Find a Partner
This window is encrypted for your security.
Need help? Ask the community or hire an expert.
Go to Avira Answers
Sent by email.
This worm spreads via Microsoft Outlook and Outlook Express, opening the Outlook Address Book and sending itself to all email addresses found.
When the attachment is opened, the worm spreads and deletes all emails having the subject 'Homepage', from "Inbox" and "Deleted Items".
The worm copies itself in Windows temporary directory (C:WindowsTemp) and makes the following entry in the registry with the value '1':
After sending the emails, the worm opens the following Internet sites with Internet Explorer:
Description inserted by Crony Walker on Tuesday, June 15, 2004