W32/Mari.E@mm

Download VIRUSfighter NOW
W32/Mari.E@mm Destructivity: Spreading: Overall risk:
  
• Detected by virus detection files published: 1/30/2002 • Type: Worm
• Virus characteristics first published: 1/30/2002 • Spreading mechanism: Email
• Virus characteristics latest update: 12/17/2003 • Overall risk: Low
• Alias: PE_MARI.A, W32/Mari@mm • Payload: Shows message box. Sets registry keys.
• Infection type: Microsoft Windows 95/98/98 SE/ME/NT 4/2000/XP/2003/Vista  

Virus type Spreading
mechanism 		Destructivity
and payload 		Additional
descriptions 		Detection
and removal
This is a minor variant in the W32/Mari series of email worms. It is quite similar to the rest of the family - the main changes seem to be some of the text-fields inside - references to "marijuana" are changed into "skatedork", and the pro-marijuana message box shown in the other variants have been changed to a rant against a person at skatedork.com.

It will only work under Win9x/ME because of it's dependence on RegisterServiceProcess, a function that does not exist in Windows NT/2000/XP.
# - A - B - C - D - E - F - G - H - I - J - K - L - M - N - O - P - Q - R - S - T - U - V - W - X - Y - Z
To protect and serve, VirusFighter