Anti-virus firm Symantec is warning of a new worm called "Gigger" which attempts to delete all files on a victim's computer and then re-format the hard drive. For more information see:
http://www.symantec.com/avcenter/venc/data/js.gigger.a@mm.html
Sophos anti-virus said: "The worm looks at different directories on C:, D:, and E: for a file called MIRC.INI. If it is found, the worm drops a file called SCRIPT.INI which will help it spread via IRC.
The worm arrives as an email with the subject line "Shakira Pics" and an attachment entitled "ShakiraPics.jpg.vbs". Users will know they have been hit when the message "You have been infected by the ShakiraPics Worm" appears on their screen.
If an infected machine is restarted, WINEVAR displays the message: "Make a fool of oneself: What a foolish thing you've done! The worm sends email using a known exploit that causes the attachment to automatically execute when the message is viewed...
It attempts to attach itself to all the .exe file in the Windows and C:\Program Files\Mirc\download folders, but due to bugs in the software may crash the computer or corrupt files in these folders. Clive Wainstein, pre-sales engineer at Trend...
The worm infects all .exe files in the My Documents and C:\progra~1\mirc folders. When an infected system is restarted, Windows automatically runs an application called "startup.exe", which begins by informing the user that the PC is infected.