
PRETTY
PARK WORM FREQUENTLY REPORTED
Virus Name : W32.PrettyPark@mm
Alias : I-Worm.PrettyPark,
W32.PrettyPark-A
Virus type : Internet
worm
Threat
level : Low
Virus
details :
Pretty
Park is an Internet worm, uses mass mailing and mIRC clients
to spread. There are lot of unpacked variants
also reported in the wild.
While opening the e-mail
attachment, the worm will drop
"FILES32.VXD" in the windows system
folder. Then it changes the registry settings so that the the
"FILES32.VXD" is automatically executed
when each file is executed. It checks for worm's
presence in memory. If the worm is not loaded in
memory, 3D pipes screen saver will be activated
and the worm is loaded in memory.
Then it will email the
virus to all addresses stroed in the windows
address book. Windows address book contains the
addresses stroed in Outlook express. The email
subject will be "C:\CoolProgs\Pretty
Park.exe" and the message body will be
"Test Pretty Park.exe".
The
attachment icon is shown below:

It will also try connect
to few specific IRC servers. While connected, the
virus author can access infected users computer
details like Computer name, OS details, ICQ
number, email address and dial-up passwords.
How can I protect my
system?
Solo has incorporated
W32.PrettyPark.A@mm in its signature file to protect
users from this worm attack. Solo antivirus
registered users are already protected from this
worm. Make sure that you have installed
registered version of Solo Antivirus to protect
your system from all virus threats.
How
to remove this worm?
If
you are already infected with this worm, you can
remove it from your computer using Solo Antivirus
software. Solo antivirus can detect and
remove W32.PrettyPark@mm safely. Use the
following link to Download 30 day trial
version of Solo antivirus [1670
KB] to
remove viruses from your computer.

Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VB, Java scripts,
Trojans, Backdoors, boot sector, partition table
and macro viruses.
You can
purchase Solo antivirus using the link 

|