You may have received a virus from this mailbox. Here are the instructions
on how to remove them.


-----Original Message-----
From: Sheshadri Mantha [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 08, 2002 11:04 AM
To: Dinkar Ganti
Subject: FW: Sophos Anti-Virus IDE alert: W32/MyLife-A - And how to get
rid of it...




-----Original Message-----
From: Venkatesh Mohanraj [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 08, 2002 10:45 AM
To: Zhang, John; yogu; vishakar; Vimal; Vijay Ganesh;
[EMAIL PROTECTED]; [EMAIL PROTECTED]; Tanusree Pai; sure strikes
back; [EMAIL PROTECTED]; srk-co; skkk7
Cc: Sheshadri Mantha; [EMAIL PROTECTED]; Sasikumar;
sangeetha selvaraj; [EMAIL PROTECTED]; rupica; raghu pr; RAGHU;
Praveen; Prakash Thulasiraman; NAVANEETHA KRISHNAN; navaneetha krishnan;
[EMAIL PROTECTED]; Natarajan, R. G.; Nandhitha Madhavan;
Mohan Murugesan; Mohan; MADHURA RAJENDRA; Kandampalayam, Shanmugam (GEA,
501477); Kalyan; John Zhang; John McAleely (Symbian); Jing Huang; ganesh
gopal; [EMAIL PROTECTED]; Ferrari; Dr.C.Mohanraj; Chris Wiseman;
BalaC; Ashok kumar; Arun Sundaramoorthy; Ajay
Subject: FW: Sophos Anti-Virus IDE alert: W32/MyLife-A - And how to get
rid of it...




-----Original Message-----
From: Karthik Sundaram [mailto:[EMAIL PROTECTED]]
Sent: Friday, March 08, 2002 10:23 AM
To: [EMAIL PROTECTED]
Subject: FW: Sophos Anti-Virus IDE alert: W32/MyLife-A - And how to get
rid of it...



 Attached is the information on this virus..
 If you are infected :

   1. Find this file  C:\windows\system\My Life.scr  and delete it. For
Win2k it will be in C:\windows\system32 folder.


   2. Start Registry editor. (Start-> Run->regedit). Select My Computer. Go
to Edit -> Find. <type>My Life</type>. Hit Find.

      Delete the key when the search ends. Just do a <SHIFT+TAB> after this.
Hit Delete key, Say Yes if a dialog box comes up.

        HKCU\Software\Microsoft\Windows\CurrentVersion\Run\strmgr
=C:\windows\system\My Life.scr.


-----Original Message-----
From: Sophos Alert System [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 07, 2002 10:38 AM
To: Undisclosed recipients:
Subject: Sophos Anti-Virus IDE alert: W32/MyLife-A


Name: W32/MyLife-A
Type: Win32 worm
Date: 7 March 2002

A virus identity file (IDE) which provides protection is
available now from our website and will be incorporated
into the May 2002 (3.57) release of Sophos Anti-Virus.

At the time of writing Sophos has received no reports from users
affected by this worm. However, we have issued this advisory
following enquiries to our support department from customers.

Description:

W32/MyLife-A arrives in an email with the following
characteristics:

Subject Line: my life ohhhhhhhhhhhhh
Attachment: My Life.scr
Body Text:
Hiiiii
How are youuuuuuuu?
look to the digital picture it's my love
vvvery verrrry ffffunny :-)
my life = my car
my car = my house

When run the worm will copy itself to
C:\windows\system\My Life.scr and add the registry key

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\strmgr =
C:\windows\system\My Life.scr.

It will then email itself to addresses from the Outlook address
book.

Finally it will display a painting of a young girl.


Download the IDE file from
http://www.sophos.com/downloads/ide/mylife.ide

Read the analysis at
http://www.sophos.com/virusinfo/analyses/w32mylifea.html

Download a ZIP file containing all the IDE files available for
the current version of Sophos Anti-Virus from
http://www.sophos.com/downloads/ide/ides.zip

Read about how to use IDE files at
http://www.sophos.com/downloads/ide/using.html

To unsubscribe from this service please visit
http://www.sophos.com/virusinfo/notifications







---------------------------------------------------------------------
Please check that your question has not already been answered in the
FAQ before posting. <http://xml.apache.org/cocoon/faqs.html>

To unsubscribe, e-mail: <[EMAIL PROTECTED]>
For additional commands, e-mail: <[EMAIL PROTECTED]>

Reply via email to