一个新的电子邮件病毒,大家都来看看好提前预防

microshupi

今天收到一封一个杀毒软件来的邮件.他们发现了一个新的电子邮件病毒,大家都来看看好提前预防！！

说明一下这只蠕虫在2006年9月10日首先出现！

This email comes to you from the Virus Emergency Response Team at
Proland Software.

A new variant of W32/Stration worm is heavily spreading in the Internet. We have received a lot of reports of infection of W32/Stration.G worm.

The infected email contains a message similar to the other variants of W32/Stration worm. The 'From' email address in this variant will be one of the following:

[email protected]
[email protected]
[email protected]
[email protected]

The worm carries a double extension attachment. The first extension will be MSG, DAT, ELM, LOG or TXT and the second extension BAT, CMD, EXE, PIF or SCR. In some cases there may be a lot of blank spaces in between the first and the second extension.

Upon execution the worm tries to mail itself to all the available email addresses in the infected system. The worm also alters the hosts file of the infected system to deny virus signature updates of some antivirus software.

You can learn more about this worm at:

http://www.protectorplus.com/virusinfo/worms/strationg.htm

we have also received many infection reports of another variant, W32/Stration.H worm.

You can learn more about W32/Stration.H worm at:

http://www.protectorplus.com/virusinfo/worms/strationh.htm

Instructions to remove the W32/Stration.G and W32/Stration.H worms from your computer:

Protector Plus is updated to detect and remove the W32/Stration.G and W32/Stration.H worms. An emergency virus database update to detect and remove these worms is available to the users of Protector Plus. To download this update from our web site, right click on Protector Plus icon from the system tray then select 'Update Virus Database now!' from the menu. Others can download a 30 day, fully functional evaluation copy of Protector Plus from:

http://www.protectorplus.com/download/downloadnow.htm

The evaluation copy will detect and remove these worms and also protects against all other known viruses, worms, spyware, trojan attacks, adware, backdoors, exploits, password stealers, dialers, keyloggers, hacktools, rootkits, constructors, binders and other potential security threats.

Order Protector Plus and save 100% on SpamChoke:

Order Protector Plus antivirus software for $29.95 and save 100% on SpamChoke antispam software. SpamChoke keeps your Inbox free of spam emails.

You can order Protector Plus at:

http://www.protectorplus.com/order/order.htm

Best Buy:

Protector Plus Antivirus for Windows - Enterprise Edition Get Virus and Spam protection for 1 Server and 5 Desktops for US$ 294.95. This is an ideal package for small and medium businesses.

Follow the link to know more about it:

http://www.protectorplus.com/order/eedition.htm

You are welcome to use this information to help any one who might need or benefit from it. If you have questions or issues in the usage of Protector Plus, please write to [email protected] .

The reason this alert is being sent to you is because either you or someone acting on your behalf, subscribed to the Virus Alert Mailing List maintained by us.

If you do not wish to receive further alerts, please send a return mail to [email protected]

以下是用译典通翻译该英文的意思：


这封电子邮件由于病毒紧急事件反应队被你想起在
Proland软件。

一新相异的W32/Stration 虫正重在因特网内传播。 我们已经收到W32 / Stration.G 虫的感染的许多报告。

被感染的电子邮件包含一条类似于W32/Stration 虫的其它变型的消息。 ' on '电子邮箱地址在这变型内将是如下内容之一：

[email protected]
[email protected]
[email protected]
珍妮弗 _ [email protected]

虫带一个双倍的扩展附件。 第一个扩展将是消息，DAT，榆树，木材或者TXT和第2 只扩展蝙蝠，CMD，EXE，PIF或者SCR。 有时候在在第1 和第2 次扩展之间里可能有许多空白。

当实行时虫努力在被感染的系统里邮寄自己到全部可得到的电子邮箱地址。 虫也改变被感染的系统的主文件否认病毒签名更新一些防病毒软件。

你能更详细地了解这条虫在：

http://www.protectorplus.com/virusinfo/worms/strationg.htm

我们也已经收到相异的另一个，W32 / Stration.H 虫的很多感染报告。

你能更详细地了解W32 / Stration.H 虫在：

http://www.protectorplus.com/virusinfo/worms/strationh.htm

指令从你的计算机中除去W32 / Stration.G和W32 / Stration.H 虫：

正保护人被更新发现并且除去W32 / Stration.G和W32 / Stration.H 虫。 一紧急事件病毒数据库不断改进识别并且除去这些虫给以上的保护人的用户可提供。 从我们的网站上下载这更新， 关于来自这个系统托盘的保护人和图象的正确的点击然后选择'现在更新病毒数据库！ '从菜单。 其它人能完全下载一30天职能评估以上的保护人的份：

http://www.protectorplus.com/download/downloadnow.htm

评估复制 将发现并且除去这些虫以及防止全部其他知名的病毒， 虫， spyware， 特洛伊木马程序攻击，adware，后门，功绩，口令stealers，dialers，keyloggers，hacktools，rootkits，建造者，装订工人和其他潜在的安全威胁。

命令保护人正并且在SpamChoke上节省100%：

预订保护人和价值29.95 美元的防病毒软件并且在SpamChoke antispam软件上节省100%。 SpamChoke保持你的收件箱没有发送同样消息到多个新闻组电子邮件。

你能命令保护人正在：

http://www.protectorplus.com/order/order.htm

便宜货：

Windows的保护人和防病毒 - 企业版得病毒和发送同样消息到多个新闻组1台服务器和价值294.95美元的5台式机的保护。 这是小和中等的生意的一个理想的包裹。

跟随连接对它知道得更多：

http://www.protectorplus.com/order/eedition.htm

你可以随意使用这信息帮助可能需要或者受益于它的任何一个。 如果你在以上的保护人的这种用法内喝问题或者期刊，请写给[email protected]。

那些原因这警惕给你被寄给是因为代表你你或者某人表演， 订阅警惕的邮寄名单我们维持的病毒。

如果你不希望得到更进一步的警戒，请把一个返回邮件送到[email protected]

[ 本帖最后由 iproffice 于 2006-9-13 18:30 编辑 ]

iproffice

这年头，病毒四处流窜，防不胜防