¿¡ºê¸®Á¸¼Ò°³ | Á¦Ç°¼Ò°³ | °í°´¼¾ÅÍ | »çÀÌÆ®¸Ê | Home
°³ÀÎ°í°´ ¿©¼º°í°´ eº¸¾È¸¶ÄÏ À̺¥Æ®
°³ÀÎ°í°´±â¾÷°í°´
º¸¾ÈÁ¢¼Ó IDÀúÀå
AD ¹«·á·Î Ã¥¹Þ¾Æ°¡¼¼¿ä!


 ¸ñ·Ï |  À­±Û |  ¾Æ·§±Û  
W32/Bagle.P@mm
 ¹ÙÀÌ·¯½º Á¾·ù
Worm
 ½ÇÇàȯ°æ
Windows
 ¹ß°ßÀÏ
2004³â03¿ù18ÀÏ
 Á¦ÀÛÁö
ºÒºÐ¸í
 À§Çèµî±Þ
 È®»ê¹æ¹ý
 ¹ÙÀÌ·¯½º Å©±â
25,600 byte
 Ã·ºÎÆÄÀÏ
 ¸ÞÀÏÁ¦¸ñ
  RE: Text message ¿Ü ´Ù¼ö
 Áõ»ó¿ä¾à
  
 Ä¡·á¹æ¹ý

Åͺ¸¹é½ÅAi, Åͺ¸¹é½Å Online, Åͺ¸¹é½Å 2001 Á¦Ç°±ºÀ¸·Î Ä¡·á°¡´É.

Ä¡·á ÈÄ ±Ùº»ÀûÀÎ ÇØ°áÀ» À§ÇØ ´ÙÀ½ÀÇ À©µµ¿ìÁî º¸¾ÈÆÐÄ¡¸¦ ¼öÇà ÇϽñ⠹ٶø´Ï´Ù.


Internet Explorer ´©Àû º¸¾È ¾÷µ¥ÀÌÆ®(832894):MS04-004

http://www.microsoft.com/korea/technet/security/bulletin/MS04-004.asp


Åͺ¸¹é½Å Ai¸¦ »ç¿ëÇÏ½Ã°í ¾Æ¿ô·èÀ» »ç¿ëÇϽŠ´Ù¸é ¹Ýµå½Ã À̸ÞÀÏ °¨½Ã±â¸¦ ½ÇÇàÇϽñ⠹ٶø´Ï´Ù.


  
 
»ó¼¼¼³¸í
ÀÌ ¿úÀº À̸ÞÀÏÀ» ÅëÇÏ¿© ÀüÆĵǸç, ¹ÙÀÌ·¯½º¸¦ Æ÷ÇÔÇÑ À̸ÞÀÏÀº ¾Æ·¡¿Í °°Àº Á¦¸ñÀ¸·Î ÀüÆĵȴÙ.

[¸ÞÀÏ Á¦¸ñ]

Account notify
E-mail account disabling warning.
E-mail account security warning.
E-mail technical support message.
E-mail technical support warning.
E-mail warning
Email account utilization warning.
Email report
Encrypted document
Fax Message Received
Forum notify
Hidden message
Important notify
Important notify about your e-mail account.
Incoming message
Notify about using the e-mail account.
Notify about your e-mail account utilization.
Notify from e-mail technical support.
Pass - %s
Password - %s
Password: %s
Protected message
RE: Protected message
RE: Text message
Re: Document
Re: Hello
Re: Hi
Re: Incoming Fax
Re: Incoming Message
Re: Msg reply
Re: Thank you!
Re: Thanks :)
Re: Yahoo!
Request response
Site changes
Warning about your e-mail account.


