- Discovered:
- May 28, 1999
- Updated:
- February 13, 2007 11:48:30 AM
- Also Known As:
- Trojan Horse, W32.PrettyPark, Trojan.PSW.CHV, CHV, W32/Pretty.worm.unp, I-Worm.PrettyPark [Kaspersky], W32/Pretty.gen@MM [McAfee], W32/Pretty [Sophos], WORM_PRETTYPARK [Trend]
- Type:
- Worm
- Systems Affected:
- Windows 95, Windows 98, Windows Me
This worm program behaves similarly to Happy99 Worm. It was originally spread by email. When the attached program file, PrettyPark.exe, is executed, it may display the 3D pipe screen saver.
Once the worm program is executed, it tries to email itself automatically every 30 minutes (or 30 minutes after it is loaded) to email addresses registered in your Internet address book.
It also tries to connect to an IRC server and join a specific IRC channel. The worm sends information to IRC every 30 seconds to keep itself connected, and to retrieve any commands from the IRC channel.
Antivirus Protection Dates
- Initial Rapid Release version June 4, 1999
- Latest Rapid Release version September 28, 2010 revision 054
- Initial Daily Certified version June 4, 1999
- Latest Daily Certified version September 28, 2010 revision 036
- Initial Weekly Certified release date June 4, 1999
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 0 - 49
- Number of Sites: 3 - 9
- Geographical Distribution: High
- Threat Containment: Moderate
- Removal: Easy
Damage
- Damage Level: Low
Distribution
- Distribution Level: High



