Free Web Site - Free Web Space and Site Hosting - Web Hosting - Internet Store and Ecommerce Solution Provider - High Speed Internet
Search the Web
Virus Alert : Mydoom ˹͹ÍÔ¹àµÍÃìµÑÇãËÁè MYDOOM ÃкҴ
ª×èÍ W32/Novarg.A Virus
¤é¹¾ºàÁ×èÍÇѹ·Õè 27 Á¡ÃÒ¤Á 2004
à¡ÃÔè¹¹Ó :
˹͹ÍÔ¹àµÍÃìà¹çµµÑǹÕé¨ÐṺÁҡѺÍÕàÁÅ â´ÂÁÕª×èÍÍÂÙèËÅÒª×èÍ´éÇ¡ѹ¤×Í W32/Novarg.A, W32/Shimg, or W32/Mydoom
â´Â¶éÒµÔ´äÇÃÑÊ˹͹µÑǹÕé ¨ÐÊÃé×Ò§»ÃеÙÅѺ áÅÐ ¨Ð·Ó¡ÒÃÊè§á¾ç¤à¡ç¨â¨ÁµÕàÇçºä«µì (DOS) à×Á×è͵ç¡ÑºÇѹàÇÅÒ·Õèä´é¡Ó˹´äÇé
à ÒÂÅÐàÍÕ´ :
à¨éÒäÇÃÑÊ˹͹ÍÔ¹àµÍÃìà¹çµ¨Ð·ÓÍÐäúéÒ§àÁ×è͵Դä»áÅéÇ
á¡éä¢ÃÔ¨ÕʵÃÕã¹ÇÔ¹â´ÇìãËéÊÒÁÒöÃѹµÑÇàͧàÁ×èͺٵà¤Ã×èͧ·ØÑ¡¤ÃÑé§
 à»Ô´¾ÍÃì· TCP 3127-3198 ÍӹǵèÍâ»Ãá¡ÃÁ ÃÕâÁ· (µÔ´µèÍà¤Ã×èͧÃÐÂÐÓÓä¡Å)
·ÓÊÓà¹ÒµÑÇàͧä»Âѧ C:\Program Files\KaZaA\My Shared Folder\ folder à¾×èÍãËéÊÒÁÒö´ÒÇâËÅ´ä´éâ´Â¼Ùéãªé¤¹Í×è¹
äÇÃÑʨÐÁÒ¾ÃéÍÁ¡ÑºÍÕàÁÅ´éÇ¢¹Ò´ 22,528 亵ì áÅÐä¿Åì·ÕèṺÁÒ¨ÐÊØèÁ¹ÒÁÊ¡ØÅäÁèÇèÒ¨Ðà»ç¹ .cmd, .pif, .scr, .exe,.bat áÅСçã¹ÃÙ» zip file
µÑÇÍÕàÁŨÐÁÕÅѡɳдѧ¹Õé
Subject: <ÊØèÁ>
From: <¶Ù¡»ÅÍÁá»Å§>
To: <ÍÕàÁżÙéÃѺ>
Body:
(Êèǹà¹×éÍàÃ×èͧÍÒ¨¨ÐºÃèشéÇ¢éͤÇÒÁ˹ÖèÕ§ã¹ÊÒÁ¹Õé.)
"The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment."
"The message contains Unicode characters and has been sent as a binary attachment."
"Mail transaction failed. Partial message is available."
ÇÔ¸Õ»éͧ¡Ñ¹áÅСӨѴ˹͹µÑǹÕé
ÍѾഷ°Ò¹¢éÍÁÙÅäÇÃÑÊÅèÒÊØ´
http://www.sarc.com/avcenter/venc/data/w32.novarg.a@mm.html
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL.R
http://us.mcafee.com/virusInfo/default.asp?id=mydoom
http://www.f-secure.com/v-descs/novarg.shtml
http://www.sophos.com/virusinfo/analyses/w32mydooma.html
http://www3.ca.com/virusinfo/virus.aspx?ID=38102
ÍÂèÒÃѹâ»Ãá¡ÃÁ·ÕèäÁèÃÙé¨Ñ¡
»Ô´¾ÍÃì· 3127-3198
¡Ó¨Ñ´äÇÃÑÊẺÍѵâ¹ÁѵÔ
http://www3.ca.com/Files/VirusInformationAndPrevention/clnshimg.zip
ÍѾഷÇÔ¹â´Çìà»ç¹àÇÍÃìªÑè¹ÅèÒÊØ´
IE 6.0 Service Pack 1
Windows 2000 Service Pack 4
Windows XP Service Pack 1a
´Ù¢éÍÁÙÅà¾ÔèÁàµÔÁ
http://thaicert.nectec.or.th/advisory/alert/mydoom.php
http://thaicert.nectec.or.th/paper/virus/zone.php
http://www.cert.org
â´Â Crazytop àÇçºÁÒÊàµÍÃì