W32.Hunch@mm нь том хэмжээний имэйл хэлбэрээр илгээгддэг worm бєгєєд Autoexec.bat
файлыг єєрчилж , C:\ дискийг форматлах оролдлого хийдэг. Ингэхдээ C:\_RESTORE
фолдерт байгаа .ocx, .sys, .dll болон санамсаргvй сонгогдсон єргєтгєлтэй бvх
файлуудыг устгадаг.

Тєрєл: Worm
Илэрсэн он сар єдєр: 2001.1.30
Хор хохирол учруулах зэрэг: 2
Захианы subject: Файлын нэр хассан єргєтгєлтэй байдаг.
Хавсралтын нэр: Файлын нэр
Хавсралтын хэмжээ: 151.552 байт
Хор хохирол:
1. Том хэмжээний имэйл хэлбэрээр илгээгддэг.
2. Autoexec.bat файлыг єєрчилнє.
3. C:\ дискийг форматлах оролдлого хийнэ.
4. ".XLS" , ".DOC" , ".WAV" , ".DWG"
, ".MP3" , ".BAK" , ".CDX" , ".BMP"
, ".HTM" , ".HLP" , ".CHM" , ".JPG"
, ".GIF" , ".SCR" ,".TTF" , ".MID" ,".MDB"
, ".DBF" , ".ICO" зэрэг єргєтгєлтэй файлуудаас сонгон 5
ширхэг файлыг устгана.
5. Системийг бvхэлд нь тогтворгvй болгоно.

W32.Hunch@mm идэвхжиж эхлээд доорх vйлдлvvдийг гvйцэтгэдэг.
1. Microsoft Outlook -ын address book -д байгаа хаягуудад доорх захиаг явуулна.
Subject: <Файлын нэрээс хамаарна. >
Їндсэн текст: Mensaje importante para <Явуулагчын нэр > en el archivo
Хавсралт: <Файлын нэрээс хамаарна >

2. Дараах зургыг дэлгэцэнд харуулна.
3. C:\_RESTORE фолдерт байгаа .ocx, .sys, .dll єргєтгєлтэй файлуудыг хайна.

4. Хатуу дискний доорх фолдеруудад шинээр файлуудыг хуулна.
– C:\Windows\System\Msword.Exe
– C:\Windows\System\Thwin.Exe
– C:\Windows\System\<Файлын нэр >
5. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices гэсэн
THWIN C:\Windows\System\Thwin.Exe гэсэн утгыг нэмж єгнє. Ингэснээр Windows эхлэх
тоолонд идэвхжиж эхэлнэ.
6. .xls , .doc , .wav , .dwg , .mp3 , .bak , .cdx , .bmp , .htm , .hlp , .chm
, .jpg , .gif , .scr , .ttf , .mid ,.mdb , .dbf , .ico зэрэг єргєтгєлтэй файлаас
сонгон устгана.
7. Устгасан файлуудаа C:\Windows\System\ListWin.txt. фолдерт журнал файл болгон
8. Їvнй дараа C:\Autoexec.bat файлыг DEL > FORMAT C: /u /v:UNSCH /autotest
командыг нэмж єгснєєр єєрчилнє.
9. Дараагын удаа компьютераа асаахад таны C:\ дискийг дахин форматласан байна.

Хэрхэн арилгах вэ?
Арилгахын тулд W32.Hunch@mm -аар халдварласан файлыг устган , регистрт хийсэн
єєрчлєлтийг засварлахаас гадна Autoexec.bat файлыг засварлах хэрэгтэй.


1. Хамгийн сvvлийн vеийн update хийгдсэн вирусын эсрэг программтай эсэхээ шалгах
2. Norton Antivirus-аар системийг бvхэлд нь scan хийж шалгах шаардлагатай.
3. W32.Hunch@mm -аар – аар халдварлагдсан бvх файлыг устгах хэрэгтэй.
4. Windows Explorer руу орж доорх фолдеруудад байгаа халдварласан файлуудыг
устгах хэрэгтэй.
– C:\Windows\System\Msword.Exe
– C:\Windows\System\Thwin.Exe
– C:\Windows\System\ListWin.txt

Regestry-г хэрхэн засварлах вэ?

