Home / malware Win32.MyLife.D@mm
First posted on 21 November 2011.
Source: BitDefenderAliases :
Win32.MyLife.D@mm is also known as N/A.
Explanation :
Like its predecessors, this virus sends itself to the user's contacts by using Microsoft Outlook. It was written in Visual Basic and packed with UPX.
It arrives as an attachment to an e-mail message in this format:
Subject:New Screen Saver
Body:
Hiiiii
How are youuuuuuuu?
look to the New Screen Saver it's vvvery verrrry ffffunny :-) :-)
i promise you will love it? ok
buy
========No Viruse Found========
MCAFEE.COM
--------------------------------------------------------
Attachement: "screen.scr" (size: ~ 8 KB)
The attachment's filename extension is (as before) chosen to fool the user into thinking it is a Windows screen-saver. When run, the virus first displays an "error" message box:
then drops a copy of itself in the Windows System folder and registers it to be run each time the "infected" user logs on to Windows. The virus will send copies of itself to all the user's contacts in the Address Book and MSN Messenger contact list, by creating e-mail messages in the format described above. Unlike its predecessors, this "improved" version also sends an email to the address zary2000@email.com:
Depending on the current time, the virus might also try to delete all files in the root folder of the primary hard-disk partition (C:) and also *.sys and *.vxd files.Last update 21 November 2011
