³£¼ûÓʼþ²¡¶¾µÄÖ¢×´ºÍ½â¶¾·½·¨
ÃÀÀöɱÊÖ
¸ù¾ÝKILL98·´²¡¶¾¼¼ÊõÈËÔ±¶ÔW97M/Melissa²¡¶¾½øÐеķÖÎö£¬È·¶¨¸Ã²¡¶¾´«È¾µÄ¶ÔÏóÊÇWord 97 ºÍWord 2000Îļþ¡£µ±Óû§´ò¿ªÒѸÐȾÓиò¡¶¾µÄÎļþʱ£¬ÃÀÀöɱÊֱ㴫ȾÓû§ÏµÍ³, ͬʱ£¬²¡¶¾Í¨¹ýÓû§ÊÕ·¢´ø¶¾µÄµç×ÓÓʼþ»¥ÏഫȾ£¬¶øÇÒ´«È¾·½Ê½·Ç³£Òþ±Î¡£ ÃÀÀöɱÊÖ²¡¶¾µÄ¾ßÌå±íÏÖÖ¢×´ÊÇ£º
1.µ±Óû§´ò¿ªµÄÎļþ¸ÐȾÓиò¡¶¾Ê±£¬²¡¶¾Ê×Ïȼì²é×¢²á±íÖÐÊÇ·ñÓÐÃÀÀöɱÊÖµÄ×¢²áÐÅÏ¢,ÈôÓÐÔò±íÃ÷ϵͳÒѱ»´«È¾£¬·ñÔò£¬ÔÚ×¢²á±íÖд´½¨Ò»Ìõ×¢²áÏîÈçÏ£º
HKEY_CURRENT_USER\Software\Microsoft\Office\¡°Melissa?¡± = ¡°... by Kwyjibo¡±
2.ÀûÓÃVisual Basic Ö¸ÁÁ¢Ò»¸öOutLook¶ÔÏó, ´ÓOutLookµÄÈ«ÓòµØÖ·±íÖлñÈ¡³ÉÔ±µØÖ·ÐÅÏ¢, ½«ÏÂÁÐÐÅÏ¢ÒÔµç×ÓÓʼþ·½Ê½, ×Ô¶¯·¢Ë͵½µØÖ·±íÖеÄÇ°50 ¸öÓÊÏä(Ò»´Î·¢ËÍ50·âÓʼþ)¡£ÆäÖУº
ÓʼþÖ÷ÌâΪ:¡°Important Message From £¡±
ÕýÎÄΪ:¡°Here is that document you asked for ... don¡¯t show anyone else ;£)¡±¡£Ö®ºó£¬²¡¶¾½«ÒѸÐȾÓиò¡¶¾µÄÎļþ×÷Ϊ¸½¼þ·¢ËͳöÈ¥¡£Ä¿Ç°½ÏΪÁ÷ÐеÄÒ»ÖÖ¸½¼þµÄÎļþÃûΪ¡°list.DOC¡±£¨×¢Ò⸽¼þµÄÎļþÃû²¢²»Ö»ÓÐÕâÒ»ÖÖ£©¡£
3.µ±Óû§½ÓÊÕµ½´ø¶¾µÄÓʼþ²¢´ò¿ªÊ±, Óû§µÄWord ϵͳÖÐËùÓдò¿ªµÄÎļþ½«±»´«È¾¡£µ±»úÆ÷ʱÖÓµÄʱ¼äÊýÖµÓëÈÕÆÚµÄÊýÖµÏàͬʱ£¬Èç4ÔÂ27ºÅµÄ4µã27·Ö£¬²¡¶¾½«´ò¿ªÒ»¸ö±»´«È¾µÄÎļþ,ÔÚµ±Ç°µÄ¹â±êλÖòåÈëÏÂÁÐÐÅÏ¢£º¡°Twenty£two points, plus triple£word£score, plus fifty points for using all my letters. Game¡¯s over. I¡¯m outta here.¡±
