病毒名称: Worm.Zezer.b
病毒长度: 27136
发现日期: 2003.10.09
处理日期: 2003.10.09
中文名称: 赛舍
病毒别名:
I-Worm.Zezer.b[AVP], W32.Zezer.b.Worm[Symantec]
病毒类型: Worm
受影响系统: Win9x/NT/2K/XP
威胁级别: 3B
能处理的毒霸版本: 10月9日
该变种很快就在网络中出现，除了以微软名义发送带毒邮件以外，此次变种还增加了利用点对点工具KaZaa进行传播的方式。
技术特点：
1、以微软件的名义发送带毒电子邮件，收件人从MSN的联系人例表中提取。病毒邮件利用IE的IFRAME漏洞可以在用户不打开附件的情况下就可以自动下载到本地，并且立即执行。
病毒邮件如下：
主题：
MSN Messenger update
可能的发件人：
msmsgs@microsoft.com
windoze@dozersmtp.edu
netdozer@hotmail.com
可能的邮件内容：
Cached Check out these MSN Messenger skins that I found on the net a few days
ago (in the attachments). These are really cool!
Attention All Microsoft Users: A patch has been issued to correct a
vulnerability in MSN Messenger which can be performed by a maliious user in
order to gain unauthorized access to compromised computers. Windows users who
have MSN Messenger 4.x and higher versions are affected by this vulnerability
and must download and install the patch labeled , which is attached to this
email message. For any support regarding this patch please contact
support@microsoft.com for more information.
|
