|
|
I-Worm.MyLife. Viruses Information
| Name: |
I-Worm.MyLife. |
| Category: |
Viruses |
| Description:
|
Details
I-Worm.MyLife.d
MyLife is a family of worms (different versions) spreading through the Internet as infected email attachments. The worms themselves are Windows PE EXE files, written in Visual Basic and compressed by the UPX file compression utility.
The worm is activated only if users click on the attachment. Once executed, MyLife installs itself into the system and runs its spreading routine.
When MyLife is launched for the first time it shows either a window with a picture or message, which one depends on the particular version.
Two possible MyLife pictures:
While installing this worm copies itself to the Windows System directory and registers this copy (file) in the system registry auto-run key.
MyLife uses Microsoft Outlook to send messages to all addresses found in the Microsoft Outlook Address Book.
File size : about 9Kb.
Decompressed file size : about 25Kb.
Email content:
Subject:
New Screen Saver
Body:
Hiii
How are youu!!?
look to the New Screen Saver it's vvvery verrrry ffffunny :-) :-)
i promise you will love it? Ok
buy
========No Viruse Found========
Attachment name:
Screen.scr
File name in the infected system:
%SystemDir%Screen.scr
Affected registry key:
HKCUSoftwareMicrosoftWindowsCurrentVersionRun
Screen=%SystemDir%Screen.scr
Visual effect: when MyLife is launched for the first time it displays the following message:
? Error ?
? Error 1452544 File Not Found ?
Payload:when the worm is launched for the second time it deletes .SYS files in the Windows directory, files with the extensions .SYS, .VXD in the Windows System directory and all files in the C: root directory. |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 73 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win32.Hidra - 43 visits
Win16.Klon.1177 - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
PC_Ogre.38
Coconut.132
Worm.Win32.Slacko
Earle.143
BAT.8Fis
Vinnitsa Famil
Cripple.40
Beast.
YanShort.1961.
AS.59
|
|
