Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.
Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files.
This is a mass mailing worm and also spreads through Peer 2 peer applications.It when executed for the first time opens notepad.It then makes changes in "HKCU\Software\Microsoft\Params" which eventually lowers the security settings on the machine.It drops files like "1.exe","2.exe" in folders which has the name like share.It downloads files from certain web sites.
Change the Value.
1.Click on start then Run.
2.Type in Regedit and then click ok.
3.On the left pane scroll down to "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\Services\SharedAccess".
4.On the right pane right click on "start" and click on "modify" then change the valuse from "4" to "2".
5.Close the registry editor.
6.Run Full scan with X-Cleaner.