Bill Williams (IT): Support Site
Bill Williams (IT): Support Site

adv19_79.gif
[home] | [profile] | [register] | [help] | [Contact Us]

[Sections]
[Virus Warnings]
       this page
Virus Warnings   [Tell someone about this]
By new photos from my party! ... is a VIRUS
Bill Williams


Edit MessageUploaded - 28 Jan 2002 12:32
W32/MyParty-A is a Windows 32 email-aware worm which arrives as an email with the following characteristics:

Subject: new photos from my party!

Message text:

Hello!

My party... It was absolutely amazing!
I have attached my web page with new photos!
If you can please make color prints of my photos. Thanks!

Attached filename: www.myparty.yahoo.com

Some people may be fooled into believing the attached file is a link to a website. If the attached file is executed the worm sends a copy of itself to everybody in the Windows Address book (except the current user) using a built in SMTP engine.

It gets the SMTP server information from the registry key: HKCU\Software\Microsoft\Internet Account Manager\Accounts\00000001

The worm also sends an email to napster@gala.net to track its spread.

Information available from
Link http://www.sophos.com/virusinfo/analyses/w32mypartya.html


Home Page.

Click to Add Comments.

Implemented by Bill Williams (IT)
based on ASP Forum.

7233
adv19_79.gif