Results 1 to 4 of 4
Hybrid View
-
8th October 2008 14:13 #1
(...\system32\drivers\FmMgr. exe)WORM_SMALL.MDZ
, .

, :
This worm downloads updated copies of itself from the following URLs:
* http://{BLOCKED}.222.{BLOCKED}.187/~dsacom/33.exe
* http://{BLOCKED}.222.{BLOCKED}.187/~dsacom/c12345.jpg
It saves the updated copies of itself as %System%\drivers\FmMgr.exe and C:\8b4l8r9h1v9.exe, respectively.Last edited by Xfirebg; 8th October 2008 at 15:34.
-
8th October 2008 16:36 #2
-
8th October 2008 20:16 #3
-
9th October 2008 23:35 #4




Reply With Quote

R9 280,
7th May 2023, 21:28 in