W32.Myparty@mm нь том хэмжээний имэйл хэлбэрээр илгээгддэг worm юм.

Имэйлийн Subject: new photos from my party!

Vндсэн текст: Hello!
My party… It was absolutely amazing!
I have attached my web page with new photos!
If you can please make color prints of my photos. Thanks!
Хавсралт: www.myparty.yahoo.com

Уг worm нь таны Windows-ын address book болон Outlook Express-ын Inbox , бусад
фолдерууд дахь хаягууд руу захиа илгээдэг. NT/2000/XP vйлдлийн системийн хувьд
энэ worm нь хаккеруудад системийг хянах боломж олгодог backdoor Trojan-ыг халдаадаг.
Ингэсэн тохиолдолд NAV программ уг worm-ыг Backdoor.Myparty байна гэж илрvvлдэг
байна. Мєн wоrm-ыг агуулах файлын нэр Access.***/ ямарч хамаагvй єргєтгєлтэй
/ байвал http:/ /www.disney.com хаяг руу хандах таны Web browser-т халддаг.

Тєрєл: Worm болон Trojan

Илэрсэн он сар єдєр: 2002.1.28
Ижил тєрлийн worm-ууд: W32/Myparty@MM, WORM_MYPARTY.A, W32/MyParty-A
Хэмжээ: 29.696 байт
Хор хохирол учруулах зэрэг: 3

Идэвхжиж эхлээд worm дараах vйлдлvvдйиг хийнэ.

1. Системийн он сар єдрийг шалгана. Єєрєєр хэлбэл компьютерт байгаа он сар
єдєр 1.25-1.29 ны хооронд, гарын драйвер орос скрипт дээр байвал worm єєрийгєє
C:\Recycled-F фолдерт санамсаргvй сонгогдсон нэртэйгээр хуулна.
2. Уг worm -ыг агуулах файлын нэр, єргєтгєлєєс хамааран єєр єєр vйлдлvvдийг
хийдэг. Файлын нэр Access.***/ ямарч хамаагvй єргєтгєлтэй / байвал http:/ /www.disney.com
хаяг руу хандах таны Web browser-т халддаг. Харин файлын нэр .com єргєтгєлтэй
байвал уг worm єєрийгєє доорх фолдеруудад хуулдаг.

– C:\Regctrl.exe (Windows NT/2000/XP)
– C:\Recycled\Regctrl.exe (Windows 95/98/Me). Ингэснээр уг worm Regctrl.exe
файлыг идэвхжvvлдэг байна.

Хэрэв файл .exe єргєтгєлтэй байвал дараах vйлдлvvдийг хийнэ.
1. Worm нь Windows-ын address book болон Microsoft Outlook, Outlook Express-ын
Inbox дахь .dbx єргєтгєлтэй файлуудыг хайдаг.
2. Олдсон хаягууд руу захиа илгээхдээ, тухайн имэйлийн программын SMTP серверын
тохиргоонд єєрчлєлт оруулдаг.
3. Windows NT/2000/XP vйлдлийн системтэй компьютеруудын хувьд backdoor Trojan-
ыг %Windows%\StartMenu\Programs\Startup\msstask.exe нэртэйгээр vvсгэж , Windows
эхлэх тоолонд энэ Trojan идэвхжиж эхэлдэг. Энэ trojan нь гэсэн
IP хаягтай Web хуудас руу хандаж уг worm-ыг зохиогчыг тухайн компьютер руу хандах
боломжтой болгодог.
4. Хамгийн сvvлд уг worm нь napster@gala.net гэсэн хаяг руу worm -ын тархалтын
байдал ямар байгаа талаар имэйл илгээдэг.

