W32/Enemany.B Worm

 Information about the W32/Enemany.B worm:

W32/Enemany.B is an email worm. It is a variant of W32/Enemany.A. This worm will infect Windows systems using email addresses present in Outlook Address book.

The worm arrives with the following subject.

Edonkey Update

The body of the mail consists of:

Hello Edonkey User, this is the Update tool, to fix our Edonkey Client to 35.16.61

The worm carries an infected attachment with filename Esel_Update.EXE. Upon execution of the infected attachment, it copies itself to Windows\System directory as Edonkey.scr. Also, it creates a copy of itself as Esel_Update.EXE under Windows folder. The worm makes modification in the registry at the following location:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

This worm first appeared on 28th May 2002.

 Other names of W32/Enemany.B worm:

This worm is also known as Worm_Enemany.B.