W32.MyLife - Sarah.scr (k)

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.MyLife

Sender:

varies

Subject:

bill caricature (b)
my life ohhhhhhhhhhhhh (gen)
Old Shakira (n)
ox  sharon (g)
peeeeeep (h)
peeeeep picture (i)
SARAH SCREEN SAVER (k)
sexyy Screen Saver (j)
sexxxyyy Screen Saver (e)
The list (c,f)

Message:

buy
Hiiiii
How are youuuuuuuu?
i promise you will love it? ok
look to bill caricature it's vvvery verrrry ffffunny :-) :-)
MCAFEE.COM (b)
========No Viruse Found========

Attachment:

Cari.scr (b)
List.TXT.scr (c)
List480.TXT.scr (f)
My Life.scr (gen)
Ox&Wife.scr (g)
peeeep~~~.scr (i)
peeeeep.mpeg.scr (h)
Sarah.scr (k)
Screen.scr (e)
Shakira_1997_part_1_.Mpeg_.scr (n)
USA.scr (j)

Comments: A simple mass-mailer that sends itself to all contacts in the Microsoft Outlook address book.and attempts (but fails) to delete files that have the extensions .com, .sys, .ini, .exe, .sys,.vxd, .exe, or .dll.

Symptoms:


 On execution, it displays a caricature of Bill Clinton. (b) 
 On execution, it displays an old-looking picture of a young girl
sniffing a flower. 
 It also adds the value stmgr C:WINDOWSSYSTEMMy Life.scr to the
registry key 
 HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun Version F
will format drives D, E, F, G, H and I and delete all files on the C
drive

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update your virus defs.
Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files.
Run a full system scan.
Delete all files that are detected as W32.MyLife@mm.