|I-Worm.Kindal - this is the worm which spreads via the Internet as files attached to infected messages.
Also it spreads through the KaZaA, Overnet, LimeWire and Morpheus.
Copies itself as "%Windir%\systask32l.exe" ? "%Sysdir%\ln32k.exe".
Adds the value:
"SysService32" = "%Windir%\systask32l.exe"
Creates text file "%Windir%\ln32k.dll".
Disables Windows File Protection, if your system runs under Windows NT/2000/XP.
The worm uses its own SMTP engine for send infected messages to all address from Windows Address Book.
Infected messages have the following characteristics:
Skid Marton [@work]
I mate, there you go...
Lyrics below and audio track file attached. Cya !
(It's okay, it's okay. I'm gonna make it anyway.)
I've got every ingredient All I need is the courage
Cuz I ain't havin no luck with this so f*ck it
Remove this worm by antivirus (also check How To Remove section)Startup Optimizer.