The VBS.Krim.F@mm worm is a variant of
VBS.Krim@mm. This worm sends itself to all the contacts in the Microsoft Outlook Address Book.
When VBS.Krim.F@mm is run, one of the files that the worm created titled, Mhr.vbs, displays a message box.
The email may have the subject, "Mi ami ancora ???" or "Sto male senza di TE." The attachment is named amore.bat.
If VBS.Krim.F@mm finds that mIRC is installed on your computer, it replaces the mIRC Script.ini file with its own ini file. This modification causes the worm to spread over the IRC network. The worm also attempts to format the C drive, by adding a command to the Autoexec.bat file.
NOTE: Virus definitions dated prior to March 10, 2003 may detect this as Bloodhound.VBS.Worm.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.
