LIFE.SCR PROCESS INFORMATION
Name : My
Path : %SYSTEM%\My
Life.scr [ C:\Windows\System32\My Life.scr ]
type : Internet
Name : W32.MyLife.A@mm
Alias : I-Worm.MyLife.A,
level : Low
is dropped by MyLife Internet Worm. The worm is 30720 bytes
long and the e-mail attachment name will be "My Life.scr". The worm is written in
Visual Basic 6.0 and it is compressed by UPX.
The worm arrives as an e-mail
attachment. The message subject will be "my life ohhhhhhhhhhhhh", the body will be
How are youuuuuuuu?
look to the digital picture it's my love
vvvery verrrry ffffunny :-)
my life = my car
my car = my house "
When executed, the worm
displays a painting on the screen, and then makes
a copy of itself in the Windows system directory
as "My Life.scr. Then
creates the registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\stmgr,
which will enable the virus to activate upon each
startup. Then it collects addresses from Outlook
Address Book and sends infected messages to all
the email Ids stored.
On the next startup
MyLife.A attempts to delete all com, .sys, .ini,
.exe, .sys, .vxd, .exe and .dll file from several
directories, but this attempt fails due to a bug
in the virus code. This worm is also known as W32.MyLife.A@mm,
How can I protect my
Solo has incorporated My
Life.scr and its variants in signature file to
protect users from this worm attack. Solo
antivirus registered users are already protected
from this worm. Make sure that you have installed
registered version of Solo Antivirus to protect
your system from all virus threats.
to remove this worm?
you are already infected with My Life.scr, you
can remove it from your computer using Solo
Antivirus software. Solo antivirus can
detect and remove W32.MyLife@mm and its variants
safely. Use the following link to Download
30 day trial version of Solo antivirus
to remove viruses from your computer.
Solo anti-virus not only
scans for all viruses, it contains a unique System
Integrity Checker to protect you from
New Internet Worms, Backdoors and
malicious VB, Java Scripts. It also
effectively removes all existing Internet Worms,
File viruses, malicious VB, Java scripts, Trojans,
Backdoors, boot sector, partition table and macro
purchase Solo antivirus using the link