4.ÖµµÃ×¢ÒâµÄÊÇÃÀÀöɱÊÖÔÚ´«È¾Word 2000ʱ, Ê×ÏÈ´Ó×¢²á±íÖмì²éÆ䰲ȫ±£»¤¼¶±ð,Èç¹û×¢²á±íÖÐHKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Word\Security\¡°Level¡±µÄÖµ²»Îª0£¬½«½ûÓò˵¥Öеġ°MACRO/SECURITY¡±Ñ¡Ïî¡£Èç¹ûÓû§Ê¹ÓõÄϵͳÊÇWord 97£¬Ôò½ûÓò˵¥ÖС°TOOLS/MACRO¡±Ñ¡Ïî¡£
¡°ÅÂÅ¡±²¡¶¾
ÃÀÀöɱÊÖ²¡¶¾ÓàÍþÉд棬×÷ΪÃÀÀöɱÊÖ²¡¶¾µÄ·¢ÏÖÕߣ¬Network Associates ¹«Ë¾ÓÖ·¢ÏÖÁËÒ»ÖÖÓëËüÀàËƵ«Î£º¦¸ü´óµÄµç×ÓÓʼþ²¡¶¾Copycat¡£ÕâÖÖ±»êdzÆΪ¡°Papa¡±£¨ÅÂÅ£© µÄв¡¶¾ÊÇÒ»ÖÖExcel ²¡¶¾£¬¸úMelissa Ò»Ñù£¬Ëü¿ÉÒÔ×Ô¶¯¸´ÖÆ×Ô¼º²¢·¢Ë͸øÓû§µØÖ·²¾ÖеÄÇ°60¸öÈË¡£´ËÍ⣬Papa ÿ´Î±»¼¤»îʱ¶¼ÏòÍâ·¢Ë͵ç×ÓÓʼþ£¬¶øMelissa Ö»ÔÚµÚÒ»´Î±»¼¤»îʱ²Å·¢ËÍÓʼþ¡£PapaÒ²ÏòIPµØַΪ207.222.214.225»òÕß24.1.84.100µÄ·þÎñÆ÷Ëæ»ú·¢³ö¡°¾Ü¾ø·þÎñÀàÐ͵Ĺ¥»÷¡±¡£
¡°ÐÁµÏ¼Ó¡± ²¡¶¾
¡°Syndicate.A¡±£¨ ÐÁµÏ¼Ó£©£¬ÊÇ»ùÓÚWord 8 (Office 97)²¡¶¾µÄÒ»¸ö±äÖÖ£¬ÓëÃÀÀöɱÊÖ²¡¶¾·Ç³£Ïà½ü£¬µ«±ÈÃÀÀöɱÊÖµÄΣº¦ÐÔ´ó¡£ËüפÁôÔÚThisDocumentÄ£¿éÖУ¬±»¸ÐȾµÄ»úÆ÷ÔÚʹÓÃOutlookʱ£¬²¡¶¾´ÓµØÖ·²¾ÖÐÿһ¸öµØÖ·ÁбíÖÐÌôÑ¡Ç°69¸öµØÖ·£¬È»ºó°ÑÒѸÐȾµÄÎĵµ×÷Ϊ¸½¼þ·¢Ë͸øÕâЩµØÖ·¡£ Ö÷ÌâÐÐΪ£º¡°Fun and games from Username¡±£¬ÕýÎÄÐÅϢΪ£º¡°Hi! Check out this neat doc I found on the Internet!¡±·¢ËÍÍê±Ïºó£¬Syndicate.A»¹½«·¢ËÍE£mail¸øÁíÒ»½ÓÊÕÕߣº project1@nym.alias.net£¬Ö÷ÌâΪ£º¡°Guess who¡¯s infected: UserName¡±£¨ ²Â²ÂÓÖÓÐËÖж¾ÁË£©£¬ÕýÎÄÐÅϢΪ¡°Infected!¡±
½â¶¾·½·¨£º×îз¢²¼µÄKILL98µÄ4.19°æ(
http://www.kill.com.cn)ºÍNetwork AssociatesµÄMcafee Virusscan(
http://www.nai.com)µÈ¹úÄÚÍâɱ¶¾Èí¼þÒѾÄܹ»É±³ýÃÀÀöɱÊÖ¼°Æä±äÖÖÁË£¬ÒѾÖж¾µÄ¸Ï¿ìÈ¥ÏÂÔØ°¡¡£
