1. /
  2. Security Response/
  3. PrettyPark.Worm

PrettyPark.Worm

Risk Level 2: Low

Discovered:
May 28, 1999
Updated:
February 13, 2007 11:48:30 AM
Also Known As:
Trojan Horse, W32.PrettyPark, Trojan.PSW.CHV, CHV, W32/Pretty.worm.unp, I-Worm.PrettyPark [Kaspersky], W32/Pretty.gen@MM [McAfee], W32/Pretty [Sophos], WORM_PRETTYPARK [Trend]
Type:
Worm
Systems Affected:
Windows 95, Windows 98, Windows Me

This worm program behaves similarly to Happy99 Worm. It was originally spread by email. When the attached program file, PrettyPark.exe, is executed, it may display the 3D pipe screen saver.

Once the worm program is executed, it tries to email itself automatically every 30 minutes (or 30 minutes after it is loaded) to email addresses registered in your Internet address book.

It also tries to connect to an IRC server and join a specific IRC channel. The worm sends information to IRC every 30 seconds to keep itself connected, and to retrieve any commands from the IRC channel.

Antivirus Protection Dates

  • Initial Rapid Release version June 4, 1999
  • Latest Rapid Release version September 28, 2010 revision 054
  • Initial Daily Certified version June 4, 1999
  • Latest Daily Certified version September 28, 2010 revision 036
  • Initial Weekly Certified release date June 4, 1999
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 3 - 9
  • Geographical Distribution: High
  • Threat Containment: Moderate
  • Removal: Easy

Damage

  • Damage Level: Low

Distribution

  • Distribution Level: High

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report, Volume 17
Symantec DeepSight Screensaver