1. Start цэсний Run ийг эхлvvлнэ.
2. Regedit гэж бичихэд Regestry-г засварлах цонх гарч ирнэ.
3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices гэсэн
регистр рvv орж баруун цонхонд байгаа THWIN C:\Windows\System\Thwin.Exe гэсэн
утгыг устгана.
4. Regestry -г дарж Exit гээд дуусгана.

Autoexec.bat файлыг засварлах

1. Start цэсний Run руу орно.
2. edit c:autoexec.bat гэж бичнэ.
3. MS-DOS Editor нээгдэхэд DEL > FORMAT C: /u /v:UNSCH /autotestм замыг хайж
олон тэмдэглэнэ.
4. File – Save гэж даран Exit гээд дуусгана.



Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 3,409

3,409 Responses to W32.Hunch@mm

    Hi everyone, it’s my first pay a visit at this site, and paragraph is truly fruitful designed for me, keep up posting such articles or reviews.|

    Not many writers with proper expertise of the subjects they blog about.

    Hello there! This article couldn’t be written much better! Reading through this post reminds me of my previous roommate! He constantly kept talking about this. I am going to forward this post to him. Fairly certain he will have a great read. Thank you for sharing!

    As a Newbie, I am permanently searching online for articles that can help me. Thank you

    You could definitely see your expertise within the article you write. The sector hopes for even more passionate writers like you who are not afraid to mention how they believe. At all times go after your heart.|

    excellent submit, very informative. I wonder why the other specialists of this sector do not understand this. You should proceed your writing. I am confident, you’ve a huge readers’ base already!|

    Aw, this was an exceptionally nice post. Spending some time and actual effort to generate a great article… but what can I say… I procrastinate a whole lot and don’t seem to get nearly anything done.|

    Thanks in favor of sharing such a good opinion, article is fastidious, thats why i have read it completely|

    You really make it seem really easy together with your presentation but I find this matter to be actually one thing which I feel I’d by no means understand. It sort of feels too complicated and extremely huge for me. I’m having a look forward for your next post, I will attempt to get the dangle of it!|

    Wow, that’s what I was seeking for, what a data! existing here at this website, thanks admin of this website.|

    When some one searches for his vital thing, therefore he/she needs to be available that in detail, thus that thing is maintained over here.|

    Good info and straight to the point. I am not sure if this is really the best place to ask but do you guys have any thoughts on where to get some professional writers? Thanks in advance 🙂

    Hmm is anyone else experiencing problems with the pictures on this blog loading? I’m trying to determine if its a problem on my end or if it’s the blog. Any feed-back would be greatly appreciated.

    I truly enjoy reading through on this website , it has got fantastic articles . “It is easy to be nice, even to an enemy – from lack of character.” by Dag Hammarskjld.

    Hurrah! After all I got a web site from where I know how to truly obtain valuable facts regarding my study and knowledge.|

    Hello there! I know this is kinda off topic but I was wondering which blog platform are you using for this site? I’m getting fed up of WordPress because I’ve had issues with hackers and I’m looking at alternatives for another platform. I would be awesome if you could point me in the direction of a good platform.|

    I am now not sure the place you are getting your info, however good topic. I must spend a while finding out more or understanding more. Thank you for fantastic information I used to be searching for this information for my mission.|

    Good blog you have here.. It’s hard to find excellent writing like yours these days. I honestly appreciate people like you! Take care!!|

    Great web site you have got here.. It’s hard to find excellent writing like yours nowadays. I really appreciate people like you! Take care!!|

    Very nice post. I just stumbled upon your blog and wanted to say that I have truly loved browsing your blog posts. After all I’ll be subscribing for your feed and I’m hoping you write once more soon!

    Hi to every one, since I am actually eager of reading this weblog’s post to be updated daily. It consists of good information.|

    After I originally commented I clicked the -Notify me when new comments are added- checkbox and now every time a comment is added I get 4 emails with the same comment. Is there any approach you’ll be able to remove me from that service? Thanks!

