SoftwareTipsandTricks.com
Home Forums Windows 7 Security Tips
Forums

Windows 7
Windows Vista
Windows XP

Security Tips
Troubleshooting
Keyboard Shortcuts
Encyclopedia


Drivers

Internet Terms
Computer Terms

File Extensions (75)
File Extensions (15K+)

Startup Applications
Necessary Files
Useless Files
At Your Option Files
Dangerous Files
Browser Objects

DLL Files
SYS Files
INF Files
OCX Files
VXD Files

Virus Database
Virus Warnings

Easter Eggs
Tips and Tricks
Articles
Hot Downloads


Privacy Policy
Contact Us







  FirewallSvr.exe

Name FirewallSvr.exe

Description

W32.Netsky.Y@mm is a variant of W32.Netsky.X@mm that scans for the email addresses on all non-CD-ROM drives on an infected computer.
Also Known As: W32/Netsky.y@MM [McAfee], WORM_NETSKY.Y [Trend], Win32.Netsky.Y [Computer Associates], W32/Netsky-X [Sophos]

Copies itself as %Windir%\FirewallSvr.exe.
Adds the value: "FirewallSvr"="%Windir%\FirewallSvr.exe"
to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Listens on TCP port 82 for an attacker to send an executable file, and then run it.
If the system date is between April 28, 2004 and April 30, 2004,
the worm will attempt to perform Denial of Service (DoS) attack against the following Web sites: www.nibis.de; www.medinfo.ufl.edu; www.educa.ch

Then, the worm uses its own SMTP engine to send itself to the email addresses that it finds.
The email has the following characteristics:
From: (spoofed)

Subject: Delivery failure notice (ID-)

Message:
--- Mail Part Delivered ---
220 Welcome to
Mail type: multipart/related
--- text/html RFC 2504
MX [Mail Exchanger] mx.mt2.kl.
Exim Status OK.
message is available.

where may be one of:
New
Partial
External
Delivered

Attachment: www...session-.com

Manual removal:
Navigate to the key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
and delete the value: "FirewallSvr"="%Windir%\FirewallSvr.exe"


Still have a problem? Ask for help at our discussion forum.



Search Dangerous Files :
 

: : Recent posts at Forums : :

Free galleries

Callow Job

Public pictures

Stooday

Updated contrive page

Daily updated photo blog with intense men

Reminder

Порно фото галереи, более 500 тысяч фотограф&#

Блог с женскими секс-историями

Протестируй н

Лучшие сериал

Right-minded started fresh occupation

Cheap NFL Jerseys

Список 2017 лучши

Pictures from collective networks

Unshackle galleries

смотреть лучш

Recent install

casual dating site philippines

Callow Project

Callow Poke out

Stooday

Loose galleries

Daily gay photos usage

Free galleries

Лучшие докуме

Steve Alten - MEG, Books 1-5 (Meg, The Trench, Primal Waters, Hell's Aquarium, Nightstalkers) - eBooks [Isohunt.to]

Бизнес выгодн

Cheap Vintage Jerseys Sale

С двумя блочн




SoftwareTipsandTricks, All Rights Reserved.