Worm/P2P.Zevity.b
病毒長度:1,731 位元組病毒類型:網路蠕蟲
影響平台:Win9X/2000/XP/NT/Me
Worm/P2P.Zevity.b是VBS蠕蟲通過KaZaA,KaZaA Lite,Bearshare,eDONKEY2000,Morpheus等檔案共享軟體利用網路進行傳播。
傳播過程及特徵:
1.複製自身為:%Temp%\_uninst12.vbs
2.修改註冊表:
添加鍵值:"Runfaststart" = "%Temp%\_uninst12.vbs"
到註冊表:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
3.如果你的計算機系統時間為03/03/03,那么將會出現一個帶OK按鈕的信息提示框,內容為:
03/03/03 exception error. Please reboot.
4.在註冊表:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion下找到上述程式的定位資料夾。
5.複製自身為:
10 naked teens.jpg.vbs
15yteen<obscene language removed>.jpg.vbs
Ad-Aware6.tar.vbs
illegalsex.jpg.vbs
Kievgirl.jpg.vbs
Young russian teens.jpg.vbs
Bin Laden's Home.doc.vbs
Kamasutra2003.doc.vbs
Bush is crazy(and stupid).doc.vbs
How To Rip DVDs.txt.vbs
Eminem - I am your father.mp3.vbs
Anton - Schwul oder was.mp3.vbs
到下列資料夾:
%Program Files%\Kazaa lite\My shared folder
%Program Files%\Kazaa\My shared folder
%Program Files%\Bearshare\Shared
%Program Files%\Edonkey2000\Incoming
%Program Files%\mMorpheus\My shared folder