W32/Trilissa.C Worm

 Information about the W32/Trilissa.C worm:

W32/Trilissa.C is an email worm. This worm will infect Windows systems.

It arrives with the following subject:

Mira el salvapantallas de Shakira!

The body of the mail contains:

Shakira!! Mejor que la farlopa!! Miralo!!

This mail contains an attachment Shakira.scr.

Upon execution of infected attachment, it copies itself as a .EXE file with hidden attribute at the root of Windows isntalled drive. The worm searches for .EXE, .SCR files under Windows and Windows System folders. When found, the worm overwrites the original content of the file by its own code. The backup of original file will be kept as same filename without any extension.

The worm makes changes to the following registry entries to load itself at next system startup.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

Finally, the worm displays a set of messages as shown below:

This worm first appeared on 9th June 2002.

 Other names of W32/Trilissa.C worm:

This worm is also known as I-Worm.Trilissa.C, Worm_Trilissa.C.

 Removing W32/Trilissa.C worm from your computer:

You can remove this worm from your computer by using Protector Plus antivirus software.