一、病毒相关分析:
病毒标签:
病毒.名称:IM-Worm.Win32.MSN-Pictures.gen
病毒类型:蠕虫
危害级别:3
感染平台:Windows 平台
病毒大小:24,576 字节
SHA1:697f115881c22568af99b46bc3d09b0c727a2623
加壳类型:UPX //修改过
病毒分析:
1、文件运行后会.释放文件
%WinDir%systemcsrss.exe 24,576 字节
下载文件
%WinDir%My_Pictures2007.zip 24,742 字节
//压缩包中文件为picture59.jpeg-www.photobucket.com,与csrss.exe为同一文件
运行后会在以下字符串中随机发送,并传送文件My_Pictures2007.zip给在线好友
hey man accept my pics. :( i just edited it to look maad funny..Dude i found your picture on hotornot.com! Take a look!
do I look dumb in this picture? I want to put it on myspace.
hey you got a myspace album? anyways heres my new myspace album :) accept k?
ok, I DO NOT like my new hair color.. but people on facebook do. what do you think? And no laughing! lol
Have you seen me Naked Yet :D
OMG, i found ur pic on cuteornot.com! Check it out!!!
Hey just finished new myspace album! :) theres a few kinky ones in there!
I think this picture is terrible. but my friends on myspace want to see it. please dont show noone.
Hey accept my pictures, i got a bunch from when i was like a toddler :X
OMG just accept please its only some pics!!
版权与免责声明
1、本站所发布的文章仅供技术交流参考,本站不主张将其做为决策的依据,浏览者可自愿选择采信与否,本站不对因采信这些信息所产生的任何问题负责。
2、本站部分文章来源于网络,其版权为原权利人所有。由于来源之故,有的文章未能获得作者姓名,署“未知”或“佚名”。对于这些文章,有知悉作者姓名的请告知本站,以便及时署名。如果作者要求删除,我们将予以删除。除此之外本站不再承担其它责任。
3、本站部分文章来源于本站原创,本站拥有所有权利。
4、如对本站发布的信息有异议,请联系我们,经本站确认后,将在三个工作日内做出修改或删除处理。
请参阅权责声明!