[¸ÞÀÏ ³»¿ë]





(¿úÀÌ ¹ß¼ÛÇÑ ¸ÞÀÏÀÇ ¿¹)

1. ¸ÞÀÏ Á¦¸ñ: RE: Text message

º»¹® ³»¿ë: ºóÈ­¸é(HTML ·Î ±¸¼º)

÷ºÎÆÄÀÏ À̸§ : ºóÈ­¸é(HTML ·Î ±¸¼º)


2. ¸ÞÀÏ Á¦¸ñ: Fax Message Received

º»¹® ³»¿ë: ºóÈ­¸é(HTML ·Î ±¸¼º)

÷ºÎÆÄÀÏ À̸§ : ¾øÀ½


[Ư¡]

¿úÀÇ Æ¯Â¡À» °¡Áö°í ÀÖ´Â ´ÙÇü¼º ¹ÙÀÌ·¯½º·Î½á exe ÆÄÀÏÀ» °¨¿°½ÃŲ´Ù.
°¨¿°µÈ ÆÄÀÏÀÇ Å©±â´Â ÀÏÁ¤ÇÏÁö ¾ÊÀ¸¸ç ¾Ïȣȭ µÇÀÖ´Ù.(W32/Bagle.P ·Î Áø´Ü)

81¹ø Æ÷Æ®¸¦ ¿­¾î µÎ°í ip °¡ ÀÏÁ¤ÇÏÁö ¾ÊÀº °ÍÀ¸·Î º¸¾Æ °¨¿°µÈ ÄÄÇ»Å͸¦ ´Ù¿î·Îµå ¼­¹ö·Î ÀÌ¿ëÇÏ´Â °ÍÀ¸·Î º¸ÀδÙ.

°¨¿°µÈ ÄÄÇ»ÅÍÀÇ 81¹ø Æ÷Æ®¸¦ ÅëÇÏ¿© ÀÓÀÇÀÇ hta ÆÄÀÏÀ» ¹Þ¾Æ ½ÇÇà µÇ¸é q.vbs¸¦ »ý¼ºÇÏ°Ô µÈ´Ù.
ÀÌ ÆÄÀÏÀÌ ½ÇÇà µÇ¸é È®ÀåÀÚ°¡ jpeg(½ÇÇà ÆÄÀÏ) ¸¦ ³»·Á ¹Þ¾Æ SM.EXE ÆÄÀÏ·Î À̸§ÀÌ º¯°æµÇ ½ÇÇàµÈ´Ù.

´ÙÀ½°ú °°ÀÌ À©µµ¿ì ½Ã½ºÅÛ Æú´õ(win 2000, NT : c:\Wint\system32, win XP : c:\windows\system32) ¿¡ directs.exe(25,600 byte), directs.exeopen(26,088 byte) ÆÄÀÏÀ» »ý¼ºÇÑ´Ù.

±×¸®°í c:\winnt ¶Ç´Â c:\windows ¿¡ q.vbs(¾à 1kbyte)¸¦ »ý¼ºÇÑ´Ù.

¶ÇÇÑ, ´ÙÀ½Ã³·³ ·¹Áö½ºÆ®¸¦ ¼öÁ¤ÇÏ¿© ´ÙÀ½ ºÎÆýà ½ÇÇàµÇµµ·Ï Á¶ÀÛÇÑ´Ù.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Ç׸ñ¿¡

(win9xÀÇ °æ¿ì)
directs.exe = c:\windows\system\directs.exe

(win2000, NTÀÇ °æ¿ì)
directs.exe = c:\winnt\system32\directs.exe

(WinXPÀÇ °æ¿ì)
directs.exe = c:\windows\system32\directs.exe

¸¦ ±â·ÏÇÑ´Ù.

´ÙÀ½À¸·Î .HTM, .HTML,, .TXT, .WAB, .PHP, .XLS, XML, .MSG, .mbx, .mdx, .jsp, .eml, .cgi È®ÀåÀÚ¸¦ Áö´Ñ ÆÄÀÏ¿¡¼­ ¸ÞÀÏ ÁÖ¼Ò¸¦ ¼öÁýÇÏ¿© Áöü SMTP¸¦ ÀÌ¿ëÇÏ¿© ¿úÀÌ Ã·ºÎµÈ ¸ÞÀÏÀ» ¹ß¼ÛÇÏÁö¸¸ ´ÙÀ½ µµ¸ÞÀÎÀ¸·Î´Â °¨¿°µÈ ¸ÞÀÏÀÌ ¹ß¼ÛµÇÁö ¾Ê´Â´Ù.

