登入
歡迎您,
Language:
繁體中文
English
Deutsch
Français
Español
Italiano
Português
Русский
日本語
简体中文
繁體中文
欲瞭解有關我們公司和產品的更多資訊,
請訪問我們的全球網站
。
家庭及個人防護
企業資訊安全
技術支援
聯絡我們
Search
需要修復電腦?
聘請專家
摘要
病毒說明
統計資料
Alias:
I-Worm.Aliz, W32/Aliz@MM, W95/Aliz.A,W32.Aliz.Worm
Type:
Worm
Size:
Origin:
Date:
00-00-0000
Damage:
Sent by email.
VDF Version:
6.23.00.00
Danger:
Low
Distribution:
High
Distribution
The email subject is made out of words from the following five groups:
group 1: Fw: Fw: Re:
group 2: Cool Nice Hot some Funny weird funky great Interesting many
group 3: website site pics urls pictures stuff mp3s shit music info
group 4: to check for you i found to see here - check it
group 5: !! ! :-) ?! hehe ;-)
For example "Fw: Cool pictures - check it!"
When received, the worm uses MIME, so that it is activated when the email is read or previewed.
Attachment: Whatever.exe
Technical Details
W32/Aliz is an SMTP mass mailer worm, written in assembly and packed. The worm copies itself only on Win9X operating systems. It can not make copies on NT platforms. It takes from Windows Address Book the addresses it sends emails to.
When the email is received, the worm uses MIME to be activated when the email is read or opened. You can find information about this procedure at:
http://www.microsoft.com/technet/security/bulletin/MS01-020.mspx
The worm has its own SMTP engine to send emails to an SMTP server. It finds the SMTP server address in the victim's "Internet Manager Account" registry key. The worm obtains the email address from WAB (Windows Address Book), using the following registry entry:
HKEY_CURRENT_USER\Software\Microsoft\WAB\WAB4\Wab File Name
說明撰寫者 Crony Walker 開啟 2004年6月15日星期二
返回
.
.
.
.
我的帳戶
https
://
為了你的安全,此視窗已加密。
登入
忘記密碼
重設密碼
我的個人檔案
產品
付款歷程記錄
通知
密碼重設
聯絡我們
登出