Internet worm "Melting" is ready to melt your screen

09 Mar 2000
Virus News

Kaspersky Lab recommends to update your AVP anti-virus database

Cambridge, UK, March 10, 2000 - Kaspersky Lab Int., an international anti-virus software vendor, warns about the discovery of a new Internet-worm I-Worm.Melting. The worm has been reported "in-the-wild" by Kaspersky Lab's customers in Eastern Europe.

General Characteristics

I-Worm.Melting is a worm-style virus spreading via the Internet. The worm itself is Win32 PE EXE file about 18Kb of length, written in VisualBasic. It is transferred via the Internet in email messages with infected attached file with the "MeltingScreen.exe" name.

When infected message is received and the attached EXE file is executed, the worm gets control and starts its spreading routine. This routine gets access to MS Outlook, enters address book, gets Internet addresses from there and sends messages to these addresses.

The messages have copy of the worm in attach, the Subject is "Fantastic Screensaver", and the message body looks as follows:

Hello my friend !

Attached is my newest and funniest Screensaver, I named it MeltingScreen. Test it and tell me what you think.

Have a nice day my friend.

p.s.: Please install the Runtime Library for VB 5.0, before you run the ScreenSaver.

More technical details
Prevention and removal

In order to prevent infection with I-Worm.Melting Kaspersky Lab recommends not to start MeltingScreen.exe file delivered to your mailbox with an e-mail message.

In case the worm has already penetrated to your computer you need to update your AntiViral Toolkit Pro (AVP) anti-virus database and start your AVP scanner to perform a full anti-virus check of your computer.

Emergency update of AVP anti-virus database is available at Kaspersky Lab's WWW site.

If you want to learn more about computer malware and methods of their prevention - you can visit AVP Virus Encyclopedia at www.viruslist.com.