|[home] | [profile] | [register] | [help] | [Contact Us]|
|Virus Warnings||[Tell someone about this]|
|By||new photos from my party! ... is a VIRUS|
|Bill Williams||Uploaded - 28 Jan 2002 12:32|
W32/MyParty-A is a Windows 32 email-aware worm which arrives as an email with the following characteristics:
Subject: new photos from my party!
My party... It was absolutely amazing!
Attached filename: www.myparty.yahoo.com
Some people may be fooled into believing the attached file is a link to a website. If the attached file is executed the worm sends a copy of itself to everybody in the Windows Address book (except the current user) using a built in SMTP engine.
It gets the SMTP server information from the registry key: HKCU\Software\Microsoft\Internet Account Manager\Accounts\00000001
The worm also sends an email to firstname.lastname@example.org to track its spread.
Implemented by Bill Williams (IT)
based on ASP Forum.