Find a Partner
This window is encrypted for your security.
Need help? Ask the community or hire an expert.
Go to Avira Answers
Sent by email.
It is a massmailer which sends itself with Microsoft Outlook, using the Outlook Address Book.
The email sent by the worm looks as below:
Subject: RE:Nuevo video de Caifanes
Body: Caifanes regresa y te muestra su nuevo video musical ... Regards, Harry Hirsch
When "CAIFANES.CHM" is opened, a window is displayed, while Brit.B creates hh.dat in C:\%WinDIR%\Application Data\Microsoft\HTML Help\ and sends itself with Outlook. The file hh.dat contains important virus information, as for example the path where the attachment was opened.
Description inserted by Crony Walker on Tuesday, June 15, 2004