Need help? Ask the community or hire an expert.
Go to Avira Answers
Alias:I-Worm.Aphex, Psec. Aplore.A
Size:319.488 Bytes 
Damage:Worm/Aphex.3 makes a registry entry and prompts the user to download it. 
VDF Version: 

DistributionThe Visual Basic file "email.vbs" contains the damage routine and is attached to the virus email.
After the worm terminates the Outlook application, the script is deleted. The virus email looks like this:
From: infected-user-name
The subject and body contain only ".".

Technical DetailsWhen the worm is activated, it copies itself in Windows System directory as "explorer.exe". The registry entry
ensures the automatic start of the virus.

The worm has its own IRC engine and tries to connect to an IRC server. It connects to various ports and sends private messages to the users that try to connect to the server.
It offers a link to the infected computer. The site shows that a download should be performed in order to see the contents. The download is requested every second. After the user opens the file, the worm starts infecting the system.
Description inserted by Crony Walker on Tuesday, June 15, 2004

Back . . . .