這是一個通過網(wǎng)絡(luò)鏈接的木馬病毒,改病毒會添加自己為開機(jī)啟動,并且嘗試下載其他程序,危害很大.

1.生成文件:
C:\DocumentsandSettings\administrator\ApplicationData\m\mule.exe

2.添加注冊表起始項(xiàng),使病毒開機(jī)啟動:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
mule_st_key
mule.exe

3.嘗試鏈接到一下地址,下載文件:

195.245.244.243:4661
62.241.53.2:4242
62.241.53.16:4242
213.186.60.106:4661
195.245.244.244:3000
219.238.233.110:1008
http://fundacioncasadelamoneda.com/imagenes/fn.php
http://fvdaeniken.ch/1/fn.php
http://www.ezybidz.com/1/fn.php
http://gezondheidswinkel.nl/1/fn.php
http://www.giftitemsmadeinchina.com/1/fn.php
http://frieslandvakanties.nl/1/fn.php
http://www.dvdmadeinchina.com/1/fn.php
http://eastsidetattoo.nl/1/fn.php
http://ecobos.be/1/fn.php
http://endoliteindia.com/1/fn.php
http://www.european-nutri.com/1/fn.php
http://fundacioncasadelamoneda.com/imagenes/999.jpg
http://fvdaeniken.ch/1/999.jpg
http://www.ezybidz.com/1/999.jpg
http://gezondheidswinkel.nl/1/999.jpg
http://www.giftitemsmadeinchina.com/1/999.jpg
http://frieslandvakanties.nl/1/999.jpg
http://www.dvdmadeinchina.com/1/999.jpg
http://eastsidetattoo.nl/1/999.jpg
http://ecobos.be/1/999.jpg
http://endoliteindia.com/1/999.jpg
http://www.european-nutri.com/1/999.jpg