w32/areses.q

Imagen biografía
Categoría: Gusanos de e-mail
Valora este manual:





 
Enviada por: Administrador

Manual de informática de w32/areses.q

w32/ areses.q@mm
tipo: gusano de email
tama?o: 21,262 bytes
origen: internet
destructivo: si en la calle (in the wild): si detección y eliminación: the hacker 5.9 y 6.0 con registro de virus al 06/09/2006.
w32/areses.q@mm , es un gusano que se difunde a trav?s de la red de intercambio de archivos p2p y v?a e-mail utilizando su propio motor smtp . el gusano busca direcciones de e-mail en el computador atacado y en archivos con las siguientes extensiones .adb, .asp, .cfg, .cgi, .dbx, .dhtm, dhtml, .eml, .htm, .html, .jsp, .mbx, .mdx, .mht, .mmf, .msg, .nch, .ods, .oft, .php, .pl, .sht, .shtm, .stm, .tbb, .txt, .uin, .wab, .wsh, .xls y .xml.
el gusano evita enviar mensajes de e-mail a direcciones que contengan los siguientes textos:
@example. 2003 2004 2005 2006 @microsoft rating@ f-secur news update .qmail anyone@ bugs@ contract@ feste gold-certs@ help@ info@ nobody@ noone@ 0000 mailer-daemon@ @subscribe kasp admin icrosoft support ntivi unix bsd linux listserv certific torvalds@ sopho @foo @iana free-av @messagelab winzip google winrar samples spm111@ .00 --- abuse panda cafee spam pgp @avp. noreply local root@ postmaster@ .0 .1 .2 .3 .4 .5 .6 .7 .8 .9 caracter?sticas del mensaje de e-mail:
asunto: [ variable, alguno de los siguientes]
hi, whats up? he, where are you? hi, drop me a line!!! hi! please write to me urgently! hi! im waiting you online today! will you be online today? when youre gonna answer me? re: write to me! re: call me! re: where are you? re: when youre gonna answer me? hi!!! hows the mood? re: hows the mood? re: where have you been cuerpo: [ variable, alguno de los siguientes]
hi!!!!! you havent been writing for a long time. i began to worry) where have you been? you remember, youve asked a progy from me? ive finally found it, so here it is. check it out if this is what youve been looking for... bye ------------------------
hi, whats up? will you show up online today?
drop me a line in icq, ok? btw, im sending you the docs youve been looking for, find them attached. check them out, ok?
------------------------
hi!
im coming to you tomorrow, ok? when you are going to be home?
you remember, youve asked some docs. please find them attached. check and seewhats inside. thats it. bye, till tomorrow...
------------------------
hi!
you disappeared again. if you come online, drop me a line, ok?
btw, i sent you those docs that youve been looking for. check them out. bye!
------------------------
hi, give me a call just when you got the message! im tired of waiting. btw, im sending that program that youve been looking for. check it out. appears to be that one. bye! ------------------------
hi, whats up? if you have time tomorrow, please come over. after midday. by the way, dont forget to check the enclosed documents. bye. see you tomorrow. ------------------------
hi, i got a free day tomorrow, and im waiting for you. please come after midday. by the way, im sending you the documents that youve been asking for. read them out... bye!
------------------------
hi, how are you? what are your plans today? if you have time, please come over, and dont forget to check the program attached. bye!
------------------------
hi, whats you gonna do today? ill come over tonight! by the way, dont give anyone this funny program im sending. check it out. bye! ------------------------
hi, i found that program you asked for. find it attached. bye. ------------------------
hi, i saw you around today, but you didnt noticed me ( if youre gonna be at home, give a call, ok? by the way, check this file im sending. a very interesting program... ------------------------
whats up! you havent been writing for a long time
i got news. ive finally that program you needed
