病毒别名:
处理时间:
威胁级别:★★
中文名称:
病毒类型:蠕虫
影响系统:Win9x / WinNT
病毒行为:
这是一个通过irc传播蠕虫病毒。能关闭安全软件;自动拨打收费很高的热线电话,给用户带来经济损失。
1,释放下列文件:
'c:WindowsBlink 182.scr'
'c:WindowsCloud Strife.scr'
'c:WindowsRaZor.scr'
'c:WindowsKuasanagui.scr'
'c:Windows\%system%182.exe'
'c:WindowsHOKO.scr'
'c:WindowsErGrone.scr'
'c:WindowsJtag.scr'
'c:WindowsXpLOaD.scr'
'c:WindowsNERFIX.scr'
'c:WindowsNEMESIZZ.scr'
'c:WindowsTom.scr'
'c:WindowsMarc.scr'
'c:WindowsTravis.scr'
'c:WindowsBOX CAR RACER.scr'
'c:WindowsTake Off Youre Pants And Youre Jacket.scr'
'c:WindowsDamm You!.scr'
'c:WindowsENEMA.scr'
'c:WindowsDUDE RANCH.scr'
'c:WindowsCheshire Cat.scr'
'c:WindowsGuitar.scr'
'c:WindowsPunk Power!.scr'
'C:Program FilesKaZaAMy Shared FolderBlink 182.scr'
'C:Program FilesKaZaAMy Shared FolderBox Car Racer.scr'
'C:Program FilesKaZaAMy Shared FolderBlink 182 All Videos.exe'
等
2,建立批处理文件c:link.bat,c:autoexec.bat,设置为隐藏属性,关闭下列安全软件:
panda,
mcafee,
norton,
FZoneAlarm,
FBlackIce,
FTiny,
FSygate
等
3,自动尝试拨打下列地区的热线电话,打通后会扣除用户巨额话费:
哥伦比亚57 4 2652***
57 2 4396***
57 2 4306***
阿富汗 93 330 52 **
93 296 42 **
美国 1 787 7084***
1 787 7925***
1 787 2828***
墨西哥 52 932 135***
52 81 83353***
52 81 83475***
52 81 83333***
4,通过irc传播,自动向irc用户发送病毒本身和下列消息:
'It s alright / to tell me / what you think / about me '
'I won t try / to argue / or hold it / against you '
'I know that / you re leaving / you must have / your reasons '
'The season / is calling / and your pictures / are falling down'
'The steps that / I retrace / a sad look / on your face '
'I m losing / and failing / when I move / I m flailing now '
'And it s happened once again '
'I ll turn to a friend '
'Someone that understands '
等等