Welcome to the Virus Encyclopedia of Panda Security.
|Effects: ||It sends out an e-mail message to the virus author, which contains the affected user's MSN Messenger user name and password.
|First detected on:||March 10, 2003|
|Detection updated on:||Nov. 25, 2003|
|Yes, using TruPrevent Technologies
NiceHello is a worm that does not have any destructive effects, which spreads via e-mail. When it infects a computer, it sends a copy of itself to all the addresses it finds in the Contact List of the instant messaging application MSN Messenger.
Similarly, NiceHello sends an e-mail message to the virus author, which includes the affected user's MSN Messenger user name and password.
NiceHello reaches computers in a file attached to an e-mail message. The attached file will have one of the following names:
CODIGO.EXE, ANIMACION.EXE, PARCHE.EXE, ACTUALIZACION.EXE, DATOS.EXE, PRESENTACIONES.EXE, PARCHEJUEGO.EXE, FOTOS.EXE, VIDEO.EXE or POLITICOS.EXE.
NiceHello is easy to recognize, as it always reaches computers in an e-mail message with specific characteristics.
The body of the message also finishes with the text: es solo para vos
In order to see the possible characteristics of the message, consult the Means of transmission section.
An indication that NiceHello has infected a computer is the following false warning message, which NiceHello displays when the attached file is run in order to deceive user: