I-Worm.Win32.Rivon.a

王朝system·作者佚名  2008-05-31
窄屏简体版  字體: |||超大  

病毒名称:

I-Worm.Win32.Rivon.a

类别: 蠕虫病毒

病毒资料:

破坏方法:

这是一个Visual Basic写的通过邮件传播的蠕虫病毒

该病毒:在系统的多个目录下复制自己,比如:

C:\Program Files\KaZaA Lite\My Shared Folder\Dr_Divix.exe

C:\Program Files\Morpheus\My Shared Folder\Dr_Divix.exe

C:\Program Files\Grokster\My Grokster\Dr_Divix.exe

C:\Program Files\Edonkey2000\Incoming\Dr_Divix.exe

C:\Program Files\eMule\Incoming\Dr_Divix.exe

C:\Program Files\limewire\Shared\Dr_Divix.exe

C:\Program Files\ICQ\shared files\Dr_Divix.exe

C:\Program Files\KMD\My Shared Folder

\WinRAR 3.40 Final.exe

等等

终止窗口名称包含下列字眼的进程:

Norton

AVP

AVP Monitor

Sygate Personal Firewall Pro

NOD32 Antivirus Program - [My Profile]

NOD32 Control Center

eTrust Antivirus - Local Scanner

My Computer

Registry Monitor

KASPersky Anti-Virus Monitor

HijackThis

Anti-Virus

BlackICE

BitDefender Sheild

BitDefender

My Documents

Process EXPlorer-Sysinternals: www.sysinternals.com

System Restore

Registry Monitor-Sysinternals: www.sysinternals.com

Norton AntiVirus Porfessional

Windows Security Center

Windows Firewall

Control Panel

等等...

发送邮件传播,邮件包含如下内容:

Microsoft have relase SP2, run the attechment and it will download SP2 To you

Save the file on your disk!

I send to you the test Sophos AV.

In the attechment we send you the new version of NOD32 Patch

If you have (or if you think) that you have on your PC undetected virus/worm

then run the progi in the attechment.

Microsofts SP2

Test The New Sophos Anti-Virus

修改系统的许多配置,导致无法正常操作,比如:禁止使用注册表工具、控制面板,禁止任务管理器等等。

病毒的清除法:

使用光华反病毒软件,彻底删除。

病毒演示:

病毒FAQ:

Windows下的PE病毒。

发现日期:

2004-12-27

 
 
 
免责声明:本文为网络用户发布,其观点仅代表作者个人观点,与本站无关,本站仅提供信息存储服务。文中陈述内容未经本站证实,其真实性、完整性、及时性本站不作任何保证或承诺,请读者仅作参考,并请自行核实相关内容。
 
 
© 2005- 王朝網路 版權所有 導航