W32.Myparty@mm нь том хэмжээний имэйл хэлбэрээр илгээгддэг worm юм.

Имэйлийн Subject: new photos from my party!

Vндсэн текст: Hello!
My party… It was absolutely amazing!
I have attached my web page with new photos!
If you can please make color prints of my photos. Thanks!
Хавсралт: www.myparty.yahoo.com

Уг worm нь таны Windows-ын address book болон Outlook Express-ын Inbox , бусад
фолдерууд дахь хаягууд руу захиа илгээдэг. NT/2000/XP vйлдлийн системийн хувьд
энэ worm нь хаккеруудад системийг хянах боломж олгодог backdoor Trojan-ыг халдаадаг.
Ингэсэн тохиолдолд NAV программ уг worm-ыг Backdoor.Myparty байна гэж илрvvлдэг
байна. Мєн wоrm-ыг агуулах файлын нэр Access.***/ ямарч хамаагvй єргєтгєлтэй
/ байвал http:/ /www.disney.com хаяг руу хандах таны Web browser-т халддаг.

Тєрєл: Worm болон Trojan

Илэрсэн он сар єдєр: 2002.1.28
Ижил тєрлийн worm-ууд: W32/Myparty@MM, WORM_MYPARTY.A, W32/MyParty-A
Хэмжээ: 29.696 байт
Хор хохирол учруулах зэрэг: 3

Идэвхжиж эхлээд worm дараах vйлдлvvдйиг хийнэ.

1. Системийн он сар єдрийг шалгана. Єєрєєр хэлбэл компьютерт байгаа он сар
єдєр 1.25-1.29 ны хооронд, гарын драйвер орос скрипт дээр байвал worm єєрийгєє
C:\Recycled-F фолдерт санамсаргvй сонгогдсон нэртэйгээр хуулна.
2. Уг worm -ыг агуулах файлын нэр, єргєтгєлєєс хамааран єєр єєр vйлдлvvдийг
хийдэг. Файлын нэр Access.***/ ямарч хамаагvй єргєтгєлтэй / байвал http:/ /www.disney.com
хаяг руу хандах таны Web browser-т халддаг. Харин файлын нэр .com єргєтгєлтэй
байвал уг worm єєрийгєє доорх фолдеруудад хуулдаг.

– C:\Regctrl.exe (Windows NT/2000/XP)
– C:\Recycled\Regctrl.exe (Windows 95/98/Me). Ингэснээр уг worm Regctrl.exe
файлыг идэвхжvvлдэг байна.

Хэрэв файл .exe єргєтгєлтэй байвал дараах vйлдлvvдийг хийнэ.
1. Worm нь Windows-ын address book болон Microsoft Outlook, Outlook Express-ын
Inbox дахь .dbx єргєтгєлтэй файлуудыг хайдаг.
2. Олдсон хаягууд руу захиа илгээхдээ, тухайн имэйлийн программын SMTP серверын
тохиргоонд єєрчлєлт оруулдаг.
3. Windows NT/2000/XP vйлдлийн системтэй компьютеруудын хувьд backdoor Trojan-
ыг %Windows%\StartMenu\Programs\Startup\msstask.exe нэртэйгээр vvсгэж , Windows
эхлэх тоолонд энэ Trojan идэвхжиж эхэлдэг. Энэ trojan нь гэсэн
IP хаягтай Web хуудас руу хандаж уг worm-ыг зохиогчыг тухайн компьютер руу хандах
боломжтой болгодог.
4. Хамгийн сvvлд уг worm нь napster@gala.net гэсэн хаяг руу worm -ын тархалтын
байдал ямар байгаа талаар имэйл илгээдэг.

Хэрхэн арилгах вэ?
1. Хамгийн сvvлийн vеийн update хийгдсэн вирусын эсрэг программтай эсэхээ шалгах.
1. www.viruscenter.mn web site-aac NAV-ын хамгийн сvvлийн vеийн update-ыг татаж
2. Їvний дараа Norton Antivirus -аар системийг бvхэлд нь scan хийж шалгах шаардлагатай.
3. NAV-ын илрvvлсэн W32.Myparty@mm , Backdoor.Myparty.- аар халдварлагдсан бvх
файлуудыг устгах хэрэгтэй.



Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 4,116

4,116 Responses to W32.Myparty@mm

    Hi! This post couldn’t be written any better! Reading through this post reminds me of my good old room mate! He always kept talking about this. I will forward this article to him. Pretty sure he will have a good read. Thanks for sharing!|

    Superb blog! Do you have any tips for aspiring writers? I’m hoping to start my own blog soon but I’m a little lost on everything. Would you advise starting with a free platform like WordPress or go for a paid option? There are so many options out there that I’m completely confused .. Any tips? Bless you!|

    Woah! I’m really enjoying the template/theme of this site. It’s simple, yet effective. A lot of times it’s very difficult to get that “perfect balance” between usability and appearance. I must say you have done a fantastic job with this. In addition, the blog loads extremely fast for me on Firefox. Outstanding Blog!

