| Short Info: | This memory-resident worm arrives on a system via email, which it sends to target recipients using its own SMTP engine. The said email contains the URL link http ://70.12{BLOCKED}.219:90/Confirm_Sheet.pif that, when clicked, downloads a copy of this |