|
|
Virus Information Center
WORM_MALDAL.J
Virus type: Worm
Destructive: No
Aliases:
MALDAL.J
Description:
This mass-mailing worm arrives as a link to a
Web site. It has its own SMTP engine that it
uses to send an email to all users listed in the
infected user's Outlook address book, Microsoft
Messenger (MSN) contact list, and email addresses
contained in HTM and HTML files of the infected users.
The email this worm sends carries a the link to
a malicious Web site where it may be downloaded.
When the email recipient visits the link and
downloads a FIXERDATA.EXE file, a UPX-compressed copy
of itself, DATA.EXE, is also downloaded.
Solution:
1) Click Start>Run, type Regedit then hit the Enter key.
2) In the left panel, double click the following:
HKEY_LOCAL_MACHINE>Software>Microsoft>Windows
>CurrentVersion>RunServices
3) In the right panel, look for and then delete this registry entry:
"Data"="%System%\Data.exe"
4) In the left panel, double click the following:
HKEY_LOCAL_MACHINE>Software
5) Look for and then delete these registry keys:
"path"="\DATA.exe"
"Start"="5"
"Day"=
"Mail"= "5"
6) Close the Registry.
7) Restart your computer.
8)Scan your PC for viruses at
www.antivirus.ie/index.mv?free_scan=1
delete all files detected as WORM_MALDAL.J
|