W32.Myparty@mm

W32.Myparty@mm

W32.Myparty@mm нь том хэмжээний имэйл хэлбэрээр илгээгддэг worm юм.


Имэйлийн Subject: new photos from my party!

Vндсэн текст: Hello!
My party… It was absolutely amazing!
I have attached my web page with new photos!
If you can please make color prints of my photos. Thanks!
Хавсралт: www.myparty.yahoo.com

Уг worm нь таны Windows-ын address book болон Outlook Express-ын Inbox , бусад
фолдерууд дахь хаягууд руу захиа илгээдэг. NT/2000/XP vйлдлийн системийн хувьд
энэ worm нь хаккеруудад системийг хянах боломж олгодог backdoor Trojan-ыг халдаадаг.
Ингэсэн тохиолдолд NAV программ уг worm-ыг Backdoor.Myparty байна гэж илрvvлдэг
байна. Мєн wоrm-ыг агуулах файлын нэр Access.***/ ямарч хамаагvй єргєтгєлтэй
/ байвал http:/ /www.disney.com хаяг руу хандах таны Web browser-т халддаг.

Тєрєл: Worm болон Trojan
Horse

Илэрсэн он сар єдєр: 2002.1.28
Ижил тєрлийн worm-ууд: W32/Myparty@MM, WORM_MYPARTY.A, W32/MyParty-A
Хэмжээ: 29.696 байт
Хор хохирол учруулах зэрэг: 3

Идэвхжиж эхлээд worm дараах vйлдлvvдйиг хийнэ.

1. Системийн он сар єдрийг шалгана. Єєрєєр хэлбэл компьютерт байгаа он сар
єдєр 1.25-1.29 ны хооронд, гарын драйвер орос скрипт дээр байвал worm єєрийгєє
C:\Recycled-F фолдерт санамсаргvй сонгогдсон нэртэйгээр хуулна.
2. Уг worm -ыг агуулах файлын нэр, єргєтгєлєєс хамааран єєр єєр vйлдлvvдийг
хийдэг. Файлын нэр Access.***/ ямарч хамаагvй єргєтгєлтэй / байвал http:/ /www.disney.com
хаяг руу хандах таны Web browser-т халддаг. Харин файлын нэр .com єргєтгєлтэй
байвал уг worm єєрийгєє доорх фолдеруудад хуулдаг.

– C:\Regctrl.exe (Windows NT/2000/XP)
– C:\Recycled\Regctrl.exe (Windows 95/98/Me). Ингэснээр уг worm Regctrl.exe
файлыг идэвхжvvлдэг байна.

Хэрэв файл .exe єргєтгєлтэй байвал дараах vйлдлvvдийг хийнэ.
1. Worm нь Windows-ын address book болон Microsoft Outlook, Outlook Express-ын
Inbox дахь .dbx єргєтгєлтэй файлуудыг хайдаг.
2. Олдсон хаягууд руу захиа илгээхдээ, тухайн имэйлийн программын SMTP серверын
тохиргоонд єєрчлєлт оруулдаг.
3. Windows NT/2000/XP vйлдлийн системтэй компьютеруудын хувьд backdoor Trojan-
ыг %Windows%\StartMenu\Programs\Startup\msstask.exe нэртэйгээр vvсгэж , Windows
эхлэх тоолонд энэ Trojan идэвхжиж эхэлдэг. Энэ trojan нь 209.151.250.170 гэсэн
IP хаягтай Web хуудас руу хандаж уг worm-ыг зохиогчыг тухайн компьютер руу хандах
боломжтой болгодог.
4. Хамгийн сvvлд уг worm нь napster@gala.net гэсэн хаяг руу worm -ын тархалтын
байдал ямар байгаа талаар имэйл илгээдэг.