im sending it out. use it. bye!
------------------------
hi, drop me a line today, ok? and see the program im sending. bye!
------------------------
hi, drop me a line if you can. btw, i have a new icq. please dont forget to check the attached documents. bye. ------------------------
hi! how are you? drop me a line if you can. i found your documents and im emailing them to you. bye. ------------------------
archivo adjunto: [variable, cualquiera de los siguientes, con extensiones .zip o .exe ]
archive fotos private confidential secret images your_documents backup message file document readme passwords readme important new cool ----------------------------
cuando el gusano se ejecuta se copia a s? mismo dentro de:
windows \csrss.exe nota:
- windows representa la carpeta de instalaci?n de windows (ej. c:\windows, c:\winnt )
seguidamente crea un mutex de nombre numen#syscall@, el cual permite que solo una instancia del gusano se ejecute en memoria.
tambi?n modifica la siguiente entrada para ejecutarse en cada inicio del sistema:
hkey_local_machine\software\microsoft\windows nt\currentversion\image file execution options\explorer.exe
debugger= windows \ csrss.exe
adem?s intenta unirse dentro de los procesos del services.exe y svchost.exe
luego detiene la rutina de envi? masivo de e-mail si encuentra el valor 127.0.0.1 en la siguiente entrada del registro:
hkey_local_machine\system\currentcontrolset\services\tcpip\parameters\interface\[interfase clsid]\nameserver
seguidamente busca carpetas que en su nombre contengan uno de los siguientes nombres:
bear
source
shar
kazaa
morpheus
upload
donkey
download
htdocs
ftp
http
icq
lime
mule
pub
si una carpeta es encontrada, este se copia a si mismo utilizando los siguientes nombres de archivo y con una de las siguientes extensiones .scr, .exe o .pif
1001 sex and more.rtf 3d studio max 6 3dsmax acdsee 10 full adobe photoshop 10 full adobe premiere 10 ahead nero 8 altkins diet.doc american idol.doc arnold schwarzenegger.jpg best matrix screensaver new britney sex xxx.jpg britney spears and eminem porn.jpg britney spears blowjob.jpg britney spears cumshot.jpg britney spears fuck.jpg britney spears full album.mp3 britney spears porn.jpg britney spears sexy archive.doc britney spears song text archive.doc britney spears.jpg britney spears.mp3 clone dvd 6 cloning.doc cracks & warez archiv dark angels new dictionary english 2004 - france.doc divx 8.0 final doom 3 release 2 e-book archive2.rtf eminem blowjob.jpg eminem full album.mp3 eminem poster.jpg eminem sex xxx.jpg eminem sexy archive.doc eminem spears porn.jpg eminem.mp3 full album all.mp3 gimp 1.8 full with key harry potter 1-6 book.txt harry potter 5.mpg harry potter all e.book.doc harry potter and the sorcerers stone game harry potter e book.doc harry potter game harry potter.doc how to hack new.doc internet explorer 9 setup kazaa lite 4.0 new kazaa new keygen 4 all new learn programming 2004.doc lightwave 9 update magix video deluxe 5 beta matrix 3 .mpg microsoft office 2003 crack best microsoft winxp crack full ms service pack 6 norton antivirus 2005 beta nostradamus.doc opera 11 free osama bin laden.jpg osama bin laden.mpg partitionsmagic 10 beta porno screensaver britney rfc compilation.doc ringtones.doc ringtones.mp3 saddam hussein.jpg screensaver2 serials edition.txt smashing the stack full.rtf source code star office 9 taliban teen porn 15.jpg the sims 4 beta ulead keygen 2004 vista review.doc visual studio net crack all winamp 13 full with sources windows 2003 crack windows vista sourcecode.doc windows xp crack winxp ebook newest.doc xxx hardcore pics.jpg finalmente intenta conectarse a los siguientes sitios para enviar informaci?n y descargar archivos.
http://xeseretuo.com


Comparte este manual:


Comparte este manual por email con un amigo/a:

Tu nombre
Tu email
El nombre de tu amigo
El email de tu amigo