my life.scr - Dangerous
my life.scr
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
This is the worm virus currently spreading through the Internet in the form of an attachment to infected e-mails.
The worm is attached to infected e-mail messages within the attachment named "My Life.scr".
The worm uses Microsoft Outlook to send out infected e-mail messages to all addresses found in the Microsoft Outlook Address Book.
When the worm is launched for the first time it shows a window with a picture.
The worm checks the current date, if the current minute value is more than 45 it deletes files with extensions .SYS and .COM in the root directory of disk C:,
files with extensions .COM, .SYS, .INI, .EXE in the Windows directory and files with extensions .SYS, .VXD, .EXE, .DLL in the Windows System directory.
Manual removal:
Navigate to the keys:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
and delete the value: stmgr=%SYSTEM%\My Life.scr