W32/My Life.b Last Updated 3/22/02 11:00am

A new email worm, W32/My Life.b, has been detected in the wild.

The subject of the email is:
bill caricature

The message body is:
Hiiiii
How are youuuuuuuu?
look to bill caricature it's vvvery verrrry ffffunny :-)
I promise you will love it? ok
buy

======NO Viruse Found======
                 MCAFEE.COM

The attachment is:
cari.scr

According to NAI, when the attachment is executed an image is displayed while the worm sends itself out to everyone in the infected client's address book.

The worm also attempts to delete the following files upon restarting the machine (this may not work due to bugs in the code):

*.* from C:\ D:\ E:\ and F:\
*.SYS, *.VXD, *.OCX and *.NLS from C:\WINDOWS\SYSTEM

NAI has released Dat 4193 and it is now available on the NIH Antivirus site. DAT 4193 will detect and remove W32/My Life.b.

For more information see http://vil.nai.com/vil/content/v_99414.htm from NAI

Do Not Open The Attachment!

This archive is not intended to be comprehensive. For a more complete virus library, please visit NAI's Virus Information Library at http://vil.nai.com.