Happy99²¡¶¾
¿´×ÅÏÖÔÚºáÐнºþµÄÃÀÀöɱÊÖ£¬Èç¹ûÄã¼ÇÐÔ»¹ºÃµÄ»°£¬Ò²Ðí»¹¼ÇµÃÔø¾·ç¹âһʱµÄ ¡°Happy99¡±°É£¬Happy99¶ÔÓ²¼þºÍÊý¾Ý¾ùûÓдóµÄÓ°Ï죬ΩһµÄÖ»ÊÇĬĬµØºÄ·Ñ×Åʱ¼äºÍ×ÊÔ´£¬¼õ»ºÍøÂçÔËÐеÄËٶȣ¬Ö±ÖÁµ¼Ö¹«Ë¾Óʼþ·þÎñµÄ̱»¾¡£Í¬ÑùµØ£¬¸Ã³ÌÐòÒ²ÊÇͨ¹ýµç×ÓÓʼþ£¬Ïò±»¸ÐȾÓû§ËùʹÓõÄÐÂÎÅ×éºÍÓʼþµØÖ··¢Ëͼ¸°Ù·Ý×ÔÉíµÄ¿½±´¡£
Èç¹ûÄãÊÕµ½Ò»·âE-mail£¬´øÓÐÒ»¸öÃûΪ happy99.exe£¨×¢Ò⣬¿ÉÄܲ»ÊÇÕâ¸öÎļþÃû£© µÄ¸½¼þ£¬¶øÄãÈ¥Ö´ÐÐÁËËü£¬ÄãµÄÆÁÄ»ÉϾͻá×Ô¶¯´ò¿ªÒ»¸ö´°¿Ú£¬ÒÔºÚɫΪµ×É«µÄÂúÌìÑ̻𣬴˺ó£¬Ö»ÒªÄã·¢Ðżдø¸½¼þ¾ÍËÀ»ú¡£ÖØÐÂÆô¶¯ºó£¬»¹ÊDz»ÄÜ·¢Ëͼдø¸½¼þµÄÐÅ¡£Èç¹û²»¼Ð´ø¸½¼þ£¬¿ÉÒÔ·¢ÐÅ£¬µ«ÊÇ Happy99 »áÇÄÇĸ½ÔÚÐÅÖУ¬¶Ô·½Èç¹ûÔËÐУ¬¼´±»¸ÐȾ¡£È»ºó£¬happy99¾ÍDZ·üÏÂÀ´£¬ÈçÓлú»á£¬»áÔùËÍÏÂÒ»¸öÊÕÐÅÈËÒ»¸ö×ÔÉíµÄ¿½±´¡£
½â¶¾·½·¨: Èç¹ûÄãÊÕµ½´øÓÐ Happy99.exe µÄÓʼþ£¬²¢ÇÒÒѾÔËÐÐÁËhappy99.exe£¬¹§Ï²Ä㣬Ä㽫Óлú»á¿´µ½ÏÂÃæµÄ½â¶¾·½·¨£¨Èç¹ûûÓÐÔËÐУ¬ÄÇÎÒҪףºØÄ㣬ÒòΪÄãÊÇÒ»¸ö´ÏÃ÷ÈË£©¡£
ͨ¹ý¸üв¡¶¾¿â£¬×îеÄPCCillin »ò Norton ·À¶¾³ÌÐò¿ÉÒÔ½«happy99²é½â¡£ÁíÍ⣬¹úÄڵĹÚȺ½ð³½(
http://www.kill.com.cn)¡¢ÈðÐÇ(
http://www.rising.com.cn/download.htm)¡¢ÐÅÔ´£¨
http://www.vrv.com.cn£©µÈɱ²¡¶¾³§ÉÌÒÑÍƳöÇå³ý happy99 µÄÈí¼þ¡£µ±È»Ä㻹¿ÉÒÔÓÃÊÖ¹¤½øÐмì²âºÍ´¦Àí£º´ò¿ª Windows µÄ System Ŀ¼£¬Èç¹û·¢ÏÖÓÐ ska.exe¡¢ska.dll Óë wsock32.ska µÈÈý¸öÎļþ£¬ÄǾÍ˵Ã÷ÄãµÄµçÄÔÒѾÖж¾ÁË£¡Äã¿ÉÒÔ½«Ç°Á½¸öÎļþɾ³ý£¬ÔÙ°Ñ wsock32.ska ÖØÐÂÃüÃûΪwsock32.dll£¬È»ºó£¬ÔÙ½«ÓʼþÖÐµÄ happy99.exe ɾ³ý¼´¿É¡£