W32/Maldal.i@MM

2008-02-23 09:34:31来源：互联网阅读 ()

病毒名称: W32/Maldal.i@MM 类别： Win32病毒病毒资料：病毒特征：该邮件蠕虫病毒会从设有缓冲的网页及Outlook地址簿中收集邮件地址、删除快捷键以及导致系统性能不稳定。它的邮件主题众多，基本上是从以下主题中随机选择：

Subject: Fwd:

Subject: Fwd: [DrFun-egroup] Let‘s Laugh

Subject: Fwd: [Finance-group] Do you wanna be a rich man?

Subject: Fwd: [FunMaiL-group]Bush under bin laden‘s cock !!!

Subject: Fwd: [FuNnY-egroup]Hehehehehe damn

Subject: Fwd: [Gays-egroup]Oh Shittttt

Subject: Fwd: [Jews-egroup] Sharoon Owns The World

Subject: Fwd: [JewsFood-egroup] Dogs Meat !!!

Subject: Fwd: [lovedreams-egroup] love speaks from the heart ...

Subject: Fwd: [LsbianLovers-group] Lick my asshole

Subject: Fwd: [Muzicana-Group] Download what you want

Subject: Fwd: [Pc.CLup-Group] Learn how to deal with DOS

Subject: Fwd: [PianoMoZart-egroup] Wow Romantic

Subject: Fwd: [PussyLand-egroup] How sweet...

Subject: Fwd: [PussyPiss-egroup] Piss On my face :O

Subject: Fwd: [RomanticLife-group] Learn How To Love ...

Subject: Fwd: [Scr-News-egroup] Have u ever seen BLOOD

Subject: Fwd: [sex-is] HoT MoVies

Subject: Fwd: [SexyGurls-egroup] Raping a little girl

Subject: Fwd: [SpanishGirlsGroup] Hola ...

Subject: Fwd: [Teen-egroup] Three Ways For Love

Subject: Fwd: [TeroNews-Group] Too Late ... Bin Laden has been killed

Subject: Fwd: [Yabdoo-egroup]For HaCkers Lovers

Subject: Fwd: Are you looking for FUN !!!?

Subject: Fwd: Let‘s Dance & forget pains

Subject: Fwd: The rights of women !!!

Subject: Fwd: WoOoOoOow

Subject: Fwd:[Anal-sex-team] OOOH Faster

Subject: Fwd:[RapingTeen-eGroup] Oh My God !!!

Subject: Fwd:Against the power of women

Subject: Fwd:Change your life with Dr.Jobreee

Subject: Fwd:Fwd:If you care about your wife

Subject: Fwd:Have u ever seen your face?! (Funny)

[iduba_page]

Subject: Fwd:Is there any true love

Subject: Fwd:Loneliness ...

Subject: Fwd:Remember our survivors

Subject: Fwd:Say ‘I Love You‘ in 300 languages

Subject: Fwd:Send it to every body you love ;)

Subject: Fwd:The demand of sex ... where does it lead us to ?

Subject: Fwd:Tonight is... The Night Of Sex

Subject: Fwd:Wow , We are the same

Subject: Re:Fwd:Romantic Day

Subject: Take a picture for your self (Don‘t be mad its only a joke)

Subject: Zakia Zakaria & Najati :P

正文为空；

附件也可能有三种情况，

附件: (被感染系统的机器名).pif

或: (其它的随机名称).pif

或: (无)

附件执行后，电脑即会感染病毒，它首先弹出一个窗口：
与此同时，病毒将自身拷贝至整个系统的各个目录下：

1. 在Windows及Windows系统目录下生成ZaCker.pif

2. 在Windows目录下生成HIDE.pif

3. 在每个目录下生成与目录同名后缀为.pif的文件，如c:My DocumentsMy Documents.pif

另外，为在系统启动时，病毒自动运行，它也会创建注册表运行键：

· HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion

RunNAV DefAlert=C:WINDOWSSYSTEMaCker.pif

· For each foldername.pif file that was created a corresponding registry entry is also created: ie.

o HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersion

RunMy Documents=C:My DocumentsMy Documents.pif

而且，此病毒还有内部时钟，它会周期性地将自身发送给在Outlook地址簿或硬盘上的.htm及Html文档中找到的邮件地址，同时会显示一幅图片覆盖桌面：

此外，它还会删除病毒运行目录下的所有快捷键。

中毒迹象：

中毒后会在系统上出现许多后缀为.pif的文件，以及上述图片，并且系统性能不稳定，许多应用程序被装载至内存中。

传染方式：

运行带毒邮件的附件后向所有邮件地址传播。
病毒的清除法：使用光华反病毒软件，彻底删除。病毒演示：病毒FAQ：别名：W32.Maldal.I@mm (NAV), W32/Maldal-I (Sophos), W32/Maldal.I (Panda), Win32.Maldal.I (CA)

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有