W32.Sahay - MathMagic.scr

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.Sahay

Sender:

Varies.

Subject:

Fw: Sit back and be surprised..

Message:

Think of a number between 1 and 52.Say it out loud, and keep repeating
while you read on.Think of the name of someone you know (of the
opposite sex).Now count which place in the alphabet, the second letter
of that name has.Add that number to the number you were thinking
of.Say the number out loud 3 times.Now count which place in the
alphabet the first letter of your first name has, and substract that
number from the one you just had.Say it out loud 3 times.Now sit back,
watch the attached slide show, and be surprised..

Attachment:

MathMagic.scr

Comments: A mass-mailing worm that sends email messages to all the addresses in the MicrosoftOutlook Address Book.

Symptoms:


 Copies itself to C:MathMagic.scr. 
 If it finds the Yaha virus on the computer, it displays the
following message (with the title (Exchange viruses?): 
 Hi there.. it seems you were infected with Yaha.k. That worm
however, written by an idiot who sPeLlS lIkE tHiS,abused my website
and got me toreceive the complaints. Therefore, I have just
disinfected you.Don't worry tho.. as I didn't wanna steal from you, I
gave you this virus (Win32.HLLP.YahaSux) in return :) 
 Greetz, 
 Gigabyte [Metaphase VX Team]

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update the virus definitions.
Run a full system scan and delete all the files detected as W32.Sahay.A@mm.