FANDOM


The Totilix E-mail worm is a malicious Virus-Worm hybrid that displays message boxes when the computer is booted up at various times throughout the year.
Email-Worm Virus.Win32

Email-Worm Virus.Win32.Totilix

Totilix A and B

Known Variants

Email-Worm/Virus.Win32.Totilix.A

Email-Worm/Virus.Win32.Totilix.B

Email-Worm/Virus.Win32.Totilix.C

Payload (Variant A)

When first run, the virus overwrites every .exe executable (except EMM386.exe and SETVER.exe as well as any executables that are being currently run and are locked by windows) in the Windows directory. This leads to many of the computer's files such as notepad.exe and calc.exe to become non responsive.

The virus displays the message:

"AV Intelligent Updater:

Please select an email address to send at your friend. Select email address with 'a' only not with 'A'."