¿¡ºê¸®Á¸¼Ò°³ | Á¦Ç°¼Ò°³ | °í°´¼¾ÅÍ | »çÀÌÆ®¸Ê | Home
°³ÀÎ°í°´ ¿©¼º°í°´ eº¸¾È¸¶ÄÏ À̺¥Æ®
°³ÀÎ°í°´±â¾÷°í°´
º¸¾ÈÁ¢¼Ó IDÀúÀå
AD ¹«·á·Î Ã¥¹Þ¾Æ°¡¼¼¿ä!


 ¸ñ·Ï |  À­±Û |  ¾Æ·§±Û  
W32/Balge.21696@mm
 ¹ÙÀÌ·¯½º Á¾·ù
Worm
 ½ÇÇàȯ°æ
Windows
 ¹ß°ßÀÏ
2005³â08¿ù04ÀÏ
 Á¦ÀÛÁö
ºÒºÐ¸í
 À§Çèµî±Þ
º¸Åë
 È®»ê¹æ¹ý
³×Æ®¿öÅ© °øÀ¯Æú´õ, À̸ÞÀÏ
 ¹ÙÀÌ·¯½º Å©±â
21,969 Byte
 Ã·ºÎÆÄÀÏ
Details.zip ¿Ü ´Ù¼ö
 ¸ÞÀÏÁ¦¸ñ
  Incoming message ¿Ü ´Ù¼ö
 Áõ»ó¿ä¾à
  ·¹Áö½ºÆ®¸® º¯°æ, ¸ÞÀϹ߼Û, ÇÁ·Î¼¼½º Á¾·á, ƯÁ¤¼­¹ö Á¢¼Ó, ÆÄÀÏ »ý¼º
 Ä¡·á¹æ¹ý

Åͺ¸¹é½Å Á¦Ç°±ºÀ¸·Î Áø´Ü/Ä¡·á °¡´ÉÇÕ´Ï´Ù.



  
 
»ó¼¼¼³¸í
ÀÌ ¿úÀº À̸ÞÀÏÀ» ÅëÇÏ¿© ÀüÆĵǸç,

°¨¿°µÈ ¸ÞÀÏ¹ß¼Û Æ¯Á¤ ¼­¹ö·ÎÀÇ ¿¬°áÀ» ½Ãµµ ÇÑ´Ù.


[¸ÞÀÏ Á¦¸ñ]

´ÙÀ½ Áß¿¡¼­ ¼±ÅõȴÙ.

Changes..
Encrypted document
Fax Message
Forum notify
Incoming message
Notification
Pass - {Random characters}
Password - {Random characters}
Password: {Random characters}
Protected message
RE: Incoming Msg
RE: Message Notify
RE: Protected message
RE: Text message
Re:
Re: Document
Re: Hello
Re: Hi
Re: Incoming Message
Re: Msg reply
Re: Thank you!
Re: Thanks :)
Re: Yahoo!
Site changes
Update


[¸ÞÀÏ ³»¿ë]

Archive password: À̹ÌÁö
Attach tells everything.
Attached file is protected with the password for security reasons. Password is À̹ÌÁö
Attached file tells everything.
Check attached file for details.
Check attached file.
For security purposes the attached file is password protected. Password -- À̹ÌÁö
For security reasons attached file is password protected. The password is À̹ÌÁö
Here is the file.
In order to read the attach you have to use the following password: À̹ÌÁö
Message is in attach
More info is in attach
Note: Use password À̹ÌÁö to open archive.
Password - À̹ÌÁö
Password: À̹ÌÁö
Pay attention at the attach.
Please, have a look at the attached file.
Please, read the document.
Read the attach.
See attach.
See the attached file for details.
Try this.
Your document is attached.
Your file is attached.

[÷ºÎÆÄÀÏ]

ÆÄÀÏ À̸§ Àº ´ÙÀ½ ¸®½ºÆ®¿¡¼­ ¼±Åà µÈ´Ù.

Details
Document
Info
Information
Message
MoreInfo
Readme
Sources
text_document
Updates

È®ÀåÀÚ´Â ´ÙÀ½ µÎ°¡ÁöÁß¿¡¼­ ¼±Åà µÈ´Ù.
EXE
ZIP

[Ư¡]

¿úÀÌ ½ÇÇàµÇ¸é ´ÙÀ½°ú °°ÀÌ À©µµ¿ì ½Ã½ºÅÛ Æú´õ(win 2000, NT : c:\Wint\system32, win XP : c:\windows\system32)
¿¡ Winhost.exe(21,969 Byte) ÆÄÀÏÀ» »ý¼ºÇÑ´Ù.

¶ÇÇÑ, ´ÙÀ½Ã³·³ ·¹Áö½ºÆ®¸¦ ¼öÁ¤ÇÏ¿© ´ÙÀ½ ºÎÆýà ½ÇÇàµÇµµ·Ï Á¶ÀÛÇÑ´Ù.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
Ç׸ñ¿¡

(windows 9x)
"winhost.exe" = "c:\windows\system\Winhost.exe"

(windows xp)
"winhost.exe" = "c:\windows\system32\Winhost.exe"


(windows 2000, NT)
"winhost.exe" = "c:\winnt\system32\Winhost.exe"

À» »ý¼ºÇÑ´Ù.

