This is the first known worm that spreads via MSN Messenger Service program. If MSN Messenger Service is not installed on the local system, the worm will fail to run properly.
W32/Hello.exe Worm Virus arrives as HELLO.EXE, a Visual Basic 5 application, via MSN Messenger Service. When run, the worm creates a shortcut, with no name and no icon, into the Windows Startup folder. If MSN Messenger is not found in the default directory the worm will crash, displaying the message:
Run-time Error '91'.
Object variable or With block variable not set.
Otherwise, the worm will send the following message to users who are on the MSN Messenger contact list:
i have a file for u. its real funny
If a subscriber clicks HELLO.EXE, they will send the virus and a message to all the users on their MSN Messenger contact list.
Customers should take the following steps to protect their computers:
- Do not double-click the HELLO.EXE or virus link. Delete this file immediately.
- Make sure your anti-virus software is up-to-date (go to your anti-virus company’s Web site or call them to get more information).
- Back up the data on your hard drive(s) on a regular basis
- Be cautious about opening messages from people you do not know. Remember that in MSN Messenger you can control who is on your buddy list and can send you messages
|