|I-Worm.Atirus is a Win32 worm that spreads by sending itself via e-mail to the recipients in a victim's Outlook Address book.
Then, the worm suspends for 5 minutes, then launches one of its payloads depending on system time.
After executing the payload, the worm checks whether the following registry value is present:
If the value doesn't exist, the worm tries to send itself to the senders of messages that exist in MAPI default client's folders.
The subject of the message sent is "New antivirus tool", and the message also contains the attachment "Antivirus.exe" that is the virus itself,
and also contains in the body: Hey, checkout this new antivirus tool which checks your system for viruses
Use antivirus (also check How To Remove section)Startup Optimizer to quickly remove this virus.