W32.MyParty - myparty.photos.yahoo.com (B)

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.MyParty

Sender:

Varies. Usually someone who knows you.

Subject:

new photos from my party!

Message:

Hello!
My party... It was absolutely amazing!I have attached my web page
with new photos!If you can please make color prints of my photos.
Thanks!

Attachment:

myparty.photos.yahoo.com (B)
www.myparty.yahoo.com

Comments: A mass-mailing email worm. Uses contacts fromyour Windows address book and email addresses that it finds inOutlook Express folders.

Symptoms:


 If the computer date is not between January 25-29, 2002, or if the
keyboard settings are set to Russian, the worm copies itself to: 
 C:RecycledF-(random digits)-(random digits)-(random digits) and
exits. 
 (B) the dates must be between January 20 and 24, 2002.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Run LiveUpdate to make sure that you have the most recent virus definitions.
Do one of the following, depending on your version of Windows:
Windows 95/98/Me/200/XP: Restart the computer in Safe mode.
Windows NT: End task in the Msstask.exe process. To do this:
Press Ctrl+Alt+Delete one time.
Click Task Manager.
Click the Processes tab.
Click the "Image Name" column header two times to sort the processes alphabetically.
Scroll through the list, and look for the following process:
Msstask.exe
CAUTION: This is not the same as Mstask.exe--note the single "s". Mstask.exe is a legitimate Microsoft process. Do not end that task.
If you find the file--you will only find it if the process is currently running--click it and then click End Process.
Close the Task Manager.
(All operating systems resume here)
Start Norton AntiVirus (NAV), and make sure that NAV is configured to scan all files. For instructions on how to do this, read the document How to configure Norton AntiVirus to scan all files.
Run a full system scan.
Delete all files that are detected as W32.Myparty@mm or Backdoor.Myparty.