Хэрхэн арилгах вэ?
1. Хамгийн сvvлийн vеийн update хийгдсэн вирусын эсрэг программтай эсэхээ шалгах.
1. www.viruscenter.mn web site-aac NAV-ын хамгийн сvvлийн vеийн update-ыг татаж
авах.
2. Їvний дараа Norton Antivirus -аар системийг бvхэлд нь scan хийж шалгах шаардлагатай.
3. NAV-ын илрvvлсэн W32.Myparty@mm , Backdoor.Myparty.- аар халдварлагдсан бvх
файлуудыг устгах хэрэгтэй.

 

{mos_fb_discuss:2} 

Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 2,391

2,391 Responses to W32.Myparty@mm

    Hi mates, its great article regarding tutoringand completely defined, keep it up all the time.|

    I have been browsing online more than three hours today, yet I never found any interesting article like yours. It’s pretty worth enough for me. In my view, if all site owners and bloggers made good content as you did, the internet will be much more useful than ever before.|

    Greetings! I’ve been following your blog for a while now and finally got the courage to go ahead and give you a shout out from Austin Tx! Just wanted to tell you keep up the fantastic job!|

    Appreciate this post. Will try it out.|

    Hey There. I discovered your weblog the usage of msn. This is an extremely neatly written article. I will be sure to bookmark it and come back to learn more of your useful info. Thank you for the post. I’ll certainly return.|

    Heya i’m for the first time here. I came across this board and I find It truly useful & it helped me out a lot. I hope to give something back and help others like you aided me.|

    I have read so many posts regarding the blogger lovers however this article is actually a fastidious paragraph, keep it up.|

    I believe this is among the so much significant info for me. And i’m satisfied reading your article. However wanna observation on some basic issues, The site style is great, the articles is in point of fact excellent : D. Just right task, cheers|

    This is a topic that is close to my heart… Cheers! Exactly where are your contact details though?

    Hey! This is kind of off topic but I need some guidance from an established blog. Is it hard to set up your own blog? I’m not very techincal but I can figure things out pretty quick. I’m thinking about making my own but I’m not sure where to start. Do you have any tips or suggestions? With thanks|

    RafaelAwasp

    40 mg paxil: paxil generic – 10mg paxil

    Robertwic

    paxil 40 mg: paxil generic – paxil ocd

    Nice post. I learn something totally new and challenging on sites I stumbleupon on a daily basis. It will always be useful to read through articles from other writers and use a little something from their sites.

    I was wondering if you ever considered changing the layout of your site? Its very well written; I love what youve got to say. But maybe you could a little more in the way of content so people could connect with it better. Youve got an awful lot of text for only having one or two images. Maybe you could space it out better?|

    Aw, this was an exceptionally nice post. Taking the time and actual effort to create a really good article… but what can I say… I procrastinate a whole lot and never manage to get nearly anything done.|

    wonderful publish, very informative. I wonder why the opposite experts of this sector don’t notice this. You must continue your writing. I am sure, you’ve a huge readers’ base already!|

    Why viewers still make use of to read news papers when in this technological world the whole thing is presented on web?|

    Ridiculous story there. What occurred after? Take care!|

    Nice response in return of this difficulty with firm arguments and explaining all about that.|

    Hey would you mind letting me know which web host you’re working with? I’ve loaded your blog in 3 different internet browsers and I must say this blog loads a lot faster then most. Can you recommend a good web hosting provider at a fair price? Cheers, I appreciate it!|

    Hey there exceptional website! Does running a blog similar to this require a massive amount work? I have virtually no expertise in coding however I had been hoping to start my own blog soon. Anyhow, should you have any recommendations or tips for new blog owners please share. I know this is off subject but I just needed to ask. Kudos!|

    Fantastic goods from you, man. I have understand your stuff previous to and you’re just extremely excellent. I actually like what you’ve acquired here, really like what you are stating and the way in which you say it. You make it enjoyable and you still take care of to keep it sensible. I cant wait to read much more from you. This is actually a tremendous site.|

    Everything is very open with a really clear description of the challenges. It was really informative. Your website is useful. Many thanks for sharing!|

    Hi there, just became aware of your weblog through Google, and located that it is really informative. I am going to watch out for brussels. I will be grateful in case you continue this in future. Numerous people can be benefited out of your writing. Cheers!

