Worm.Anpir.a
病毒名称(中文):
网络噬虫
病毒别名:
Email-worm.Win32.Anpir.a[avp]
威胁级别:
★★☆☆☆
病毒类型:
蠕虫病毒
病毒长度:
34208
影响系统:
Win9xWinNT
病毒行为:
该病毒是邮件蠕虫，通过电子邮件传播，病毒运行后，会搜索病毒所在当前目录的文件，把*.exe的内容替换为病毒体的内容，同时还会删除删除当前目录的*.avi*.zip*.rar*.nfo*.txt*.mp3*.mpg*.bin*.iso*.jpg所有文件，最后将搜索本机的outlook中的通信簿的联系人名单，病毒冒充一些大型公司的邮件，并把病毒体作为附件发送出去，去感染下一个用户
1。创建以下文件
C:\DocumentsandSettings\administrator\ApplicationData\Microsoft\AddressBook\Administrator.wab
C:\DocumentsandSettings\administrator\LocalSettings\ApplicationData\Identities\{95F8D961-8D17-4DFD-9863-DBE8C2986C9A}\Microsoft\OutlookExpress\Folders.dbx
C:\DocumentsandSettings\administrator\LocalSettings\ApplicationData\Identities\{95F8D961-8D17-4DFD-9863-DBE8C2986C9A}\Microsoft\OutlookExpress\Offline.dbx
C:\DocumentsandSettings\administrator\LocalSettings\ApplicationData\Identities\{95F8D961-8D17-4DFD-9863-DBE8C2986C9A}\Microsoft\OutlookExpress\收件箱.dbx
2。通过调用mapi32.dll中的BMAPISendMail来发送邮件
3。病毒冒充的邮件地址
alain.juppe@france-moderne.asso.fr
alanis@rockweb.com
billg@microsoft.com
billy.crawford@v2.fr
bonjovi@polygram.com
britney@peeps.com
brutdefemme@hotmail.com
charlelie@charlelie.com
charles@charlesberling.net
chig@juno.com
ciaobox@msn.com
claude@nougaro.com
contact@ericcharden.com
druhill33@free.fr
e-mail@moi-alizee.com
fanzi@hesp.it
francis@franciscabrel.com
friends@nbc.com
garbagezone@garbage.com
hamill@aol.com
helene.segara@warnermusic.com
herukush@aol.com
icaprio0@aol.com
info@stomybugsy.com
jeanne.mallego@virginmusic.com
jeffr48196@aol.com
joan-osborne@rockweb.com
julie@juliezenatti.com
laetitia@laetitiacasta.com
lilacs00@aol.com
lorie@lorieonline.net
magusenter@aol.com
mail@genevievedefontenay.com
marion.richeux@libertysurf.fr
marketing@cbs.com
mchrichton@jurassic.park.cr
miamiivice@aol.com
nmamere@assemblee-nationale.fr
oasis@millenianet.com
ocnevik@aol.com
oprah@aol.com
p.bak1@sheffield.ac.uk
pamanderson@aol.com
postmaster@christophemiossec.com
president@whitehouse.gov
priscilla@iws-france.com
prodi@ulivo.it
q-tarantino@usa.net
resdog1@aol.com
richardberrylesite.com@richardberrylesite.com
sbern@gotha.fr
scottadams@aol.com
smgellar@safestars.com
souchon@virgin-artistes.com
stingwce97@aol.com
stonesworld@musicblvd.com
tealoni@cyberus.com
tomclancy@aol.com
vcerf@mci.net
vice.president@whitehouse.gov
webmaster.polydor@umusic.com
webmaster@madonna.com
worldofoz@aol.com
xxmattxx@geocities.com