@avp.
@hotmail.com
@iana
@messagelab
@microsoft
abuse
admin
anyone@
bugs@
cafee
certific
contract@
f-secur
feste
free-av
gold-certs@
google
help@
icrosoft
info@
linux
listserv
local
nobody@
noone@
noreply
ntivi
panda
postmaster@
rating@
root@
samples
sopho
support
winrar
winzip


P2P °øÀ¯ ÇÁ·Î±×·¥À» »ç¿ëÇÒ¶§ ¹ÙÀÌ·¯½º¸¦ À¯Æ÷Çϱâ À§ÇØ shar ¸¦ Æ÷ÇÔÇÑ Æú´õ¿¡ ´ÙÀ½°ú °°Àº ÆÄÀÏÀ» »ý¼ºÇÒ ¼ö ÀÖ´Ù.

ACDSee 9.exe
Adobe Photoshop 9 full.exe
Ahead Nero 7.exe
Matrix 3 Revolution English Subtitles.exe
Microsoft Office 2003 Crack, Working!.exe
Microsoft Office XP working Crack, Keygen.exe
Microsoft Windows XP, WinXP Crack, working Keygen.exe
Opera 8 New!.exe
Porno Screensaver.scr
Porno pics arhive, xxx.exe
Porno, sex, oral, anal cool, awesome!!.exe
Serials.txt.exe
WinAmp 5 Pro Keygen Crack Update.exe
WinAmp 6 New!.exe
Windown Longhorn Beta Leak.exe
Windows Sourcecode update.doc.exe
XXX hardcore images.exe

±×¸®°í netsky ¿úÀÌ »ý¼ºÇÑ ´ÙÀ½°ú °°Àº ·¹Áö½ºÆ®¸® Å°¸¦ »èÁ¦ ÇÑ´Ù.

9XHtProtect
Antivirus
HtProtect
ICQ Net
ICQNet
My AV
Special Firewall Service
Tiny AV
Zone Labs Client Ex
service


¶ÇÇÑ ÀÏ ºÎ º¸¾È °ü·Ã ÇÁ·Î¼¼½º¸¦ Á¾·á ÇÏ¸ç ¸¶Áö¸·À¸·Î TCP 2556 , 81 Æ÷Æ®¸¦ ¿­¾îµÎ¸ç´Âµ¥ ½ÇÁ¦ 81¹ø Æ÷Æ®¸¦ ÀÌ¿ëÇÏ¿© ¿ÀÇÂµÈ ¸ÞÀÏ¿¡¼­´Â ÇØ´ç Æ÷Æ®·Î °¨¿°µÈ ¿úÀ» ³»·Á ¹Þ°Ô µÈ´Ù.

 
¿¹¹æ ¹× ¼öµ¿Á¶Ä¡¹æ¹ý
¹«´ÜÀüÀç¤ý¹èÆ÷±ÝÁö
¿¡ºê¸®Á¸¿¡¼­ Á¦°øÇÏ´Â ¸ðµç ÄÁÅÙÃ÷ Á¤º¸¿¡ ´ëÇÑ ÀúÀÛ±ÇÀº ¿¡ºê¸®Á¸ÀÇ ¼ÒÀ¯ÀÌ¸ç °ü·Ã¹ýÀÇ º¸È£¸¦ ¹Þ½À´Ï´Ù.
¿¡ºê¸®Á¸ÀÇ »çÀü Çã°¡ ¾øÀÌ ¿¡ºê¸®Á¸ ÄÁÅÙÃ÷¸¦ ¹«´ÜÀ¸·Î ÀüÀç, ¹èÆ÷¸¦ ±ÝÁöµÇ¾î ÀÖ½À´Ï´Ù.
À̸¦ À§¹ÝÇÏ´Â °æ¿ì ¼ÕÇعè»óÀÇ ´ë»ó ¶Ç´Â ¹Î.Çü»ç»óÀÇ ¹ýÀû ¼Ò¼Û ´ë»óÀÌ µÉ ¼ö ÀÖ½À´Ï´Ù.
                                                                 * ¿¡ºê¸®Á¸ Á¤º¸ ÀÌ¿ë ¹®ÀÇ : greenking@everyzone.com
 ¸ñ·Ï