high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing worms.
Please read the instructions for removing worms.
More Information
W32/Marijuana is a worm that attempts to email itself to entries in the Microsoft Outlook address book with the subject "check this out!!!". The worm copies itself to system32.exe in the Windows directory, and sets the registry key HKLM\Software\Microsoft\Windows
\CurrentVersion\Run\System32 to point to the copy, so that it runs on every reboot.
The worm sets the Internet Explorer home page to http://my.marijuana.com and changes the Windows registered owner to "Im A Pot Head!", and the organisation to "Stoner's Pot Palace".
It puts an icon of a marijuana leaf in the system tray.
When the user clicks on the icon, it displays a message box with a long statement about legalising marijuana.
Each day at 16:20, it displays a message box with the title "The Marijuana Virus!!" and the message "It's 4:20, Time to toke up :)"
|
