W32.MyPower - Setup98_Microsoft

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.MyPower

Sender:

Varies.

Subject:

Consists of five words randomly chosen from this list:
3DFx
Animated
Best
Fixed
Games
Microsoft
New
Program
Protection
Saver
Saving
Screen
The
Tucows
ZDnet
(B) Randomly chosen from the following four possibilities:
Animated, Protection, Saver, Fixed, Saving, Games, 3DFx Studio (B)
microsoft, Borland, ZDnet
New, Patch for, Crack For, The Best
Tucows, Windows, Program

Message:

Dear CustomerThanks for your attentions to our programs, we glad you
like it this is the other program you been asking about, save it to
Disk and run it
Dear Visitor,Thanks for submiting to our site, this is the file you
ask for..:)after you run this program you can access our site with no
Password required..!
Hey this is the program you been ask for, save it to disk and run
this program, give me feed back ASAP OK...!
Hi..friends.., check out this screen saver, it's very cute.. ;), just
save to disk  or run it from your current location..!
This file is needed by your antivirus program, save it to your disk,
and run this patchyour Antivirus security Patch will be updated
soon..!
To : Microsoft Windows UserDear Users, after we analize the problems
you have been asking, with this file you can fix the problem in your
MS-Windows, save this file to disk, and extract it in current Folder,
and you will be prompt for installation folder.., and follow program
instructions.

Attachment:

3DFx_Fix311258Beta_PATCH.ZIP.scr
3DFxText_FULL281058_Demo.ZIP.scr
Animation_PATCH_12061979_Trial.ZIP.scr
Animations_PATCH_SETUP.scr
Borland_Install32_Beta080279.exe
Fx3d_FULL_291182_DEMO.ZIP.scr
Install_Wizard.exe
Install32_Beta12061979_Fixed.exe
Mystery_FIX_FULL_DEMO120492A.ZIP.scr
Nature_TRIAL120679_Full.ZIP.scr
Nude_Patch_10110001_Beta.ZIP.scr
Setup98_Microsoft_patch120679.exe
Water_TRIAL_BETA_080279A.ZIP.scr

Comments: A mass-mailing worm that sends itself to all addresses in the Microsoft Outlook Address Book.The "B" variant uses the Microsoft Windows Address Book.

Symptoms:


 Inserts the text: WORM NAME=I-Worm.Iwing 
 MY STATUS=...IS HERE...! 
 into the file %Windows%Win.ini 
 (The "B" variant adds the string [EMAIL] MAILED=TRUE instead) 
 Adds the value SSaver      %System%SSaver.scr to the registry key
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Update the virus definitions
Run a full system scan
Delete all files that are detected as W32.MyPower@mm.
Delete the value SSaverfrom the registry keyHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run