New Virus

Just read this on bink.nu

New Virus!

A recently discovered virus codenamed Win32.NiceHello.A@mm is spreading as an e-mail attachment and targets MSN Messenger users.
The virus sends email messages (in the format described above) to the user's MSN/.NET Messenger's contacts to mass-multiply itself. It also tries to send a notification email:



From: nemesis@olimpo.com
To: jcrivas77@yahoo.com
Subject: Hello world have a nice day
Body:

Eventually, a message box with "Microsoft Windows XP or greated required!" appears.

How to see if you're infected:
The file "systemsys64dvr.exe" or "system32sys64dvr.exe" exists in the Windows folder.
There's a registry entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\System 64 Driver for Games" = "sys64drv.exe".
Delete this file and registry entry to disinfect.

More info BitDefender (AVX - AntiVirus eXpert) Global Website

source www.mess.be via www.neowin.net