病毒名称:
I-Worm.Nooler
类别: 蠕虫病毒
病毒资料:
破坏方法:
这个蠕虫利用MAPI发送邮件。采用62.30.30.109作为邮件服务器。
1.拷贝自己到系统目录的Ollon.pif
2.修改win.ini和system.ini指向自己。
3.附件的名称是下列之一
\ollon.jpg
\me.jpg
\porn.scr
\kitty.jpg
\me and coca cola.jpg
\nude_me.jpg
\nude.jpg
\sexyme.jpg
\topless.jpg
\itsme.jpg
\blonie.jpg
\me_pic.jpg
\girl_69.jpg
\Sexy.jpg
\10star.jpg
\ollon.gif
\this is me.pif
\me.jpg.pif
\me.zip.pif
\topless.jpg.exe
\star69.jpg.pif
\sandra_85.jpg.pif
\beachpic.jpg.pif
\me topless.gif.pif
\closeup pussyshot.bmp.pif
\this is me.jpg.pif
\look at me.gif.pif
\me!!.bmp.pif
\hannah_82.jpg.pif
\hanna.gif.pif
\i like em.bmp.pif
\beach.jpg.pif
4.邮件标题参考:
re: me
have you seen this person?
re: sending pictures
dont give this picture to anyone else!!!!
you dont know me but..
Look at me
pics of me
vacetion pics :)
hey, want to se this?
here is the pic i promised to send
pic i promised
do you got balls enought to handle this
can you handle me?
aint i sexy?
do i look good?
so i took a pic just for you
I meant to send you this
look at this picture i took
病毒的清除法:
使用光华反病毒软件,彻底删除。
病毒演示:
病毒FAQ:
Windows下的PE病毒。
发现日期:
2003-9-22