This worm arrives as a file dropped by other malware. It can also be downloaded unknowingly by a user when visiting malicious Web sites.
It drops copies of itself.
It then executes Windows Media Player and displays the following message:
This worm modifies a certain registry entry to hide file extension names. It also hides files with System attributes by modifying another registry entry.
Infopirate.org - You Share Your Bookmarks, We Share Our Revenue.
We think that you should make money with your bookmarks, not us. Register, add your AdsenseID and 80% of the revenue your bookmarks make is yours. Imprint - Privacy Policy - Contact.