W32.Hunch@mm

W32.Hunch@mm

W32.Hunch@mm нь том хэмжээний имэйл хэлбэрээр илгээгддэг worm бєгєєд Autoexec.bat
файлыг єєрчилж , C:\ дискийг форматлах оролдлого хийдэг. Ингэхдээ C:\_RESTORE
фолдерт байгаа .ocx, .sys, .dll болон санамсаргvй сонгогдсон єргєтгєлтэй бvх
файлуудыг устгадаг.

Тєрєл: Worm
Илэрсэн он сар єдєр: 2001.1.30
Хор хохирол учруулах зэрэг: 2
Захианы subject: Файлын нэр хассан єргєтгєлтэй байдаг.
Хавсралтын нэр: Файлын нэр
Хавсралтын хэмжээ: 151.552 байт
Хор хохирол:
1. Том хэмжээний имэйл хэлбэрээр илгээгддэг.
2. Autoexec.bat файлыг єєрчилнє.
3. C:\ дискийг форматлах оролдлого хийнэ.
4. ".XLS" , ".DOC" , ".WAV" , ".DWG"
, ".MP3" , ".BAK" , ".CDX" , ".BMP"
, ".HTM" , ".HLP" , ".CHM" , ".JPG"
, ".GIF" , ".SCR" ,".TTF" , ".MID" ,".MDB"
, ".DBF" , ".ICO" зэрэг єргєтгєлтэй файлуудаас сонгон 5
ширхэг файлыг устгана.
5. Системийг бvхэлд нь тогтворгvй болгоно.

W32.Hunch@mm идэвхжиж эхлээд доорх vйлдлvvдийг гvйцэтгэдэг.
1. Microsoft Outlook -ын address book -д байгаа хаягуудад доорх захиаг явуулна.
Subject: <Файлын нэрээс хамаарна. >
Їндсэн текст: Mensaje importante para <Явуулагчын нэр > en el archivo
adjunto…
Хавсралт: <Файлын нэрээс хамаарна >

2. Дараах зургыг дэлгэцэнд харуулна.
3. C:\_RESTORE фолдерт байгаа .ocx, .sys, .dll єргєтгєлтэй файлуудыг хайна.

4. Хатуу дискний доорх фолдеруудад шинээр файлуудыг хуулна.
– C:\Windows\System\Msword.Exe
– C:\Windows\System\Thwin.Exe
– C:\Windows\System\<Файлын нэр >
5. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices гэсэн
регистрvvдэд
THWIN C:\Windows\System\Thwin.Exe гэсэн утгыг нэмж єгнє. Ингэснээр Windows эхлэх
тоолонд идэвхжиж эхэлнэ.
6. .xls , .doc , .wav , .dwg , .mp3 , .bak , .cdx , .bmp , .htm , .hlp , .chm
, .jpg , .gif , .scr , .ttf , .mid ,.mdb , .dbf , .ico зэрэг єргєтгєлтэй файлаас
сонгон устгана.
7. Устгасан файлуудаа C:\Windows\System\ListWin.txt. фолдерт журнал файл болгон
хадгална.
8. Їvнй дараа C:\Autoexec.bat файлыг DEL > FORMAT C: /u /v:UNSCH /autotest
командыг нэмж єгснєєр єєрчилнє.
9. Дараагын удаа компьютераа асаахад таны C:\ дискийг дахин форматласан байна.

Хэрхэн арилгах вэ?
Арилгахын тулд W32.Hunch@mm -аар халдварласан файлыг устган , регистрт хийсэн
єєрчлєлтийг засварлахаас гадна Autoexec.bat файлыг засварлах хэрэгтэй.

Устгахдаа:

1. Хамгийн сvvлийн vеийн update хийгдсэн вирусын эсрэг программтай эсэхээ шалгах
2. Norton Antivirus-аар системийг бvхэлд нь scan хийж шалгах шаардлагатай.
3. W32.Hunch@mm -аар – аар халдварлагдсан бvх файлыг устгах хэрэгтэй.
4. Windows Explorer руу орж доорх фолдеруудад байгаа халдварласан файлуудыг
устгах хэрэгтэй.
– C:\Windows\System\Msword.Exe
– C:\Windows\System\Thwin.Exe
– C:\Windows\System\ListWin.txt

Regestry-г хэрхэн засварлах вэ?

