基本介紹
- 中文名：Worm.Glowa.h
- 處理時間：2007-03-16
- 威脅級別：★
- 病毒類型：蠕蟲
- 影響系統：Win 9x/ME,Win 2000/NT,Win XP,Win 2003
1、生成的檔案
%SystemRoot%\system32\wservice.exe（原病毒檔案）
%原病毒所以在目錄%\SPQ2x10.exe（Worm.Glowa.b.5707）
2、添加啟動項
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
"UpdateService" = "%SystemRoot%\system32\wservice.exe..."
3、該病毒運行後會將自身向系統盤的所有名錄拷貝，拷貝的名稱（*.t）和拷貝的數目隨機，並將其設定為隱藏屬性。
4、傳送郵件的標題
ATTN TO EVERYBODY!
White house news!
READ AND RESEND ASAP!
Incredible news!
NEWS!
URGENT NEWS!
5、郵件內容
3rd Glogal War Just Started!!! Read more in file!
Putin and Bush starts NUCLEAR WAR! Check the file!
GLOBAL NUCLEAR WAR JUST STARTED! News in file.
Nuclear War in Russia! Read news in file!
Nuclear WAR in USA! Read attached file!
President Putin dead! Read more in attached file!
President Bush DEAD! Read attached file!
6、附屬檔案名
open.exe
truth.exe
war.exe
last.exe
about me.exe
a.exe
never.exe
latest news.exe
read me.exe
7、結束下列名稱程式
anti
viru
troja
avp
nav
rav
reged
nod32
spybot
zonea
vsmon
avg
blackice
firewall
msconfig
lockdown
f-pro
hijack
taskmgr
mcafee
8、收信人名單
Zenia
Zoe
Zilya
Xenia
Xylia
Xandra
Willa
Wendy
Vicky
Vivian
Violet
Valora
Vanessa
Valda
Ula
Uma
Sharon
Silver
Rosa
Ruby
Rita
Rae Rachel
Queen
Peggy
Pamela
Olivia
Olga
Nicole
Naomi
Natalie Nora
Nina
Nova
Nadia
Maia
Mary
Melody
Mimi
Myra
Linda
Lisa
Lolita
Lynn
Laura
Lara
Kara
Kassia
Kyle
Kali
Kacey
Katrina
Janet
Jewel
Joanna
Juliet
Julie
Ida
Idona
Isabel
Iris
Ivana
Ivory
Helga
Holly
Haley
Gloria
Gilda
Gale
Faith
Emily
Evelyn
Eve Erika
Eliza
Eden
Ebony
Donna
Dora
Doris
Diana
Danielle
Daria
Damita
Camille
Cara
Carla
Carmen
Clarissa
Chelsea
Caitlin
Bettina
Blenda
Bridget
Briana
Bella
Becky
Barbra
Aldora
Alysia
Amorita
Aretina
Ara
April
Anita
