B*******e
发帖数: 3882 | 1 NND， 老夫终于中着了。还好反应的还算快
重要特征： windows 目录下多出， sCache32, 进程中出现 system32 或xms32
http://www.symantec.com/avcenter/venc/data/w32.kwbot.f.worm.html
W32.Kwbot.F.Worm
Discovered on: April 07, 2003
Last Updated on: April 07, 2003 01:49:59 PM
The W32.Kwbot.F.Worm is:
A worm that attempts to spread across file-sharing networks, such as KaZaA a
nd iMesh. This worm drops and runs Backdoor.Sdbot.
"Dir? 012345:"="%Windir%\sCache32" |
|
