Amend.A@mm (W32.Amend.A@mm)
is a new worm that can be installed after you open
infected e-mail attachment. After installation Amend.A@mm
will send itself to all e-mail adresess founded on
harddrive. Amend.A@mm also can copy itself to removable
drives (flash disks, cards e.t.c.). Amend.A@mm can
steal your personal data (credit card numbers, personal
information) and open system securty holes, so remote
atackers can control your computer.
Amend.A@mm behaviour
Amend.A@mm installs after you open infected attachment.
Amend.A@mm may recreate itself.
Amend.A@mm may steal your personal data.
Amend.A@mm may send itself to other computers.
Amend.A@mm is difficult to uninstall.
Amend.A@mm uses Messaging Application Protocol
Interface (MAPI) to send email messages with itself
as an attachment. The email has the following characteristics:
Subject:
I love lhw
My name is lhw
Message:
IT IS YOUR Document THAT YOU WANT?
YOU can see it by runing the attachment
Microsoft Visual Studio is found A LOT BUG! Try to
repair by attachments!
The best important mend of Microsoft ,Please run the
mend!!
You should run the mend at ance,or you will be infected
by the most severity virus SOO
Attachment:
Document.Doc (30.5K)[86 BLANK SPACES].com
Microsoft Visual Studio_BuG.ZIP (30.5K)[86 BLANK SPACES].com
The best important mend of Microsoft (30.5K)[86 BLANK
SPACES].com
Information from www.symantec.com