Worm/P2P.Zevity.b
Worm/P2P.Zevity.b
病毒长度:1,731 字节
病毒类型:网络蠕虫
影响平台:Win9X/2000/XP/NT/Me
Worm/P2P.Zevity.b是VBS蠕虫通过KaZaA,KaZaA Lite,Bearshare,eDONKEY2000,Morpheus等文件共享软件利用网络进行传播。
传播过程及特征:
1.复制自身为:%Temp%\_uninst12.vbs
2.修改注册表:
添加键值:"Runfaststart" = "%Temp%\_uninst12.vbs"
到注册表:HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion
3.如果你的计算机系统时间为03/03/03,那么将会出现一个带OK按钮的信息提示框,内容为:
03/03/03 exception error. Please reboot.
4.在注册表:HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion下找到上述程序的定位文件夹。
5.复制自身为:
10 naked teens.jpg.vbs
15yteen<obscene language removed>.jpg.vbs
Ad-Aware6.tar.vbs
illegalsex.jpg.vbs
Kievgirl.jpg.vbs
Young russian teens.jpg.vbs
Bin Laden's Home.doc.vbs
Kamasutra2003.doc.vbs
Bush is crazy(and stupid).doc.vbs
How To Rip DVDs.txt.vbs
Eminem - I am your father.mp3.vbs
Anton - Schwul oder was.mp3.vbs
到下列文件夹:
%Program Files%Kazaa liteMy shared folder
%Program Files%KazaaMy shared folder
%Program Files%BearshareShared
%Program Files%Edonkey2000Incoming
%Program Files%mMorpheusMy shared folder