will be expiring within five business days. We
apologize for any inconvenience that this may cause, but this is occurring
because all of our customers are required to update their account settings with
their personal information.
We are taking these actions because we are implementing a new security policy
on our website to insure everyone's absolute privacy. To avoid any interruption
in PayPal services then you will need to run the application that we have sent
with this email (see attachment) and follow the instructions. Please do not send
your personal information through email, as it will not be as secure.
IMPORTANT! If you do not update your information with our secure application
within the next five business days then we will be forced to deactivate your
account and you will not be able to use your PayPal account any longer. It is
strongly recommended that you take a few minutes out of your busy day and
complete this now.
DO NOT REPLY TO THIS MESSAGE VIA EMAIL! This mail is sent by an automated
message system and the reply will not be received.
Thank you for using PayPal.
大意如下，
“亲爱的PayPal客户：
PayPal在此通知您一些关于您的PayPal帐号的重要信息。您的帐号（已和下面的Email地址绑定）
<用户的Email地址>
将于5个工作日之后过期。我们对此带来的不便向您道歉。这次变动是因为我们要求所有用户都要在帐号设置中加入个人信息。
我们正在网站上实现一个新的安全策略，用以确保每个人隐私的绝对安全。为了避免中断PayPal服务，请运行附件中程序，并按照程序的指示操作。请不要通过电子邮件发送您的个人信息，那样太不安全。
重要提示：如果您不更新帐号的话，5个工作日以后，我们将不得不终止您的PayPal帐号。在此强烈建议您现在就抽出宝贵的几分钟时间，做完更新工作。
不要通过电子邮件回复这封信。这封邮件是由自动消息系统寄出的，您的回复不会被接收。感谢您使用PayPal。”
蠕虫还将自身复制为Windows目录的svchost32.exe，并添加注册表项
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SvcHost32，使其可以在Windows系统启动时可以自动运行。
江民反病毒专家敬告用户，如果您收到了上述的蠕虫邮件，千万不要打开运行附件程序。立即升级江民杀毒软件KV系列到11月14日病毒库，即可有效防杀该蠕虫。
（图为病毒发作时的网页）
|
