ͻ

ݰݰݰݰݰݰ۰
ݰݰݰݰݰݰݰݰݰݰݰݰ۰
ݰݰݰݰݰݰݰݰݰݰݰݰ۰
ݰݰݰݰݰݰݰݰݰ
ݰݰݰݰݰݰݰݰݰ
ݰݰݰݰݰݰݰݰݰ
ݰݰݰݰݰݰݰݰݰݰݰ
ݰݰݰݰݰݰݰݰݰݰݰ
ݰݰݰݰݰݰݰݰ

  issue#2 apr.2002  

ͼ


  --< VBS.Freelink worm propaganation >--


  VBS.Freelink -  ⥢   ࠭  ஭
     ᢮ ⥫.   ࠭ १ IRC. 
   ᠭ  VBScript  㦤  Windows Scripting Host ⮡ ᯥ譮
  ࠧ. ⥫쭮  ࠦ    WSH (
   ࠢ ⥬ Win98/Me/2000).

  ----------------------------------------------------------------------------

  WSH ( Windows Scripting Host)  짮⥫  ணࠬ
  ᪠騥 ।⢥ 樮 ⥬  믮
  짮⥫᪨ .  ᠬ BAT 䠩   Ms-DOS.

  ----------------------------------------------------------------------------

  ࠭:

  VBS.Freelink   ⥢ .  ᯮ 堭 ࠭
   ஭   ᥬ .

    ᮮ饭  ⥬ 'Check this'  ⥫ ᮮ饭:
  'Have fun with this cool links'.   ᮮ饭 ਪ९ 䠩 LINKS.VBS
     ᮤন 䠭  .  ⫨稨  BubbleBoy  
  ॡ ᪠ 짮⥫ ਪ९񭭮 䠩.  ਪ९
  䠩 饭  뤠 ᮮ饭 ᫥饣 ᮤঠ:

  "This will add a shortcut to free XXX links on your desktop. Do you want to
  continue ?".

  । ⥬  뤠  ᮮ饭  뢠 (eng. drops) ஢
  ਯ  䠩  C:\Windows\ System\Rundll.vbs. ᫥ 祣  ⠢
   ॥ ⠪ ப:

  Hkey_Local_Machine\software\microsoft\windows\currentversion\run
  \rundll=rundll.vbs

   ࠧ  㤥 ⮬᪨ ᪠   ⥬.
  ᫨ 짮⥫ ⢥砥 栭   祣 ᮡ 
  砥, , ᫨     "yes" -  ᮧ
   ࠡ祬 ⮫  ⨯ "free xxx links".

  ⥬  ⠥ ᪮஢ ᥡ  ୥ ⠫  㯭
  ⥢ ᪮.   ᯮ ணࠬ Outlook Express 
  ᮢ ࠭.

  ᫥ ⮣   १㧨 ᢮ ,  뢠 ( 
  drops) 䠩 LINKS.VBS  ⥬ ⠫ (c:\windows).  RUNDLL.VBS
  ᪠  ஢ 稥 mIRC  PIRCH IRC ⮢.  砥
  ᫨   室, ᮧ 䠩 SCRIPT.INI (mIRC)  EVENTS.INI (PIRCH)
   뫠 ᢮  ⭨  ᯮ ᮡ⨥ (event) join.

    ᮡ⥩ ⮣  - ᫥ ࠢ ᢮   ஭
    㤠 ᥡ   "Sent Mail" ⠪ ࠧ 뢠 
  짮⥫ ᠬ 䠪 ࠢ.

  設⢮ ⨢ᮢ (Norton, mcafee) ⥪  .  
    ⨢  ᪠ VBS 䠩, ⠪   
    ப  ᤥ ⠪ ⮡  ஢﫨 VBS 䠩.

   ७  ⨢ (㯥訥 ணࠬ ਬ. ॢ稪) ᫨ 
    㤠 .  ० 祬 㯨  ᮡ⢥
  䥪樨     ࠬ ⥬   ()
  .

  ࠦ 䠩:

  c:\windows\links.vbs
  c:\windows\system\rundll.vbs
  : Hkey_Local_Machine\software\microsoft\windows\currentversion\run
  \rundll=rundll.vbs
  IRC ਯ-䠩.

   㤠   ⥬:

   regedit  ३ 
  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
  㤠 rundll=rundll.vbs
  㤠 䠩 c:\windows\links.vbs
  㤠 䠩 c:\windows\system\rundll.vbs
   regedit
  㤠   mIRC  PIRCH
  १㧨 設
  ஢ ⠫ 䠩 ᮧ ﭮ
       襬 Outlook Express    ᠬ ⮣
   ॢ ࠢ .  VBS/Freelink ⠪ ⥭ 

  VBS/Freelink, VBS.Freelinks, VBS.Freelink, Freelink/VBS

     Ankit Fadia <ankit@bol.net.in>
    ॢ  ᪮ Alchemist <holyshit@freemail.ru>

   --------------------------------------------------------------------------
                        :
   --------------------------------------------------------------------------
   1.)  ⥪  ᯮ짮 ନ ""  ""  ᨭ
   -㣠,    ᮢᥬ ४.
   2.) ॢ ⥪  祭  . 騥    ਣ
       䠩 hab06.zip  娢.



  --< ... >--