Хэрхэн арилгах вэ?
1. Хамгийн сvvлийн vеийн update хийгдсэн вирусын эсрэг программтай эсэхээ шалгах.
1. www.viruscenter.mn web site-aac NAV-ын хамгийн сvvлийн vеийн update-ыг татаж
2. Їvний дараа Norton Antivirus -аар системийг бvхэлд нь scan хийж шалгах шаардлагатай.
3. NAV-ын илрvvлсэн W32.Myparty@mm , Backdoor.Myparty.- аар халдварлагдсан бvх
файлуудыг устгах хэрэгтэй.



Date: September 26th, 2007 | Categories: Вирус | By: | Comments: 4,116

4,116 Responses to W32.Myparty@mm

    I’m gone to convey my little brother, that he should also pay a visit this web site on regular basis to take updated from most recent news.|

    What’s Taking place i am new to this, I stumbled upon this I have found It positively useful and it has aided me out loads. I am hoping to contribute & assist different customers like its aided me. Good job.|


    paxil er: paxil generic – paxil sleep

    You made some clear points there. I looked on the internet for the issue and found most persons will agree with your blog.

    A person essentially assist to make severely posts I would state. This is the first time I frequented your web page and so far? I surprised with the research you made to make this actual submit amazing. Excellent activity!|

    Hi there, There’s no doubt that your web site could possibly be having internet browser compatibility issues. When I look at your website in Safari, it looks fine but when opening in IE, it has some overlapping issues. I simply wanted to give you a quick heads up! Apart from that, excellent blog!

    Article writing is also a fun, if you know after that you can write or else it is difficult to write.|

    Excellent, what a web site it is! This weblog gives valuable information to us, keep it up.|

    Hello There. I found your blog using msn. This is a really well written article. I will be sure to bookmark it and come back to read more of your useful info. Thanks for the post. I’ll definitely comeback.|

    Hi there! This post could not be written any better! Reading this post reminds me of my good old room mate! He always kept talking about this. I will forward this article to him. Fairly certain he will have a good read. Many thanks for sharing!|

    Hi there, I read your blog daily. Your humoristic style is awesome, keep it up!|

    May I simply say what a relief to find an individual who actually understands what they’re talking about over the internet. You certainly understand how to bring an issue to light and make it important. More people really need to check this out and understand this side of the story. I was surprised you’re not more popular because you most certainly have the gift.|

    Hello, after reading this amazing paragraph i am as well cheerful to share my know-how here with mates.|

    I just couldn’t go away your site before suggesting that I really loved the usual info a person provide to your visitors? Is gonna be again regularly to check up on new posts|

    Very nice post. I just stumbled upon your weblog and wished to say that I’ve really enjoyed surfing around your blog posts. After all I will be subscribing to your feed and I hope you write again very soon!|


    valtrex order canada: cheap valtrex – valtrex rx
    generic tadalafil

    Not many writers with proper knowledge of the topics they cover.

    Fantastic beat ! I wish to apprentice while you amend your web site, how can i subscribe for a weblog site? The account helped me a acceptable deal. I had been tiny bit acquainted of this your broadcast offered vivid transparent concept|

    Great goods from you, man. I have take into accout your stuff prior to and you are simply too wonderful. I actually like what you’ve got right here, certainly like what you’re saying and the way by which you assert it. You are making it enjoyable and you still take care of to stay it sensible. I can’t wait to learn much more from you. That is really a tremendous website.|

    I like the valuable info you provide in your articles. I’ll bookmark your blog and check again here regularly. I’m quite sure I’ll learn a lot of new stuff right here! Good luck for the next!|

    Link exchange is nothing else except it is only placing the other person’s website link on your page at proper place and other person will also do same in support of you.|


    propecia 1mg generic: buy propecia – propecia for hair loss
    tadalafil 20mg best price

    Hello there, You have done an incredible job. I will certainly digg it and for my part suggest to my friends. I am confident they’ll be benefited from this website.|

    Hiya! Quick question that’s entirely off topic. Do you know how to make your site mobile friendly? My site looks weird when viewing from my iphone. I’m trying to find a theme or plugin that might be able to fix this problem. If you have any recommendations, please share. Appreciate it!|

    This is my first time go to see at here and i am genuinely happy to read everthing at alone place.|

    It’s onerous to seek out educated people on this topic, but you sound like you already know what you’re speaking about! Thanks

    Asking questions are really good thing if you are not understanding anything totally, however this piece of writing provides good understanding yet.|

    Hello there! I could have sworn I’ve visited your blog before but after looking at some of the posts I realized it’s new to me. Regardless, I’m definitely happy I stumbled upon it and I’ll be bookmarking it and checking back regularly!

