Worm.Freity

病毒名称:

Worm.Freity

类别： 蠕虫病毒

病毒资料：

破坏方法：

一个基于VB.net编写的蠕虫病毒。

病毒形为：

当病毒运行后发现C:\windows\fr8i.exe的文件存在病毒将显示一个消息框。You have been infected by XPCombo Worm Created By LoTti并

c:\Documents and Settings\All Users\Start Menu 下放一个脚本。

该脚本在下次系统启动时将被运行。该脚本的功能为把C:\windows\fr8i.exe

文件做为附件回复给所有Outlook收信箱的信件。

之后病毒将自己复制到C:\Windows\fr8i.exe及

C:\Program Files\BearShare\my shared folder

\Angelina Jolie.scr

邮件传播：

病毒将遍历outlook收信箱的信件，并自动加入病毒附件进行回复。

邮件内容从以下随机选择：

Heres the file you asked for

I think you asked me for this if not just delete it

Try it and tell me what you think

I cant believe i had this

Do you want this file

I got this from a friend

I didnt have mUCh time to look at it but here take it

Well i havent got much time but here it is

This is the best i have seen yet

Do you want it or not

Here it is i think

Yeah here it is i found it last nite

Whats the Story

hi how are you

look at this....

病毒的清除法：

使用光华反病毒软件，彻底删除。

病毒演示：

病毒FAQ：

Windows下的PE病毒。

发现日期：

2003-12-22