W32.Mypics.Worm.36352 is a variant of the W32.Mypics.Worm
. The worm propagates by automatically sending itself to as many as 50 people in the Outlook address book. The subject line is empty and the body of the email contains a worm installation program attachment named Mypics.exe. Mypics.exe extracts the files Mscomm32.ocx and Pictures.exe. Pictures.exe runs automatically and displays the following message:
YOU HAVE PICTURES WAITING IN YOUR OUTLOOK INBOX!
It is important to note that the worm has been written using Microsoft Visual BASIC. For the worm to run, the file Msvbvm50.dll (a Visual BASIC Virtual Machine run-time library) must reside on the computer. This file does not propagate with the worm, so if this file is not on the computer the worm does not function.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.