W32/My Life.c, W32/My Life.f Last Updated 4/04/02 7:55am

Two new variants of the email worm W32/My Life has been detected in the wild.

W/32My Life.c

The subject of the email is:
my life ohhhhhhhhhhhhh

The message body is:
Hiiiii
How are youuuuuuuu?
Here is that Notepad you asked for ... don't show
anyone else ;-)
Notepad = list
list = 137
buyyyy

The attachment is:
List.TXT.scr

W/32My Life.f

The subject of the email is:
my life ohhhhhhhhhhhhh

The message body is:
Hiiiii
How are youuuuuuuu?
look to the notepad it's vvvery verrrry
ffffunny :-) :-)
i promise you will love it :-)
buyyyy

The attachment is:
List480.TXT.scr

When either attachment is executed an error message is displayed while the worm sends itself out to all entries in the infected client's address book.

W32/Mylife is reported to spread through Internet Messaging (IM) as well as email.

The worms also attempts to delete files from local hard drives and/or format local hard drives.

NAI has released DAT 4195 which detects and removes these viruses.

For more information see http://vil.nai.com/vil/content/v_993428.htm from NAI regarding W32/MyLife.c@MM.

For more information see http://vil.nai.com/vil/content/v_99429.htm from NAI regarding W32/MyLife.f@MM.

Do Not Open The Attachment!

This archive is not intended to be comprehensive. For a more complete virus library, please visit NAI's Virus Information Library at http://vil.nai.com.