It is a mass-mailing worm that arrives as an attachment.
The email has the following characteristics:
Subject: is different.
Attachment: randomly generated using next phrases - data, mail, message, msg with random extension.
Creates the following files:
Adds the value: "SysMonXP"="%windir%\SysMonXP.exe"
In the system registry key: [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
Collects the email addresses from the files with predefined extensions.
Deletes some keys from the system registry.
In according the system date the worm will launch a DoS attack on the following sites:
Use antivirus (also check How To Remove section)Startup Optimizer to automatically remove this worm.