Worm.Netsky.cz

  病毒名稱(中文):
  
  病毒別名:
  
  
  威脅級別:
  ★☆☆☆☆
  病毒類型:
  蠕蟲病毒
  病毒長度:
  53628
  影響系統:
  Win9xWinMeWinNTWin2000WinXPWin2003
  
  病毒行爲:
  這是一個通過郵件傳播的蠕蟲病毒,該病毒會嘗試搜索被感染機器上所以的郵件地址
  然後把病毒本身發送出去。
  1.病毒把自己本是拷貝一份放到P2P軟件的共享區,並且以下面隨機一個名字命名:
  1001Sexandmore.rtf.exe
  3DStudioMax63dsmax.exe
  ACDSee10.exe
  AdobePhotoshop10crack.exe
  AdobePhotoshop10full.exe
  AdobePremiere10.exe
  AheadNero8.exe
  AltkinsDiet.doc.exe
  AmericanIdol.doc.exe
  ArnoldSchwarzenegger.jpg.exe
  BestMatrixScreensavernew.scr
  Britneysexxxx.jpg.exe
  BritneySpearsandEminemporn.jpg.exe
  BritneySpearsblowjob.jpg.exe
  BritneySpearscumshot.jpg.exe
  BritneySpearsfuck.jpg.exe
  BritneySpearsfullalbum.mp3.exe
  BritneySpearsporn.jpg.exe
  BritneySpearsSexyarchive.doc.exe
  BritneySpearsSongtextarchive.doc.exe
  BritneySpears.jpg.exe
  BritneySpears.mp3.exe
  CloneDVD6.exe
  Cloning.doc.exe
  Cracks&WarezArchiv.exe
  DarkAngelsnew.pif
  DictionaryEnglish2004-France.doc.exe
  DivX8.0final.exe
  Doom3release2.exe
  E-BookArchive2.rtf.exe
  Eminemblowjob.jpg.exe
  Eminemfullalbum.mp3.exe
  EminemPoster.jpg.exe
  Eminemsexxxx.jpg.exe
  EminemSexyarchive.doc.exe
  EminemSongtextarchive.doc.exe
  EminemSpearsporn.jpg.exe
  Eminem.mp3.exe
  Fullalbumall.mp3.pif
  Gimp1.8FullwithKey.exe
  HarryPotter1-6book.txt.exe
  HarryPotter5.mpg.exe
  HarryPotteralle.book.doc.exe
  HarryPotterebook.doc.exe
  HarryPottergame.exe
  HarryPotter.doc.exe
  Howtohacknew.doc.exe
  InternetExplorer9setup.exe
  KazaaLite4.0new.exe
  Kazaanew.exe
  Keygen4allnew.exe
  LearnProgramming2004.doc.exe
  Lightwave9Update.exe
  MagixVideoDeluxe5beta.exe
  Matrix.mpg.exe
  MicrosoftOffice2003Crackbest.exe
  MicrosoftWinXPCrackfull.exe
  MSServicePack6.exe
  netskysourcecode.scr
  NortonAntivirus2005beta.exe
  Opera11.exe
  Partitionsmagic10beta.exe
  PornoScreensaverbritney.scr
  RFCcompilation.doc.exe
  Ringtones.doc.exe
  Ringtones.mp3.exe
  SaddamHussein.jpg.exe
  Screensaver2.scr
  Serialsedition.txt.exe
  Smashingthestackfull.rtf.exe
  StarOffice9.exe
  TeenPorn15.jpg.pif
  TheSims4beta.exe
  UleadKeygen2004.exe
  VisualStudioNetCrackall.exe
  WinLonghornre.exe
  WinAmp13full.exe
  Windows2000Sourcecode.doc.exe
  Windows2003crack.exe
  WindowsXPcrack.exe
  WinXPeBooknewest.doc.exe
  XXXhardcorepics.jpg.exe
  2.搜索以下文件來獲取郵件地址:
  HTM,
  HTML,
  EML,
  TXT,
  PHP,
  ASP,
  VBS,
  RTF,
  UIN,
  SHTM,
  CGI,
  DHTM,
  ADB,
  TBB,
  DBX,
  SHT,
  OFT,
  MSG,
  JSP,
  WSH,
  XML
  3.發送郵件的主體爲以下任意一個:
  Re:Re:
  Re:EncryptedMail
  Re:ExtendedMail
  Re:Status
  Re:Notify
  Re:SMTPServer
  Re:MailServer
  Re:DeliveryServer
  Re:BadRequest
  Re:Failure
  Re:Thankyoufordelivery
  Re:Test
  Re:Administration
  Re:MessageError
  Re:Error
  Re:ExtendedMailSystem
  Re:SecureSMTPMessage
  Re:ProtectedMailRequest
  Re:ProtectedMailSystem
  Re:ProtectedMailDelivery
  Re:Securedelivery
  Re:DeliveryProtection
  Re:MailAuthentification
  郵件內容以下任意一個:
  Pleaseconfirmmyrequest.
  ESMTP[SecureMailSystem#334]:Securemessageisattached.
  Partialmessageisavailable.
  WaitingforaResponse.Pleasereadtheattachment.
  Firstpartofthesecuremailisavailable.
  Formoredetailsseetheattachment.
  Forfurtherdetailsseetheattachment.
  Yourrequestedmailhasbeenattached.
  ProtectedMailSystemTest.
  SecureMailSystemBetaTest.
  Forwardedmessageisavailable.
  Deliveredmessageisattached.
  Encryptedmessageisavailable.
  Pleasereadtheattachmenttogetthemessage.
  Followtheinstructionstoreadthemessage.
  Pleaseauthenticatethesecuremessage.
  Protectedmessageisattached.
  Waitingforauthentification.
  Protectedmessageisavailable.
  BadGateway:Themessagehasbeenattached.
  SMTP:Pleaseconfirmtheattachedmessage.
  Yougotanewmessage.
  Nowanewmessageisavailable.
  Newmessageisavailable.
  Youhavereceivedanextendedmessage.Pleasereadtheinstructions.
  附件描述以下任意一個:
  Yourdetails.
  Yourdocument.
  Ihavereceivedyourdocument.Thecorrecteddocumentisattached.
  Ihaveattachedyourdocument.
  Yourdocumentisattachedtothismail.
  Authenticationrequired.
  Requestedfile.
  Seethefile.
  Pleasereadtheimportantdocument.
  Pleaseconfirmthedocument.
  Yourfileisattached.
  Pleasereadthedocument.
  Yourdocumentisattached.
  Pleasereadtheattachedfile!
  Pleaseseetheattachedfilefordetails.
  +++Attachment:NoVirusfound
  +++MessageLabsAntiVirus-www.messagelabs.com
  +++Attachment:NoVirusfound
  +++BitdefenderAntiVirus-www.bitdefender.com
  +++Attachment:NoVirusfound
  +++MC-AfeeAntiVirus-www.mcafee.com
  +++Attachment:NoVirusfound
  +++KasperskyAntiVirus-www.kaspersky.com
  +++Attachment:NoVirusfound
  +++PandaAntiVirus-www.pandasoftware.com
  ++++Attachment:NoVirusfound
  ++++NormanAntiVirus-www.norman.com
  ++++Attachment:NoVirusfound
  ++++F-SecureAntiVirus-www.f-secure.com
  ++++Attachment:NoVirusfound
  ++++NortonAntiVirus-www.symantec.de
  附件名稱以下任意一個:
  document_all
  message
  exceldocument
  worddocument
  screensaver
  application
  website
  product
  letter
  information
  details
  document
  後綴名稱以下任意一個:
  EXE
  SCR
  PIF
  ZIP