Флудилка Лолодинчега
-
bottle of wine, 4 shots of malibu, stopped counting beers after the second day
still going
uh, mine is bigger.
-
Прист выше.
-
watched Yes Man
in a theater
fucking EPICthen drank more beers than priest
and pissed it all out on the third ring of hell -
watched Valkyrie in a theatre.
not bad.
wednesday gonna be awesome. -
can i come?
-
im going away to som1's house outside of town.
or some shit.
im not sure wtf is it gonna be yet. -
эээ, я вот не фтыкну
это вирус или нет?Crimson One (12/28/2008 9:47 AM):
цени моё фото))) вконтакте не влезает(
<!-- m --><a class="postlink" href="http://gamechamp.ru/foto015.gif">http://gamechamp.ru/foto015.gif</a><!-- m -->Crimson One (12/29/2008 8:26 AM):
цени моё фото))) вконтакте не влезает(
<!-- m --><a class="postlink" href="http://dmesto.com/foto015.gif">http://dmesto.com/foto015.gif</a><!-- m --> -
W32/Rungbu-C is a companion virus for the Windows platform.
W32/Rungbu-C infects Microsoft Word DOC files by copying itself to the same filename but with an SCR extension, appending the DOC file to the SCR copy, and then hiding the original DOC file.
W32/Rungbu-C then sets the computer not to show hidden files (in order to hide the DOC file), to give SCR files a Word icon (so the SCR file looks like a Word file), and to hide file extensions (so the SCR file just displays the filename, not the SCR extension). When the SCR file is run, the Word document is displayed as normal.
When W32/Rungbu-C is installed the following files are created:
<Current folder><Original filename>.doc
<Current folder><Original filename>`.!!!
<Temp>\Flu Burung.txt
<Program Files>\Microsoft Office\Office\docicon.exe
C:\Recycled\ctfmon.exe
C:\Recycled\smss.exe
C:\Recycled\spoolsv.exe
C:\Recycled\svchost.exeThe EXE files are all detected as W32/Rungbu-C. All the other files are not malicious and can be deleted.
The following registry entries are changed to run W32/Rungbu-C on startup:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell
Explorer.exe "C:\recycled\SVCHOST.exe"(the default value for this registry entry is "Explorer.exe" which causes the Microsoft file <Windows>\Explorer.exe to be run on startup).
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit
C:\recycled\SVCHOST.exe,(the default value for this registry entry is "<Windows>\System32\userinit.exe,").
The following registry entries are set in order to hide file extensions:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HideFileExt
1HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Folder\HideFileExt
UncheckedValue
1The following registry entries are set in order to not show hidden files:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
ShowSuperHidden
0HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Folder\SuperHidden
UncheckedValue
0The following registry entries are set in order to change the default icon for Microsoft Word documents
HKCR\Word.Document.8\DefaultIcon
(default)
<Program Files>\Microsoft Office\Office\docicon.exe(the default value for this registry entry is "<Program Files>\Microsoft Office\Office\Winword.exe,1")
Registry entries are modified under HKCR\scrfile, including the following:
HKCR\scrfile
(default)
Microsoft Word Document
(the default value for this registry entry is "Screen Saver")HKCR\scrfile\shell\open
(default)
""
(the default value for this registry entry is: "T&est")W32/Rungbu-C deletes the following registry entries:
HKCR\scrfile\shell\config
(default)
"C&onfigure"HKCR\scrfile\shell\config\command
(default)
""%1""HKCR\scrfile\shell\install
(default)
"&Install"HKCR\scrfile\shell\install\command
(default)
"rundll32.exe desk.cpl,InstallScreenSaver %l" -
- shit in ur mom's mouth for 50p
the act of excreting bodily waste into somebody's mother's mouth for the amount of 50p or half a pound, or even half a dollar if u are american.
person 1: dude, ur mom is dead!
person 2: oh yeah? well i shit in ur mom's mouth, for 50p. Half a pound! or 'dollar' if u are american
person 1 and 2: hahahahhahahahhaha -
угадайте што
-
Illidan
Плохой вирус.
Упс, ***ню сморозил.То, что у тебя на рисунке не очень-то наглядно.
Но я подозреваю, что это хитровы****ная органическая молекула.
Зеленый - углерод
Белый - водород
Синий - кислород
Красный - азот -
нефигово так отметил.
-
я лучше
как отметил?
топчан, это экстази
за попытку 5 -
@"Illidan":
угадайте штокислота
-
омг
омг омг
омомомгг?
-
имхо 33374 покупали бы чаще будь у неё больше сисег
-
-
lol, hardcore teens
-
До, магазинчик хороший. Там и мужских шмоток есть несколько неплохих вполне.
Тока доставляют сукадолго. До россии - ~2 месяца. -
@"Illidan":
я лучшекак отметил?
топчан, это экстази
за попытку 5ездили в хамилтон, оттуда на ниагару