W32/Atomix Worm

 Information about the W32/Atomix Worm:

W32/Atomix is a worm. The worm will infect Windows systems and spreads through MSN Hotmail.

Upon execution, the worm drops a copy of itself as dho.exe in Windows folder.

The worm modifies registry at the following location to load itself during each startup.

HKEY_CURRENT_USER\Software\microsoft\windows\currentversion\run

It displays a message box with message.

Error de datos

To propogate itself, the worm adds any one of the following text in every mail which is sent through MSN Hotmail account.

i want show you something,http://[blocked].miarroba.com
Hi, Happy San Valentin Day Download you Postcards from http://[blocked].miarroba.com
Hola, feliz dia de san valentin te hice una postal, descargala de aqui http://[blocked].miarroba.com
oye hasme un favor sip porfa, esque hice una postal para alguien pero quiero ver si se ve, ayudame, de aqui la descargas, yo la puedo ver pero puess quiero ver si se ve en otro lado, http://www.[blocked].miarroba.com ,me dices ok?

It also sends the following message to all computers in LAN using net command.

Se ha detectado un virus muy peligroso en la red, descarge gratis el parche de esta pagina http://www.[blocked].miarroba.com

This worm first appeared on March 07, 2006.

 Other names of W32/Atomix Worm:

This Worm is also known as W32.Hotmatom, Atomix.A.