Home / malware Win32.MyLife.E@mm
First posted on 21 November 2011.
Source: BitDefenderAliases :
Win32.MyLife.E@mm is also known as N/A.
Explanation :
This is another version of Win32.MyLife.C@mm - a mass-mailer that uses Microsoft Outlook to spread itself; it was also written in Visual Basic and packed using UPX.
It arrives as an attachment to an e-mail message in this format:
Subject:sexxxyyy Screen Saver
Body:
Hiii
How are youu!!?
look to the New Screen Saver it's vvvery verrrry ffffunny :-) :-)
i promise you will love it? ok
buyyyy
========No Viruse Found========
MCAFEE.COM
Attachement: "screen.scr" (size: ~ 11 KB)
The attachment's filename extension is (as before) chosen to fool the user into thinking it is a Windows screen-saver. When run, the virus first displays an "error" message box:
then drops a copy of itself in the Windows System folder and registers it to be run each time the "infected" user logs on to Windows. The virus will send copies of itself to all the user's contacts in the Address Book and MSN Messenger contact list, by creating e-mail messages in the format described above. An email will also be sent to the address zary2000@email.com:
When the virus is run again (eg: each time Windows is restarted by the "infected" user), the following message box will be displayed:
Under certain conditions, the virus might attempt to delete important data on the user's hard-disk (files in the primary partition's root folder, files in My Documents, *.sys and *.ini files in the Windows folder, *.vxd and *.sys files in the Windows System folder, and files on the primary partitions D:, E:, F: and G:).Last update 21 November 2011
