发布时间：2001-08-31 10:47:24

近期，各种电脑病毒可谓层出不穷，Sircam先生、红色代码、网络神偷先后各领风骚一阵，如今又有一新邮件病毒“横空出世”，前来凑凑热闹！

这种新邮件病毒名为Win32.Invalid.A@mm，欺骗性更高，它伪装成发自微软技术支持中心的邮件，极具破坏性。它通过一任意解码键对可执行程序进行解码，使得那些后缀为E XE的可执行程序无法正常运行。

Central Command公司的产品经理Steven Sundermeier在一份报告中称，该种新病毒试图利用社会工程意识来诱使用户打开邮件附件。这家总部在麦地拉的公司还宣称，他们仅收到有关该病毒的一份报告，报告中指出这种新病毒的危害程度属于中级，含有一段恶意攻击程序，同时还可进行传播。

这种新蠕虫的特点是，以一封来自微软技术中心的邮件出现，其邮件主题为“无效的SS认证”。邮件内容主要是说无效的SSL(安全Socket 层)认证可导致IE浏览器缓冲溢出，进而导致攻击者非法访问用户的电脑。同时它敦促用户下载附件上的补丁以避免遭受别人攻击。

一旦附件被激活，该蠕虫便检查网络是否链接，若链接成功，它便自动在您的硬盘上的“我的文档”文件夹中寻找扩展名为ht的文件，然后又自动对在此文件夹中找到的邮件地址进行自我发送。
该假装成来自微软的欺骗性邮件内容全文如下：

From: "Microsoft Support" support@microsoft.com

Subject: Invalid SSL Certificate

Hello,

Microsoft Corporation announced that an invalid
SSL certificate that web sites use is required to be
installed on the user computer to use the https
protocol. During the installation, the certificate
causes a buffer overrun in Microsoft Internet
Explorer and by that allows attackers to get
access to your computer. The SSL protocol is
used by many companies that require credit card
or personal information so, there is a high
possibility that you have this certificate installed.
To avoid of being attacked by hackers, please
download and install the attached patch. It is
strongly recommended to install it because almost
all users have this certificate installed without their
knowledge.

Have a nice day,
Microsoft Corporation