W32/Trilissa.D worm

Download free anti virus software

Anti virus software information

Order anti virus software (US$ 29.95)

Protector Plus
Anti virus software for

Windows
(XP, 2000, 2003, NT, Me, 98, 95)

Exchange

NetWare

W32/Trilissa.D Worm

Information about the W32/Trilissa.D Worm:

W32/Trilissa.D is an email worm. This worm will infect Windows systems.

It arrives with the following subject:

Bush is a criminal!

The body of the mail contains:

Bush is a criminal!!!! See this screensaver!! HE IS A BASTARD!!!

This mail contains an attachment Bush_you_are_guilty!!!.scr.

Upon execution of infected attachment, it copies itself as a Bush_you_are_guilty!!!.scr and $$-%1@.EXE with hidden attribute at the root of Windows installed drive. The worm searches for .EXE, .SCR files under Windows and Windows System folders. When found, the worm overwrites the original content of the file by its own code. The backup of original file will be kept as same filename without any extension. It drops a file called MERKAVA.VBS in the root of infected file executed drive and on to a: drive, if floppy is present.

The worm makes changes to the following registry entries to load itself at next system startup.

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices

The worm displays a set of messages as shown below:

After displaying all the above message boxes, the worm searches for system and library files to overwrite with worm code similar to above mentioned procedure for .EXE, .SCR files.

This worm first appeared on 9th June 2002.

Other names of W32/Trilissa.D worm:

This worm is also known as I-Worm.Trilissa.D, Worm_Trilissa.D.

Removing W32/Trilissa.D worm from your computer:

You can remove this worm from your computer by using Protector Plus antivirus software.

Click here to download a 30 day Evaluation Copy of
Protector Plus anti virus for your operating system

About Protector Plus Anti virus Software Packages:

Proland Software is the developer of Protector Plus range of anti virus software packages. Protector Plus anti virus is available for Windows XP, Windows Me/98/95, Windows NT/2000/2003 servers and workstations, MS-Exchange 2000/2003, MS-DOS and NetWare servers.

Protector Plus range of anti virus products offer on-line virus detection and removal. All the packages have the ability to detect and isolate all types of viruses, trojans, worms and other types of malware. Protector Plus antivirus software can detect and remove W32/Trilissa.D worm reliably.

These products are updated on a continuous basis and the latest upgrades for all the platforms are made available for downloading from this site.

You can download the 30 day evaluation copy of
Protector Plus anti virus software free of cost for these platforms:

Windows | Exchange | NetWare

Download free anti virus software | Anti virus software information | Order anti virus software