    Everyone loves it when folks get together and share thoughts.
    Great site, stick with it!

    you’re really a excellent webmaster. The site loading velocity is amazing. It kind of feels that you are doing any unique trick. Furthermore, The contents are masterwork. you have done a great process in this subject!|

    Greetings I am so thrilled I found your website, I really found you by mistake, while I was browsing on Aol for something else, Anyways I am here now and would just like to say many thanks for a incredible post and a all round interesting blog (I also love the theme/design), I don’t have time to browse it all at the minute but I have book-marked it and also added your RSS feeds, so when I have time I will be back to read much more, Please do keep up the superb job.|

    Great blog! Do you have any helpful hints for aspiring writers? I’m planning to start my own site soon but I’m a little lost on everything. Would you suggest starting with a free platform like WordPress or go for a paid option? There are so many choices out there that I’m completely overwhelmed .. Any ideas? Cheers!|

    Nice blog here! Also your site loads up very fast! What host are you using? Can I get your affiliate link to your host? I wish my website loaded up as fast as yours lol|

    Hi there! This is kind of off topic but I need some help from an established blog. Is it tough to set up your own blog? I’m not very techincal but I can figure things out pretty fast. I’m thinking about creating my own but I’m not sure where to begin. Do you have any tips or suggestions? Thank you|

    Hi there, just became alert to your blog through Google, and found that it is truly informative. I’m going to watch out for brussels. I will appreciate if you continue this in future. Numerous people will be benefited from your writing. Cheers!|

    Thanks for your marvelous posting! I actually enjoyed reading it, you’re a great author.I will be sure to bookmark your blog and may come back at some point. I want to encourage you to ultimately continue your great job, have a nice weekend!

    Thanks , I’ve just been searching for information approximately this topic for a while and yours is the best I’ve came upon so far. But, what concerning the bottom line? Are you sure concerning the supply?

    Greetings I am so happy I found your site, I really found you by mistake, while I was looking on Askjeeve for something else, Nonetheless I am here now and would just like to say many thanks for a marvelous post and a all round entertaining blog (I also love the theme/design), I don’t have time to browse it all at the moment but I have bookmarked it and also added in your RSS feeds, so when I have time I will be back to read much more, Please do keep up the awesome jo.|

    I am sure this post has touched all the internet visitors,
    its really really fastidious piece of writing on building up new web site.

    It’s remarkable to go to see this web page and reading the views of all colleagues about this piece of writing, while I am also eager of getting familiarity.|

    I do not even know how I finished up here, but I thought this put up used to be great. I don’t recognise who you’re however certainly you are going to a famous blogger in case you are not already 😉 Cheers!

    Hi, i think that i saw you visited my blog so i came to “return the favor”.I’m trying to find things to improve my web site!I suppose its ok to use some of your ideas!!

    Please let me know if you’re looking for a article writer for your site. You have some really good articles and I think I would be a good asset. If you ever want to take some of the load off, I’d really like to write some content for your blog in exchange for a link back to mine. Please send me an email if interested. Many thanks!|

    Appreciate the recommendation. Will try it out.|

    Wow! This blog looks exactly like my old one! It’s on a completely different
    topic but it has pretty much the same page layout and design. Excellent choice
    of colors!

    Hello there! I simply wish to offer you a big thumbs up for the great info you have got here on this post. I’ll be returning to your site for more soon.

    I’m just writing to make you understand of the terrific experience our princess developed checking your blog. She figured out several issues, including what it’s like to have an awesome giving character to make other folks clearly gain knowledge of various tricky issues. You really did more than my expectations. I appreciate you for delivering such insightful, trusted, informative as well as cool tips about the topic to Kate.

    Itís difficult to find knowledgeable people for this subject, however, you seem like you know what youíre talking about! Thanks

    This piece of writing is genuinely a pleasant one it helps new internet visitors, who are wishing for blogging.|

    I am regular reader, how are you everybody? This post posted at this web
    site is really nice.

    Excellent goods from you, man. I’ve understand your stuff previous to and you’re just extremely wonderful. I really like what you’ve acquired here, certainly like what you’re stating and the way in which you say it. You make it entertaining and you still take care of to keep it wise. I can not wait to read far more from you. This is actually a terrific website.

Leave a Reply