t be more correct at this point. Having said that, allow me say to you precisely what did deliver the results. Your writing is definitely extremely engaging and this is probably why I am taking the effort to comment. I do not make it a regular habit of doing that. Second, although I can easily see the jumps in reason you make, I am not confident of how you appear to connect your ideas which in turn make the conclusion. For right now I will, no doubt yield to your issue but wish in the near future you link the facts much better.

    My brother suggested I may like this website. He was once totally right. This publish truly made my day. You can not believe simply how much time I had spent for this info! Thank you!|

    This is really attention-grabbing, You are a very skilled blogger. I have joined your feed and sit up for in the hunt for more of your great post. Additionally, I’ve shared your website in my social networks|

    If you desire to obtain a good deal from this article then you have to apply these methods to your won weblog.|

    Simply wish to say your article is as astounding. The clearness for your publish is just spectacular and that i could assume you’re knowledgeable on this subject. Fine with your permission allow me to snatch your feed to stay updated with drawing close post. Thank you 1,000,000 and please keep up the gratifying work.|

    This is a topic that is near to my heart… Thank you! Exactly where are your contact details though?

    Your article makes perfect sense. Writing that is worth reading. oh yeah btw also visit my website. Thanks

    It’s actually very complex in this busy life to listen news on TV, so I only use internet for that reason, and get the hottest news.|

    Sí, hay “tantas cosas que hacer”. El último comentario me muestra todo lo que hay.

    Sexual depression, like sexual indulgence, is no different from physical health. It is a bad thing to go back and forth between depression and indulgence. Click:oral sex.

    I know this if off topic but I’m looking into starting my own weblog and was curious what all is needed to get setup? I’m assuming having a blog like yours would cost a pretty penny? I’m not very internet smart so I’m not 100 positive. Any suggestions or advice would be greatly appreciated. Cheers|

    I’m not that much of a internet reader to be honest but your sites really nice, keep it up! I’ll go ahead and bookmark your site to come back down the road. All the best

    Hey I know this is off topic but I was wondering if you knew of any widgets I could add to my blog that automatically tweet my newest twitter updates. I’ve been looking for a plug-in like this for quite some time and was hoping maybe you would have some experience with something like this. Please let me know if you run into anything. I truly enjoy reading your blog and I look forward to your new updates.|

    It’s remarkable to visit this site and reading the views of all mates about this article, while I am also zealous of getting know-how.|

    I’m not that much of a online reader to be honest but your blogs really nice, keep it up! I’ll go ahead and bookmark your website to come back later. All the best|


    buy cialis with paypal: buy cialis online viagra how to buy cialis online from canada
    order original cialis online

    Sweet blog! I found it while surfing around on Yahoo News. Do you have any tips on how to get listed in Yahoo News? I’ve been trying for a while but I never seem to get there! Thanks

    Fantastic web site. Plenty of useful information here. I’m sending it to some friends ans also sharing in delicious. And of course, thanks for your effort!

    This excellent website really has all of the information I wanted about this subject and didn’t know who to ask. |

    azithromycin 250 mg treatment http://zithrozpack.com/# zithromax z pak

    Hello, i read your blog occasionally and i own a similar one and i was just wondering if you get a lot of spam responses? If so how do you prevent it, any plugin or anything you can advise? I get so much lately it’s driving me mad so any support is very much appreciated.|

    Hello! I know this is kind of off topic but I was wondering if you knew where I could get a captcha plugin for my comment form? I’m using the same blog platform as yours and I’m having trouble finding one? Thanks a lot!

    Your style is very unique compared to other folks I’ve read stuff from. I appreciate you for posting when you have the opportunity, Guess I will just book mark this page.

    Wow, that’s what I was seeking for, what a information! existing here at this weblog, thanks admin of this site.|

    I was very pleased to uncover this website. I want to to thank you for ones time just for this wonderful read!! I definitely really liked every bit of it and I have you book marked to look at new information on your web site.

    I’m amazed, I have to admit. Seldom do I encounter a blog that’s both equally educative and entertaining, and let me tell you, you’ve hit the nail on the head. The issue is something too few folks are speaking intelligently about. I’m very happy I stumbled across this in my hunt for something concerning this.

    I could not refrain from commenting. Very well written!

    Nice weblog here! Also your web site quite a bit up fast! What host are you the usage of? Can I get your associate hyperlink to your host? I wish my website loaded up as fast as yours lol|

    I couldn’t refrain from commenting. Perfectly written!

Leave a Reply