Vermian virus Worm_Funny.A analyses a report (4)
Golden hill " MSN small tail " vermian virus analysis reports
Golden hill poison bully had undertaken urgent processing to this virus, ask poison bully user to upgrade virus library arrives newest, can prevent this virus completely to affect a machine. In the meantime, golden hill poison bully turn over virus expert to remind an user: This virus uses MSN insanity to travel, enrol already a lot of more additionally in the netizen. Only golden hill poison bully the global network that monitor seeks help to what had received about a hundred user at present, ask an user to notice not to run MSN to upload the program that come easily, the such as that the good friend hair that is familiar with quite especially comes to " Funny.exe " the program of and so on.
Virus information:
Virus name: Worm.MSNFunny
Chinese name: MSN small tail
Minatory level: 3 class
Virus type: Vermian
Get influence system: Win9x/WinNT/Win2K/WinXP/Win2003
Discover time: 24 years on October 10
Destroy kind:
A, duplicate oneself to fall to systematic catalog, below Windows 98 system, can replace systematic file Rundll32.exe, bring about a system to cannot close normally machine;
B, fall in WinNT/Win2000/WinXP/Win2003 system, can alter Host document, the join when making the user is visitting normal website arrives Www. ***78p.com, affected the user normal visit to the website;
C, virus can use transmission of MSN, QQ, send virus oneself the good friend with Funny.exe file name, the good friend that leads imbue user runs this file.
Fit phenomenon:
A, fall in Windows 98/me system, can replace systematic file Rundll32.exe, bring about a system to cannot close normally machine;
The meeting below B, WinNT/Win2000/WinXP/Win2003 alters Host document, when making the user is visitting website of nearly 1000 mainstreams, turn to arrive repeatedly Www. ***78p.com, the likelihood causes the DoS attack of pair of this websites;
C, virus uses MSN, QQ travels, send virus oneself the good friend with Funny.exe file name, send one of following messages:
Bar of a new-blown, get together in the evening, here has introductory Www. ***78p.com, write down so that give me the telephone call
Friend, notice to rest more, can loosen to here loosen, www. ***78p.com
We also come common how, see MM, www. ***78p.com, enough flavour! Ah!
Japanese is in Nanjing the ironclad proof of the massacre! Boycott day goods Www stoutly. ***78p.com
Previous12 Next