病毒名称:
Worm.Bagz.b
类别： 蠕虫
病毒资料：
破坏方法：
一个用VC编写的蠕虫病毒。
病毒行为：
病毒运行后将搜索系统的存在的email地址，并向其发送带病毒的邮件进行传播。
邮件标题：
Re: User ID Update..
Fwd: Your Funds are Eligible for Withdrawal.
find a solution with this customer..
No Subject..
Re: Help Desk Registration..failure notice..
Fwd: PassWord...when should i call you?.
RE: Re: A question..Knowledge Base Article..Open Invoices...Returned mail:
see transcript for details...
building maintenance....
[Fwd: Broken link]..WinXP...troubles are back again.Questions...Order Approval.
.units available.progress news...
big announcements
Need help pls...
You have recieved an eCard!.What is this ????Deactivation Notice.Message recieved,
please confirm My funny stories.Cost Inquiry.
Re: payment.referrences.Webmail Invite..
RE: quote request.
邮件正文：
User
Hello,.Sorry, I forgot to attach the new contact information. .
Please view the attached (.pdf) contact sheet. .Sincerely,
User
Hello,. I resent this email as attachment because. it was previously
blocked by your email filters.. Please read the attachment and respond.Thanks,
User
Hello,. I was in a hurry and I forgot to attach an important . document.
Please see attached.. Best Regards,
User
Hello,. Your email was received..YOUR REPLY IS URGENT!.Please view the
attached text
file for instrUCtions..Regards
User
Hello,.Your email was sent in an INVALID format..To verify this email was sent
from you,
simply open the attached email (.eml) file.and click yes in the sender options box
Thank You,
User
Hello,.My PC crashed while I was sending that last email..I have re-attached the document
of yours that I discovered..Please read attached document and respond ASAP
..Sincerely,
User
Hello,.What version of windows you are using?.This last document I received
from you
came out weird..Please see the attached word file and resend the file to me..
Many thanks,.
User
***YOUR MESSAGE HAS BEEN RECOGNIZED AS SPAM***.
........
邮件附件名：
tutorial.doc.exe，doc.doc.exe，documents.doc.exe，atach.doc.exe，file.doc.exe
read.doc.exe，readme.doc.exe，contact.doc.exe，mail.doc.exe.....
病毒的清除法：
使用光华反病毒软件，彻底删除。
病毒演示：
病毒FAQ：
Windows下的PE病毒。
发现日期：
2004-10-9
