W32.Trilisa.B@mm is a variant of W32.Trilisa@mm
, and sends itself to all addresses in the Microsoft Outlook address book. The worm renames all files that are in the Windows or WINNT folder and that have the .exe or .scr file name extension to the extension .avp. It then copies itself as the original file name. For example, the worm will rename the clean Notepad.exe file as Notepad.avp. It will then copy itself as Notepad.exe.
The worm cannot send itself to others through email because of a minor bug in the worm.
Click for a more detailed description of Rapid Release and Daily Certified virus definitions.