1. Start цэсний Run ийг эхлvvлнэ.
2. Regedit гэж бичихэд Regestry-г засварлах цонх гарч ирнэ.
3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices гэсэн
регистр рvv орж баруун цонхонд байгаа THWIN C:\Windows\System\Thwin.Exe гэсэн
утгыг устгана.
4. Regestry -г дарж Exit гээд дуусгана.

Autoexec.bat файлыг засварлах

1. Start цэсний Run руу орно.
2. edit c:autoexec.bat гэж бичнэ.
3. MS-DOS Editor нээгдэхэд DEL > FORMAT C: /u /v:UNSCH /autotestм замыг хайж
олон тэмдэглэнэ.
4. File – Save гэж даран Exit гээд дуусгана.

 

{mos_fb_discuss:2} 

Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 3,443

3,443 Responses to W32.Hunch@mm

    When someone writes an paragraph he/she keeps the idea of a user in his/her brain that how a user can know it. So that’s why this article is perfect. Thanks!|

    Thanks for sharing your thoughts on meta_keyword. Regards|

    Hello there! This is my first comment here so I just wanted to give a quick shout out and tell you I really enjoy reading your articles. Can you suggest any other blogs/websites/forums that go over the same topics? Thank you!|

    Helpful information. Fortunate me I found your site by accident, and I’m stunned why this twist of fate didn’t took place in advance! I bookmarked it.|

    wonderful issues altogether, you simply received a new reader. What would you suggest about your publish that you just made some days ago? Any positive?|

    I have read several just right stuff here. Definitely worth bookmarking for revisiting. I wonder how so much attempt you put to create any such excellent informative web site.|

    Hello there, I found your website via Google while searching for a related topic, your website came up, it looks good. I’ve bookmarked it in my google bookmarks.

    This is really interesting, You’re a very skilled blogger. I’ve joined your feed and look forward to seeking more of your great post. Also, I’ve shared your website in my social networks!|

    Great info. Lucky me I found your website by chance (stumbleupon). I’ve book-marked it for later!|

    I believe this website has got some very good info for everyone :D.

    I seriously love your site.. Very nice colors & theme. Did you develop this website yourself? Please reply back as I’m planning to create my own website and would like to learn where you got this from or exactly what the theme is called. Cheers!

    This is my first time visit at here and i am truly impressed to read all at single place.|

    I needed to thank you for this wonderful read!! I absolutely loved every bit of it. I’ve got you book-marked to check out new things you post…

    Thank you, I have recently been looking for info about this topic for a while and yours is the best I’ve came upon till now. But, what in regards to the conclusion? Are you certain in regards to the source?

    Way cool! Some extremely valid points! I appreciate you penning this article plus the rest of the website is also really good.

    Appreciate the recommendation. Let me try it out.|

    I love reading a post that can make people think. Also, thank you for allowing me to comment!

    Hey there! I know this is kind of off-topic however I had to ask. Does building a well-established website like yours require a large amount of work? I’m brand new to writing a blog however I do write in my diary everyday. I’d like to start a blog so I can easily share my own experience and views online. Please let me know if you have any ideas or tips for new aspiring blog owners. Thankyou!|

    Hey there just wanted to give you a brief heads up and let you know a few of the pictures aren’t loading properly. I’m not sure why but I think its a linking issue. I’ve tried it in two different browsers and both show the same results.|

    Greetings! Very useful advice in this particular article! It is the little changes that will make the greatest changes. Thanks a lot for sharing!|

    Ahaa, its fastidious dialogue regarding this post at this place at this weblog, I have read all that, so at this time me also commenting here.|

    Hey would you mind letting me know which web host you’re utilizing? I’ve loaded your blog in 3 different internet browsers and I must say this blog loads a lot quicker then most. Can you suggest a good web hosting provider at a fair price? Kudos, I appreciate it!|

    Howdy! I know this is kind of off-topic however I had to ask. Does operating a well-established blog such as yours require a lot of work? I am completely new to writing a blog however I do write in my journal everyday. I’d like to start a blog so I can easily share my experience and feelings online. Please let me know if you have any kind of recommendations or tips for new aspiring blog owners. Thankyou!|

    Good way of describing, and nice piece of writing to take information on the topic of my presentation subject, which i am going to convey in school.|

    Its like you learn my thoughts! You appear to grasp a lot approximately this, like you wrote the guide in it or something. I think that you just could do with a few percent to drive the message home a bit, but instead of that, that is wonderful blog. A fantastic read. I’ll certainly be back.