±×¸®°í ´ÙÀ½Ã³·³ ·¹Áö½ºÆ®¸® Å°¸¦ »ý¼ºÇÑ´Ù.

HKEY_CURRENT_USER\Software\Timeout
Uid = "·£´ý°ª"
Port = "dword:00002346"
Pid = "·£´ý°ª"

À̸ÞÀÏ ÁÖ¼Ò´Â ´ÙÀ½ È®ÀåÀÚ¸¦ °¡Áø ÆÄÀÏ¿¡¼­ ÃßÃâ ÇÑ´Ù.

adb
asp
cfg
cgi
dbx
dhtm
eml
htm
html
jsp
mbx
mdx
mht
mmf
msg
nch
ods
oft
php
pl
sht
shtm
stm
tbb
txt
uin
wab
wsh
xls
xml


´ÙÀ½ ¹®ÀÚ¿­À» Æ÷ÇÔÇÑ ¸ÞÀÏÁּҷδ °¨¿°µÈ ¸ÞÀÏÀ» º¸³»Áö ¾Ê´Â´Ù.

@avp.
@foo
@iana
@messagelab
@microsoft
@msn
abuse
admin
anyone@
bsd
bugs@
cafee
certific
contract@
f-secur
feste
free-av
gold-certs@
google
help@
icrosoft
info@
kasp
linux
listserv
local
news
nobody@
noone@
noreply
norton
ntivi
panda
pgp
postmaster@
rating@
root@
samples
sopho
spam
support
unix
update
virus
winrar
winzip

³×Æ®¿÷ °øÀ¯ Æú´õ¸¦ ÅëÇØ ÀüÆÄµÉ ¶§´Â °øÀ¯ Æú´õ¿¡ ´ÙÀ½°ú °°Àº À̸§ÀÇ
¿ú ÆÄÀÏÀ» »ý¼ºÇÑ´Ù.

ƯÈ÷ "°ø¹é" À» °¡Áø ÆÄÀÏÀº ½ÇÁ¦·Î txt, doc µîÀÇ ¹®¼­ ÆÄÀÏ·Î º¸À̳ª
½ÇÇà ÆÄÀÏÀ» À§Àå ÇÏ°í ÀÖ´Ù.

Ahead Nero 7.exe
hardcore arhive.exe
important.exe
important update.exe
install.exe
Kaspersky Antivirus5.0
message.msg°ø¹é.exe
Microsoft Office 2003 Crack, Working!.exe
Microsoft Office XP workingCrack, Keygen.exe
Microsoft Windows XP, WinXP Crack, working Keygen.exe
New document.doc°ø¹é.exe
New patch.exe
patch.exe
Porno, sex, oral, anal cool, awesome!!.exe
Porno pics arhive, xxx.exe
Porno Screensaver.scr
Serials.txt°ø¹é.exe
setup.exe
text.txt°ø¹é.exe
update.exe
WinAmp 6 New!.exe
Windown Longhorn Beta Leak.exe
Windows Sourcecode update.doc
XXX hardcore images.exe

ÀϺΠ¾ÈƼ ¹ÙÀÌ·¯½º °è¿­ÀÇ ÇÁ·Î¼¼½º¸¦ È®ÀÎÇÏ¿© ÇÁ·Î±×·¥À» Á¾·á ½ÃŲ´Ù.
 
¿¹¹æ ¹× ¼öµ¿Á¶Ä¡¹æ¹ý
¹«´ÜÀüÀç¤ý¹èÆ÷±ÝÁö
¿¡ºê¸®Á¸¿¡¼­ Á¦°øÇÏ´Â ¸ðµç ÄÁÅÙÃ÷ Á¤º¸¿¡ ´ëÇÑ ÀúÀÛ±ÇÀº ¿¡ºê¸®Á¸ÀÇ ¼ÒÀ¯ÀÌ¸ç °ü·Ã¹ýÀÇ º¸È£¸¦ ¹Þ½À´Ï´Ù.
¿¡ºê¸®Á¸ÀÇ »çÀü Çã°¡ ¾øÀÌ ¿¡ºê¸®Á¸ ÄÁÅÙÃ÷¸¦ ¹«´ÜÀ¸·Î ÀüÀç, ¹èÆ÷¸¦ ±ÝÁöµÇ¾î ÀÖ½À´Ï´Ù.
À̸¦ À§¹ÝÇÏ´Â °æ¿ì ¼ÕÇعè»óÀÇ ´ë»ó ¶Ç´Â ¹Î.Çü»ç»óÀÇ ¹ýÀû ¼Ò¼Û ´ë»óÀÌ µÉ ¼ö ÀÖ½À´Ï´Ù.
                                                                 * ¿¡ºê¸®Á¸ Á¤º¸ ÀÌ¿ë ¹®ÀÇ : greenking@everyzone.com
 ¸ñ·Ï