Tech Support Forum - View Single Post

sethvel1 · 06-10-2009, 02:09 PM

This is an old virus that should be picked up by any AV, (suggest Kaspersky) or you can locate the files yourself. When the worm's file is run, it creates an empty file with the name 'MyLife.mpg' in the root of C: drive and tries to open it with Windows Media Player. Then the worm it copies itself to Windows System folder with the following names:

Julia_Roberts_F*cking_toilet.Mpeg_.scr
Shakira_1997_part_1_.Mpeg_.scr

Then it creates a startup key for one of its files in System Registry:

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Win32" = "%winsysdir%\Shakira_1997_part_1_.Mpeg_.scr"

06-10-2009, 02:09 PM	#2 (permalink)
sethvel1 Registered User Join Date: Jun 2009 Location: Morrisville NC Posts: 26 OS: windows xp pro	Re: "My Life" trojan This is an old virus that should be picked up by any AV, (suggest Kaspersky) or you can locate the files yourself. When the worm's file is run, it creates an empty file with the name 'MyLife.mpg' in the root of C: drive and tries to open it with Windows Media Player. Then the worm it copies itself to Windows System folder with the following names: Julia_Roberts_F*cking_toilet.Mpeg_.scr Shakira_1997_part_1_.Mpeg_.scr Then it creates a startup key for one of its files in System Registry: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Win32" = "%winsysdir%\Shakira_1997_part_1_.Mpeg_.scr"