Back to the Homepage
german version

An easy guide to build yourself a PC
Hardwaretests: Testresults and benchmarks
Viruses: Prophylaxis, identification, removal

All About PC - get in contact
All About PC - Impressum
Links

 Latest Reviews 

Click to read the review!
ABIT VP6
Click to read the review!
ASUS A7V133
Click to read the review!
EPOX 8KTA3+
Click to read the review!
DEEP OCEAN SCREEN SAVER

 Reviews 
 Virus Descriptions 
wkda_adv1_ermitteln_468x60


Danger
Diffusion

The W32/Mypics.worm is a masked Y2K-virus. If you are reaching the next millennium your harddisk drive is formated.

W32/Mypics.worm:

Virus name

W32/Mypics.worm

Type

Internet worm with a masked Y2K-payload

Infection:
The email, that the worm uses to spread and to infect your PC, has no subject but the text "Here's some pictures for you". If you open the attachment "Pics4You.exe" the virus infects your PC and starts its payload.

Payload:
At first it sends itself to the first 50 entries in your Outlook-adressbook.
At january the 1st 2000 (or any day after this) the second step of the payload begins. The virus changes the starting page of the Internet Explorer and formats your harddisk drive. The starting page of the IE is changed to the adress "http://www.geocities.com/SiliconValley/Vista/8279/index.html".
When you are booting your PC the next time, a warning appears on the screen "CMOS checksum is invalid", which can be interpreted as a Y2K-Bug. But this is the beginning of the formating-routine.

Remarks:
If you use Norton Anti-Virus, you can download a patch against this virus under http://www.symantec.com/avcenter/download.html

Copyright by All-About-PC. All rights reserved.
All information on this website is protected by international law. Any reproduction or publication without the agreement of the editorial office is prohibited. Please respect the work of others. 
Although all information on this website is hardly recherched and mostly checked and confirmed from secondary side, we do not take the responsibillity for any damage originated from the use of the information on our site.