Sécurité Proactive
 

W32/MyLife.A@mm

Threat risk

Threat risk low
Detection files published:
08 Mar 2002
Description created:
2002-03-07
Description updated:
2002-03-13
Malware type:
Worm
Alias:
Spreading mechanism
Email
Payload:

Summary

This is an email worm written in Visual Basic and compressed using UPX 1.20.

File length is 30720 bytes.


Spreading description

Email characteristics:

Subject: my life ohhhhhhhhhhhhh
Body: Hiiiii
How are youuuuuuuu?
look to the digital picture it's my love
vvvery verrrry ffffunny:-)
my life = my car
my car = my house

Attachment: My Life.scr
The worm sends itself to all users in the Outlook address book. It also inserts a key in the system registry to start it at bootup:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\stmgr = %SYSTEMDIR%\My Life.scr


Removal

General information about removal of malicious software

Norman's antivirus products are in general able to remove all malicious software that is detected.
Some malware, however, uses techniques that the general product does not remove sufficiantly. We have therefore developed the free product Norman Malware Cleaner. Please use the latest version of this program from the link below - if your Norman antivirus is unable to clean-up the infection.

Utilisation Titre Commentaire
  Stopper la propagation des virus sur les partages réseau  
  Cleaning of back-up folders on Windows Me and XP  
Imprimer la page