    I must thank you for the efforts you’ve put in writing this blog. I’m hoping to view the same high-grade blog posts from you in the future as well. In fact, your creative writing abilities has encouraged me to get my very own blog now 😉

    wonderful issues altogether, you just won a new reader. What would you recommend in regards to your publish that you just made a few days in the past? Any positive?

    An outstanding share! I have just forwarded this onto a coworker who was conducting a little homework on this. And he in fact ordered me dinner simply because I stumbled upon it for him… lol. So allow me to reword this…. Thank YOU for the meal!! But yeah, thanx for spending the time to talk about this subject here on your site.|

    very nice submit, i actually love this website, keep on it

    Hi, I do believe your website may be having internet browser compatibility issues. Whenever I look at your blog in Safari, it looks fine however, when opening in Internet Explorer, it’s got some overlapping issues. I simply wanted to provide you with a quick heads up! Aside from that, excellent website!|

    If you are going for finest contents like me, only visit this site every day as it gives feature contents, thanks|

    Great post. I used to be checking constantly this weblog and I am impressed! Extremely helpful information specially the closing part 🙂 I care for such info a lot. I was seeking this certain info for a long time. Thank you and good luck. |

    Hi there to all, how is everything, I think every one is getting more from this web site, and your views are pleasant in favor of new viewers.|

    Every weekend i used to visit this site, as i want enjoyment, since this this web site conations truly good funny stuff too.|

    I was extremely pleased to uncover this page. I wanted to thank you for your time for this wonderful read!! I definitely liked every part of it and I have you book-marked to look at new information on your blog.|

    hello there and thank you for your information – I have definitely picked up something new from right here. I did however expertise some technical issues using this website, as I experienced to reload the website a lot of times previous to I could get it to load correctly. I had been wondering if your web hosting is OK? Not that I am complaining, but sluggish loading instances times will often affect your placement in google and can damage your high-quality score if ads and marketing with Adwords. Anyway I’m adding this RSS to my email and can look out for a lot more of your respective exciting content. Make sure you update this again soon.|

    I like what you guys tend to be up too. This sort of clever work and exposure! Keep up the awesome works guys I’ve you guys to my blogroll.|

    Does your site have a contact page? I’m having problems locating it but, I’d like to shoot you an email. I’ve got some creative ideas for your blog you might be interested in hearing. Either way, great site and I look forward to seeing it develop over time.|

    I’d like to find out more? I’d like to find out some additional information.|

    This site was… how do you say it? Relevant!! Finally I have found something that helped me. Thank you!

    hi!,I love your writing very a lot! proportion we be in contact more about your article on AOL? I require a specialist on this area to solve my problem. Maybe that’s you! Having a look forward to peer you. |

    Hello There. I found your blog using msn. This is a very well written article. I’ll make sure to bookmark it and come back to read more of your useful info. Thanks for the post. I’ll definitely comeback.|

    I blog quite often and I really thank you for your content. The article has truly peaked my interest. I will book mark your site and keep checking for new details about once per week. I opted in for your RSS feed as well.|

    You made some decent points there. I checked on the internet for additional information about the issue and found most individuals will go along with your views on this web site.

    Hi would you mind letting me know which webhost you’re utilizing?
    I’ve loaded your blog in 3 different internet browsers and I must say this blog loads a lot quicker then most.
    Can you recommend a good internet hosting provider at a reasonable price?
    Many thanks, I appreciate it!

    Spot on with this write-up, I absolutely believe this amazing site needs much more attention. I’ll probably be returning to read more, thanks for the advice!|

    What a data of un-ambiguity and preserveness of precious know-how regarding unexpected emotions.|

    Hi, i read your blog occasionally and i own a similar one and i was just wondering if you get a lot of spam comments? If so how do you prevent it, any plugin or anything you can suggest? I get so much lately it’s driving me mad so any assistance is very much appreciated.|

Leave a Reply

Message:*

Name:

Email:

Website: