Information about the W32/Posse Worm:

W32/Posse is a worm. The worm will infect Windows systems and spreads through MSN Messenger.

The worm sends the following message to all online contacts of an affected system via MSN Messenger.

Hola
espero q te gusten las fotos ;) me las hice ayer (y)
http://usuarios.lycos.es/sharkito32/fotos_posse.zip

A copy of this worm is downloaded into the recipient's computer, when the recipient clicks on the link included in the message.

Upon execution, the worm drops a copy of itself as sp2.exe in the system folder.

The worm modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

The worm attempts to connect to some remote websites to download malicious files.

This worm first appeared on May 21, 2007.

 Other names of W32/Posse Worm:

This Worm is also known as W32.Posse.