Description
|
I-Worm.MyLife.b It is a worm virus being spread via the Internet as an e-mail attachment. When the worm is launched for the first time it shows a window with a picture. While installing the worm copies itself to the Windows system directory with the name "cari.scr" and registers this file in the system registry auto-run key: HKCU\Software\Microsoft\Windows\CurrentVersion\Run win=%SYSTEM%\cari.scr To send infected messages the worm uses Microsoft Outlook, it sends messages to all addresses found in the Microsoft Outlook Address Book. The worm also gets victim e-mail addresses from MSN Messenger e-mail base. Also, the worm checks the current date, if the current hour value is 8, the worm executes its payload routine, deleting the following files: c:\*.*; d:\*.*; e:\*.*; f:\*.* Also deleted are: *.sys files in the Windows directory and *.vxd, *.sys, *.ocx, and *.nls files in the Windows system directory Remove it from startup by antivirus (also check How To Remove section)Startup Optimizer. |