kriz4029

病毒和KRIZ.3836病毒很相似,不同的是增加了一些程式,而且,如果SoftIce調試程式安裝在系統中的時候,病毒的破壞程式會被激活;病毒含有的字元串也有不同,這個病毒的字元串是:T-2000 / Immortal Riot 。當一個被該病毒感染的程式檔案執行時,病毒首先感染KERNELL32.DLL,在此後,每次啟動Windows病毒立即變為常駐記憶體的,並感染每一個Win32的可執行程式。

基本介紹

  • 外文名:kriz4029
  • 屬性病毒
  • 別名:PE_KRIZ.4029,W/32.KRIZ
  • 字元串:T-2000 / Immortal Riot 
病毒名稱:Kriz.4029
別名:PE_KRIZ.4029,W/32.KRIZ
病毒在每次感染前都查找檔案,如果與下列檔案名稱匹配,感染就不會發生。(AVP32.EXE,AVPM.EXE,ALERTSVC.EXE,AMON.EXE,AVP32.EXE,AVPM.EXE,N32SCANW.EXE,NAVAPSVC.EXE,NAVAPW32.EXE,NAVLU32.EXE,NAVRUNR.EXE,NAVWNT.EXE,NOD32.EXE,NPSSVC.EXE,NSCHEDNT.EXE,NSPLUGIN.EXE,SCAN.EXE,SMSS.EXE)
病毒具有相當破壞性的有效載荷,當12月25日病毒被觸發,它將毀壞CMOS數據,向染毒機器的所有檔案寫入垃圾數據並破壞Flash BIOS。該病毒使用秘密技術來加密它的代碼,在解密以後,你會在病毒體中發現下面的文本:
=( [c] 1999 [t] )=
YOU CALL IT RELIGION, YOU'RE FULL OF SHIT
YOU NEVER KNEW, YOU NEVER DID, YOU NEVER WILL
YOU'RE SO FULL OF SHIT, I DON'T WANT TO HEAR IT
ALL YOU DO IS TALK ABOUT YOURSELF
I DON'T WANNA HEAR IT, COZ I KNOW NONE OF IT'S TRUE
I'M SICK AND TIRED OF ALL YOUR GODDAMN LIES
LIES IN THE NAME OF GOD
WHEN ARE YOU GOING TO REALIZE THAT I DON'T
WANT TO HEAR IT?!
I KNOW YOU'RE SO FULL OF SHIT, SO SHUT YOUR FUCKING MOUTH
YOU KEEP ON TALKING, TALKING EVERYDAY FIRST YOU'RE TELLING STORIES, THEN YOU'RE TELLING LIES
WHEN THE FUCK ARE YOU GOING TO REALIZE THAT I DON'T WANT TO HEAR IT!!
AH, SHUT THE FUCK UP...

相關詞條

熱門詞條

聯絡我們