MS04-011: Banish.A - damages Windows repair files
This new virus is also destructive as it will damage Windows Repair files
MS04-011 Banish.A Worm
This worm may propagate by taking advantage of the LSASS vulnerability. Information on this exploit can be found from the following link: Microsoft Security Bulletin MS04-011
It also propagates via email using the following details:
Subject: (Any of the following)
• Here are the details.
• Ok. Read the attached instructions to solve the problem.
• Re: Thank you for your choice.
• Thank you for shopping. This mail contains your invoice.
• Thank you. Your credit card was processed successfully.
Attachment: ZIP extension {File name taken from files found in the Windows recent documents folder}
It deletes files found in the Windows repair folder.