Windows 2003/XP/2000/NT/ME/98/95

CoolNotepad is a worm spreads rapidly using the following means of transmission:

• E-mail messages with an attachment called COOL_NOTEPAD_DEMO.TXT.VBS.
• By automatically sending the file above via IRC.

CoolNotepad is not considered dangerous, as it does not cause any damage to affected computers. Its only annoying effect consists of hiding the Windows Desktop.

A clear indication that you have received CoolNotepad is a message with the following characteristics:

• Subject:
  Cool Notepad Demo.
• Message:
  Hey check out this text file I sent it will do something neat in notepad.
  Enjoy :-)
  The name of the person that has sent the e-mail is included at the end of the message.
• Attachments:
  COOL_NOTEPAD_DEMO.TXT.VBS

Another warning sign is a file called COOL_NOTEPAD_DEMO.TXT.vbs sent through IRC.

Once infection has occurred, CoolNotepad manages to hide the Windows Desktop.