This is a virus detection. Viruses are programs that self-replicate recursively, meaning that infected systems spread the virus to other systems, which then propagate the virus further. While many viruses contain a destructive payload, it's quite common for viruses to do nothing more than spread from one system to another.
4126 (2001-03-06)Updated DAT
When run, it sends itself to all recipients in the Outlook Address Book and attempts to deletes all .BMP, .COM, .DLL, .EXE, .INI, and .LOG files in the WINDOWS and WINDOWS\SYSTEM directories. This includes Windows NT, ME and other versions.
This program is written in Visual Basic and requires the Visual Basic 6 (or higher) runtime files. When run, it copies itself to a TEMP directory and displays a Window entitled "Flash", which reads "JibJab Loading". It proceeds by sending a separate email message, using Microsoft Outlook, to each recipient in the Outlook Address Book. The messages appear as follows:
Fw: Naked Wife
My wife never look like that! ;-)
Choosing the HELP|ABOUT menu in the "Flash" window displays a message box entitled "Flash", which reads "You're are now F**KED! (C) 2001 by BGK (Bill Gates Killer)" (** replaces the actual text displayed)
This worm arrives as the email attachment, NakedWife.exe . Executing this application infects your machine and causes the worm to mail itself to regular email correspondence.
Use current engine and DAT files for detection and removal.
Modifications made to the system Registry and/or INI files for the purposes of hooking system startup, will be successfully removed if cleaning with the recommended engine and DAT combination (or higher).
But in some particular cases, the following steps need to be taken.
Please go to the Microsoft Recovery Console and restore a clean MBR.
On Windows XP:
On Windows Vista and 7: