Mass mailing worm.Mugly.
It uses own SMTP engine to send e-mails.
After infecting it copies its body to %System%\xxz.tmp.
Created files:
# %System%\attached.zip
# %System%\ANSMTP.DLL (an SMTP engine)
# %System%\bszip.dll
# %System%\uglym.jpg
# %System%\winprotect.exe (a W32.Spybot.Worm variant)
# %System%\SVKP.sys
# \bt32.exe
Displays the file %System%\uglym.jpg in the browser.
Registers SMTP engine.
Adds to Windows startup.
Remove it from startup using RegRun Startup Optimizer.
Variants:
lexplore.exe
vb6.exe
Removal: vb6.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software:
UnHackMe - easy removal Rootkits/Adware/Spyware.
http://www.unhackme.com
RegRun Security Suite - removal and protection.
http://www.regrun.com
RegRun Reanimator - free removal tool.
greatis.com/reanimator
RegRun - User's Choice
Vista Programs - full info...
What is hidden in MSDN?
.NET Secrets Revealed
Why software developers prefer Win32.FreeTechSecrets.com?
All Unix Manuals in Alphabetical Order
C# controls for .NET in 3 simple steps.
Constantly updated. Last update:
May 12 2008
Interesting information about Vista programs...
Need consultation?
Would you like to add your opinion?