    Hi, just wanted to tell you, I liked this blog post. It was inspiring. Keep on posting!|

    I’ll right away clutch your rss feed as I can’t find your e-mail subscription hyperlink or newsletter service. Do you have any? Kindly let me understand in order that I may subscribe. Thanks.|

    I’m impressed, I have to admit. Rarely do I come across a blog that’s both educative and entertaining, and let me tell you, you have hit the nail on the head. The problem is something that too few people are speaking intelligently about. Now i’m very happy that I found this in my hunt for something concerning this.|

    Hey! This post couldn’t be written any better! Reading through this post reminds me of my old room mate! He always kept chatting about this. I will forward this post to him. Fairly certain he will have a good read. Many thanks for sharing!|

    Woah! I’m really loving the template/theme of this blog. It’s simple, yet effective. A lot of times it’s difficult to get that “perfect balance” between usability and visual appeal. I must say that you’ve done a fantastic job with this. Also, the blog loads super quick for me on Firefox. Outstanding Blog!|

    Does your site have a contact page? I’m having trouble locating it but, I’d like to send you an email. I’ve got some recommendations for your blog you might be interested in hearing. Either way, great blog and I look forward to seeing it grow over time.|

    I enjoy, result in I discovered exactly what I used to be taking a look for. You’ve ended my 4 day lengthy hunt! God Bless you man. Have a nice day. Bye|


    http://doxycyclinest.com/# buy generic doxycycline

    Wow, the writing is so sexy. How could My spouse and i write like an individual? My spouse and i want to have the very same writing skills while you.

    I’m extremely impressed with your writing skills as well as with the layout on your weblog. Is this a paid theme or did you customize it yourself? Either way keep up the excellent quality writing, it is rare to see a nice blog like this one these days.|

    When some one searches for his essential thing, thus he/she needs to be available that in detail, so that thing is maintained over here.|

    I’ve been exploring for a little for any high quality articles or blog posts in this kind of area . Exploring in Yahoo I at last stumbled upon this web site. Studying this info So i’m happy to exhibit that I have a very just right uncanny feeling I discovered exactly what I needed. I such a lot certainly will make sure to do not disregard this site and give it a look on a constant basis.|

    Excellent write-up. I certainly appreciate this site. Keep it up!

    Whats up this is kinda of off topic but I was wanting to know if blogs use WYSIWYG editors or if you have to manually code with HTML. I’m starting a blog soon but have no coding experience so I wanted to get guidance from someone with experience. Any help would be enormously appreciated!|

    You are so cool! I do not think I’ve read through a single thing like that before. So nice to find another person with a few original thoughts on this issue. Seriously.. many thanks for starting this up. This web site is something that is required on the web, someone with a bit of originality!|

    A fascinating discussion is definitely worth comment. There’s no doubt that that you should write more on this issue, it might not be a taboo matter but generally people don’t talk about such issues. To the next! Cheers!!|

    I think this is one of the most vital information for me. And i’m happy reading your article. But wanna observation on few normal issues, The site style is great, the articles is truly nice : D. Just right task, cheers|


    https://diflucanst.com/# diflucan 100 mg tab

    Good – I should certainly pronounce, impressed with your web site. I had no trouble navigating through all tabs and related info ended up being truly easy to do to access. I recently found what I hoped for before you know it in the least. Reasonably unusual. Is likely to appreciate it for those who add forums or anything, web site theme . a tones way for your client to communicate. Nice task.

    Amazing! cafe equipment online is hard to find. Find cafe equipment online be going to our website. cafe equipment online cafe equipment online cafe equipment online

    My partner and I absolutely love your blog and find a lot of your post’s to be precisely what I’m looking for. Does one offer guest writers to write content for you? I wouldn’t mind publishing a post or elaborating on some of the subjects you write in relation to here. Again, awesome web log!|

    This website was… how do I say it? Relevant!! Finally I’ve found something that helped me. Thanks!

    I adore the manner you have concluded this blog post …


    https://amoxilst.com/# amoxicillin pharmacy price

    Wonderful post! We will be linking to this particularly great article on our site. Keep up the great writing.

    Howdy! I could have sworn I’ve been to this blog before but after checking through some of the post I realized it’s new to me. Nonetheless, I’m definitely happy I found it and I’ll be bookmarking and checking back frequently!|

    I know this web page provides quality dependent articles or reviews and other data, is there any other web page which gives such information in quality?|

    Hi great website! Does running a blog such as this require a lot of work? I have absolutely no expertise in coding but I had been hoping to start my own blog in the near future. Anyway, should you have any ideas or tips for new blog owners please share. I understand this is off topic but I simply wanted to ask. Kudos!|

    Undeniably believe that which you stated. Your favorite justification appeared to be on the web the easiest thing to be aware of. I say to you, I definitely get annoyed while people think about worries that they just do not know about. You managed to hit the nail upon the top as well as defined out the whole thing without having side-effects , people could take a signal. Will probably be back to get more. Thanks|

    Normally I don’t read post on blogs, but I would like to say that this write-up very forced me to try and do so! Your writing style has been surprised me. Thanks, quite nice article.

    Now I am going to do my breakfast, after having my breakfast coming yet again to read further news.|

    Very good information. Lucky me I ran across your website by chance (stumbleupon). I’ve saved it for later!|


    5 mg paxil: cheap paxil – paxil headache

    I must thank you for the efforts you have put in writing this site. I am hoping to see the same high-grade content from you in the future as well. In truth, your creative writing abilities has inspired me to get my own site now ;)|

    May I just say what a comfort to uncover someone that genuinely knows what they’re discussing on the internet. You definitely realize how to bring a problem to light and make it important. More and more people should read this and understand this side of your story. I can’t believe you’re not more popular since you most certainly possess the gift.

    I think this is one of the most vital info for me. And i am glad reading your article. But should remark on few general things, The website style is great, the articles is really great : D. Good job, cheers|


    medicine erectile dysfunction: buy erection pills – ed pills cheap

    Heya i am for the first time here. I found this board and I find It truly useful & it helped me out much. I hope to give something back and aid others like you aided me.|

    Hi to every body, it’s my first pay a quick visit of this webpage; this webpage contains awesome and genuinely good information in favor of visitors.|

Leave a Reply