March 2nd, 2002 05:27 PM
New worm is attachment(as ''BRITNEY.CHM'') on an e-mail with subject ''RE:Britney Pics'' and text the following: ''Take a look at these pics...''. When somebody try to open the attachment it appears a message: ''Enable ActiveX To See Britny Pictures''. Because this thing is neccesery for the virus.
Then it searches for the file "MIRC.INI" and if it finds it, it makes a new file called "SCRIPT.INI", by this file it sends copies of itself to other user on every channel on irc and on everyone, who is on the address book of Outlook. Updates for this virus has made Sophos ,but not Nortons.