high
Summary
Summary
Action- More Information
| Detected by | All Sophos products |
|---|---|
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for disinfecting PE executables.
More Information
This virus renames .EXE files in the Windows subdirectory to .BIN, saving itself with the original .EXE filename. This means that everytime the executable file is run the virus is launched instead.
W32/Melting makes changes to the Registry, setting the key "HKEY_CURRENT_USER\MeltingScreen\String" to "MeltingScreen". If this Registry key was not already set, the virus forwards itself as an email attachment to all the email addresses in the Microsoft Outlook address book.
The message the virus sends appears as follows:
Subject: Fantastic Screensaver
Message text:
Hello my friend !
Attached is my newest and funniest Screensaver, I named it MeltingScreen. Test it and tell me what you think.
Have a nice day my friend.
p.s.: Please install the Runtime Library for VB 5.0, before you run the ScreenSaver.
|
