I-Worm.Avron.e

病毒名称:

I-Worm.Avron.e

类别： 蠕虫病毒

病毒资料：

破坏方法：

1.拷贝自己到系统中，生成随机文件。在run项添加一项“Mortimer”。

2.枚举磁盘文件，查找邮件地址，发送利用IE漏洞的邮件。

3.终止下列程序

KPF.EXE

REGEDIT.EXE

_AVPM.EXE

AUTODOWN.EXE

AVKSERV.EXE

AVPUPD.EXE

BLACKD.EXE

CFIND.EXE

CLEANER.EXE

ECENGINE.EXE

F-PROT.EXE

FP-WIN.EXE

IAMSERV.EXE

ICLOADNT.EXE

IFACE.EXE

LOOKOUT.EXE

N32SCAN.EXE

NAVW32.EXE

NORMIST.EXE

PADMIN.EXE

PCCWIN98.EXE

RAV7WIN.EXE

SCAN95.EXE

SMC.EXE

TCA.EXE

VETTRAY.EXE

VSSTAT.EXE

ACKWIN32.EXE

AVCONSOL.EXE

AVPNT.EXE

AVPDOS32.EXE

AVSCHED32.EXE

BLACKICE.EXE

EFINET32.EXE

CLEANER3.EXE

ESAFE.EXE

F-PROT95.EXE

FPROT.EXE

IBMASN.EXE

ICMOON.EXE

IOMON98.EXE

LUALL.EXE

NAVAPW32.EXE

NAVWNT.EXE

NUPGRADE.EXE

PAVCL.EXE

PCFWALLICON.EXE

RESCUE.EXE

SCANPM.EXE

SPHINX.EXE

TDS2-98.EXE

VSSCAN40.EXE

WEBSCANX.EXE

WEBSCAN.EXE

ANTI-TROJAN.EXE

AVE32.EXE

AVP.EXE

AVPM.EXE

AVWIN95.EXE

CFIADMIN.EXE

CLAW95.EXE

DVP95.EXE

ESPWATCH.EXE

F-STOPW.EXE

FRW.EXE

IBMAVSP.EXE

ICSUPP95.EXE

JED.EXE

MOOLIVE.EXE

NAVLU32.EXE

NISUM.EXE

NVC95.EXE

NAVSCHED.EXE

PERSFW.EXE

SAFEWEB.EXE

SCRSCAN.EXE

SWEEP95.EXE

TDS2-NT.EXE

VSECOMR.EXE

WFINDV32.EXE

AVPCC.EXE

_AVPCC.EXE

APVXDWIN.EXE

AVGCTRL.EXE

_AVP32.EXE

AVPTC32.EXE

AVWUPD32.EXE

CFIAUDIT.EXE

CLAW95CT.EXE

DV95_O.EXE

DV95.EXE

F-AGNT95.EXE

FINDVIRU.EXE

IAMAPP.EXE

ICLOAD95.EXE

ICssUPPNT.EXE

LOCKDOWN2000.EXE

MPFTRAY.EXE

NAVNT.EXE

NMAIN.EXE

OUTPOST.EXE

NAVW.EXE

RAV7.EXE

SCAN32.EXE

SERV95.EXE

TBSCAN.EXE

VET95.EXE

VSHWIN32.EXE

ZONEALARM.EXE

AVPMON.EXE

AVP32.EXE

病毒的清除法：

使用光华反病毒软件，彻底删除。

病毒演示：

病毒FAQ：

Windows下的PE病毒。

发现日期：

2003-9-24