    I do agree with all of the ideas you have presented in your post. They’re very convincing and will certainly work. Still, the posts are too short for beginners. Could you please extend them a bit from next time? Thanks for the post.

    Valuable information. Fortunate me I discovered your website by chance, and I am shocked why this coincidence did not happened in advance! I bookmarked it.|

    If you would like to obtain a good deal from this post then you have to apply such techniques to your won web site.|

    Great site you have got here.. It’s difficult to find excellent writing like yours nowadays. I seriously appreciate individuals like you! Take care!!|

    Oh my goodness! Incredible article dude! Thank you, However I am going through troubles with your RSS. I don’t know why I can’t join it. Is there anyone else getting the same RSS issues? Anyone who knows the answer will you kindly respond? Thanks!!

    I have been absent for a while, but now I remember why I used to love this site. Thank you, I will try and check back more often. How frequently you update your site?


    where can i buy propecia: propecia for sale – finasteride hair
    tadalafil generic india

    Hmm it appears like your website ate my first comment (it was extremely long) so I guess I’ll just sum it up what I had written and say, I’m thoroughly enjoying your blog. I as well am an aspiring blog writer but I’m still new to everything. Do you have any points for rookie blog writers? I’d definitely appreciate it.|

    I love what you guys are up too. Such clever work and coverage! Keep up the good works guys I’ve incorporated you guys to blogroll.|

    Very descriptive blog, I loved that a lot. Will there be a part 2?|

    Heya i’m for the primary time here. I came across this board and I to find It truly helpful & it helped me out much. I hope to present something again and help others like you aided me.|

    We’re a group of volunteers and opening a new scheme in our community. Your web site offered us with valuable info to work on. You have done an impressive job and our whole community will be thankful to you.|

    bookmarked!!, I love your web site!|

    After checking out a few of the blog posts on your blog, I really like your technique of writing a blog. I book-marked it to my bookmark site list and will be checking back in the near future. Please check out my website too and let me know how you feel.|

    Write more, thats all I have to say. Literally, it seems as though you relied on the video to make your point. You obviously know what youre talking about, why throw away your intelligence on just posting videos to your blog when you could be giving us something enlightening to read?

    Saved as a favorite, I really like your website!|

    Hello there I am so happy I found your blog page, I really found you by mistake, while I was looking on Aol for something else, Anyhow I am here now and would just like to say thanks a lot for a fantastic post and a all round enjoyable blog (I also love the theme/design), I don’t have time to read it all at the minute but I have bookmarked it and also added in your RSS feeds, so when I have time I will be back to read a great deal more, Please do keep up the fantastic work.


    tadalafil india pharmacy: tadalafil pills – tadalafil
    buy tadalafil

    Aw, this was a really good post. Taking the time and actual effort to make a good article… but what can I say… I hesitate a whole lot and don’t seem to get nearly anything done.|

    I was curious if you ever thought of changing the layout of your blog? Its very well written; I love what youve got to say. But maybe you could a little more in the way of content so people could connect with it better. Youve got an awful lot of text for only having one or two pictures. Maybe you could space it out better?|

    Right here is the perfect blog for anybody who hopes to understand this topic. You understand so much its almost tough to argue with you (not that I actually would want toÖHaHa). You certainly put a fresh spin on a topic that’s been written about for a long time. Wonderful stuff, just excellent!

    I got this website from my pal who told me concerning this site and now this time I am browsing this site and reading very informative posts here.|

Leave a Reply