    Useful info. Lucky me I found your web site by accident, and I am surprised why this twist of fate did not came about in advance! I bookmarked it.

    An intriguing discussion is worth comment. I do think that you ought to publish more about this subject matter, it might not be a taboo matter but usually people don’t talk about such issues. To the next! Best wishes!!|

    RafaelAwasp

    cheapest ed pills: cheap erectile dysfunction pills online – best ed drug

    Right here is the perfect webpage for anybody who would like to understand this topic. You realize so much its almost hard to argue with you (not that I personally would want toÖHaHa). You certainly put a fresh spin on a subject that’s been written about for a long time. Great stuff, just excellent!

    I have to thank you for the efforts you’ve put

    Hey there just wanted to give you a quick heads up. The text in your post seem to be running off the screen in Internet explorer. I’m not sure if this is a formatting issue or something to do with internet browser compatibility but I figured I’d post to let you know. The design and style look great though! Hope you get the issue fixed soon. Thanks|

    Robertwic

    where can i get metformin: cheap metformin – can i buy metformin without a prescription

    Great web site you have here.. It’s difficult to find high-quality writing like yours nowadays. I really appreciate people like you! Take care!!|

    Thanks for giving your ideas. One thing is that college students have a selection between federal government student loan and also a private education loan where it can be easier to choose student loan online debt consolidation than over the federal student loan.

    I’m not sure why but this blog is loading very slow for me. Is anyone else having this issue or is it a issue on my end? I’ll check back later on and see if the problem still exists.|

    Undeniably believe that which you said. Your favorite justification seemed to be on the net the simplest thing to be aware of. I say to you, I certainly get annoyed while people consider worries that they just do not know about. You managed to hit the nail upon the top and also defined out the whole thing without having side effect , people could take a signal. Will probably be back to get more. Thanks

    Hello, after reading this amazing article i am as well happy to share my experience here with friends.|

    You’ve made some decent points there. I checked on the net for additional information about the issue and found most people will go along with your views on this web site.

    Can I simply say what a relief to discover someone that actually understands what they are discussing online. You definitely know how to bring an issue to light and make it important. A lot more people ought to read this and understand this side of your story. I can’t believe you’re not more popular because you surely have the gift.

    Howdy! Would you mind if I share your blog with my myspace group? There’s a lot of folks that I think would really appreciate your content. Please let me know. Thanks|

    It’s appropriate time to make a few plans for the long run and it’s time to be happy. I’ve learn this put up and if I could I desire to suggest you some attention-grabbing things or suggestions. Maybe you could write next articles relating to this article. I wish to read more issues approximately it!|

    What i do not understood is in truth how you’re no longer really a lot more well-appreciated than you may be right now. You’re so intelligent. You already know thus considerably when it comes to this subject, made me for my part consider it from so many various angles. Its like women and men are not interested except it is something to accomplish with Lady gaga! Your individual stuffs great. All the time maintain it up!|

    Every weekend i used to visit this site, as i wish for enjoyment, as this this web site conations really good funny information too.|

    Truly no matter if someone doesn’t know then its up to other viewers that they will help, so here it happens.|

    Hey! I know this is kinda off topic but I was wondering if you knew where I could locate a captcha plugin for my comment form? I’m using the same blog platform as yours and I’m having problems finding one? Thanks a lot!|

    RafaelAwasp

    lasix 40 mg: furosemide 20 mg tabs – furosemide 40mg

    Aw, this was a really good post. Finding the time and actual effort to produce a very good article… but what can I say… I procrastinate a lot and never manage to get anything done.

Leave a Reply

Message:*

Name:

Email:

Website: