This worm spreads via the Internet as an attachment to infected emails.
It also spreads via IRC channels, local and file sharing networks.
The worm is able to spread in WinNT systems only (WinNT, Win2000, WinXP).
To send infected messages the worm connects directly to the default SMTP server.
The worm harvests email addresses from the WAB (Windows Address Book) database (Windows Address Book) and *.HTML files.
Subject: Maya Gold-os kepernyokimelo!
Attachment: Maya Gold.scr
Also copies itself under the name "Maya Gold.scr" to the A: floppy drive.
Downloads and runs upgrades from "ftp.fw.hu".
May open the site "http://www.offspring.com".
Searches for and terminates active anti-virus processes.
Remove it by antivirus (also check How To Remove section)Startup Optimizer.