Melting worm

 Information on Melting worm :

This worm infects all 32 bit Windows Executable (EXE) files under Windows 95, Windows 98 and Windows NT. The worm renames all the .EXE files residing in C:\Windows  directory as .BIN and copies itself as the original .EXE file. It changes the registry at;

HKEY_CURRENT_USER\MeltingScreen\String. 

It sets the value Melting screen in the registry if it is not found. It sends mails with the following text to the addresses present in the address book of Outlook Express. It attaches MeltingScreen.exe to each mail being sent.

Subject: Fantastic Screensaver

Message :

Hello my friend !

Attached is my newest and funniest Screensaver, I named it MeltingScreen. Test it and tell me what you think.

Have a nice day my friend.

p.s.: Please install the Runtime Library for VB 5.0, before you run the ScreenSaver.

This worm executes successfully only if  V.B 5.0 runtime library files are present.

Other names of Melting worm :

This virus is also known as W32/melting, Melting.worm