Internet Journal မွာေတြ႔လုိက္ရလုိ႔ပါ။ လြန္ခဲ့တဲ့ တစ္လေက်ာ္ထဲက Manual သတ္ဖူးပါတယ္။ ပထမတစ္ေခါက္က PC မွာပါ။ ေနာက္ႏွစ္လုံးလဲ PC မွာပဲ အလုပ္လုပ္ပုံေတြပဲ ကြာလာသလား ၾကာမွပုိဒုကၡေပးသလား မေျပာတတ္ပါ။ တစ္ခါနဲ႔တစ္ခါ ေတြ႔ရတာေတြ မတူေတာ့ပါဘူး။ Start Up မွာထည့္တာရယ္ svchost နာမည္ယူသုံးတာရယ္ Message ေလး ၁၀ ခု Desktop မွာ ဒါမွမဟုတ္ Pan Drive မွာေတြ႔ရတာရယ္ေတာ့ တူတူပါပဲ။ Pan မွာတစ္ႀကိမ္ေတြ႔ေတာ့ မအားတာနဲ႔ Ubuntu ကေန Delete လုပ္လုိက္ေတာ့ ေသေသခ်ာခ်ာ မၾကည့္လုိက္မိဘူး။ ေနာက္ေတြ႔ရတဲ့အခါမွာလဲ Message မေျပာင္းသြားပါဘူး။ ဒါေပမယ့္ ပထမအႀကိမ္ေတြထက္ ဆုိးဝါးစြာ အလုပ္လုပ္ပါတယ္။ Flashy ေတာင္မွ File ကုိ Hidden ေပးၿပီး သူက Filename ပဲယူထားတာပါ။ ဒီေကာင္ကေတာ့ Software ေတြ Shortcut ေတြကုိ Replace လုပ္ပစ္ၿပီး ေခၚရင္ Ring tone ပဲေပးပါတယ္။ စမ္းၾကည့္ေတာ့ Kaspersky နဲ႔ NOD32 က ပထမဆုံး Alert ေပးေပမယ့္ သူတုိ႔ကုိယ္တုိင္ Replace အလုပ္ခံလုိက္ရပါတယ္။ အခုထက္ထိ Definition မထြက္ေသးရင္ Home User ေတြ ေတာ္ေတာ္ ဒုကၡေရာက္ႏုိင္ပါတယ္။ ကၽြန္ေတာ္ကမသုံးတာၾကာတာရယ္ အပ်င္းႀကီးေနတာရယ္ ေၾကာင့္ မတင္ေပးျဖစ္ပါဘူး။ မနက္ျဖန္ေလာက္ အားတယ္ဆုိရင္ Path ပါထုတ္ေပးပါ့မယ္။ Services သမားေတြနဲ႕ Professional ေတြ Hacker ေတြ Definition အတြက္စမ္းသပ္လုိ႔ရေအာင္ Virus ပါ UPLOAD တင္ေပးထားပါတယ္။

http://www.mediafire.com/?nleoz9xjdne Password:friend4

Not for Virus Distribute

One_Miss_Call (Blood Window)

This Virus is can copy Virus &

Delete your programs and damage your PC.

 

Disable Task Manager

Disable Folder Option & Default Hidden

Disable Registry Manager

 

Virus Copy to

USB & Drive Root Directory – Autorun.inf | wnscntfy.exe

SYSTEM32/del.exe

SYSTEM32/dir.exe

SYSTEM32/Restore/svchost.exe

 

Add Registry to

 

No Folder Options

User Key [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]

System Key [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]

Value Name: NoFolderOptions

Data Type: REG_DWORD (DWORD Value)

Value Data: 1 (0 = show options, 1 = hide options)

 

Disable Task Manager

User Key [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
System Key [HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
Value Name: DisableTaskMgr
Data Type: REG_DWORD (DWORD Value)
Value Data : 1 (0 = default, 1 = disable Task Manager

 

Startup Run

System Key

[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunOnce]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServices]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServicesOnce]
[HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionWinlogonUserinit]

User Key

[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunOnce]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunServices]
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunServicesOnce]
[HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWindows]

Value Name: winomc

Data Type: REG_SZ (String Value)

Value Data: C:WindowsSystem32Restoresvchost.exe (C: = Windows Directory, can see %windir%)

 

Virus Info

Name : One_Miss_Call (Auto it v3 Script 3.2.10.0)

Copy Name : svchost.exe

Del.exe

Dir.exe

Wscntfy.exe

Size : 292 Kb

 

And many file, Folder or Executive file Name

%file%.exe

Sample : photoshop.exe size : 292 Kb

Nero.exe size : 292 Kb

MyDocument.exe size: 292 Kb

 

Creator Message (On Desktop 10 Message One_Missed_Call#1 to #10)

 

---

One_Miss_Call 4 help