Techguy
November 18, 2000, 11:40 pm
TROJ_MERRYXMAS
Risk rating: low
Virus type: Trojan
Destructive: N
Aliases:
MUSIC.A, W95/Music@M, TROJ_MUSIC.A, W95.Music, Music, M95/Music
Description:
This Trojan horse displays a message box entitled, “Merry Christmas,” and then plays the tune, “We Wish You A Merry Christmas.” It drops a copy of itself named SYSMCM.EXE in the Windows System directory, and then modifies the system registry to automatically run this file every system bootup.
This Trojan horse propagates by sending a copy of itself to all addresses included in the user address box.
Solution:
Scan your system using your antivirus.
List down the files detected as TROJ_MERRYXMAS.
Click Start|Run, then type regedit.
In the Registry Editor, click on “+” to the left of the names to go to the registry below:
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run\
In the right pane of the Regsitry Editor, look for the entry whose value includes the filename listed in step 1, click on the entry, and press .
Reboot your system.
Scan and delete all files detected as TROJ_MERRYXMAS.
------------------
Thank you for using Help From Techs Support Forums!
Please come again and remember to refer a friend to our site.
Risk rating: low
Virus type: Trojan
Destructive: N
Aliases:
MUSIC.A, W95/Music@M, TROJ_MUSIC.A, W95.Music, Music, M95/Music
Description:
This Trojan horse displays a message box entitled, “Merry Christmas,” and then plays the tune, “We Wish You A Merry Christmas.” It drops a copy of itself named SYSMCM.EXE in the Windows System directory, and then modifies the system registry to automatically run this file every system bootup.
This Trojan horse propagates by sending a copy of itself to all addresses included in the user address box.
Solution:
Scan your system using your antivirus.
List down the files detected as TROJ_MERRYXMAS.
Click Start|Run, then type regedit.
In the Registry Editor, click on “+” to the left of the names to go to the registry below:
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run\
In the right pane of the Regsitry Editor, look for the entry whose value includes the filename listed in step 1, click on the entry, and press .
Reboot your system.
Scan and delete all files detected as TROJ_MERRYXMAS.
------------------
Thank you for using Help From Techs Support Forums!
Please come again and remember to refer a friend to our site.