发信人: emil()
整理人: emil(1999-11-28 17:16:30), 站内信件
|
下面是一篇发自AVP的信中的一部分内容。
原文：
Central Command and Kaspersky Lab announce the discovery of a new
Windows virus named
Win32.Kriz.3862 contains the same destructive payload as the Chernobyl
virus that rendered thousands of computers in Asia unusable.
In addition, the Win32.Kriz.3862 virus contains even more deadly
capacity than the original Chernobyl virus. The Win32.Kriz.3740 virus,
on December 25th, erases the CMOS memory, overwrites data in all files
on all available drives, and then destroys the Flash BIOS by using the
same routine that was found in the Win95.CIH virus (aka Chernobyl
virus).
Win32.Kriz.3862 is a memory resident, polymorphic, Windows virus. It
replicates under Windows 95, Windows 98, and Windows NT systems and
infects Windows programs with EXE and SCR filename extensions, as well
as Windows KERNEL32.DLL system library that allows the virus to stay
memory resident during the entire Windows session.
译文：
Central Command and Kaspersky实验室近日宣布发现一种名为
Win32.Kriz.3862的新的Windows病毒。值得注意的是：Win32.Kriz.
3862具有和CIH同样的破坏性！！！
^^^^^^
另外，Win32.Kriz.3862能造成比CIH更为严重的后果。该病毒于
12月25号发作，将会清除CMOS记录，覆盖所有硬盘上的数据，而且
^^^^^^^^ ^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^
会像CIH那样向Flash BIOS写入垃圾码从而破坏Flash BIOS。
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Win32.Kriz.3862是一种Windows下的内存驻留型变形病毒，它能
感染Windows 95、Windows 98和Windows NT下的EXE和SCR文件，还通
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
过Windows的系统数据库KERNEL32.DLL在WIndows启动时驻留在内存中。
BTW:该段译文是偶译的，译得不好请原谅。:)
--
欢迎光临“病毒观察” http://bd.yeah.net
“聊毒斋” http://ldz.126.com
http://liaoduzhai.163.net
Email: [email protected]
※ 来源:．网易 BBS bbs.netease.com．[FROM: bbs.huizhou.gd.cn]
|
|