Worm.Harex.a是一个蠕虫病毒。该病毒尝试下载一个网络文件并运行，下载的文件是一个蠕虫病毒。病毒在系统目录中创建一个名为os32的目录，将自身复制到该目录，然后病毒会将病毒文件名改为颇有迷惑性的名字，如标称自己为某种解压程序（xxx Unpacker.exe）、某种黑客程序（xxx hacker.exe），利用用户的好奇心使其中毒。病毒还创建一些注册表键值，以标明病毒“到此一游”。

病毒别名：P2P-Worm.Win32.Harex.a[AVP]

处理时间：

威胁级别：★★

中文名称：

病毒类型：蠕虫

影响系统：Win9x / WinNT

病毒行为:

1.创建目录%sysem%\\os32，并将自身复制的该目录下，命名可能为以下名字之一：

Website Hacker.exe

Html Hacker.exe

Blowfish Decrypter.exe

Upx Unpacker.exe

Upx Unscrambler.exe

Upx Decrypter.exe

Upx Encrypter.exe

PeCompact Unpacker.exe

32lite Unpacker.exe

624 Unpacker.exe

aPack Unpacker.exe

aplib Unpacker.exe

avpack Unpacker.exe

axe Unpacker.exe

diet Unpacker.exe

epack Unpacker.exe

lglz Unpacker.exe

lzexe Unpacker.exe

megalite Unpacker.exe

pack Unpacker.exe

pklite Unpacker.exe

pk smart Unpacker.exe

pmode Unpacker.exe

pro-pack Unpacker.exe

rjcrush Unpacker.exe

rucc Unpacker.exe

syspack Unpacker.exe

vacuum Unpacker.exe

wwpack Unpacker.exe

XE Unpacker.exe

Xpack Unpacker.exe

Aspack Unpacker.exe

cExe Unpacker.exe

pc shrinker Unpacker.exe

Fsg Unpacker.exe

Neolite Unpacker.exe

Pe Diminisher Unpacker.exe

Petite Unpacker.exe

Gpx Unpacker.exe

Gupx Unpacker.exe

WWPack32 Unpacker.exe

Hotmail hacker.exe

aim hacker.exe

msn hacker.exe

mirc hacker.exe

irc hacker.exe

pirch hacker.exe

outlook express hacker.exe

outlook hacker.exe

email hacker.exe

pop hacker.exe

smtp hacker.exe

ssh hacker.exe

telnet hacker.exe

windows hacker.exe

dos hacker.exe

linux hacker.exe

unix hacker.exe

mac hacker.exe

network hacker.exe

nmapnt32.exe

nmap.exe

win32 hacker.exe

win16 hacker.exe

hacker.exe

Borland c++ Crack.exe

Microsoft C Crack.exe

Microsoft C++ Crack.exe

Microsoft Crack.exe

Macromedia Crack.exe

Windows Crack.exe

Xp Crack.exe

2k Crack.exe

98 Crack.exe

Encryption Crack.exe

Fbi hack.exe

Cia Hack.exe

Whitehouse Camera.exe

The Sims Superstar cheats.exe

Wild Rides Water Park Factory cheats.exe

Next Generation Tennis 2003 cheats.exe

Finding Nemo cheats.exe

Naval Campaigns Guadalcanal cheats.exe

Squad Battles Advance of the Reich cheats.exe

Enter the Matrix cheats.exe

Rise of Nations cheats.exe

Grand Theft Auto Vice City cheats.exe

Magnetic cheats.exe

Big Mutha Truckers cheats.exe

Robocop cheats.exe

Bloodrayne cheats.exe

The Sims Superstar crack.exe

Wild Rides Water Park Factory crack.exe

Next Generation Tennis 2003 crack.exe

Finding Nemo crack.exe

Naval Campaigns Guadalcanal crack.exe

Squad Battles Advance of the Reich crack.exe

Enter the Matrix crack.exe

Rise of Nations crack.exe

Grand Theft Auto Vice City crack.exe

Magnetic crack.exe

Big Mutha Truckers crack.exe

Robocop crack.exe

Bloodrayne crack.exe

2.下载网络文件到本地计算机，保存为c:\\Win32.Exe，然后运行该文件。

3.创建注册表键值：

HKEY_CURRENT_USER\\Software\\Kazaa\\Transfer\\

"DlDir0"="<病毒路径>"

HKEY_CURRENT_USER\\Software\\Kazaa\\LocalContent\\

"Dir0"="012345:"

HKEY_CURRENT_USER\\Software\\Imesh\\Client\\LocalContent\\

"Dir0"="012345:"