;zxcv 如果顺利的连接上,它会拷贝自己到远程计算机的系统目录的Netmeeting.exe
。并且在远端系统目录创建" Windows Management NetWork Service Extensions "服务。 通过邮件传播: 病毒通过两种途径来发送邮件。第一是通过油箱管理员MAPI回答信息。这些回复信息看起来很像正常回复。他们引用的信息有下列的版本: Subject: Re: [original subject]
Body:
'[recipient name]' wrote:
====
>
[Original message (each line prefixed with ">")]
====
[recipient domain] account
auto-reply: If you can keep
your head when all about you Are losing theirs
and blaming it on you; If you can trust
yourself when all men doubt you,