| Navigasyon |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
porno sitelerindne bulaşan virüsler |
|
| |
Trend Micro 3 yeni LOVGATE türevini duyurdu:
PE_LOVGATE.J (orta risk)
PE_LOVGATE.K (düşük risk)
PE_LOVGATE.I (düşük risk)
PE_LOVGATE.J
Bu dosyalara-bulaşan virüs ağ paylaşımları ve eposta ile yayılıyor.
Ağ paylaşımlarında okuma/yazma izinleri olan klasörleri arıyor ve bulduklarına aşağıdaki isimlerle kendisini kopyalıyor:
100 free essays school.pif
Age of empires 2 crack.exe
AN-YOU-SUCK-IT.txt.pif
Are you looking for Love.doc.exe
autoexec.bat
CloneCD + crack.exe
How To Hack Websites.exe
Mafia Trainer!!!.exe
MoviezChannelsInstaler.exe
MSN Password Hacker and Stealer.exe
Panda Titanium Crack.zip.exe
Sex_For_You_Life.JPG.pif
SIMS FullDownloader.zip.exe
Star Wars II Movie Full Downloader.exe
The world of lovers.txt.exe
Winrar + crack.exe
Microsoft Outlook ve Outlook Express'de gelen tüm mesajları cevapla***** eposta ile de yayılıyor. Eposta aşağıdaki format'da oluyor:
From: <Infected User’s Name>
To: <Original Sender>
Subject: RE: <Original Subject>
Message Body:
'''<Infected User’s Name>' wrote:
====
><Original Body> >
====
YAHOO.COM Mail auto-reply:
If you can keep your head when all about you
Are losing theirs and blaming it on you;
If you can trust yourself when all men doubt you,
But make allowance for their doubting too;
If you can wait and not be tired by waiting,
Or, being lied about,don't deal in lies,
Or, being hated, don't give way to hating,
And yet don't look too good, nor talk too wise;
... ... more look to the attachment.
> Get your FREE <Original Sender's SMTP account> account now! <
Attachment: (Randomly selected from any of the following
I am For u.doc.exe"
Britney spears nude.exe.txt.exe
joke.pif
DSL Modem Uncapper.rar.exe
Industry Giant II.exe
StarWars2 - CloneAttack.rm.scr
dreamweaver MX (crack).exe
Shakira.zip.exe
SETUP.EXE
Macromedia Flash.scr
How to Crack all gamez.exe
Me_nude.AVI.pif
s3msong.MP3.pif
Deutsch BloodPatch!.exe
Sex in Office.rm.scr
the hardcore game-.pif
Ayrıca bulunduğu klasör ve Windows klasöründe bulduğu HTML dosyalarının içinden (varsa) eposta adreslerini alıyor ve kendisini ek dosya olarak ekleyerek bu adreslere gönderiyor:
Konu: (Aşağıdakilerden biri)
• Reply to this!
• Let's Laugh
• Last Update
• for you
• Great
• Help
• Attached one Gift for u..
• Hi
• Hi Dear
• See the attachement
Mesaj Gövdesi: (Aşağıdakilerden biri)
• For further assistance, please contact!
• Copy of your message, including all the headers is attached.
• This is the last cumulative update.
• Tiger Woods had two eagles Friday during his victory over
Stephen Leaney. (AP Photo/Denis Poroy)
• Send reply if you want to be official beta tester.
This message was created automatically by mail delivery
software (Exim).
• It's the long-awaited film version of the Broadway hit.
Set in the roaring 20's, this is the story of Chicago
chorus girl Roxie Hart(Zellweger), who shoots her unfaithful
lover (West).
• Adult content!!! Use with parental advisory.
• Patrick Ewing will give Knick fans something to cheer
about Friday night.
• Send me your comments...
Ek Dosya: (Aşağıdakilerden biri)
• About_Me.txt.pif
• driver.exe
• Doom3 Preview!!!.exe
• enjoy.exe
• YOU_are_FAT!.TXT.pif
• Source.exe
• Interesting.exe
• README.TXT.pif
• images.pif
• Pics.ZIP.scr
Virüsün arka-kapı özellikleri de var. Port 1092 ve 20168'i açarak uzaktaki kullanıcıların etkilenen sisteme erişmesine izin veriyor. Port'ları açtıktan sonra uzaktaki kullanıcıya makinenin erişilebilir olduğunu haber vermek için bir eposta atıyor.
|
|
|
|
|
|
| |
Bugün 28 ziyaretçi (69 klik) kişi burdaydı! |
|
|
|
|
|
|
|
