The infected messages have:
- Subject: About us
- I have included a program which illustrates my opinion about things you wrote me few days ago
- Attachment: [may be different]
The worm activates from infected email only in case a user clicks on attached file.
The worm does not install itself to the system and is not activated anymore (except when the user clicks on attached email again).
To send infected messages the worm uses Windows MAPI functions and "answers" messages from Email boxes.
No videos available.