photo album2007.pif

MSN新病毒~~~！！！photo album2007.pif

当msn用户遇到以下情形时，请务必小心：
这是一个ircbot的变种，.zip文件里是个名为photo album2007.pif的文件，Kaspersky检测为Backdoor.Win32.IRCBot.aaq，会通过msn发送以下话语：

HEY lol i've done a new photo album ! Second ill find file and send you it.

Hey wanna see my new photo album?

Hey accept my photo album, Nice new pics of me and my friends and stuff and when i was young lol...

Hey just finished new photo album! might be a few nudes ;) lol...

hey you got a photo album? anyways heres my new photo album accept k?

hey man accept my new photo album.. made it for yah, been doing picture story of my life lol..

内容概要：

【CISRT2007039】通过MSN传播的IRCBot photo album.zip rdshost.dll 解决方案

档案编号：CISRT2007039
病毒名称：Backdoor.Win32.IRCBot.aaq（Kaspersky）
病毒别名：
病毒大小：18,944 字节
加壳方式：UPX
样本MD5：383fa8f31bc56113dbb9f5b7527a6d0d
样本SHA1：f325df3287eb51c69bd783590c168609bebefd1a