Trojan/Harnig.o
Trojan/Harnig.o
病毒长度:7,170 字节
病毒类型:木马
危害等级:**
影响平台:Win9X/2000/XP/NT/Me/2003
Trojan/Harnig.o利用自带的SMTP引擎发送自身到从Windows地址簿里发现的所有有效邮件地址,邮件主题为"MESSAGE_ID:" 附件为"photos.exe."
传播过程及特征:
1.从Windows地址簿里搜索有效的邮件地址。
2.利用自带的SMTP引擎发送自身到上述地址。
邮件特征:
发件人:ballfruit@mail.ru
主题:MESSAGE_ID:<zzz>
附件:photos.exe
正文:
Hello, I'm sorry about last night. I was acting
stubborn and impatient and I regret it. Sometimes
I say things without thinking and it comes out
wrong. I never mean to hurt you, I hope you know
that. There's one thing you should know about
me- It's always beenballfruit@mail.ru
3.从特定的网站下载并运行一个盗取密码的文件。