Find a Partner
This window is encrypted for your security.
Need help? Ask the community or hire an expert.
Go to Avira Answers
I-Worm.Choke.a, W32/Choke, W95/Worm.Choke, W32.Choke.Worm
Spreads using MSN Messenger
The worm spreads as ShootPresidentBUSH.exe, to all MSN Messenger Benutzer that are chatting with the infected user. The file contains the following message: President bush shooter is game that allows you to shoot Bush balzz hahaha
When activated, the worm is memory resident and creates the following files:
Then it displays the following messages:
"This program needs Flash 6.5 to run!"
"Cannot run program!, Quiting"
Eventually, it makes the registry entry: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
which relates to all files created on drive C:\.
Description inserted by Crony Walker on Tuesday, June 15, 2004